atris 3.72.4 → 3.72.5

package/README.md

@@ -367,7 +367,7 @@ atris business record atris/reports/2026-04-12-operator-recap.md --outcome mixed
 - `atris activate` loads the current wiki status so the next session starts with project memory, not just tasks
 - `atris member` keeps team-member identity and learning local-first: `MEMBER.md` is the role contract, `goals.json` is the machine-readable goal/experiment state, `goals.md` is the human readout, and `logs/YYYY-MM-DD.md` records what happened. Use `atris member goal`, `tick`, `status`, `block`, and `review <name> <experiment-id> --accept --proof "..." --value 1..5` to test whether a member is making useful progress or needs the operator/orchestrator.
 - `atris codex-goal` is the read-only bridge for native Codex `/goal`: `status` inspects the live goal database, while the legacy `reset` command now refuses every mutation. Active tasks continue in place; completed tasks retain their final goal, and new work or recurring monitors use a new dedicated Codex task.
-- `atris task` keeps durable local task state and append-only events for agents; `atris/TODO.md` is just a regenerated readable board. Run the loop with `atris task new`, `delegate "..." --to <owner>`, `next`, `say`, and `ready <id> --proof "..."`; human approval is `atris task accept <id>` (moves to Done, awards Career XP) or `revise <id> --note "..."`. Final task transitions also append the general daily log and, when a real `atris/team/<member>/MEMBER.md` matches the task owner, that member's daily log. Add `--json` for headless agents, `atris task serve` for the local board, and `atris task show <ref>` / `events --all` for the full ledger. Commands accept semantic refs (`OBL-18`), full IDs, or any unique prefix. In cloud business workspaces, Supabase `tasks` is the source of truth and Swarlo the live claim layer.
+- `atris task` keeps durable local task state and append-only events for agents; `atris/TODO.md` is just a regenerated readable board. Run the loop with `atris task new`, `delegate "..." --to <owner>`, `next`, `say`, and `ready <id> --proof "..."`; human approval is `atris task accept <id>` (moves to Done, awards Career XP) or `revise <id> --note "..."`. Final task transitions also append the general daily log and, when a real `atris/team/<member>/MEMBER.md` matches the task owner, that member's daily log. Add `--json` for headless agents, `atris task serve` for the local board, and `atris task show <ref>` / `events --all` for the full ledger. The board prints a private link with a fresh token on each run and listens only on 127.0.0.1. Open that full link in the browser; API clients send its token in `x-atris-token` and use `application/json` for changes. Browser changes must come from the board's own origin. Commands accept semantic refs (`OBL-18`), full IDs, or any unique prefix. In cloud business workspaces, Supabase `tasks` is the source of truth and Swarlo the live claim layer.
 - `atris mission` is the durable autonomy layer: start with an owner, verifier, runner, and stop condition; record bounded work with `mission tick`; close with `mission complete` only after proof. Runners include `manual`, `claude`, `atris2`, and `codex_goal`.
 - `atris pulse` is the OS-cron heartbeat for overnight self-improvement. Use `atris pulse status`, `tick`, `run`, `install --cadence "<cron>" --days 7 --verify "npm test" --model claude-opus-5-5`, and `uninstall`.
 - `atris experiments` runs small test packs in `atris/experiments/`

package/commands/gm.js

@@ -1525,7 +1525,7 @@ async function gmPhone(args = []) {
     const opened = [];
     try {
       for (const address of addresses) {
-        const server = http.createServer((req, res) => { handler(req, res); });
+        const server = http.createServer((req, res) => { handler(req, res).catch(() => res.destroy()); });
         await new Promise((resolve, reject) => {
           server.once('error', reject);
           server.listen(port, address, resolve);

package/commands/task.js

@@ -5,6 +5,7 @@
 
 const fs = require('fs');
 const http = require('http');
+const crypto = require('crypto');
 const { execSync } = require('node:child_process');
 const path = require('path');
 const os = require('os');
@@ -12482,7 +12483,7 @@ function taskBoardTemplate(model) {
     async function api(path, options = {}) {
       const res = await fetch(path, {
         ...options,
-        headers: { 'content-type': 'application/json', ...(options.headers || {}) }
+        headers: { 'content-type': 'application/json', 'x-atris-token': new URLSearchParams(location.search).get('t') || '', ...(options.headers || {}) }
       });
       const data = await res.json();
       if (!res.ok || data.ok === false) throw new Error(data.detail || data.reason || 'request failed');
@@ -12798,18 +12799,30 @@ function taskBoardHtml() {
 }
 
 function readJsonBody(req) {
+  if (String(req.headers['content-type'] || '').split(';')[0].trim().toLowerCase() !== 'application/json') {
+    return Promise.reject(Object.assign(new Error('json required'), { statusCode: 415 }));
+  }
   return new Promise((resolve, reject) => {
-    let body = '';
+    let size = 0;
+    const chunks = [];
     req.on('data', chunk => {
-      body += chunk;
-      if (body.length > 1_000_000) {
-        reject(new Error('body too large'));
-        req.destroy();
+      if (size > 1_000_000) return;
+      size += chunk.length;
+      if (size > 1_000_000) {
+        reject(Object.assign(new Error('body too large'), { statusCode: 413 }));
+        return;
       }
+      chunks.push(chunk);
     });
     req.on('end', () => {
+      if (size > 1_000_000) return;
+      const body = Buffer.concat(chunks).toString('utf8');
       if (!body.trim()) return resolve({});
-      try { resolve(JSON.parse(body)); } catch (e) { reject(e); }
+      try {
+        const value = JSON.parse(body);
+        if (!value || typeof value !== 'object' || Array.isArray(value)) throw new Error('object required');
+        resolve(value);
+      } catch (e) { reject(Object.assign(e, { statusCode: 400 })); }
     });
     req.on('error', reject);
   });
@@ -12818,14 +12831,16 @@ function readJsonBody(req) {
 function sendJson(res, status, value, headers = {}) {
   res.writeHead(status, {
     'content-type': 'application/json; charset=utf-8',
-    'access-control-allow-origin': 'http://localhost',
+    'cache-control': 'no-store',
+    'referrer-policy': 'no-referrer',
+    'x-content-type-options': 'nosniff',
     ...headers,
   });
   res.end(JSON.stringify(value, null, 2));
 }
 
 function sendHtml(res, value) {
-  res.writeHead(200, { 'content-type': 'text/html; charset=utf-8' });
+  res.writeHead(200, { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-store', 'referrer-policy': 'no-referrer', 'x-content-type-options': 'nosniff' });
   res.end(value);
 }
 
@@ -13469,8 +13484,24 @@ function matchTaskApiRoute(req, url) {
   return null;
 }
 
-async function handleTaskApi(req, res, taskDb, db) {
-  const url = new URL(req.url, 'http://127.0.0.1');
+async function handleTaskApi(req, res, taskDb, db, token) {
+  let url;
+  try {
+    const target = req.url || '/';
+    url = new URL(target, 'http://127.0.0.1');
+    if (!target.startsWith('/') || target.startsWith('//') || /[\\#\0]/.test(target) || decodeURIComponent(url.pathname).includes('\0')) throw new Error('url');
+    decodeURIComponent(target);
+  } catch {
+    return sendJson(res, 400, { ok: false, reason: 'bad_url' });
+  }
+  const host = String(req.headers.host || '').toLowerCase();
+  const port = req.socket.localPort;
+  if (![`127.0.0.1:${port}`, `localhost:${port}`].includes(host)) return sendJson(res, 403, { ok: false, reason: 'host' });
+  const provided = Buffer.from(String(req.headers['x-atris-token'] || (req.method === 'GET' && url.searchParams.get('t')) || ''));
+  const expected = Buffer.from(token);
+  if (provided.length !== expected.length || !crypto.timingSafeEqual(provided, expected)) return sendJson(res, 403, { ok: false, reason: 'token' });
+  if (req.method === 'GET' && (req.headers['transfer-encoding'] || Number(req.headers['content-length'] || 0) > 0)) return sendJson(res, 400, { ok: false, reason: 'body' });
+  if (req.method !== 'GET' && req.headers.origin !== undefined && req.headers.origin !== `http://${host}`) return sendJson(res, 403, { ok: false, reason: 'origin' });
   const matchedRoute = matchTaskApiRoute(req, url);
   if (!matchedRoute) return sendJson(res, 404, { ok: false, reason: 'not_found' });
   return matchedRoute.route.serve({
@@ -13486,26 +13517,32 @@ async function handleTaskApi(req, res, taskDb, db) {
 function createTaskApiServer(taskApi = {}) {
   const taskDb = taskApi.taskDb || getTaskDb();
   const db = taskApi.db || taskDb.open();
-  return http.createServer((req, res) => {
-    handleTaskApi(req, res, taskDb, db).catch((error) => {
-      sendJson(res, 500, { ok: false, reason: 'server_error', detail: String(error && error.message || error) });
-    });
+  const token = crypto.randomBytes(32).toString('base64url');
+  const server = http.createServer((req, res) => {
+    handleTaskApi(req, res, taskDb, db, token).catch((error) => {
+      if (res.headersSent || res.destroyed) return res.destroy();
+      const status = error.statusCode || 500;
+      sendJson(res, status, { ok: false, reason: status < 500 ? 'bad_request' : 'server_error' });
+    }).catch(() => res.destroy());
   });
+  server.taskToken = token;
+  return server;
 }
 
 function cmdServe(args) {
   const host = String(flag(args, '--host') || '127.0.0.1');
+  if (!['127.0.0.1', 'localhost'].includes(host)) throw new Error('task board only listens on 127.0.0.1');
   const port = Number(flag(args, '--port') || process.env.PORT || 8787);
   const taskDb = getTaskDb();
   const db = taskDb.open();
   const server = createTaskApiServer({ taskDb, db });
   return new Promise((resolve, reject) => {
     server.on('error', reject);
-    server.listen(port, host, () => {
+    server.listen(port, '127.0.0.1', () => {
       const addr = server.address();
       const actualPort = addr && addr.port || port;
-      console.log(`Task board: http://${host}:${actualPort}`);
-      console.log(`Workspace: ${taskDb.workspaceRoot()}`);
+      console.log(`task board: http://${host}:${actualPort}/?t=${server.taskToken}`);
+      console.log(`workspace: ${taskDb.workspaceRoot()}`);
     });
 
     const shutdown = () => {

package/lib/gm-phone.js

@@ -303,11 +303,20 @@ function tokenMatches(given, token) {
 // look-alike hostname pointed at the Mac gets nothing.
 function checkRequest(req, { token, hosts = [] }) {
   const host = String(req.headers.host || '').toLowerCase();
-  const url = new URL(req.url || '/', 'http://local');
+  let url;
+  try {
+    const target = req.url || '/';
+    url = new URL(target, 'http://local');
+    if (!target.startsWith('/') || target.startsWith('//') || /[\\#\0]/.test(target) || decodeURIComponent(url.pathname).includes('\0')) throw new Error('url');
+    decodeURIComponent(target);
+  } catch {
+    return { ok: false, status: 400, reason: 'url' };
+  }
   if (!hosts.includes(host)) return { ok: false, status: 403, reason: 'host' };
   const header = req.headers['x-gm-token'];
   if (req.method === 'GET') {
     if (!tokenMatches(url.searchParams.get('t') || header, token)) return { ok: false, status: 403, reason: 'token' };
+    if (req.headers['transfer-encoding'] || Number(req.headers['content-length'] || 0) > 0) return { ok: false, status: 400, reason: 'body' };
     return { ok: true, path: url.pathname };
   }
   if (req.method === 'POST') {
@@ -324,10 +333,10 @@ function readBody(req) {
     let size = 0;
     const chunks = [];
     req.on('data', (chunk) => {
+      if (size > BODY_MAX) return;
       size += chunk.length;
       if (size > BODY_MAX) {
         reject(new Error('too_large'));
-        req.destroy();
         return;
       }
       chunks.push(chunk);
@@ -522,7 +531,7 @@ function createPhoneHandler(deps) {
 
   async function handle(req, res) {
     const check = checkRequest(req, { token: deps.token, hosts: deps.hosts });
-    if (!check.ok) return send(res, check.status, check.status === 403 ? 'forbidden' : 'method not allowed', 'text/plain; charset=utf-8');
+    if (!check.ok) return send(res, check.status, check.status === 400 ? 'bad request' : check.status === 403 ? 'forbidden' : 'method not allowed', 'text/plain; charset=utf-8');
     try {
       if (req.method === 'GET' && check.path === '/') {
         const nonce = crypto.randomBytes(16).toString('base64');
@@ -533,12 +542,13 @@ function createPhoneHandler(deps) {
       if (req.method === 'GET' && check.path === '/state') return send(res, 200, state());
       if (req.method === 'GET' && check.path === '/bet') return bet ? send(res, 200, bet.warm()) : send(res, 404, { ok: false, reason: 'not_found' });
       if (req.method === 'POST' && (check.path === '/action' || check.path === '/undo' || (bet && check.path.startsWith('/bet/')))) {
-        if (!String(req.headers['content-type'] || '').startsWith('application/json')) return send(res, 415, { ok: false, reason: 'json_only' });
+        if (String(req.headers['content-type'] || '').split(';')[0].trim().toLowerCase() !== 'application/json') return send(res, 415, { ok: false, reason: 'json_only' });
         let body;
         try {
           body = JSON.parse(await readBody(req) || '{}');
-        } catch {
-          return send(res, 400, { ok: false, reason: 'bad_body' });
+          if (!body || typeof body !== 'object' || Array.isArray(body)) throw new Error('bad_body');
+        } catch (err) {
+          return send(res, err.message === 'too_large' ? 413 : 400, { ok: false, reason: 'bad_body' });
         }
         if (check.path.startsWith('/bet/')) {
           const out = await betAction(check.path, body || {});

package/lib/site.js

@@ -111,8 +111,16 @@ function serveSite(dir, port = 4321) {
     const port = server.address() && server.address().port;
     const host = String(req.headers.host || '').toLowerCase();
     if (![`127.0.0.1:${port}`, `localhost:${port}`, `[::1]:${port}`].includes(host)) { res.writeHead(403); res.end('forbidden'); return; }
+    if (!['GET', 'HEAD'].includes(req.method)) { res.writeHead(405); res.end('method not allowed'); return; }
+    if (req.headers['transfer-encoding'] || Number(req.headers['content-length'] || 0) > 0) { res.writeHead(400); res.end('bad request'); return; }
     let rel;
-    try { rel = decodeURIComponent((req.url || '/').split('?')[0]); }
+    try {
+      const target = req.url || '/';
+      new URL(target, 'http://localhost');
+      if (!target.startsWith('/') || target.startsWith('//') || /[\\#\0]/.test(target)) throw new Error('url');
+      decodeURIComponent(target);
+      rel = decodeURIComponent(target.split('?')[0]);
+    }
     catch { res.writeHead(400); res.end('bad request'); return; }
     // A null byte makes the fs calls below throw synchronously and crash the server.
     if (rel.includes('\0')) { res.writeHead(400); res.end('bad request'); return; }

package/lib/zen-apply.js

@@ -536,8 +536,12 @@ function applyZen({ cwd = process.cwd(), fetch = true, freshMinutes, abandonedDa
       const base = gitOut(['merge-base', 'HEAD', main], root);
       const moved = moveKeepingNotes(root, ['checkout', '-q', main], main, tag, base || 'HEAD');
       notes.push(...(moved.notes || []));
+      // A branch with nothing beyond origin is cleared as finished below, so
+      // only a branch with its own commits is called kept.
+      const own = branch && before.upstream ? gitOut(['rev-list', '--count', `${before.upstream}..${branch}`], root) : null;
       if (moved.ok) {
-        done.push(`moved back to ${main}${branch ? ` (${branch} is kept)` : ''}`);
+        const why = !branch ? '' : own === '0' ? ` (${branch} had nothing new)` : ` (${branch} is kept)`;
+        done.push(`moved back to ${main}${why}`);
         branch = main;
       } else {
         left.push(`could not move to ${main}: ${moved.error}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "atris",
-  "version": "3.72.4",
+  "version": "3.72.5",
   "description": "you say what you want in plain words. atris builds it, checks it, and shows you proof.",
   "main": "bin/atris.js",
   "bin": {

package/scripts/det/xsearch-bench.js

@@ -303,5 +303,6 @@ module.exports = {
   fixtureFetch,
   runOfflineCheck,
   saveFailedOutput,
+  startCountingServer,
   summary,
 };