@bondsmith/bondsmithd 0.1.9 → 0.1.10

package/dist/index.js

@@ -1006,7 +1006,7 @@ import { sign } from "crypto";
 import WebSocket from "ws";
 
 // src/version.ts
-var DAEMON_VERSION = true ? "0.1.9" : "dev";
+var DAEMON_VERSION = true ? "0.1.10" : "dev";
 var VERSION_FLAGS = ["--version", "-v"];
 function versionLine() {
   return `bondsmithd ${DAEMON_VERSION} (protocol ${PROTOCOL_VERSION})`;
@@ -1357,6 +1357,14 @@ function createOutputPacer(options) {
   };
 }
 
+// src/ws/sanitize-insert-text.ts
+var DISALLOWED_CHARACTERS = /[\x00-\x08\x0b-\x1f\x7f-\x9f‪-‮⁦-⁩]/g;
+function sanitizeInsertText(text) {
+  const withLineFeeds = text.replace(/\r\n?/g, "\n");
+  const sanitized = withLineFeeds.replace(DISALLOWED_CHARACTERS, "");
+  return { text: sanitized, strippedCount: withLineFeeds.length - sanitized.length };
+}
+
 // src/ws/router.ts
 var SIGNABLE_ACTION_SET = new Set(SIGNABLE_ACTIONS);
 function isSignableAction(type) {
@@ -1640,10 +1648,14 @@ async function dispatch(conn, message, {
     case "session.insertText": {
       const session = getSessionOrError(sessionManager, conn, message.sessionId);
       if (!session) return;
+      const { text, strippedCount } = sanitizeInsertText(message.text);
+      if (strippedCount > 0) {
+        console.warn(`bondsmithd: stripped ${strippedCount} control characters from inserted text`);
+      }
       try {
         await sendKeysLiteral(
           session.tmuxSessionName,
-          `${BRACKETED_PASTE_START}${message.text}${BRACKETED_PASTE_END}`
+          `${BRACKETED_PASTE_START}${text}${BRACKETED_PASTE_END}`
         );
       } catch (err) {
         conn.send(error(errorMessageOf(err, "failed to insert text")));
@@ -1863,6 +1875,10 @@ var ConnectionAuthState = class {
   isRevoked() {
     return this.revoked;
   }
+  /** Unsolicited daemon broadcasts (session.created/updated) go only to connections that completed the handshake and still hold authority. */
+  canReceiveBroadcasts() {
+    return this.authenticated !== null && !this.revoked;
+  }
   /** The controller/account this connection authenticated as, or null before a successful handshake. Used by verify-command.ts to reject an envelope signed by a DIFFERENT controller than the one that authenticated this connection. */
   getAuthenticatedIdentity() {
     return this.authenticated;
@@ -2040,7 +2056,7 @@ function startRelayClient(deps) {
   let reconnectTimer;
   function broadcast(message) {
     for (const entry of sessions.values()) {
-      entry.conn.send(message);
+      if (entry.connectionAuth.canReceiveBroadcasts()) entry.conn.send(message);
     }
   }
   const routerDeps = { ...deps, broadcast };
@@ -3714,7 +3730,9 @@ function createDaemonWebSocketServer(httpServer, config, daemonFingerprint, pend
   function broadcast(message) {
     const payload = JSON.stringify(message);
     for (const client of wss.clients) {
-      if (client.readyState === client.OPEN) client.send(payload);
+      if (client.readyState === client.OPEN && connectionAuthBySocket.get(client)?.canReceiveBroadcasts()) {
+        client.send(payload);
+      }
     }
   }
   sessionManager.onSessionUpdated((session) => {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@bondsmith/bondsmithd",
-	"version": "0.1.9",
+	"version": "0.1.10",
 	"private": false,
 	"description": "Local daemon for Bondsmith agent sessions — runs on the user's own machine, pairs with a Bondsmith account, and exposes tmux-backed terminal sessions to the Bondsmith web app over a signed WebSocket protocol.",
 	"homepage": "https://bondsmith.dev",