fullcourtdefense-cli 1.34.11 → 1.34.12

package/dist/actionPolicyEngine.js

@@ -6458,7 +6458,9 @@ var OPERATION_MATCH_SKIP_FIELDS = /* @__PURE__ */ new Set([
 function buildOperationMatchText(_toolName, context) {
   const parts = [];
   for (const [key, value] of Object.entries(context)) {
-    if (OPERATION_MATCH_SKIP_FIELDS.has(key)) continue;
+    const fieldWords = key.replace(/([a-z0-9])([A-Z])/g, "$1_$2").toLowerCase().split(/[_.-]/);
+    const identifierField = /^(?:id|ids|uuid|uuids|guid|guids)$/.test(fieldWords[fieldWords.length - 1]);
+    if (OPERATION_MATCH_SKIP_FIELDS.has(key) || identifierField) continue;
     if (typeof value !== "string" || value.length === 0 || value.length > 2e3) continue;
     const text = COMMAND_LINE_FIELDS.has(key) ? shellVerbWords(value) : value;
     parts.push(`${key} ${text}`);
@@ -6647,8 +6649,18 @@ function extractUrl(args, _argsText) {
   for (const field of URL_ACTION_FIELDS) {
     const raw = args[field];
     if (typeof raw !== "string") continue;
-    const value = ["command", "cmd", "script", "input"].includes(field) ? shellUrlActionText(raw) : raw;
-    const found = value.match(/https?:\/\/[^\s"'<>]+/i)?.[0] || value.match(/\b(?:s3|gs|ftp|sftp|smb):\/\/[^\s"'<>]+/i)?.[0];
+    const shellField = ["command", "cmd", "script", "input"].includes(field);
+    const value = shellField ? shellUrlActionText(raw) : raw;
+    const firstUrl = (text) => text.match(/https?:\/\/[^\s"'<>]+/i)?.[0] || text.match(/\b(?:s3|gs|ftp|sftp|smb):\/\/[^\s"'<>]+/i)?.[0];
+    const outboundUrls = shellField ? splitShellSegments(value).filter((segment) => /^(?:curl(?:\.exe)?|wget(?:\.exe)?|invoke-restmethod|invoke-webrequest|irm|iwr)$/i.test(shellSegmentLead(segment)) && classifyShellSegment(segment) === "write").map(firstUrl).filter((url) => Boolean(url)) : [];
+    const externalOutbound = outboundUrls.find((url) => {
+      try {
+        return !isInternalHost(new URL(url).hostname);
+      } catch {
+        return false;
+      }
+    });
+    const found = externalOutbound || outboundUrls[0] || firstUrl(value);
     if (found) return found;
   }
   return "";
@@ -7018,6 +7030,44 @@ function classifyShellCommandOperation(command, depth = 0) {
   if (segments.length === 0) return "SHELL";
   return worstShellOp(segments.map((segment) => classifyShellSegment(segment, depth)), "read");
 }
+function provenCompoundDownload(command, detectedUrl) {
+  const segments = splitShellSegments(command).filter((segment) => /\b(?:https?|s3|gs|ftp|sftp|smb):\/\//i.test(segment));
+  if (!segments.length || !command.includes(detectedUrl)) return false;
+  return segments.every((segment) => {
+    if (/[$`{}()<>;&]/.test(segment)) return false;
+    const pipeline = splitShellSegments(segment, true);
+    if (pipeline.slice(1).some((part) => !/^(?:Select-Object|Format-Table|Format-List)\s+[\w., *-]+$|^Out-Null$/i.test(part))) return false;
+    const raw = pipeline[0];
+    const pieces = raw.match(/"[^"\r\n]*"|'[^'\r\n]*'|[^\s"']+/g) || [];
+    if (pieces.join("").replace(/\s/g, "") !== raw.replace(/\s/g, "")) return false;
+    const tokens = pieces.map((piece) => piece.replace(/^["']|["']$/g, ""));
+    if (!/^(?:curl(?:\.exe)?|wget(?:\.exe)?|Invoke-RestMethod|Invoke-WebRequest|irm|iwr)$/i.test(tokens.shift() || "")) return false;
+    let urls = 0;
+    for (let i2 = 0; i2 < tokens.length; i2++) {
+      const token = tokens[i2];
+      if (/^https?:\/\//i.test(token)) {
+        urls++;
+        continue;
+      }
+      if (/^-Uri$/i.test(token) && /^https?:\/\//i.test(tokens[i2 + 1] || "")) {
+        urls++;
+        i2++;
+        continue;
+      }
+      if (/^(?:-X|--request|-Method)$/.test(token) && /^(?:GET|HEAD|OPTIONS)$/i.test(tokens[i2 + 1] || "")) {
+        i2++;
+        continue;
+      }
+      if (/^-[sfSLI]+$|^--(?:silent|fail|location|head)$|^-UseBasicParsing$/.test(token)) continue;
+      if (/^-TimeoutSec$/i.test(token) && /^\d+$/.test(tokens[i2 + 1] || "")) {
+        i2++;
+        continue;
+      }
+      return false;
+    }
+    return urls === 1;
+  });
+}
 function isInternalHost(hostname) {
   const host = hostname.toLowerCase();
   if (!host || host === "localhost" || host === "::1" || host.endsWith(".local") || host.endsWith(".internal")) return true;
@@ -7175,6 +7225,7 @@ function inferToolContext(toolName, args) {
   let operation = toolName;
   const toolNameLower = toolName.toLowerCase();
   const argsText = stringifyArgs(args);
+  const commandText = String(args.command || args.cmd || args.code || args.script || args.input || "");
   const retryCount = Number(args.retryCount ?? args.retries ?? args.attempts ?? 0);
   const fanoutCount = Number(args.fanoutCount ?? args.recipientCount ?? args.childCalls ?? (Array.isArray(args.recipients) ? args.recipients.length : 0));
   const burstCount = Math.max(
@@ -7214,7 +7265,7 @@ function inferToolContext(toolName, args) {
     }
   }
   if (operation === toolName && CODE_EXEC_TOOL_NAME_RE.test(nameWords)) {
-    operation = classifyShellCommandOperation(String(args.command || args.code || args.script || args.input || ""));
+    operation = classifyShellCommandOperation(commandText);
   }
   const pathArg = args.path || args.filepath || args.file || args.filename || "";
   if (typeof pathArg === "string" && pathArg.length > 0) {
@@ -7237,7 +7288,7 @@ function inferToolContext(toolName, args) {
     try {
       const parsed = new URL(detectedUrl);
       const hostType = isInternalHost(parsed.hostname) ? "internal" : "external";
-      const inbound = operation === "read" || ["GET", "HEAD", "OPTIONS", "SELECT", "SHOW", "DESCRIBE", "EXPLAIN"].includes(operation) || operation === "SHELL" && isCodeExecTool && !hasSecretLikeValue(argsText) && provenInlineJavaScriptRead(String(args.command || args.code || args.script || args.input || ""), detectedUrl) || operation === toolName && /\b(fetch|get|read|search|list|lookup|browse|navigate|download|clone|pull|view|open|crawl|scrape)\b/.test(nameWords) && !/\b(post|put|send|upload|push|write|submit|publish|export|create|update|delete|patch)\b/.test(nameWords);
+      const inbound = operation === "read" || ["GET", "HEAD", "OPTIONS", "SELECT", "SHOW", "DESCRIBE", "EXPLAIN"].includes(operation) || isCodeExecTool && !hasSecretLikeValue(argsText) && provenCompoundDownload(commandText, detectedUrl) || operation === "SHELL" && isCodeExecTool && !hasSecretLikeValue(argsText) && provenInlineJavaScriptRead(commandText, detectedUrl) || operation === toolName && /\b(fetch|get|read|search|list|lookup|browse|navigate|download|clone|pull|view|open|crawl|scrape)\b/.test(nameWords) && !/\b(post|put|send|upload|push|write|submit|publish|export|create|update|delete|patch)\b/.test(nameWords);
       context["destination.domain"] = parsed.hostname;
       context["url.risk"] = hostType;
       if (inbound) {

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.34.11"
+  "version": "1.34.12"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.34.11",
+  "version": "1.34.12",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {