npm - @agent-native/core - Versions diffs - 0.131.5 → 0.131.7 - Mend

@agent-native/core 0.131.5 → 0.131.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (350) hide show

package/dist/guards/no-env-credentials.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"no-env-credentials.js","sourceRoot":"","sources":["../../src/guards/no-env-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,QAAQ,EACR,IAAI,GACL,MAAM,iBAAiB,CAAC;AAGzB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,cAAc;IACd,qBAAqB;IACrB,UAAU;IACV,IAAI;IACJ,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,WAAW;IACX,0BAA0B;IAC1B,oBAAoB;IACpB,iBAAiB;IACjB,kBAAkB;IAClB,sBAAsB;IACtB,qBAAqB;IACrB,0BAA0B;IAC1B,8BAA8B;IAC9B,aAAa;IACb,YAAY;IACZ,cAAc;IACd,MAAM;IACN,MAAM;IACN,wBAAwB;CACzB,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG;IACvB,MAAM;IACN,eAAe;IACf,QAAQ;IACR,UAAU;IACV,SAAS;IACT,KAAK;CACN,CAAC;AAEF;;;oDAGoD;AACpD,MAAM,sBAAsB,GAAG;IAC7B,kBAAkB;IAClB,kBAAkB;IAClB,YAAY;CACb,CAAC;AAEF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAErD,MAAM,cAAc,GAAG,2CAA2C,CAAC;AACnE,MAAM,uBAAuB,GAAG,+CAA+C,CAAC;AAEhF,MAAM,cAAc,GAClB,0EAA0E,CAAC;AAE7E,MAAM,sBAAsB,GAC1B,wDAAwD,CAAC;AAE3D,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,KAAe,EAAE,OAAe;IACvD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAe,EACf,OAAe,EACf,GAAW,EACX,GAAW;IAEX,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC;QACjD,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAClC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,yBAAyB,EAAE,CAAC;IAErE,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,GAAG,EAAE,QAAQ,GAAG,+CAA+C;aAChE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,GAAG,EAAE,0DAA0D;aAChE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAyB;IAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACzB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC3D,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAEjC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,SAAS;QAErE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEnC,cAAc,CAAC,SAAS,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC;YACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;YACrC,IACE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBACvB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBACxB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EACxB,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,gBAAgB,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpC,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC9D,IAAI,OAAO,CAAC,EAAE;oBAAE,SAAS;gBACzB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,GAAG;oBACT,IAAI;oBACJ,OAAO,EAAE,eAAe,GAAG,qBAAqB,OAAO,CAAC,GAAG,EAAE;iBAC9D,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,GAAG;gBACT,IAAI;gBACJ,OAAO,EAAE,eAAe,GAAG,gJAAgJ;aAC5K,CAAC,CAAC;QACL,CAAC;QAED,sBAAsB,CAAC,SAAS,GAAG,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC;YACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;YACrC,IACE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBACvB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBACxB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EACxB,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;gBACtE,IAAI,OAAO,CAAC,EAAE;oBAAE,SAAS;gBACzB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,GAAG;oBACT,IAAI;oBACJ,OAAO,EAAE,2CAA2C,OAAO,CAAC,GAAG,EAAE;iBAClE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,GAAG;gBACT,IAAI;gBACJ,OAAO,EAAE,iFAAiF;aAC3F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC;AAClD,CAAC","sourcesContent":["/*\n scanEnvCredentials — ported from `scripts/guard-no-env-credentials.mjs`.\n \n User credentials are per-user (or per-org) data. They MUST live in SQL,\n * scoped by `userEmail` / `orgId`, never in `process.env` — a deployment's\n * env vars are shared by every signed-in user. This guard flags any\n * `process.env.<KEY>` / `process.env[\"KEY\"]` read whose key is not on the\n * deploy-level allowlist (`DATABASE_URL`, `BETTER_AUTH_SECRET`, etc.), plus\n * any dynamic `process.env[key]` read (the key is only known at runtime, so\n * it can never be allowlisted safely).\n \n Conditional guard — per report 005's V1 guard set table, this is \"the big\n * one\": the original only scans a curated set of monorepo subtrees\n * (`packages/core/src/{credentials,secrets,vault,agent}/`, template\n * credential libs/routes) via `FORBIDDEN_PATH_PREDICATES` — none of which\n * exist in a generated app, so nothing would ever be scanned. This port\n * replaces that default-allow-outside-a-curated-subtree behavior with\n * default-deny across the whole app source tree: every `process.env.<KEY>`\n * read anywhere in app source must be on the deploy-var allowlist (kept\n * verbatim) or carry the opt-out marker. `HIGH_RISK_ENV_KEY_ALLOWLIST`,\n * `HIGH_RISK_PROCESS_ENV_ALLOWLIST`, and `HIGH_RISK_ENV_VARS_WRITE_ALLOWLIST`\n * — the three monorepo-file-keyed exception maps for specific template\n * platform-adapter files — are dropped entirely per the report; with\n * default-deny scanning already covering every `process.env` read\n * everywhere, the narrower `env-config.ts`/`core-routes.ts`-specific\n * registration checks those maps supported become redundant (any\n * high-risk key would already be caught by the general scan) and are\n * dropped along with them. The per-line `// guard:allow-env-credential`\n * marker remains the only escape hatch.\n \n Opt-out (same line, or the line immediately above):\n * process.env.SOMETHING // guard:allow-env-credential — short reason\n /\n\nimport {\n lineColForOffset,\n readFileSafe,\n relPosix,\n walk,\n} from \"./scan-utils.js\";\nimport type { GuardFinding, GuardResult, GuardScanOptions } from \"./types.js\";\n\nconst ALLOWLIST_EXACT = new Set([\n \"DATABASE_URL\",\n \"DATABASE_AUTH_TOKEN\",\n \"NODE_ENV\",\n \"CI\",\n \"DEBUG\",\n \"NETLIFY\",\n \"VERCEL\",\n \"RENDER\",\n \"FLY_APP_NAME\",\n \"K_SERVICE\",\n \"AWS_LAMBDA_FUNCTION_NAME\",\n \"BETTER_AUTH_SECRET\",\n \"BETTER_AUTH_URL\",\n \"NOTION_CLIENT_ID\",\n \"NOTION_CLIENT_SECRET\",\n \"NOTION_STATE_SECRET\",\n \"GOOGLE_SIGN_IN_CLIENT_ID\",\n \"GOOGLE_SIGN_IN_CLIENT_SECRET\",\n \"AUTH_SECRET\",\n \"A2A_SECRET\",\n \"ACCESS_TOKEN\",\n \"PORT\",\n \"HOST\",\n \"SECRETS_ENCRYPTION_KEY\",\n]);\n\nconst ALLOWLIST_PREFIX = [\n \"npm_\",\n \"AGENT_NATIVE_\",\n \"AGENT_\",\n \"NETLIFY_\",\n \"VERCEL_\",\n \"CF_\",\n];\n\n/* Dev-only paths where ANTHROPIC_API_KEY etc. may legitimately be read\n * from env (local dev tooling, scripts, tests). Portable subset of the\n * original — the monorepo-only `packages/core/src/dev` predicate is\n * dropped (see report 005's V1 guard set table). /\nconst DEV_ONLY_PATH_PATTERNS = [\n /\\.spec\\.[tj]sx?$/,\n /\\.test\\.[tj]sx?$/,\n /^scripts\\//,\n];\n\nconst DEV_ONLY_KEYS = new Set([\"ANTHROPIC_API_KEY\"]);\n\nconst OPT_OUT_MARKER = /\\/\\/\\sguard:allow-env-credential\\b[^\\n]/;\nconst OPT_OUT_REQUIRES_REASON = /\\/\\/\\sguard:allow-env-credential\\s[—-]\\s\\S/;\n\nconst ENV_READ_REGEX =\n /process\\.env(?:\\.([A-Z][A-Z0-9_])\|\\[\\s[\"']([A-Z][A-Z0-9_])[\"']\\s\\])/g;\n\nconst ENV_DYNAMIC_READ_REGEX =\n /process\\.env(?:\\?\\.)?\\s\\[\\s(?![\"'])([^\\]\\n]+?)\\s\\]/g;\n\nfunction isAllowlistedKey(key: string): boolean {\n if (ALLOWLIST_EXACT.has(key)) return true;\n return ALLOWLIST_PREFIX.some((prefix) => key.startsWith(prefix));\n}\n\nfunction isDevOnlyPath(rel: string): boolean {\n return DEV_ONLY_PATH_PATTERNS.some((re) => re.test(rel));\n}\n\nfunction hasOptOutOnLine(lines: string[], lineIdx: number): boolean {\n const cur = lines[lineIdx] ?? \"\";\n if (OPT_OUT_MARKER.test(cur)) return true;\n const prev = lines[lineIdx - 1] ?? \"\";\n if (/^\\s\\/\\//.test(prev) && OPT_OUT_MARKER.test(prev)) return true;\n return false;\n}\n\nfunction optOutOnLineIsValid(\n lines: string[],\n lineIdx: number,\n key: string,\n rel: string,\n): { ok: boolean; why?: string } {\n const cur = lines[lineIdx] ?? \"\";\n const prev = lines[lineIdx - 1] ?? \"\";\n const candidate = OPT_OUT_REQUIRES_REASON.test(cur)\n ? cur\n : OPT_OUT_REQUIRES_REASON.test(prev)\n ? prev\n : null;\n if (!candidate) return { ok: false, why: \"missing or empty reason\" };\n\n if (/dev-only\\b/i.test(candidate)) {\n if (!DEV_ONLY_KEYS.has(key)) {\n return {\n ok: false,\n why: `key \"${key}\" is not in the dev-only credential allowlist`,\n };\n }\n if (!isDevOnlyPath(rel)) {\n return {\n ok: false,\n why: \"dev-only opt-out used outside dev / scripts / test paths\",\n };\n }\n }\n return { ok: true };\n}\n\nexport function scanEnvCredentials(options: GuardScanOptions): GuardResult {\n const { root } = options;\n const findings: GuardFinding[] = [];\n\n for (const file of walk(root)) {\n if (!/\\.(ts\|tsx\|mts\|cts\|js\|mjs\|cjs)$/.test(file)) continue;\n if (file.endsWith(\".d.ts\")) continue;\n const rel = relPosix(root, file);\n\n const contents = readFileSafe(file);\n if (contents === null \|\| !contents.includes(\"process.env\")) continue;\n\n const lines = contents.split(\"\\n\");\n\n ENV_READ_REGEX.lastIndex = 0;\n let m: RegExpExecArray \| null;\n while ((m = ENV_READ_REGEX.exec(contents)) !== null) {\n const key = m[1] ?? m[2];\n if (!key) continue;\n const { line } = lineColForOffset(contents, m.index);\n const lineIdx = line - 1;\n const lineText = lines[lineIdx] ?? \"\";\n const trimmed = lineText.trimStart();\n if (\n trimmed.startsWith(\"\") \|\|\n trimmed.startsWith(\"//\") \|\|\n trimmed.startsWith(\"/\")\n ) {\n continue;\n }\n if (isAllowlistedKey(key)) continue;\n if (hasOptOutOnLine(lines, lineIdx)) {\n const verdict = optOutOnLineIsValid(lines, lineIdx, key, rel);\n if (verdict.ok) continue;\n findings.push({\n file: rel,\n line,\n message: `process.env.${key} opt-out invalid: ${verdict.why}`,\n });\n continue;\n }\n findings.push({\n file: rel,\n line,\n message: `process.env.${key} read — not a deploy-level allowlisted key. User credentials must be read via resolveCredential(key, { userEmail, orgId }), never process.env.`,\n });\n }\n\n ENV_DYNAMIC_READ_REGEX.lastIndex = 0;\n while ((m = ENV_DYNAMIC_READ_REGEX.exec(contents)) !== null) {\n const { line } = lineColForOffset(contents, m.index);\n const lineIdx = line - 1;\n const lineText = lines[lineIdx] ?? \"\";\n const trimmed = lineText.trimStart();\n if (\n trimmed.startsWith(\"\") \|\|\n trimmed.startsWith(\"//\") \|\|\n trimmed.startsWith(\"/\")\n ) {\n continue;\n }\n if (hasOptOutOnLine(lines, lineIdx)) {\n const verdict = optOutOnLineIsValid(lines, lineIdx, \"<dynamic>\", rel);\n if (verdict.ok) continue;\n findings.push({\n file: rel,\n line,\n message: `process.env[<dynamic>] opt-out invalid: ${verdict.why}`,\n });\n continue;\n }\n findings.push({\n file: rel,\n line,\n message: `process.env[<dynamic key>] read — dynamic keys can never be allowlisted safely.`,\n });\n }\n }\n\n return { name: \"no-env-credentials\", findings };\n}\n"]}
1	+ {"version":3,"file":"no-env-credentials.js","sourceRoot":"","sources":["../../src/guards/no-env-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,QAAQ,EACR,IAAI,GACL,MAAM,iBAAiB,CAAC;AAGzB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,cAAc;IACd,qBAAqB;IACrB,UAAU;IACV,IAAI;IACJ,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,WAAW;IACX,0BAA0B;IAC1B,oBAAoB;IACpB,iBAAiB;IACjB,kBAAkB;IAClB,sBAAsB;IACtB,qBAAqB;IACrB,0BAA0B;IAC1B,8BAA8B;IAC9B,aAAa;IACb,YAAY;IACZ,cAAc;IACd,MAAM;IACN,MAAM;IACN,wBAAwB;IACxB,kCAAkC;IAClC,2CAA2C;CAC5C,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG;IACvB,MAAM;IACN,eAAe;IACf,QAAQ;IACR,UAAU;IACV,SAAS;IACT,KAAK;CACN,CAAC;AAEF;;;oDAGoD;AACpD,MAAM,sBAAsB,GAAG;IAC7B,kBAAkB;IAClB,kBAAkB;IAClB,YAAY;CACb,CAAC;AAEF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAErD,MAAM,cAAc,GAAG,2CAA2C,CAAC;AACnE,MAAM,uBAAuB,GAAG,+CAA+C,CAAC;AAEhF,MAAM,cAAc,GAClB,0EAA0E,CAAC;AAE7E,MAAM,sBAAsB,GAC1B,wDAAwD,CAAC;AAE3D,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,KAAe,EAAE,OAAe;IACvD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAe,EACf,OAAe,EACf,GAAW,EACX,GAAW;IAEX,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC;QACjD,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAClC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,yBAAyB,EAAE,CAAC;IAErE,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,GAAG,EAAE,QAAQ,GAAG,+CAA+C;aAChE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,GAAG,EAAE,0DAA0D;aAChE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAyB;IAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACzB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC3D,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAEjC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,SAAS;QAErE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEnC,cAAc,CAAC,SAAS,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC;YACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;YACrC,IACE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBACvB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBACxB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EACxB,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,gBAAgB,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpC,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC9D,IAAI,OAAO,CAAC,EAAE;oBAAE,SAAS;gBACzB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,GAAG;oBACT,IAAI;oBACJ,OAAO,EAAE,eAAe,GAAG,qBAAqB,OAAO,CAAC,GAAG,EAAE;iBAC9D,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,GAAG;gBACT,IAAI;gBACJ,OAAO,EAAE,eAAe,GAAG,gJAAgJ;aAC5K,CAAC,CAAC;QACL,CAAC;QAED,sBAAsB,CAAC,SAAS,GAAG,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC;YACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;YACrC,IACE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBACvB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBACxB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EACxB,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;gBACtE,IAAI,OAAO,CAAC,EAAE;oBAAE,SAAS;gBACzB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,GAAG;oBACT,IAAI;oBACJ,OAAO,EAAE,2CAA2C,OAAO,CAAC,GAAG,EAAE;iBAClE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,GAAG;gBACT,IAAI;gBACJ,OAAO,EAAE,iFAAiF;aAC3F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC;AAClD,CAAC","sourcesContent":["/*\n scanEnvCredentials — ported from `scripts/guard-no-env-credentials.mjs`.\n \n User credentials are per-user (or per-org) data. They MUST live in SQL,\n * scoped by `userEmail` / `orgId`, never in `process.env` — a deployment's\n * env vars are shared by every signed-in user. This guard flags any\n * `process.env.<KEY>` / `process.env[\"KEY\"]` read whose key is not on the\n * deploy-level allowlist (`DATABASE_URL`, `BETTER_AUTH_SECRET`, etc.), plus\n * any dynamic `process.env[key]` read (the key is only known at runtime, so\n * it can never be allowlisted safely).\n \n Conditional guard — per report 005's V1 guard set table, this is \"the big\n * one\": the original only scans a curated set of monorepo subtrees\n * (`packages/core/src/{credentials,secrets,vault,agent}/`, template\n * credential libs/routes) via `FORBIDDEN_PATH_PREDICATES` — none of which\n * exist in a generated app, so nothing would ever be scanned. This port\n * replaces that default-allow-outside-a-curated-subtree behavior with\n * default-deny across the whole app source tree: every `process.env.<KEY>`\n * read anywhere in app source must be on the deploy-var allowlist (kept\n * verbatim) or carry the opt-out marker. `HIGH_RISK_ENV_KEY_ALLOWLIST`,\n * `HIGH_RISK_PROCESS_ENV_ALLOWLIST`, and `HIGH_RISK_ENV_VARS_WRITE_ALLOWLIST`\n * — the three monorepo-file-keyed exception maps for specific template\n * platform-adapter files — are dropped entirely per the report; with\n * default-deny scanning already covering every `process.env` read\n * everywhere, the narrower `env-config.ts`/`core-routes.ts`-specific\n * registration checks those maps supported become redundant (any\n * high-risk key would already be caught by the general scan) and are\n * dropped along with them. The per-line `// guard:allow-env-credential`\n * marker remains the only escape hatch.\n \n Opt-out (same line, or the line immediately above):\n * process.env.SOMETHING // guard:allow-env-credential — short reason\n /\n\nimport {\n lineColForOffset,\n readFileSafe,\n relPosix,\n walk,\n} from \"./scan-utils.js\";\nimport type { GuardFinding, GuardResult, GuardScanOptions } from \"./types.js\";\n\nconst ALLOWLIST_EXACT = new Set([\n \"DATABASE_URL\",\n \"DATABASE_AUTH_TOKEN\",\n \"NODE_ENV\",\n \"CI\",\n \"DEBUG\",\n \"NETLIFY\",\n \"VERCEL\",\n \"RENDER\",\n \"FLY_APP_NAME\",\n \"K_SERVICE\",\n \"AWS_LAMBDA_FUNCTION_NAME\",\n \"BETTER_AUTH_SECRET\",\n \"BETTER_AUTH_URL\",\n \"NOTION_CLIENT_ID\",\n \"NOTION_CLIENT_SECRET\",\n \"NOTION_STATE_SECRET\",\n \"GOOGLE_SIGN_IN_CLIENT_ID\",\n \"GOOGLE_SIGN_IN_CLIENT_SECRET\",\n \"AUTH_SECRET\",\n \"A2A_SECRET\",\n \"ACCESS_TOKEN\",\n \"PORT\",\n \"HOST\",\n \"SECRETS_ENCRYPTION_KEY\",\n \"WORKSPACE_SECRETS_ENCRYPTION_KEY\",\n \"WORKSPACE_SECRETS_ENCRYPTION_KEY_PREVIOUS\",\n]);\n\nconst ALLOWLIST_PREFIX = [\n \"npm_\",\n \"AGENT_NATIVE_\",\n \"AGENT_\",\n \"NETLIFY_\",\n \"VERCEL_\",\n \"CF_\",\n];\n\n/* Dev-only paths where ANTHROPIC_API_KEY etc. may legitimately be read\n * from env (local dev tooling, scripts, tests). Portable subset of the\n * original — the monorepo-only `packages/core/src/dev` predicate is\n * dropped (see report 005's V1 guard set table). /\nconst DEV_ONLY_PATH_PATTERNS = [\n /\\.spec\\.[tj]sx?$/,\n /\\.test\\.[tj]sx?$/,\n /^scripts\\//,\n];\n\nconst DEV_ONLY_KEYS = new Set([\"ANTHROPIC_API_KEY\"]);\n\nconst OPT_OUT_MARKER = /\\/\\/\\sguard:allow-env-credential\\b[^\\n]/;\nconst OPT_OUT_REQUIRES_REASON = /\\/\\/\\sguard:allow-env-credential\\s[—-]\\s\\S/;\n\nconst ENV_READ_REGEX =\n /process\\.env(?:\\.([A-Z][A-Z0-9_])\|\\[\\s[\"']([A-Z][A-Z0-9_])[\"']\\s\\])/g;\n\nconst ENV_DYNAMIC_READ_REGEX =\n /process\\.env(?:\\?\\.)?\\s\\[\\s(?![\"'])([^\\]\\n]+?)\\s\\]/g;\n\nfunction isAllowlistedKey(key: string): boolean {\n if (ALLOWLIST_EXACT.has(key)) return true;\n return ALLOWLIST_PREFIX.some((prefix) => key.startsWith(prefix));\n}\n\nfunction isDevOnlyPath(rel: string): boolean {\n return DEV_ONLY_PATH_PATTERNS.some((re) => re.test(rel));\n}\n\nfunction hasOptOutOnLine(lines: string[], lineIdx: number): boolean {\n const cur = lines[lineIdx] ?? \"\";\n if (OPT_OUT_MARKER.test(cur)) return true;\n const prev = lines[lineIdx - 1] ?? \"\";\n if (/^\\s\\/\\//.test(prev) && OPT_OUT_MARKER.test(prev)) return true;\n return false;\n}\n\nfunction optOutOnLineIsValid(\n lines: string[],\n lineIdx: number,\n key: string,\n rel: string,\n): { ok: boolean; why?: string } {\n const cur = lines[lineIdx] ?? \"\";\n const prev = lines[lineIdx - 1] ?? \"\";\n const candidate = OPT_OUT_REQUIRES_REASON.test(cur)\n ? cur\n : OPT_OUT_REQUIRES_REASON.test(prev)\n ? prev\n : null;\n if (!candidate) return { ok: false, why: \"missing or empty reason\" };\n\n if (/dev-only\\b/i.test(candidate)) {\n if (!DEV_ONLY_KEYS.has(key)) {\n return {\n ok: false,\n why: `key \"${key}\" is not in the dev-only credential allowlist`,\n };\n }\n if (!isDevOnlyPath(rel)) {\n return {\n ok: false,\n why: \"dev-only opt-out used outside dev / scripts / test paths\",\n };\n }\n }\n return { ok: true };\n}\n\nexport function scanEnvCredentials(options: GuardScanOptions): GuardResult {\n const { root } = options;\n const findings: GuardFinding[] = [];\n\n for (const file of walk(root)) {\n if (!/\\.(ts\|tsx\|mts\|cts\|js\|mjs\|cjs)$/.test(file)) continue;\n if (file.endsWith(\".d.ts\")) continue;\n const rel = relPosix(root, file);\n\n const contents = readFileSafe(file);\n if (contents === null \|\| !contents.includes(\"process.env\")) continue;\n\n const lines = contents.split(\"\\n\");\n\n ENV_READ_REGEX.lastIndex = 0;\n let m: RegExpExecArray \| null;\n while ((m = ENV_READ_REGEX.exec(contents)) !== null) {\n const key = m[1] ?? m[2];\n if (!key) continue;\n const { line } = lineColForOffset(contents, m.index);\n const lineIdx = line - 1;\n const lineText = lines[lineIdx] ?? \"\";\n const trimmed = lineText.trimStart();\n if (\n trimmed.startsWith(\"\") \|\|\n trimmed.startsWith(\"//\") \|\|\n trimmed.startsWith(\"/\")\n ) {\n continue;\n }\n if (isAllowlistedKey(key)) continue;\n if (hasOptOutOnLine(lines, lineIdx)) {\n const verdict = optOutOnLineIsValid(lines, lineIdx, key, rel);\n if (verdict.ok) continue;\n findings.push({\n file: rel,\n line,\n message: `process.env.${key} opt-out invalid: ${verdict.why}`,\n });\n continue;\n }\n findings.push({\n file: rel,\n line,\n message: `process.env.${key} read — not a deploy-level allowlisted key. User credentials must be read via resolveCredential(key, { userEmail, orgId }), never process.env.`,\n });\n }\n\n ENV_DYNAMIC_READ_REGEX.lastIndex = 0;\n while ((m = ENV_DYNAMIC_READ_REGEX.exec(contents)) !== null) {\n const { line } = lineColForOffset(contents, m.index);\n const lineIdx = line - 1;\n const lineText = lines[lineIdx] ?? \"\";\n const trimmed = lineText.trimStart();\n if (\n trimmed.startsWith(\"\") \|\|\n trimmed.startsWith(\"//\") \|\|\n trimmed.startsWith(\"/\")\n ) {\n continue;\n }\n if (hasOptOutOnLine(lines, lineIdx)) {\n const verdict = optOutOnLineIsValid(lines, lineIdx, \"<dynamic>\", rel);\n if (verdict.ok) continue;\n findings.push({\n file: rel,\n line,\n message: `process.env[<dynamic>] opt-out invalid: ${verdict.why}`,\n });\n continue;\n }\n findings.push({\n file: rel,\n line,\n message: `process.env[<dynamic key>] read — dynamic keys can never be allowlisted safely.`,\n });\n }\n }\n\n return { name: \"no-env-credentials\", findings };\n}\n"]}

package/dist/integrations/adapters/slack.js CHANGED Viewed

@@ -1671,7 +1671,9 @@ function createSlackRunProgress(token, incoming, channel, threadTs, streamTs) {
                     ? "in_progress"
                     : event.status === "done"
                         ? "complete"
-                        : "error";
+                        : event.status === "pending"
+                            ? "in_progress"
+                            : "error";
                 const title = delegatedTaskTitle(event.agent);
                 tasks.set(id, { title, status });
                 await append({
@@ -1679,9 +1681,11 @@ function createSlackRunProgress(token, incoming, channel, threadTs, streamTs) {
                     id,
                     title,
                     status,
-                    ...(event.status === "start"
+                    ...(event.status === "start" || event.status === "pending"
                         ? {
-                            details: `I’m contacting ${shortTaskTitle(event.agent)} for an answer.`,
+                            details: event.status === "pending"
+                                ? `${shortTaskTitle(event.agent)} is still working and will need another status check.`
+                                : `I’m contacting ${shortTaskTitle(event.agent)} for an answer.`,
                         }
                         : {}),
                 });