74 lines
2.5 KiB
JavaScript
74 lines
2.5 KiB
JavaScript
|
"use strict";
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Env construction for SDK agent subprocesses.
|
||
|
|
*
|
||
|
|
* Consolidates the env hardening that previously lived in
|
||
|
|
* the removed raw-process handler (DANGEROUS_ENV_KEYS) and the per-spawn merge
|
||
|
|
* helpers used by SDK agent launches.
|
||
|
|
* Callers inject the netcatty helpers so this module stays pure/testable.
|
||
|
|
*/
|
||
|
|
|
||
|
|
// Env var names that can be used for code injection into a child process.
|
||
|
|
// Mirror of the set in the (now-removed) raw agent spawn handler.
|
||
|
|
const DANGEROUS_ENV_KEYS = new Set([
|
||
|
|
"LD_PRELOAD", "LD_LIBRARY_PATH",
|
||
|
|
"DYLD_INSERT_LIBRARIES", "DYLD_LIBRARY_PATH", "DYLD_FRAMEWORK_PATH",
|
||
|
|
"NODE_OPTIONS", "ELECTRON_RUN_AS_NODE",
|
||
|
|
"PYTHONPATH", "RUBYLIB", "PERL5LIB",
|
||
|
|
"BASH_ENV", "ENV", "CDPATH", "PROMPT_COMMAND",
|
||
|
|
]);
|
||
|
|
|
||
|
|
function isDangerousEnvKey(key) {
|
||
|
|
const normalized = String(key || "").toUpperCase();
|
||
|
|
return DANGEROUS_ENV_KEYS.has(normalized) || normalized.startsWith("BASH_FUNC_");
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Build the env handed to an SDK agent subprocess.
|
||
|
|
*
|
||
|
|
* @param {object} args
|
||
|
|
* @param {Record<string,string>} args.shellEnv Resolved shell env (PATH-augmented).
|
||
|
|
* @param {Record<string,string>} [args.requestedAgentEnv] Per-agent env from the UI (filtered).
|
||
|
|
* @param {(e:Record<string,string>)=>Record<string,string>} [args.withCliDiscoveryEnv]
|
||
|
|
* netcatty helper that injects the tool-CLI discovery file path.
|
||
|
|
* @param {(e:Record<string,string>)=>Record<string,string>} [args.normalizeClaudeCodeExecutableEnv]
|
||
|
|
* netcatty helper that rewrites CLAUDE_CODE_EXECUTABLE to a runnable path (claude only).
|
||
|
|
* @returns {Record<string,string>}
|
||
|
|
*/
|
||
|
|
function buildSdkAgentEnv({
|
||
|
|
shellEnv,
|
||
|
|
requestedAgentEnv,
|
||
|
|
withCliDiscoveryEnv,
|
||
|
|
normalizeClaudeCodeExecutableEnv,
|
||
|
|
}) {
|
||
|
|
const filteredShellEnv = {};
|
||
|
|
if (shellEnv && typeof shellEnv === "object") {
|
||
|
|
for (const [k, v] of Object.entries(shellEnv)) {
|
||
|
|
if (typeof v === "string" && !isDangerousEnvKey(k)) {
|
||
|
|
filteredShellEnv[k] = v;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
const filteredRequested = {};
|
||
|
|
if (requestedAgentEnv && typeof requestedAgentEnv === "object") {
|
||
|
|
for (const [k, v] of Object.entries(requestedAgentEnv)) {
|
||
|
|
if (typeof v === "string" && !isDangerousEnvKey(k)) {
|
||
|
|
filteredRequested[k] = v;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
let env = { ...filteredShellEnv, ...filteredRequested };
|
||
|
|
if (typeof withCliDiscoveryEnv === "function") {
|
||
|
|
env = withCliDiscoveryEnv(env);
|
||
|
|
}
|
||
|
|
if (typeof normalizeClaudeCodeExecutableEnv === "function") {
|
||
|
|
env = normalizeClaudeCodeExecutableEnv(env);
|
||
|
|
}
|
||
|
|
return env;
|
||
|
|
}
|
||
|
|
|
||
|
|
module.exports = { buildSdkAgentEnv, DANGEROUS_ENV_KEYS, isDangerousEnvKey };
|