@wrongstack/tools 0.284.1 → 0.286.0

package/dist/bash-kill-guard.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Bash Kill Guard — Intercepts bash kill commands and prevents them from
+ * terminating WrongStack processes (either the agent itself or child processes
+ * it has spawned).
+ *
+ * This module hooks into the bash tool's command parsing to detect and block
+ * dangerous kill commands targeting protected PIDs.
+ *
+ * Handles:
+ * - Direct kill commands: kill -9 12345
+ * - Shell -c wrapped: bash -c "kill -9 12345" (any shell path — see P2 #10)
+ * - Full path kills: /bin/kill -9 12345
+ * - Name-based kills: pkill, killall, pgrep
+ * - Windows equivalents: taskkill
+ *
+ * Known bypasses (NOT handled — this is a static regex parser, not a shell):
+ * Static analysis of shell strings is inherently defeatable by obfuscation.
+ * This guard is one defense-in-depth layer behind the permission policy and
+ * the project-escape checks, not the sole gate. Treat a miss here as expected,
+ * not as a hole to plug with ever-more-clever regexes. The patterns below are
+ * known to evade detection:
+ * - Base64 / decode pipes: `echo bCAtOSAxMjM0NQ== | base64 -d | sh`
+ * - Variable indirection: `sig=-9; target=12345; kill $sig $target`
+ * - Command substitution: `$(printf kill) -9 12345`
+ * - String concatenation / quote-splitting: `ki''ll -9 12345`, `k"i"ll 12345`
+ * - Aliases and functions: `alias x=kill; x -9 12345`
+ * - eval / source: `eval "ki""ll -9 12345"`
+ *
+ * Mitigation: rely on the permission policy (confirm/deny gate) and YOLO
+ * destructive detection as the primary controls; this guard is a best-effort
+ * fast path for the common non-obfuscated forms.
+ */
+export interface KillCommand {
+    pid?: number;
+    name?: string;
+    signal?: string;
+    isGroupKill: boolean;
+    isAllKill: boolean;
+    originalCommand: string;
+}
+export interface KillCheckResult {
+    blocked: boolean;
+    reason?: string;
+}
+/**
+ * Parse a kill command string to extract PID and signal.
+ */
+export declare function parseKillCommand(command: string): KillCommand | null;
+/**
+ * Check if a parsed kill command targets a protected WrongStack process.
+ */
+export declare function isKillProtected(kill: KillCommand): Promise<boolean>;
+/**
+ * Main entry point: Check if a bash command contains a kill operation targeting protected PIDs.
+ * Returns a result indicating whether to block and why.
+ */
+export declare function checkAndBlockKillCommand(command: string): Promise<KillCheckResult>;
+/**
+ * Get a safe error message for blocked kill commands.
+ */
+export declare function getBlockedKillMessage(pid: number, signal?: string): string;
+//# sourceMappingURL=bash-kill-guard.d.ts.map

package/dist/bash-kill-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash-kill-guard.d.ts","sourceRoot":"","sources":["../src/bash-kill-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAOH,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAwED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CA6FpE;AAqBD;;GAEG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAqCzE;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CA2CxF;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAK1E"}

package/dist/bash.d.ts

@@ -1,5 +1,4 @@
-import { Tool } from '@wrongstack/core';
-
+import type { Tool } from '@wrongstack/core';
 interface BashInput {
     command: string;
     timeout_ms?: number | undefined;
@@ -12,6 +11,6 @@ interface BashOutput {
     pid?: number | null | undefined;
     error?: string | undefined;
 }
-declare const bashTool: Tool<BashInput, BashOutput>;
-
-export { type BashInput, type BashOutput, bashTool };
+export declare const bashTool: Tool<BashInput, BashOutput>;
+export type { BashInput, BashOutput };
+//# sourceMappingURL=bash.d.ts.map

package/dist/bash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash.d.ts","sourceRoot":"","sources":["../src/bash.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAW,IAAI,EAAmB,MAAM,kBAAkB,CAAC;AASvE,UAAU,SAAS;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,UAAU,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AA4BD,eAAO,MAAM,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,CAkmBhD,CAAC;AAGF,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC"}

package/dist/bash.js

@@ -1,13 +1,15 @@
-import { spawn } from 'node:child_process';
-import * as os2 from 'node:os';
-import * as Core from '@wrongstack/core';
-import { buildChildEnv, expectDefined, wstackGlobalRoot } from '@wrongstack/core';
-import * as fs2 from 'node:fs';
-import { mkdirSync, createWriteStream } from 'node:fs';
-import * as fs from 'node:fs/promises';
-import * as path from 'node:path';
-
 // src/bash.ts
+import { spawn as spawn2 } from "node:child_process";
+import * as os4 from "node:os";
+
+// src/_env.ts
+import { buildChildEnv } from "@wrongstack/core";
+
+// src/_output-spool.ts
+import { createWriteStream, mkdirSync } from "node:fs";
+import * as fsp from "node:fs/promises";
+import * as path from "node:path";
+import { wstackGlobalRoot } from "@wrongstack/core";
 var SPOOL_RETENTION_MS = 7 * 24 * 60 * 60 * 1e3;
 var SPOOL_WRITE_HWM_BYTES = 4 * 1024 * 1024;
 var sweepStarted = false;
@@ -20,12 +22,12 @@ function sweepOldSpoolFiles(dir) {
   void (async () => {
     try {
       const now = Date.now();
-      for (const name of await fs.readdir(dir)) {
+      for (const name of await fsp.readdir(dir)) {
         if (!name.endsWith(".log")) continue;
         const p = path.join(dir, name);
         try {
-          const st = await fs.stat(p);
-          if (now - st.mtimeMs > SPOOL_RETENTION_MS) await fs.unlink(p);
+          const st = await fsp.stat(p);
+          if (now - st.mtimeMs > SPOOL_RETENTION_MS) await fsp.unlink(p);
         } catch {
         }
       }
@@ -39,7 +41,7 @@ function spoolNote(info) {
 [output truncated \u2014 full ${info.bytes} bytes at ${info.path}${dropped}; read/grep that file selectively instead of re-running with more output]`;
 }
 function createOutputSpool(opts) {
-  const threshold = opts.thresholdBytes;
+  const threshold = opts.thresholdBytes ?? 32768;
   const safeTool = opts.tool.replace(/[^a-zA-Z0-9._-]+/g, "_").slice(0, 40) || "tool";
   let head = "";
   let headBytes = 0;
@@ -109,6 +111,9 @@ function createOutputSpool(opts) {
     }
   };
 }
+
+// src/_util.ts
+import * as Core from "@wrongstack/core";
 var COMMAND_OUTPUT_MAX_BYTES = 32768;
 var REPEAT_RUN_THRESHOLD = 3;
 function collapseCarriageReturns(text) {
@@ -180,6 +185,10 @@ function normalizeCommandOutput(raw, opts = {}) {
   return truncateHeadTail(text, opts.maxBytes ?? COMMAND_OUTPUT_MAX_BYTES);
 }
 
+// src/process-registry.ts
+import { spawn } from "node:child_process";
+import * as os from "node:os";
+
 // src/circuit-breaker.ts
 var DEFAULT_MAX_CONSECUTIVE_FAILURES = 5;
 var DEFAULT_SLOW_CALL_THRESHOLD_MS = 18e4;
@@ -372,7 +381,8 @@ var CircuitBreaker = class {
   }
 };
 
-// src/process-registry.ts
+// src/_redact-command.ts
+import { expectDefined } from "@wrongstack/core";
 var SENSITIVE_FLAG_PATTERNS = [
   // --flag=value  or  --flag "value"  (value captured up to next space or comma)
   /--(?:token|password|passwd|pwd|secret|api[-_]?key|api[-_]?secret|auth|credential|private[-_]?key|access[-_]?key|github[-_]?token|gh[-_]?token|bearer|jwt|oauth|pin|pincode|passphrase|access[-_]?token)(?:[=\s,][^\s]*)?/gi,
@@ -402,6 +412,8 @@ function redactCommand(cmd) {
   }
   return result;
 }
+
+// src/process-registry.ts
 var DEFAULT_GRACE_MS = 2e3;
 var WIN32_TASKKILL_TIMEOUT_MS = 5e3;
 function killWin32Tree(pid, opts = {}) {
@@ -463,7 +475,7 @@ var ProcessRegistryImpl = class {
     return Number.isInteger(pid) && pid > 1 && pid !== process.pid && pid !== process.ppid;
   }
   _canSignalProcessGroup(p) {
-    return os2.platform() !== "win32" && p.processGroupLeader === true && this._isSafeSignalPid(p.pid) && typeof p.child.pid === "number" && p.child.pid === p.pid;
+    return os.platform() !== "win32" && p.processGroupLeader === true && this._isSafeSignalPid(p.pid) && typeof p.child.pid === "number" && p.child.pid === p.pid;
   }
   _killChildDirect(p, signal) {
     try {
@@ -657,7 +669,7 @@ var ProcessRegistryImpl = class {
     if (p.killed) return true;
     if (p.protected) return false;
     const { force = false, graceMs = DEFAULT_GRACE_MS } = opts;
-    const isWin2 = os2.platform() === "win32";
+    const isWin2 = os.platform() === "win32";
     if (isWin2) {
       const liveRealChild = p.child.exitCode === null && typeof p.child.pid === "number";
       const directFallback = () => {
@@ -671,7 +683,8 @@ var ProcessRegistryImpl = class {
       if (liveRealChild && killWin32Tree(pid, {
         timeoutMs: Math.max(graceMs, WIN32_TASKKILL_TIMEOUT_MS),
         onSettled: directFallback
-      })) ; else {
+      })) {
+      } else {
         try {
           p.child.kill(force ? "SIGKILL" : "SIGTERM");
         } catch {
@@ -758,6 +771,14 @@ function getProcessRegistry() {
   }
   return _registry;
 }
+
+// src/bash-kill-guard.ts
+import * as os3 from "node:os";
+
+// src/process-registry-persistent.ts
+import * as fs from "node:fs/promises";
+import * as os2 from "node:os";
+import * as path2 from "node:path";
 var REGISTRY_FILE = ".wrongstack/process-registry.json";
 function toErrorMessage(err) {
   return err instanceof Error ? err.message : String(err);
@@ -869,15 +890,15 @@ var PersistentProcessRegistry = class {
   constructor(baseRegistry) {
     this.instanceId = generateInstanceId();
     const homeDir = os2.homedir();
-    this.registryPath = path.join(homeDir, REGISTRY_FILE);
-    this.lockPath = path.join(homeDir, LOCKFILE);
+    this.registryPath = path2.join(homeDir, REGISTRY_FILE);
+    this.lockPath = path2.join(homeDir, LOCKFILE);
     this.baseRegistry = baseRegistry ?? getProcessRegistry();
     this.ensureDirectory().catch((err) => {
       emitStructuredLog("warn", "process_registry.dir_create_failed", "PersistentProcessRegistry: failed to create .wrongstack directory", err);
     });
   }
   async ensureDirectory() {
-    const dir = path.dirname(this.registryPath);
+    const dir = path2.dirname(this.registryPath);
     try {
       await fs.mkdir(dir, { recursive: true });
     } catch (err) {
@@ -1165,7 +1186,7 @@ function getPersistentProcessRegistry() {
 }
 
 // src/bash-kill-guard.ts
-var isWin = os2.platform() === "win32";
+var isWin = os3.platform() === "win32";
 function extractKillCommand(command) {
   const normalized = command.replace(/\s+/g, " ").trim();
   const shellCMatch = normalized.match(
@@ -1341,7 +1362,11 @@ async function checkAndBlockKillCommand(command) {
   }
   return { blocked: false };
 }
+
+// src/_shell-pick.ts
+var POSIX_DEFAULT = "cmd";
 function pickShell(platform4, command, env) {
+  if (platform4 !== "win32") return POSIX_DEFAULT;
   const override = env.get("WRONGSTACK_SHELL")?.trim().toLowerCase();
   if (override === "cmd" || override === "cmd.exe") return "cmd";
   if (override === "powershell" || override === "powershell.exe") return "powershell";
@@ -1445,15 +1470,19 @@ function diagnoseBashism(command, shell) {
   const label = isCmd ? "cmd.exe" : shell === "pwsh" ? "PowerShell 7" : "Windows PowerShell";
   return `[wrongstack] This command failed and contains bash/POSIX syntax that ${label} does not accept \u2014 ${hints.join("; ")}. Rewrite it in ${isCmd ? "cmd" : "PowerShell"} syntax and retry.`;
 }
+
+// src/_win32-resolve.ts
+import * as fs2 from "node:fs";
+import * as path3 from "node:path";
 function resolveWin32Command(cmd) {
   if (process.platform !== "win32") return cmd;
-  if (cmd.includes("/") || cmd.includes("\\") || path.extname(cmd.replace(/\//g, "\\"))) {
+  if (cmd.includes("/") || cmd.includes("\\") || path3.extname(cmd.replace(/\//g, "\\"))) {
     return cmd;
   }
   const pathext = (process.env["PATHEXT"] ?? ".COM;.EXE;.BAT;.CMD;.VBS;.JS;.WS;.MSC").toLowerCase().split(";");
-  const pathDirs = (process.env["PATH"] ?? "").split(path.delimiter);
+  const pathDirs = (process.env["PATH"] ?? "").split(path3.delimiter);
   for (const dir of pathDirs) {
-    const base = path.join(dir, cmd);
+    const base = path3.join(dir, cmd);
     for (const ext of pathext) {
       const full = `${base}${ext}`;
       try {
@@ -1579,7 +1608,7 @@ var bashTool = {
       }));
     }
     const timeoutMs = Math.max(1, Math.min(input.timeout_ms ?? DEFAULT_TIMEOUT_MS, 6e5));
-    const isWin2 = os2.platform() === "win32";
+    const isWin2 = os4.platform() === "win32";
     let plan;
     let winShellKind;
     if (isWin2) {
@@ -1616,7 +1645,7 @@ var bashTool = {
     if (input.background) {
       let buf2 = "";
       let truncated = false;
-      const child2 = spawn(shell, args, {
+      const child2 = spawn2(shell, args, {
         cwd: ctx.projectRoot,
         env,
         // PowerShell takes the script on stdin (no argv quoting); cmd.exe
@@ -1699,7 +1728,7 @@ var bashTool = {
       });
       return;
     }
-    const child = spawn(shell, args, {
+    const child = spawn2(shell, args, {
       cwd: ctx.projectRoot,
       env,
       // PowerShell takes the script on stdin (no argv quoting); cmd.exe
@@ -1926,7 +1955,7 @@ ${hint}` : ""),
     }
   }
 };
-
-export { bashTool };
+export {
+  bashTool
+};
 //# sourceMappingURL=bash.js.map
-//# sourceMappingURL=bash.js.map