@onepointfour-packs/flaredeck-agent 0.2.203 → 0.2.205

package/dist/trusted-scripts.d.ts

@@ -0,0 +1,21 @@
+export type TrustedEntry = {
+    name: string;
+    description: string;
+    body: string;
+};
+/** An uploaded script, as it is on this machine. */
+export type TrustedLocal = TrustedEntry & {
+    abs: string;
+};
+/** Write one script as FlareDeck has it. */
+export declare function writeFresh(t: TrustedLocal): void;
+/** Put every uploaded script in `dir`, and take away any that was removed in FlareDeck. */
+export declare function installScripts(entries: TrustedEntry[], dir: string): TrustedLocal[];
+/**
+ * The uploaded script this command runs, and nothing else — or null. Kept deliberately narrow: no
+ * `;`, `&&`, `||`, command substitution, redirects or variables set in front of it; only the script
+ * with its arguments, optionally piped into a reader (`| head -50`).
+ */
+export declare function trustedRun(command: string, cwd: string, local: TrustedLocal[], home?: string): TrustedLocal | null;
+/** What a session is told: the scripts it may run, where they are, and what they are for. */
+export declare function trustedBrief(local: TrustedLocal[]): string;

package/dist/trusted-scripts.js

@@ -0,0 +1,93 @@
+/**
+ * Scripts a person uploaded to FlareDeck (Integrations → Scripts), which any agent may run without
+ * the command guard judging them — reading production logs through prodscan.sh, say (Cobus, 20 Oct).
+ * See flaredeck-mcp/src/vault/scripts.ts.
+ *
+ * Each is written into the harness's own folder, and written AGAIN, fresh from what FlareDeck sent,
+ * every time an agent runs it. So what runs is always what was uploaded: an agent that edited the
+ * file on the machine changed nothing. A command is trusted only when it runs exactly one of these
+ * files, alone or piped into a reader.
+ */
+import { chmodSync, mkdirSync, readdirSync, realpathSync, rmSync, writeFileSync } from 'node:fs';
+import { isAbsolute, join, resolve } from 'node:path';
+const real = (p) => { try {
+    return realpathSync(p);
+}
+catch {
+    return resolve(p);
+} };
+const safeName = (n) => /^[A-Za-z0-9][A-Za-z0-9._-]{0,80}$/.test(n);
+/** Write one script as FlareDeck has it. */
+export function writeFresh(t) {
+    writeFileSync(t.abs, t.body, { mode: 0o755 });
+    chmodSync(t.abs, 0o755);
+}
+/** Put every uploaded script in `dir`, and take away any that was removed in FlareDeck. */
+export function installScripts(entries, dir) {
+    mkdirSync(dir, { recursive: true });
+    const out = [];
+    for (const e of entries) {
+        if (!safeName(e.name) || !e.body)
+            continue;
+        const t = { ...e, abs: join(dir, e.name) };
+        try {
+            writeFresh(t);
+            out.push(t);
+        }
+        catch { /* an unwritable one is simply not offered */ }
+    }
+    const keep = new Set(out.map((t) => t.name));
+    for (const f of (() => { try {
+        return readdirSync(dir);
+    }
+    catch {
+        return [];
+    } })()) {
+        if (!keep.has(f))
+            rmSync(join(dir, f), { force: true });
+    }
+    return out;
+}
+/** What a trusted script's output may be piped into: reading and trimming, nothing that acts. */
+const PIPE_OK = /^(head|tail|grep|egrep|jq|wc|cut|sort|uniq|tr|column)(\s|$)/;
+/**
+ * The uploaded script this command runs, and nothing else — or null. Kept deliberately narrow: no
+ * `;`, `&&`, `||`, command substitution, redirects or variables set in front of it; only the script
+ * with its arguments, optionally piped into a reader (`| head -50`).
+ */
+export function trustedRun(command, cwd, local, home = process.env.HOME ?? '') {
+    if (!local.length)
+        return null;
+    const text = command.trim();
+    if (/[;&`<>]|\$\(|\|\|/.test(text.replace(/'[^']*'|"[^"$`]*"/g, '')))
+        return null;
+    const [first, ...pipes] = text.split(/\s*\|\s*/);
+    if (!first || pipes.some((p) => !PIPE_OK.test(p)))
+        return null;
+    const tokens = first.match(/"[^"]*"|'[^']*'|\S+/g) ?? [];
+    let i = 0;
+    if (/^(bash|sh|zsh)$/.test(tokens[0] ?? ''))
+        i = 1;
+    const raw = (tokens[i] ?? '').replace(/^["']|["']$/g, '');
+    if (!raw || raw.includes('='))
+        return null;
+    const expanded = raw.replace(/^~(?=\/)/, home).replace(/^\$\{?HOME\}?(?=\/)/, home);
+    // A bare name runs whatever is in the current folder by that name — never one of these.
+    if (!isAbsolute(expanded) && !expanded.includes('/'))
+        return null;
+    const abs = real(isAbsolute(expanded) ? expanded : resolve(cwd, expanded));
+    return local.find((l) => real(l.abs) === abs) ?? null;
+}
+/** What a session is told: the scripts it may run, where they are, and what they are for. */
+export function trustedBrief(local) {
+    if (!local.length)
+        return '';
+    return [
+        '',
+        'Scripts a person uploaded to FlareDeck for you — run them by their full path, they need no',
+        'approval (piping the output into head, tail, grep or jq is fine; chaining them with other',
+        'commands is not). Do not edit them: each is written fresh from FlareDeck before it runs.',
+        ...local.map((l) => `  · \`${l.abs}\` — ${l.description}`),
+    ].join('\n');
+}
+//# sourceMappingURL=trusted-scripts.js.map

package/dist/trusted-scripts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-scripts.js","sourceRoot":"","sources":["../src/trusted-scripts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjG,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMtD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,GAAG,IAAI,CAAC;IAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC;IAAC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AAAC,CAAC,CAAC,CAAC,CAAC;AACrG,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE5E,4CAA4C;AAC5C,MAAM,UAAU,UAAU,CAAC,CAAe;IACxC,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,cAAc,CAAC,OAAuB,EAAE,GAAW;IACjE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,SAAS;QAC3C,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC;YAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,6CAA6C,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAAC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACpF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iGAAiG;AACjG,MAAM,OAAO,GAAG,6DAA6D,CAAC;AAE9E;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,GAAW,EAAE,KAAqB,EAAE,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;IAC3G,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,MAAM,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC;IACzD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;IACpF,wFAAwF;IACxF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC;AACxD,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,YAAY,CAAC,KAAqB;IAChD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC7B,OAAO;QACL,EAAE;QACF,4FAA4F;QAC5F,2FAA2F;QAC3F,0FAA0F;QAC1F,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;KAC3D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onepointfour-packs/flaredeck-agent",
-  "version": "0.2.203",
+  "version": "0.2.205",
   "description": "Run a FlareDeck agent on your own machine: it picks up cards assigned to it, works each one in a checkout of its own, and reports back on the card.",
   "type": "module",
   "bin": {