@wrongstack/core 0.3.3 → 0.3.4

package/dist/execution/index.d.ts

@@ -1,11 +1,11 @@
-export { C as CompactorOptions, a as DefaultErrorHandler, b as DefaultRetryPolicy, H as HybridCompactor, T as ToolExecutor } from '../tool-executor-HsBLGRaA.js';
+export { C as CompactorOptions, a as DefaultErrorHandler, b as DefaultRetryPolicy, H as HybridCompactor, T as ToolExecutor } from '../tool-executor-DY0iSXYf.js';
 import { g as Provider, a0 as Context } from '../context-IovtuTf8.js';
 import { a as Compactor, C as CompactReport } from '../compactor-DpJBI1YH.js';
 import { M as MessageSelector } from '../selector-wT2fv9Fg.js';
 import { E as EventBus } from '../events-BHIQs4o1.js';
 import { c as MiddlewareHandler } from '../system-prompt-Dk1qm8ey.js';
-import { e as ContextWindowAggressiveOn, i as ContextWindowPolicy } from '../config-D2qvAxVd.js';
-import { r as Agent, R as RunResult } from '../index-hWNybrNZ.js';
+import { e as ContextWindowAggressiveOn, i as ContextWindowPolicy } from '../config-DgE3JslD.js';
+import { r as Agent, R as RunResult } from '../index-DedY4Euf.js';
 import { D as DoneCondition } from '../multi-agent-B9a6sflH.js';
 import { a as SkillLoader, b as SkillManifest, S as SkillEntry } from '../skill-C_7znCIC.js';
 import { a as WstackPaths } from '../wstack-paths-BGu2INTm.js';

package/dist/execution/index.js

@@ -1318,11 +1318,55 @@ var ToolExecutor = class {
   }
 };
 
+// src/utils/regex-guard.ts
+var MAX_PATTERN_LEN = 512;
+var DANGEROUS_PATTERNS = [
+  /(\([^)]*[+*][^)]*\))[+*]/,
+  // (a+)+, (.*)+, etc
+  /(\(\?:[^)]*[+*][^)]*\))[+*]/
+  // same, with non-capturing group
+];
+function compileUserRegex(pattern, flags) {
+  if (typeof pattern !== "string") {
+    return { ok: false, reason: "pattern must be a string" };
+  }
+  if (pattern.length === 0) {
+    return { ok: false, reason: "pattern is empty" };
+  }
+  if (pattern.length > MAX_PATTERN_LEN) {
+    return { ok: false, reason: `pattern exceeds ${MAX_PATTERN_LEN} characters` };
+  }
+  for (const rx of DANGEROUS_PATTERNS) {
+    if (rx.test(pattern)) {
+      return {
+        ok: false,
+        reason: "pattern looks vulnerable to catastrophic backtracking \u2014 rewrite without nested quantifiers"
+      };
+    }
+  }
+  try {
+    return { ok: true, regex: new RegExp(pattern, flags) };
+  } catch (err) {
+    return {
+      ok: false,
+      reason: err instanceof Error ? err.message : "invalid regex"
+    };
+  }
+}
+
 // src/execution/autonomous-runner.ts
 var DoneConditionChecker = class {
   constructor(condition) {
     this.condition = condition;
-    this.compiledRegex = condition.type === "output_match" && condition.pattern ? new RegExp(condition.pattern) : null;
+    if (condition.type === "output_match" && condition.pattern) {
+      const result = compileUserRegex(condition.pattern, "");
+      this.compiledRegex = result.ok ? result.regex : null;
+      if (!result.ok) {
+        console.warn(`[DoneConditionChecker] Invalid regex pattern "${condition.pattern}": ${result.reason}`);
+      }
+    } else {
+      this.compiledRegex = null;
+    }
   }
   condition;
   compiledRegex;