create-workframe 0.1.5 → 0.1.6

package/workframe-api/profile_secret_policy.py

@@ -1,86 +1,86 @@
-"""Speed bump for cross-profile secret reads — not an ACL. Real isolation = vault + per-profile mount."""
-from __future__ import annotations
-
-import re
-
-# ponytail: shared by workframe-api and workframe-supervisor (copy in supervisor image)
-_PROFILE_SECRET_PATH = re.compile(
-    r"(?:/opt/data/)?profiles/[^/\s]+/(?:\.env|auth\.json|credentials\.json|\.git-credentials|cookies\.txt)",
-    re.IGNORECASE,
-)
-_PROFILE_SLUG_REF = re.compile(
-    r"(?:/opt/data/)?profiles/([a-z0-9][a-z0-9-]{0,63})(?:/|$|\s)",
-    re.IGNORECASE,
-)
-_READ_VERBS = re.compile(
-    r"\b(?:cat|head|tail|sed|awk|grep|egrep|rg|less|more|od|xxd|nl|sort|wc|strings|dd|python3?|perl|ruby|node)\b",
-    re.IGNORECASE,
-)
-_SHELL_BYPASS = re.compile(
-    r"(?:\*|find\b[^\n]*-exec\b|xargs\b|\btar\b|\bbase64\b|\.e''nv|\.e\"\"nv"
-    r"|&&\s*(?:cat|head|tail|sed|awk|grep|python3?|perl|dd|od|xxd|nl|sort|wc)\b"
-    r"|\|\s*(?:cat|head|tail|sed|awk|grep|python3?|perl|dd|od|xxd|nl|sort|wc)\b)",
-    re.IGNORECASE,
-)
-# ponytail: shell var indirection ceiling — catches `P=…profiles/u-bob; cat $P/.env`
-# but NOT python string concat ('pro'+'files/…'). Real fix = per-profile secret broker.
-_VAR_PROFILE_ASSIGN = re.compile(
-    r"\b([A-Za-z_][A-Za-z0-9_]*)=(?:[^\s;&|]*\s*)?(?:/opt/data/)?profiles/[a-z0-9][a-z0-9-]{0,63}",
-    re.IGNORECASE,
-)
-_VAR_DEREF_SECRET = re.compile(
-    r"\$\{?([A-Za-z_][A-Za-z0-9_]*)\}?[^\s;&|]*/(?:\.env|auth\.json|credentials\.json|\.git-credentials|cookies\.txt)",
-    re.IGNORECASE,
-)
-
-
-def _cmd_blob(cmd: list[str] | str) -> str:
-    return " ".join(str(part) for part in cmd) if isinstance(cmd, list) else str(cmd)
-
-
-def referenced_profile_slugs(cmd: list[str] | str) -> set[str]:
-    return {m.group(1).lower() for m in _PROFILE_SLUG_REF.finditer(_cmd_blob(cmd))}
-
-
-def is_secret_read_attempt(cmd: list[str] | str) -> bool:
-    blob = _cmd_blob(cmd)
-    if _PROFILE_SECRET_PATH.search(blob):
-        return True
-    if "profiles/" in blob.lower() and _SHELL_BYPASS.search(blob):
-        return True
-    if _PROFILE_SLUG_REF.search(blob) and _READ_VERBS.search(blob):
-        return True
-    assigned = {m.group(1) for m in _VAR_PROFILE_ASSIGN.finditer(blob)}
-    if assigned:
-        for m in _VAR_DEREF_SECRET.finditer(blob):
-            if m.group(1) in assigned:
-                return True
-    return False
-
-
-def touches_foreign_profile_secrets(cmd: list[str] | str, allowed_profile: str) -> bool:
-    """True when command references another profile's tree (0022 N2 / 0023 C1)."""
-    allowed = str(allowed_profile or "").strip().lower()
-    if not allowed:
-        return False
-    slugs = referenced_profile_slugs(cmd)
-    return bool(slugs - {allowed})
-
-
-def exec_blocked_for_profile(cmd: list[str] | str, acting_profile: str = "") -> bool:
-    if is_secret_read_attempt(cmd):
-        return True
-    if acting_profile and touches_foreign_profile_secrets(cmd, acting_profile):
-        return True
-    return False
-
-
-if __name__ == "__main__":
-    assert is_secret_read_attempt(["cat", "profiles/u-alice-dev/.env"])
-    assert is_secret_read_attempt("cat profiles/u-bob-dev/*")
-    assert is_secret_read_attempt("cd /opt/data/profiles/u-bob && head .env")
-    assert is_secret_read_attempt("cd profiles/u-x && python3 -c \"print(open('.env').read())\"")
-    assert touches_foreign_profile_secrets("cd profiles/u-bob && head .env", "u-alice-dev")
-    assert not touches_foreign_profile_secrets("hermes -p u-alice-dev gateway status", "u-alice-dev")
-    assert not is_secret_read_attempt(["hermes", "-p", "dev", "gateway", "run"])
-    print("profile_secret_policy ok")
+"""Speed bump for cross-profile secret reads — not an ACL. Real isolation = vault + per-profile mount."""
+from __future__ import annotations
+
+import re
+
+# ponytail: shared by workframe-api and workframe-supervisor (copy in supervisor image)
+_PROFILE_SECRET_PATH = re.compile(
+    r"(?:/opt/data/)?profiles/[^/\s]+/(?:\.env|auth\.json|credentials\.json|\.git-credentials|cookies\.txt)",
+    re.IGNORECASE,
+)
+_PROFILE_SLUG_REF = re.compile(
+    r"(?:/opt/data/)?profiles/([a-z0-9][a-z0-9-]{0,63})(?:/|$|\s)",
+    re.IGNORECASE,
+)
+_READ_VERBS = re.compile(
+    r"\b(?:cat|head|tail|sed|awk|grep|egrep|rg|less|more|od|xxd|nl|sort|wc|strings|dd|python3?|perl|ruby|node)\b",
+    re.IGNORECASE,
+)
+_SHELL_BYPASS = re.compile(
+    r"(?:\*|find\b[^\n]*-exec\b|xargs\b|\btar\b|\bbase64\b|\.e''nv|\.e\"\"nv"
+    r"|&&\s*(?:cat|head|tail|sed|awk|grep|python3?|perl|dd|od|xxd|nl|sort|wc)\b"
+    r"|\|\s*(?:cat|head|tail|sed|awk|grep|python3?|perl|dd|od|xxd|nl|sort|wc)\b)",
+    re.IGNORECASE,
+)
+# ponytail: shell var indirection ceiling — catches `P=…profiles/u-bob; cat $P/.env`
+# but NOT python string concat ('pro'+'files/…'). Real fix = per-profile secret broker.
+_VAR_PROFILE_ASSIGN = re.compile(
+    r"\b([A-Za-z_][A-Za-z0-9_]*)=(?:[^\s;&|]*\s*)?(?:/opt/data/)?profiles/[a-z0-9][a-z0-9-]{0,63}",
+    re.IGNORECASE,
+)
+_VAR_DEREF_SECRET = re.compile(
+    r"\$\{?([A-Za-z_][A-Za-z0-9_]*)\}?[^\s;&|]*/(?:\.env|auth\.json|credentials\.json|\.git-credentials|cookies\.txt)",
+    re.IGNORECASE,
+)
+
+
+def _cmd_blob(cmd: list[str] | str) -> str:
+    return " ".join(str(part) for part in cmd) if isinstance(cmd, list) else str(cmd)
+
+
+def referenced_profile_slugs(cmd: list[str] | str) -> set[str]:
+    return {m.group(1).lower() for m in _PROFILE_SLUG_REF.finditer(_cmd_blob(cmd))}
+
+
+def is_secret_read_attempt(cmd: list[str] | str) -> bool:
+    blob = _cmd_blob(cmd)
+    if _PROFILE_SECRET_PATH.search(blob):
+        return True
+    if "profiles/" in blob.lower() and _SHELL_BYPASS.search(blob):
+        return True
+    if _PROFILE_SLUG_REF.search(blob) and _READ_VERBS.search(blob):
+        return True
+    assigned = {m.group(1) for m in _VAR_PROFILE_ASSIGN.finditer(blob)}
+    if assigned:
+        for m in _VAR_DEREF_SECRET.finditer(blob):
+            if m.group(1) in assigned:
+                return True
+    return False
+
+
+def touches_foreign_profile_secrets(cmd: list[str] | str, allowed_profile: str) -> bool:
+    """True when command references another profile's tree (0022 N2 / 0023 C1)."""
+    allowed = str(allowed_profile or "").strip().lower()
+    if not allowed:
+        return False
+    slugs = referenced_profile_slugs(cmd)
+    return bool(slugs - {allowed})
+
+
+def exec_blocked_for_profile(cmd: list[str] | str, acting_profile: str = "") -> bool:
+    if is_secret_read_attempt(cmd):
+        return True
+    if acting_profile and touches_foreign_profile_secrets(cmd, acting_profile):
+        return True
+    return False
+
+
+if __name__ == "__main__":
+    assert is_secret_read_attempt(["cat", "profiles/u-alice-dev/.env"])
+    assert is_secret_read_attempt("cat profiles/u-bob-dev/*")
+    assert is_secret_read_attempt("cd /opt/data/profiles/u-bob && head .env")
+    assert is_secret_read_attempt("cd profiles/u-x && python3 -c \"print(open('.env').read())\"")
+    assert touches_foreign_profile_secrets("cd profiles/u-bob && head .env", "u-alice-dev")
+    assert not touches_foreign_profile_secrets("hermes -p u-alice-dev gateway status", "u-alice-dev")
+    assert not is_secret_read_attempt(["hermes", "-p", "dev", "gateway", "run"])
+    print("profile_secret_policy ok")

package/workframe-api/public/assets/index-DPXu_lGn.css

@@ -1 +1 @@
-:root{--lightningcss-light: ;--lightningcss-dark:initial;color-scheme:dark;--wf-font-sans:"Inter Tight", ui-sans-serif, system-ui, sans-serif;--wf-font-mono:"JetBrains Mono", ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;--wf-blur:34px;--wf-header-height:56px;--wf-footer-height:28px}[data-theme=dark]{--lightningcss-light: ;--lightningcss-dark:initial;color-scheme:dark;--wf-bg:#0a0a0f;--wf-text:#e8e8ee;--wf-muted:#727280;--wf-border:#ffffff12;--wf-border-strong:#ffffff1c;--wf-surface:#12121a94;--wf-surface-soft:#12121a61;--wf-primary:#ffffffe6;--wf-primary-foreground:#0a0a0f;--wf-violet:#6d28d9;--wf-violet-glow:#7c3aed;--wf-ring:#6d28d961}[data-theme=light]{--lightningcss-light:initial;--lightningcss-dark: ;color-scheme:light;--wf-bg:#f2f2f7;--wf-text:#1c1c1e;--wf-muted:#8e8e93;--wf-border:#00000014;--wf-border-strong:#0000001f;--wf-surface:#fffc;--wf-surface-soft:#ffffff80;--wf-primary:#000;--wf-primary-foreground:#fff;--wf-violet:#6d28d9;--wf-violet-glow:#7c3aed;--wf-ring:#6d28d961}*{box-sizing:border-box;margin:0;padding:0}body{font-family:var(--wf-font-sans);background:var(--wf-bg);color:var(--wf-text);-webkit-font-smoothing:antialiased;line-height:1.5}.wf-shell{flex-direction:column;min-height:100vh;display:flex}.wf-shell--centered{justify-content:center;align-items:center}.wf-header{height:var(--wf-header-height);border-bottom:1px solid var(--wf-border);background:var(--wf-surface);-webkit-backdrop-filter:blur(var(--wf-blur));backdrop-filter:blur(var(--wf-blur));justify-content:space-between;align-items:center;padding:0 20px;display:flex}.wf-header__brand{letter-spacing:-.02em;color:var(--wf-text);font-size:18px;font-weight:700}.wf-header__actions{gap:8px;display:flex}.wf-auth{background:var(--wf-surface);border:1px solid var(--wf-border);width:100%;max-width:400px;-webkit-backdrop-filter:blur(var(--wf-blur));backdrop-filter:blur(var(--wf-blur));border-radius:16px;padding:32px}.wf-auth__title{letter-spacing:-.02em;margin:0 0 8px;font-size:24px;font-weight:700}.wf-auth__subtitle{color:var(--wf-muted);margin:0 0 24px;font-size:14px}.wf-field{margin-bottom:16px}.wf-field__label{color:var(--wf-muted);margin-bottom:6px;font-size:13px;font-weight:500;display:block}.wf-input{background:var(--wf-surface-soft);border:1px solid var(--wf-border);width:100%;height:40px;color:var(--wf-text);font-size:14px;font-family:var(--wf-font-sans);border-radius:8px;outline:none;padding:0 12px;transition:border-color .15s}.wf-input:focus{border-color:var(--wf-violet);box-shadow:0 0 0 3px var(--wf-ring)}.wf-input::placeholder{color:var(--wf-muted)}.wf-btn{height:40px;font-size:14px;font-weight:500;font-family:var(--wf-font-sans);cursor:pointer;border:none;border-radius:8px;justify-content:center;align-items:center;padding:0 16px;transition:all .15s;display:inline-flex}.wf-btn--primary{background:var(--wf-primary);color:var(--wf-primary-foreground)}.wf-btn--primary:hover{opacity:.9}.wf-btn--secondary{background:var(--wf-surface-soft);color:var(--wf-text);border:1px solid var(--wf-border)}.wf-btn--secondary:hover{background:var(--wf-border)}.wf-btn--ghost{color:var(--wf-text);background:0 0}.wf-btn--ghost:hover{background:var(--wf-surface-soft)}.wf-btn--sm{height:32px;padding:0 12px;font-size:13px}.wf-btn:disabled{opacity:.5;cursor:not-allowed}.wf-error{color:#ef4444;background:#ef44441a;border:1px solid #ef444433;border-radius:8px;margin-bottom:16px;padding:10px 12px;font-size:13px}.wf-success{color:#22c55e;background:#22c55e1a;border:1px solid #22c55e33;border-radius:8px;margin-bottom:16px;padding:10px 12px;font-size:13px}.wf-otp{justify-content:center;gap:8px;margin-bottom:16px;display:flex}.wf-otp__digit{text-align:center;width:44px;height:48px;font-size:20px;font-weight:600;font-family:var(--wf-font-mono);background:var(--wf-surface-soft);border:1px solid var(--wf-border);color:var(--wf-text);border-radius:8px;outline:none;padding:0;transition:border-color .15s}.wf-otp__digit:focus{border-color:var(--wf-violet);box-shadow:0 0 0 3px var(--wf-ring)}.wf-layout{flex:1;display:flex;overflow:hidden}.wf-sidebar{border-right:1px solid var(--wf-border);background:var(--wf-surface);width:200px;padding:16px 0}.wf-sidebar__link{color:var(--wf-muted);cursor:pointer;padding:8px 20px;font-size:14px;text-decoration:none;transition:all .15s;display:block}.wf-sidebar__link:hover{color:var(--wf-text);background:var(--wf-surface-soft)}.wf-sidebar__link--active{color:var(--wf-text);background:var(--wf-surface-soft);font-weight:500}.wf-main{flex:1;padding:24px;overflow-y:auto}.wf-profile{max-width:480px}.wf-profile__avatar{background:var(--wf-violet);color:#fff;border-radius:50%;justify-content:center;align-items:center;width:64px;height:64px;margin-bottom:24px;font-size:24px;font-weight:600;display:flex}.wf-profile__name{margin:0 0 4px;font-size:20px;font-weight:600}.wf-profile__email{color:var(--wf-muted);margin:0 0 24px;font-size:14px}.wf-otp{gap:8px;margin-bottom:16px;display:flex}.wf-otp .wf-input{text-align:center;letter-spacing:4px;font-size:20px;font-weight:600}
+:root{--lightningcss-light: ;--lightningcss-dark:initial;color-scheme:dark;--wf-font-sans:"Inter Tight", ui-sans-serif, system-ui, sans-serif;--wf-font-mono:"JetBrains Mono", ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;--wf-blur:34px;--wf-header-height:56px;--wf-footer-height:28px}[data-theme=dark]{--lightningcss-light: ;--lightningcss-dark:initial;color-scheme:dark;--wf-bg:#0a0a0f;--wf-text:#e8e8ee;--wf-muted:#727280;--wf-border:#ffffff12;--wf-border-strong:#ffffff1c;--wf-surface:#12121a94;--wf-surface-soft:#12121a61;--wf-primary:#ffffffe6;--wf-primary-foreground:#0a0a0f;--wf-violet:#6d28d9;--wf-violet-glow:#7c3aed;--wf-ring:#6d28d961}[data-theme=light]{--lightningcss-light:initial;--lightningcss-dark: ;color-scheme:light;--wf-bg:#f2f2f7;--wf-text:#1c1c1e;--wf-muted:#8e8e93;--wf-border:#00000014;--wf-border-strong:#0000001f;--wf-surface:#fffc;--wf-surface-soft:#ffffff80;--wf-primary:#000;--wf-primary-foreground:#fff;--wf-violet:#6d28d9;--wf-violet-glow:#7c3aed;--wf-ring:#6d28d961}*{box-sizing:border-box;margin:0;padding:0}body{font-family:var(--wf-font-sans);background:var(--wf-bg);color:var(--wf-text);-webkit-font-smoothing:antialiased;line-height:1.5}.wf-shell{flex-direction:column;min-height:100vh;display:flex}.wf-shell--centered{justify-content:center;align-items:center}.wf-header{height:var(--wf-header-height);border-bottom:1px solid var(--wf-border);background:var(--wf-surface);-webkit-backdrop-filter:blur(var(--wf-blur));backdrop-filter:blur(var(--wf-blur));justify-content:space-between;align-items:center;padding:0 20px;display:flex}.wf-header__brand{letter-spacing:-.02em;color:var(--wf-text);font-size:18px;font-weight:700}.wf-header__actions{gap:8px;display:flex}.wf-auth{background:var(--wf-surface);border:1px solid var(--wf-border);width:100%;max-width:400px;-webkit-backdrop-filter:blur(var(--wf-blur));backdrop-filter:blur(var(--wf-blur));border-radius:16px;padding:32px}.wf-auth__title{letter-spacing:-.02em;margin:0 0 8px;font-size:24px;font-weight:700}.wf-auth__subtitle{color:var(--wf-muted);margin:0 0 24px;font-size:14px}.wf-field{margin-bottom:16px}.wf-field__label{color:var(--wf-muted);margin-bottom:6px;font-size:13px;font-weight:500;display:block}.wf-input{background:var(--wf-surface-soft);border:1px solid var(--wf-border);width:100%;height:40px;color:var(--wf-text);font-size:14px;font-family:var(--wf-font-sans);border-radius:8px;outline:none;padding:0 12px;transition:border-color .15s}.wf-input:focus{border-color:var(--wf-violet);box-shadow:0 0 0 3px var(--wf-ring)}.wf-input::placeholder{color:var(--wf-muted)}.wf-btn{height:40px;font-size:14px;font-weight:500;font-family:var(--wf-font-sans);cursor:pointer;border:none;border-radius:8px;justify-content:center;align-items:center;padding:0 16px;transition:all .15s;display:inline-flex}.wf-btn--primary{background:var(--wf-primary);color:var(--wf-primary-foreground)}.wf-btn--primary:hover{opacity:.9}.wf-btn--secondary{background:var(--wf-surface-soft);color:var(--wf-text);border:1px solid var(--wf-border)}.wf-btn--secondary:hover{background:var(--wf-border)}.wf-btn--ghost{color:var(--wf-text);background:0 0}.wf-btn--ghost:hover{background:var(--wf-surface-soft)}.wf-btn--sm{height:32px;padding:0 12px;font-size:13px}.wf-btn:disabled{opacity:.5;cursor:not-allowed}.wf-error{color:#ef4444;background:#ef44441a;border:1px solid #ef444433;border-radius:8px;margin-bottom:16px;padding:10px 12px;font-size:13px}.wf-success{color:#22c55e;background:#22c55e1a;border:1px solid #22c55e33;border-radius:8px;margin-bottom:16px;padding:10px 12px;font-size:13px}.wf-otp{justify-content:center;gap:8px;margin-bottom:16px;display:flex}.wf-otp__digit{text-align:center;width:44px;height:48px;font-size:20px;font-weight:600;font-family:var(--wf-font-mono);background:var(--wf-surface-soft);border:1px solid var(--wf-border);color:var(--wf-text);border-radius:8px;outline:none;padding:0;transition:border-color .15s}.wf-otp__digit:focus{border-color:var(--wf-violet);box-shadow:0 0 0 3px var(--wf-ring)}.wf-layout{flex:1;display:flex;overflow:hidden}.wf-sidebar{border-right:1px solid var(--wf-border);background:var(--wf-surface);width:200px;padding:16px 0}.wf-sidebar__link{color:var(--wf-muted);cursor:pointer;padding:8px 20px;font-size:14px;text-decoration:none;transition:all .15s;display:block}.wf-sidebar__link:hover{color:var(--wf-text);background:var(--wf-surface-soft)}.wf-sidebar__link--active{color:var(--wf-text);background:var(--wf-surface-soft);font-weight:500}.wf-main{flex:1;padding:24px;overflow-y:auto}.wf-profile{max-width:480px}.wf-profile__avatar{background:var(--wf-violet);color:#fff;border-radius:50%;justify-content:center;align-items:center;width:64px;height:64px;margin-bottom:24px;font-size:24px;font-weight:600;display:flex}.wf-profile__name{margin:0 0 4px;font-size:20px;font-weight:600}.wf-profile__email{color:var(--wf-muted);margin:0 0 24px;font-size:14px}.wf-otp{gap:8px;margin-bottom:16px;display:flex}.wf-otp .wf-input{text-align:center;letter-spacing:4px;font-size:20px;font-weight:600}