codiedev 0.10.0-beta.15 → 0.10.0-beta.17

package/dist/packs/skillFiles.js

@@ -0,0 +1,106 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toRef = void 0;
+exports.skillFolderFiles = skillFolderFiles;
+exports.sameFileRefs = sameFileRefs;
+exports.uploadBlobs = uploadBlobs;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const shared_1 = require("../commands/shared");
+const files_1 = require("./files");
+const manifest_1 = require("./manifest");
+const toRef = (f) => ({
+    path: f.path,
+    sha256: f.sha256,
+    ...(f.executable ? { executable: true } : {}),
+});
+exports.toRef = toRef;
+function skillFolderFiles(skillFile, home = os.homedir()) {
+    const abs = path.resolve(skillFile);
+    if (path.basename(abs).toLowerCase() !== "skill.md")
+        return null;
+    let data;
+    try {
+        data = (0, manifest_1.parseFrontmatter)(fs.readFileSync(abs, "utf8")).data;
+    }
+    catch {
+        return null;
+    }
+    if (!(data.name ?? "").trim() || !(data.description ?? "").trim())
+        return null;
+    const dir = path.dirname(abs);
+    if (dir === path.resolve(home) || dir === path.parse(dir).root || fs.existsSync(path.join(dir, ".git")))
+        return null;
+    let walked;
+    try {
+        walked = (0, files_1.collectLocalFiles)([{ dest: ".", source: dir, line: 0 }], dir, home, { lenient: true, checkAs: (p) => `skills/s/${p}` });
+    }
+    catch (error) {
+        return { skipped: `couldn't read its folder (${error.message})` };
+    }
+    const files = walked.files.filter((f) => f.path.toLowerCase() !== "skill.md");
+    const bytes = files.reduce((n, f) => n + f.size, 0);
+    if (files.length > files_1.PACK_MAX_FILES || bytes > files_1.PACK_FILES_MAX_TOTAL_BYTES) {
+        return {
+            skipped: `its folder is over the limit (${files.length} files, ${(bytes / (1024 * 1024)).toFixed(1)}MB; at most ${files_1.PACK_MAX_FILES} files and ${files_1.PACK_FILES_MAX_TOTAL_BYTES / (1024 * 1024)}MB)`,
+        };
+    }
+    return { files, notes: walked.notes, bytes };
+}
+function sameFileRefs(a, b) {
+    const key = (l) => JSON.stringify((l ?? []).map((f) => [f.path, f.sha256, !!f.executable]).sort());
+    return key(a) === key(b);
+}
+async function uploadBlobs(config, files, base) {
+    const unique = [...new Map(files.map((f) => [f.sha256, f])).values()];
+    if (!unique.length)
+        return 0;
+    const have = new Set((await (0, shared_1.apiRequest)("POST", `${base}/known`, { config, body: { sha256s: unique.map((f) => f.sha256) } })).known ?? []);
+    let sent = 0;
+    for (const f of unique) {
+        if (have.has(f.sha256))
+            continue;
+        try {
+            await (0, shared_1.apiRequestBytes)("POST", `${base}/upload`, { config, body: fs.readFileSync(f.abs), query: { sha256: f.sha256 } });
+        }
+        catch (error) {
+            throw new Error(`couldn't upload ${f.path} (${error.message})`);
+        }
+        sent += 1;
+    }
+    return sent;
+}

package/dist/packs/store.js

@@ -46,6 +46,7 @@ exports.writeMarketplace = writeMarketplace;
 const fs = __importStar(require("fs"));
 const skillMarker_1 = require("../skillMarker");
 const path = __importStar(require("path"));
+const files_1 = require("./files");
 const paths_1 = require("./paths");
 function pluginVersion(version) {
     return `${version}.0.0`;
@@ -71,6 +72,7 @@ function portableAgentContent(content) {
     return fm[1] + kept.join("\n") + fm[3] + content.slice(fm[0].length);
 }
 function pluginFiles(manifest, options = {}) {
+    const rewrite = (content) => (options.portable && options.pluginRoot ? (0, files_1.rewritePluginRoot)(content, options.pluginRoot) : content);
     const files = {};
     files[path.join(".claude-plugin", "plugin.json")] = JSON.stringify({
         name: manifest.slug,
@@ -78,10 +80,10 @@ function pluginFiles(manifest, options = {}) {
         description: manifest.description || manifest.name,
     }, null, 2) + "\n";
     for (const skill of manifest.skills) {
-        files[path.join("skills", skill.name, "SKILL.md")] = (0, skillMarker_1.stampSkillMarker)(skill.content, skill.artifactId);
+        files[path.join("skills", skill.name, "SKILL.md")] = (0, skillMarker_1.stampSkillMarker)(rewrite(skill.content), skill.artifactId);
     }
     for (const agent of manifest.agents) {
-        files[path.join("agents", `${agent.name}.md`)] = options.portable ? portableAgentContent(agent.content) : agent.content;
+        files[path.join("agents", `${agent.name}.md`)] = options.portable ? rewrite(portableAgentContent(agent.content)) : agent.content;
     }
     if (manifest.hooksJson) {
         files[path.join("hooks", "hooks.json")] = manifest.hooksJson;
@@ -103,12 +105,28 @@ function writePluginDir(root, manifest, options = {}) {
     const tmp = path.join(parent, `.${manifest.slug}.tmp-${stamp}`);
     const old = path.join(parent, `.${manifest.slug}.old-${stamp}`);
     try {
-        for (const [rel, content] of Object.entries(pluginFiles(manifest, options))) {
+        const text = pluginFiles(manifest, { ...options, pluginRoot: options.pluginRoot ?? target });
+        for (const [rel, content] of Object.entries(text)) {
             const file = path.join(tmp, rel);
             assertInside(tmp, file);
             fs.mkdirSync(path.dirname(file), { recursive: true });
             fs.writeFileSync(file, content, "utf8");
         }
+        const written = new Set(Object.keys(text).map((rel) => rel.split(path.sep).join("/").toLowerCase()));
+        for (const f of manifest.files ?? []) {
+            const problem = (0, files_1.packFilePathProblem)(f.path);
+            if (problem)
+                throw new Error(`refusing pack file ${f.path}: ${problem}`);
+            if (written.has(f.path.toLowerCase()))
+                throw new Error(`pack file ${f.path} clashes with a file Codiedev writes`);
+            if (!options.blobDir)
+                throw new Error(`pack file ${f.path} wasn't downloaded`);
+            const file = path.join(tmp, ...f.path.split("/"));
+            assertInside(tmp, file);
+            fs.mkdirSync(path.dirname(file), { recursive: true });
+            fs.copyFileSync((0, files_1.blobPath)(options.blobDir, f.sha256), file);
+            fs.chmodSync(file, f.executable ? 0o755 : 0o644);
+        }
         if (fs.existsSync(target))
             fs.renameSync(target, old);
         fs.renameSync(tmp, target);

package/dist/promptGuard.js

@@ -0,0 +1,223 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REFRESH_MS = void 0;
+exports.keyLabel = keyLabel;
+exports.formatRules = formatRules;
+exports.findPromptKey = findPromptKey;
+exports.blockMessage = blockMessage;
+exports.blockResponse = blockResponse;
+exports.readPromptGuardPolicy = readPromptGuardPolicy;
+exports.writePromptGuardPolicy = writePromptGuardPolicy;
+exports.refreshPromptGuardPolicy = refreshPromptGuardPolicy;
+exports.maybeSpawnPromptGuardRefresh = maybeSpawnPromptGuardRefresh;
+exports.checkPrompt = checkPrompt;
+exports.reportPromptBlocked = reportPromptBlocked;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const child_process_1 = require("child_process");
+const configDir_1 = require("./configDir");
+const rules_1 = require("./scrub/rules");
+const scrubProviderRules_1 = require("./scrub/scrubProviderRules");
+exports.REFRESH_MS = 10 * 60_000;
+const CACHE_FILE = "prompt-guard.json";
+const FETCH_TIMEOUT_MS = 8_000;
+const LABELS = {
+    ...scrubProviderRules_1.PROVIDER_RULE_LABELS,
+    "supabase-token": "Supabase token", "groq-key": "Groq key", "xai-key": "xAI key", "replicate-token": "Replicate token",
+    "aws-access-key": "AWS key", "openai-key": "OpenAI key", "anthropic-key": "Anthropic key",
+    "github-token": "GitHub token", "gitlab-token": "GitLab token", "stripe-key": "Stripe key",
+    "slack-token": "Slack token", "slack-webhook": "Slack webhook", "google-api-key": "Google API key",
+    "pem-private-key": "private key", "convex-deploy-key": "Convex deploy key", "linear-key": "Linear key",
+    "codiedev-key": "Codiedev key", "fireworks-key": "Fireworks key", "npm-token": "npm token",
+    "sendgrid-key": "SendGrid key", "twilio-key": "Twilio key", "azure-storage-key": "Azure storage key",
+    "azure-sas": "Azure SAS token", "url-password": "password in a URL",
+    "curl-auth-header": "token in a curl command", "curl-auth-user": "password in a curl command",
+};
+function harmlessHere(rule, value, prompt) {
+    if (rule === "stripe-key" && /^[sr]k_test_/.test(value))
+        return true;
+    if (rule === "google-api-key" && /firebaseapp\.com|authDomain|firebaseConfig/i.test(prompt))
+        return true;
+    return false;
+}
+function keyLabel(rule) {
+    if (rule.startsWith("custom:"))
+        return rule.slice("custom:".length);
+    return LABELS[rule] ?? rule.replace(/-/g, " ");
+}
+function formatRules(formats) {
+    const out = [];
+    for (const f of formats) {
+        try {
+            out.push({ name: `custom:${f.name}`, re: new RegExp(`(?<![A-Za-z0-9])${f.source}(?![A-Za-z0-9_-])`, "g"), ...(f.keyword ? { keywords: [f.keyword] } : {}) });
+        }
+        catch { }
+    }
+    return out;
+}
+function findPromptKey(prompt, formats = [], now = Date.now()) {
+    if (!prompt || prompt.length > 2_000_000)
+        return null;
+    const { redactions } = (0, rules_1.scrubSecrets)(prompt, { extraRules: formatRules(formats) });
+    for (const r of redactions) {
+        if (rules_1.GENERIC_RULES.has(r.rule))
+            continue;
+        const value = prompt.slice(r.start, r.end);
+        if ((0, rules_1.notWorthRotating)({ rule: r.rule, value }, now))
+            continue;
+        if (harmlessHere(r.rule, value, prompt))
+            continue;
+        return { rule: r.rule, label: keyLabel(r.rule), hint: (0, rules_1.hintOf)(r.rule, value) };
+    }
+    return null;
+}
+function blockMessage(key) {
+    const article = /^[aeiou]/i.test(key.label) ? "an" : "a";
+    return `Codiedev stopped this prompt: it has ${article} ${key.label} in it (…${key.hint}). ` +
+        "Nothing was sent to the model. Put the key in an environment variable or .env file and refer to it by name " +
+        "(for example $API_KEY), then send the prompt again. Your team turned on this check.";
+}
+function blockResponse(harness, message) {
+    if (harness === "cursor")
+        return { continue: false, user_message: message };
+    return { decision: "block", reason: message };
+}
+function cachePath(stateDir) {
+    return path.join(stateDir, CACHE_FILE);
+}
+function readPromptGuardPolicy(stateDir = (0, configDir_1.codiedevStateDir)()) {
+    try {
+        const v = JSON.parse(fs.readFileSync(cachePath(stateDir), "utf8"));
+        if (typeof v.fetchedAt !== "number")
+            return null;
+        return {
+            blockPrompts: v.blockPrompts === true,
+            formats: Array.isArray(v.formats) ? v.formats.filter((f) => f && typeof f.name === "string" && typeof f.source === "string").slice(0, 50) : [],
+            fetchedAt: v.fetchedAt,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+function writePromptGuardPolicy(policy, stateDir = (0, configDir_1.codiedevStateDir)()) {
+    fs.mkdirSync(stateDir, { recursive: true, mode: 0o700 });
+    const file = cachePath(stateDir);
+    const tmp = `${file}.${process.pid}.tmp`;
+    fs.writeFileSync(tmp, JSON.stringify(policy), { mode: 0o600 });
+    fs.renameSync(tmp, file);
+}
+async function refreshPromptGuardPolicy(config, fetchImpl = fetch, stateDir = (0, configDir_1.codiedevStateDir)(), now = Date.now()) {
+    if (!config?.token || !config.backendUrl)
+        return null;
+    try {
+        const res = await fetchImpl(`${config.backendUrl}/api/cli/promptGuard`, {
+            headers: { Authorization: `Bearer ${config.token}` },
+            signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
+        });
+        if (!res.ok)
+            return null;
+        const body = (await res.json());
+        const formats = Array.isArray(body.formats)
+            ? body.formats.filter((f) => f && typeof f.name === "string" && typeof f.source === "string" && f.source.length <= 300).slice(0, 50)
+            : [];
+        const policy = { blockPrompts: body.blockPrompts === true, formats, fetchedAt: now };
+        writePromptGuardPolicy(policy, stateDir);
+        return policy;
+    }
+    catch {
+        return null;
+    }
+}
+function maybeSpawnPromptGuardRefresh(opts) {
+    try {
+        if (!opts.connected || process.env.CODIEDEV_PROMPT_GUARD_CHILD)
+            return "disabled";
+        const stateDir = opts.stateDir ?? (0, configDir_1.codiedevStateDir)();
+        const now = opts.now ?? Date.now();
+        const stamp = path.join(stateDir, "prompt-guard.refresh");
+        if (!opts.force) {
+            const cached = readPromptGuardPolicy(stateDir);
+            if (cached && now - cached.fetchedAt < exports.REFRESH_MS && cached.fetchedAt <= now)
+                return "fresh";
+        }
+        try {
+            const last = fs.statSync(stamp).mtimeMs;
+            if (now - last < 60_000 && last <= now)
+                return "fresh";
+        }
+        catch { }
+        fs.mkdirSync(stateDir, { recursive: true, mode: 0o700 });
+        fs.writeFileSync(stamp, String(now));
+        const t = new Date(now);
+        fs.utimesSync(stamp, t, t);
+        const child = (opts.spawn ?? child_process_1.spawn)(process.execPath, [opts.hookEntry ?? path.join(__dirname, "hook.js"), "prompt-guard-refresh"], {
+            detached: true,
+            stdio: "ignore",
+            env: { ...process.env, CODIEDEV_PROMPT_GUARD_CHILD: "1" },
+        });
+        child.on?.("error", () => { });
+        child.unref?.();
+        return "spawned";
+    }
+    catch {
+        return "error";
+    }
+}
+function checkPrompt(prompt, harness, policy, now = Date.now()) {
+    try {
+        if (!policy?.blockPrompts || !prompt)
+            return { blocked: false };
+        const key = findPromptKey(prompt, policy.formats, now);
+        if (!key)
+            return { blocked: false };
+        const message = blockMessage(key);
+        return { blocked: true, key, message, response: blockResponse(harness, message) };
+    }
+    catch {
+        return { blocked: false };
+    }
+}
+function reportPromptBlocked(config, rule, harness, fetchImpl = fetch) {
+    if (!config?.token || !config.backendUrl)
+        return Promise.resolve();
+    return fetchImpl(`${config.backendUrl}/api/cli/promptBlocked`, {
+        method: "POST",
+        headers: { Authorization: `Bearer ${config.token}`, "Content-Type": "application/json" },
+        body: JSON.stringify({ rule: rule.slice(0, 80), harness }),
+        signal: AbortSignal.timeout(3_000),
+    }).then(() => undefined, () => undefined);
+}