border-customs 0.8.2 → 0.8.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +10 -1
- package/dist/assets/exfil-src/rules.ts +5 -0
- package/dist/assets/exfil-src/rulesPath.ts +35 -6
- package/dist/assets/exfil-src/scan.ts +12 -1
- package/dist/assets/exfil-src/tsSpans.ts +88 -0
- package/dist/assets/package-lock.json +7 -8
- package/dist/index.js +1780 -825
- package/package.json +3 -3
- package/plugin/border.ts +1 -1
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "border-customs",
|
|
3
|
-
"version": "0.8.
|
|
3
|
+
"version": "0.8.3",
|
|
4
4
|
"//": "publint is a runtime dep (exact pin): the npm-stage engine is invoked via bin resolution against the installed layout, so consumers get the publint-fail leg out of the box; the dev suite resolves the same node_modules/.bin/publint — no devDependencies entry is needed for it to stay green.",
|
|
5
5
|
"description": "Fail-closed git push gate: secret scanning + supply-chain checks before any remote leaves the machine",
|
|
6
6
|
"type": "module",
|
|
@@ -41,8 +41,9 @@
|
|
|
41
41
|
"@secretlint/secretlint-rule-preset-recommend": "13.0.5",
|
|
42
42
|
"@textlint/regexp-string-matcher": "2.0.2",
|
|
43
43
|
"publint": "0.3.24",
|
|
44
|
+
"typescript": "5.9.3",
|
|
44
45
|
"yaml": "2.9.0",
|
|
45
|
-
"zod": "4.
|
|
46
|
+
"zod": "4.6.7"
|
|
46
47
|
},
|
|
47
48
|
"devDependencies": {
|
|
48
49
|
"@opencode-ai/plugin": "^1.19.4",
|
|
@@ -50,7 +51,6 @@
|
|
|
50
51
|
"@types/node": "22.19.0",
|
|
51
52
|
"esbuild": "0.25.12",
|
|
52
53
|
"secretlint": "13.0.5",
|
|
53
|
-
"typescript": "5.9.3",
|
|
54
54
|
"verdaccio": "6.10.2"
|
|
55
55
|
}
|
|
56
56
|
}
|
package/plugin/border.ts
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
// border-opencode-plugin v0.8.
|
|
1
|
+
// border-opencode-plugin v0.8.3
|
|
2
2
|
// Official opencode plugin adapter for the border fail-closed push gate.
|
|
3
3
|
// Registers ONE agent tool, `border`, that drives the border CLI — argv-only
|
|
4
4
|
// (node:child_process execFile, never a shell), top-level commands restricted
|