agentsmesh 0.19.0 → 0.19.1

package/dist/index.js

@@ -20018,10 +20018,12 @@ async function loadConfig(configPath) {
   }
   return result.data;
 }
+var PROTOTYPE_POLLUTION_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
 function deepMergeObjects(base, overrides2) {
   const result = { ...base };
   for (const [k, v] of Object.entries(overrides2)) {
     if (v === null || v === void 0) continue;
+    if (PROTOTYPE_POLLUTION_KEYS.has(k)) continue;
     const baseVal = result[k];
     if (typeof v === "object" && !Array.isArray(v) && v !== null && typeof baseVal === "object" && baseVal !== null && !Array.isArray(baseVal)) {
       result[k] = deepMergeObjects(
@@ -20458,7 +20460,9 @@ function parseGitSource(source) {
   } catch {
     return null;
   }
-  if (!["https:", "http:", "ssh:", "file:"].includes(parsedUrl.protocol)) {
+  const allowInsecure = process.env.AGENTSMESH_ALLOW_INSECURE_GIT === "1" || process.env.AGENTSMESH_ALLOW_INSECURE_GIT === "true";
+  const allowedProtocols = allowInsecure ? ["https:", "http:", "ssh:", "file:"] : ["https:", "ssh:", "file:"];
+  if (!allowedProtocols.includes(parsedUrl.protocol)) {
     return null;
   }
   return { url, ref };
@@ -22246,15 +22250,30 @@ function isLocalSource(source) {
   // these on win32, and they must not be misinterpreted as bare npm package names.
   /^[A-Za-z]:[/\\]/.test(source);
 }
+function canonicalize(path) {
+  try {
+    return realpathSync(path);
+  } catch {
+    return path;
+  }
+}
+function assertSourceInsideProjectRoot(resolvedPath, projectRoot) {
+  const rootAbs = canonicalize(resolve(projectRoot));
+  const sourceAbs = canonicalize(resolvedPath);
+  if (sourceAbs === rootAbs || sourceAbs.startsWith(`${rootAbs}${sep}`)) return;
+  throw new Error(`Plugin source resolves outside project root (escapes ${rootAbs}): ${sourceAbs}`);
+}
 async function importPluginModule(entry, projectRoot) {
   const { source } = entry;
   let importTarget;
   if (isLocalSource(source)) {
     const raw = source.startsWith("file:") ? fileURLToPath(source) : source;
     const resolved = resolve(projectRoot, raw);
+    assertSourceInsideProjectRoot(resolved, projectRoot);
     importTarget = pathToFileURL(resolved).href;
   } else {
     const resolved = resolveNpmSpecifier(source, projectRoot);
+    assertSourceInsideProjectRoot(resolved, projectRoot);
     importTarget = pathToFileURL(resolved).href;
   }
   const mod = await import(importTarget);