tirith doctor: enter capability broken (self-test verdict, tirith 0.3.3)

[imm0rtal-v0lt0rb]

Environment

• OS: Arch Linux
• Shell: GNU bash, version 5.3.15(1)-release (x86_64-pc-linux-gnu)
• tirith version (tirith --version): 0.3.3
• Install method (cargo/brew/deb/manual): Cargo/AUR

Doctor output

tirith: no bash safe-mode flag found (enter mode is already enabled)
"\C-j" "_tirith_enter"
"\C-m" "_tirith_enter"
"\e[200~" "_tirith_paste"
tirith 0.3.3
  binary:       /usr/bin/tirith
  shell:        bash
  interactive:  true
  hook dir:     /home/user/.local/share/tirith/shell
  materialized: true
  profile:      /home/user/.bashrc
  hook status:  configured
  requested mode:       enter
  requested enforce:    off
  require-enter:        off
  bash mode:            enter
  effective protection: blocks
  safe mode:            off
  enter capability:     broken (self-test verdict, tirith 0.3.3)
                        enter mode did not deliver an allowed command (issue #111)
  policies:     (none found)
  data dir:     /home/user/.local/share/tirith
  log path:     /home/user/.local/share/tirith/log.jsonl
  last trigger: /home/user/.local/share/tirith/last_trigger.json
  cloaking:     available
  webhooks:     available
  threat DB:    /home/user/.local/share/tirith/tirith-threatdb.dat (7h old, 24456 entries, signature ok)
  anomaly base: off (opt-in — enable with 'tirith baseline learn')

Detection coverage (last 7 days)
  89 commands scanned, 0 blocked, 0 warned
  88 of 89 records have full detection data (1 legacy, pre-upgrade)
  No hidden findings — detection coverage is complete at current paranoia level

  Paranoia levels:
    1-2 (current): Medium+ only — hides Low and Info findings
    3: Low+ — shows low-severity security patterns
    4: All — full detection visibility
  license key:  not found

What happened

• Added the following in the .bashrc:

export TIRITH_BASH_MODE="enter"
export TIRITH_SHELL_DIR="$HOME/.local/share/tirith/shell"
tirith doctor --reset-bash-safe-mode
eval "$(tirith init --shell bash)"
bind -X | grep "tirith"
tirith doctor

• open terminal.
• tirith doctor self tests and reports that Enter mode is broken.

What you expected

Expected tirith doctor output to not show Enter mode being broken.

Command (if applicable)

Any command in the terminal window after tirith doctor finishes its output confirms that Enter mode is indeed broken.

tirith output

tirith: bash is in preexec mode (warn-only, does not block)
  Run 'tirith doctor' to test enter mode (blocking) for this shell
tirith: no issues
tirith: protection downgraded to warn-only (does not block) — run 'tirith doctor' for details
  enter mode failed (previous command not delivered (check shell history)); now warn-only. Persistent — restart your shell, or re-enable with TIRITH_BASH_MODE=enter.

Category

• False positive (benign command flagged)
• False negative (malicious command not flagged)
• Latency issue
• Shell integration issue
• Policy issue
• Other

[Cris70]

Please, is this being worked on? I am having the same problem as outlined here by @imm0rtal-v0lt0rb about a month ago.

[sheeki03]

It is, along with other updates. You can check the open PRs. Will most likely release in the next week or two together in the new version