gitarsenal-cli 1.2.3 → 1.2.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gitarsenal-cli",
-  "version": "1.2.3",
+  "version": "1.2.4",
   "description": "CLI tool for creating Modal sandboxes with GitHub repositories",
   "main": "index.js",
   "bin": {

package/python/README.md

@@ -20,10 +20,11 @@ For enhanced security, GitArsenal CLI now automatically cleans up Modal tokens a
 The cleanup process:
 1. Removes Modal token environment variables (MODAL_TOKEN_ID, MODAL_TOKEN, MODAL_TOKEN_SECRET)
 2. Deletes Modal token files (.modal/token.json, .modal/token_alt.json, .modalconfig)
-3. Runs automatically after SSH container creation
-4. Runs on service shutdown via signal handlers
+3. Invalidates Modal sessions by removing session files and directories
+4. Runs automatically after SSH container creation
+5. Runs on service shutdown via signal handlers
 
-This prevents potential token leakage when containers are shared or when the service is stopped.
+This prevents potential token leakage when containers are shared or when the service is stopped, and ensures that users cannot continue to use Modal CLI commands after the container is created.
 
 ## Usage
 

package/python/modal_proxy_service.py

@@ -250,6 +250,32 @@ def cleanup_modal_token():
             modalconfig_file.unlink()
             logger.info(f"✅ Deleted .modalconfig file at {modalconfig_file}")
             
+        # Try to invalidate Modal sessions
+        try:
+            logger.info("🔑 Invalidating Modal sessions...")
+            
+            # Try to directly modify Modal's session files
+            try:
+                # Check for session files in .modal directory
+                session_dir = modal_dir / "sessions"
+                if session_dir.exists():
+                    import shutil
+                    shutil.rmtree(session_dir)
+                    logger.info(f"✅ Removed Modal sessions directory at {session_dir}")
+                    
+                # Also check for any other potential session files
+                for file in os.listdir(modal_dir) if modal_dir.exists() else []:
+                    if "session" in file.lower() or "auth" in file.lower():
+                        file_path = modal_dir / file
+                        if file_path.is_file():
+                            file_path.unlink()
+                            logger.info(f"✅ Removed Modal session file: {file_path}")
+            except Exception as e:
+                logger.warning(f"⚠️ Error removing Modal sessions: {e}")
+                
+        except Exception as e:
+            logger.warning(f"⚠️ Error during Modal session invalidation: {e}")
+            
         logger.info("✅ Modal token cleanup completed successfully")
     except Exception as e:
         logger.error(f"❌ Error during Modal token cleanup: {e}")

package/python/test_modalSandboxScript.py

@@ -3332,6 +3332,32 @@ def cleanup_modal_token():
         if os.path.exists(modalconfig_file):
             os.remove(modalconfig_file)
             print(f"✅ Deleted .modalconfig file at {modalconfig_file}")
+        
+        # Try to invalidate Modal sessions
+        try:
+            print("🔑 Invalidating Modal sessions...")
+            
+            # As a last resort, try to directly modify Modal's session files
+            try:
+                # Check for session files in .modal directory
+                session_dir = os.path.join(modal_dir, "sessions")
+                if os.path.exists(session_dir):
+                    import shutil
+                    shutil.rmtree(session_dir)
+                    print(f"✅ Removed Modal sessions directory at {session_dir}")
+                    
+                # Also check for any other potential session files
+                for file in os.listdir(modal_dir) if os.path.exists(modal_dir) else []:
+                    if "session" in file.lower() or "auth" in file.lower():
+                        file_path = os.path.join(modal_dir, file)
+                        if os.path.isfile(file_path):
+                            os.remove(file_path)
+                            print(f"✅ Removed Modal session file: {file_path}")
+            except Exception as e:
+                print(f"⚠️ Error removing Modal sessions: {e}")
+                
+        except Exception as e:
+            print(f"⚠️ Error during Modal session invalidation: {e}")
             
         print("✅ Modal token cleanup completed successfully")
     except Exception as e:

package/python/test_token_cleanup.py

@@ -142,6 +142,34 @@ def verify_token_cleaned_up():
         print(f"❌ .modalconfig file still exists at {modalconfig_file}")
         return False
     
+    # Check if Modal sessions directory exists
+    session_dir = modal_dir / "sessions"
+    if session_dir.exists():
+        print(f"❌ Modal sessions directory still exists at {session_dir}")
+        return False
+    
+    # Check for any other session or auth files
+    if modal_dir.exists():
+        for file in os.listdir(modal_dir):
+            if "session" in file.lower() or "auth" in file.lower():
+                print(f"❌ Modal session/auth file still exists: {modal_dir / file}")
+                return False
+    
+    # Check if Modal CLI is still able to access tokens
+    try:
+        import subprocess
+        result = subprocess.run(
+            ["modal", "token", "current"],
+            capture_output=True,
+            text=True
+        )
+        if result.returncode == 0 and "No token found" not in result.stdout and "No token found" not in result.stderr:
+            print("❌ Modal CLI is still able to access tokens")
+            print(f"Output: {result.stdout}")
+            return False
+    except Exception as e:
+        print(f"⚠️ Error checking Modal CLI token status: {e}")
+    
     print("✅ Token has been cleaned up successfully")
     return True