opencode-workflow-guard 1.3.2 → 1.3.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-workflow-guard",
-  "version": "1.3.2",
+  "version": "1.3.3",
   "description": "OpenCode plugin enforcing workflow discipline through deterministic tool.execute.before hooks",
   "license": "MIT",
   "type": "module",

package/src/lib/state.ts

@@ -171,6 +171,72 @@ export function resetReviewState(): void {
 
 export let cachedProjectConfig: ProjectConfig | undefined;
 
+/**
+ * Strips single-line comments, block comments, and trailing commas from JSONC
+ * text without corrupting comment markers inside string literals or URLs.
+ */
+export function stripJsonComments(jsonc: string): string {
+	let insideString = false;
+	let stringQuote = "";
+	let escaped = false;
+	let output = "";
+	let i = 0;
+
+	while (i < jsonc.length) {
+		const char = jsonc[i]!;
+		const next = jsonc[i + 1];
+
+		if (escaped) {
+			output += char;
+			escaped = false;
+			i++;
+			continue;
+		}
+
+		if (char === "\\") {
+			output += char;
+			escaped = true;
+			i++;
+			continue;
+		}
+
+		if (char === '"' || char === "'") {
+			if (!insideString) {
+				insideString = true;
+				stringQuote = char;
+			} else if (stringQuote === char) {
+				insideString = false;
+			}
+			output += char;
+			i++;
+			continue;
+		}
+
+		if (!insideString) {
+			if (char === "/" && next === "/") {
+				i += 2;
+				while (i < jsonc.length && jsonc[i] !== "\n" && jsonc[i] !== "\r") {
+					i++;
+				}
+				continue;
+			}
+			if (char === "/" && next === "*") {
+				i += 2;
+				while (i < jsonc.length && !(jsonc[i] === "*" && jsonc[i + 1] === "/")) {
+					i++;
+				}
+				i += 2;
+				continue;
+			}
+		}
+
+		output += char;
+		i++;
+	}
+
+	return output.replace(/,(\s*[}\]])/g, "$1");
+}
+
 export function loadProjectConfig(root: string): ProjectConfig {
 	const candidates = [
 		join(root, ".opencode", "workflow-guard.json"),
@@ -181,7 +247,8 @@ export function loadProjectConfig(root: string): ProjectConfig {
 	for (const candidate of candidates) {
 		try {
 			const raw = readFileSync(candidate, "utf8");
-			return JSON.parse(raw);
+			const sanitized = stripJsonComments(raw);
+			return JSON.parse(sanitized);
 		} catch {}
 	}
 	return {};

package/src/policies/interpreter.ts

@@ -49,25 +49,25 @@ export function secretPathInPayload(payload: string): string | undefined {
 	return undefined;
 }
 
-const WRITE_VERB_RE =
-	/\b(?:write|writeFile|writeFileSync|write_text|writeTextFile|appendFile|appendFileSync|createWriteStream|unlink|unlinkSync|rm|rmSync|rmdir|rmdirSync|mkdir|mkdirSync|rename|renameSync|copy|cp|cpSync|truncate|move|shutil|remove|delete)\b|\bopen\s*\(\s*["'][^"']*["']\s*,\s*["'][wa]/i;
+const FUNCTION_TARGET_PATTERNS: RegExp[] = [
+	/\b(?:writeFileSync|writeFile|appendFile|appendFileSync|createWriteStream|unlink|unlinkSync|rmSync|rmdirSync|mkdirSync|renameSync|copyFileSync|cpSync|truncateSync)\s*\(\s*["']([^"']+)["']/g,
+	/\b(?:open|os\.remove|os\.unlink|os\.rmdir|os\.mkdir|os\.makedirs|os\.rename|shutil\.rmtree|shutil\.copy|shutil\.copy2|shutil\.move|Path)\s*\(\s*["']([^"']+)["']/g,
+	/[>]{1,2}\s*["']?([^\s;&"'|)]+)/g,
+];
 
 /**
  * Detects workspace boundary escapes (writes/redirects to paths outside the
- * workspace root) initiated from inline interpreter payloads.
+ * workspace root) initiated from inline interpreter payloads. Extracts destination
+ * file arguments from file-writing APIs and shell redirects.
  */
 export function outsideWritePathInPayload(payload: string, root: string): string | undefined {
-	const hasWrite = WRITE_VERB_RE.test(payload) || /[>]{1,2}\s*\S/.test(payload);
-	if (!hasWrite) return undefined;
-
 	const candidates = new Set<string>();
-	const redirectMatches = payload.matchAll(/[>]{1,2}\s*["']?([^\s;&"'|)]+)/g);
-	for (const m of redirectMatches) {
-		if (m[1]) candidates.add(m[1]);
-	}
-	const literalMatches = payload.matchAll(/["']([^"']{2,})["']/g);
-	for (const m of literalMatches) {
-		if (m[1]) candidates.add(m[1]);
+
+	for (const pattern of FUNCTION_TARGET_PATTERNS) {
+		const matches = payload.matchAll(pattern);
+		for (const m of matches) {
+			if (m[1]) candidates.add(m[1]);
+		}
 	}
 
 	for (const candidate of candidates) {

package/src/policies/tamper.ts

@@ -18,7 +18,7 @@ export const SETTINGS_TAMPER_PATTERNS: RegExp[] = [
 	new RegExp(`${GT}\\s*["']?[\\w\\/.~-]*(?:${C_LIST})`, "i"),
 	new RegExp(`(?:^|\\s)(?:${V_LIST})\\s+[^|;&]*?[\\w\\/.~-]*(?:${U_LIST})`, "i"),
 	new RegExp(`${GT}\\s*["']?[\\w\\/.~-]*(?:${U_LIST})`, "i"),
-	new RegExp("(?:" + "^|\\s)(?:op" + "encode)\\s+(?:auth|config|permission)\\b", "i"),
+	new RegExp("(?:" + "^|\\s)(?:op" + "encode)\\s+(?:-[^|;&]*\\s+)*(?:auth|config|permission)\\b", "i"),
 	new RegExp("(?:" + "^|\\s)(?:op" + "encode)\\s+(?:run\\s+)?--auto\\b", "i"),
 ];
 

package/src/workflow-guard.ts

@@ -44,6 +44,7 @@ import {
 	sessionVerifyResults,
 	loadProjectConfig,
 	reloadProjectConfig,
+	stripJsonComments,
 	isReviewRequired,
 	isDocumentationRequired,
 	recordReviewResult,
@@ -64,6 +65,7 @@ export {
 	resetVerifyState,
 	loadProjectConfig,
 	reloadProjectConfig,
+	stripJsonComments,
 	isReviewRequired,
 	isDocumentationRequired,
 	recordReviewResult,