@tpsdev-ai/flair 0.8.2 → 0.9.0

package/dist/resources/scan/skill-scanner.js

@@ -0,0 +1,166 @@
+/**
+ * Skill content static analyzer — pure, no Harper runtime deps.
+ *
+ * Imported by `resources/SkillScan.ts` (the HTTP Resource) and by unit
+ * tests in `test/unit/SkillScan.test.ts`. Keeping the scanner logic in a
+ * separate module lets the tests run without instantiating the Harper
+ * runtime.
+ *
+ * See SkillScan.ts for the design rationale on markdown awareness and the
+ * language-agnostic vs shell-only pattern split.
+ */
+const SHELL_PATTERNS = [
+    { regex: /\bexec\s*\(/, type: "shell_command" },
+    { regex: /\bspawn\s*\(/, type: "shell_command" },
+    { regex: /\bsystem\s*\(/, type: "shell_command" },
+    { regex: /\bchild_process\b/, type: "shell_command" },
+];
+const NETWORK_PATTERNS = [
+    { regex: /\bfetch\s*\(/, type: "network_call" },
+    { regex: /\bcurl\b/, type: "network_call" },
+    { regex: /https?:\/\//, type: "url_reference" },
+    { regex: /\bXMLHttpRequest\b/, type: "network_call" },
+    { regex: /\baxios\b/, type: "network_call" },
+];
+const FS_PATTERNS = [
+    { regex: /\bfs\.write/, type: "fs_write" },
+    { regex: /\bwriteFile/, type: "fs_write" },
+    { regex: />[>]?\s*[\/~]/, type: "fs_redirect" },
+];
+const ENV_PATTERNS = [
+    { regex: /\bprocess\.env\b/, type: "env_access" },
+    { regex: /\$ENV\b/, type: "env_access" },
+    { regex: /\$\{?\w+\}?/, type: "env_variable" },
+];
+const ENCODING_PATTERNS = [
+    { regex: /\batob\s*\(/, type: "base64_decode" },
+    { regex: /\bbtoa\s*\(/, type: "base64_encode" },
+    { regex: /Buffer\.from\s*\([^)]*,\s*['"]base64['"]/, type: "base64_decode" },
+    { regex: /Buffer\.from\s*\([^)]*,\s*['"]hex['"]/, type: "hex_decode" },
+    { regex: /\\x[0-9a-fA-F]{2}/, type: "hex_escape" },
+    { regex: /\\u200[b-f]|\\u2060|\\ufeff/, type: "zero_width_char" },
+];
+const UNICODE_PATTERNS = [
+    { regex: /[​-‏⁠]/, type: "zero_width_char" },
+    { regex: /[А-я]/, type: "cyrillic_homoglyph" },
+];
+const LANG_AGNOSTIC_PATTERNS = [
+    ...NETWORK_PATTERNS,
+    ...FS_PATTERNS,
+    ...ENV_PATTERNS,
+    ...ENCODING_PATTERNS,
+    ...UNICODE_PATTERNS,
+];
+const SHELL_FENCE_LANGS = new Set(["", "sh", "bash", "shell", "zsh"]);
+const MARKDOWN_IDENTIFIER_RE = /^[\w@./-]+$/;
+const SHELL_BACKTICK_INDICATORS = [
+    /\s/,
+    /[|;&]/,
+    /\$\(/,
+    /\$\{/,
+    /^\$\w/,
+    />/,
+    /<\(/,
+];
+function lineHasShellishBacktick(line) {
+    const matches = line.match(/`([^`\n]+)`/g);
+    if (!matches)
+        return false;
+    for (const raw of matches) {
+        const inner = raw.slice(1, -1);
+        if (MARKDOWN_IDENTIFIER_RE.test(inner))
+            continue;
+        for (const indicator of SHELL_BACKTICK_INDICATORS) {
+            if (indicator.test(inner))
+                return true;
+        }
+    }
+    return false;
+}
+function assessRisk(violations) {
+    if (violations.length === 0)
+        return "low";
+    const types = new Set(violations.map((v) => v.type));
+    // Programmatic shell call patterns: exec/spawn/system/child_process. These
+    // are definite payloads when they appear in a skill.
+    const hasShellCommand = types.has("shell_command");
+    // Backticked shell-ish content in markdown prose. Could be `npm run deploy`
+    // in documentation (medium), or could combine with other smells (high).
+    const hasShellBacktick = types.has("shell_backtick");
+    const hasFs = types.has("fs_write") || types.has("fs_redirect");
+    const hasEncoding = types.has("base64_decode") || types.has("hex_decode");
+    const hasZeroWidth = types.has("zero_width_char");
+    const hasHomoglyph = types.has("cyrillic_homoglyph");
+    // Critical: any shell combined with encoded payloads, OR obfuscation chars.
+    if (((hasShellCommand || hasShellBacktick) && hasEncoding) ||
+        hasZeroWidth ||
+        hasHomoglyph) {
+        return "critical";
+    }
+    // High: programmatic shell, fs writes, or shell-backtick + other smells
+    // (env access, network call). A skill that quotes a command AND reads env
+    // AND fetches a URL is doing something, not just documenting.
+    const hasOtherSmells = types.has("env_access") ||
+        types.has("env_variable") ||
+        types.has("network_call") ||
+        types.has("url_reference");
+    if (hasShellCommand || hasFs || (hasShellBacktick && hasOtherSmells)) {
+        return "high";
+    }
+    // Medium: shell_backtick alone (doc reference), or network/encoding
+    // without shell. Reviewable but not blocked.
+    if (hasShellBacktick || hasOtherSmells || hasEncoding) {
+        return "medium";
+    }
+    return "low";
+}
+function detectFenceTransition(line, state) {
+    const m = line.match(/^[ \t]*```([\w.-]*)\s*$/);
+    if (!m)
+        return false;
+    if (state.inFence) {
+        state.inFence = false;
+        state.lang = "";
+    }
+    else {
+        state.inFence = true;
+        state.lang = (m[1] || "").toLowerCase();
+    }
+    return true;
+}
+export function scanSkillContent(content) {
+    const lines = content.split("\n");
+    const violations = [];
+    const fence = { inFence: false, lang: "" };
+    const recordIfMatch = (lineIndex, line, patterns) => {
+        for (const pattern of patterns) {
+            if (pattern.regex.test(line)) {
+                violations.push({
+                    type: pattern.type,
+                    line: lineIndex + 1,
+                    content: line.trim().slice(0, 200),
+                });
+            }
+        }
+    };
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i] ?? "";
+        if (detectFenceTransition(line, fence))
+            continue;
+        const insideShellFence = fence.inFence && SHELL_FENCE_LANGS.has(fence.lang);
+        const insideNonShellFence = fence.inFence && !insideShellFence;
+        if (!fence.inFence && lineHasShellishBacktick(line)) {
+            violations.push({
+                type: "shell_backtick",
+                line: i + 1,
+                content: line.trim().slice(0, 200),
+            });
+        }
+        if (!insideNonShellFence) {
+            recordIfMatch(i, line, SHELL_PATTERNS);
+        }
+        recordIfMatch(i, line, LANG_AGNOSTIC_PATTERNS);
+    }
+    const riskLevel = assessRisk(violations);
+    return { safe: violations.length === 0, violations, riskLevel };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tpsdev-ai/flair",
-  "version": "0.8.2",
+  "version": "0.9.0",
   "description": "Identity, memory, and soul for AI agents. Cryptographic identity (Ed25519), semantic memory with local embeddings, and persistent personality — all in a single process.",
   "type": "module",
   "license": "Apache-2.0",
@@ -30,6 +30,7 @@
   "files": [
     "dist/",
     "schemas/",
+    "templates/",
     "ui/",
     "config.yaml",
     "LICENSE",

package/templates/bin/flair-rem-nightly.sh.tmpl

@@ -0,0 +1,9 @@
+#!/bin/sh
+# Flair REM nightly runner shim.
+# Deployed by `flair rem nightly enable` to {{SHIM_PATH}}.
+# Invoked by launchd (macOS) or systemd (Linux) on the configured schedule.
+#
+# Single line that invokes the CLI's run-once subcommand — the runner module
+# does all the work. Logs land in {{HOME}}/.flair/logs/.
+set -e
+exec {{FLAIR_BIN}} rem nightly run-once

package/templates/launchd/dev.flair.rem.nightly.plist.tmpl

@@ -0,0 +1,46 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
+  "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>dev.flair.rem.nightly</string>
+
+  <key>ProgramArguments</key>
+  <array>
+    <string>{{SHIM_PATH}}</string>
+  </array>
+
+  <key>StartCalendarInterval</key>
+  <dict>
+    <key>Hour</key>
+    <integer>{{HOUR}}</integer>
+    <key>Minute</key>
+    <integer>{{MINUTE}}</integer>
+  </dict>
+
+  <key>RunAtLoad</key>
+  <false/>
+
+  <key>StandardOutPath</key>
+  <string>{{HOME}}/.flair/logs/rem-nightly.stdout.log</string>
+
+  <key>StandardErrorPath</key>
+  <string>{{HOME}}/.flair/logs/rem-nightly.stderr.log</string>
+
+  <key>WorkingDirectory</key>
+  <string>{{HOME}}</string>
+
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>HOME</key>
+    <string>{{HOME}}</string>
+    <key>PATH</key>
+    <string>/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin</string>
+    <key>FLAIR_AGENT_ID</key>
+    <string>{{AGENT_ID}}</string>
+    <key>FLAIR_URL</key>
+    <string>{{FLAIR_URL}}</string>
+  </dict>
+</dict>
+</plist>

package/templates/systemd/flair-rem-nightly.service.tmpl

@@ -0,0 +1,14 @@
+[Unit]
+Description=Flair REM nightly cycle ({{AGENT_ID}})
+After=network.target
+
+[Service]
+Type=oneshot
+ExecStart={{SHIM_PATH}}
+Environment=FLAIR_AGENT_ID={{AGENT_ID}}
+Environment=FLAIR_URL={{FLAIR_URL}}
+StandardOutput=append:{{HOME}}/.flair/logs/rem-nightly.stdout.log
+StandardError=append:{{HOME}}/.flair/logs/rem-nightly.stderr.log
+
+[Install]
+WantedBy=default.target

package/templates/systemd/flair-rem-nightly.timer.tmpl

@@ -0,0 +1,10 @@
+[Unit]
+Description=Flair REM nightly timer ({{AGENT_ID}})
+
+[Timer]
+OnCalendar=*-*-* {{HOUR_PAD}}:{{MINUTE_PAD}}:00
+Persistent=true
+Unit=flair-rem-nightly.service
+
+[Install]
+WantedBy=timers.target