AikidoSec-safe-chain/packages/safe-chain/src/shell-integration/startup-scripts/init-pwsh.ps1

# Use cross-platform path separator (: on Unix, ; on Windows)
# $IsWindows is only available in PowerShell Core 6.0+. If it doesn't exist, assume Windows PowerShell
$isWindowsPlatform = if (Test-Path variable:IsWindows) { $IsWindows } else { $true }
$pathSeparator = if ($isWindowsPlatform) { ';' } else { ':' }
$safeChainBase = Split-Path -Parent $PSScriptRoot
$safeChainBin = Join-Path $safeChainBase 'bin'
$env:PATH = "$env:PATH$pathSeparator$safeChainBin"

function npx {
    Invoke-WrappedCommand "npx" $args $MyInvocation.Line $MyInvocation.OffsetInLine
}

function yarn {
    Invoke-WrappedCommand "yarn" $args $MyInvocation.Line $MyInvocation.OffsetInLine
}

function pnpm {
    Invoke-WrappedCommand "pnpm" $args $MyInvocation.Line $MyInvocation.OffsetInLine
}

function pnpx {
    Invoke-WrappedCommand "pnpx" $args $MyInvocation.Line $MyInvocation.OffsetInLine
}

function bun {
    Invoke-WrappedCommand "bun" $args $MyInvocation.Line $MyInvocation.OffsetInLine
}

function bunx {
    Invoke-WrappedCommand "bunx" $args $MyInvocation.Line $MyInvocation.OffsetInLine
}

function npm {
    # If args is just -v or --version and nothing else, just run the npm version command
    # This is because nvm uses this to check the version of npm
    if (($args.Length -eq 1) -and (($args[0] -eq "-v") -or ($args[0] -eq "--version"))) {
        Invoke-RealCommand "npm" $args
        return
    }

    Invoke-WrappedCommand "npm" $args $MyInvocation.Line $MyInvocation.OffsetInLine
}

function pip {
    Invoke-WrappedCommand "pip" $args $MyInvocation.Line $MyInvocation.OffsetInLine
}

function pip3 {
    Invoke-WrappedCommand "pip3" $args $MyInvocation.Line $MyInvocation.OffsetInLine
}

function uv {
    Invoke-WrappedCommand "uv" $args $MyInvocation.Line $MyInvocation.OffsetInLine
}

function uvx {
    Invoke-WrappedCommand "uvx" $args $MyInvocation.Line $MyInvocation.OffsetInLine
}

function poetry {
    Invoke-WrappedCommand "poetry" $args $MyInvocation.Line $MyInvocation.OffsetInLine
}

# `python -m pip`, `python -m pip3`.
function python {
    Invoke-WrappedCommand 'python' $args $MyInvocation.Line $MyInvocation.OffsetInLine
}

# `python3 -m pip`, `python3 -m pip3'.
function python3 {
    Invoke-WrappedCommand 'python3' $args $MyInvocation.Line $MyInvocation.OffsetInLine
}

function pipx {
    Invoke-WrappedCommand "pipx" $args $MyInvocation.Line $MyInvocation.OffsetInLine
}

function Write-SafeChainWarning {
    param([string]$Command)
    
    # PowerShell equivalent of ANSI color codes: yellow background, black text for "Warning:"
    Write-Host "Warning:" -BackgroundColor Yellow -ForegroundColor Black -NoNewline
    Write-Host " safe-chain is not available to protect you from installing malware. $Command will run without it."
    
    # Cyan text for the install command
    Write-Host "Install safe-chain by using " -NoNewline
    Write-Host "npm install -g @aikidosec/safe-chain" -ForegroundColor Cyan -NoNewline
    Write-Host "."
}

function Test-CommandAvailable {
    param([string]$Command)
    
    try {
        Get-Command $Command -ErrorAction Stop | Out-Null
        return $true
    }
    catch {
        return $false
    }
}

function Invoke-RealCommand {
    param(
        [string]$Command,
        [string[]]$Arguments
    )
    
    # Find the real executable to avoid calling our wrapped functions
    $realCommand = Get-Command -Name $Command -CommandType Application | Select-Object -First 1
    if ($realCommand) {
        & $realCommand.Source @Arguments
    }
}

function Get-ReconstructedArguments {
    param(
        [string]$RawLine,
        [int]$RawOffset
    )

    if (-not $RawLine) { return $null }

    $tokens = [System.Management.Automation.PSParser]::Tokenize($RawLine, [ref]$null)
    $newArgs = @()
    $foundCommand = $false

    foreach ($t in $tokens) {
        if (-not $foundCommand) {
            if ($t.Start -eq ($RawOffset - 1)) { $foundCommand = $true }
            continue
        }
        
        if ($t.Type -eq 'Operator' -and $t.Content -match '[|;&]') { break }
        
        # Stop if complex variable expansion is used
        if ($t.Type -eq 'Variable' -or $t.Type -eq 'Group' -or $t.Type -eq 'SubExpression') {
            return $null
        }
        
        $newArgs += $t.Content
    }

    if ($foundCommand) {
        return ,$newArgs
    }
    return $null
}

function Invoke-WrappedCommand {
    param(
        [string]$OriginalCmd,
        [string[]]$Arguments,
        [string]$RawLine = $null,
        [int]$RawOffset = 0
    )

    # Use raw line parsing to recover arguments like '--' that PowerShell consumes
    if ($RawLine) {
        $reconstructedArgs = Get-ReconstructedArguments $RawLine $RawOffset
        if ($null -ne $reconstructedArgs) {
            $Arguments = $reconstructedArgs
        }
    }

    if ($isWindowsPlatform -and (Test-CommandAvailable "safe-chain.cmd")) {
        & safe-chain.cmd $OriginalCmd @Arguments
    }
    elseif (Test-CommandAvailable "safe-chain") {
        & safe-chain $OriginalCmd @Arguments
    }
    else {
        Write-SafeChainWarning $OriginalCmd
        Invoke-RealCommand $OriginalCmd $Arguments
    }
}