@onepointfour-packs/flaredeck-agent 0.2.203 → 0.2.204

package/dist/trusted-scripts.d.ts

@@ -0,0 +1,34 @@
+import { type Checkout } from './workspace.js';
+export type TrustedEntry = {
+    repository: string;
+    path: string;
+    sha256: string;
+    description: string;
+};
+/** An entry found on this machine. */
+export type TrustedLocal = TrustedEntry & {
+    abs: string;
+};
+/** Where each entry is on this machine: in a checkout of its repository, when the file is there. */
+export declare function locateScripts(entries: TrustedEntry[], here: Checkout[], exists?: (p: string) => boolean): TrustedLocal[];
+/**
+ * Whether this command runs a trusted script, and nothing else. `ok`: run it unjudged. `changed`:
+ * it names a trusted script whose file no longer matches its checksum. Null: not a trusted script.
+ *
+ * Kept deliberately narrow: no `;`, `&&`, `||`, command substitution or redirects — only the script
+ * with its arguments, optionally piped into a reader (`| head -50`).
+ */
+export declare function trustedRun(command: string, cwd: string, local: TrustedLocal[], read?: (p: string) => Buffer, home?: string): {
+    ok: TrustedLocal;
+} | {
+    changed: TrustedLocal;
+} | null;
+/** A trusted script another agent runs: this one asks them. */
+export type OthersScript = {
+    repository: string;
+    path: string;
+    description: string;
+    who: string[];
+};
+/** What a session is told: the scripts it may run here, and the ones to ask someone else for. */
+export declare function trustedBrief(local: TrustedLocal[], others?: OthersScript[]): string;

package/dist/trusted-scripts.js

@@ -0,0 +1,85 @@
+/**
+ * Scripts a person trusted in FlareDeck (Integrations → Scripts): run without the command guard
+ * judging them, so an agent can, say, read production logs through the one script that does only
+ * that (Cobus, 20 Oct). See flaredeck-mcp/src/vault/scripts.ts.
+ *
+ * An entry names a repository, a path in it, the SHA-256 a person approved, and what it is for.
+ * Here it is found in this machine's checkout of that repository, and a command is trusted only
+ * when it runs exactly that file AND the file's checksum still matches — so a script changed by
+ * anyone, an agent editing its own checkout included, is judged like any other command.
+ */
+import { createHash } from 'node:crypto';
+import { existsSync, readFileSync, realpathSync } from 'node:fs';
+import { isAbsolute, join, resolve } from 'node:path';
+import { repoIdentity } from './workspace.js';
+const real = (p) => { try {
+    return realpathSync(p);
+}
+catch {
+    return resolve(p);
+} };
+/** Where each entry is on this machine: in a checkout of its repository, when the file is there. */
+export function locateScripts(entries, here, exists = existsSync) {
+    const out = [];
+    for (const e of entries) {
+        const want = `github.com/${String(e.repository).toLowerCase()}`;
+        for (const c of here) {
+            if (!c.origin || repoIdentity(c.origin) !== want)
+                continue;
+            const abs = join(c.path, e.path);
+            if (exists(abs) && !out.some((o) => o.abs === abs))
+                out.push({ ...e, abs });
+        }
+    }
+    return out;
+}
+const sha256Of = (p, read) => {
+    try {
+        return createHash('sha256').update(read(p)).digest('hex');
+    }
+    catch {
+        return null;
+    }
+};
+/** What a trusted script's output may be piped into: reading and trimming, nothing that acts. */
+const PIPE_OK = /^(head|tail|grep|egrep|jq|wc|cut|sort|uniq|tr|column)(\s|$)/;
+/**
+ * Whether this command runs a trusted script, and nothing else. `ok`: run it unjudged. `changed`:
+ * it names a trusted script whose file no longer matches its checksum. Null: not a trusted script.
+ *
+ * Kept deliberately narrow: no `;`, `&&`, `||`, command substitution or redirects — only the script
+ * with its arguments, optionally piped into a reader (`| head -50`).
+ */
+export function trustedRun(command, cwd, local, read = (p) => readFileSync(p), home = process.env.HOME ?? '') {
+    if (!local.length)
+        return null;
+    const text = command.trim();
+    if (/[;&`<>]|\$\(|\|\|/.test(text.replace(/'[^']*'|"[^"$`]*"/g, '')))
+        return null;
+    const [first, ...pipes] = text.split(/\s*\|\s*/);
+    if (!first || pipes.some((p) => !PIPE_OK.test(p)))
+        return null;
+    const tokens = first.match(/"[^"]*"|'[^']*'|\S+/g) ?? [];
+    let i = 0;
+    if (/^(bash|sh|zsh)$/.test(tokens[0] ?? ''))
+        i = 1;
+    const raw = (tokens[i] ?? '').replace(/^["']|["']$/g, '');
+    if (!raw)
+        return null;
+    const expanded = raw.replace(/^~(?=\/)/, home).replace(/^\$\{?HOME\}?(?=\/)/, home);
+    const abs = real(isAbsolute(expanded) ? expanded : resolve(cwd, expanded));
+    const hit = local.find((l) => real(l.abs) === abs);
+    if (!hit)
+        return null;
+    return sha256Of(abs, read) === hit.sha256.toLowerCase() ? { ok: hit } : { changed: hit };
+}
+/** What a session is told: the scripts it may run here, and the ones to ask someone else for. */
+export function trustedBrief(local, others = []) {
+    const lines = [];
+    if (local.length)
+        lines.push('', 'Scripts a person trusted for you — run them directly, they need no approval (piping the', 'output into head, tail, grep or jq is fine; chaining them with other commands is not):', ...local.map((l) => `  · \`${l.abs}\` — ${l.description}`), 'If one is refused as "changed", its file no longer matches what was approved: say so on the card.');
+    if (others.length)
+        lines.push('', 'Trusted scripts other agents run — you cannot. When you need one, ask one of them with', 'send-message (what to run it for, and the card), rather than finding another way:', ...others.map((o) => `  · ${o.path} in ${o.repository} — ${o.description}. Ask: ${o.who.join(' or ')}.`));
+    return lines.join('\n');
+}
+//# sourceMappingURL=trusted-scripts.js.map

package/dist/trusted-scripts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-scripts.js","sourceRoot":"","sources":["../src/trusted-scripts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,YAAY,EAAiB,MAAM,gBAAgB,CAAC;AAM7D,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,GAAG,IAAI,CAAC;IAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC;IAAC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AAAC,CAAC,CAAC,CAAC,CAAC;AAErG,oGAAoG;AACpG,MAAM,UAAU,aAAa,CAAC,OAAuB,EAAE,IAAgB,EAAE,SAAiC,UAAU;IAClH,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,cAAc,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAChE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI;gBAAE,SAAS;YAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,IAA2B,EAAiB,EAAE;IACzE,IAAI,CAAC;QAAC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC3F,CAAC,CAAC;AAEF,iGAAiG;AACjG,MAAM,OAAO,GAAG,6DAA6D,CAAC;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACxB,OAAe,EAAE,GAAW,EAAE,KAAqB,EACnD,OAA8B,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;IAEnF,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,MAAM,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC;IACzD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAC3F,CAAC;AAKD,iGAAiG;AACjG,MAAM,UAAU,YAAY,CAAC,KAAqB,EAAE,SAAyB,EAAE;IAC7E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAC1B,EAAE,EACF,yFAAyF,EACzF,wFAAwF,EACxF,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,EAC1D,mGAAmG,CACpG,CAAC;IACF,IAAI,MAAM,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAC3B,EAAE,EACF,wFAAwF,EACxF,mFAAmF,EACnF,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,WAAW,UAAU,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CACzG,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onepointfour-packs/flaredeck-agent",
-  "version": "0.2.203",
+  "version": "0.2.204",
   "description": "Run a FlareDeck agent on your own machine: it picks up cards assigned to it, works each one in a checkout of its own, and reports back on the card.",
   "type": "module",
   "bin": {