@openrig/cli 0.6.13 → 0.6.14

package/dist/local-daemon-owner.js

@@ -0,0 +1,98 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+const exec = promisify(execFile);
+const unknown = (reason) => ({ state: "unknown", reason });
+const integer = (s) => /^\d+$/.test(s) && Number.isSafeInteger(Number(s)) ? Number(s) : undefined;
+/** Keep deliberate remote routing out of the local process namespace. */
+function isLoopbackEndpoint(baseUrl) {
+    try {
+        const url = new URL(baseUrl);
+        if (url.protocol !== "http:" && url.protocol !== "https:")
+            return false;
+        const host = url.hostname.replace(/^\[|\]$/g, "");
+        return host === "localhost" || host === "::1" || /^127(?:\.\d{1,3}){3}$/.test(host);
+    }
+    catch {
+        return false;
+    }
+}
+function processIdentity(raw) {
+    // LC_ALL=C: ps lstart is a stable process-start discriminator, not a PID-only check.
+    const match = raw.trim().match(/^(\d+)\s+([A-Z][a-z]{2}\s+[A-Z][a-z]{2}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4})$/);
+    if (!match?.[1] || !match[2] || !Number.isFinite(Date.parse(match[2])))
+        return;
+    const uid = integer(match[1]);
+    return uid !== undefined ? { uid, start: match[2].replace(/\s+/g, " ") } : undefined;
+}
+/** Optional accidental-routing mitigation, not authentication or same-user instance isolation.
+ * Trusts the daemon's reported PID/euid, corroborated by ps; it does not prove socket ownership.
+ * Every request observes afresh. Repeated observations cannot make the following TCP request atomic. */
+export async function assessLocalDaemonOwner(baseUrl, deps = {}) {
+    const callerUid = deps.callerUid ?? process.geteuid?.();
+    if ((deps.platform ?? process.platform) !== "darwin" || !isLoopbackEndpoint(baseUrl) || callerUid === undefined)
+        return unknown("not_local_mac");
+    const timeoutMs = deps.timeoutMs ?? 1000;
+    const deadline = performance.now() + timeoutMs;
+    const controller = new AbortController();
+    const run = deps.run ?? (async (file, args, bound) => {
+        const result = await exec(file, args, { timeout: bound, killSignal: "SIGKILL", maxBuffer: 64 * 1024, encoding: "utf8", env: { ...process.env, LC_ALL: "C" } });
+        return result.stdout;
+    });
+    const observe = async (file, args) => {
+        const remaining = Math.floor(deadline - performance.now());
+        if (remaining <= 0 || controller.signal.aborted)
+            throw new Error("owner observation expired");
+        return run(file, args, remaining);
+    };
+    let timer;
+    try {
+        return await Promise.race([
+            (async () => {
+                const healthIdentity = async () => {
+                    if (controller.signal.aborted || performance.now() >= deadline)
+                        return;
+                    const health = await (deps.fetchImpl ?? fetch)(`${baseUrl.replace(/\/+$/, "")}/healthz`, { signal: controller.signal, redirect: "error" });
+                    if (!health.ok)
+                        return;
+                    const body = await health.json();
+                    if (!Number.isSafeInteger(body?.pid) || body?.pid <= 0
+                        || !Number.isSafeInteger(body?.euid) || body?.euid < 0)
+                        return;
+                    return { pid: body.pid, uid: body.euid };
+                };
+                const reported = await healthIdentity();
+                if (!reported)
+                    return unknown("health_identity_missing");
+                const processes = () => observe("/bin/ps", ["-o", "uid=,lstart=", "-p", String(reported.pid)]);
+                const before = processIdentity(await processes());
+                if (!before || before.uid !== reported.uid)
+                    return unknown("process_unconfirmed");
+                const second = await healthIdentity();
+                if (!second || second.pid !== reported.pid || second.uid !== reported.uid)
+                    return unknown("reported_identity_changed");
+                const after = processIdentity(await processes());
+                if (!after || after.uid !== before.uid || after.start !== before.start)
+                    return unknown("process_changed");
+                if (controller.signal.aborted || performance.now() >= deadline)
+                    return unknown("timeout");
+                return { state: reported.uid === callerUid ? "same-user" : "foreign", ...reported, callerUid };
+            })(),
+            new Promise(resolve => { timer = setTimeout(() => { controller.abort(); resolve(unknown("timeout")); }, timeoutMs); }),
+        ]);
+    }
+    catch {
+        return unknown("observation_unavailable");
+    }
+    finally {
+        clearTimeout(timer);
+        controller.abort();
+    }
+}
+export class ForeignLocalDaemonError extends Error {
+    code = "foreign_local_daemon";
+    constructor(baseUrl, owner) {
+        super(`The optional local user guard found a different OS user at ${baseUrl} (reported PID ${owner.pid}, effective UID ${owner.uid}, corroborated by ps; caller effective UID ${owner.callerUid}). No business request was sent after this owner check. Start your own daemon with \`rig daemon start --port <unused-port>\`, or explicitly select an intended shared/remote endpoint with OPENRIG_URL.`);
+        this.name = "ForeignLocalDaemonError";
+    }
+}
+//# sourceMappingURL=local-daemon-owner.js.map

package/dist/local-daemon-owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-daemon-owner.js","sourceRoot":"","sources":["../src/local-daemon-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAatC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACjC,MAAM,OAAO,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AACrF,MAAM,OAAO,GAAG,CAAC,CAAS,EAAsB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAE9H,yEAAyE;AACzE,SAAS,kBAAkB,CAAC,OAAe;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACxE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAClD,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,qFAAqF;IACrF,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;IAClH,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO;IAC/E,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACvF,CAAC;AAED;;wGAEwG;AACxG,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAe,EAAE,OAAuB,EAAE;IACrF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IACxD,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC;IACjJ,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,KAAa,EAAE,EAAE;QAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/J,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,EAAE;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3D,IAAI,SAAS,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC9F,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC;IACF,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,CAAC,KAAK,IAA+B,EAAE;gBACrC,MAAM,cAAc,GAAG,KAAK,IAAuD,EAAE;oBACnF,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;wBAAE,OAAO;oBACvE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC3I,IAAI,CAAC,MAAM,CAAC,EAAE;wBAAE,OAAO;oBACvB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAA8C,CAAC;oBAC7E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,IAAK,IAAI,EAAE,GAAc,IAAI,CAAC;2BAC7D,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,IAAK,IAAI,EAAE,IAAe,GAAG,CAAC;wBAAE,OAAO;oBAC7E,OAAO,EAAE,GAAG,EAAE,IAAK,CAAC,GAAa,EAAE,GAAG,EAAE,IAAK,CAAC,IAAc,EAAE,CAAC;gBACjE,CAAC,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAE,CAAC;gBACxC,IAAI,CAAC,QAAQ;oBAAE,OAAO,OAAO,CAAC,yBAAyB,CAAC,CAAC;gBACzD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC/F,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC;gBAClD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;oBAAE,OAAO,OAAO,CAAC,qBAAqB,CAAC,CAAC;gBAClF,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;gBACtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;oBAAE,OAAO,OAAO,CAAC,2BAA2B,CAAC,CAAC;gBACvH,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;oBAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBAC1G,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;oBAAE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC1F,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;YACjG,CAAC,CAAC,EAAE;YACJ,IAAI,OAAO,CAAmB,OAAO,CAAC,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;SACzI,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAAC,CAAC;YAC9C,CAAC;QAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACtD,CAAC;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,IAAI,GAAG,sBAAsB,CAAC;IACvC,YAAY,OAAe,EAAE,KAAoE;QAC/F,KAAK,CAAC,8DAA8D,OAAO,kBAAkB,KAAK,CAAC,GAAG,mBAAmB,KAAK,CAAC,GAAG,8CAA8C,KAAK,CAAC,SAAS,yMAAyM,CAAC,CAAC;QAC1Y,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openrig/cli",
-  "version": "0.6.13",
+  "version": "0.6.14",
   "type": "module",
   "description": "Build your own network of agents from Claude Code, Codex and Pi: persistent teams with roles, shared context and owned work.",
   "keywords": [