@volter/teams 0.2.46 → 0.2.48

package/board-process-guard.mjs

@@ -10,13 +10,27 @@ export function patternKill(command) {
   const text = String(command).replace(/\\\r?\n/g, '').replace(/\\([a-zA-Z-])/g, '$1').replace(/["']/g, '');
   const head = String.raw`(?:^|[;|&(\n{}]|\s-[a-zA-Z]*c\s+)\s*(?:(?:env|sudo|exec|command|xargs|nohup|do|then|else|!)\s+(?:--?[^\s;|&()]+\s+)*|[A-Za-z_][A-Za-z0-9_]*=[^\s;|&()]+\s+)*(?:[\w./-]+/)?`;
   return new RegExp(head + String.raw`(?:pkill|killall)(?=$|[\s;|&()])`).test(text) ||
-    new RegExp(head + String.raw`pgrep\s+[^;|&\n)]*(?:--full\b|-[a-zA-Z]*f[a-zA-Z]*(?=$|\s))`).test(text);
+    new RegExp(head + String.raw`pgrep\s+[^;|&\n)]*(?:--full\b|-[a-zA-Z]*f[a-zA-Z]*(?=$|\s))`).test(text) ||
+    windowsPatternKill(text);
+}
+// Windows names a process by image, title or command line through its own tools (cmd, PowerShell, Git Bash's
+// `//IM`): each such kill is refused as pkill is. A kill by PID (`taskkill /PID`, `Stop-Process -Id`) stays allowed.
+function windowsPatternKill(text) {
+  return /\btaskkill(?:\.exe)?\b[^;|&\n]*\s(?:\/{1,2}|-)(?:im|fi)\b/i.test(text) ||
+    /(?:^|[^\w-])(?:Stop-Process|spps)\b[^;|\n]*\s-(?:N[a-z]*|ProcessName)\b/i.test(text) ||
+    // PowerShell's `kill` alias; Bash's own `kill -n <signal>` is not a name
+    /(?:^|[^\w-])kill\b[^;|\n]*\s-(?:Name|ProcessName)\b/i.test(text) ||
+    /\b(?:Get-Process|gps)\b(?![^|;\n]*\s-Id\b)[^|;\n]*\|\s*(?:Stop-Process|spps|kill)\b/i.test(text) ||
+    /\bwmic\b[^;|&\n]*\bprocess\b[^;|&\n]*\bwhere\b[^;|&\n]*\b(?:name|commandline|executablepath)\b/i.test(text) ||
+    /\bWin32_Process\b[^\n]*\b(?:Name|CommandLine|ExecutablePath)\b[^\n]*\b(?:Terminate|Remove-CimInstance|Remove-WmiObject|Stop-Process)\b/i.test(text);
 }
 const quote = value => `'${String(value).replaceAll("'", "'\\''")}'`;
 export function boardGuardArguments(kind, args, { cwd, enabled, node = process.execPath } = {}) {
   if (!enabled) return args;
   const command = `${quote(node)} ${quote(fileURLToPath(import.meta.url))}`;
-  const hooks = [{ matcher: '^Bash$', hooks: [{ type: 'command', command, timeout: 10 }] }];
+  // Claude's exec form spawns the policy with no shell on every platform (Windows included, where its shell form
+  // runs Git Bash or PowerShell and the POSIX quoting above would not parse); its PowerShell tool is guarded as Bash is.
+  const hooks = [{ matcher: '^(Bash|PowerShell)$', hooks: [{ type: 'command', command: node, args: [fileURLToPath(import.meta.url)], timeout: 10 }] }];
   if (kind === 'claude-code') {
     const next = [...args], at = next.findIndex(arg => arg === '--settings' || arg.startsWith('--settings='));
     if (at < 0) return [...next, '--settings', JSON.stringify({ hooks: { PreToolUse: hooks } })];
@@ -30,6 +44,7 @@ export function boardGuardArguments(kind, args, { cwd, enabled, node = process.e
     // Native Codex rules cannot split substitutions such as kill $(pgrep -f …).
     // Its synchronous Bash hook can deny the entire command before execution.
     // This invocation enables and trusts the board-vetted command policy.
+    if (process.platform === 'win32') throw new Error('board process guard is unavailable for codex on Windows; no unguarded session was launched');
     const handler = `{ matcher = "^Bash$", hooks = [{ type = "command", command = ${JSON.stringify(command)}, timeout = 10 }] }`;
     // Codex's own flags go before any subcommand (`app-server`, `resume`) or prompt: after `app-server`, Codex
     // 0.159 refuses --dangerously-bypass-hook-trust and the worker never starts.

package/machine-door.mjs

@@ -13,8 +13,11 @@ export async function openMachine({ machine = null, context = null, env = proces
   // This machine named by its own name is its own daemon, reached over its socket: through the Teams server it waited
   // on the org's machine list and a server channel, and a launch on this box failed whenever the server was rate
   // limited or out of reach (two review resumes, 17:03Z and 17:34Z, retired as never issued).
-  if (!machine.startsWith('mach_') && normalMachineName(machine) === normalMachineName(hostname()) && existsSync(paths(home).socket)) return openLocalMachine(paths(home).socket);
+  // Its own name is the one this home is enrolled under, never the host's: a second machine enrolled from the same host
+  // shares the host name with the first, and one reaching the other by that name must go through the Teams server (its
+  // own socket is its own daemon, which would hand the request back to itself until the caller gave up).
   const supercodeHome = env.SUPERCODE_HOME ?? resolve(home, '..');
+  if (!machine.startsWith('mach_') && normalMachineName(machine) === ownMachineName(supercodeHome) && existsSync(paths(home).socket)) return openLocalMachine(paths(home).socket);
   const contexts = new WorkspaceContexts(supercodeHome);
   const name = context ?? env.SUPERCODE_CONTEXT ?? contexts.read().current;
   if (!name || name === 'local') throw Object.assign(new Error('a remote machine is reached through a Teams context: `supercode teams login …`, then `supercode context use NAME` or --context NAME'), { code: 'invalid_request' });
@@ -50,6 +53,18 @@ export async function openMachine({ machine = null, context = null, env = proces
   return channel;
 }
 
+/** The name this home's machine goes by, in the form mail addresses use: its enrollment's in the home's current
+ *  context, else (an unenrolled machine) the host's. */
+export function ownMachineName(supercodeHome) {
+  let name = hostname();
+  try {
+    const contexts = new WorkspaceContexts(supercodeHome);
+    const doc = contexts.read(), context = doc.contexts[doc.current];
+    name = contexts.connector(context.server_id, context.team_id).read()?.machine?.name || name;
+  } catch { /* an unenrolled machine goes by its host name */ }
+  return normalMachineName(name);
+}
+
 /** A machine name in the form mail addresses use: the short host name, lowercased, with anything outside [a-z0-9_-] as `-`. */
 export function normalMachineName(name) {
   return String(name).split('.')[0].toLowerCase().replace(/[^a-z0-9_-]/g, '-');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/teams",
-  "version": "0.2.46",
+  "version": "0.2.48",
   "type": "module",
   "description": "Volter Teams, the neutral team plane: machine identity and daemon core, the local door and server link, admission from machine grants, product doors, and the Teams server's neutral routes (company RFC 0008).",
   "license": "MIT",