@memnexus-ai/mx-agent-cli 0.1.174 → 0.1.176

package/dist/lib/coordination-token.d.ts

@@ -0,0 +1,75 @@
+/**
+ * coordination-token -- self-provision the coordination service bearer token.
+ *
+ * Ports the security-reviewed KV-fetch logic from the agent-config hook
+ * `coordination-brief.sh` into the CLI so that a bare `mx-agent coordination
+ * brief` (and drain/escalate/history) resolves its own token when none is
+ * configured, instead of failing with "token not set" and falling back to the
+ * old channel. The isolation properties the security review required are
+ * preserved 1:1:
+ *
+ *   - MF-2  The team slug is read from the authoritative worktree marker
+ *           (.mx-coordination-team). It is NEVER derived from CLAUDE_TEAM_NAME
+ *           or the worktree name.
+ *   - SF-2  The slug is validated against the exact roster BEFORE any `az` call.
+ *           A non-member fails CLOSED (no fetch) so the caller falls back.
+ *   - MF-1  The token cache filename embeds the slug
+ *           (.mx-coordination-token-<slug>), per worktree. A worktree recycled
+ *           to a different team can never read another team's cached token.
+ *   - SF-3  The cache is created born 0600 (mode on create — no readable window).
+ *   - No shell: the roster-validated slug is passed to `az` via execFile with an
+ *           args array, never interpolated into a shell string.
+ *   - The token is NEVER written to the global ~/.mx-agent config (that clobbers
+ *           across worktrees — the MF-2 defect) and is NEVER logged.
+ *   - Fail-OPEN on infra errors (no marker, az not logged in, KV unreachable):
+ *           report "unprovisioned" so the caller degrades, never crash.
+ *   - Fail-CLOSED only on a roster mismatch.
+ */
+/**
+ * SF-2 canonical roster — mirror of coordination-brief.sh's COORD_ROSTER. The
+ * marker slug MUST be an exact member of this list before it is ever passed to
+ * `az`. Aliases (mx-agent / mx-agent-system) are intentionally excluded.
+ */
+export declare const COORD_ROSTER: readonly ["platform", "retrieval", "mcp", "pipeline", "marketing", "customer-portal", "eval", "product"];
+export declare const KEYVAULT_NAME = "mx-dev-eastus2-kv-001";
+export type TokenResolveStatus = 
+/** A token was already in env/config; KV is skipped (hook path + manual override). */
+'already-configured'
+/** A token was provisioned (from the per-worktree cache or a fresh KV fetch). */
+ | 'resolved'
+/** Fail-CLOSED: the marker slug is not on the roster — no fetch performed. */
+ | 'not-on-roster'
+/** Fail-OPEN: no marker, az not logged in, KV unreachable, or empty secret. */
+ | 'unprovisioned';
+export interface TokenResolveResult {
+    status: TokenResolveStatus;
+    /** The resolved token — set only for 'already-configured' and 'resolved'. */
+    token?: string;
+    /** The marker slug, when one was read (roster or not). */
+    slug?: string;
+    /** Where the token came from — for diagnostics; never includes the token. */
+    source?: 'env' | 'config' | 'cache' | 'keyvault';
+    /** Non-secret reason for a fail-open, safe to print to stderr. */
+    detail?: string;
+}
+export interface TokenResolveDeps {
+    /** Environment to read (default process.env). */
+    env?: NodeJS.ProcessEnv;
+    /**
+     * Fetch a Key Vault secret's value by validated name. Overridable in tests to
+     * mock `az`. Returns undefined on any failure (fail-open).
+     */
+    fetchSecret?: (vault: string, secretName: string) => string | undefined;
+    /** Read a file's text, or undefined if missing/unreadable. Overridable in tests. */
+    readFileText?: (path: string) => string | undefined;
+    /** Persist the fetched token to the per-worktree cache (born 0600). */
+    writeCache?: (path: string, value: string) => void;
+}
+/**
+ * Resolve the coordination token, self-provisioning from Key Vault when none is
+ * configured. Never throws — every failure is a typed result the caller acts on.
+ * The returned token (when present) must be handed to the client in-memory
+ * (process env for the request); it must NOT be written to the global config.
+ */
+export declare function resolveCoordinationToken(deps?: TokenResolveDeps): TokenResolveResult;
+//# sourceMappingURL=coordination-token.d.ts.map

package/dist/lib/coordination-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordination-token.d.ts","sourceRoot":"","sources":["../../src/lib/coordination-token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAQH;;;;GAIG;AACH,eAAO,MAAM,YAAY,0GASf,CAAC;AAEX,eAAO,MAAM,aAAa,0BAA0B,CAAC;AAKrD,MAAM,MAAM,kBAAkB;AAC5B,sFAAsF;AACpF,oBAAoB;AACtB,iFAAiF;GAC/E,UAAU;AACZ,8EAA8E;GAC5E,eAAe;AACjB,+EAA+E;GAC7E,eAAe,CAAC;AAEpB,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,MAAM,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;IACjD,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,iDAAiD;IACjD,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACxE,oFAAoF;IACpF,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACpD,uEAAuE;IACvE,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CACpD;AAmDD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,GAAE,gBAAqB,GAAG,kBAAkB,CAmExF"}

package/dist/lib/coordination-token.js

@@ -0,0 +1,168 @@
+/**
+ * coordination-token -- self-provision the coordination service bearer token.
+ *
+ * Ports the security-reviewed KV-fetch logic from the agent-config hook
+ * `coordination-brief.sh` into the CLI so that a bare `mx-agent coordination
+ * brief` (and drain/escalate/history) resolves its own token when none is
+ * configured, instead of failing with "token not set" and falling back to the
+ * old channel. The isolation properties the security review required are
+ * preserved 1:1:
+ *
+ *   - MF-2  The team slug is read from the authoritative worktree marker
+ *           (.mx-coordination-team). It is NEVER derived from CLAUDE_TEAM_NAME
+ *           or the worktree name.
+ *   - SF-2  The slug is validated against the exact roster BEFORE any `az` call.
+ *           A non-member fails CLOSED (no fetch) so the caller falls back.
+ *   - MF-1  The token cache filename embeds the slug
+ *           (.mx-coordination-token-<slug>), per worktree. A worktree recycled
+ *           to a different team can never read another team's cached token.
+ *   - SF-3  The cache is created born 0600 (mode on create — no readable window).
+ *   - No shell: the roster-validated slug is passed to `az` via execFile with an
+ *           args array, never interpolated into a shell string.
+ *   - The token is NEVER written to the global ~/.mx-agent config (that clobbers
+ *           across worktrees — the MF-2 defect) and is NEVER logged.
+ *   - Fail-OPEN on infra errors (no marker, az not logged in, KV unreachable):
+ *           report "unprovisioned" so the caller degrades, never crash.
+ *   - Fail-CLOSED only on a roster mismatch.
+ */
+import { execFileSync } from 'node:child_process';
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { getConfigValue } from './config.js';
+import { CONFIG_KEY_TOKEN } from './coordination-client.js';
+/**
+ * SF-2 canonical roster — mirror of coordination-brief.sh's COORD_ROSTER. The
+ * marker slug MUST be an exact member of this list before it is ever passed to
+ * `az`. Aliases (mx-agent / mx-agent-system) are intentionally excluded.
+ */
+export const COORD_ROSTER = [
+    'platform',
+    'retrieval',
+    'mcp',
+    'pipeline',
+    'marketing',
+    'customer-portal',
+    'eval',
+    'product',
+];
+export const KEYVAULT_NAME = 'mx-dev-eastus2-kv-001';
+const MARKER_FILE = '.mx-coordination-team';
+const CACHE_PREFIX = '.mx-coordination-token-';
+/** Default marker/cache reader: undefined on missing or unreadable file. */
+function defaultReadFileText(path) {
+    try {
+        if (!existsSync(path))
+            return undefined;
+        return readFileSync(path, 'utf-8');
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Default KV fetch. The slug embedded in `secretName` is roster-validated by the
+ * caller; it is passed to `az` as a single argv element via execFile (no shell),
+ * so a metacharacter in a slug could never inject a command even if the roster
+ * gate were bypassed. Any failure (az not logged in, KV unreachable, missing
+ * secret) returns undefined → fail-open.
+ */
+function defaultFetchSecret(vault, secretName) {
+    try {
+        const out = execFileSync('az', ['keyvault', 'secret', 'show', '--vault-name', vault, '--name', secretName, '--query', 'value', '-o', 'tsv'], { encoding: 'utf-8', stdio: ['ignore', 'pipe', 'ignore'] });
+        const trimmed = out.trim();
+        return trimmed || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** SF-3 born-0600 cache write. A write failure is tolerated (fail-open). */
+function defaultWriteCache(path, value) {
+    try {
+        // mode 0600 on create — 0600 has no group/other bits, so no umask can widen
+        // it. The cache is only written when absent (see resolveCoordinationToken),
+        // so this is always a create.
+        writeFileSync(path, value, { mode: 0o600 });
+    }
+    catch {
+        /* A cache-write failure must not break provisioning — the token is still returned. */
+    }
+}
+/** Extract the first line and strip all whitespace (marker/cache are single-value). */
+function firstLineNoSpace(raw) {
+    const firstLine = raw.split(/\r?\n/, 1)[0] ?? '';
+    return firstLine.replace(/\s+/g, '');
+}
+/**
+ * Resolve the coordination token, self-provisioning from Key Vault when none is
+ * configured. Never throws — every failure is a typed result the caller acts on.
+ * The returned token (when present) must be handed to the client in-memory
+ * (process env for the request); it must NOT be written to the global config.
+ */
+export function resolveCoordinationToken(deps = {}) {
+    const env = deps.env ?? process.env;
+    const readFileText = deps.readFileText ?? defaultReadFileText;
+    // 1. Already configured → use it, skip KV. Env preferred, then global config.
+    //    This keeps the hook path (which injects MX_COORD_SERVICE_TOKEN) and any
+    //    manual `mx-agent config set coordination-service-token` working unchanged.
+    const envToken = env.MX_COORD_SERVICE_TOKEN;
+    if (envToken)
+        return { status: 'already-configured', token: envToken, source: 'env' };
+    // Belt-and-suspenders for the SF-A never-crash contract: getConfigValue →
+    // loadConfig → getConfigDir calls mkdirSync, which throws on an unwritable/
+    // read-only HOME (EACCES/EROFS/ENOSPC). Swallow it and treat the config token
+    // as absent so resolution continues to the marker/KV path instead of throwing.
+    let configToken;
+    try {
+        configToken = getConfigValue(CONFIG_KEY_TOKEN);
+    }
+    catch {
+        configToken = undefined;
+    }
+    if (configToken)
+        return { status: 'already-configured', token: configToken, source: 'config' };
+    // 2. MF-2: read the authoritative marker. No worktree path or no marker →
+    //    fail-OPEN. We do NOT derive the slug from any other signal.
+    const worktree = env.CLAUDE_WORKTREE_PATH;
+    if (!worktree) {
+        return { status: 'unprovisioned', detail: 'CLAUDE_WORKTREE_PATH is unset — cannot locate the coordination marker' };
+    }
+    const markerRaw = readFileText(join(worktree, MARKER_FILE));
+    if (markerRaw === undefined) {
+        return { status: 'unprovisioned', detail: 'no coordination marker (.mx-coordination-team) in this worktree' };
+    }
+    const slug = firstLineNoSpace(markerRaw);
+    if (!slug) {
+        return { status: 'unprovisioned', detail: 'coordination marker is empty' };
+    }
+    // 3. SF-2: roster-membership gate BEFORE any az call. Not a member → fail-CLOSED.
+    if (!COORD_ROSTER.includes(slug)) {
+        return { status: 'not-on-roster', slug };
+    }
+    // 4. MF-1: slug-bound per-worktree cache. The slug is in the filename, so a
+    //    worktree recycled to another team (marker rewritten) can never read the
+    //    prior team's token — its cache path simply does not exist yet.
+    const cachePath = join(worktree, `${CACHE_PREFIX}${slug}`);
+    const cachedRaw = readFileText(cachePath);
+    if (cachedRaw) {
+        const cached = firstLineNoSpace(cachedRaw);
+        if (cached)
+            return { status: 'resolved', token: cached, slug, source: 'cache' };
+    }
+    // 5. Fetch from Key Vault once. The roster-validated slug is the only variable
+    //    part of the secret name, passed via execFile args (no shell).
+    const fetchSecret = deps.fetchSecret ?? defaultFetchSecret;
+    const fetched = fetchSecret(KEYVAULT_NAME, `coordination-token-${slug}`);
+    if (!fetched) {
+        return {
+            status: 'unprovisioned',
+            slug,
+            detail: 'Key Vault returned no token (az not logged in, KV unreachable, or secret missing)',
+        };
+    }
+    // SF-3: cache born 0600. NEVER persisted to the global config.
+    const writeCache = deps.writeCache ?? defaultWriteCache;
+    writeCache(cachePath, fetched);
+    return { status: 'resolved', token: fetched, slug, source: 'keyvault' };
+}
+//# sourceMappingURL=coordination-token.js.map

package/dist/lib/coordination-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordination-token.js","sourceRoot":"","sources":["../../src/lib/coordination-token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,UAAU;IACV,WAAW;IACX,KAAK;IACL,UAAU;IACV,WAAW;IACX,iBAAiB;IACjB,MAAM;IACN,SAAS;CACD,CAAC;AAEX,MAAM,CAAC,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAErD,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAC5C,MAAM,YAAY,GAAG,yBAAyB,CAAC;AAsC/C,4EAA4E;AAC5E,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,KAAa,EAAE,UAAkB;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CACtB,IAAI,EACJ,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,EAC5G,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAC3D,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO,OAAO,IAAI,SAAS,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAa;IACpD,IAAI,CAAC;QACH,4EAA4E;QAC5E,4EAA4E;QAC5E,8BAA8B;QAC9B,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,sFAAsF;IACxF,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAyB,EAAE;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAE9D,8EAA8E;IAC9E,6EAA6E;IAC7E,gFAAgF;IAChF,MAAM,QAAQ,GAAG,GAAG,CAAC,sBAAsB,CAAC;IAC5C,IAAI,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACtF,0EAA0E;IAC1E,4EAA4E;IAC5E,8EAA8E;IAC9E,+EAA+E;IAC/E,IAAI,WAA+B,CAAC;IACpC,IAAI,CAAC;QACH,WAAW,GAAG,cAAc,CAAC,gBAAgB,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,SAAS,CAAC;IAC1B,CAAC;IACD,IAAI,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAE/F,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,QAAQ,GAAG,GAAG,CAAC,oBAAoB,CAAC;IAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,uEAAuE,EAAE,CAAC;IACtH,CAAC;IACD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAC5D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,iEAAiE,EAAE,CAAC;IAChH,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAC7E,CAAC;IAED,kFAAkF;IAClF,IAAI,CAAE,YAAkC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,4EAA4E;IAC5E,6EAA6E;IAC7E,oEAAoE;IACpE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,YAAY,GAAG,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAClF,CAAC;IAED,+EAA+E;IAC/E,mEAAmE;IACnE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC3D,MAAM,OAAO,GAAG,WAAW,CAAC,aAAa,EAAE,sBAAsB,IAAI,EAAE,CAAC,CAAC;IACzE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,eAAe;YACvB,IAAI;YACJ,MAAM,EAAE,mFAAmF;SAC5F,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,iBAAiB,CAAC;IACxD,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAC1E,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@memnexus-ai/mx-agent-cli",
-  "version": "0.1.174",
+  "version": "0.1.176",
   "description": "CLI for creating and managing AI agent teams",
   "type": "module",
   "bin": {