jules-orchestrator-kit 0.6.0 → 0.6.2

package/.env.example

@@ -20,6 +20,13 @@ JULES_REPO=owner/repo
 # Enable Dry-Run mode to simulate payload dispatch without making API calls
 # JULES_DRY_RUN=false
 
+# --- Budget & Security Gatekeeper ---
+# Daily max session limit for autonomous dispatches (Default: 300)
+# JULES_DAILY_BUDGET=300
+
+# Allow modifications to command-defining files (package.json, Cargo.toml, etc.) in PRs (Default: false)
+# JULES_ALLOW_COMMAND_FILE_CHANGES=false
+
 # --- Execution Scope & Git ---
 # Base Branch for PR Audits & Merge-Base Calculations (Default: main)
 BASE_BRANCH=main

package/README.md

@@ -162,6 +162,8 @@ All commands are registered in `package.json` and can be run via `npm run <comma
 | `JULES_REPO` | Target GitHub Repository (Format: `owner/repo`) |
 | `JULES_REPOLESS` | Set to `true` or `1` to run in repoless/serverless mode |
 | `JULES_DRY_RUN` | Set to `true` or `1` to simulate dispatching without making API calls |
+| `JULES_DAILY_BUDGET` | Daily max session budget for autonomous dispatches (Default: `300`) |
+| `JULES_ALLOW_COMMAND_FILE_CHANGES` | Set to `true` to allow PR changes to command-defining files like `package.json` (Default: `false`) |
 | `BASE_BRANCH` | Base branch for PR Audits & Merge-Base calculations (Default: `main`) |
 | `GITHUB_HEAD_REF` | PR Head Branch (Used dynamically by CI during OODA repair) |
 | `JULES_PROJECT_ROOT` | Root directory of the project (Auto-assigned during swarm executions) |
@@ -176,6 +178,10 @@ All commands are registered in `package.json` and can be run via `npm run <comma
 | `GITHUB_STEP_SUMMARY` | GitHub Actions Step Summary File Path |
 | `NO_COLOR` | Set to `true` to disable ANSI color output |
 
+> [!NOTE]
+> **Scope Enforcement via `allow_paths`**
+> In `.agent/jules.yml`, defining `allow_paths` acts as a strict allowlist (deny-by-default). When non-empty, any file modified outside `allow_paths` will trigger a security violation (Exit Code 3). `forbidden_paths` always take absolute precedence and cannot be overridden.
+
 ### Exit Codes
 The Gatekeeper (`jules-self-audit.mjs` and related scripts) uses standard exit codes to signal status to CI systems.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jules-orchestrator-kit",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "Orchestration kit for running Google Jules autonomous agents.",
   "repository": {
     "type": "git",

package/scripts/jules-self-audit.mjs

@@ -5,7 +5,7 @@ import crypto from "node:crypto";
 import os from "node:os";
 import { fileURLToPath } from "node:url";
 import { resolveWorkspaceExecutionBoundary } from "./command-resolver.mjs";
-import { log, logToHistory, redactSecrets } from "./utils.mjs";
+import { log, logToHistory, redactSecrets, hasHighConfidenceSecret, hasLowConfidenceSecret } from "./utils.mjs";
 
 function runGitCommand(args, ignoreError = false) {
   try {
@@ -261,24 +261,37 @@ export function runSelfAudit() {
   }
   log.success("Restricted File Boundary Check: PASSED");
 
-  log.info("Analyzing Diff Payload Size & Content...");
-  const diffPayload = runGitCommand(["diff", `${mergeBase}...HEAD`], true);
-  const diffBytes = Buffer.byteLength(diffPayload, "utf8");
+  log.info("Analyzing Code Diff Payload Size & Content...");
+  const codeDiffPayload = changedCodeFiles.length > 0
+    ? runGitCommand(["diff", `${mergeBase}...HEAD`, "--", ...changedCodeFiles], true)
+    : "";
+
+  const diffBytes = Buffer.byteLength(codeDiffPayload, "utf8");
   const maxDiffBytes = 75 * 1024; // 75 KB
 
   if (diffBytes > maxDiffBytes) {
-    const err = new Error(`DIFF PAYLOAD TOO LARGE: ${diffBytes} bytes exceeds ${maxDiffBytes} bytes. Split the task.`);
+    const err = new Error(`DIFF PAYLOAD TOO LARGE: ${diffBytes} bytes exceeds ${maxDiffBytes} bytes limit for code files. Split the task.`);
     err.code = 5;
     throw err;
   }
   
-  const redactedDiff = redactSecrets(diffPayload);
-  if (redactedDiff !== diffPayload) {
-    const err = new Error("SECRET LEAK PREVENTED: Secret-like content detected in diff. Aborting.");
+  const fullDiffPayload = runGitCommand(["diff", `${mergeBase}...HEAD`], true);
+  const addedLines = fullDiffPayload
+    .split("\n")
+    .filter((line) => line.startsWith("+") && !line.startsWith("+++"))
+    .map((line) => line.slice(1))
+    .join("\n");
+
+  if (hasHighConfidenceSecret(addedLines)) {
+    const err = new Error("SECRET LEAK PREVENTED: High-confidence secret token or private key detected in added diff lines. Aborting.");
     err.code = 6;
     throw err;
   }
-  log.success(`Diff Inspection Check: PASSED (${diffBytes} bytes, No Secrets Detected)`);
+
+  if (hasLowConfidenceSecret(addedLines)) {
+    log.warn("SECURITY WARNING: Low-confidence secret or test key pattern detected in added diff lines.");
+  }
+  log.success(`Diff Inspection Check: PASSED (${diffBytes} bytes code diff, No Active High-Confidence Secrets)`);
 
   log.info("Resolving Dynamic Verification Suite from Trusted Base Branch...");
   
@@ -382,7 +395,7 @@ export function runSelfAudit() {
         }
       }
     } catch (e) {
-      // Ignorera fel här
+      // Ignore errors here
     }
 
     if (oodaRetries < 3) {
@@ -415,6 +428,13 @@ export function runSelfAudit() {
     throw err;
   }
 
+  try {
+    const oodaStateFile = path.resolve(process.cwd(), ".agent/state/ooda.json");
+    if (fs.existsSync(oodaStateFile)) {
+      fs.rmSync(oodaStateFile, { force: true });
+    }
+  } catch (_) {}
+
   log.success("🎉 JULES PR SELF-AUDIT PASSED SUCCESSFULLY!");
 }
 
@@ -486,7 +506,7 @@ export function runPreflightSandbox() {
         fs.rmSync(tempArchive, { force: true });
       }
     } catch (e) {
-      // Ignorera fel vid cleanup
+      // Ignore cleanup errors
     }
   }
 }

package/scripts/utils.mjs

@@ -106,6 +106,42 @@ export function calculateShannonEntropy(str) {
   }, 0);
 }
 
+export const HIGH_CONFIDENCE_PATTERNS = [
+  /\bgh[pousr]_[a-zA-Z0-9]{36,}\b/g,
+  /\bgithub_pat_[a-zA-Z0-9]{22}_[a-zA-Z0-9]{59}\b/g,
+  /\bAKIA[0-9A-Z]{16}\b/g,
+  /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
+  /\bnpm_[a-zA-Z0-9]{36}\b/g,
+  /\bsk_live_[0-9a-zA-Z]{24,}\b/g,
+];
+
+export const LOW_CONFIDENCE_PATTERNS = [
+  /\bAIza[0-9A-Za-z_-]{30,40}\b/g,
+  /\bya29\.[a-zA-Z0-9_\-]{20,}\b/g,
+  /\bBearer\s+[a-zA-Z0-9\-\._~+\/]+=*/g,
+  /\bsk-(?:ant-api03-|proj-|svcacct-)[a-zA-Z0-9\-\_]{32,}\b/g,
+  /\bxox[baprs]-[a-zA-Z0-9\-]{10,}\b/g,
+  /\beyJ[a-zA-Z0-9_\-]{10,}\.[a-zA-Z0-9_\-]{10,}\.[a-zA-Z0-9_\-]{10,}\b/g,
+  /\b(?:rk|pk)_(?:live|test)_[0-9a-zA-Z]{24,}\b/g,
+  /\bsk_test_[0-9a-zA-Z]{24,}\b/g,
+];
+
+export function hasHighConfidenceSecret(text) {
+  if (!text) return false;
+  return HIGH_CONFIDENCE_PATTERNS.some((pat) => {
+    pat.lastIndex = 0;
+    return pat.test(text);
+  });
+}
+
+export function hasLowConfidenceSecret(text) {
+  if (!text) return false;
+  return LOW_CONFIDENCE_PATTERNS.some((pat) => {
+    pat.lastIndex = 0;
+    return pat.test(text);
+  });
+}
+
 export function redactSecrets(text) {
   if (!text) return "";
   let sanitized = text;
@@ -122,21 +158,8 @@ export function redactSecrets(text) {
     }
   }
 
-  const patterns = [
-    /\bgh[pousr]_[a-zA-Z0-9]{36,}\b/g,
-    /\bgithub_pat_[a-zA-Z0-9]{22}_[a-zA-Z0-9]{59}\b/g,
-    /\bAKIA[0-9A-Z]{16}\b/g,
-    /\bAIza[0-9A-Za-z_-]{30,40}\b/g,
-    /\bya29\.[a-zA-Z0-9_\-]{20,}\b/g,
-    /\bBearer\s+[a-zA-Z0-9\-\._~+\/]+=*/g,
-    /\bsk-(?:ant-api03-|proj-|svcacct-)[a-zA-Z0-9\-\_]{32,}\b/g,
-    /\bxox[baprs]-[a-zA-Z0-9\-]{10,}\b/g,
-    /\beyJ[a-zA-Z0-9_\-]{10,}\.[a-zA-Z0-9_\-]{10,}\.[a-zA-Z0-9_\-]{10,}\b/g,
-    /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
-    /\bnpm_[a-zA-Z0-9]{36}\b/g,
-    /\b(?:sk|rk|pk)_(?:live|test)_[0-9a-zA-Z]{24,}\b/g,
-  ];
-  for (const pat of patterns) {
+  const allPatterns = [...HIGH_CONFIDENCE_PATTERNS, ...LOW_CONFIDENCE_PATTERNS];
+  for (const pat of allPatterns) {
     sanitized = sanitized.replace(pat, "[REDACTED_BY_SECURITY_GATE]");
   }
   return sanitized;
@@ -173,7 +196,7 @@ export function checkDailyBudget(maxSessions = 300) {
       if (
         entry.timestamp &&
         entry.timestamp.startsWith(dateStr) &&
-        (entry.event === "session_dispatched" || entry.event === "budget_reserved" || !entry.event)
+        (entry.event === "budget_reserved" || !entry.event)
       ) {
         usedToday++;
       }
@@ -185,24 +208,43 @@ export function checkDailyBudget(maxSessions = 300) {
   return { ok: usedToday < maxSessions, used: usedToday, budget: maxSessions };
 }
 
+function sleepSync(ms) {
+  try {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+  } catch (_) {}
+}
+
 export function reserveDailyBudget(maxSessions = 300, taskKey = "") {
   const stateDir = path.resolve(process.env.JULES_PROJECT_ROOT || process.cwd(), ".agent/state");
   ensureDir(stateDir);
 
   const lockFile = path.join(stateDir, "budget.lock");
   let fd;
+  const maxLockAttempts = 10;
 
-  try {
-    fd = fs.openSync(lockFile, "wx");
-  } catch {
-    // If lock fails, wait 50ms and retry once before returning locked state
+  for (let attempt = 0; attempt < maxLockAttempts; attempt++) {
     try {
-      fd = fs.openSync(lockFile, "w");
-    } catch {
-      return { ok: false, reason: "locked", used: null, budget: maxSessions };
+      try {
+        const stat = fs.statSync(lockFile);
+        if (Date.now() - stat.mtimeMs > 30000) {
+          fs.rmSync(lockFile, { force: true });
+        }
+      } catch (_) {}
+
+      fd = fs.openSync(lockFile, "wx");
+      break;
+    } catch (err) {
+      if (err.code !== "EEXIST") throw err;
+      if (attempt < maxLockAttempts - 1) {
+        sleepSync(Math.floor(50 + Math.random() * 50));
+      }
     }
   }
 
+  if (fd === undefined) {
+    return { ok: false, reason: "locked", used: null, budget: maxSessions };
+  }
+
   try {
     const check = checkDailyBudget(maxSessions);
     if (!check.ok) {