mirror of
https://github.com/Ark0N/Codeman.git
synced 2026-10-02 05:29:42 +02:00
arkonandClaude Opus 4.8
b84438a0aa
- M7 (SSRF): add isSafePushEndpoint (https-only; reject internal/loopback/link-local/metadata IPs incl. IPv4-mapped); enforce in PushSubscribeSchema and re-check before webpush.sendNotification. + unit test. - M1 (command injection): validate tmux session names with isValidMuxName in sessionExists, killSession, and reconcileSessions before they reach a shell call site. - M5: keep the intentional /var/log + ~/logs log-tail roots (a tested feature) and document the wider read scope in docs/security-architecture.md section 5 instead of dropping it. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
31 lines
1.1 KiB
TypeScript
31 lines
1.1 KiB
TypeScript
/**
|
|
* @fileoverview Utility module exports.
|
|
*
|
|
* This module re-exports all utility classes and functions for easy import.
|
|
*
|
|
* @module utils
|
|
*/
|
|
|
|
export { BufferAccumulator } from './buffer-accumulator.js';
|
|
export { CleanupManager } from './cleanup-manager.js';
|
|
export { Debouncer, KeyedDebouncer } from './debouncer.js';
|
|
export { startEventLoopMonitor } from './event-loop-monitor.js';
|
|
export type { EventLoopMonitorHandle } from './event-loop-monitor.js';
|
|
export { StaleExpirationMap } from './stale-expiration-map.js';
|
|
export {
|
|
ANSI_ESCAPE_PATTERN_FULL,
|
|
ANSI_ESCAPE_PATTERN_SIMPLE,
|
|
TOKEN_PATTERN,
|
|
SPINNER_PATTERN,
|
|
stripAnsi,
|
|
SAFE_PATH_PATTERN,
|
|
execPattern,
|
|
} from './regex-patterns.js';
|
|
export { MAX_SESSION_TOKENS } from './token-validation.js';
|
|
export { isSafePushEndpoint } from './push-endpoint-validation.js';
|
|
export { stringSimilarity, fuzzyPhraseMatch, todoContentHash } from './string-similarity.js';
|
|
export { assertNever } from './type-safety.js';
|
|
export { wrapWithNice } from './nice-wrapper.js';
|
|
export { findClaudeDir, getAugmentedPath } from './claude-cli-resolver.js';
|
|
export { resolveOpenCodeDir } from './opencode-cli-resolver.js';
|