fullcourtdefense-cli 1.34.9 → 1.34.11

package/dist/actionPolicyEngine.js

@@ -6532,6 +6532,7 @@ function isHighEntropySecretToken(token, allowWordSlug = false) {
   if (/^data:/i.test(token) || /^[A-Za-z0-9+/]{200,}={0,2}$/.test(token)) return false;
   if (/^(?:https?|s3|gs|file):\/\//i.test(token) || /[\\/]{1}[\w.-]+[\\/]/.test(token)) return false;
   if (/^[a-z]+(?:[A-Z][a-z0-9]+)+$/.test(token) || /^[a-z]+(?:_[a-z0-9]+)+$/.test(token)) return false;
+  if (allowWordSlug && /^[A-Z][a-z]+-(?:[A-Z][a-z]+){2,}$/.test(token)) return false;
   if (allowWordSlug && /^[a-z]+(?:-[a-z]+)+(?:-\d+)?$/.test(token)) return false;
   let classes = 0;
   if (/[a-z]/.test(token)) classes++;
@@ -6644,13 +6645,55 @@ function extractUrl(args, _argsText) {
   const direct = args.url || args.uri || args.endpoint || args.webhookUrl || args.callbackUrl || args.href || args.link;
   if (typeof direct === "string" && direct.trim()) return direct.trim();
   for (const field of URL_ACTION_FIELDS) {
-    const value = args[field];
-    if (typeof value !== "string") continue;
+    const raw = args[field];
+    if (typeof raw !== "string") continue;
+    const value = ["command", "cmd", "script", "input"].includes(field) ? shellUrlActionText(raw) : raw;
     const found = value.match(/https?:\/\/[^\s"'<>]+/i)?.[0] || value.match(/\b(?:s3|gs|ftp|sftp|smb):\/\/[^\s"'<>]+/i)?.[0];
     if (found) return found;
   }
   return "";
 }
+function shellUrlActionText(command) {
+  const segments = splitShellSegments(command);
+  const filtered = segments.map((segment) => {
+    const literal2 = /^(?:@'\r?\n[\s\S]*?\r?\n'@|@"\r?\n[^$`]*?\r?\n"@|'(?:[^']|'')*'|"[^"$`]*")/;
+    const piped = segment.match(literal2);
+    let tail = piped ? segment.slice(piped[0].length).replace(/^\s*\|\s*/, "") : "";
+    if (!piped || !/^\s*\|/.test(segment.slice(piped[0].length))) {
+      const argument = segment.match(/^(Set-Content|Add-Content|Out-File)\s+([\s\S]*?)\s+-(Value|InputObject)\s+([\s\S]+)$/i);
+      const value = argument?.[4].match(literal2);
+      if (!argument || !value) return segment;
+      tail = `${argument[1]} ${argument[2]} ${argument[4].slice(value[0].length)}`;
+    }
+    const writer = tail.match(/^(?:Set-Content|Add-Content|Out-File)\s+([\s\S]+)$/i);
+    if (!writer) return segment;
+    const tokens = writer[1].match(/'[^']*'|"[^"$`]*"|[^\s'"$`|;&(){}]+/g) || [];
+    if (tokens.join(" ").replace(/\s/g, "") !== writer[1].replace(/\s/g, "")) return segment;
+    let target = "";
+    for (let i2 = 0; i2 < tokens.length; i2++) {
+      const token = tokens[i2];
+      if (/^-(?:LiteralPath|Path|FilePath)$/i.test(token)) {
+        if (target || !tokens[i2 + 1]) return segment;
+        target = tokens[++i2];
+      } else if (/^-Encoding$/i.test(token)) {
+        if (!/^(?:utf8|utf8BOM|utf8NoBOM|unicode|ascii|default|oem|bigendianunicode|utf32)$/i.test(tokens[++i2] || "")) return segment;
+      } else if (/^-(?:Force|NoNewline|Append)$/i.test(token)) {
+        continue;
+      } else if (!target && !token.startsWith("-")) target = token;
+      else return segment;
+    }
+    target = target.replace(/^['"]|['"]$/g, "");
+    if (!target || /^[\\/]{2}|[\r\n*?\[\]<>]/.test(target) || /:/.test(target.replace(/^[A-Za-z]:[\\/]/, ""))) return segment;
+    return tail;
+  });
+  const onlyStoredData = segments.every((segment, index) => {
+    if (filtered[index] !== segment) return true;
+    const words = maskQuotedSpans(segment);
+    if (!/[$`|;&(){}<>]/.test(segment) && /^(?:(?:cd|pushd|set-location)\s+[^\r\n]+|(?:pwd|popd|get-location)|git\s+status(?:\s+[^\r\n]+)?)$/i.test(segment)) return true;
+    return !/[$`]/.test(segment) && /^\(Get-Content\s+(?:[A-Za-z]:[\\/])?[\w./\\-]+\s+-Raw\)\.Replace\("",\s*""\)\s*\|\s*Set-Content\s+(?:[A-Za-z]:[\\/])?[\w./\\-]+\s+-Encoding\s+utf8\s*$/i.test(words);
+  });
+  return onlyStoredData && filtered.some((value, index) => value !== segments[index]) ? filtered.join("\n") : command;
+}
 function splitShellSegments(command, alsoOnPipe = false) {
   const out = [];
   let cur = "";
@@ -6940,7 +6983,7 @@ function classifyShellWords(masked, raw, lead) {
   if (lead === "gh" && /\bgh\s+(?:pr|issue|repo|run|release|workflow)\s+(?:view|list|status|checks|diff|download)\b/.test(value)) return "read";
   if (lead === "gh" && /\bgh\s+auth\s+status\b/.test(value) && !/--show-token|\s-t\b/.test(value)) return "read";
   if (/^(?:gcloud\s+run\s+services\s+(?:describe|logs\s+read)|kubectl\s+(?:get|describe|logs|top|config\s+(?:current-context|get-contexts|view(?!\s+--raw)))|docker\s+(?:ps|images|logs|inspect|version|info)|terraform\s+(?:plan|validate|fmt|show|state\s+list|output)|aws\s+(?:s3\s+ls|sts\s+get-caller-identity)|az\s+account\s+show|npm\s+(?:ls|list|view|outdated|--version)|node\s+--version|python3?\s+--version)\b/.test(value)) return "read";
-  if (/\b(rm\s+-[a-z]*r[a-z]*f|rm\s+-[a-z]*f[a-z]*r|del\s+\/[fqs]|remove-item\b.*\b-recurse\b|rmdir\s+\/s)\b/.test(value)) {
+  if (/\b(rm\s+-[a-z]*r[a-z]*f|rm\s+-[a-z]*f[a-z]*r|del\s+\/[fqs]|remove-item\b.*\s-recurse\b|rmdir\s+\/s)\b/.test(value)) {
     return isWorkspaceScopedRemoval(segment) ? "write" : "DELETE";
   }
   if (/\b(drop\s+(database|table|schema)|truncate\s+table|kubectl\s+delete|terraform\s+destroy|gcloud\s+(?:sql\s+instances|compute\s+instances|projects|run\s+services)\s+delete|az\s+(?:group|vm|sql\s+server)\s+delete|aws\s+(?:s3\s+rb|rds\s+delete-db-instance|ec2\s+terminate-instances)|docker\s+(?:system\s+prune|volume\s+rm|rm\s+-f)|mkfs|dd\s+if=)\b/.test(value)) {
@@ -6970,6 +7013,7 @@ function classifyShellWords(masked, raw, lead) {
   return "SHELL";
 }
 function classifyShellCommandOperation(command, depth = 0) {
+  if (shellUrlActionText(command) !== command) return "write";
   const segments = splitShellSegments(command);
   if (segments.length === 0) return "SHELL";
   return worstShellOp(segments.map((segment) => classifyShellSegment(segment, depth)), "read");

package/dist/blockExplanation.js

@@ -84,7 +84,7 @@ const FACT_WORDS = [
             ? `a secret-shaped value was found in the arguments${f['toolArgs.secretKind'] && f['toolArgs.secretKind'] !== 'none' ? ` (${f['toolArgs.secretKind'].replace(/_/g, ' ')})` : ''}`
             : undefined],
     ['toolArgs.containsPii', v => v === 'true' ? 'personal data (PII) was found in the arguments' : undefined],
-    ['destination.type', (v, f) => v === 'external' ? `the destination ${f['destination.domain'] ? `"${f['destination.domain']}" ` : ''}is outside your organisation` : undefined],
+    ['destination.type', (v, f) => v === 'external' ? `the destination ${f['destination.domain'] ? `"${f['destination.domain']}" ` : ''}is classified as external; this does not establish whether your organisation trusts it` : undefined],
     ['destination.domain', (v, f) => f['destination.type'] === 'external' ? undefined : `destination host: ${v}`],
     ['url.risk', v => v && v !== 'none' && v !== 'low' ? `the URL was rated ${v} risk` : undefined],
     ['path.sensitive', v => v === 'true' ? 'the path is a sensitive location' : undefined],

package/dist/commands/hook.js

@@ -830,7 +830,7 @@ function prepareDeveloperConfirmation(event, call, payload, source) {
     // Name the rule in the prompt itself: a developer deciding y/n must see WHICH
     // rule is asking and where to change it — same builder as every block.
     const ceilingNote = source.askedInsteadOfBlocked
-        ? 'This policy is set to Block. On a developer workstation it asks you instead of blocking — a wrong Ask costs one click, a wrong block costs your afternoon. An admin can mark the policy "Hard block" in the console to stop this without asking.'
+        ? 'This policy is set to Block. Because it is not marked "Hard block", your workstation requires your approval before continuing. An admin can review the matching rule and its scope in the console.'
         : undefined;
     const explained = source.where === 'local-safety' && source.localFinding
         ? explainLocalSafetyStop('ask', event, call, source.localFinding)

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.34.9"
+  "version": "1.34.11"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.34.9",
+  "version": "1.34.11",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {