create-principles-disciple 1.120.1 → 1.120.3

package/console/dist/server/routes/update.js

@@ -1,7 +1,7 @@
 import * as fs from 'fs';
 import * as path from 'path';
 import * as os from 'os';
-import { execSync } from 'child_process';
+import { execFileSync } from 'child_process';
 import semver from 'semver';
 import { sendSuccess, sendError, sendMethodNotAllowed, sendBadRequest, sendNotFound, } from '../utils/response.js';
 import { appendUpdateHistory } from './update-history.js';
@@ -500,7 +500,9 @@ async function doApplyUpdate(options, workspaceDir) {
         const buffer = Buffer.from(await dlResponse.arrayBuffer());
         const tarballPath = path.join(tempDir, 'package.tgz');
         fs.writeFileSync(tarballPath, buffer);
-        execSync(`tar xzf "${tarballPath}" -C "${tempDir}" --strip-components=1`, { stdio: 'pipe' });
+        // EP-08: spawn tar via argv array — tarball/temp paths stay data, never
+        // shell syntax (Mimosa command-injection finding, 2026-08-22).
+        execFileSync('tar', ['xzf', tarballPath, '-C', tempDir, '--strip-components=1'], { stdio: 'pipe' });
         fs.unlinkSync(tarballPath);
         // 4. Compute diff and apply.
         // Fix 3: we ONLY apply modified + added files. We deliberately skip ALL
@@ -748,7 +750,9 @@ async function doInlineFullUpdate(workspaceDir) {
         const buffer = Buffer.from(await dlResponse.arrayBuffer());
         const tarballPath = path.join(tempDir, 'package.tgz');
         fs.writeFileSync(tarballPath, buffer);
-        execSync(`tar xzf "${tarballPath}" -C "${tempDir}" --strip-components=1`, { stdio: 'pipe' });
+        // EP-08: spawn tar via argv array — tarball/temp paths stay data, never
+        // shell syntax (Mimosa command-injection finding, 2026-08-22).
+        execFileSync('tar', ['xzf', tarballPath, '-C', tempDir, '--strip-components=1'], { stdio: 'pipe' });
         fs.unlinkSync(tarballPath);
         // 4. Detect dependency changes (informational — logged but not blocking;
         //    the .js files are still updated; node_modules stays as-is)

package/console/dist/server/utils/gateway.js

@@ -7,7 +7,7 @@
  *
  * rc-9: every function returns a structured result instead of throwing.
  */
-import { execSync } from 'child_process';
+import { execFileSync } from 'child_process';
 import * as fs from 'fs';
 import * as path from 'path';
 import * as os from 'os';
@@ -78,7 +78,10 @@ export async function checkOpenClawGateway() {
     let pid = undefined;
     try {
         if (process.platform === 'win32') {
-            const output = execSync(`powershell -NoProfile -Command "(Get-NetTCPConnection -LocalPort ${port} -State Listen -ErrorAction SilentlyContinue).OwningProcess"`, { encoding: 'utf-8', timeout: 5000 }).trim();
+            // EP-08: spawn via argv array — no cmd.exe shell in the chain, so even a
+            // hostile config value could never be re-interpreted as shell syntax.
+            // port is already validated as an integer in readOpenClawPort().
+            const output = execFileSync('powershell', ['-NoProfile', '-Command', `(Get-NetTCPConnection -LocalPort ${port} -State Listen -ErrorAction SilentlyContinue).OwningProcess`], { encoding: 'utf-8', timeout: 5000, stdio: ['ignore', 'pipe', 'ignore'] }).trim();
             if (output) {
                 const [firstLine] = output.split('\n');
                 if (firstLine)
@@ -86,7 +89,9 @@ export async function checkOpenClawGateway() {
             }
         }
         else {
-            const output = execSync(`lsof -i :${port} -t -sTCP:LISTEN 2>/dev/null`, { encoding: 'utf-8', timeout: 5000 }).trim();
+            // EP-08: argv form replaces the old shell string (which needed
+            // `2>/dev/null`); stderr is discarded via stdio instead.
+            const output = execFileSync('lsof', ['-i', `:${port}`, '-t', '-sTCP:LISTEN'], { encoding: 'utf-8', timeout: 5000, stdio: ['ignore', 'pipe', 'ignore'] }).trim();
             if (output) {
                 const [firstLine] = output.split('\n');
                 if (firstLine)
@@ -107,7 +112,8 @@ export async function checkOpenClawGateway() {
  */
 function runGatewayServiceCommand(subcommand) {
     try {
-        execSync(`openclaw gateway ${subcommand}`, { stdio: 'pipe', encoding: 'utf-8', timeout: 15000 });
+        // EP-08: argv array + typed subcommand union — no shell interpolation.
+        execFileSync('openclaw', ['gateway', subcommand], { stdio: 'pipe', encoding: 'utf-8', timeout: 15000 });
         return { ok: true };
     }
     catch (e) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-principles-disciple",
-  "version": "1.120.1",
+  "version": "1.120.3",
   "description": "Interactive CLI installer for Principles Disciple OpenClaw plugin",
   "type": "module",
   "bin": {
@@ -63,6 +63,6 @@
     "directory": "packages/create-principles-disciple"
   },
   "pd": {
-    "bundledPluginVersion": "1.216.0"
+    "bundledPluginVersion": "1.217.0"
   }
 }

package/plugin/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "principles-disciple",
   "name": "Principles Disciple",
   "description": "Principles Disciple is an AI Agent Governance System. Stop correcting the same AI behavior across sessions. Turn repeated Agent corrections into Owner-approved, observable, reversible behavior principles.",
-  "version": "1.216.0",
+  "version": "1.217.0",
   "activation": {
     "onCapabilities": [
       "hook"

package/plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "principles-disciple",
-  "version": "1.216.0",
+  "version": "1.217.0",
   "description": "Principles Disciple is an AI Agent Governance System. Stop correcting the same AI behavior across sessions. Turn repeated Agent corrections into Owner-approved, observable, reversible behavior principles.",
   "type": "module",
   "main": "./dist/index.js",