atris 3.56.0 → 3.56.1

package/lib/known-commands.js

@@ -1,6 +1,6 @@
 'use strict';
 
-const knownCommands = ['init', 'doctor', 'install', 'workspace', 'log', 'logs', 'wish', 'ask', 'approve', 'stop', 'ready', 'check', 'drill', 'dream', 'now', 'goal', 'wtf', 'founder', 'orb', 'radar', 'who', 'stream', 'ctop', 'launchpad', 'status', 'analytics', 'revisions', 'visualize', 'brain', 'brainstorm', 'autopilot', 'run', 'plan', 'do', 'review', 'release',
+const knownCommands = ['init', 'doctor', 'install', 'workspace', 'log', 'logs', 'later', 'wish', 'ask', 'approve', 'stop', 'ready', 'check', 'drill', 'dream', 'now', 'goal', 'wtf', 'founder', 'orb', 'radar', 'who', 'stream', 'ctop', 'launchpad', 'status', 'analytics', 'revisions', 'visualize', 'brain', 'brainstorm', 'autopilot', 'run', 'plan', 'do', 'review', 'release',
                        'activate', '_activate', 'agent', 'team', 'chat', 'fast', 'ax', 'console', 'serve', 'login', 'logout', 'whoami', 'switch', 'use', 'accounts', '_resolve', '_profile-email', '_switch-session', 'shell-init', 'update', 'upgrade', 'version', 'help', 'next', 'atris',
                        'clean', 'close', 'harvest', 'verify', 'recover', 'search', 'scout', 'skill', 'member', 'codex-goal', 'app', 'apps', 'learn', 'lesson', 'taste', 'teach', 'plugin', 'experiments', 'bench', 'router', 'receipt', 'proof', 'openclaw', 'pull', 'push', 'watch', 'cloud', 'live', 'align', 'terminal', 'computer', 'diff', 'business', 'sync', 'youtube', 'x-search',
                        'ingest', 'query', 'lint', 'loop', 'pulse', 'task', 'mission', 'decide', 'agents', 'probe', 'worktree', 'land', 'caretaker', 'autoland', 'drive', 'aeo', 'slop', 'voice', 'strings', 'write', 'security-review', 'secure', 'deck', 'site', 'theme', 'card', 'reel', 'improve', 'study', 'rainmaker', 'xp', 'play', 'gm', 'game', 'x', 'recap', 'report', 'signup', 'clarity', 'interview', 'meet', 'moves', 'unknowns', 'avail', 'sync-checkout',

package/lib/runner-command.js

@@ -9,6 +9,7 @@
 // first in precedence. Precedence: explicit model -> ATRIS_RUNNER_MODEL env ->
 // ATRIS_RUNNER_PROFILE -> legacy ATRIS_CLAUDE_MODEL env -> pinned default.
 const DEFAULT_CLAUDE_RUNNER_MODEL = 'claude-opus-4-8';
+const DEFAULT_FABLE_RUNNER_MODEL = 'claude-fable-5';
 const DEFAULT_CLAUDE_RUNNER_BIN = 'claude';
 
 // Canonical runner profiles. Each entry is the config an operator would pick
@@ -40,11 +41,11 @@ const RUNNER_PROFILE_DEFS = Object.freeze({
     model: '',
     commandTemplate: '{bin} --trust -p {prompt}',
   }),
-  // Compatibility names for fleet rosters. These map to real installed
-  // runners instead of retired or UI-only model names.
+  // Fable is a distinct Claude Code model, not a friendly name for whatever
+  // Claude model happens to be selected locally.
   fable: Object.freeze({
     bin: 'claude',
-    model: '',
+    model: DEFAULT_FABLE_RUNNER_MODEL,
     commandTemplate: '',
   }),
   composer: Object.freeze({
@@ -220,6 +221,7 @@ function buildRunnerCommand({ promptFile, allowedTools, model } = {}) {
 
 module.exports = {
   DEFAULT_CLAUDE_RUNNER_MODEL,
+  DEFAULT_FABLE_RUNNER_MODEL,
   DEFAULT_CLAUDE_RUNNER_BIN,
   RUNNER_PROFILES,
   RUNNER_PROFILE_DEFS,

package/lib/scratch-root.js

@@ -43,6 +43,50 @@ function isGenericScratchRoot(dir) {
   }
 }
 
+function keyUnderScratchRoot(key, roots) {
+  for (const root of roots) {
+    if (key === root || key.startsWith(`${root}/`)) return true;
+  }
+  return false;
+}
+
+function isUnderGenericScratchRoot(dir) {
+  if (!dir) return false;
+  const roots = genericScratchRoots();
+  const key = pathKey(dir);
+  if (keyUnderScratchRoot(key, roots)) return true;
+  try {
+    return keyUnderScratchRoot(pathKey(fs.realpathSync(dir)), roots);
+  } catch {
+    return false;
+  }
+}
+
+function hasWorkspaceRoom(dir) {
+  const root = path.resolve(dir || '.');
+  return fs.existsSync(path.join(root, 'atris'))
+    || fs.existsSync(path.join(root, '.atris', 'business.json'));
+}
+
+// An empty child under /tmp (or another generic scratch root) is not a room.
+// --yes is consent to start, not a workspace unlock. A workspace that already
+// lives here (dogfood) still has atris/ or a business binding.
+function isUnboundScratchFolder(dir) {
+  if (!isUnderGenericScratchRoot(dir)) return false;
+  return !hasWorkspaceRoom(dir);
+}
+
+const UNBOUND_SCRATCH_MESSAGE = 'this folder is not a room';
+
+function refuseUnboundScratch(write = console.error) {
+  write(UNBOUND_SCRATCH_MESSAGE);
+  return 2;
+}
+
 module.exports = {
+  UNBOUND_SCRATCH_MESSAGE,
   isGenericScratchRoot,
+  isUnboundScratchFolder,
+  isUnderGenericScratchRoot,
+  refuseUnboundScratch,
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "atris",
-  "version": "3.56.0",
+  "version": "3.56.1",
   "description": "you say what you want in plain words. atris builds it, checks it, and shows you proof.",
   "main": "bin/atris.js",
   "bin": {

package/utils/auth.js

@@ -546,6 +546,15 @@ async function ensureValidCredentials(apiRequestJson, options = {}) {
     return { error: 'not_logged_in' };
   }
 
+  const claims = decodeJwtClaims(credentials.token);
+  if (claims?.type === 'agent_access') {
+    if (typeof claims.exp === 'number' && claims.exp <= Math.floor(Date.now() / 1000)) {
+      return { error: 'token_invalid', detail: 'Agent token expired. Mint a new one: atris login --agent' };
+    }
+    // Server-side scope enforcement on every real request is unchanged and remains the actual security boundary.
+    return { credentials, user: null, source: 'agent_token' };
+  }
+
   if (credentials.refresh_token && shouldRefreshToken(credentials.token)) {
     const proactive = await performTokenRefresh(credentials, apiRequestJson);
     if (proactive.ok) {