@xshieldai/n8n-nodes-kavachos 1.5.1 → 1.5.2

package/README.md

@@ -1,12 +1,12 @@
 # @xshieldai/n8n-nodes-kavachos
 
-> **🔍 Verification status (2026-10-12 IST — v1.5.1)**
-> - **Tests:** ⚠️ none inside the package. In the repository, [red-team/n8n-kavach-run.battery.sh](https://github.com/rocketlang/aegis/blob/master/red-team/n8n-kavach-run.battery.sh) drives the Run and Gate nodes outside n8n against an installed copy (32 cases, with a stand-in `kavachos` and a stand-in gate). **Not yet run inside an n8n instance.**
+> **🔍 Verification status (2026-10-12 IST — v1.5.2)**
+> - **Tests:** ⚠️ none inside the package. In the repository: [red-team/n8n-kavach-run.battery.sh](https://github.com/rocketlang/aegis/blob/master/red-team/n8n-kavach-run.battery.sh) drives the Run and Gate nodes outside n8n against an installed copy (35 cases), and [red-team/n8n-inside-n8n.battery.sh](https://github.com/rocketlang/aegis/blob/master/red-team/n8n-inside-n8n.battery.sh) installs the package through n8n's own installer and runs all four nodes in workflows inside n8n 2.42.7 (23 cases; first run on 1.5.1, 12 October 2026). Gate, Budget and Audit run against a real Aegis there. **Kavach Run is tested with a stand-in `kavachos` in both: neither battery launches anything under kernel enforcement.**
 > - **Examples:** ✅ 1 importable workflow, in the repository (not in the npm package): [examples/n8n-governed-agent.json](https://github.com/rocketlang/aegis/blob/master/packages/n8n-nodes-kavachos/examples/n8n-governed-agent.json). Drag into n8n, wire the Aegis API credential pointing at `http://localhost:4850`, run.
 > - **Live demo:** ⚠️ planned (Tier 3)
 > - **Phase-1 limits:** KavachRun is Linux-only; where enforcement is unavailable (non-Linux, or `kavachos` not installed) it **fails closed by default** (`On Non-Linux` = `throw`; `warn`/`skip` are opt-in). KavachGate works on any OS — it's a thin HTTP relay to AEGIS.
 >
-> The KavachGate node's behaviour is end-to-end testable against a live AEGIS instance — start AEGIS, import the example workflow, fire a `rm -rf /` command, watch it block. Fixtures that run inside n8n are still to come.
+> The KavachGate node's behaviour is end-to-end testable against a live AEGIS instance — start AEGIS, import the example workflow, fire a `rm -rf /` command, watch it block.
 
 > **Renamed at 1.5.0.** This package was `@xshieldai/n8n-nodes` through 1.4.1. n8n's community-nodes screen
 > only installs a package whose name starts with `n8n-nodes-` after the scope, and refused the old name. The
@@ -41,6 +41,9 @@ Wraps a subprocess in kavachos **kernel enforcement** (seccomp-bpf + cgroup BPF
 `kavachos run <options> -- <binary> <arguments>`, so the binary's arguments are passed on word for word and
 cannot be read as kavachos options. With an older `kavachos` the node refuses to run. See the changelog.
 
+Since 1.5.2 an argument in quotes is one word: `--name 'two words'`. Nothing else in the **Arguments** field is
+read specially (it is not a shell), and a quote that is never closed stops the node before anything runs.
+
 Since 1.4.0 the node waits for the command without stopping n8n, stops it at **Time Limit (seconds)**, and
 reports what `kavachos` itself said: a refused launch is an error, and `enforced` is true only when no layer
 was reported missing (`egress_constrained`, `path_jail_loaded`). It reads kavachos's own lines for this, so

package/dist/nodes/KavachRun/KavachRun.node.js

@@ -67,7 +67,7 @@ class KavachRun {
                     type: "string",
                     default: "",
                     placeholder: "src/my-agent.ts --port 4900",
-                    description: "Space-separated arguments to pass to the binary.",
+                    description: "Arguments for the binary, separated by spaces. Put quotes around an argument that holds a space: --name 'two words'. Nothing else is read specially (this is not a shell).",
                 },
                 {
                     displayName: "Trust Mask (hex)",
@@ -128,6 +128,10 @@ class KavachRun {
         for (let i = 0; i < items.length; i++) {
             const binary = this.getNodeParameter("binary", i);
             const args = this.getNodeParameter("args", i).trim();
+            const split = (0, shared_1.splitWords)(args);
+            if (split.error)
+                throw new n8n_workflow_1.NodeOperationError(this.getNode(), `${split.error}. Nothing was run.`, { itemIndex: i });
+            const argWords = split.words;
             const trustMask = this.getNodeParameter("trustMask", i);
             const domain = this.getNodeParameter("domain", i);
             const falco = this.getNodeParameter("falco", i);
@@ -156,8 +160,7 @@ class KavachRun {
                 }
                 // warn: run unwrapped with a flag in output
                 process.stderr.write(`[KavachRun] WARNING: ${reason} — running ${binary} unwrapped\n`);
-                const argList = args ? args.split(/\s+/) : [];
-                const proc = await (0, shared_1.runProcess)(binary, argList, timeoutMs);
+                const proc = await (0, shared_1.runProcess)(binary, argWords, timeoutMs);
                 if (proc.error) {
                     throw new n8n_workflow_1.NodeOperationError(this.getNode(), `${binary} could not be started: ${proc.error}`, { itemIndex: i });
                 }
@@ -198,7 +201,7 @@ class KavachRun {
                 ...(falco ? ["--falco"] : []),
                 "--",
                 binary,
-                ...(args ? args.split(/\s+/) : []),
+                ...argWords,
             ];
             const proc = await (0, shared_1.runProcess)("kavachos", kavachArgs, timeoutMs);
             if (proc.error) {

package/dist/nodes/shared.d.ts

@@ -26,3 +26,7 @@ export interface JsonReply {
  * is shorter than the gate's own wait for a level-1 approval.)
  */
 export declare function requestJson(method: "GET" | "POST", url: string, headers: Record<string, string>, body: string | undefined, timeoutMs: number): Promise<JsonReply>;
+export declare function splitWords(text: string): {
+    words: string[];
+    error?: string;
+};

package/dist/nodes/shared.js

@@ -35,6 +35,7 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runProcess = runProcess;
 exports.requestJson = requestJson;
+exports.splitWords = splitWords;
 // SPDX-License-Identifier: AGPL-3.0-only
 // Shared by the Kavach nodes: running a command without stopping n8n, and asking Aegis with a time limit.
 const child_process_1 = require("child_process");
@@ -137,3 +138,51 @@ function requestJson(method, url, headers, body, timeoutMs) {
         req.end();
     });
 }
+// The Arguments field as a list of words. Through 1.5.1 the field was cut at every space, so an argument that
+// holds a space could not be passed. Now quotes group: '...' is taken as it stands, and in "..." a backslash
+// before a double quote or another backslash gives that character. Everywhere else every character is itself:
+// this is not a shell, so $, *, ~ and a backslash outside double quotes are not read as anything.
+// A quote that is never closed is an error and not a guess.
+function splitWords(text) {
+    const words = [];
+    let word = "", inWord = false, quote = null;
+    for (let i = 0; i < text.length; i++) {
+        const c = text[i];
+        if (quote === "'") {
+            if (c === "'")
+                quote = null;
+            else
+                word += c;
+            continue;
+        }
+        if (quote === '"') {
+            if (c === '"')
+                quote = null;
+            else if (c === "\\" && (text[i + 1] === '"' || text[i + 1] === "\\"))
+                word += text[++i];
+            else
+                word += c;
+            continue;
+        }
+        if (c === "'" || c === '"') {
+            quote = c;
+            inWord = true;
+            continue;
+        }
+        if (/\s/.test(c)) {
+            if (inWord) {
+                words.push(word);
+                word = "";
+                inWord = false;
+            }
+            continue;
+        }
+        word += c;
+        inWord = true;
+    }
+    if (quote)
+        return { words: [], error: `the arguments have a ${quote === "'" ? "single" : "double"} quote that is never closed` };
+    if (inWord)
+        words.push(word);
+    return { words };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xshieldai/n8n-nodes-kavachos",
-  "version": "1.5.1",
+  "version": "1.5.2",
   "description": "xShieldAI n8n community nodes — DAN gate, kernel enforcement, budget check, and audit log for AI agents.",
   "license": "AGPL-3.0-only",
   "author": "Capt. Anil Sharma <capt.anil.sharma@powerpbox.org>",