@agentage/cli 0.35.0 → 0.38.0

package/dist/sync/git/planner.js

@@ -1,46 +0,0 @@
-import { expandPath } from '@agentage/memory-core';
-import { isSafeRemoteUrl, redactRemoteUrl } from './remote-url.js';
-// The unified schema stores interval as a bare non-negative integer; sync treats it as SECONDS
-// (there is no minutes marker in the schema, so seconds is the least-surprising reading and keeps
-// tests fast). 0 means manual-only (excluded from the daemon auto loop).
-export const DEFAULT_INTERVAL_SECONDS = 300;
-// When `ignore` is absent these editor/runtime files are excluded from sync; a set value REPLACES
-// the defaults, and an empty array syncs everything.
-export const DEFAULT_IGNORE = ['.obsidian/', 'data.json'];
-// The reserved account remote is a sentinel, not a URL: never synced over external git.
-const RESERVED_REMOTE = 'agentage';
-export const resolveIgnore = (ignore) => ignore === undefined ? [...DEFAULT_IGNORE] : ignore;
-export const intervalMs = (seconds) => Math.max(0, Math.floor(seconds)) * 1000;
-// One vault may carry several origins; each gets a distinct remote name within its own repo.
-const remoteNameFor = (index) => (index === 0 ? 'sync' : `sync-${index}`);
-// Flatten (vault, origin) pairs into sync targets. A target needs a local `path` (the working
-// copy to commit/push from) AND an external origin; origin-only entries (remote backends) and the
-// reserved account remote are skipped.
-export const syncTargets = (config) => {
-    const out = [];
-    for (const [vault, entry] of Object.entries(config.vaults ?? {})) {
-        if (!entry.path || !entry.origin?.length)
-            continue;
-        entry.origin.forEach((origin, index) => {
-            const remote = origin.remote.trim();
-            if (!remote || remote === RESERVED_REMOTE)
-                return;
-            // One poisoned origin must not run code or kill the whole cycle: skip it with a warning.
-            if (!isSafeRemoteUrl(remote)) {
-                console.warn(`agentage: skipping unsafe remote for vault '${vault}': ${redactRemoteUrl(remote)}`);
-                return;
-            }
-            out.push({
-                vault,
-                path: expandPath(entry.path),
-                remoteName: remoteNameFor(index),
-                remote,
-                intervalSeconds: origin.interval ?? DEFAULT_INTERVAL_SECONDS,
-                ignore: resolveIgnore(origin.ignore),
-            });
-        });
-    }
-    return out;
-};
-// The targets the daemon auto-loop schedules: interval 0 is manual-only and excluded.
-export const autoSyncTargets = (config) => syncTargets(config).filter((t) => t.intervalSeconds > 0);

package/dist/sync/git/remote-url.d.ts

@@ -1,3 +0,0 @@
-export declare const isSafeRemoteUrl: (remote: string) => boolean;
-export declare const assertSafeRemoteUrl: (remote: string) => void;
-export declare const redactRemoteUrl: (remote: string) => string;

package/dist/sync/git/remote-url.js

@@ -1,30 +0,0 @@
-// Git treats a remote of the form `<helper>::<address>` as a transport helper (`ext::sh -c ...`,
-// `fd::...`) and runs it as a command on fetch/push - arbitrary code execution if a poisoned
-// vaults.json origin is auto-synced. Only conventional transports are allowed so no origin can
-// ever execute code. A leading `-` is also refused (git could read it as an option).
-// file:// and absolute local paths are safe transports too (a bare repo on disk/mount); unlike a
-// transport helper they cannot run an arbitrary command.
-const ALLOWED_SCHEMES = ['https://', 'ssh://', 'git://', 'file://'];
-// scp-like short syntax without a scheme: user@host:path.
-const SCP_LIKE = /^[^\s/@]+@[^\s/:]+:.+$/;
-export const isSafeRemoteUrl = (remote) => {
-    const url = remote.trim();
-    if (!url || url.startsWith('-'))
-        return false;
-    const lower = url.toLowerCase();
-    if (ALLOWED_SCHEMES.some((s) => lower.startsWith(s)))
-        return true;
-    if (url.includes('::'))
-        return false; // transport-helper syntax (ext::, fd::, <helper>::)
-    if (url.startsWith('/'))
-        return true; // absolute local path
-    return SCP_LIKE.test(url);
-};
-export const assertSafeRemoteUrl = (remote) => {
-    if (!isSafeRemoteUrl(remote))
-        throw new Error(`unsafe git remote URL ${JSON.stringify(remote.trim())} ` +
-            '(allowed: https://, ssh://, git://, file://, user@host:path, or an absolute local path)');
-};
-// Redact `user:password@host` credentials for display; the stored value is left untouched. A bare
-// `user@host` (scp-like, or scheme userinfo without a password) carries no secret and is kept.
-export const redactRemoteUrl = (remote) => remote.replace(/(:\/\/[^/@]+?):[^/@]+@/, '$1:***@');