@firefunc-agent/runner 0.7.0 → 0.7.1

package/dist/job.js

@@ -1,4 +1,4 @@
-import { mkdtempSync, rmSync, existsSync, mkdirSync, writeFileSync, copyFileSync } from 'node:fs';
+import { mkdtempSync, rmSync, existsSync, mkdirSync, writeFileSync, copyFileSync, appendFileSync, chmodSync, readdirSync, } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join, basename, dirname } from 'node:path';
 import { exec, execOut, spawnBackground, killProcessTree } from './exec.js';
@@ -13,9 +13,20 @@ const gitMutex = createKeyedMutex();
 function saveSessionLog(runId, stdout, stderr) {
     try {
         const dir = join(dirname(configPath()), 'logs');
-        mkdirSync(dir, { recursive: true });
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+        try {
+            chmodSync(dir, 0o700);
+            for (const f of readdirSync(dir)) {
+                if (f.endsWith('.log'))
+                    chmodSync(join(dir, f), 0o600);
+            }
+        }
+        catch {
+        }
         const p = join(dir, `${runId}.log`);
-        writeFileSync(p, `=== agent stdout ===\n${stdout}\n\n=== agent stderr ===\n${stderr}\n`);
+        writeFileSync(p, redact(`=== agent stdout ===\n${stdout}\n\n=== agent stderr ===\n${stderr}\n`), {
+            mode: 0o600,
+        });
         return p;
     }
     catch {
@@ -221,9 +232,20 @@ export async function runJob(job, cfg, api, viewer, opts) {
             log(`session dev-server PORT=${opts.devServerPort} (parallel-safe)`);
         }
         if (cfg.envFile) {
+            try {
+                const gitDir = (await execOut('git', ['-C', worktree, 'rev-parse', '--git-dir'])).trim();
+                if (gitDir) {
+                    const abs = gitDir.startsWith('/') ? gitDir : join(worktree, gitDir);
+                    mkdirSync(join(abs, 'info'), { recursive: true });
+                    appendFileSync(join(abs, 'info', 'exclude'), '\n# FireFunc: never commit the injected env file\n.env\n');
+                }
+            }
+            catch (e) {
+                log(`could not write git exclude for .env: ${e.message}`);
+            }
             try {
                 copyFileSync(cfg.envFile, join(worktree, '.env'));
-                log(`copied ${cfg.envFile} → worktree/.env`);
+                log(`copied ${cfg.envFile} → worktree/.env (excluded from commits)`);
             }
             catch (e) {
                 log(`envFile copy failed (${cfg.envFile}): ${e.message}`);
@@ -337,7 +359,7 @@ export async function runJob(job, cfg, api, viewer, opts) {
                 : `${engineName} exited abnormally (code ${engineRun.code}). ${engineRun.stderr.slice(0, 300)}`);
         }
         const title = job.title ? `fix: ${job.title}` : `fix: ${job.externalId ?? 'FireFunc auto-fix'}`;
-        await exec('git', ['-C', worktree, 'add', '-A']);
+        await exec('git', ['-C', worktree, 'add', '-A', '--', '.', ':(exclude).env']);
         const vsBase = await exec('git', [
             '-C',
             worktree,
@@ -369,6 +391,22 @@ export async function runJob(job, cfg, api, viewer, opts) {
         const gitCred = job.repo ? await api.gitCredential(job.runId) : null;
         if (gitCred)
             log(`using a FireFunc-issued git credential for ${gitCred.repo}`);
+        const staged = await execOut('git', [
+            '-C',
+            worktree,
+            'show',
+            '--name-only',
+            '--format=',
+            'HEAD',
+        ]);
+        const leaked = staged
+            .split('\n')
+            .map((l) => l.trim())
+            .filter((l) => l === '.env' || l.endsWith('/.env'));
+        if (leaked.length > 0) {
+            return fail(`refusing to push: the commit contains ${leaked.join(', ')}, which can hold live credentials. ` +
+                `This is a FireFunc bug — please report it. Nothing was pushed.`);
+        }
         const push = gitCred
             ? await pushBranch(worktree, branch, gitCred.repo, gitCred)
             : await exec('git', ['-C', worktree, 'push', '--force-with-lease', 'origin', `${branch}:${branch}`], { timeoutMs: 120_000 });

package/dist/viewer.js

@@ -11,6 +11,10 @@ export function createSessionViewer(opts) {
     const port = opts.port ?? 8787;
     let url = null;
     const server = createServer((req, res) => {
+        const host = req.headers.host;
+        if (host && host !== `127.0.0.1:${port}` && host !== `localhost:${port}`) {
+            return void res.writeHead(403, { 'content-type': 'text/plain' }).end('forbidden');
+        }
         const path = new URL(req.url ?? '/', 'http://127.0.0.1').pathname;
         if (path === '/healthz')
             return void res.writeHead(200).end('ok');

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@firefunc-agent/runner",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "private": false,
   "type": "module",
-  "description": "FireFunc self-hosted runner — an always-on daemon that runs YOUR local coding agent (Claude Code, Codex, Gemini CLI, Cursor CLI) on work FireFunc routes to it, opens pull requests, and reports back. Your machine, your subscriptions.",
+  "description": "FireFunc self-hosted runner \u2014 an always-on daemon that runs YOUR local coding agent (Claude Code, Codex, Gemini CLI, Cursor CLI) on work FireFunc routes to it, opens pull requests, and reports back. Your machine, your subscriptions.",
   "keywords": [
     "firefunc",
     "runner",
@@ -35,7 +35,7 @@
     "dev": "tsx src/cli.ts",
     "start": "tsx src/cli.ts start",
     "build": "npm run clean && tsc -p .",
-    "prepack": "npm run build && node -e \"const{existsSync}=require('fs');if(!existsSync('dist/cli.js')){console.error('dist/cli.js is missing — refusing to pack a package with no code in it');process.exit(1)}\"",
+    "prepack": "npm run build && node -e \"const{existsSync}=require('fs');if(!existsSync('dist/cli.js')){console.error('dist/cli.js is missing \u2014 refusing to pack a package with no code in it');process.exit(1)}\"",
     "lint": "echo '[runner] lint TBD'",
     "typecheck": "tsc -p . --noEmit",
     "test": "vitest run --passWithNoTests",