@wrongstack/sdd 0.295.1 → 0.296.3

package/dist/verify-task.d.ts

@@ -1,11 +1,23 @@
 import type { TaskNode, TaskResult } from '@wrongstack/core/types';
 export interface CommandVerifierOptions {
-    /** Metadata key holding the shell command to run. Default 'verificationCommand'. */
+    /** Metadata key holding the verification command. Default 'verificationCommand'. */
     metadataKey?: string;
     /** Kill + fail the verification after this many ms. Default 180_000 (3 min). */
     timeoutMs?: number;
 }
-export declare function verificationShell(platform: NodeJS.Platform): [shell: string, ...args: string[]];
+/**
+ * Tokenize a command string into an argv array **without** shell interpolation.
+ *
+ * Splits on whitespace while respecting single and double quotes (matching
+ * POSIX shell quoting rules for the common cases). Shell metacharacters
+ * (`;`, `|`, `&&`, `$()`, backticks, `>`, `<`) that appear *inside* a token
+ * are preserved as literal characters — they are passed to the executable as
+ * argument data, never interpreted by a shell.
+ *
+ * Returns `undefined` when the input is empty/whitespace or contains
+ * unbalanced quotes (which would indicate a malformed command).
+ */
+export declare function tokenizeCommand(command: string): string[] | undefined;
 /** Shape shared by every SDD task verifier (matches SddParallelRunOptions.verifyTask). */
 export type SddVerifyTask = (info: {
     task: TaskNode;
@@ -38,8 +50,13 @@ export declare function makeAcceptanceCriteriaVerifier(options: AcceptanceCriter
 /**
  * Build a `verifyTask` closure (shape matches {@link SddParallelRunOptions.verifyTask}).
  * Returns `{ ok: true }` immediately when the task carries no verification command,
- * otherwise spawns the command in `cwd` (shell, output discarded) and resolves
- * `{ ok: false, reason }` on non-zero exit, spawn error, or timeout.
+ * otherwise spawns the command in `cwd` as `executable + argv` with `shell: false`
+ * (no shell interpolation), and resolves `{ ok: false, reason }` on non-zero exit,
+ * spawn error, malformed command, or timeout.
+ *
+ * Defense-in-depth: even if the authorization gate on `set_task_verification`
+ * were bypassed, shell metacharacters (`;`, `|`, `&&`, `$()`, etc.) are tokenized
+ * into literal arguments rather than being interpreted by a shell.
  */
 export declare function makeCommandVerifier(options?: CommandVerifierOptions): (info: {
     task: TaskNode;

package/dist/verify-task.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-task.d.ts","sourceRoot":"","sources":["../src/verify-task.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEnE,MAAM,WAAW,sBAAsB;IACrC,oFAAoF;IACpF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAE/F;AAED,0FAA0F;AAC1F,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE;IACjC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,KAAK,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEhD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,aAAa,CAQ3E;AAED,MAAM,WAAW,iCAAiC;IAChD,8EAA8E;IAC9E,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,4EAA4E;IAC5E,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,iCAAiC,GACzC,aAAa,CAuCf;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,sBAA2B,UAI/B;IACrC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,KAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAuC9C"}
+{"version":3,"file":"verify-task.d.ts","sourceRoot":"","sources":["../src/verify-task.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEnE,MAAM,WAAW,sBAAsB;IACrC,oFAAoF;IACpF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CA+ErE;AAED,0FAA0F;AAC1F,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE;IACjC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,KAAK,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEhD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,aAAa,CAQ3E;AAED,MAAM,WAAW,iCAAiC;IAChD,8EAA8E;IAC9E,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,4EAA4E;IAC5E,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,iCAAiC,GACzC,aAAa,CAuCf;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,sBAA2B,UAI/B;IACrC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,KAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA0C9C"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/sdd",
-  "version": "0.295.1",
+  "version": "0.296.3",
   "license": "MIT",
   "description": "WrongStack Spec-Driven Development engine — standalone package extracted from @wrongstack/core. Task graph generation, tracking, execution, lifecycle management, and AI-driven spec building for SDD workflows.",
   "repository": {
@@ -26,8 +26,8 @@
     "dist"
   ],
   "dependencies": {
-    "@wrongstack/core": "0.295.1",
-    "@wrongstack/kanban": "0.295.1"
+    "@wrongstack/core": "0.296.3",
+    "@wrongstack/kanban": "0.296.3"
   },
   "devDependencies": {
     "@types/node": "^26.1.1",