+ lHjjaERdt0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RIt]P!R4t Rt Rt Rt RtRtRtR tR tR ] R ] R ] R ] R ] R2 tRtRtRtRtRtRtR] R2tR ] R] R ] R ] R ] R ] R2 tR ] R ] R ] R2tR ] R ] R2tRtRtRt EReRRllt!Rt"] R,t#Rt$]#]!!R 4,R!3]#]!!]"4,R"3]#]!!R#4,R$3] R%,R&3] R',R(3ERfERg] R+,R,3] R-,R.3] R/,R03] R1,R23] R3,R43. t%]PL]PN,t(])!R)R*04t*]%UUu.uFwr]PWV](4W]*93NK uppt,])!0ERhm4t-ERit.R P_].4t0R5R6lt1R7R8lt2]PV!R9]PL4t3R:R;lt4R<R=lt5.ERjNERkNERlNERmNERnNERoNERpNERqNERrNERsNERtNERuNERvNERwNERxNERyNERzNER{NER|NER}NER~NERNERNERNERNERNERNERNERNERNERNERNERN] R>,R?3N] R@,RA3NERNERNERNERNRB] 2RC3NERNERNERNERNERNERNERgNRD]0 RE2RF3NRG]0 RH2RI3NERNERNRJ]0 RK2RL3NRM]0 RK2RN3NRO]0 RK2RP3NRQ]0 RK2RR3N] RS] R ] RT] RU] RV] R ] RW2RX3N] RY] 2RZ3NR[] R\] R]2R^3NR_] 2R`3NRa] 2Rb3NR_] Rc] 2Rd3NRa] Rc] 2Re3NERNERN] Rf,Rg3NERNERNRi],Rj,Rk3NERNRl],Rm,Rn3NRl],Ro,Rp3NERNRq],Rr,Rs3NRq],Rt,Ru3NERNRv],Rw,Rx3NRl],Ry,Rz3NERNERNERNERNERNERNR{] 2R|3NR}] Rc] 2R~3NR}] R] 2R3NR] R2R3NR] R2R3NR] R2R3NR] 2R3NR] 2R3NR] R ] R2R3NR] R ] R2R3NR] R ] R2R3NRG]0 R2R3NERNERNERNERNERNERNERNERNERNERN] R,]$,R,R3N] R,]$,R,R3N] R,]$,R,R3N] R,]$,R,R3N] R,]$,R,R3Nt6]6UUu.uFwr]PWV](4V3NK uppt7])!RgRh04t8RRRR/t9/t:]^k]6UUu.uF/wrTRV9dVPwR4^,MVR,3NK1 upp]t?]:P]>]A!44P]>]?04]:P]?]A!44P]?]>04KX RtC]:PR]A!44P]C4]:P]C]A!44PR4RRltERRltFRRltGRtHR]H,R,tI]P!^@R7RRl4tKRRltLRRltMRRltN]PV!R4tO]PV!R4tP]PV!R4tQ]PV!R4tR0ERmtS0ERmtTRRR0R]TR0ERmRR0RRR0R0ERmR0ERmR0ERmR0ERm/ tURRR0RRR0R0ERmRRR0/tVR^R^R^R^/tW0ERmtX]PV!R4tY]Z;QJd.RER4FNK 5M!RER44t[RR0R0ERmRRR0RR0RR0R0ERmRRR0R0ERm/t\R0ERmR0ERmR0ERmR0ERmR0ERmR0ERmR0ERmRRR0/t]RR0RRR0RR0R0ERm/t^R0RkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkRkERkERkERkERkERkERkERkERkR0ERmR0ERmR0ERm/t_R])!ER4R])!ER 4R])!ER 4R])!ER 4/t`0ERmta0ERmtb0ERmtc])!ER 4tdER ERERutetftgERthERtiERtjERERltkERERltlERERltmERERltnERERltoERERltpERER ltqER!ER"ltrER#ER$ltsER%ER&lttER'ER(ltuER)ER*ltvER+ER,ltwER-ER.ltxERER/ER0ER1ER2ER3ER2ER4ER2ER5ER2/ER6ER7llltyER8ER9ltzER:ER;lt{ER<ER=lt|ER>ER?lt}ER@ERAlt~ERBERCltERDEREltERFERGltERHERIltERJERKltERERLERMlltERNEROltERPERQltERRERSltERTERUltERVERWltERXERYltERZER[ltER\ER]ltER^ER_ltER`ERaltERbERcltR#uuppiuuppiuuppi(uDangerous-command detection: normalization, tokenizing, and pattern tables. Pure command classification for :mod:`tools.approval` — no approval state, config reads, or prompting live here. Nztools.approvalz$(?:~|\$home|\$\{home\})/\.ssh(?:/|$)z\(?:~\/\.hermes/|(?:\$home|\$\{home\})/\.hermes/|(?:\$hermes_home|\$\{hermes_home\})/)\.env\bzc(?:~\/\.hermes/|(?:\$home|\$\{home\})/\.hermes/|(?:\$hermes_home|\$\{hermes_home\})/)config\.yaml\bz;(?:(?:/|\.{1,2}/)?(?:[^\s/"\'`]+/)*\.env(?:\.[^/\s"\'`]+)*)z0(?:(?:/|\.{1,2}/)?(?:[^\s/"\'`]+/)*config\.yaml)zJ(?:~|\$home|\$\{home\})/\.(?:bashrc|zshrc|profile|bash_profile|zprofile)\bz9(?:~|\$home|\$\{home\})/\.(?:netrc|pgpass|npmrc|pypirc)\bz(?:~|\$home|\$\{home\})/z(?:|z (?![\w-])|z\.(?:aws/credentials|git-credentials|config/gh/hosts\.yml|docker/config\.json|kube/config)\b|/etc/(?:shadow|passwd)\b|\bid_(?:rsa|ed25519|ecdsa|dsa)\b)z=\$\{?\w*(?:key|token|secret|passwd|password|credential)\w*\}?z(?"\']|$)zm(?:^|[\n`]|\$\()\s*(?:sudo\s+(?:-[^\s]+\s+)*)?(?:env\s+(?:\w+=\S*\s+)*)?(?:(?:exec|nohup|setsid|time)\s+)*\s*c<V^8dQhR\R\R\/#)path_alttailreturnstr)formats"=/home/ubuntu/.hermes/hermes-agent/tools/approval_detection.py __annotate__r \s&AAA3AAcRV RV RV R2#)z (?:["\'](?:z )["\']|(?:r)rrs&&r _hardline_rm_pathr\s(:hZqa @@rz|/home|/home/\*|/root|/root/\*|/etc|/etc/\*|/usr|/usr/\*|/var|/var/\*|/bin|/bin/\*|/sbin|/sbin/\*|/boot|/boot/\*|/lib|/lib/\*zrm\s+(-[^\s]*\s+)*z#(?:-[^\s]+(?:\s+[^-\s][^\s]*)?\s+)*z#/(?:(?:\.\.?)?/)*(?:\.\.?)?\**|/ \*z#recursive delete of root filesystemz$recursive delete of system directoryz(?:~|\$\{?HOME\}?)(?:/?|/\*)?z"recursive delete of home directoryzmkfs(\.[a-z0-9]+)?\bzformat filesystem (mkfs)z7dd\b[^\n]*\bof=/dev/(sd|nvme|hd|mmcblk|vd|xvd)[a-z0-9]*zdd to raw block deviceredirect to raw block device fork bombzkill\s+(-[^\s]+\s+)*-1\bkill all processesz!(shutdown|reboot|halt|poweroff)\bzsystem shutdown/rebootz init\s+[06]\bzinit 0/6 (shutdown/reboot)z*systemctl\s+(poweroff|reboot|halt|kexec)\bzsystemctl poweroff/rebootztelinit\s+[06]\bztelinit 0/6 (shutdown/reboot)c0V^8dQhR\R\/#rcommandrr bool)r s"r r r sSTrc\;QJd%R\V44F 'gK R# R#!R\V444#)zEReturn whether any command-position word is a shell-carrying command.c3"TFEwr\PP\V44P 4\ 9xKG R#5iN)ospathbasename%_deobfuscate_shell_word_for_detectionlower_SHELL_CARRIER_NAMES).0_words& r *_contains_shell_carrier..s?AJAq >tDEKKMQeeAsA ATF)any_iter_shell_command_word_spansrs&r _contains_shell_carrierr+sG 38A33338A rc0V^8dQhR\R\/#rr )r s"r r r s    rc RaRPV3Rl\SRRR744#)acBlank out quoted string CONTENT for positionless hardline matching (detection-only). Quote characters stay; inside double quotes `$(...)` and backtick spans are kept RAW because the shell really executes them. An unclosed quote masks to end-of-string, which cannot hide a runnable command (the shell would not run it either). Detection-only rewrite used by the quote-masked hardline rules (redirect-to-block-device, fork bomb): text inside single or double quotes is data the shell passes as an argument, so `echo "cat f > /dev/sda"` must not trip the unconditional floor (#93392). Unquoted text is untouched. c3f<"TF&wrr4VeVR9dSW#MRW2, ,xK( R#5i)N )quotesubstr)r#kindijr1rs& r r&%_mask_quoted_prose..s:!U DQ 1C)C PQPUV!Us.1qT)r2naive_backtickjoin _scan_shellr*sfr _mask_quoted_proser<s- 77!,WCPT!U rz)(?:^|[;&|`\n]|&&|\|\||\$\()\s*sudo\s+-S\bc0V^8dQhR\R\/#rr tuple)r s"r r r sSUrcR\P9d5\P\ V4P 44'dR#R#)zDetect ``sudo -S`` without configured SUDO_PASSWORD -> (is_blocked, description). When SUDO_PASSWORD is set, ``_transform_sudo_command`` injects ``-S`` itself, so this guard only fires when the LLM wrote it explicitly. SUDO_PASSWORD)Tz*sudo password guessing via stdin (sudo -S)FN)renviron_SUDO_STDIN_REsearch _normalize_command_for_detectionr!r*s&r _check_sudo_stdin_guardrGs<bjj(^-B-BCcdkClCrCrCt-u-uCC rc0V^8dQhR\R\/#rr>)r s"r r r sSUrc\V4'd R\3#\\V44wrV'd R\3#\ V4FpVP 4pRp\FgwrgpV'd1Vf-\V4'dTM\V4P 4pTPV'dTMT4'gKaRV3uu# K R#)zWCheck hardline patterns (NEVER bypassable, even in YOLO) -> (is_hardline, description).TNrB) _command_parser_limit_exceeded_PARSER_LIMIT_DESCRIPTION_grep_safe_detection_variant_mask_quoted_newlines_MALFORMED_EXEC_DESCRIPTION_command_detection_variantsr!HARDLINE_PATTERNS_COMPILEDr+r<rE) rr$malformed_grepcommand_variant variant_lower masked_lower pattern_re description quote_maskeds & r detect_hardline_commandrXs%g../00 55J75STA1226w?'--/ #' 5O 1J\ 4 &=_%M%MM+O<BBD  =QQk**6P@ rzmkfs\bzformat filesystemz dd\s+.*if=z disk copyz>\s*zoverwrite system configz%\b(curl|wget)\b.*\|\s*(?:[/\w]*/)?(?:z )(?:\s|$|-c)zpipe remote content to shellz\b(?:z)\s+<\s*>?\s*["\']?z%overwrite system file via redirectionz["\']?z$overwrite project env/config via teez,overwrite project env/config via redirectionzhfind\s[^;|&\n]*(?.&s)^B]Q S))1qwwy8B]s57z(\s+))r:rnsplitr*s&r _lower_preserving_flagsr{ s% 77^"((8U\B]^ ^^rz \s'"`;|&<>()z(?P(?:[/\\][^/\\z]*)+))maxsizec$V^8dQhR\/#)rrr )r s"r r r /s a a# arc V'd1\P!RV4Uu.uFq'gK VNK upM.p\V4^8dR#\P!RRP RV44,\ ,4#uupi)aCompile a regex matching *path* as an absolute directory prefix. Components match with either separator so native Windows, forward-slash, and mixed forms all fold; the caller normalizes the tail's backslashes to ``/``. A non-empty tail is required, so a bare home is never folded. Returns ``None`` for an unset/degenerate path (fewer than two components: ``/``, ``C:\``, ``""``) so a stray HOME cannot rewrite unrelated prefixes.z[/\\]+Nz[/\\]*c3N"TFp\P!V4xK R#5ir)rnescape)r#cs& r r&*_home_prefix_fold_regex..9s0Rz!1zs#%)rnrzlencompiler: _PATH_TAIL)rr componentss& r _home_prefix_fold_regexr.slAERXXi6<6!!!6<"J : ::i)..0Rz0R"RRU__ `` =s B B c<V^8dQhR\R\R\/#)rr replacementrr )r s"r r r <s!##rca\P\RV4\RR74F*p\ V4pVfKVP V3RlV4pK, V#)zFold each resolved home prefix in *command* to *replacement* (no trailing separator; the tail supplies it). Longest first so a deeper home folds before a shorter overlapping one that would clobber it.c38"TFq'gK VxK R#5irr)r#ps& r r&&_fold_home_prefixes..?s%<A!aas  T)keyreversecT<SVPR4PRR4,#)r\/)grouprm)mrs&r %_fold_home_prefixes..Bs!K!''&/:Q:QRVX[:\,\r)dictfromkeyssortedrrro)rpathsrrpatterns&&f r _fold_home_prefixesr<sQ f%<%<#tTU)$/  kk"\^efGV Nrc0V^8dQhR\R\/#rr )r s"r r r Fs4444rc\PPR4pV\PPV4\PP RR4.p\YR4# \ dTu#i;i)zcUser home (expanduser / realpath / $HOME) -> ``~/``; no-op when unset, degenerate, or unresolvable.~HOMEr.)rr expanduserrealpathrCrc Exceptionr)rhomers& r rqrqFsjww!!#&rww''-rzz~~fb/IJ ws 33 sAA-- A=<A=c0V^8dQhR\R\/#rr )r s"r r r Qs < <3 <3  ``~/.hermes/`` so the _HERMES_CONFIG_PATH / _HERMES_ENV_PATH rules match Docker/gateway deployments that spell the absolute path.)get_hermes_homeF)strictz ~/.hermes)hermes_constantsrrr resolverr)rrrrs& r rprpQs^4 ++-TC E :;< w{ ;; sAA AAz,\$\{[^}/\s]+/[^}/]*/(?P[^}]*)\}z#\$\{[^}:}\s]+:-(?P[^}]*)\}z^[A-Za-z0-9_./:@%+=,-]+$z[A-Za-z_][A-Za-z0-9_]*=.*sudoenvexectimernicetimeoutstdbufionicechrttasksetchroot-c-pz--groupsz --userspec-a-nz --adjustment-ez-vz-V--pidz&(?:[0-9]+)?(?:>>|<<|<>|>&|<&|>\||[<>])c#V"TFwrV\P!V43xK! R#5ir)rnr)r#familyrs& r r&r&xs*Tvrzz'':;Ts')pythonnodeperlrubyphp powershellbundeno--eval-rz-Lz --log-levelsort--compress-programrgz--prez--hostname-binag--pagerman--after-context--before-contextz--colorz--colors --contextz--context-separatorz--dfa-size-limit --encodingz--enginez--field-context-separatorz--field-match-separator--filez --generatez--globz--hyperlink-formatz--iglobz --ignore-filez --max-columns --max-countz --max-depthz--max-filesizez--path-separatorz --pre-globz--regex-size-limit--regexpz --replace--sortz--sortrz --threadsz--typez --type-addz --type-clearz --type-notefEmjgdtTABCMrkoStT CRLmMSserEPpgGmpWilrsDcabefhkmnptuvxBCEHPTOoiiiazcommand parser limit exceededz4command parser limit or malformed executable payloadzIstop/restart hermes gateway via shell-spliced verb (kills running agents)c0V^8dQhR\R\/#rr)r s"r r r s S SC SD Srca\S4\8dR#\S4\8dC\;QJdV3RlR4F 'gK RM RM!V3RlR44'gR#\ V3RlR44\ 8#)zBound all parser work before normalization/tokenization. Separator counting is deliberately conservative: quoted separators over-count, but crossing the ceiling fails closed rather than letting an uninspected suffix execute.Tc3,<"TF qS9xK R#5irrr#charrs& r r&1_command_parser_limit_exceeded..sCh`gX\GO`gs;&| Fc3F<"TFpSPV4xK R#5ir)countrs& r r&rs7wtw}}T""ws!)r_MAX_DETECTION_COMMAND_CHARS!_MAX_SEPARATOR_FREE_COMMAND_CHARSr(sum_MAX_DETECTION_SEGMENTSr*sfr rJrJs^ 7|22 7|77Ch`gChCh`gCh@h@h 7w7 7;R RRrcJV^8dQhR\R\R\R,/#)rsegmentr4rNr int)r s"r r r s%""""d "rcVPRV^,4pVR8wd0W^, ,R8XdVPRV^,4pK6VR8XdR#T#)zQIndex of the backtick closing the one opened at ``i``, or None when none follows.`rN)find)rr4r5s&& r _backtick_end_fromrsO S!a% A r'g!en, LLa!e $74!!rc0V^8dQhR\R\/#)rrstartr)r s"r r r sAAcA#Arcaa a a ..RR3wo o o p^pRpRVV V V 3Rllp\S4p\SV4EF.wrxp SV,p VR8XdV'gV P4'dV R8wdS eV!V4.Ruo o KPSPRV4'd V^, pMUV R8Xd(V'dRpMCV^8Xd\ SV4fTpMR pM'V R 8XdV^8XdTpMV^,pM V R 9dTpMlS fVo VR 8XdV'dRMT pKVR 8Xd#S P SV^,,4EK V R8Xd V'gR#S P V 4EK1 V'dR#S e V!V4S #)uReturn shell words as ``(value, start, end, quoted)`` or ``None`` on malformed quoting. Deliberately small lexer that never expands shell syntax; it exists to keep source spans (which ``shlex`` does not expose) for deciding which quoted grep operand is data, not another command. Lexing stops at the end of the simple command that begins at *start*: an unquoted ``;``, ``|``, ``&`` or newline, or the ``)`` / backtick that closes the substitution the command sits inside. Without that, a grep nested as ``"$(grep … | cut …)"`` was lexed together with the enclosing command's closing quote, read as unbalanced quoting, and reported as a hardline block (546 blocked turns in one run, every one a false positive; ``sed -n "$(grep -n X f | cut -d: -f1),+3p" f`` is the canonical shape).NFc(V^8dQhR\RR/#)rendrNr)r s"r r ._shell_tokens_with_spans..__annotate__sAA3A4Arc<SSVpVPR4;'dVPR4;'gRV9;'dVPR4pSPRPS4SW34R#)'z='r.N)rwendswithappendr:)rrawinertr token_starttokensvalues& r flush'_shell_tokens_with_spans..flushslk#&$::c):bb @a@aPSP\P\]`Pa rwwu~{C?@rr $(rTrz;|& r1escr)rr;isspacerwrr)rrr1depth in_backtickrend_atr3r4r$chrrrsf& @@@r _shell_tokens_with_spansr sy)+Bd(:%FE; EKAA\F$We4 A QZ 6>%zz||d *!H)+T&E;!!$** s"'KaZ$6w$B$JF"&KsA:F w  K 7?!DrE U] LLQ ( 4Z LL G5H  f MrcV^8dQhR\R\\\\\3,,\3,/#r)r r?listrr)r s"r r r s1;;;d5c?6KT6Q0R;rc 4a.p^p\V4EFpVPW24oS\V4,p\V4EFwrEp\P P \V44P4R 9dKD\W44pVf .R3uu#VR,.rR;rR^Rrp V \V48EdW,^,pV'd VR8XdRpEMV'dVPR4'dVPR4wpppT ;'gVR8Hp T ;'gVR9p V\9;'dV'*pV'd V ^,\V48d .R3uu#VR8Xd#T PV'd V ^,MT 4T V'd^M^, p MV'dVPR 4'dVR 8wdVR,p\V4FwppT ;'gVR 8Hp T ;'gVR9p V\9gK1V^,\V48pV'g"V ^,\V48d .R3uuu#VR 8Xd#T PV'dT MV ^,4T V'd^M^, p M MV fT p V ^, p EKV 'gV f .V 3uu#V PV 4V 'gEKVP!V3R l\#VP$V 444EK EK VR3#)zStructurally locate quoted grep PCRE operands -> (spans, malformed). On an ambiguous or malformed grep parse callers fail closed and use the original command: no text is hidden on an uncertain parse.NTNNF--=z --perl-regexprrvPec3b<"TF$wrr4V'gKSV,SV,3xK& R#5irr)r#r$r token_endquoted segment_ats& r r&-_quoted_grep_pattern_spans..Ms2=c9 gmGZ+-zI/EF=cs //>grepegrep>rr>rf)_iter_top_level_shell_segmentsrrr)rrrr r!r rw partition_GREP_OPTIONS_WITH_ARGr enumerate_GREP_SHORT_OPTIONS_WITH_ARGextendmap __getitem__)rspansoffsetrrr$r%rargspattern_indexespcreexplicit_patterns operand_indexr4optionstokenoptionequals takes_nextcharsr5rattachedrs& @r _quoted_grep_pattern_spansr3s$&E F1':\\'2 c'l*GI. ..rcRV^8dQhR\R\\\3,/#r)r r?r)r s"r r r ^s'``#`%T 2B`rc \V4wrV'g V'gW3#\YUUu.uFwr4W4RWC, ,3NK upp4R3#uuppi)r0F)r3r:)rr% malformedrrs& r rLrL^sS1':E!! 7QVWQV:5e#*=>QVW XZ_ __WsA c>V^8dQhR\R\R,/#)r executablerNr )r s"r r r es"hhChC$Jhrca\PPV4P4o\ V3Rl\ 4R4#)c3^<"TF"wrVPS4'gKVxK$ R#5ir) fullmatch)r#rname_renames& r r&&_interpreter_family..gs%`/DOFHYHYZ^H_/Ds- -N)rrrr!next_INTERPRETER_NAME_RES)r?rDs&@r _interpreter_familyrHes5 77  J ' - - /D `/D`bf ggrc`V^8dQhR\R\R\\,R,/#)rrrrN)r rr )r s"r r r js*  3 s tCy47G rc\P!WRRRR7pRRuVnVn\V4# \dR#i;i)zTokenize an already-bounded command segment. ``None`` distinguishes malformed quoting from an empty segment so callers can fail closed for a program-bearing option rather than silently skip it.NTz<>)posixpunctuation_charsr.)shlexwhitespace_split commentersr  ValueError)rrlexers&& r _shell_segment_tokensrRjsK GFO44P370 0E{ s47 AAc$V^8dQhR\/#rrr )r s"r r r vs  C rc#"^p\VRR7F9wr#rEVR8XgVR8XgKVeKW,R9gK+W8dWVxTpK; V\V48d WRxR#R#5i)z;Yield top-level command segments in one left-to-right pass.T)commentscommentrNr)r;r)rrr3r4r5r1s& r rrvso E(4@ 9 EMgjT[F[yA&&E A  s7|fos!A)A) A),A)c`V^8dQhR\R\\,R\R,/#)rrr'rNr r )r s"r r r s)3d3iC$Jrca a \V,\V,uo pVR8HpRpVEF>pV'dRpKVR8Xg V'g:VPR4'g#VR8XdVP4R8XdR#R #VP R4wo rgV'dS P4MS pVS 9dVu#\ ;QJdV 3RlV4F 'gK R M RM!V 3RlV44p V'gYS PR4'gB\ S 4^8d2V 'g*\V 3R lS R ,4R 4p V 'dV u#W9;'dV'*pEKA R #) z;Return an execution-bearing interpreter option, if present.rFrrvrevalrc3<"TFfqPR4'gKVPR4'dK4SPV4;'d\S4\V48xKh R#5i)rvrN)rwr)r#shortr.s& r r&)_interpreter_exec_flag..s^( !%5%5c%: BCHCSCSTXCY BF  e $ A AVs5z)A A!sA1A1A1 A1Tc3F<"TFpRV 2S9gKRV 2xK R#5irur)r#rflagss& r r&r^s&U:41TFuATJavJ:s ! !rN)_INTERPRETER_EXEC_FLAGS_INTERPRETER_WITH_ARGrwr!rr(rrF) rr'with_argr skip_valuer-r/r$ comparablehas_attached_option_valuebundledr`r.s && @@r _interpreter_exec_flagrhs1-f57LV7TOE8<'JJ J  D=E4D4DS4I4IEKKMV$;  "OOC0'1V\\^v   %(C( !( CCC( !( % !&"3"3D"9"9c&kAoVoU6":UW[\G+::F 34 rcvV^8dQhR\\,R\\\R,3,/#)rr'rN)r r r?r)r s"r r r s,T#Y5sTz1A+Brc^pV\V48dW,pVR8XgVPR4'gR #V\9d V^, pKOVR,pVPR4'g\V4\8:g V^, pK\ RV9;'gRV94pRV9d.V^,V,pRV\V48d W,3#R3#V^V,, pKR #) a<Return whether Bash ``-c`` occurs and the command string it owns. Bash's O/o options consume the following argument even when they precede a later ``-c`` or share its short-option bundle; the two startup-file long options own their next token. Parsing those first prevents both missed payloads and false ``-c`` hits.rrOorTN)rv+rB)rrw_BASH_OPTIONS_WITH_ARGr`_BASH_SHORT_OPTION_LETTERSr)r'indexr-r1consumed_option_arg payload_indexs& r _bash_exec_payloadrss E #d)   D= 0 0 < <   * * QJE b    D ! !U7Q)Q QJE !#,">">#,? %<!AI(;;MT1J$-U UPTU U ((( rcV^8dQhR\R\\,R\\\3,R,/#)rtoolr'rN)r r r?)r s"r r r s2s$s)c3h$8Nrcpa \V,p^pV\V48EdW,pVR8XdR#VPR4wrVpV'dTMRpWR9dTMRpVR8Xd9VPR 4'd"\V4^8dVR,VR,rxV'dMVf'V^,\V48dW^,,pV'dW3#Y7e RV9d^M^, pKV\V,9dVf V^, pEKVPR4'dVPR4'gj\V4^8dZ\ V,o \ V 3Rl\VR ,^R 74R4p Y9\V4^, 8Xd^M^, pEKV^, pEKR#) zEReturn (option, program) for a read-only tool's program-running flag.rrNrNrNrNNrvc3><"TFwrVS9gKVxK R#5irr)r#krshortss& r r&'_read_tool_exec_flag..s[+HDTZN!!+Hs  r)r)-P-H)_READ_TOOL_EXEC_FLAGSrrrw _READ_TOOL_LONG_OPTIONS_WITH_ARG!_READ_TOOL_SHORT_OPTIONS_WITH_ARGrFr ) rur'r`rpr-r.r/payloadmatchedownerr{s && @r _read_tool_exec_flagrsi !$ 'E E #d)   D= 0 /#(//#"6#'"O& 5=U--l;;E Q$Ry%)W 519s4y#8qy/'' -#U2BQ IE 7= ='/ QJE   c " "5+;+;D+A+Ac%jSTn7t1Qq 8E QJE rc$V^8dQhR\/#rTr )r s"r r r snncnrc#"\V4EFfp\V4EFRwr#p\V4p\W4p\P P V4P4p\V4pVfVf V\9d \R3xKtV'gK~VR,p V'd\W4'dR xKV'dA\;QJdRV 4F 'gK RM RM !RV 44'dR xKV\9d\V 4wrV 'dRV 3xV\9gEK"\Wy4p V 'gEK8RV RV ^, 2V ^,3xEKU EKi R#5i) z>Yield scoped execution mechanisms and any executable payloads.Nrc3B"TFqPR4xK R#5i)z<.sID5 0 0 6 6DsTFzshell command via -c/-lc flagz arbitrary program execution via r0)r[N)r\N)rr)r rRrrrr!rHrrNrhr( _SHELL_NAMESrsr) rrrr$r%r?rexecutable_namerr'foundrfindings & r _execution_flag_findingsrs31':tDJ*7:F gg..z:@@BO(4F~%>??CCIDICCCIDIII<<"l2%7%=NE>HH"&;;2?IGw!A/ARRST[\]T^S_`bijkblmm1F;s6BE;E;,E; E;E;*E;4E;?E;&E;c<V^8dQhR\R\R\/#rrposrr)r s"r r r s!CccrctV\V48d(W,P4'd V^, pK7V#)r)rr)rrs&&r _skip_shell_whitespacers, G !5!5!7!7 q Jrr2r.braceFstop_unterminatedr8rVcV^8dQhR\R\R\R,R\R\R\R\R \/#) rr9rrNr2rrr8rVr rr)r s"r r r sL..c.#.d .S..8<.VZ..rc#"Vf \V4MTpRp Tp W8EdW ,p RV ^,rV'd4V f0\W 4'dRVPRW4rV ^8dTp EMFV R8wd"V R8XdV ^,V8d RV ^,rEMW8Xg V f V R9dR p EM V R8wEdV 'dR MR V9dV R 8XgAVPR V 4'g)V'dV 'gVPRV 4'dV R 8Xd?V'd+VPR V ^,4^,;'gRM \ W 4pMJW ^,,R8Xd \ W 4pM*VPRV ^,4^,;'gRpVeRTrMV'd RV RV 3xR#WW3xV R 8Xd V 'dRMT p T p EKR#5i)aYield ``(kind, i, j, quote)`` lexical steps over ``text[start:end]`` without expanding. The single quote/escape state machine behind every detection scanner. ``kind`` is ``"char"`` (one char), ``"esc"`` (backslash + the char it escapes; never inside single quotes), ``"quote"`` (an opening/closing quote char) or ``"subst"`` (a ``$(...)`` / backtick / ``${...}`` span); With *comments*, ``"comment"`` spans are skipped without interpreting their quote syntax. ``quote`` is the state the step was read in (``None``, ``'`` or ``"``). Substitutions are recognized unquoted when ``"u"`` is in *subst*, inside double quotes when ``"q"`` is; *brace* adds unquoted ``${...}``. An unterminated substitution falls through as plain chars unless *stop_unterminated*, which yields ``("subst", i, None, quote)`` and ends the scan (the caller descends to *end* itself). *naive_backtick* closes a backtick at the next backtick even if escaped (the quoted-prose masker's historical behavior).NrrWrrrrz'"r1r7urrz${(}r2)r_is_shell_comment_startrrw_scan_backtick_end_scan_dollar_paren_end)r9rrr2rrr8rVnr1r4r r3r5closes&&&$$$$$ r r;r;s[D cAE A % W!a%a  *A$*J*J4!6!1u c\bDjQUQYQU! [U]rU{D c\es> #Iq11eEdoo^bdeNfNfSy=K #q1u-199TQcdhQl!e#.t7 #q1u-199T !5a"4//!! 7?!DrE 9 sCB6G9'G!G)G1G G&G?AGG(G GcJV^8dQhR\R\R\R,/#rrrrNr)r s"r r r 6s%Cd rc^p\W^,4FSwr4rVVR8XgKV'dKW PRV4W,R8H, , pV^8XgKJV^,u# R#)zCReturn the offset after a balanced ``$(...)`` command substitution.rrrN)r;rw)rrrr3r4r$r1s&& r rr6s` E(!)< 6>%% ''a0GJ#4EF FEz1u = rcJV^8dQhR\R\R\R,/#rr)r s"r r r As%***C*C$J*rc\P!R\P4PW^,4pV'dVP 4#R#)z(?:\\.|[^`\\])*`N)rnrDOTALLmatchr)rrrs&& r rrAs9 JJ*BII 6 < wrErgVR8Xd0Vf,W,P4'gW,R9dMTpK@ W#WV3#)z1Read one shell word without executing expansions.rT)r2rrz;&|<>())rr;r)rrrrr3r4r5r1s&& r _read_shell_wordrGsg(66E(s$O 6>em1C1C1E1EW`I` P c* ++rc>V^8dQhR\R\R,/#)rscriptrNr )r s"r r r QstrcX\P!VRR7pV'gR#V^,P4VR,r2VR8Xd9V'd0\P !RV^,4'd VR,pK7M VR8wdR#\ V4^8Xd,\P V^,4'd V^,#VR8XdJ\ V4^8Xd:V^,R8Xd,\P V^,4'd V^,#R# \d.pELi;i) zEResolve tiny literal command substitutions without executing a shell.TrKNrechoz-[nEe]+printfz%s)rMrzrPr!rnrBr_SIMPLE_SHELL_LITERAL_RE)rrrr's& r $_literal_command_substitution_outputrQsV40 1IOO%vbzT&r||JQ888D H  4yA~2<rc0V^8dQhR\R\/#rr )r s"r r r tsMM3M3Mrct\V4p\PRV4p\PRV4#)c$VPR4#)rrrs&r r2_replace_simple_shell_expansions..vs 5;;}3Mrc$VPR4#)defaultrrs&r rrws u{{9/Er)r_PARAM_REPLACEMENT_REro_PARAM_DEFAULT_REr%s&r _replace_simple_shell_expansionsrts3 0 6D $ $%Mt TD  !Et LLrc0V^8dQhR\R\/#rr )r s"r r r zs33rcLaRPV3Rl\S444#)r.c3|<"TF1wrq1R8wgKVR8XdSV^,,MSV,xK3 R#5i)r1rNr)r#r3r4r$r%s& r r&+_strip_shell_word_syntax..{s;.MDQ'/ 2tu}QU $q'1.s <(<r9rsfr _strip_shell_word_syntaxrzs& 77(. rc0V^8dQhR\R\/#rr )r s"r r r srch\^4F"pTp\\V44pW8XgK!V# V#)zApproximate how shell syntax can spell a command word: collapses quoting/escaping plus simple literal command substitutions in the word itself. Intentionally narrow and non-executing.)rangerr)r%r$r8s& r r r s<1X'(H(NO    K  Krc<V^8dQhR\R\R\/#)rrrprr)r s"r r r s&JJSJJJrcW,R8H;'dEV^8H;'g8W^, ,P4;'gW^, ,R9#)#z;&|()<>)r)rrps&&r rrs] >S  J Jeqj'I'IGAI4F4N4N4P'I'I)0);y)HJrc$V^8dQhR\/#rTr )r s"r r r s"""rc#jaaa"^.oRVVV3RlloS!^\S44\4pSF{p\SV4pV\S48gW!9g\SV4'dK9VP V4Vx\ SV4wr4pV\ 9gKjSPV4K} R#5i)rc4V^8dQhR\R\RR/#)rrrrNr)r s"r r 0_iter_shell_command_starts..__annotate__s!44C4c4d4rc <R p\S WRRRR7EFLwr4rVVR8XdBTS V,R8Xd^M^,pS PV4S !YufTMV^, 4KOVR8XgKXVeK^WB8wgKfS V,R9gOS V,R 8Xd[V^8Xg:S V^, ,P4'gS V^, ,R 9dS PV^,4KS V,R 9gKV^,V8;'dS V^,,S V,8HpV'd V^,MTpS PV^,V,4EKO R#) ruqT)r2rrVr2rNrz(; {z(;&|)z&|r)r;rr) rrskipr3r4r5r1innerrepeatedrscanstartss && r r(_iter_shell_command_starts..scans&!,We`d59";"; DQw'!*"3Q; e$U9C!a%8EMai1:'GAJ#,=16WUVYZUZ^McMcMeMeFMaRSenX_F_MM!a%(QZ4' 1us{KKwq1u~/KH$,1q5$DMM!a%("23#";rN)rr`rraddr_SHELL_COMMAND_TRANSITIONSr)rseenrr$rr%rrsf @@r _iter_shell_command_startsrsSF44* CL 5D&w6 CL EM5LWV[5\5\   '7  - - MM# s BB3B3c<V^8dQhR\R\R\/#)rrmarkerrr )r s"r r r s&WW#WsWcWrc \R\V444pV'd\YUu.uFq3W13NK up4#T#uupi)uInsert *marker* (a newline) before each real (quote-aware) command start. ``\n`` is already a ``_CMDPOS`` separator, so this exposes subshell ``(cmd)`` and brace-group ``{ cmd; }`` openers — which the flat pattern class omits — to the anchored patterns WITHOUT the quoted-prose false positives that adding ``(`` / ``{`` to ``_CMDPOS`` would cause: starts inside quotes are never produced, so ``--title "block (reboot)"`` is left as-is.c36"TFq^8gK VxK R#5irNr)r#rls& r r&'_mark_command_starts..sM C11uQQ Cs )rrr:)rroffsetsrls&& r _mark_command_startsrsB M :7 CMMGBI77W=W^W= >VwV=s A c0V^8dQhR\R\/#rr )r s"r r r s @ @3 @3 @rc@RV9dV#\V^\V44#)ajReplace raw newlines inside single/double quotes with a space (detection-only). A quoted newline is DATA to the shell, yet the flat ``_CMDPOS`` class treats every raw ``\n`` as a command start, so multi-line quoted arguments (commit messages, heredoc text) tripped the hardline blocklist when a data line began with e.g. ``sudo reboot``. Quote tracking mirrors ``_iter_shell_command_starts``. Unquoted newlines pass through and ``_mark_command_starts`` still re-inserts newlines at genuine starts; an unclosed quote absorbs following newlines exactly as the shell would, so masking them cannot hide a runnable command.r)_mask_quoted_newlines_spanrr*s&r rMrMs$ 7 %gq#g, ??rcHV^8dQhR\R\R\R\/#)rrrrrr)r s"r r r s(Cccrc.p\WVRR7FwrErgVR8XdoYPPRV4'd^M^,pV^, p VPWV4VP\WV 44VPW V4K{V'd(VR8Xd!W,R8XdVPR4KVPWV4K RP V4#) a``_mask_quoted_newlines`` over ``command[start:end]``. A ``$(...)`` / backtick substitution inside double quotes is EXECUTABLE, not data: its body is re-scanned with a fresh quote state so a newline that separates commands inside it survives as a command boundary. Masking it as quoted data turned ``"$(grep x f reboot)"`` into ``... f reboot)``, which no later stage can tell from an operand; the pre-fix scanner only caught it by refusing the whole command as malformed.r7)r2r2rrrr0r.)r;rwrrr:) rrroutr3r4r5r1 body_startbody_ends &&& r rrs C(CH 7?#5#5dA#>#>aAFJ1uH JJw, - JJ1'xP Q JJw* + tv~'**< JJsO JJw| $I 773<rc$V^8dQhR\/#rTr )r s"r r r s+H+HC+Hrc#"\V4EF6pR^r2RRrTV\V48gK\PV\ W44pV'd\ WP 44wrqpKW\ W4wrp W8XdKwT p\V 4p \PPV 4P4p V'dRpKV'dV'd V R8XdRpKV'dV'dV PR4'dV PR^4^,p VR8Xd"V R8XgV PR 4'dEK@\PV\!44pW9g@VR 8Xd<V PR4'g%\!V R ,4R R 0,'dEKRV 9;'d"V \"PV\!449pEKV'd V^,pEK\$P'V 4'dEKWV 3xV \(9dEKT RrB\*PV ^4pEK/ R#5i)z:Yield command-position words that may be executable names.NTFrrvrr--split-string-SrrvV)rr_SHELL_REDIRECTION_RErrrrr rrrr!rwrz&_COMMAND_WRAPPER_NON_EXECUTING_OPTIONSrcr`!_COMMAND_WRAPPER_OPTIONS_WITH_ARG_ENV_ASSIGNMENT_RErB_COMMAND_WRAPPER_WORDS _COMMAND_WRAPPER_POSITIONAL_ARGS)rrwrapper positionalsr,skip_argredirectr$ word_startword_endr% deobfuscatedrDr.queriess& r r)r)s)'2#Q %CL ,227'>s'C'C%++C3A6e#3C)C|G^G^_cGdGd@DDWceT$I)=fFWFWX\F]F]-0_Sz-I-Il2vvvAbAfAfgnpspuAv7vq !++D11. .11#TW:>>tQGKS3sH#I B(I I I .I 6I  =I  AI /I ,I -&I 7I c<V^8dQhR\R\R\/#)rrrrr)r s"r r r s!&&C&&&rc\V4p\WRRRR7F-wr4rVVR8XgVR8XgKVeKW,R9gK+TpM WVP4#)zCBound a candidate to its command, preserving quoted argument bytes.rT)r2rrVrWrz;&| )`)rr;strip)rrrr3r4r$r1s&& r _shell_command_segmentrsa g,C(t4Z^_ 9 EMgjT]F]C `   # # %%rcTV^8dQhR\R\\,R,/#)rrrNrY)r s"r r r s#77s7tCy4'77rcRRRRRRRRR R R R R R R R RRRR/ p..r2RR^repV\V48EdmW,pV^, pVR8XdV\V48XdR#W,pVR8XdVR9dVPV4RpKfV^, pVR8Xd V'dR#MVR8Xd2Vf.V'd!VPRPV44.RrSKW9d VR8wdR#TPVR8XdRMW,4RpKVR9dVeWt8XdVfTMRpRpEK Vf6VR9d/V'd!VPRPV44.RrSEKCVfVR 8Xd V'gM&VR 8Xd VR8wdR#VPV4RpEK}V'dR#V'd!VPRPV44V#)zProject GNU env -S literal argv, not POSIX shell words. Dynamic ${NAME} expansion is deliberately not evaluated: the execution backend's environment need not be this process's environment. r rrr rx r r$"rrNFTrr$r.r0z )rr)rr)rrr:) rescapesr'r%r1startedrprescapeds & r _split_env_stringrs D#tS$T3Cc4sCtEGR$ %EE #g, ~   4<G $nG|{ : D! QJE#~#~%-KK . "Eg%'S. KKw#~73C DG  : 5=DM!MDtEG  =T]2 BGGDM*'  =TS[  3;5C< D  BGGDM" KrcTV^8dQhR\\,R\R,/#)rrrN)r r )r s"r r r Us"tCyS4ZrcT^pV\V48EdW,pVR8XgVPR4'gR#VPR4wr4pVR8XgVPR4'dVR8XdTM \V4^8pV'g V^, pV'dVR8XdTM"VR,MV\V48d W,MRp\V4pVe'\P !WV^,R,4#R#Y'gV\ R ,9d^M^, pEK%R#) rrrvNrrrrxr.r)rrwrrrMr:r) rrpr-r.r/rr2rr's & r _env_split_payloadrUs E #f+   D= 0 0 5 5 % 4 % %)9)9$)?)?!'+;!;vUaH NV*: :ub !&V!4 " $W-D=A   >v F E,V;G>tDJ;<(DE%0%6!6>em8I8I E"I$4 S)%5LL+ &7 775>D z2773C3CJ3O&PQ K 7yAA R ww +u4.w:608Gww/1!G236:JAwww';= 4s4H HH BH  CH H &H <,H -H c$V^8dQhR\/#rTr )r s"r r r sMMMrc#aa"\\V44p\V4wr#V0oVxRV3Rllp\P!RV4'g\P!RV4'd7\\VP RR444pV!V4'dVxV.pV'dm\ VP44FMwr7V!V4'gKVx\V4pW8wdV!V4'dVxVPV4KO Kt\V4p W8wdV!V 4'dV x\\\V4RR74p V!V 4'dV x\V3Rl\V44R R 7pV'dk..^rp VF>pV^,V 8dV PV4K$V PV4V^,p K@ \W4pV!V4'dVxT pKrR #5i) c0V^8dQhR\R\/#)rvariantrr)r s"r r 1_command_detection_variants..__annotate__sstrcL<V'dVS9dR#SPV4R#)FT)r)r#rs&r fresh*_command_detection_variants..freshs'T/ rz(?:[A-Za-z]:|\\\\)[\\\\]z [A-Za-z]:\\rrz )rc3n<"TF*wrp\V4;o'gKSV8wgK$WS3xK, R#5ir)r )r#rrr%rs& r r&._command_detection_variants..sC dPz2L*B4H H\ H .NZ^bNb .* -Pzs 55 5cVR,#)rwr)spans&r r-_command_detection_variants..sbr)rN) rFrMrLrnrErmrrrrrr)r:)r normalized grep_safer$r& win_variantrrmarked_payloadmarkedfaithfulappliedcarrycursorr+r#rrs& @@r rOrOs22G2PQJ0 ;LI ;D O yy,g66"))NT[:\:\67LW__]acfMg7hi    lG 27;;=AJAW~~ "6g!>!,~1F1F((w'B") ,F uV}} 00DEZ[bEclq0rsH X dPnoyPz d !G !#RDAw T"t$a  *. >>M s-A+H0AH1)H"H9H)r s"r r r scerc \V4'dR\\3#\V4'dR#\V4Fp\ V4pRp\ FhwrEV\ 9d:Vf\ \V44pVPV4'd RWU3uu#KIVPV4'gKbRWU3uu# K \V4p\V4F wrWRWU3u# \V4'dR\\3#R#)zECheck dangerous patterns -> (is_dangerous, pattern_key, description).TN)FNN) rJrKr@rOr{DANGEROUS_PATTERNS_COMPILED$_QUOTE_MASKED_DANGEROUS_DESCRIPTIONSr<rErFrrE%_GATEWAY_LIFECYCLE_SPLICE_DESCRIPTION)rrR command_lowerrTrUrVr-r$s& r detect_dangerous_commandrL s%g../1JKK(11""6w?/@ #' 'B #JBB'#:*?;$L$$\22 +;;3""=11k77(C@2':J2:> k//?099;=bcc rcxV^8dQh/^\9d&\\\\,3,;R&#)rrb)__conditional_annotations__rr r`)r s"r r r s-f/.d3C=).gr)z(?:\s|$|[)`;|&]))z.>\s*/dev/(sd|nvme|hd|mmcblk|vd|xvd)[a-z0-9]*\br)z(:\(\)\s*\{\s*:\s*\|\s*:\s*&\s*\}\s*;\s*:r>.shkshzshbashdashr[r)rSrPrRrQrT)z\brm\s+(-[^\s]*\s+)*/zdelete in root path)z\brm\s+-[^\s]*rzrecursive delete)z\brm\s+--recursive\bzrecursive delete (long flag))zY\brm\s+(?!--(?:\s|$))(?:(?!\s--(?:\s|$))[^\n"\';|&])*\s(?:-[a-z]*r[a-z]*\b|--recursive\b)z'recursive delete (flags after operands))z9\bcmd(?:\.exe)?\s+/(?:c|k)\s+.*\b(?:del|erase|rd|rmdir)\bzWindows cmd destructive delete)zv\b(?:powershell|pwsh)(?:\.exe)?\b(?:\s+-\S+)*\s+(?:-(?:command|c)\s+)?["\']?(?:remove-item|rmdir|erase|del|rd|ri|rm)\bz%Windows PowerShell destructive delete)z@\b(?:powershell|pwsh)(?:\.exe)?\b.*\s-(?:encodedcommand|enc|e)\bz$PowerShell encoded command execution)z.\bremove-item\b[^\n;|&]*\s-(?:recurse|force)\bz+PowerShell destructive delete (Remove-Item))z0\b(?:del|erase|rd|rmdir)\s+(?:/[a-z]\s+)*/[sq]\bz3Windows destructive delete (recursive/quiet switch))zc\b(?:iwr|invoke-webrequest|invoke-restmethod|irm|curl|wget)\b[^\n]*\|\s*(?:iex|invoke-expression)\bz-pipe remote content to PowerShell (iwr | iex))zT\b(?:iex|invoke-expression)\s*\(\s*(?:iwr|invoke-webrequest|invoke-restmethod|irm)\bz,execute remote content via Invoke-Expression)z\btaskkill\b[^\n]*\s/f\bz"force kill processes (taskkill /F))z \bstop-process\b[^\n]*\s-force\bz*force kill processes (Stop-Process -Force))z\bformat-volume\bz!format filesystem (Format-Volume))z\bclear-disk\bzwipe disk (Clear-Disk))z \bdiskpart\bzdisk partitioning (diskpart))z\bformat(?:\.com)?\s+[a-z]:zformat drive (format.com))z\bcipher\s+/w\bzwipe free space (cipher /w))zX\bicacls\b[^\n]*\s/grant\b[^\n]*\b(?:everyone|todos|jeder|tout\s+le\s+monde|\*s-1-1-0)\bzgrant Everyone access (icacls))z\bicacls\b[^\n]*\s/reset\bz&reset ACLs recursively (icacls /reset))z&\bvssadmin\b[^\n]*\bdelete\s+shadows\bz&delete volume shadow copies (vssadmin))z\bwbadmin\b[^\n]*\bdelete\bzdelete backups (wbadmin))z\bbcdedit\b[^\n]*\s/set\bz(modify boot configuration (bcdedit /set))z\breg(?:\.exe)?\s+delete\bzregistry delete (reg delete))z'\bremove-itemproperty\b[^\n]*\s-force\bz2registry value delete (Remove-ItemProperty -Force))z \bstop-service\b[^\n]*\s-force\bz(force stop service (Stop-Service -Force))z"\bsc(?:\.exe)?\s+(?:stop|delete)\bzstop/delete service (sc))z!\busers[\\/][^\\/\s]+[\\/]\.ssh\bz!access to SSH keys (Windows path))z7\bappdata[\\/](?:local|roaming)[\\/]hermes[^\n]*\.env\bz'access to Hermes secrets (Windows path))z8\bchmod\s+(-[^\s]*\s+)*(777|666|o\+[rwx]*w|a\+[rwx]*w)\bz world/other-writable permissions)z8\bchmod\s+--recursive\b.*(777|666|o\+[rwx]*w|a\+[rwx]*w)z*recursive world/other-writable (long flag))z\bchown\s+(-[^\s]*)?R\s+rootzrecursive chown to root)z\bchown\s+--recur[a-z]*\b.*rootz#recursive chown to root (long flag))z >\s*/dev/sdzwrite to block device)z\bDROP\s+(TABLE|DATABASE)\bzSQL DROP)z$\bDELETE\s+FROM\b(?![^\n]*\bWHERE\b)zSQL DELETE without WHERE)z\bTRUNCATE\s+(TABLE)?\s*\wz SQL TRUNCATE)z8\bsystemctl\s+(-[^\s]+\s+)*(stop|restart|disable|mask)\bzstop/restart system service)z\bkill\s+-9\s+-1\br)z\bpkill\s+-9\bzforce kill processes)z,\bkillall\s+(-[^\s]*\s+)*-(9|KILL|SIGKILL)\bz$force kill processes (killall -KILL))z0\bkillall\s+(-[^\s]*\s+)*-s\s+(KILL|SIGKILL|9)\bz&force kill processes (killall -s KILL))z\bkillall\s+(-[^\s]*\s+)*-r\bz$kill processes by regex (killall -r))z<(?:\beval\b|\bsource\b|\.)\s*(?:\$\(\s*|`\s*)(?:curl|wget)\bz/execute remote content via command substitution)zz(?rrrrrrnohuprrsetsidrbuiltinrrr> r-g-hr-u--host--user--group--prompt --close-from>-Crrr[--argv0--chdir--unsetr>r9-o--format--output>-k-s--signal --kill-after>r-ire--error--inputrg>rr--class --classdata>rr--uid--pgid>!doifelifelsethenuntilwhile))rz,py(?:\.exe)?|python[23]?(?:\.\d+)*(?:\.exe)?)rznode(?:js)?(?:\.exe)?)rzperl[0-9]*(?:\.\d+)*(?:\.exe)?)rzruby[0-9.]*(?:\.exe)?)rz php(?:\.exe)?)rz#powershell(?:\.exe)?|pwsh(?:\.exe)?)rz bun(?:\.exe)?)rzdeno(?:\.exe)?>rrr--print>rr9-file-command>r[rr>-W-X--check-hash-based-pycs> ra--title--import--loader --require --conditions--cpu-prof-dir--icu-data-dir--diagnostic-dir--openssl-config>-0-F-I-M-m-x>ra-Err-Kr>r-d-z> -version -inputformat -windowstyle -outputformat -settingsfile-custompipename-executionpolicy-workingdirectory-configurationname>--cwd--config --preloadr --env-file>r~r}--htmlr> --keyrrg --parallel --batch-size --buffer-size --files0-from--random-source--field-separatorr--temporary-directory> r--localer_--recode --manpath --systemsr --sections --extension --config-file--preprocessor>--depthr--width--ignore --workersr --color-path --ignore-dir --color-match--path-to-ignore--filename-pattern--color-line-number--file-search-regex--ackmate-dir-filter>r--labelrr --devices --exclude --includer --directories --exclude-dir--binary-files--exclude-fromrr>ABCDdrrr>+O+o-Ore--rcfile --init-filer)r)rN__doc__ functoolsloggingrrnrMr:rk getLoggerlogger_SSH_SENSITIVE_PATH_HERMES_ENV_PATH_HERMES_CONFIG_PATH_PROJECT_ENV_PATH_PROJECT_CONFIG_PATH_SHELL_RC_FILES_CREDENTIAL_FILES _HOME_PREFIX _SECRET_FILE _SECRET_VAR _UPLOAD_FLAG _EMOJI_RANGE _GLOBAL_FLAGS_CONTAINER_GLOBAL_FLAGS_MACOS_PRIVATE_SYSTEM_PATH_SYSTEM_CONFIG_PATH_SENSITIVE_WRITE_TARGET_USER_SENSITIVE_WRITE_TARGET_PROJECT_SENSITIVE_WRITE_TARGET _COMMAND_TAIL_WRITE_TARGET_BOUNDARY_CMDPOSr_HARDLINE_SYSTEM_DIRS_RM_FLAG_PREFIX _PKG_OPTSHARDLINE_PATTERNS IGNORECASEr _RE_FLAGS frozenset#_QUOTE_MASKED_HARDLINE_DESCRIPTIONSrrPr"rr:_SHELL_NAMES_REr+r<rDrGrXDANGEROUS_PATTERNSrHrI_REMOVED_PATTERN_KEY_ALIASESrbrzr items_canonical_key _legacy_key setdefaultr`update_old_branch_keyrrdrFr{_PATH_TOKEN_STOPr lru_cacherrrqrprrrrr_SUDO_OPTIONS_WITH_ARGrrrrrr?rGrarbrrrrr!rnrorrrrKrNrJrJrr r3r:rLrHrRrrhrsrrrr;rrrrrrrr rrrrMrr)rrrrrOr@rErLr )rrrNs00@r rs     + , >g oSJcT*   q!1 2!4E3FaHYGZ[ CC O T 4 6 >?"#=">a@  y)<(=Q?O>PPQReQffg+,A/#&&9%:!O;LAN_M``ab%():(;1=Q??Agh()IJJLpq &&(BC IIKcdX> **,@A 335MN !=> <<>YZ ""$CDA!J MMBII % &/1OQ\0]&^#XiXiPTPQRZZ9q'J"JKXi !!\] 4 ((<( $H"--X:~5~,~>~0~ e!~&i'~(r)~6g7~:q;~>^?~@NA~DHE~FXG~J@K~L2M~N6O~PBQ~R8S~VDW~XNY~\Z]~^A_~`Oa~dDe~fgg~jVk~lHm~pPq~rls~vfw~xpy~zA{~|P}~B y-.C~D }k*E~F.G~H1I~NJO~P4Q~R !"$=>S~TaU~V2W~X0Y~^^_~`da~bOc~d?e~j .o->lKMklk~l o =>@pqm~pyq~D>E~P DOCTTWX[YZQ~T ! 157yzU~X 0/@DGKLY~Z FoEVVYZKM[~d 8 Q|nT^_k^l<. Q|nBHOQe~j D\NSMOk~r n5l^2GRTs~x /013RSy~z ,-.0WX{~| 78?U>VWYA}~~ 45Vom_]`\]A~F :;:FIBCG~H "">!?zJMRSI~J 33O2PPZ[^cdK~L 0124TUM~N !!4 568deO~X 12!4D3EQGImnY~Z ""5!6a8H7IKM}~[~f 33F2GqIYHZZ[\_OPg~l o f%'DEm~tdu~vTw~xUy~zT{~F@G~L{M~NHO~RSS~`|a~dbe~r y9$'OOQlms~t zI%(GGIdeu~v zI%(OOQlmw~x *^;=XYy~z zI%(DDFab{~BJ\\I[ 1i 8!S^B_`##K7>> ^?\] $/' 935AEEoV7;;2 0 7 B 4 %!d|VdG_ 0)dG_*&%-aIq)UV#W X #LMTT tff?$PXIY[adhci D6