@scheduler-systems/gal-run 0.0.404 → 0.0.405

package/dist/index.cjs

@@ -3970,7 +3970,7 @@ var cliVersion, defaultApiUrl, BUILD_CONSTANTS, constants_default;
 var init_constants = __esm({
   "src/constants.ts"() {
     "use strict";
-    cliVersion = true ? "0.0.404" : "0.0.0-dev";
+    cliVersion = true ? "0.0.405" : "0.0.0-dev";
     defaultApiUrl = true ? "https://api.gal.run" : "http://localhost:3000";
     BUILD_CONSTANTS = Object.freeze([cliVersion, defaultApiUrl]);
     constants_default = BUILD_CONSTANTS;
@@ -4880,7 +4880,7 @@ function detectEnvironment() {
     return "dev";
   }
   try {
-    const version2 = true ? "0.0.404" : void 0;
+    const version2 = true ? "0.0.405" : void 0;
     if (version2 && version2.includes("-local")) {
       return "dev";
     }
@@ -5249,7 +5249,7 @@ function getId() {
 }
 function getCliVersion() {
   try {
-    return true ? "0.0.404" : "0.0.0-dev";
+    return true ? "0.0.405" : "0.0.0-dev";
   } catch {
     return "0.0.0-dev";
   }
@@ -14550,6 +14550,97 @@ var init_capability_analyzer = __esm({
         title: "Org/repo admin operation may exceed integration token scope",
         message: 'The prompt indicates intent to perform an org-wide or repo-admin operation (rulesets, branch protection write, org settings, or team membership). Background agent sessions run with a GitHub App installation token that, by default, does NOT include "Administration: write" or "Members: write" at the organisation level. These calls will fail with HTTP 403 "Resource not accessible by integration".',
         recommendation: 'This operation cannot be completed with the current integration token. Options:\n  1. Use a Personal Access Token (PAT) with the required org/repo admin scopes instead of the integration token \u2014 set it in the session environment as GITHUB_TOKEN.\n  2. Ask a GitHub organisation owner to grant the GAL GitHub App the "Administration" (repository or organisation) and/or "Members" permissions.\n  3. Perform the admin operation manually in the GitHub UI or with a PAT before dispatching the agent session.'
+      },
+      // 8. Browser automation with saved login state / browser profile (#4814)
+      {
+        ruleId: "BROWSER_AUTOMATION",
+        category: "browser_automation",
+        severity: "warning",
+        patterns: [
+          /browser\s+profile/i,
+          /chrome\s+profile/i,
+          /firefox\s+profile/i,
+          /saved\s+(login|session|cookies?|credential)/i,
+          /login\s+state/i,
+          /persistent\s+(session|browser|cookie)/i,
+          /user[\s-]?data[\s-]?dir/i,
+          /--user-data-dir/i,
+          /browser\s+automation.{0,30}(login|auth|session|profile)/i,
+          /(login|auth|session|profile).{0,30}browser\s+automation/i,
+          /playwright.{0,30}(storage[\s-]?state|saved[\s-]?auth)/i,
+          /(storage[\s-]?state|saved[\s-]?auth).{0,30}playwright/i,
+          /puppeteer.{0,30}(profile|user[\s-]?data)/i,
+          /(profile|user[\s-]?data).{0,30}puppeteer/i
+        ],
+        title: "Browser automation with saved login state detected",
+        message: "The prompt requires browser automation that depends on a saved browser profile, login state, or persistent cookies. Background agent runners do not have access to local browser profiles or saved authentication sessions.",
+        recommendation: "Provide explicit authentication credentials via environment variables or the approved config environment block instead of relying on a saved browser profile. If Playwright is used, export and supply a `storageState` JSON file via the environment config."
+      },
+      // 9. Firebase / Firestore access (#4814)
+      {
+        ruleId: "FIREBASE_ACCESS",
+        category: "firebase_access",
+        severity: "warning",
+        patterns: [
+          /firebase[\s-]?admin/i,
+          /firestore\s+(read|write|query|update|delete|set|add|batch|transaction)/i,
+          /(read|write|query|update|delete|set|add)\s+.{0,30}firestore/i,
+          /firebase\s+(auth|database|rtdb|realtime|storage|functions|hosting)/i,
+          /FIREBASE_SERVICE_ACCOUNT/i,
+          /FIREBASE_TOKEN/i,
+          /FIREBASE_PROJECT_ID/i,
+          /GOOGLE_APPLICATION_CREDENTIALS/i,
+          /firebase[\s-]?emulator/i,
+          /firebase\s+deploy/i,
+          /firebaserc/i
+        ],
+        title: "Firebase / Firestore access detected",
+        message: "The prompt requires Firebase or Firestore access. Background agent runners need a Firebase service account key or Application Default Credentials to interact with Firebase services.",
+        recommendation: "Ensure the approved config environment block includes a Firebase service account key (e.g. GOOGLE_APPLICATION_CREDENTIALS as a file secret). For emulator-only work, set FIRESTORE_EMULATOR_HOST in the environment config."
+      },
+      // 10. GCP / cloud access beyond deployment (#4814)
+      {
+        ruleId: "CLOUD_ACCESS",
+        category: "cloud_access",
+        severity: "warning",
+        patterns: [
+          /gcloud\s+(auth|config|iam|projects|secrets|kms|storage|compute|sql|pubsub|run\s+services)/i,
+          /GCP_SA_KEY/i,
+          /GOOGLE_CLOUD_PROJECT/i,
+          /service[\s-]?account[\s-]?key/i,
+          /application[\s-]?default[\s-]?credentials/i,
+          /cloud\s+(storage|kms|sql|pubsub|functions|secret[\s-]?manager)/i,
+          /gsutil\b/i,
+          /bq\s+(query|load|extract|mk|ls)/i,
+          /gcs:\/\//i,
+          /gs:\/\//i
+        ],
+        title: "GCP / cloud service access detected",
+        message: "The prompt requires Google Cloud Platform service access (IAM, Secret Manager, Cloud Storage, etc.). Background agent runners need a service account key or workload identity credentials.",
+        recommendation: "Add a GCP service account key to the approved config environment block (secret type: file, source: secrets/gcp-sa-key) and include a setup step to activate it. Alternatively, configure workload identity federation for keyless auth."
+      },
+      // 11. Approved environment secrets / auth references (#4814)
+      {
+        ruleId: "ENVIRONMENT_AUTH_REFS",
+        category: "environment_auth",
+        severity: "warning",
+        patterns: [
+          /approved[\s-]?config.{0,30}(secret|auth|credential|environment)/i,
+          /(secret|auth|credential|environment).{0,30}approved[\s-]?config/i,
+          /environment[\s-]?block.{0,30}(secret|auth|key|token)/i,
+          /(secret|auth|key|token).{0,30}environment[\s-]?block/i,
+          /gal[\s-]?config.{0,30}(secret|environment|auth)/i,
+          /(secret|environment|auth).{0,30}gal[\s-]?config/i,
+          /environment\.secrets/i,
+          /environment\.auth/i,
+          /environment\.setup/i,
+          /secret[\s-]?manager\s+wiring/i,
+          /inject.{0,30}(secret|credential|key)/i,
+          /(secret|credential|key).{0,30}inject/i
+        ],
+        title: "Approved environment secrets or auth configuration required",
+        message: "The prompt references secrets, authentication, or environment configuration from the approved config. The agent runner must have the environment block properly configured with the required secrets and auth entries before dispatch.",
+        recommendation: "Verify the workspace approved config includes an `environment` block with the required `secrets` and/or `auth` entries. Use `gal config get --platform claude` to inspect the current approved config before dispatching."
       }
     ];
   }
@@ -71193,7 +71284,7 @@ var init_index = __esm({
 });
 
 // src/bootstrap.ts
-var cliVersion10 = true ? "0.0.404" : "0.0.0-dev";
+var cliVersion10 = true ? "0.0.405" : "0.0.0-dev";
 var args = process.argv.slice(2);
 var requestedGlobalHelp = args.length === 1 && (args[0] === "--help" || args[0] === "-h");
 var requestedVersion = args.length === 1 && (args[0] === "--version" || args[0] === "-V");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scheduler-systems/gal-run",
-  "version": "0.0.404",
+  "version": "0.0.405",
   "description": "GAL CLI - Command-line tool for managing AI agent configurations across your organization",
   "license": "Elastic-2.0",
   "private": false,