@rubytech/create-realagent 1.0.856 → 1.0.858

package/payload/platform/scripts/check-no-task-id-leaks.mjs

@@ -0,0 +1,110 @@
+#!/usr/bin/env node
+// Build-time gate: rejects `(Task NNN)` citations in operator-visible production
+// strings. Citations are allowed in inline comments and test titles/bodies only.
+//
+// Live repro that motivated the gate: setup-tunnel.sh on realagent 192.168.88.8
+// emitted `Re-run the installer to provision Chromium (Task 929).` to the
+// operator's chat surface — the citation made the operator chase Task 929's
+// history rather than execute the verb. Operator surfaces strip citations;
+// internal references keep them.
+//
+// Comment-skip is line-leading-character based, not AST. The repo's actual
+// comment forms are: `#` (shell), `//` (TS/JS line), `*`/`/*`/`/**` (JSDoc
+// continuation, block, doc), and `{/*` (JSX). Any line whose first non-
+// whitespace token is one of these is skipped. Test files (`__tests__/` and
+// `*.test.{ts,tsx,js}`) are skipped wholesale because the brief's out-of-scope
+// rule covers test titles, and test bodies that assert on citations are
+// equivalent to titles for this gate's purpose.
+
+import { readFileSync, readdirSync, statSync } from 'node:fs'
+import { dirname, join, relative, sep, basename } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const SCRIPT_DIR = dirname(fileURLToPath(import.meta.url))
+const REPO_ROOT = join(SCRIPT_DIR, '..', '..')
+
+const SCAN_ROOTS = [
+  join(REPO_ROOT, 'platform', 'scripts'),
+  join(REPO_ROOT, 'platform', 'plugins'),
+  join(REPO_ROOT, 'platform', 'ui', 'server'),
+  join(REPO_ROOT, 'platform', 'ui', 'app'),
+  join(REPO_ROOT, 'packages', 'create-maxy', 'src'),
+]
+
+const ALLOWED_EXTS = new Set(['.sh', '.ts', '.tsx', '.js', '.mjs', '.cjs'])
+const SKIP_DIR_NAMES = new Set([
+  'node_modules', 'dist', 'build', '.next', 'payload', '__tests__',
+])
+const TASK_ID_RE = /\(Task \d+\)/
+
+function isCommentLine(line) {
+  const trimmed = line.replace(/^\s+/, '')
+  if (trimmed.startsWith('#')) return true
+  if (trimmed.startsWith('//')) return true
+  if (trimmed.startsWith('/*')) return true
+  if (trimmed.startsWith('*')) return true
+  if (trimmed.startsWith('{/*')) return true
+  return false
+}
+
+function shouldScanFile(filePath) {
+  const name = basename(filePath)
+  if (name.endsWith('.test.ts')) return false
+  if (name.endsWith('.test.tsx')) return false
+  if (name.endsWith('.test.js')) return false
+  const ext = name.includes('.') ? '.' + name.split('.').pop() : ''
+  return ALLOWED_EXTS.has(ext)
+}
+
+function* walk(root) {
+  let entries
+  try {
+    entries = readdirSync(root)
+  } catch {
+    return
+  }
+  for (const name of entries) {
+    if (SKIP_DIR_NAMES.has(name)) continue
+    const full = join(root, name)
+    let st
+    try { st = statSync(full) } catch { continue }
+    if (st.isDirectory()) {
+      yield* walk(full)
+    } else if (st.isFile()) {
+      yield full
+    }
+  }
+}
+
+const leaks = []
+
+for (const root of SCAN_ROOTS) {
+  for (const file of walk(root)) {
+    if (!shouldScanFile(file)) continue
+    let content
+    try {
+      content = readFileSync(file, 'utf-8')
+    } catch {
+      continue
+    }
+    const lines = content.split('\n')
+    for (let i = 0; i < lines.length; i++) {
+      const line = lines[i]
+      if (!TASK_ID_RE.test(line)) continue
+      if (isCommentLine(line)) continue
+      leaks.push({ file: relative(REPO_ROOT, file), line: i + 1, content: line.trim() })
+    }
+  }
+}
+
+if (leaks.length > 0) {
+  console.error(`check-no-task-id-leaks: ${leaks.length} operator-visible (Task NNN) citation(s) found:`)
+  for (const leak of leaks) {
+    console.error(`  ${leak.file}:${leak.line}: ${leak.content}`)
+  }
+  console.error('')
+  console.error('Citations belong in inline comments only, never in operator-visible strings')
+  console.error('(stderr/stdout, log files surfaced via logs-read.sh, systemd unit')
+  console.error('--description=, error messages, console.log/warn/error, throw new Error).')
+  process.exit(1)
+}

package/payload/platform/scripts/vnc.sh

@@ -96,18 +96,18 @@ CHROMIUM_BIN_FILE="${PLATFORM_ROOT}/config/chromium-binary.path"
 if [ ! -r "$CHROMIUM_BIN_FILE" ]; then
   log "[vnc.sh:chromium] FATAL: ${CHROMIUM_BIN_FILE} missing or unreadable"
   echo "ERROR: ${CHROMIUM_BIN_FILE} missing or unreadable." >&2
-  echo "       Re-run the installer to provision a non-snap Chromium (Task 929)." >&2
+  echo "       Re-run the installer to provision a non-snap Chromium." >&2
   exit 1
 fi
 CHROMIUM_BIN="$(head -n1 "$CHROMIUM_BIN_FILE" | tr -d '[:space:]')"
 if [ -z "$CHROMIUM_BIN" ]; then
   log "[vnc.sh:chromium] FATAL: ${CHROMIUM_BIN_FILE} is empty"
-  echo "ERROR: ${CHROMIUM_BIN_FILE} is empty — re-run installer (Task 929)." >&2
+  echo "ERROR: ${CHROMIUM_BIN_FILE} is empty — re-run installer." >&2
   exit 1
 fi
 if [ ! -x "$CHROMIUM_BIN" ]; then
   log "[vnc.sh:chromium] FATAL: configured CHROMIUM_BIN=${CHROMIUM_BIN} is not executable"
-  echo "ERROR: configured Chromium binary ${CHROMIUM_BIN} is not executable — re-run installer (Task 929)." >&2
+  echo "ERROR: configured Chromium binary ${CHROMIUM_BIN} is not executable — re-run installer." >&2
   exit 1
 fi
 CHROMIUM_REALPATH="$(readlink -f "$CHROMIUM_BIN" 2>/dev/null || echo "$CHROMIUM_BIN")"
@@ -115,7 +115,7 @@ case ":$(echo "$CHROMIUM_REALPATH" | tr '/' ':'):" in
   *:snap:*)
     log "[vnc.sh:chromium] FATAL: CHROMIUM_BIN=${CHROMIUM_BIN} resolves to ${CHROMIUM_REALPATH} (snap-confined)"
     echo "ERROR: configured Chromium ${CHROMIUM_BIN} resolves to ${CHROMIUM_REALPATH} which is snap-confined." >&2
-    echo "       Snap AppArmor denies writes to ~/.{brand}/chromium-profile/. Re-run installer to install Google Chrome (Task 929)." >&2
+    echo "       Snap AppArmor denies writes to ~/.{brand}/chromium-profile/. Re-run installer to install Google Chrome." >&2
     exit 1
     ;;
 esac
@@ -305,7 +305,7 @@ start_chrome_on() {
     if check_window_on_display "${target_display}"; then
       log "Chromium ready (${label}) with CDP on :${CDP_PORT} windowPresent=true"
     else
-      log "WARNING: Chromium CDP up on :${CDP_PORT} but no window visible on ${target_display} (${label}) — observability-only, not gating (Task 632)"
+      log "WARNING: Chromium CDP up on :${CDP_PORT} but no window visible on ${target_display} (${label}) — observability-only, not gating"
     fi
   else
     log "ERROR: Chromium failed to start on ${target_display} (${label}) — CDP port ${CDP_PORT} not listening (browser-specialist degraded)"
@@ -381,7 +381,7 @@ start_chrome_native() {
     elif [ "$NATIVE_SESSION_TYPE" = "wayland" ]; then
       log "Chromium ready (native) with CDP on :${CDP_PORT} windowPresent=unknown (wayland)"
     else
-      log "WARNING: Chromium CDP up on :${CDP_PORT} but no window visible on ${NATIVE_DISPLAY} (native) — observability-only, not gating (Task 632)"
+      log "WARNING: Chromium CDP up on :${CDP_PORT} but no window visible on ${NATIVE_DISPLAY} (native) — observability-only, not gating"
     fi
   else
     log "ERROR: Chromium failed to start on ${NATIVE_DISPLAY} (native) — CDP port ${CDP_PORT} not listening (browser-specialist degraded)"