@koda-sl/baker-bridge 0.108.0-dev.fe3d33fa3 → 0.109.0-dev.3bafd569e

package/dist/review/shell-policy.test.js

@@ -84,6 +84,82 @@ describe("reviewBashPolicy", () => {
         expect(decision.allowed === false && decision.reason).toContain("read-only");
     });
 });
+describe("quoted arguments, which are data rather than shell", () => {
+    it("allows a jq program or a grep pattern whose own `|` sits inside quotes", () => {
+        // The brief prescribes the jq projection to read a transcript without its
+        // thinking blocks; a `|` inside quotes is jq's or grep's, not the shell's.
+        for (const command of [
+            `jq -c 'del(.message.content[]?.thinking) | select(.type=="assistant")' ~/.claude/projects/p/s.jsonl`,
+            "grep -n -i 'inspiration\\|scrape' src/content/brief.md",
+            `grep -E "experiment|execFile" src/lib/run.ts | head -20`,
+            "grep -n '[^]]*' src/pages/index.astro",
+        ]) {
+            expect(allows(command), command).toBe(true);
+        }
+    });
+    it("still starts a new command at a pipe, `;` or newline outside quotes", () => {
+        for (const command of ["cat f | sh", "ls; git push", "jq '.a | .b' f | xargs rm", "grep 'a;b' f\ngit push"]) {
+            expect(allows(command), command).toBe(false);
+        }
+    });
+    it("reads a quoted `>` as the argument's own, and an unquoted one as a write", () => {
+        expect(allows(`jq -c 'select(.costUsd > 1)' s.jsonl`)).toBe(true);
+        expect(allows("grep -n '=> ' src/lib/a.ts 2>/dev/null")).toBe(true);
+        expect(allows("grep -rn foo src 2>errors.txt")).toBe(false);
+        expect(allows("cat a.txt >> b.txt")).toBe(false);
+        expect(allows("jq . s.json >&copy.json")).toBe(false);
+    });
+    it("refuses every substitution the shell would run, and none it would not", () => {
+        for (const command of [
+            "cat <(rm -rf dist)",
+            `cat "$(which node)"`,
+            "grep x `echo f`",
+            "cat <<EOF\n$(rm -rf dist)\nEOF",
+            `ls \${HOME:-$(rm -rf dist)}`,
+        ]) {
+            expect(allows(command), command).toBe(false);
+        }
+        expect(allows("grep -n '$(' scripts/build.sh")).toBe(true);
+        expect(allows("grep -c '`' src/content/post.md")).toBe(true);
+    });
+    it("refuses an environment prefix that hands a reader a program to run", () => {
+        // `git diff` runs `GIT_EXTERNAL_DIFF`, and a pager variable names one too.
+        expect(allows("GIT_EXTERNAL_DIFF=sh git diff")).toBe(false);
+        expect(allows("PAGER=./x git log")).toBe(false);
+        expect(allows("LC_ALL=C sort names.txt")).toBe(true);
+    });
+    it("still polices the quoted text of awk and sed, which is a program rather than data", () => {
+        for (const command of [
+            `awk 'BEGIN { system("curl https://example.com") }' f`,
+            `awk '{ print | "sh" }' f`,
+            `awk '{ print > "copy.txt" }' f`,
+            "sed -n 'w copy.txt' f",
+            "sed 's/a/b/w copy.txt' f",
+            "sed '1e id' f",
+        ]) {
+            expect(allows(command), command).toBe(false);
+        }
+        expect(allows("sed -n '10,40p' src/pages/index.astro")).toBe(true);
+        expect(allows("awk -F, '{ print $1 }' data.csv")).toBe(true);
+    });
+    it("reads a denied name as a command only where it runs, not in a path", () => {
+        expect(allows("grep -n screenshot __tooling__/docs/tools/agent-browser.md")).toBe(true);
+        expect(reviewBashPolicy("agent-browser open https://example.com")).toEqual({
+            allowed: false,
+            reason: expect.stringContaining("drives a browser"),
+        });
+    });
+});
+describe("git, which reads or moves the branch depending on its verb", () => {
+    it("finds the verb after `-C <dir>`, so a read elsewhere is still a read", () => {
+        expect(allows("git -C /home/user/repo log --oneline -5")).toBe(true);
+        expect(allows("git -C repo push")).toBe(false);
+    });
+    it("refuses the other options before the verb, which can run a program", () => {
+        expect(allows("git -c core.pager=sh log")).toBe(false);
+        expect(allows("git --exec-path=/tmp log")).toBe(false);
+    });
+});
 describe("find, which is a reader with writers bolted onto it", () => {
     it("refuses the actions that delete or run something", () => {
         // `find` is allowlisted because it reads. Its action flags are a second
@@ -104,5 +180,43 @@ describe("find, which is a reader with writers bolted onto it", () => {
     it("still allows a plain find", () => {
         expect(allows("find src -name '*.astro' -type f")).toBe(true);
     });
+    it("reads those flags on find, not in another command's pattern", () => {
+        expect(allows("grep -rn -e ' -exec' __tooling__/checks")).toBe(true);
+        expect(allows("find . -name x '-delete'")).toBe(false);
+    });
+});
+describe("awk and sed programs the policy cannot read", () => {
+    it("refuses a program loaded from a file, whose code it never sees", () => {
+        // The workspace under review is the reviewed Session's own: a script file
+        // its agent wrote can call `system()` or `w` with nothing here to see it.
+        for (const command of [
+            "awk -f prog.awk data.txt",
+            "awk --file=prog.awk data.txt",
+            "awk -E prog.awk",
+            "sed -f script.sed file.md",
+            "sed --file=script.sed file.md",
+        ]) {
+            expect(allows(command), command).toBe(false);
+        }
+    });
+    it("reads an option's value as data, not as the program", () => {
+        // Splitting a markdown table on `|` is the ordinary way to read one.
+        expect(allows("awk -F'|' '{print $2}' digest/tools.md")).toBe(true);
+        expect(allows("awk -F '|' -v col=2 '{print $col}' digest/tools.md")).toBe(true);
+        expect(allows("awk -F'|' '{print $2 | \"sh\"}' digest/tools.md")).toBe(false);
+    });
+});
+describe("readers with an output flag", () => {
+    it("refuses the flags that write a file without a redirect", () => {
+        for (const command of [
+            "sort -o out.txt in.txt",
+            "sort --output=out.txt in.txt",
+            "git log --output=log.txt",
+            "git diff --output log.txt",
+        ]) {
+            expect(allows(command), command).toBe(false);
+        }
+        expect(allows("sort -u in.txt")).toBe(true);
+    });
 });
 //# sourceMappingURL=shell-policy.test.js.map

package/dist/review/shell-policy.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"shell-policy.test.js","sourceRoot":"","sources":["../../src/review/shell-policy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;AAC3C,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,KAAK,MAAM,OAAO,IAAI;YACpB,uCAAuC;YACvC,qEAAqE;YACrE,iDAAiD;YACjD,2BAA2B;YAC3B,qCAAqC;YACrC,kCAAkC;YAClC,kCAAkC;YAClC,0DAA0D;YAC1D,wBAAwB;YACxB,mCAAmC;SACpC,EAAE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,4EAA4E;QAC5E,4DAA4D;QAC5D,KAAK,MAAM,OAAO,IAAI;YACpB,aAAa;YACb,qBAAqB;YACrB,+BAA+B;YAC/B,mCAAmC;YACnC,4BAA4B;YAC5B,sBAAsB;YACtB,mBAAmB;YACnB,UAAU;SACX,EAAE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,KAAK,MAAM,OAAO,IAAI;YACpB,gCAAgC;YAChC,mBAAmB;YACnB,eAAe;YACf,gBAAgB;YAChB,sBAAsB;SACvB,EAAE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,KAAK,MAAM,OAAO,IAAI;YACpB,2BAA2B;YAC3B,iBAAiB;YACjB,0BAA0B;YAC1B,cAAc;SACf,EAAE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,4EAA4E;QAC5E,4EAA4E;QAC5E,qEAAqE;QACrE,MAAM,CAAC,MAAM,CAAC,4CAA4C,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,QAAQ,CAAC,OAAO,KAAK,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qDAAqD,EAAE,GAAG,EAAE;IACnE,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,wEAAwE;QACxE,4EAA4E;QAC5E,uEAAuE;QACvE,iCAAiC;QACjC,KAAK,MAAM,OAAO,IAAI;YACpB,8BAA8B;YAC9B,gCAAgC;YAChC,oCAAoC;YACpC,4BAA4B;YAC5B,+BAA+B;YAC/B,0BAA0B;SAC3B,EAAE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"shell-policy.test.js","sourceRoot":"","sources":["../../src/review/shell-policy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;AAC3C,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,KAAK,MAAM,OAAO,IAAI;YACpB,uCAAuC;YACvC,qEAAqE;YACrE,iDAAiD;YACjD,2BAA2B;YAC3B,qCAAqC;YACrC,kCAAkC;YAClC,kCAAkC;YAClC,0DAA0D;YAC1D,wBAAwB;YACxB,mCAAmC;SACpC,EAAE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,4EAA4E;QAC5E,4DAA4D;QAC5D,KAAK,MAAM,OAAO,IAAI;YACpB,aAAa;YACb,qBAAqB;YACrB,+BAA+B;YAC/B,mCAAmC;YACnC,4BAA4B;YAC5B,sBAAsB;YACtB,mBAAmB;YACnB,UAAU;SACX,EAAE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,KAAK,MAAM,OAAO,IAAI;YACpB,gCAAgC;YAChC,mBAAmB;YACnB,eAAe;YACf,gBAAgB;YAChB,sBAAsB;SACvB,EAAE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,KAAK,MAAM,OAAO,IAAI;YACpB,2BAA2B;YAC3B,iBAAiB;YACjB,0BAA0B;YAC1B,cAAc;SACf,EAAE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,4EAA4E;QAC5E,4EAA4E;QAC5E,qEAAqE;QACrE,MAAM,CAAC,MAAM,CAAC,4CAA4C,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,QAAQ,CAAC,OAAO,KAAK,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAClE,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,0EAA0E;QAC1E,2EAA2E;QAC3E,KAAK,MAAM,OAAO,IAAI;YACpB,qGAAqG;YACrG,wDAAwD;YACxD,yDAAyD;YACzD,uCAAuC;SACxC,EAAE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,KAAK,MAAM,OAAO,IAAI,CAAC,YAAY,EAAE,cAAc,EAAE,2BAA2B,EAAE,wBAAwB,CAAC,EAAE,CAAC;YAC5G,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,KAAK,MAAM,OAAO,IAAI;YACpB,oBAAoB;YACpB,qBAAqB;YACrB,iBAAiB;YACjB,gCAAgC;YAChC,6BAA6B;SAC9B,EAAE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,2EAA2E;QAC3E,MAAM,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,KAAK,MAAM,OAAO,IAAI;YACpB,sDAAsD;YACtD,0BAA0B;YAC1B,gCAAgC;YAChC,uBAAuB;YACvB,0BAA0B;YAC1B,eAAe;SAChB,EAAE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,MAAM,CAAC,4DAA4D,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxF,MAAM,CAAC,gBAAgB,CAAC,wCAAwC,CAAC,CAAC,CAAC,OAAO,CAAC;YACzE,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,kBAAkB,CAAC;SACpD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4DAA4D,EAAE,GAAG,EAAE;IAC1E,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qDAAqD,EAAE,GAAG,EAAE;IACnE,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,wEAAwE;QACxE,4EAA4E;QAC5E,uEAAuE;QACvE,iCAAiC;QACjC,KAAK,MAAM,OAAO,IAAI;YACpB,8BAA8B;YAC9B,gCAAgC;YAChC,oCAAoC;YACpC,4BAA4B;YAC5B,+BAA+B;YAC/B,0BAA0B;SAC3B,EAAE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,KAAK,MAAM,OAAO,IAAI;YACpB,0BAA0B;YAC1B,8BAA8B;YAC9B,iBAAiB;YACjB,2BAA2B;YAC3B,+BAA+B;SAChC,EAAE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,qEAAqE;QACrE,MAAM,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,oDAAoD,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChF,MAAM,CAAC,MAAM,CAAC,iDAAiD,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,KAAK,MAAM,OAAO,IAAI;YACpB,wBAAwB;YACxB,8BAA8B;YAC9B,0BAA0B;YAC1B,2BAA2B;SAC5B,EAAE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,11 +1,13 @@
 {
   "name": "@koda-sl/baker-bridge",
-  "version": "0.108.0-dev.fe3d33fa3",
+  "version": "0.109.0-dev.3bafd569e",
   "description": "HTTP server wrapping the Claude Agent SDK. Persists chat events to Convex; the dashboard subscribes via Convex realtime",
   "license": "MIT",
   "type": "module",
   "bin": {
-    "baker-bridge": "dist/cli.js"
+    "baker-bridge": "dist/cli.js",
+    "baker-credential-broker": "dist/broker/main.js",
+    "baker-credential-broker-supervisor": "dist/broker/supervisor-main.js"
   },
   "exports": {
     "./hono": {
@@ -39,19 +41,22 @@
     "unlink:local": "bash scripts/unlink-local.sh"
   },
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "^0.3.280",
+    "@anthropic-ai/claude-agent-sdk": "^0.3.295",
     "@hono/node-server": "^1.19.14",
-    "@latitude-data/claude-code-telemetry": "0.0.15",
     "@t3-oss/env-core": "^0.13.10",
     "hono": "^4.12.25",
+    "image-size": "^2.0.2",
+    "mockttp": "4.6.3",
+    "unbash": "4.0.11",
     "zod": "^4.3.6"
   },
   "devDependencies": {
     "@types/node": "25.3.0",
     "tsx": "^4.0.0",
     "typescript": "^7.0.2",
+    "undici": "7.29.0",
     "vite": "7.3.2",
-    "vitest": "^4.1.8"
+    "vitest": "^5.0.3"
   },
   "repository": {
     "type": "git",

package/dist/hono/latitude-telemetry.d.ts

@@ -1,17 +0,0 @@
-import type { Settings } from "@anthropic-ai/claude-agent-sdk";
-type LatitudeHook = {
-    readonly node: string;
-    readonly entry: string;
-};
-type LatitudeHooks = NonNullable<Settings["hooks"]>;
-/**
- * `Stop` reports each turn without delaying it; `SessionEnd` is synchronous
- * because it is the one that still fires when the CLI exits right after a turn,
- * which is how the bridge closes a query. The hook's own offset lock keeps the
- * two from reporting a turn twice.
- */
-export declare function latitudeTelemetryFor(env: Record<string, string | undefined>, hook: LatitudeHook | undefined): LatitudeHooks | undefined;
-/** Where the installed hook lives; undefined turns tracing off rather than failing the turn. */
-export declare function installedLatitudeHook(): LatitudeHook | undefined;
-export {};
-//# sourceMappingURL=latitude-telemetry.d.ts.map

package/dist/hono/latitude-telemetry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"latitude-telemetry.d.ts","sourceRoot":"","sources":["../../src/hono/latitude-telemetry.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAE/D,KAAK,YAAY,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtE,KAAK,aAAa,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAEpD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,IAAI,EAAE,YAAY,GAAG,SAAS,GAC7B,aAAa,GAAG,SAAS,CAS3B;AAED,gGAAgG;AAChG,wBAAgB,qBAAqB,IAAI,YAAY,GAAG,SAAS,CAOhE"}

package/dist/hono/latitude-telemetry.js

@@ -1,52 +0,0 @@
-/**
- * Latitude tracing of the agent, one trace per turn, for every company.
- *
- * Latitude's Claude Code hook reads the turn's transcript when the turn ends and
- * uploads it as OTLP spans: the prompt, every model call with its tokens, every
- * tool call with its result, subagents and auto-memory. The bridge registers it
- * through the per-query `settings` tier rather than the scaffold's
- * `.claude/settings.json`, so no client repo carries it and it is on exactly
- * when the backend handed the sandbox a key and project (`latitudeTelemetryEnvs`).
- *
- * Every company lands in one Latitude project; the hook stamps each trace with
- * the workspace's git repo (the company) and branch (the chat), which is how
- * they are told apart there. The session id is left to the hook: it hashes it
- * with a turn count that restarts for every Claude session, so pinning it to a
- * thread — which starts a fresh Claude session after a stall or an invalid
- * resume — would reuse the trace ids of that thread's first turns.
- *
- * The hook is a pinned dependency run with the bridge's own node, never
- * `npx …@latest`: that would fetch unpinned code into every sandbox on every
- * turn. Its optional `BUN_OPTIONS` preload (full system prompt and tool
- * definitions) is deliberately not wired — if that file is ever missing, the
- * CLI refuses to start, which would take every turn down with it.
- */
-import { createRequire } from "node:module";
-import { dirname, join } from "node:path";
-/**
- * `Stop` reports each turn without delaying it; `SessionEnd` is synchronous
- * because it is the one that still fires when the CLI exits right after a turn,
- * which is how the bridge closes a query. The hook's own offset lock keeps the
- * two from reporting a turn twice.
- */
-export function latitudeTelemetryFor(env, hook) {
-    if (!env.LATITUDE_API_KEY || !env.LATITUDE_PROJECT || !hook) {
-        return undefined;
-    }
-    const command = `"${hook.node}" "${hook.entry}"`;
-    return {
-        Stop: [{ hooks: [{ type: "command", command, async: true }] }],
-        SessionEnd: [{ hooks: [{ type: "command", command, timeout: 10 }] }],
-    };
-}
-/** Where the installed hook lives; undefined turns tracing off rather than failing the turn. */
-export function installedLatitudeHook() {
-    try {
-        const main = createRequire(import.meta.url).resolve("@latitude-data/claude-code-telemetry");
-        return { node: process.execPath, entry: join(dirname(main), "entry.js") };
-    }
-    catch {
-        return undefined;
-    }
-}
-//# sourceMappingURL=latitude-telemetry.js.map

package/dist/hono/latitude-telemetry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"latitude-telemetry.js","sourceRoot":"","sources":["../../src/hono/latitude-telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAO1C;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAuC,EACvC,IAA8B;IAE9B,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,KAAK,GAAG,CAAC;IACjD,OAAO;QACL,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,qBAAqB;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;QAC5F,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/hono/latitude-telemetry.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=latitude-telemetry.test.d.ts.map

package/dist/hono/latitude-telemetry.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"latitude-telemetry.test.d.ts","sourceRoot":"","sources":["../../src/hono/latitude-telemetry.test.ts"],"names":[],"mappings":""}

package/dist/hono/latitude-telemetry.test.js

@@ -1,18 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { latitudeTelemetryFor } from "./latitude-telemetry.js";
-const HOOK = { node: "/usr/bin/node", entry: "/app/node_modules/@latitude-data/claude-code-telemetry/dist/entry.js" };
-describe("latitudeTelemetryFor", () => {
-    it("is off when the sandbox was not given a Latitude key and project", () => {
-        expect(latitudeTelemetryFor({}, HOOK)).toBeUndefined();
-        expect(latitudeTelemetryFor({ LATITUDE_API_KEY: "k" }, HOOK)).toBeUndefined();
-        expect(latitudeTelemetryFor({ LATITUDE_PROJECT: "p" }, HOOK)).toBeUndefined();
-    });
-    it("runs the pinned hook at the end of every turn and at session end", () => {
-        const command = `"/usr/bin/node" "${HOOK.entry}"`;
-        expect(latitudeTelemetryFor({ LATITUDE_API_KEY: "k", LATITUDE_PROJECT: "p" }, HOOK)).toEqual({
-            Stop: [{ hooks: [{ type: "command", command, async: true }] }],
-            SessionEnd: [{ hooks: [{ type: "command", command, timeout: 10 }] }],
-        });
-    });
-});
-//# sourceMappingURL=latitude-telemetry.test.js.map

package/dist/hono/latitude-telemetry.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"latitude-telemetry.test.js","sourceRoot":"","sources":["../../src/hono/latitude-telemetry.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE/D,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,sEAAsE,EAAE,CAAC;AAEtH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACvD,MAAM,CAAC,oBAAoB,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9E,MAAM,CAAC,oBAAoB,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,OAAO,GAAG,oBAAoB,IAAI,CAAC,KAAK,GAAG,CAAC;QAClD,MAAM,CAAC,oBAAoB,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3F,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9D,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;SACrE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}