David Blass
bc28c658f2
* harden sandbox escape vectors for bash disabled/restricted modes block git config injection (-c flag as subcommand), dangerous subcommands (config, submodule, rebase, bisect), code-executing arg flags (--exec, --extcmd), .gitattributes/.gitmodules writes, and package lifecycle scripts. add retry logic to test runner for transient failures. add security unit tests and adhoc attack tests. Co-authored-by: Cursor <cursoragent@cursor.com> * only filter subcommands in nobash, remove nobash from ui * use regex matching * iterate on tests * simplify githooks --------- Co-authored-by: Cursor <cursoragent@cursor.com>
43 lines
1.4 KiB
TypeScript
43 lines
1.4 KiB
TypeScript
import { log } from "../utils/cli.ts";
|
|
import { installNodeDependencies } from "./installNodeDependencies.ts";
|
|
import { installPythonDependencies } from "./installPythonDependencies.ts";
|
|
import type { PrepDefinition, PrepOptions, PrepResult } from "./types.ts";
|
|
|
|
export type { PrepOptions, PrepResult } from "./types.ts";
|
|
|
|
// register all prep steps here
|
|
const prepSteps: PrepDefinition[] = [installNodeDependencies, installPythonDependencies];
|
|
|
|
/**
|
|
* run all prep steps sequentially.
|
|
* failures are logged as warnings but don't stop the run.
|
|
*/
|
|
export async function runPrepPhase(options: PrepOptions): Promise<PrepResult[]> {
|
|
log.debug("» starting prep phase...");
|
|
const startTime = Date.now();
|
|
const results: PrepResult[] = [];
|
|
|
|
for (const step of prepSteps) {
|
|
const shouldRun = await step.shouldRun();
|
|
if (!shouldRun) {
|
|
log.debug(`» skipping ${step.name} (not applicable)`);
|
|
continue;
|
|
}
|
|
|
|
log.debug(`» running ${step.name}...`);
|
|
const result = await step.run(options);
|
|
results.push(result);
|
|
|
|
if (result.dependenciesInstalled) {
|
|
log.debug(`» ${step.name}: dependencies installed`);
|
|
} else if (result.issues.length > 0) {
|
|
log.warning(`» ${step.name}: ${result.issues[0]}`);
|
|
}
|
|
}
|
|
|
|
const totalDurationMs = Date.now() - startTime;
|
|
log.debug(`» prep phase completed (${totalDurationMs}ms)`);
|
|
|
|
return results;
|
|
}
|