@arjunkhera/atlas 0.3.0 → 0.3.2

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "atlas",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "Atlas: the delivery lifecycle, its crews and the Atlas tools, for any repository.",
   "author": {
     "name": "Arjun Khera"

package/door/cli.mjs

@@ -51,6 +51,10 @@ Atlas ${ATLAS_VERSION}. Check version ${CHECK_VERSION}; it reads spec ${Object.k
 A person merges every file the tooling writer writes.
 `;
 
+// A switch never takes the next word as its value, so it may come before a
+// path: `atlas ste --share page.md` reads page.md (a miss on 6 October).
+const SWITCHES = new Set(['help', 'share', 'replace-unknown', 'workflow', 'dry-run', 'local', 'skip-global', 'yes']);
+
 function options(argv) {
   const out = { _: [] };
   for (let index = 0; index < argv.length; index += 1) {
@@ -58,7 +62,7 @@ function options(argv) {
     if (!flag.startsWith('--')) { out._.push(flag); continue; }
     const key = flag.slice(2);
     const value = argv[index + 1];
-    if (value === undefined || value.startsWith('--')) { out[key] = true; continue; }
+    if (SWITCHES.has(key) || value === undefined || value.startsWith('--')) { out[key] = true; continue; }
     out[key] = value;
     index += 1;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arjunkhera/atlas",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "Atlas: the delivery lifecycle, its crews and the Atlas tools, as a Claude Code plugin for any repository.",
   "type": "module",
   "license": "UNLICENSED",

package/work/mcp.mjs

@@ -6,11 +6,14 @@
 // Row F11 (amendment A1.9): the server ships in the Atlas plugin. Claude Code
 // starts it from the plugin's .mcp.json, which sets every variable it reads.
 // The Engram address and key arrive together, as one setting, in
-// ATLAS_ENGRAM. The server reads them from nowhere else.
+// ATLAS_ENGRAM. When that setting arrives empty, the server reads the same
+// value from one owner-only file, ~/.config/atlas/engram-connection (atlas#101:
+// Claude Desktop starts the server with the sensitive setting empty). It reads
+// them from nowhere else.
 import { execFileSync } from 'node:child_process';
 import { randomUUID } from 'node:crypto';
 import { resolve, isAbsolute, dirname, join, delimiter } from 'node:path';
-import { existsSync, realpathSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { existsSync, realpathSync, readFileSync, writeFileSync, mkdirSync, statSync, openSync, fstatSync, closeSync, constants as fsConstants } from 'node:fs';
 import { fileURLToPath } from 'node:url';
 import { createEngramClient } from './lib/client.mjs';
 import { createActionStore } from './lib/action-store.mjs';
@@ -70,9 +73,48 @@ export const TOOLS = [
 // It never throws. A missing, malformed or expired connection is a state, and
 // the server still starts and lists its tools; each tool then answers with the
 // sentence below (fix six of the F11 study).
-const CONNECTION_HELP = 'Set it in the Atlas plugin settings, as "https://<host> <key>".';
+//
+// The setting wins. The file is read only when the setting is empty, and only
+// when it is a plain file that the owner owns and no one else can read. The
+// server opens it once with O_NOFOLLOW and checks that open file, so no swap
+// can slip in between the check and the read. A read error is a refusal, never
+// a throw.
+const CONNECTION_HELP = 'Set it in the Atlas plugin settings, or in the file ~/.config/atlas/engram-connection, as "https://<host> <key>".';
+const CONNECTION_FILE_LIMIT = 16 * 1024;
+export function connectionFile(env) { return env.HOME ? join(env.HOME, '.config', 'atlas', 'engram-connection') : null; }
+function readConnectionFile(env) {
+  const path = connectionFile(env);
+  if (!path) return { raw: '' };
+  const owner = typeof process.getuid === 'function' ? process.getuid() : null;
+  let fd;
+  try {
+    const folder = statSync(dirname(path), { throwIfNoEntry: false });
+    if (!folder) return { raw: '' };
+    if ((owner !== null && folder.uid !== owner) || folder.mode & 0o022) return { refused: `Other users can change ${dirname(path)}. Run: chmod 700 ${dirname(path)}` };
+    try { fd = openSync(path, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW | fsConstants.O_NONBLOCK); } catch (error) {
+      if (error.code === 'ENOENT') return { raw: '' };
+      if (error.code === 'ELOOP') return { refused: `${path} is not a plain file.` };
+      throw error;
+    }
+    const info = fstatSync(fd);
+    if (!info.isFile()) return { refused: `${path} is not a plain file.` };
+    if (owner !== null && info.uid !== owner) return { refused: `${path} belongs to another user.` };
+    if (info.mode & 0o077) return { refused: `Other users can read ${path}. Run: chmod 600 ${path}` };
+    if (info.size > CONNECTION_FILE_LIMIT) return { refused: `${path} is too large to be a connection line.` };
+    return { raw: readFileSync(fd, 'utf8').trim() };
+  } catch (error) {
+    return { refused: `Atlas could not read ${path} (${error.code ?? 'error'}).` };
+  } finally {
+    if (fd !== undefined) closeSync(fd);
+  }
+}
 export function readConnection(env, { allowLoopbackHttp = false, now = Date.now() } = {}) {
-  const raw = unset(env.ATLAS_ENGRAM) ? '' : String(env.ATLAS_ENGRAM).trim();
+  let raw = unset(env.ATLAS_ENGRAM) ? '' : String(env.ATLAS_ENGRAM).trim();
+  if (!raw) {
+    const file = readConnectionFile(env);
+    if (file.refused) return { state: 'bad', message: `The Engram connection file is refused. ${file.refused}` };
+    raw = file.raw;
+  }
   if (!raw) return { state: 'missing', message: `No Engram connection is set. ${CONNECTION_HELP}` };
   const parts = raw.split(/\s+/);
   if (parts.length !== 2) return { state: 'bad', message: `The Engram connection is not in the form "https://<host> <key>". ${CONNECTION_HELP}` };
@@ -87,7 +129,7 @@ export function readConnection(env, { allowLoopbackHttp = false, now = Date.now(
   if (claims.principal_type !== 'user' || !claims.jti || !claims.exp) return { state: 'bad', message: `The Engram key must be a user token with a token id. ${CONNECTION_HELP}` };
   if (claims.exp <= now / 1000) {
     const day = new Date(claims.exp * 1000).toISOString().slice(0, 10);
-    return { state: 'expired', message: `The Engram key expired on ${day}. Enter a new one in the Atlas plugin settings.`, expired: day };
+    return { state: 'expired', message: `The Engram key expired on ${day}. Enter a new one in the Atlas plugin settings, or in ~/.config/atlas/engram-connection.`, expired: day };
   }
   return { state: 'ok', url: url.origin, token, tokenId: claims.jti, expires: new Date(claims.exp * 1000).toISOString().slice(0, 10) };
 }