crackerjack 0.33.4__py3-none-any.whl → 0.33.6__py3-none-any.whl

crackerjack/services/git.py

@@ -19,7 +19,7 @@ GIT_COMMANDS = {
     "add_updated": ["add", "-u"],
     "push_porcelain": ["push", "--porcelain"],
     "current_branch": ["branch", "--show-current"],
-    "commits_ahead": ["rev-list[t.Any]", "--count", "@{u}..HEAD"],
+    "commits_ahead": ["rev-list", "--count", "@{u}..HEAD"],
 }
 
 

crackerjack/services/secure_subprocess.py

@@ -87,7 +87,7 @@ class SecureSubprocessExecutor:
         self.security_logger = get_security_logger()
 
         self.dangerous_patterns = [
-            r"[;&|`$(){}[\]<>*?~]",
+            r"[;&|`$()[\]<>*?~]",
             r"\.\./",
             r"\$\{.*\}",
             r"`.*`",
@@ -96,6 +96,16 @@ class SecureSubprocessExecutor:
             r"<\s*/",
         ]
 
+        # Git reference patterns that should be allowed despite containing special chars
+        self.allowed_git_patterns = [
+            r"^@\{u\}\.\.HEAD$",  # upstream..HEAD
+            r"^@\{upstream\}\.\.HEAD$",  # upstream..HEAD (long form)
+            r"^HEAD\.\.@\{u\}$",  # HEAD..upstream
+            r"^HEAD\.\.@\{upstream\}$",  # HEAD..upstream (long form)
+            r"^@\{[0-9]+\}$",  # reflog references like @{1}
+            r"^@\{[0-9]+ (minute|hour|day|week|month|year)s? ago\}$",  # time references
+        ]
+
         self.dangerous_env_vars = {
             "LD_PRELOAD",
             "DYLD_INSERT_LIBRARIES",
@@ -316,6 +326,12 @@ class SecureSubprocessExecutor:
         return validated_command, issues
 
     def _has_dangerous_patterns(self, arg: str, index: int, issues: list[str]) -> bool:
+        # First check if this is an allowed git pattern
+        for git_pattern in self.allowed_git_patterns:
+            if re.match(git_pattern, arg):
+                return False  # It's an allowed git pattern, don't flag as dangerous
+
+        # Check for dangerous patterns
         for pattern in self.dangerous_patterns:
             if re.search(pattern, arg):
                 issues.append(

crackerjack/services/security_logger.py

@@ -131,7 +131,8 @@ class SecurityLogger:
             if debug_enabled:
                 console_handler.setLevel(logging.WARNING)
             else:
-                console_handler.setLevel(logging.CRITICAL + 1)
+                # Suppress all security logs during normal operation
+                console_handler.setLevel(logging.CRITICAL + 10)
 
             formatter = logging.Formatter(
                 "%(asctime)s - SECURITY - %(levelname)s-%(message)s"

{crackerjack-0.33.4.dist-info → crackerjack-0.33.6.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: crackerjack
-Version: 0.33.4
+Version: 0.33.6
 Summary: Crackerjack Python project management tool
 Project-URL: documentation, https://github.com/lesleslie/crackerjack
 Project-URL: homepage, https://github.com/lesleslie/crackerjack

{crackerjack-0.33.4.dist-info → crackerjack-0.33.6.dist-info}/RECORD

@@ -174,7 +174,7 @@ crackerjack/services/enterprise_optimizer.py,sha256=q6srIGxe18N9zH-MNhZ9R34sWnr_
 crackerjack/services/error_pattern_analyzer.py,sha256=bTMwhAMAjVPSUXrNkrtm1KDqfxjnyBMGAPwetBUGCM4,24402
 crackerjack/services/file_hasher.py,sha256=eReytwwK-_-B8JBnpwytDC52cKKgg4qpaxaZKcQjD-0,5211
 crackerjack/services/filesystem.py,sha256=nmL3mYqylS_BSQpwFbC7EMHoA44K5qUxa9CPg1QFZvc,17480
-crackerjack/services/git.py,sha256=a5uwUvZn6bmL6LWN_3G7Pfte036IW_dR4mugpuCP_r8,12723
+crackerjack/services/git.py,sha256=g0D9K7PFGWiv_-CbPXEhGtxJVJccEsshYNEmGstjXss,12716
 crackerjack/services/health_metrics.py,sha256=KmwFlvcB-Pb8DnDI0IRV9ETDdp_vJTaGlhJ_HmBL2YY,21538
 crackerjack/services/heatmap_generator.py,sha256=zz5V-zXPfoCGNXoj7iuyOeFuDRRUhFpxuENUnd0X75g,26200
 crackerjack/services/initialization.py,sha256=oq0D9AZtLufvIP8sNOVayaEhW9PAhXb7NFHFcd2RHjs,25772
@@ -199,9 +199,9 @@ crackerjack/services/regex_patterns.py,sha256=iis9gSzXZtnX14lODGfSUsf7bcCRTw7rdS
 crackerjack/services/regex_utils.py,sha256=e7AD59_L-T5-oOxzqsGgrLd94uxRE9aKnwasZkohwI8,14966
 crackerjack/services/secure_path_utils.py,sha256=aHsLwxDch42DidPYtTL_ko40g2rhbXDLnRhcx2LlGk8,16688
 crackerjack/services/secure_status_formatter.py,sha256=yhwNtzvvQVcuHsNOTNZMzlqIMQT9zx-lzAtq9LuSDuk,14121
-crackerjack/services/secure_subprocess.py,sha256=UAXyRgus-PJ4nOfSq9m_Ji8xmni4Hyl7uHmPsJwoQrQ,17308
+crackerjack/services/secure_subprocess.py,sha256=iGXdIUjYZ_ocxwo8OJSmOFJvdmOFXSvluNNgJvU3hFQ,18114
 crackerjack/services/security.py,sha256=plgIz-B8oYN_mpF4NYrqHnT7TRcsp4jr0-YlV9WgD5o,7298
-crackerjack/services/security_logger.py,sha256=B4yuXKi02SRikS8aXLR_fpMrziAAPRvCV6C4vAP60mE,16710
+crackerjack/services/security_logger.py,sha256=_hQUQZekiafpIKyULgVxrQHrwPpTKv89jNf-XWqaAhg,16780
 crackerjack/services/server_manager.py,sha256=IQ0oUFEEMZTxI8csecIJzkCSMESE5KIkYqPxa56tvUw,11399
 crackerjack/services/smart_scheduling.py,sha256=VSaL7DpKR6aa0sC_TUrYP9ZgC9CB7tE3TTNzEqB-GpE,4352
 crackerjack/services/status_authentication.py,sha256=2OJ1MoWlBuvUUXOX02N_zdWKzQfXz4jhEZpsmIJfQ00,16453
@@ -222,8 +222,8 @@ crackerjack/slash_commands/status.md,sha256=U3qqppVLtIIm2lEiMYaKagaHYLI9UplL7OH1
 crackerjack/tools/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 crackerjack/tools/validate_input_validator_patterns.py,sha256=NN7smYlXWrHLQXTb-81gRam2vjW-cJav92f1klPA0qA,8234
 crackerjack/tools/validate_regex_patterns.py,sha256=y2pAp2BzfSC_3XYMIKGMpQFwwwDidPy3k2Y2almOy74,5811
-crackerjack-0.33.4.dist-info/METADATA,sha256=LkBXYa8WJUPs9hm1DLxqIzAGicS1pmesx8Om6pS6qyI,37942
-crackerjack-0.33.4.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-crackerjack-0.33.4.dist-info/entry_points.txt,sha256=AJKNft0WXm9xoGUJ3Trl-iXHOWxRAYbagQiza3AILr4,57
-crackerjack-0.33.4.dist-info/licenses/LICENSE,sha256=fDt371P6_6sCu7RyqiZH_AhT1LdN3sN1zjBtqEhDYCk,1531
-crackerjack-0.33.4.dist-info/RECORD,,
+crackerjack-0.33.6.dist-info/METADATA,sha256=_8Iq2YAJmj7WtB59RQKs64QDkOKe3ZPDUn0yOGLVeXM,37942
+crackerjack-0.33.6.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+crackerjack-0.33.6.dist-info/entry_points.txt,sha256=AJKNft0WXm9xoGUJ3Trl-iXHOWxRAYbagQiza3AILr4,57
+crackerjack-0.33.6.dist-info/licenses/LICENSE,sha256=fDt371P6_6sCu7RyqiZH_AhT1LdN3sN1zjBtqEhDYCk,1531
+crackerjack-0.33.6.dist-info/RECORD,,