blun-king-cli 9.1.567 → 9.1.569

package/agent-spine-plugin/src/lib/delivery-shell-substitutions.js

@@ -0,0 +1,111 @@
+export const MAX_SUBSTITUTION_DEPTH = 8;
+
+function backtickEnd(command, start) {
+  let escaped = false;
+  for (let index = start + 1; index < command.length; index += 1) {
+    const character = command[index];
+    if (escaped) { escaped = false; continue; }
+    if (character === "\\") { escaped = true; continue; }
+    if (character === "`") return index;
+  }
+  return -1;
+}
+
+function substitutionEnd(command, start, depth) {
+  if (depth >= MAX_SUBSTITUTION_DEPTH) return -1;
+  let quote = null;
+  let escaped = false;
+  let lineComment = false;
+  let parentheses = 0;
+  for (let index = start + 2; index < command.length; index += 1) {
+    const character = command[index];
+    const next = command[index + 1];
+    if (lineComment) {
+      if (character === "\n") lineComment = false;
+      continue;
+    }
+    if (escaped) { escaped = false; continue; }
+    if (character === "\\" && quote !== "'") { escaped = true; continue; }
+    if (quote === "'") {
+      if (character === quote) quote = null;
+      continue;
+    }
+    if (quote === '"') {
+      if (character === quote) { quote = null; continue; }
+      if (character === "$" && next === "(" && command[index + 2] !== "(") {
+        const end = substitutionEnd(command, index, depth + 1);
+        if (end < 0) return -1;
+        index = end;
+      } else if (character === "`") {
+        const end = backtickEnd(command, index);
+        if (end < 0) return -1;
+        index = end;
+      }
+      continue;
+    }
+    if (character === "'" || character === '"') { quote = character; continue; }
+    if (character === "#" && (index === 0 || /[\s;&|()]/.test(command[index - 1]))) {
+      lineComment = true;
+      continue;
+    }
+    if (character === "$" && next === "(" && command[index + 2] !== "(") {
+      const end = substitutionEnd(command, index, depth + 1);
+      if (end < 0) return -1;
+      index = end;
+      continue;
+    }
+    if (character === "`") {
+      const end = backtickEnd(command, index);
+      if (end < 0) return -1;
+      index = end;
+      continue;
+    }
+    if (character === "(") { parentheses += 1; continue; }
+    if (character === ")") {
+      if (parentheses === 0) return index;
+      parentheses -= 1;
+    }
+  }
+  return -1;
+}
+
+export function shellSubstitutions(command, depth) {
+  const substitutions = [];
+  let quote = null;
+  let escaped = false;
+  let lineComment = false;
+  for (let index = 0; index < command.length; index += 1) {
+    const character = command[index];
+    const next = command[index + 1];
+    if (lineComment) {
+      if (character === "\n") lineComment = false;
+      continue;
+    }
+    if (escaped) { escaped = false; continue; }
+    if (character === "\\" && quote !== "'") { escaped = true; continue; }
+    if (quote === "'") {
+      if (character === quote) quote = null;
+      continue;
+    }
+    if (character === '"') { quote = quote === '"' ? null : '"'; continue; }
+    if (!quote && character === "'") { quote = character; continue; }
+    if (!quote && character === "#" && (index === 0 || /[\s;&|()]/.test(command[index - 1]))) {
+      lineComment = true;
+      continue;
+    }
+    if (character === "$" && next === "(" && command[index + 2] !== "(") {
+      const end = substitutionEnd(command, index, depth);
+      if (end < 0) continue;
+      substitutions.push({ text: command.slice(index + 2, end), index: index + 2 });
+      index = end;
+      continue;
+    }
+    if (character === "`") {
+      const end = backtickEnd(command, index);
+      if (end < 0) continue;
+      substitutions.push({ text: command.slice(index + 1, end), index: index + 1 });
+      index = end;
+    }
+  }
+  return substitutions;
+}

package/agent-spine-plugin/src/lib/delivery-shell-wrapper.js

@@ -0,0 +1,64 @@
+const WRAPPER_NAMES = new Set(["sudo", "env", "command", "builtin", "exec", "timeout", "nice"]);
+const VALUE_OPTIONS = {
+  sudo: new Set([
+    "-C", "--close-from", "-D", "--chdir", "-g", "--group", "-h", "--host",
+    "-p", "--prompt", "-r", "--role", "-t", "--type", "-u", "--user"
+  ]),
+  env: new Set(["-C", "--chdir", "-u", "--unset", "-S", "--split-string"]),
+  exec: new Set(["-a"]),
+  timeout: new Set(["-k", "--kill-after", "-s", "--signal"]),
+  nice: new Set(["-n", "--adjustment"])
+};
+
+export function shellExecutableName(value) {
+  if (typeof value !== "string") return "";
+  return value.replace(/^.*[\\/]/, "").replace(/\.exe$/i, "").toLowerCase();
+}
+
+function wrapperName(value) {
+  const base = shellExecutableName(value);
+  return WRAPPER_NAMES.has(base) ? base : null;
+}
+
+function optionDetails(value, valueOptions) {
+  if (value.includes("=")) return { option: value.slice(0, value.indexOf("=")), attached: true, payload: value.slice(value.indexOf("=") + 1) };
+  const short = value.slice(0, 2);
+  if (value.length > 2 && !value.startsWith("--") && valueOptions.has(short)) {
+    return { option: short, attached: true, payload: value.slice(2) };
+  }
+  return { option: value, attached: false, payload: null };
+}
+
+function replaceSplitString(tokens, payload, tokenize) {
+  if (!payload || typeof tokenize !== "function") return;
+  tokens.unshift(...tokenize(payload));
+}
+
+function discardOptions(tokens, kind, tokenize) {
+  const valueOptions = VALUE_OPTIONS[kind] ?? new Set();
+  while (tokens[0]) {
+    const value = tokens[0].value;
+    if (value === "--") { tokens.shift(); return; }
+    if (kind === "env" && /^[A-Za-z_][A-Za-z0-9_]*=/.test(value)) { tokens.shift(); continue; }
+    if (!value.startsWith("-") || value === "-") return;
+    tokens.shift();
+    const { option, attached, payload } = optionDetails(value, valueOptions);
+    if (!valueOptions.has(option)) continue;
+    const splitString = kind === "env" && ["-S", "--split-string"].includes(option);
+    if (attached) {
+      if (splitString) replaceSplitString(tokens, payload, tokenize);
+      continue;
+    }
+    const argument = tokens.shift();
+    if (splitString) replaceSplitString(tokens, argument?.value, tokenize);
+  }
+}
+
+export function unwrapLeadingShellWrapper(tokens, tokenize) {
+  const kind = wrapperName(tokens[0]?.value);
+  if (!kind) return false;
+  tokens.shift();
+  discardOptions(tokens, kind, tokenize);
+  if (kind === "timeout" && tokens[0]) tokens.shift();
+  return true;
+}

package/agent-spine-plugin/src/lib/delivery-target.js

@@ -0,0 +1,73 @@
+import { createHash } from "node:crypto";
+import { lstat, readFile, realpath } from "node:fs/promises";
+import { isAbsolute, join, relative, resolve, sep } from "node:path";
+import { isInside } from "./paths.js";
+
+const MAX_TARGET_BYTES = 2 * 1024 * 1024;
+const AUTHORITY = "context-only";
+
+function sameFile(left, right) {
+  return left.dev === right.dev && left.ino === right.ino && left.size === right.size
+    && left.mtimeMs === right.mtimeMs && left.ctimeMs === right.ctimeMs;
+}
+
+async function optionalStat(path) {
+  try { return await lstat(path); }
+  catch (error) {
+    if (error.code === "ENOENT") return null;
+    throw error;
+  }
+}
+
+async function verifyParents(parents, root) {
+  for (const [path, before] of parents) {
+    const after = await lstat(path);
+    if (after.isSymbolicLink() || !after.isDirectory() || !sameFile(before, after)
+      || !isInside(root, await realpath(path))) {
+      throw new Error("delivery target parent changed during the knowledge query");
+    }
+  }
+}
+
+// Inspect only the target's components, never enumerate its parent or any tree.
+// ENOENT is a baseline, not permission to create; other errors still abort the query.
+export async function targetSnapshot(root, relativePath) {
+  if (isAbsolute(relativePath)) throw new Error("delivery target path must be relative");
+  const absolute = resolve(root, relativePath);
+  if (!isInside(root, absolute) || absolute === root) throw new Error("delivery target escapes the project root");
+  const parts = relative(root, absolute).split(sep);
+  const parents = [[root, await lstat(root)]];
+  let cursor = root;
+  for (let index = 0; index < parts.length; index++) {
+    cursor = join(cursor, parts[index]);
+    const before = await optionalStat(cursor);
+    if (!before) {
+      await verifyParents(parents, root);
+      if (await optionalStat(cursor)) throw new Error("delivery target appeared during the knowledge query");
+      return { path: relativePath, state: "absent", bytes: 0, sha256: null,
+        existingParent: relative(root, parents.at(-1)[0]) || ".", authority: AUTHORITY };
+    }
+    if (before.isSymbolicLink()) throw new Error("delivery target and parents must be non-symbolic paths");
+    const canonical = await realpath(cursor);
+    if (!isInside(root, canonical)) throw new Error("delivery target resolves outside the project root");
+    if (index < parts.length - 1) {
+      if (!before.isDirectory()) throw new Error("delivery target parent must be a directory");
+      parents.push([cursor, before]);
+      continue;
+    }
+    if (!before.isFile()) throw new Error("delivery target must be a regular non-symbolic file");
+    if (before.size > MAX_TARGET_BYTES) {
+      await verifyParents(parents, root);
+      return { path: relativePath, bytes: before.size,
+        omitted: "target-exceeds-2-mib", authority: AUTHORITY };
+    }
+    const bytes = await readFile(canonical);
+    const after = await lstat(absolute);
+    if (!sameFile(before, after) || after.isSymbolicLink()) {
+      throw new Error("delivery target changed during the knowledge query");
+    }
+    await verifyParents(parents, root);
+    return { path: relativePath, bytes: bytes.length,
+      sha256: createHash("sha256").update(bytes).digest("hex"), authority: AUTHORITY };
+  }
+}