opencode-polkit 0.1.0 → 0.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +28 -0
- package/dist/index.js.map +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -31,6 +31,8 @@ Or add to `opencode.json` / `~/.config/opencode/opencode.jsonc`:
|
|
|
31
31
|
| `sudoedit` | blocked | blocked |
|
|
32
32
|
| `visudo` | blocked | blocked |
|
|
33
33
|
|
|
34
|
+
When a user denies the polkit authentication dialog, a clear error message is shown.
|
|
35
|
+
|
|
34
36
|
## i18n
|
|
35
37
|
|
|
36
38
|
Messages adapt to `$LC_MESSAGES` / `$LANG`. Currently supports:
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAe,MAAM,qBAAqB,CAAA;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAe,MAAM,qBAAqB,CAAA;AA2H9D,eAAO,MAAM,YAAY,EAAE,MAgD1B,CAAA"}
|
package/dist/index.js
CHANGED
|
@@ -12,56 +12,67 @@ const translations = {
|
|
|
12
12
|
blocked: "Privilege escalation command blocked by plugin",
|
|
13
13
|
noPolkit: "sudo/doas blocked: no polkit agent detected, cannot escalate safely",
|
|
14
14
|
noPolkitPkexec: "pkexec unavailable: no polkit agent detected",
|
|
15
|
+
polkitDenied: "Polkit authentication denied by user",
|
|
15
16
|
},
|
|
16
17
|
zh: {
|
|
17
18
|
blocked: "权限提升命令已被插件拦截",
|
|
18
19
|
noPolkit: "sudo/doas 已被拦截：未检测到 polkit agent，无法安全提权",
|
|
19
20
|
noPolkitPkexec: "pkexec 不可用：未检测到 polkit agent",
|
|
21
|
+
polkitDenied: "Polkit 认证已被用户拒绝",
|
|
20
22
|
},
|
|
21
23
|
ja: {
|
|
22
24
|
blocked: "特権昇格コマンドはプラグインによりブロックされました",
|
|
23
25
|
noPolkit: "sudo/doas がブロックされました：polkit エージェントが見つからないため、安全に昇格できません",
|
|
24
26
|
noPolkitPkexec: "pkexec は利用できません：polkit エージェントが見つかりません",
|
|
27
|
+
polkitDenied: "Polkit 認証がユーザーによって拒否されました",
|
|
25
28
|
},
|
|
26
29
|
ko: {
|
|
27
30
|
blocked: "권한 상승 명령이 플러그인에 의해 차단되었습니다",
|
|
28
31
|
noPolkit: "sudo/doas 차단됨: polkit 에이전트가 감지되지 않아 안전하게 권한 상승할 수 없습니다",
|
|
29
32
|
noPolkitPkexec: "pkexec 사용 불가: polkit 에이전트가 감지되지 않았습니다",
|
|
33
|
+
polkitDenied: "Polkit 인증이 사용자에 의해 거부되었습니다",
|
|
30
34
|
},
|
|
31
35
|
de: {
|
|
32
36
|
blocked: "Berechtigungseskalation vom Plugin blockiert",
|
|
33
37
|
noPolkit: "sudo/doas blockiert: kein polkit-Agent erkannt, sichere Eskalation nicht möglich",
|
|
34
38
|
noPolkitPkexec: "pkexec nicht verfügbar: kein polkit-Agent erkannt",
|
|
39
|
+
polkitDenied: "Polkit-Authentifizierung vom Benutzer abgelehnt",
|
|
35
40
|
},
|
|
36
41
|
fr: {
|
|
37
42
|
blocked: "Commande d'élévation de privilèges bloquée par le plugin",
|
|
38
43
|
noPolkit: "sudo/doas bloqué : aucun agent polkit détecté, élévation impossible",
|
|
39
44
|
noPolkitPkexec: "pkexec indisponible : aucun agent polkit détecté",
|
|
45
|
+
polkitDenied: "Authentification polkit refusée par l'utilisateur",
|
|
40
46
|
},
|
|
41
47
|
es: {
|
|
42
48
|
blocked: "Comando de elevación de privilegios bloqueado por el plugin",
|
|
43
49
|
noPolkit: "sudo/doas bloqueado: no se detectó agente polkit, no se puede elevar de forma segura",
|
|
44
50
|
noPolkitPkexec: "pkexec no disponible: no se detectó agente polkit",
|
|
51
|
+
polkitDenied: "Autenticación polkit denegada por el usuario",
|
|
45
52
|
},
|
|
46
53
|
pt: {
|
|
47
54
|
blocked: "Comando de elevação de privilégios bloqueado pelo plugin",
|
|
48
55
|
noPolkit: "sudo/doas bloqueado: nenhum agente polkit detectado, não é possível elevar com segurança",
|
|
49
56
|
noPolkitPkexec: "pkexec indisponível: nenhum agente polkit detectado",
|
|
57
|
+
polkitDenied: "Autenticação polkit negada pelo usuário",
|
|
50
58
|
},
|
|
51
59
|
ru: {
|
|
52
60
|
blocked: "Команда повышения привилегий заблокирована плагином",
|
|
53
61
|
noPolkit: "sudo/doas заблокирован: не обнаружен polkit-агент, невозможно безопасно повысить привилегии",
|
|
54
62
|
noPolkitPkexec: "pkexec недоступен: не обнаружен polkit-агент",
|
|
63
|
+
polkitDenied: "Аутентификация polkit отклонена пользователем",
|
|
55
64
|
},
|
|
56
65
|
tr: {
|
|
57
66
|
blocked: "Yetki yükseltme komutu eklenti tarafından engellendi",
|
|
58
67
|
noPolkit: "sudo/doas engellendi: polkit aracısı algılanmadı, güvenli şekilde yetki yükseltilemez",
|
|
59
68
|
noPolkitPkexec: "pkexec kullanılamıyor: polkit aracısı algılanmadı",
|
|
69
|
+
polkitDenied: "Polkit kimlik doğrulaması kullanıcı tarafından reddedildi",
|
|
60
70
|
},
|
|
61
71
|
uk: {
|
|
62
72
|
blocked: "Команду підвищення привілеїв заблоковано плагіном",
|
|
63
73
|
noPolkit: "sudo/doas заблоковано: не виявлено агента polkit, неможливо безпечно підвищити привілеї",
|
|
64
74
|
noPolkitPkexec: "pkexec недоступний: не виявлено агента polkit",
|
|
75
|
+
polkitDenied: "Автентифікацію polkit відхилено користувачем",
|
|
65
76
|
},
|
|
66
77
|
};
|
|
67
78
|
function detectLocale() {
|
|
@@ -98,6 +109,7 @@ function polkitAvailable() {
|
|
|
98
109
|
}
|
|
99
110
|
const hasPolkit = polkitAvailable();
|
|
100
111
|
export const PolkitPlugin = async (_input) => {
|
|
112
|
+
const deniedCommands = new Set();
|
|
101
113
|
return {
|
|
102
114
|
"tool.execute.before": async (hookInput, hookOutput) => {
|
|
103
115
|
if (hookInput.tool !== "bash")
|
|
@@ -105,6 +117,9 @@ export const PolkitPlugin = async (_input) => {
|
|
|
105
117
|
const command = hookOutput?.args?.command ?? "";
|
|
106
118
|
if (!MATCH.test(command))
|
|
107
119
|
return;
|
|
120
|
+
if (deniedCommands.has(command)) {
|
|
121
|
+
throw new Error(MSG.polkitDenied);
|
|
122
|
+
}
|
|
108
123
|
if (/^pkexec(?![-\/.\w])/.test(command.trim())) {
|
|
109
124
|
if (!hasPolkit)
|
|
110
125
|
throw new Error(MSG.noPolkitPkexec);
|
|
@@ -118,6 +133,19 @@ export const PolkitPlugin = async (_input) => {
|
|
|
118
133
|
}
|
|
119
134
|
hookOutput.args.command = command.replace(/(?<![-\/.\w])(sudo|doas)(?![-\/.\w])/, "pkexec");
|
|
120
135
|
},
|
|
136
|
+
"tool.execute.after": async (hookInput, hookOutput) => {
|
|
137
|
+
if (hookInput.tool !== "bash")
|
|
138
|
+
return;
|
|
139
|
+
const command = hookInput.args?.command ?? "";
|
|
140
|
+
if (!MATCH.test(command))
|
|
141
|
+
return;
|
|
142
|
+
const originalCommand = command.replace(/(?<![-\/.\w])pkexec(?![-\/.\w])/, "sudo");
|
|
143
|
+
if (/\bNot authorized\b/.test(hookOutput.output) ||
|
|
144
|
+
/\bError executing command as another user\b/.test(hookOutput.output)) {
|
|
145
|
+
deniedCommands.add(originalCommand);
|
|
146
|
+
throw new Error(MSG.polkitDenied);
|
|
147
|
+
}
|
|
148
|
+
},
|
|
121
149
|
};
|
|
122
150
|
};
|
|
123
151
|
//# sourceMappingURL=index.js.map
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,MAAM,KAAK,GAAG,8DAA8D,CAAA;AAE5E,MAAM,aAAa,GAAG;IACpB,mCAAmC;IACnC,qCAAqC;IACrC,sBAAsB;IACtB,aAAa;IACb,aAAa;IACb,kBAAkB;CACnB,CAAA;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,MAAM,KAAK,GAAG,8DAA8D,CAAA;AAE5E,MAAM,aAAa,GAAG;IACpB,mCAAmC;IACnC,qCAAqC;IACrC,sBAAsB;IACtB,aAAa;IACb,aAAa;IACb,kBAAkB;CACnB,CAAA;AASD,MAAM,YAAY,GAA6B;IAC7C,EAAE,EAAE;QACF,OAAO,EAAE,gDAAgD;QACzD,QAAQ,EAAE,qEAAqE;QAC/E,cAAc,EAAE,8CAA8C;QAC9D,YAAY,EAAE,sCAAsC;KACrD;IACD,EAAE,EAAE;QACF,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,yCAAyC;QACnD,cAAc,EAAE,8BAA8B;QAC9C,YAAY,EAAE,iBAAiB;KAChC;IACD,EAAE,EAAE;QACF,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,wDAAwD;QAClE,cAAc,EAAE,uCAAuC;QACvD,YAAY,EAAE,2BAA2B;KAC1C;IACD,EAAE,EAAE;QACF,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,wDAAwD;QAClE,cAAc,EAAE,uCAAuC;QACvD,YAAY,EAAE,4BAA4B;KAC3C;IACD,EAAE,EAAE;QACF,OAAO,EAAE,8CAA8C;QACvD,QAAQ,EAAE,kFAAkF;QAC5F,cAAc,EAAE,mDAAmD;QACnE,YAAY,EAAE,iDAAiD;KAChE;IACD,EAAE,EAAE;QACF,OAAO,EAAE,0DAA0D;QACnE,QAAQ,EAAE,qEAAqE;QAC/E,cAAc,EAAE,kDAAkD;QAClE,YAAY,EAAE,mDAAmD;KAClE;IACD,EAAE,EAAE;QACF,OAAO,EAAE,6DAA6D;QACtE,QAAQ,EAAE,sFAAsF;QAChG,cAAc,EAAE,mDAAmD;QACnE,YAAY,EAAE,8CAA8C;KAC7D;IACD,EAAE,EAAE;QACF,OAAO,EAAE,0DAA0D;QACnE,QAAQ,EAAE,0FAA0F;QACpG,cAAc,EAAE,qDAAqD;QACrE,YAAY,EAAE,yCAAyC;KACxD;IACD,EAAE,EAAE;QACF,OAAO,EAAE,qDAAqD;QAC9D,QAAQ,EAAE,6FAA6F;QACvG,cAAc,EAAE,8CAA8C;QAC9D,YAAY,EAAE,+CAA+C;KAC9D;IACD,EAAE,EAAE;QACF,OAAO,EAAE,sDAAsD;QAC/D,QAAQ,EAAE,uFAAuF;QACjG,cAAc,EAAE,mDAAmD;QACnE,YAAY,EAAE,2DAA2D;KAC1E;IACD,EAAE,EAAE;QACF,OAAO,EAAE,mDAAmD;QAC5D,QAAQ,EAAE,yFAAyF;QACnG,cAAc,EAAE,+CAA+C;QAC/D,YAAY,EAAE,8CAA8C;KAC7D;CACF,CAAA;AAED,SAAS,YAAY;IACnB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAA;IAC/D,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;IAC9D,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAClF,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAA;IAC3C,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,GAAG,GAAa,YAAY,CAAC,YAAY,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,CAAA;AAErE,SAAS,eAAe;IACtB,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACvD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAA;YACF,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBACrF,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,EAAE;YAC5D,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAA;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,eAAe,EAAE,CAAA;AAEnC,MAAM,CAAC,MAAM,YAAY,GAAW,KAAK,EAAE,MAAmB,EAAE,EAAE;IAChE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAA;IAExC,OAAO;QACL,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE;YACrD,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAM;YACrC,MAAM,OAAO,GAAW,UAAU,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,CAAA;YACvD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAM;YAEhC,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;YACnC,CAAC;YAED,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;gBACnD,OAAM;YACR,CAAC;YAED,IAAI,4CAA4C,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAC9B,CAAC;YAED,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAC/B,CAAC;YAED,UAAU,CAAC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CACvC,sCAAsC,EACtC,QAAQ,CACT,CAAA;QACH,CAAC;QACD,oBAAoB,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE;YACpD,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAM;YACrC,MAAM,OAAO,GAAW,SAAS,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAA;YACrD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAM;YAEhC,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CACrC,iCAAiC,EACjC,MAAM,CACP,CAAA;YAED,IAAI,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC5C,6CAA6C,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1E,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;gBACnC,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;YACnC,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC,CAAA"}
|