@wrongstack/tools 0.307.1 → 0.308.1

package/dist/bash-kill-guard.d.ts

@@ -14,6 +14,7 @@
  * - Windows equivalents: taskkill, tskill
  * - PowerShell Stop-Process / kill alias: Stop-Process -Name node, kill -Id 12345
  * - WMIC process termination: wmic process where "name='node.exe'" delete
+ *   or wmic process where "ProcessId=1234" delete
  * - Script-based kill (script is named kill*.sh, kill*.ps1, kill*.bat)
  *
  * Security contract: every "Handles" bullet must map to both a detector

package/dist/bash.js

@@ -1501,6 +1501,18 @@ function parseKillCommand(command) {
         originalCommand: command
       };
     }
+    const wmicPidMatch = normalized.match(
+      /^wmic\s+process\s+where\s+['"]?processid\s*=\s*['"]?(\d+)/i
+    );
+    if (wmicPidMatch?.[1]) {
+      return {
+        pid: parseInt(wmicPidMatch[1], 10),
+        signal: "FORCE",
+        isGroupKill: false,
+        isAllKill: false,
+        originalCommand: command
+      };
+    }
     const killScriptMatch = normalized.match(SCRIPT_KILL_RE);
     if (killScriptMatch) {
       return {
@@ -1620,7 +1632,9 @@ async function isKillProtected(kill) {
     return protectedPids.length > 0;
   }
   if (kill.pid !== void 0) {
-    return registry.shouldBlockKill(kill.pid);
+    if (await registry.shouldBlockKill(kill.pid)) return true;
+    if (kill.pid === process.pid || kill.pid === process.ppid) return true;
+    return false;
   }
   return false;
 }