Something went wrong. Try again.
My version of https://github.com/vercel-labs/fx
Something went wrong. Try again.
15 kB · 437 lines
Zig
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438const std = @import("std");const lex = @import("command_lex.zig");
const whitespace = " \t\r\n";
pub const Token = struct { text: []const u8, start: usize, end: usize,};
/// Returns true when a command grant should preserve the full command text.pub fn command_requires_literal_pattern(token: []const u8) bool { return command_hides_base_token(token);}
fn command_hides_base_token(token: []const u8) bool { return is_shell_command(token) or is_delegating_command(token) or is_privilege_prefix(token);}
fn is_shell_command(token: []const u8) bool { return std.mem.eql(u8, token, "sh") or std.mem.eql(u8, token, "bash") or std.mem.eql(u8, token, "zsh") or std.mem.eql(u8, token, "dash") or std.mem.eql(u8, token, "ksh") or std.mem.eql(u8, token, "csh") or std.mem.eql(u8, token, "tcsh") or std.mem.eql(u8, token, "fish") or std.mem.eql(u8, token, "cmd") or std.mem.eql(u8, token, "powershell") or std.mem.eql(u8, token, "pwsh");}
fn is_delegating_command(token: []const u8) bool { return std.mem.eql(u8, token, "env") or std.mem.eql(u8, token, "xargs") or std.mem.eql(u8, token, "nice") or std.mem.eql(u8, token, "stdbuf") or std.mem.eql(u8, token, "unbuffer") or std.mem.eql(u8, token, "nohup") or std.mem.eql(u8, token, "timeout") or std.mem.eql(u8, token, "time");}
fn is_privilege_prefix(token: []const u8) bool { return std.mem.eql(u8, token, "sudo") or std.mem.eql(u8, token, "doas") or std.mem.eql(u8, token, "su");}
fn is_safe_env_command(token: []const u8) bool { return std.mem.eql(u8, token, "env");}
fn is_safe_priority_prefix(token: []const u8) bool { return std.mem.eql(u8, token, "nice");}
fn is_safe_stdio_prefix(token: []const u8) bool { return std.mem.eql(u8, token, "stdbuf");}
fn is_safe_passthrough_prefix(token: []const u8) bool { return std.mem.eql(u8, token, "unbuffer") or std.mem.eql(u8, token, "nohup") or std.mem.eql(u8, token, "time");}
fn is_safe_timeout_prefix(token: []const u8) bool { return std.mem.eql(u8, token, "timeout");}
/// Returns the first non-env command token when it is safe to identify.pub fn base_command_token(command: []const u8) ?[]const u8 { if (std.mem.findScalar(u8, command, '\n') != null) return null;
var cursor = skip_whitespace(command, 0); while (next_token(command, cursor)) |token| { if (is_env_assignment(token.text)) { if (!is_safe_env_assignment(token.text)) return null; cursor = token.end; continue; }
if (command_hides_base_token(token.text)) return null; if (!is_accepted_command_identifier(token.text)) return null; return token.text; } return null;}
/// Returns the command tail after peeling only safe analysis prefixes.pub fn analysis_command_tail(command: []const u8) []const u8 { const original = command; var cursor = skip_whitespace(command, 0); var peeled = false;
while (next_token(command, cursor)) |token| { if (is_env_assignment(token.text)) { if (!is_safe_env_assignment(token.text)) return original; cursor = token.end; peeled = true; continue; }
if (is_safe_env_command(token.text)) { const env_arg = next_token(command, token.end) orelse return original; if (!is_env_assignment(env_arg.text) or !is_safe_env_assignment(env_arg.text)) return original; cursor = env_arg.end; peeled = true; continue; }
if (is_safe_priority_prefix(token.text)) { cursor = skip_nice_args(command, token.end); peeled = true; continue; } if (is_safe_stdio_prefix(token.text)) { cursor = skip_stdbuf_args(command, token.end); peeled = true; continue; } if (is_safe_passthrough_prefix(token.text)) { cursor = token.end; peeled = true; continue; } if (is_safe_timeout_prefix(token.text)) { const duration = next_token(command, token.end) orelse return original; if (!is_timeout_duration(duration.text)) return original; cursor = duration.end; peeled = true; continue; }
return command[token.start..]; }
return if (peeled) command[cursor..] else original;}
/// Returns the deterministic final command segment for default sh list semantics.pub fn terminal_exit_segment(command: []const u8) ?[]const u8 { const trimmed = std.mem.trim(u8, command, whitespace); if (trimmed.len == 0) return null;
var in_single = false; var in_double = false; var escaped = false; var segment_start: usize = 0; var i: usize = 0;
while (i < command.len) : (i += 1) { const ch = command[i]; if (escaped) { escaped = false; continue; } if (ch == '\\' and !in_single) { escaped = true; continue; } if (ch == '\'' and !in_double) { in_single = !in_single; continue; } if (ch == '"' and !in_single) { in_double = !in_double; continue; } if (in_single or in_double) continue;
switch (ch) { '&' => { if (i + 1 < command.len and command[i + 1] == '&') return null; return null; }, '|' => { if (i + 1 < command.len and command[i + 1] == '|') return null; segment_start = i + 1; }, ';', '\n' => segment_start = i + 1, else => {}, } }
if (in_single or in_double) return null; const segment = std.mem.trim(u8, command[segment_start..], whitespace); return if (segment.len == 0) null else segment;}
pub fn skip_whitespace(input: []const u8, start: usize) usize { var cursor = start; while (cursor < input.len and is_whitespace(input[cursor])) : (cursor += 1) {} return cursor;}
pub fn next_token(input: []const u8, start: usize) ?Token { const token_start = skip_whitespace(input, start); if (token_start >= input.len) return null; var token_end = token_start; while (token_end < input.len and !is_whitespace(input[token_end])) : (token_end += 1) {} return .{ .text = input[token_start..token_end], .start = token_start, .end = token_end };}
fn is_whitespace(ch: u8) bool { return ch == ' ' or ch == '\t' or ch == '\r' or ch == '\n';}
pub fn is_env_assignment(token: []const u8) bool { const eq = std.mem.findScalar(u8, token, '=') orelse return false; if (eq == 0) return false; return is_env_name(token[0..eq]);}
fn is_env_name(name: []const u8) bool { if (name.len == 0) return false; if (!is_ascii_upper(name[0]) and name[0] != '_') return false; for (name[1..]) |ch| { if (!is_ascii_upper(ch) and !is_ascii_digit(ch) and ch != '_') return false; } return true;}
fn is_safe_env_assignment(token: []const u8) bool { return lex.is_safe_env_assignment(token);}
fn is_accepted_command_identifier(token: []const u8) bool { if (std.mem.eql(u8, token, "[")) return true; if (token.len == 0) return false;
var saw_letter = false; var prev_hyphen = false; for (token, 0..) |ch, i| { if (is_ascii_lower(ch)) { saw_letter = true; prev_hyphen = false; continue; } if (is_ascii_digit(ch)) { prev_hyphen = false; continue; } if (ch == '-') { if (i == 0 or i + 1 == token.len or prev_hyphen) return false; prev_hyphen = true; continue; } return false; } return saw_letter and !prev_hyphen;}
fn skip_nice_args(command: []const u8, start: usize) usize { const first = next_token(command, start) orelse return start; if (std.mem.eql(u8, first.text, "-n")) { const value = next_token(command, first.end) orelse return start; return value.end; } if (first.text.len > 1 and first.text[0] == '-' and is_ascii_digit(first.text[1])) return first.end; return start;}
fn skip_stdbuf_args(command: []const u8, start: usize) usize { var cursor = start; while (next_token(command, cursor)) |token| { if (!std.mem.startsWith(u8, token.text, "-")) break; cursor = token.end; } return cursor;}
fn is_timeout_duration(token: []const u8) bool { if (token.len == 0 or !is_ascii_digit(token[0])) return false; var saw_digit = false; var saw_dot = false; for (token, 0..) |ch, i| { if (is_ascii_digit(ch)) { saw_digit = true; continue; } if (ch == '.' and !saw_dot and i + 1 < token.len) { saw_dot = true; continue; } if (i + 1 == token.len and (ch == 's' or ch == 'm' or ch == 'h' or ch == 'd')) { return saw_digit; } return false; } return saw_digit;}
fn is_ascii_lower(ch: u8) bool { return ch >= 'a' and ch <= 'z';}
fn is_ascii_upper(ch: u8) bool { return ch >= 'A' and ch <= 'Z';}
fn is_ascii_digit(ch: u8) bool { return ch >= '0' and ch <= '9';}
test "literal pattern predicate covers delegated and privileged commands" { try std.testing.expect(command_requires_literal_pattern("bash")); try std.testing.expect(command_requires_literal_pattern("cmd")); try std.testing.expect(command_requires_literal_pattern("env")); try std.testing.expect(command_requires_literal_pattern("nice")); try std.testing.expect(command_requires_literal_pattern("sudo")); try std.testing.expect(command_requires_literal_pattern("doas")); try std.testing.expect(command_requires_literal_pattern("su")); try std.testing.expect(!command_requires_literal_pattern("grep"));}
test "analysis command tail leaves bare command unchanged" { try std.testing.expectEqualStrings("grep foo bar.txt", analysis_command_tail("grep foo bar.txt"));}
test "analysis command tail starts at first plain command token" { try std.testing.expectEqualStrings("grep foo", analysis_command_tail("nice grep foo"));}
test "known env prefix is transparent to command analysis" { try std.testing.expectEqualStrings("grep", base_command_token("NODE_ENV=prod grep foo").?); try std.testing.expectEqualStrings("grep foo", analysis_command_tail("NODE_ENV=prod grep foo"));}
test "unknown env prefix fails closed" { try std.testing.expect(base_command_token("MY_SECRET=x grep foo") == null); try std.testing.expectEqualStrings("MY_SECRET=x grep foo", analysis_command_tail("MY_SECRET=x grep foo"));}
test "shell first word is not analyzed as base command" { try std.testing.expect(base_command_token("bash -c 'echo hi'") == null); try std.testing.expectEqualStrings("bash -c 'echo hi'", analysis_command_tail("bash -c 'echo hi'"));}
test "priority adjustment prefix is transparent to policy analysis" { try std.testing.expectEqualStrings("grep foo", analysis_command_tail("nice grep foo"));}
test "timeout prefix advances past its duration argument" { try std.testing.expectEqualStrings("grep foo bar", analysis_command_tail("timeout 5 grep foo bar"));}
test "env command is transparent only with a known assignment" { try std.testing.expectEqualStrings("grep foo", analysis_command_tail("env NODE_ENV=prod grep foo"));}
test "env command with flag fails closed" { try std.testing.expectEqualStrings("env -i grep foo", analysis_command_tail("env -i grep foo"));}
test "env command with unknown assignment fails closed" { try std.testing.expectEqualStrings("env MY_SECRET=x grep foo", analysis_command_tail("env MY_SECRET=x grep foo"));}
test "env command with bare command fails closed" { try std.testing.expectEqualStrings("env grep foo", analysis_command_tail("env grep foo"));}
test "xargs remains the analysis command because stdin supplies arguments" { try std.testing.expectEqualStrings("xargs grep foo", analysis_command_tail("xargs grep foo"));}
test "privilege prefixes remain anchored during generic analysis" { try std.testing.expectEqualStrings("sudo rm -rf /", analysis_command_tail("sudo rm -rf /")); try std.testing.expectEqualStrings("doas rm -rf /", analysis_command_tail("doas rm -rf /")); try std.testing.expectEqualStrings("su -c 'rm -rf /'", analysis_command_tail("su -c 'rm -rf /'"));}
test "base command token returns normal command identifiers" { try std.testing.expectEqualStrings("python3", base_command_token("python3 file.py").?);}
test "base command token rejects unknown env prefix" { try std.testing.expect(base_command_token("MY_SECRET=x grep foo") == null);}
test "base command token rejects unsafe token shapes" { try std.testing.expect(base_command_token("-rf /tmp") == null); try std.testing.expect(base_command_token("./script") == null); try std.testing.expect(base_command_token("123") == null); try std.testing.expect(base_command_token("foo.bar") == null);}
test "base command token accepts bracket alias only as symbolic token" { try std.testing.expectEqualStrings("[", base_command_token("[ -f foo ]").?); try std.testing.expect(base_command_token("] -f foo") == null);}
test "empty input returns null or original slice" { try std.testing.expect(base_command_token(" \t ") == null); try std.testing.expectEqualStrings(" \t ", analysis_command_tail(" \t "));}
test "multiline first word fails closed while analysis stays anchored" { try std.testing.expect(base_command_token("grep foo\nrm bar") == null); try std.testing.expectEqualStrings("grep foo\nrm bar", analysis_command_tail("grep foo\nrm bar"));}
test "terminal segment returns command without operators" { try std.testing.expectEqualStrings("grep foo bar.txt", terminal_exit_segment("grep foo bar.txt").?);}
test "terminal segment returns last pipe segment" { try std.testing.expectEqualStrings("grep changed", terminal_exit_segment("diff a b | grep changed").?);}
test "terminal segment returns last sequence segment" { try std.testing.expectEqualStrings("grep foo bar.txt", terminal_exit_segment("ls -la; grep foo bar.txt").?);}
test "terminal segment returns last newline segment" { try std.testing.expectEqualStrings("grep foo bar.txt", terminal_exit_segment("ls -la\ngrep foo bar.txt").?);}
test "terminal segment handles mixed pipes and sequences" { try std.testing.expectEqualStrings("grep c", terminal_exit_segment("printf a | grep b; grep c").?);}
test "terminal segment declines short circuit and background operators" { try std.testing.expect(terminal_exit_segment("grep foo bar && echo done") == null); try std.testing.expect(terminal_exit_segment("true & grep foo bar") == null);}
test "terminal segment ignores quoted pipe and rejects unbalanced quote" { try std.testing.expectEqualStrings("grep 'foo|bar' baz", terminal_exit_segment("grep 'foo|bar' baz").?); try std.testing.expect(terminal_exit_segment("grep 'foo bar") == null);}