fullcourtdefense-cli 1.34.10 → 1.34.12

package/dist/actionPolicyEngine.js

@@ -6458,7 +6458,9 @@ var OPERATION_MATCH_SKIP_FIELDS = /* @__PURE__ */ new Set([
 function buildOperationMatchText(_toolName, context) {
   const parts = [];
   for (const [key, value] of Object.entries(context)) {
-    if (OPERATION_MATCH_SKIP_FIELDS.has(key)) continue;
+    const fieldWords = key.replace(/([a-z0-9])([A-Z])/g, "$1_$2").toLowerCase().split(/[_.-]/);
+    const identifierField = /^(?:id|ids|uuid|uuids|guid|guids)$/.test(fieldWords[fieldWords.length - 1]);
+    if (OPERATION_MATCH_SKIP_FIELDS.has(key) || identifierField) continue;
     if (typeof value !== "string" || value.length === 0 || value.length > 2e3) continue;
     const text = COMMAND_LINE_FIELDS.has(key) ? shellVerbWords(value) : value;
     parts.push(`${key} ${text}`);
@@ -6645,13 +6647,65 @@ function extractUrl(args, _argsText) {
   const direct = args.url || args.uri || args.endpoint || args.webhookUrl || args.callbackUrl || args.href || args.link;
   if (typeof direct === "string" && direct.trim()) return direct.trim();
   for (const field of URL_ACTION_FIELDS) {
-    const value = args[field];
-    if (typeof value !== "string") continue;
-    const found = value.match(/https?:\/\/[^\s"'<>]+/i)?.[0] || value.match(/\b(?:s3|gs|ftp|sftp|smb):\/\/[^\s"'<>]+/i)?.[0];
+    const raw = args[field];
+    if (typeof raw !== "string") continue;
+    const shellField = ["command", "cmd", "script", "input"].includes(field);
+    const value = shellField ? shellUrlActionText(raw) : raw;
+    const firstUrl = (text) => text.match(/https?:\/\/[^\s"'<>]+/i)?.[0] || text.match(/\b(?:s3|gs|ftp|sftp|smb):\/\/[^\s"'<>]+/i)?.[0];
+    const outboundUrls = shellField ? splitShellSegments(value).filter((segment) => /^(?:curl(?:\.exe)?|wget(?:\.exe)?|invoke-restmethod|invoke-webrequest|irm|iwr)$/i.test(shellSegmentLead(segment)) && classifyShellSegment(segment) === "write").map(firstUrl).filter((url) => Boolean(url)) : [];
+    const externalOutbound = outboundUrls.find((url) => {
+      try {
+        return !isInternalHost(new URL(url).hostname);
+      } catch {
+        return false;
+      }
+    });
+    const found = externalOutbound || outboundUrls[0] || firstUrl(value);
     if (found) return found;
   }
   return "";
 }
+function shellUrlActionText(command) {
+  const segments = splitShellSegments(command);
+  const filtered = segments.map((segment) => {
+    const literal2 = /^(?:@'\r?\n[\s\S]*?\r?\n'@|@"\r?\n[^$`]*?\r?\n"@|'(?:[^']|'')*'|"[^"$`]*")/;
+    const piped = segment.match(literal2);
+    let tail = piped ? segment.slice(piped[0].length).replace(/^\s*\|\s*/, "") : "";
+    if (!piped || !/^\s*\|/.test(segment.slice(piped[0].length))) {
+      const argument = segment.match(/^(Set-Content|Add-Content|Out-File)\s+([\s\S]*?)\s+-(Value|InputObject)\s+([\s\S]+)$/i);
+      const value = argument?.[4].match(literal2);
+      if (!argument || !value) return segment;
+      tail = `${argument[1]} ${argument[2]} ${argument[4].slice(value[0].length)}`;
+    }
+    const writer = tail.match(/^(?:Set-Content|Add-Content|Out-File)\s+([\s\S]+)$/i);
+    if (!writer) return segment;
+    const tokens = writer[1].match(/'[^']*'|"[^"$`]*"|[^\s'"$`|;&(){}]+/g) || [];
+    if (tokens.join(" ").replace(/\s/g, "") !== writer[1].replace(/\s/g, "")) return segment;
+    let target = "";
+    for (let i2 = 0; i2 < tokens.length; i2++) {
+      const token = tokens[i2];
+      if (/^-(?:LiteralPath|Path|FilePath)$/i.test(token)) {
+        if (target || !tokens[i2 + 1]) return segment;
+        target = tokens[++i2];
+      } else if (/^-Encoding$/i.test(token)) {
+        if (!/^(?:utf8|utf8BOM|utf8NoBOM|unicode|ascii|default|oem|bigendianunicode|utf32)$/i.test(tokens[++i2] || "")) return segment;
+      } else if (/^-(?:Force|NoNewline|Append)$/i.test(token)) {
+        continue;
+      } else if (!target && !token.startsWith("-")) target = token;
+      else return segment;
+    }
+    target = target.replace(/^['"]|['"]$/g, "");
+    if (!target || /^[\\/]{2}|[\r\n*?\[\]<>]/.test(target) || /:/.test(target.replace(/^[A-Za-z]:[\\/]/, ""))) return segment;
+    return tail;
+  });
+  const onlyStoredData = segments.every((segment, index) => {
+    if (filtered[index] !== segment) return true;
+    const words = maskQuotedSpans(segment);
+    if (!/[$`|;&(){}<>]/.test(segment) && /^(?:(?:cd|pushd|set-location)\s+[^\r\n]+|(?:pwd|popd|get-location)|git\s+status(?:\s+[^\r\n]+)?)$/i.test(segment)) return true;
+    return !/[$`]/.test(segment) && /^\(Get-Content\s+(?:[A-Za-z]:[\\/])?[\w./\\-]+\s+-Raw\)\.Replace\("",\s*""\)\s*\|\s*Set-Content\s+(?:[A-Za-z]:[\\/])?[\w./\\-]+\s+-Encoding\s+utf8\s*$/i.test(words);
+  });
+  return onlyStoredData && filtered.some((value, index) => value !== segments[index]) ? filtered.join("\n") : command;
+}
 function splitShellSegments(command, alsoOnPipe = false) {
   const out = [];
   let cur = "";
@@ -6941,7 +6995,7 @@ function classifyShellWords(masked, raw, lead) {
   if (lead === "gh" && /\bgh\s+(?:pr|issue|repo|run|release|workflow)\s+(?:view|list|status|checks|diff|download)\b/.test(value)) return "read";
   if (lead === "gh" && /\bgh\s+auth\s+status\b/.test(value) && !/--show-token|\s-t\b/.test(value)) return "read";
   if (/^(?:gcloud\s+run\s+services\s+(?:describe|logs\s+read)|kubectl\s+(?:get|describe|logs|top|config\s+(?:current-context|get-contexts|view(?!\s+--raw)))|docker\s+(?:ps|images|logs|inspect|version|info)|terraform\s+(?:plan|validate|fmt|show|state\s+list|output)|aws\s+(?:s3\s+ls|sts\s+get-caller-identity)|az\s+account\s+show|npm\s+(?:ls|list|view|outdated|--version)|node\s+--version|python3?\s+--version)\b/.test(value)) return "read";
-  if (/\b(rm\s+-[a-z]*r[a-z]*f|rm\s+-[a-z]*f[a-z]*r|del\s+\/[fqs]|remove-item\b.*\b-recurse\b|rmdir\s+\/s)\b/.test(value)) {
+  if (/\b(rm\s+-[a-z]*r[a-z]*f|rm\s+-[a-z]*f[a-z]*r|del\s+\/[fqs]|remove-item\b.*\s-recurse\b|rmdir\s+\/s)\b/.test(value)) {
     return isWorkspaceScopedRemoval(segment) ? "write" : "DELETE";
   }
   if (/\b(drop\s+(database|table|schema)|truncate\s+table|kubectl\s+delete|terraform\s+destroy|gcloud\s+(?:sql\s+instances|compute\s+instances|projects|run\s+services)\s+delete|az\s+(?:group|vm|sql\s+server)\s+delete|aws\s+(?:s3\s+rb|rds\s+delete-db-instance|ec2\s+terminate-instances)|docker\s+(?:system\s+prune|volume\s+rm|rm\s+-f)|mkfs|dd\s+if=)\b/.test(value)) {
@@ -6971,10 +7025,49 @@ function classifyShellWords(masked, raw, lead) {
   return "SHELL";
 }
 function classifyShellCommandOperation(command, depth = 0) {
+  if (shellUrlActionText(command) !== command) return "write";
   const segments = splitShellSegments(command);
   if (segments.length === 0) return "SHELL";
   return worstShellOp(segments.map((segment) => classifyShellSegment(segment, depth)), "read");
 }
+function provenCompoundDownload(command, detectedUrl) {
+  const segments = splitShellSegments(command).filter((segment) => /\b(?:https?|s3|gs|ftp|sftp|smb):\/\//i.test(segment));
+  if (!segments.length || !command.includes(detectedUrl)) return false;
+  return segments.every((segment) => {
+    if (/[$`{}()<>;&]/.test(segment)) return false;
+    const pipeline = splitShellSegments(segment, true);
+    if (pipeline.slice(1).some((part) => !/^(?:Select-Object|Format-Table|Format-List)\s+[\w., *-]+$|^Out-Null$/i.test(part))) return false;
+    const raw = pipeline[0];
+    const pieces = raw.match(/"[^"\r\n]*"|'[^'\r\n]*'|[^\s"']+/g) || [];
+    if (pieces.join("").replace(/\s/g, "") !== raw.replace(/\s/g, "")) return false;
+    const tokens = pieces.map((piece) => piece.replace(/^["']|["']$/g, ""));
+    if (!/^(?:curl(?:\.exe)?|wget(?:\.exe)?|Invoke-RestMethod|Invoke-WebRequest|irm|iwr)$/i.test(tokens.shift() || "")) return false;
+    let urls = 0;
+    for (let i2 = 0; i2 < tokens.length; i2++) {
+      const token = tokens[i2];
+      if (/^https?:\/\//i.test(token)) {
+        urls++;
+        continue;
+      }
+      if (/^-Uri$/i.test(token) && /^https?:\/\//i.test(tokens[i2 + 1] || "")) {
+        urls++;
+        i2++;
+        continue;
+      }
+      if (/^(?:-X|--request|-Method)$/.test(token) && /^(?:GET|HEAD|OPTIONS)$/i.test(tokens[i2 + 1] || "")) {
+        i2++;
+        continue;
+      }
+      if (/^-[sfSLI]+$|^--(?:silent|fail|location|head)$|^-UseBasicParsing$/.test(token)) continue;
+      if (/^-TimeoutSec$/i.test(token) && /^\d+$/.test(tokens[i2 + 1] || "")) {
+        i2++;
+        continue;
+      }
+      return false;
+    }
+    return urls === 1;
+  });
+}
 function isInternalHost(hostname) {
   const host = hostname.toLowerCase();
   if (!host || host === "localhost" || host === "::1" || host.endsWith(".local") || host.endsWith(".internal")) return true;
@@ -7132,6 +7225,7 @@ function inferToolContext(toolName, args) {
   let operation = toolName;
   const toolNameLower = toolName.toLowerCase();
   const argsText = stringifyArgs(args);
+  const commandText = String(args.command || args.cmd || args.code || args.script || args.input || "");
   const retryCount = Number(args.retryCount ?? args.retries ?? args.attempts ?? 0);
   const fanoutCount = Number(args.fanoutCount ?? args.recipientCount ?? args.childCalls ?? (Array.isArray(args.recipients) ? args.recipients.length : 0));
   const burstCount = Math.max(
@@ -7171,7 +7265,7 @@ function inferToolContext(toolName, args) {
     }
   }
   if (operation === toolName && CODE_EXEC_TOOL_NAME_RE.test(nameWords)) {
-    operation = classifyShellCommandOperation(String(args.command || args.code || args.script || args.input || ""));
+    operation = classifyShellCommandOperation(commandText);
   }
   const pathArg = args.path || args.filepath || args.file || args.filename || "";
   if (typeof pathArg === "string" && pathArg.length > 0) {
@@ -7194,7 +7288,7 @@ function inferToolContext(toolName, args) {
     try {
       const parsed = new URL(detectedUrl);
       const hostType = isInternalHost(parsed.hostname) ? "internal" : "external";
-      const inbound = operation === "read" || ["GET", "HEAD", "OPTIONS", "SELECT", "SHOW", "DESCRIBE", "EXPLAIN"].includes(operation) || operation === "SHELL" && isCodeExecTool && !hasSecretLikeValue(argsText) && provenInlineJavaScriptRead(String(args.command || args.code || args.script || args.input || ""), detectedUrl) || operation === toolName && /\b(fetch|get|read|search|list|lookup|browse|navigate|download|clone|pull|view|open|crawl|scrape)\b/.test(nameWords) && !/\b(post|put|send|upload|push|write|submit|publish|export|create|update|delete|patch)\b/.test(nameWords);
+      const inbound = operation === "read" || ["GET", "HEAD", "OPTIONS", "SELECT", "SHOW", "DESCRIBE", "EXPLAIN"].includes(operation) || isCodeExecTool && !hasSecretLikeValue(argsText) && provenCompoundDownload(commandText, detectedUrl) || operation === "SHELL" && isCodeExecTool && !hasSecretLikeValue(argsText) && provenInlineJavaScriptRead(commandText, detectedUrl) || operation === toolName && /\b(fetch|get|read|search|list|lookup|browse|navigate|download|clone|pull|view|open|crawl|scrape)\b/.test(nameWords) && !/\b(post|put|send|upload|push|write|submit|publish|export|create|update|delete|patch)\b/.test(nameWords);
       context["destination.domain"] = parsed.hostname;
       context["url.risk"] = hostType;
       if (inbound) {

package/dist/blockExplanation.js

@@ -84,7 +84,7 @@ const FACT_WORDS = [
             ? `a secret-shaped value was found in the arguments${f['toolArgs.secretKind'] && f['toolArgs.secretKind'] !== 'none' ? ` (${f['toolArgs.secretKind'].replace(/_/g, ' ')})` : ''}`
             : undefined],
     ['toolArgs.containsPii', v => v === 'true' ? 'personal data (PII) was found in the arguments' : undefined],
-    ['destination.type', (v, f) => v === 'external' ? `the destination ${f['destination.domain'] ? `"${f['destination.domain']}" ` : ''}is outside your organisation` : undefined],
+    ['destination.type', (v, f) => v === 'external' ? `the destination ${f['destination.domain'] ? `"${f['destination.domain']}" ` : ''}is classified as external; this does not establish whether your organisation trusts it` : undefined],
     ['destination.domain', (v, f) => f['destination.type'] === 'external' ? undefined : `destination host: ${v}`],
     ['url.risk', v => v && v !== 'none' && v !== 'low' ? `the URL was rated ${v} risk` : undefined],
     ['path.sensitive', v => v === 'true' ? 'the path is a sensitive location' : undefined],

package/dist/commands/hook.js

@@ -830,7 +830,7 @@ function prepareDeveloperConfirmation(event, call, payload, source) {
     // Name the rule in the prompt itself: a developer deciding y/n must see WHICH
     // rule is asking and where to change it — same builder as every block.
     const ceilingNote = source.askedInsteadOfBlocked
-        ? 'This policy is set to Block. On a developer workstation it asks you instead of blocking — a wrong Ask costs one click, a wrong block costs your afternoon. An admin can mark the policy "Hard block" in the console to stop this without asking.'
+        ? 'This policy is set to Block. Because it is not marked "Hard block", your workstation requires your approval before continuing. An admin can review the matching rule and its scope in the console.'
         : undefined;
     const explained = source.where === 'local-safety' && source.localFinding
         ? explainLocalSafetyStop('ask', event, call, source.localFinding)

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.34.10"
+  "version": "1.34.12"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.34.10",
+  "version": "1.34.12",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {