@hybridlabor-api/aos 4.16.0 → 4.18.0

package/.agents/plugins/marketplace.json

@@ -0,0 +1,20 @@
+{
+  "name": "bdb-aos",
+  "interface": {
+    "displayName": "BDB Agent OS"
+  },
+  "plugins": [
+    {
+      "name": "bdb-aos",
+      "source": {
+        "source": "local",
+        "path": "./plugins/bdb-aos-codex"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Developer Tools"
+    }
+  ]
+}

package/.claude/hooks/aos-bus.mjs

@@ -68,17 +68,21 @@ export function touchSession(name, pid = process.pid) {
 
 const alive = (pid) => { try { process.kill(pid, 0); return true; } catch (e) { return e.code === "EPERM"; } };
 
-export function listSessions() {
+// prune: also delete registrations that are dead, stale or corrupt (registration files only, never inboxes).
+export function listSessions({ prune = false } = {}) {
   const dir = join(homedir(), ".aos", "bus", "sessions");
   const out = [];
   let files = [];
   try { files = readdirSync(dir).filter((f) => f.endsWith(".json")); } catch { /* none */ }
   for (const f of files) {
+    const file = join(dir, f);
+    let live = false;
     try {
-      const file = join(dir, f);
       const r = JSON.parse(readFileSync(file, "utf8"));
-      if (Number.isInteger(r.pid) && alive(r.pid) && Date.now() - lstatSync(file).mtimeMs < STALE_MS) out.push(r);
+      live = Number.isInteger(r.pid) && alive(r.pid) && Date.now() - lstatSync(file).mtimeMs < STALE_MS;
+      if (live) out.push(r);
     } catch { /* corrupt entry */ }
+    if (prune && !live) { try { unlinkSync(file); } catch { /* already gone */ } }
   }
   return out;
 }
@@ -134,7 +138,7 @@ if (isMain()) {
     if (cmd === "send" && words.length >= 2) {
       console.log(sendMessage(words[0], words.slice(1).join(" "), opts));
     } else if (cmd === "list") {
-      for (const s of listSessions()) console.log(`${s.name}\tpid ${s.pid}\t${s.cwd}`);
+      for (const s of listSessions({ prune: true })) console.log(`${s.name}\tpid ${s.pid}\t${s.cwd}`);
     } else {
       console.error("usage: aos-bus send <name> <text...> [--from x] [--wake] | aos-bus list");
       process.exit(2);

package/.claude/hooks/env-file-protection.mjs

@@ -20,7 +20,7 @@
 
 import { readFileSync, realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
-import { basename } from "node:path";
+import { basename, dirname, resolve } from "node:path";
 
 // Templates are committed on purpose and hold no live secret. Blocking them
 // would contradict this hook's own advice below ("write it to .env.example").
@@ -68,8 +68,26 @@ function reasonFor(filePath) {
   ].join("\n");
 }
 
+// The go-gate store (~/.aos/gate: modes and grants, ~/.aos/go: GO tokens) is
+// written only by the AOS hooks. Same honest limit as go-gate's Bash guard: a
+// same-uid agent running its own code can still write there; the store is
+// worthless without the matching human transcript entry the gate re-verifies.
+// /i: APFS and NTFS are case-insensitive, so ~/.AOS/Gate is the same directory.
+const GATE_STORE = /(?:^|[\\/])\.aos[\\/](?:gate|go)(?:[\\/]|$)/i;
+function gateStoreTarget(filePath) {
+  const abs = resolve(filePath.replace(/^~(?=\/|$)/, process.env.HOME || "~"));
+  let real = abs;
+  try { real = `${realpathSync(dirname(abs))}/${basename(abs)}`; } catch { /* parent missing: string check only */ }
+  let realFile = "";
+  try { realFile = realpathSync(abs); } catch { /* file does not exist yet */ } // a symlinked FILE pointing into the store
+  return GATE_STORE.test(abs) || GATE_STORE.test(real) || GATE_STORE.test(`${abs}/`) || (!!realFile && GATE_STORE.test(realFile));
+}
+
 export function envFileReason(filePath) {
   if (typeof filePath !== "string" || !filePath.trim()) return null;
+  if (gateStoreTarget(filePath)) {
+    return `Blocked by env-file-protection hook: ${filePath} is in the AOS go-gate store. Modes and grants are set only by the human typing a plain "gogate ..." message; agents may read the status, never write it.`;
+  }
   // basename(), so a path like /srv/app/.env matches but /srv/app/env-notes.md does not.
   const name = basename(filePath);
   return !ENV_FILE.test(name) || TEMPLATE_FILE.test(name) ? null : reasonFor(filePath);