create-workframe 0.1.4 → 0.1.6

package/workframe-supervisor/Dockerfile

@@ -1,11 +1,11 @@
-FROM python:3-alpine
-
-# ponytail: host.setup_public_https and compose restart shell out to docker CLI (socket is mounted).
-# set-compose-public-url.mjs needs node on the supervisor image.
-RUN apk add --no-cache docker-cli docker-cli-compose bash nodejs npm
-
-WORKDIR /app
-COPY server.py profile_secret_policy.py .
-
-EXPOSE 8090
-CMD ["python3", "server.py"]
+FROM python:3-alpine
+
+# ponytail: host.setup_public_https and compose restart shell out to docker CLI (socket is mounted).
+# set-compose-public-url.mjs needs node on the supervisor image.
+RUN apk add --no-cache docker-cli docker-cli-compose bash nodejs npm
+
+WORKDIR /app
+COPY server.py profile_secret_policy.py .
+
+EXPOSE 8090
+CMD ["python3", "server.py"]

package/workframe-supervisor/profile_secret_policy.py

@@ -1,76 +1,76 @@
-"""Speed bump for cross-profile secret reads — keep in sync with workframe-api/profile_secret_policy.py."""
-from __future__ import annotations
-
-import re
-
-_PROFILE_SECRET_PATH = re.compile(
-    r"(?:/opt/data/)?profiles/[^/\s]+/(?:\.env|auth\.json|credentials\.json|\.git-credentials|cookies\.txt)",
-    re.IGNORECASE,
-)
-_PROFILE_SLUG_REF = re.compile(
-    r"(?:/opt/data/)?profiles/([a-z0-9][a-z0-9-]{0,63})(?:/|$|\s)",
-    re.IGNORECASE,
-)
-_READ_VERBS = re.compile(
-    r"\b(?:cat|head|tail|sed|awk|grep|egrep|rg|less|more|od|xxd|nl|sort|wc|strings|dd|python3?|perl|ruby|node)\b",
-    re.IGNORECASE,
-)
-_SHELL_BYPASS = re.compile(
-    r"(?:\*|find\b[^\n]*-exec\b|xargs\b|\btar\b|\bbase64\b|\.e''nv|\.e\"\"nv"
-    r"|&&\s*(?:cat|head|tail|sed|awk|grep|python3?|perl|dd|od|xxd|nl|sort|wc)\b"
-    r"|\|\s*(?:cat|head|tail|sed|awk|grep|python3?|perl|dd|od|xxd|nl|sort|wc)\b)",
-    re.IGNORECASE,
-)
-_VAR_PROFILE_ASSIGN = re.compile(
-    r"\b([A-Za-z_][A-Za-z0-9_]*)=(?:[^\s;&|]*\s*)?(?:/opt/data/)?profiles/[a-z0-9][a-z0-9-]{0,63}",
-    re.IGNORECASE,
-)
-_VAR_DEREF_SECRET = re.compile(
-    r"\$\{?([A-Za-z_][A-Za-z0-9_]*)\}?[^\s;&|]*/(?:\.env|auth\.json|credentials\.json|\.git-credentials|cookies\.txt)",
-    re.IGNORECASE,
-)
-
-
-def _cmd_blob(cmd: list[str] | str) -> str:
-    return " ".join(str(part) for part in cmd) if isinstance(cmd, list) else str(cmd)
-
-
-def referenced_profile_slugs(cmd: list[str] | str) -> set[str]:
-    return {m.group(1).lower() for m in _PROFILE_SLUG_REF.finditer(_cmd_blob(cmd))}
-
-
-def is_secret_read_attempt(cmd: list[str] | str) -> bool:
-    blob = _cmd_blob(cmd)
-    if _PROFILE_SECRET_PATH.search(blob):
-        return True
-    if "profiles/" in blob.lower() and _SHELL_BYPASS.search(blob):
-        return True
-    if _PROFILE_SLUG_REF.search(blob) and _READ_VERBS.search(blob):
-        return True
-    assigned = {m.group(1) for m in _VAR_PROFILE_ASSIGN.finditer(blob)}
-    if assigned:
-        for m in _VAR_DEREF_SECRET.finditer(blob):
-            if m.group(1) in assigned:
-                return True
-    return False
-
-
-def touches_foreign_profile_secrets(cmd: list[str] | str, allowed_profile: str) -> bool:
-    allowed = str(allowed_profile or "").strip().lower()
-    if not allowed:
-        return False
-    slugs = referenced_profile_slugs(cmd)
-    return bool(slugs - {allowed})
-
-
-def exec_blocked_for_profile(cmd: list[str] | str, acting_profile: str = "") -> bool:
-    if is_secret_read_attempt(cmd):
-        return True
-    if acting_profile and touches_foreign_profile_secrets(cmd, acting_profile):
-        return True
-    return False
-
-
-if __name__ == "__main__":
-    assert is_secret_read_attempt("cd /opt/data/profiles/u-bob && head .env")
-    print("profile_secret_policy ok")
+"""Speed bump for cross-profile secret reads — keep in sync with workframe-api/profile_secret_policy.py."""
+from __future__ import annotations
+
+import re
+
+_PROFILE_SECRET_PATH = re.compile(
+    r"(?:/opt/data/)?profiles/[^/\s]+/(?:\.env|auth\.json|credentials\.json|\.git-credentials|cookies\.txt)",
+    re.IGNORECASE,
+)
+_PROFILE_SLUG_REF = re.compile(
+    r"(?:/opt/data/)?profiles/([a-z0-9][a-z0-9-]{0,63})(?:/|$|\s)",
+    re.IGNORECASE,
+)
+_READ_VERBS = re.compile(
+    r"\b(?:cat|head|tail|sed|awk|grep|egrep|rg|less|more|od|xxd|nl|sort|wc|strings|dd|python3?|perl|ruby|node)\b",
+    re.IGNORECASE,
+)
+_SHELL_BYPASS = re.compile(
+    r"(?:\*|find\b[^\n]*-exec\b|xargs\b|\btar\b|\bbase64\b|\.e''nv|\.e\"\"nv"
+    r"|&&\s*(?:cat|head|tail|sed|awk|grep|python3?|perl|dd|od|xxd|nl|sort|wc)\b"
+    r"|\|\s*(?:cat|head|tail|sed|awk|grep|python3?|perl|dd|od|xxd|nl|sort|wc)\b)",
+    re.IGNORECASE,
+)
+_VAR_PROFILE_ASSIGN = re.compile(
+    r"\b([A-Za-z_][A-Za-z0-9_]*)=(?:[^\s;&|]*\s*)?(?:/opt/data/)?profiles/[a-z0-9][a-z0-9-]{0,63}",
+    re.IGNORECASE,
+)
+_VAR_DEREF_SECRET = re.compile(
+    r"\$\{?([A-Za-z_][A-Za-z0-9_]*)\}?[^\s;&|]*/(?:\.env|auth\.json|credentials\.json|\.git-credentials|cookies\.txt)",
+    re.IGNORECASE,
+)
+
+
+def _cmd_blob(cmd: list[str] | str) -> str:
+    return " ".join(str(part) for part in cmd) if isinstance(cmd, list) else str(cmd)
+
+
+def referenced_profile_slugs(cmd: list[str] | str) -> set[str]:
+    return {m.group(1).lower() for m in _PROFILE_SLUG_REF.finditer(_cmd_blob(cmd))}
+
+
+def is_secret_read_attempt(cmd: list[str] | str) -> bool:
+    blob = _cmd_blob(cmd)
+    if _PROFILE_SECRET_PATH.search(blob):
+        return True
+    if "profiles/" in blob.lower() and _SHELL_BYPASS.search(blob):
+        return True
+    if _PROFILE_SLUG_REF.search(blob) and _READ_VERBS.search(blob):
+        return True
+    assigned = {m.group(1) for m in _VAR_PROFILE_ASSIGN.finditer(blob)}
+    if assigned:
+        for m in _VAR_DEREF_SECRET.finditer(blob):
+            if m.group(1) in assigned:
+                return True
+    return False
+
+
+def touches_foreign_profile_secrets(cmd: list[str] | str, allowed_profile: str) -> bool:
+    allowed = str(allowed_profile or "").strip().lower()
+    if not allowed:
+        return False
+    slugs = referenced_profile_slugs(cmd)
+    return bool(slugs - {allowed})
+
+
+def exec_blocked_for_profile(cmd: list[str] | str, acting_profile: str = "") -> bool:
+    if is_secret_read_attempt(cmd):
+        return True
+    if acting_profile and touches_foreign_profile_secrets(cmd, acting_profile):
+        return True
+    return False
+
+
+if __name__ == "__main__":
+    assert is_secret_read_attempt("cd /opt/data/profiles/u-bob && head .env")
+    print("profile_secret_policy ok")