indusagi-coding-agent 0.2.13 → 0.2.14

package/dist/guardrails.js

@@ -812,49 +812,52 @@ function composeBriefing(input) {
 }
 
 // src/briefing/context-docs.ts
-import { existsSync, readFileSync, realpathSync } from "node:fs";
-import { dirname, extname, isAbsolute, join, parse, resolve } from "node:path";
+import { closeSync, constants, fstatSync, lstatSync, openSync, readFileSync, realpathSync } from "node:fs";
+import { basename, dirname, extname, isAbsolute, join, parse, resolve, sep } from "node:path";
 var DEFAULT_MAX_IMPORT_DEPTH = 5;
 var DEFAULT_MAX_BYTES_PER_DOC = 4e4;
 var CANDIDATE_FILES = ["AGENTS.md", "CLAUDE.md", "INDUSAGI.md", "CLAUDE.local.md", "AGENTS.local.md", join(".indusagi", "CLAUDE.md"), join(".claude", "CLAUDE.md")];
-var TEXT_FILE_EXTENSIONS = /* @__PURE__ */ new Set([".md", ".markdown", ".txt", ".text", ".json", ".jsonc", ".yaml", ".yml", ".toml", ".xml", ".csv", ".html", ".htm", ".css", ".js", ".ts", ".tsx", ".jsx", ".mjs", ".cjs", ".mts", ".cts", ".py", ".rb", ".go", ".rs", ".sh", ".env"]);
+var TEXT_FILE_EXTENSIONS = /* @__PURE__ */ new Set([".md", ".markdown", ".txt", ".text", ".json", ".jsonc", ".yaml", ".yml", ".toml", ".xml", ".csv", ".html", ".htm", ".css", ".js", ".ts", ".tsx", ".jsx", ".mjs", ".cjs", ".mts", ".cts", ".py", ".rb", ".go", ".rs", ".sh"]);
 var IMPORT_REGEX = /(?:^|\s)@((?:[^\s\\]|\\ )+)/g;
+var NO_FOLLOW = constants.O_NOFOLLOW ?? 0;
+var SECRET_BASENAMES = /* @__PURE__ */ new Set([
+  ".env",
+  "credentials",
+  "credentials.json",
+  "id_rsa",
+  "id_dsa",
+  "id_ecdsa",
+  "id_ed25519"
+]);
+var SECRET_EXTENSIONS = /* @__PURE__ */ new Set([".key", ".pem", ".p12", ".pfx"]);
 function shortenPath(path, cwd, home) {
-  if (cwd && path.startsWith(cwd)) {
+  if (cwd && (path === cwd || path.startsWith(`${cwd}${sep}`))) {
     const rest = path.slice(cwd.length).replace(/^[/\\]+/, "");
     return rest ? `./${rest}` : ".";
   }
-  return home && path.startsWith(home) ? `~${path.slice(home.length)}` : path;
-}
-function dirChain(cwd) {
-  const chain = [];
-  let current = cwd;
-  for (let i = 0; i < 256; i++) {
-    chain.push(current);
-    const parent = dirname(current);
-    if (parent === current || current === parse(current).root) break;
-    current = parent;
-  }
-  return chain.reverse();
-}
-function safeRealpath(path) {
-  try {
-    return realpathSync(path);
-  } catch {
-    return path;
-  }
+  return home && (path === home || path.startsWith(`${home}${sep}`)) ? `~${path.slice(home.length)}` : path;
 }
 function isTextFile(path) {
   const extension = extname(path).toLowerCase();
   return !extension || TEXT_FILE_EXTENSIONS.has(extension);
 }
+function isLikelySecretFile(path) {
+  const name = basename(path).toLowerCase();
+  return SECRET_BASENAMES.has(name) || name.startsWith(".env.") || SECRET_EXTENSIONS.has(extname(name));
+}
 function readFileBody(path) {
-  if (!existsSync(path)) return null;
+  let fd;
   try {
-    const body = readFileSync(path, "utf8").trim();
+    const before = lstatSync(path);
+    if (before.isSymbolicLink() || !before.isFile()) return null;
+    fd = openSync(path, constants.O_RDONLY | NO_FOLLOW);
+    if (!fstatSync(fd).isFile()) return null;
+    const body = readFileSync(fd, "utf8").trim();
     return body || null;
   } catch {
     return null;
+  } finally {
+    if (fd !== void 0) closeSync(fd);
   }
 }
 function extractImports(body, baseDir, home) {
@@ -873,23 +876,46 @@ function extractImports(body, baseDir, home) {
   }
   return out;
 }
-function loadDocTree(path, cwd, home, seen, depth, maxDepth, maxBytes, out) {
-  const real = safeRealpath(path);
-  if (seen.has(real)) return;
+function canonicalExistingFile(path) {
+  try {
+    const before = lstatSync(path);
+    if (before.isSymbolicLink() || !before.isFile()) return null;
+    return realpathSync(path);
+  } catch {
+    return null;
+  }
+}
+function isWithin(root, candidate) {
+  return candidate === root || candidate.startsWith(`${root}${sep}`);
+}
+function loadTrustedDocTree(path, cwd, home, seen, depth, maxDepth, maxBytes, out, policy) {
+  if (isLikelySecretFile(path)) return;
+  const real = canonicalExistingFile(path);
+  if (real === null || seen.has(real) || isLikelySecretFile(real)) return;
+  if (!isWithin(policy.root, real) && !policy.approvedExternal.has(real)) return;
   seen.add(real);
-  const body = readFileBody(path);
+  const body = readFileBody(real);
   if (body === null) return;
-  out.push({ path: shortenPath(path, cwd, home), body: body.length > maxBytes ? body.slice(0, maxBytes) : body });
+  out.push({ path: shortenPath(real, cwd, home), body: body.length > maxBytes ? body.slice(0, maxBytes) : body });
   if (depth >= maxDepth) return;
-  for (const child of extractImports(body, dirname(path), home)) loadDocTree(child, cwd, home, seen, depth + 1, maxDepth, maxBytes, out);
+  for (const child of extractImports(body, dirname(real), home)) {
+    loadTrustedDocTree(child, cwd, home, seen, depth + 1, maxDepth, maxBytes, out, policy);
+  }
 }
-function gatherContextDocs(cwd, home, opts) {
+function gatherContextDocs(cwd, home, opts = {}) {
   const out = [];
   try {
+    const root = realpathSync(cwd);
+    const approvedExternal = /* @__PURE__ */ new Set();
+    for (const path of opts.approvedExternalPaths ?? []) {
+      const real = canonicalExistingFile(path);
+      if (real !== null && !isLikelySecretFile(real)) approvedExternal.add(real);
+    }
+    const policy = { root, approvedExternal };
     const seen = /* @__PURE__ */ new Set();
-    const roots = dirChain(cwd);
-    if (home) roots.push(home);
-    for (const dir of roots) for (const name of CANDIDATE_FILES) loadDocTree(join(dir, name), cwd, home, seen, 0, opts?.maxImportDepth ?? DEFAULT_MAX_IMPORT_DEPTH, opts?.maxBytesPerDoc ?? DEFAULT_MAX_BYTES_PER_DOC, out);
+    for (const name of CANDIDATE_FILES) {
+      loadTrustedDocTree(join(root, name), root, home, seen, 0, opts.maxImportDepth ?? DEFAULT_MAX_IMPORT_DEPTH, opts.maxBytesPerDoc ?? DEFAULT_MAX_BYTES_PER_DOC, out, policy);
+    }
   } catch {
     return out;
   }
@@ -2025,7 +2051,74 @@ var GPT_6_ASTRA_BASE = {
     }
   }
 };
+var GPT_6_SOL_BASE = {
+  id: "gpt-6-sol",
+  name: "GPT-6 Sol",
+  api: "openai-responses",
+  reasoning: true,
+  reasoningEfforts: ["high"],
+  input: ["text", "image"],
+  cost: {
+    input: 10,
+    cacheRead: 1,
+    cacheWrite: 12.5,
+    output: 50
+  },
+  contextWindow: 105e4,
+  maxTokens: 128e3,
+  longContextPricing: {
+    threshold: 272e3,
+    multipliers: {
+      input: 2,
+      cacheRead: 2,
+      cacheWrite: 2,
+      output: 1.5
+    }
+  }
+};
+var GPT_6_LUNA_BASE = {
+  id: "gpt-6-luna",
+  name: "GPT-6 Luna",
+  api: "openai-responses",
+  reasoning: true,
+  reasoningEfforts: ["low", "medium", "high", "xhigh", "max"],
+  input: ["text", "image"],
+  cost: {
+    input: 0.1,
+    cacheRead: 0.01,
+    cacheWrite: 0.125,
+    output: 0.5
+  },
+  contextWindow: 105e4,
+  maxTokens: 128e3,
+  longContextPricing: {
+    threshold: 272e3,
+    multipliers: { input: 2, cacheRead: 2, cacheWrite: 2, output: 1.5 }
+  }
+};
 var CODING_AGENT_MODELS = [
+  {
+    ...GPT_6_SOL_BASE,
+    provider: "openai",
+    baseUrl: "https://api.openai.com/v1"
+  },
+  {
+    ...GPT_6_SOL_BASE,
+    api: "openai-codex-responses",
+    provider: "openai-codex",
+    baseUrl: "https://chatgpt.com/backend-api"
+  },
+  {
+    ...GPT_6_LUNA_BASE,
+    provider: "openai",
+    baseUrl: "https://api.openai.com/v1"
+  },
+  {
+    ...GPT_6_LUNA_BASE,
+    api: "openai-codex-responses",
+    provider: "openai-codex",
+    baseUrl: "https://chatgpt.com/backend-api"
+  },
   {
     ...GPT_6_ASTRA_BASE,
     provider: "openai",
@@ -2081,6 +2174,23 @@ import { ulid } from "ulid";
 // src/conductor/transcript-store/serialize.ts
 import { buildSessionContext, convertToLlm, loadEntriesFromFile, parseSessionEntries } from "indusagi/agent";
 
+// src/security/private-state.ts
+import {
+  chmodSync,
+  closeSync as closeSync2,
+  constants as constants2,
+  fchmodSync,
+  fstatSync as fstatSync2,
+  lstatSync as lstatSync2,
+  mkdirSync as mkdirSync2,
+  openSync as openSync2,
+  readFileSync as readFileSync2,
+  renameSync,
+  rmSync as rmSync2,
+  writeFileSync as writeFileSync2
+} from "node:fs";
+var NO_FOLLOW2 = constants2.O_NOFOLLOW ?? 0;
+
 // src/window-budget/summarize/prompt.ts
 var CONDENSER_BRIEF = [
   "You are a transcript recorder for a long-running coding session.",