Spaces:
Runtime error
Runtime error
File size: 3,106 Bytes
cd8bd0a | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 | // Tools whose meaningful prefix is two words (verb + subcommand).
const TWO_WORD_TOOLS = new Set([
"git", "npm", "docker", "kubectl", "cargo", "go", "pip", "yarn", "pnpm", "bun",
]);
const ENV_ASSIGNMENT_RE = /^[A-Za-z_][A-Za-z0-9_]*=/;
// Command-injection signals: ; | & ` $( (newline handled separately)
const INJECTION_RE = /[;|&`]|\$\(/;
/** Tokenize a shell command on whitespace, respecting simple single/double quotes. */
function tokenize(command: string): string[] {
const tokens: string[] = [];
let current = "";
let quote: string | null = null;
for (const ch of command) {
if (quote) {
if (ch === quote) quote = null;
else current += ch;
} else if (ch === '"' || ch === "'") {
quote = ch;
} else if (/\s/.test(ch)) {
if (current) { tokens.push(current); current = ""; }
} else {
current += ch;
}
}
if (current) tokens.push(current);
return tokens;
}
export function extractCommandPrefix(command: string): string {
if (typeof command !== "string" || !command.trim()) return "";
if (INJECTION_RE.test(command) || command.includes("\n")) {
return "command_injection_detected";
}
let tokens = tokenize(command);
// Strip leading FOO=bar env assignments.
while (tokens.length && ENV_ASSIGNMENT_RE.test(tokens[0])) tokens = tokens.slice(1);
if (!tokens.length) return "";
const head = tokens[0];
// Only form a two-word prefix when the second token is an actual subcommand,
// not a flag. We intentionally do not parse flag-arguments (e.g. `git -C <path>`);
// for those we fall back to the single-word head (conservative, never wrong).
if (TWO_WORD_TOOLS.has(head) && tokens.length > 1 && !tokens[1].startsWith("-")) {
return `${head} ${tokens[1]}`;
}
return head;
}
const READ_COMMANDS = new Set(["cat", "head", "tail", "less", "more", "bat", "type"]);
const LISTING_COMMANDS = new Set(["ls", "dir", "find", "tree"]);
// grep flags that consume the NEXT arg (so it is not a filepath).
const GREP_ARG_FLAGS = new Set(["-e", "-f", "-m", "-A", "-B", "-C"]);
export function extractFilepathsFromCommand(command: string, _output = ""): string[] {
if (typeof command !== "string" || !command.trim()) return [];
const tokens = tokenize(command);
if (!tokens.length) return [];
const head = tokens[0];
if (LISTING_COMMANDS.has(head)) return [];
if (head === "grep") {
const files: string[] = [];
let patternConsumed = false;
for (let i = 1; i < tokens.length; i++) {
const tok = tokens[i];
if (tok.startsWith("-")) {
if (GREP_ARG_FLAGS.has(tok)) {
i++; // skip this flag's argument
// -e/-f supply the pattern itself, so the positional pattern is already consumed.
if (tok === "-e" || tok === "-f") patternConsumed = true;
}
continue;
}
if (!patternConsumed) { patternConsumed = true; continue; } // first non-flag = pattern
files.push(tok);
}
return files;
}
if (READ_COMMANDS.has(head)) {
return tokens.slice(1).filter((t) => !t.startsWith("-"));
}
return [];
}
|