kifaru 1.0.177 → 1.0.178

package/dashboard/assurance.html

@@ -2489,7 +2489,7 @@ ${f.dpa.map((d) => " - " + d).join("\n")}`
         )
       }
       function startRun() {
-        getToken() ? (window.location.href = "/assessments") : openLogin()
+        signedIn() ? (window.location.href = "/assessments") : openLogin()
       }
 
       function switchTab(name) {
@@ -2543,17 +2543,33 @@ ${f.dpa.map((d) => " - " + d).join("\n")}`
           return ""
         }
       }
+      // The loopback dev sign-in establishes an httpOnly cookie session; no
+      // bearer token is returned, so this flag tracks that it succeeded.
+      function devSessionActive() {
+        try {
+          return localStorage.getItem("kifaru_dev_session") === "1"
+        } catch (_) {
+          return false
+        }
+      }
+      function setDevSession(on) {
+        try {
+          on ? localStorage.setItem("kifaru_dev_session", "1") : localStorage.removeItem("kifaru_dev_session")
+        } catch (_) {}
+      }
+      function signedIn() {
+        return Boolean(getToken()) || devSessionActive()
+      }
       async function autoDiscoverToken() {
         let t = getToken()
-        if (t) return t
+        if (t || devSessionActive()) return t
         try {
-          const r = await fetch("/api/v1/auth/dev-token")
+          // Session-scoped dev sign-in: the gateway sets an httpOnly session
+          // cookie for loopback browsers and returns no token.
+          const r = await fetch("/api/v1/auth/dev-token", { credentials: "include" })
           if (r.ok) {
             const d = await r.json()
-            if (d?.token) {
-              setToken(d.token)
-              return d.token
-            }
+            if (d?.ok) setDevSession(true)
           }
         } catch (_) {}
         return ""
@@ -2565,7 +2581,7 @@ ${f.dpa.map((d) => " - " + d).join("\n")}`
       }
       function openLogin() {
         $("#loginErr").textContent = ""
-        $("#logoutBtn").hidden = !getToken()
+        $("#logoutBtn").hidden = !signedIn()
         $("#loginModal").hidden = false
         setTimeout(() => $("#loginEmail").focus(), 30)
       }
@@ -2658,6 +2674,8 @@ ${f.dpa.map((d) => " - " + d).join("\n")}`
       }
       function signOut() {
         setToken("")
+        setDevSession(false)
+        fetch("/api/v1/auth/logout", { method: "POST", credentials: "include" }).catch(() => {})
         LIVE = null
         ACTIVE_RUN = null
         findingDetailCache.clear()

package/kifaru-gateway.js

@@ -27012,6 +27012,7 @@ function createAuthApp(input2) {
     providers.github = createGitHubLoginProvider(input2.config.githubOAuth);
   }
   providers.local = createLocalProvider(input2.storage);
+  providers.devlocal = createDevLocalProvider(input2.storage);
   return issuer({
     subjects,
     providers,
@@ -27022,7 +27023,7 @@ function createAuthApp(input2) {
     },
     async success(ctx, response) {
       const identity = await resolveIdentity(response);
-      if (!isAllowedEmail(identity.email, input2.config)) {
+      if (response.provider !== "devlocal" && !isAllowedEmail(identity.email, input2.config)) {
         throw new Error(`Email ${identity.email} is not allowed for this alpha.`);
       }
       const role = identity.role ?? (response.provider === "bootstrap" && input2.config.bootstrapRole ? input2.config.bootstrapRole : input2.config.adminEmails.has(identity.email) ? "admin" : input2.config.defaultRole);
@@ -27145,7 +27146,7 @@ async function resolveIdentity(response) {
       name: readString(response.name)
     };
   }
-  if (response.provider === "local") {
+  if (response.provider === "local" || response.provider === "devlocal") {
     return {
       subject: readString(response.subject) ?? response.email,
       email: String(response.email).toLowerCase(),
@@ -27465,6 +27466,30 @@ function createLocalProvider(storage) {
     }
   };
 }
+function createDevLocalProvider(storage) {
+  return {
+    type: "local",
+    init() {},
+    async client(input2) {
+      const ticket = readString(input2.clientSecret);
+      if (!ticket)
+        throw new Error("Local dev ticket is required.");
+      const stored = await storage.get(["local:devticket", ticket]);
+      await storage.remove(["local:devticket", ticket]);
+      if (!stored)
+        throw new Error("Invalid or expired local dev ticket.");
+      const email3 = readString(stored.email);
+      if (!email3)
+        throw new Error("Local dev ticket did not include an email.");
+      return {
+        subject: readString(stored.subject) ?? email3,
+        email: email3,
+        name: readString(stored.name),
+        role: stored.role === "admin" || stored.role === "member" ? stored.role : undefined
+      };
+    }
+  };
+}
 function isBootstrapToken(value, config2) {
   if (!value || !config2.bootstrapToken)
     return false;
@@ -27502,6 +27527,17 @@ async function createLocalTicket(storage, user) {
   }, new Date(Date.now() + 5 * 60 * 1000));
   return ticket;
 }
+var DEV_SESSION_EMAIL = "dev@kifaru.local";
+async function createDevLocalTicket(storage, user) {
+  const ticket = `loc_${randomUUID2()}`;
+  await storage.set(["local:devticket", ticket], {
+    subject: `local:${user.email}`,
+    email: user.email,
+    name: user.name,
+    role: user.role
+  }, new Date(Date.now() + 60 * 1000));
+  return ticket;
+}
 async function readLocalAuthPayload(request) {
   const contentType = request.headers.get("content-type") ?? "";
   if (contentType.includes("application/json")) {
@@ -31588,6 +31624,15 @@ function requireHumanAuth(config2, c) {
   }
   return null;
 }
+function isLoopbackPeer(c) {
+  const server = c.env;
+  try {
+    const address = server?.requestIP?.(c.req.raw)?.address ?? "";
+    return address === "127.0.0.1" || address === "::1" || address === "::ffff:127.0.0.1";
+  } catch {
+    return false;
+  }
+}
 function logGateway(level, category, message2) {
   const line = `${new Date().toISOString()} [${level}] [${category}] ${message2}`;
   console.log(line);
@@ -31675,28 +31720,70 @@ function createApp(input2) {
     bootstrapToken: input2.config.hasBootstrapToken,
     hasInternalToken: Boolean(input2.config.platformInternalToken)
   }));
-  app.get("/api/v1/auth/dev-token", (c) => {
-    const host = c.req.header("host") || "";
-    const isLoopback = host.startsWith("localhost") || host.startsWith("127.0.0.1") || host.startsWith("[::1]");
-    if (!isLoopback) {
+  app.get("/api/v1/auth/dev-token", async (c) => {
+    if (input2.config.hasOAuthProviders) {
+      return c.json({ error: "OAuth sign-in is configured for this deployment." }, 403);
+    }
+    if (!isLoopbackPeer(c)) {
       return c.json({ error: "Forbidden" }, 403);
     }
-    const token = input2.config.platformInternalToken ?? null;
-    if (token) {
-      setCookie(c, "kifaru_access", token, {
-        httpOnly: false,
-        secure: false,
+    let user = await getLocalUser(input2.storage, DEV_SESSION_EMAIL);
+    if (!user) {
+      user = await createLocalUser(input2.storage, {
+        email: DEV_SESSION_EMAIL,
+        password: `${randomUUID5()}${randomUUID5()}`,
+        name: "Local Dev Session",
+        role: "admin"
+      });
+    }
+    const ticket = await createDevLocalTicket(input2.storage, user);
+    const origin = input2.config.publicOrigin ?? publicOrigin(c.req.raw);
+    const tokenResponse = await authFetch(new Request(`${origin}/token`, {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: new URLSearchParams({
+        grant_type: "client_credentials",
+        provider: "devlocal",
+        client_id: "kifaru-platform",
+        client_secret: ticket
+      }).toString()
+    }));
+    const tokenData = await tokenResponse.json().catch(() => ({}));
+    const accessToken = readString(tokenData.access_token);
+    if (!tokenResponse.ok || !accessToken) {
+      return c.json({ error: "token_issuance_failed", detail: "Failed to issue session token." }, 500);
+    }
+    const csrfToken = randomUUID5();
+    const isHttps = new URL(c.req.raw.url).protocol === "https:";
+    const expiresIn = typeof tokenData.expires_in === "number" ? tokenData.expires_in : input2.config.accessTtlSeconds;
+    setCookie(c, "kifaru_access", accessToken, {
+      httpOnly: true,
+      secure: isHttps,
+      sameSite: "Lax",
+      path: "/",
+      maxAge: expiresIn
+    });
+    if (readString(tokenData.refresh_token)) {
+      setCookie(c, "kifaru_refresh", String(tokenData.refresh_token), {
+        httpOnly: true,
+        secure: isHttps,
         sameSite: "Lax",
-        path: "/",
-        maxAge: 86400 * 7
+        path: "/api/v1/auth",
+        maxAge: Math.min(input2.config.refreshTtlSeconds, 30 * 86400)
       });
     }
+    setCookie(c, "kifaru_csrf", csrfToken, {
+      httpOnly: false,
+      secure: isHttps,
+      sameSite: "Lax",
+      path: "/",
+      maxAge: expiresIn
+    });
     return c.json({
-      token,
-      workspace: {
-        id: input2.config.defaultWorkspaceId,
-        name: input2.config.defaultWorkspaceName
-      }
+      ok: true,
+      csrfToken,
+      expiresInSeconds: expiresIn,
+      user: { email: user.email, name: user.name, role: user.role }
     });
   });
   if (input2.config.staticRoot && existsSync2(input2.config.staticRoot)) {
@@ -33075,6 +33162,7 @@ import {
   defineTool,
   getAgentDir
 } from "@earendil-works/pi-coding-agent";
+import path6 from "path";
 // ../core/src/model/model-family.ts
 function getModelFamily(model) {
   const ref = typeof model === "string" ? model : `${model.providerID}/${model.modelID}`;
@@ -68857,6 +68945,9 @@ class WorkbenchAgentService {
     return this.adoptRuntime(id, runtime, actor, modelRef ?? null);
   }
   async resumeConversation(actor, sessionPath, modelRef) {
+    if (!isSharedSessionPath(sessionPath)) {
+      throw new Error("Session path is outside the shared session store.");
+    }
     const id = `wb-${crypto.randomUUID().slice(0, 8)}`;
     const sessionManager = SessionManager.open(sessionPath, undefined, this.cwd);
     const runtime = await createAgentSessionRuntime(this.makeRuntimeFactory(id, modelRef ?? ""), {
@@ -68877,8 +68968,8 @@ class WorkbenchAgentService {
       tools: new Map,
       findingCount: 0,
       revision: 0,
-      dirty: true,
       runID: null,
+      runCycle: 0,
       runPending: null,
       actor
     };
@@ -68890,6 +68981,9 @@ class WorkbenchAgentService {
   getConversation(id) {
     return this.conversations.get(id);
   }
+  canAccess(conversation, actor) {
+    return conversation.actor.workspaceID === actor.workspaceID;
+  }
   refreshTitle(conversation) {
     const firstUser = conversation.session.messages.find((message2) => message2.role === "user");
     const text2 = firstUser && typeof firstUser.content === "string" ? firstUser.content : firstUser && Array.isArray(firstUser.content) ? firstUser.content.map((block) => ("text" in block) ? String(block.text) : "").join(" ").trim() : "";
@@ -68905,7 +68999,6 @@ class WorkbenchAgentService {
           status: "running",
           startedAt: Date.now()
         });
-        conversation.dirty = true;
         break;
       case "tool_execution_end": {
         const existing = conversation.tools.get(event.toolCallId);
@@ -68916,24 +69009,20 @@ class WorkbenchAgentService {
           startedAt: existing?.startedAt ?? Date.now(),
           durationMs: Date.now() - (existing?.startedAt ?? Date.now())
         });
-        conversation.dirty = true;
         break;
       }
       case "agent_start":
         this.ensurePlatformRun(conversation);
-        conversation.dirty = true;
         break;
       case "agent_end":
         this.completePlatformRun(conversation);
         this.refreshTitle(conversation);
-        conversation.dirty = true;
         break;
       case "message_start":
       case "message_update":
       case "message_end":
       case "turn_start":
       case "turn_end":
-        conversation.dirty = true;
         break;
       default:
         break;
@@ -68948,7 +69037,6 @@ class WorkbenchAgentService {
       ...conversation.session.isStreaming ? { deliverAs: "steer" } : {}
     });
     this.refreshTitle(conversation);
-    conversation.dirty = true;
     conversation.revision += 1;
   }
   snapshot(conversation) {
@@ -68973,7 +69061,6 @@ class WorkbenchAgentService {
     if (model && !conversation.session.isStreaming) {
       await conversation.session.setModel?.(model);
     }
-    conversation.dirty = true;
     conversation.revision += 1;
   }
   async ensurePlatformRun(conversation) {
@@ -68988,7 +69075,7 @@ class WorkbenchAgentService {
         kind: "hunt",
         title: `Live workspace \xB7 ${conversation.title}`.slice(0, 240),
         configuration: { surface: "workbench", cwd: this.cwd },
-        idempotencyKey: `workbench-${conversation.id}`
+        idempotencyKey: `workbench-${conversation.id}-${conversation.runCycle}`
       });
       conversation.runID = run.id;
       this.platform.transitionRun(conversation.actor.workspaceID, run.id, "running");
@@ -69003,10 +69090,13 @@ class WorkbenchAgentService {
     }
   }
   completePlatformRun(conversation) {
-    if (!conversation.runID)
+    const runID = conversation.runID;
+    if (!runID)
       return;
+    conversation.runID = null;
+    conversation.runCycle += 1;
     try {
-      this.platform.transitionRun(conversation.actor.workspaceID, conversation.runID, "completed", {
+      this.platform.transitionRun(conversation.actor.workspaceID, runID, "completed", {
         summary: { findings: conversation.findingCount, surface: "workbench" }
       });
     } catch (error92) {
@@ -69031,7 +69121,7 @@ class WorkbenchAgentService {
         }
         const p = params;
         const finding = {
-          fingerprint: (p.fingerprint?.trim() || `workbench:${slugify2(p.title)}`).slice(0, 512),
+          fingerprint: (p.fingerprint?.trim() || `workbench:${slugify2(p.asset)}:${slugify2(p.title)}`).slice(0, 512),
           ruleID: (p.weakness?.trim() || slugify2(p.title) || "finding").slice(0, 160),
           title: p.title.slice(0, 256),
           ...p.description ? { description: p.description.slice(0, 20000) } : {},
@@ -69073,6 +69163,11 @@ class WorkbenchAgentService {
     });
   }
 }
+function isSharedSessionPath(sessionPath) {
+  const resolved = path6.resolve(sessionPath);
+  const root = path6.resolve(getAgentDir(), "sessions");
+  return resolved.endsWith(".jsonl") && resolved.startsWith(root + path6.sep);
+}
 function slugify2(value) {
   return value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80);
 }
@@ -69104,6 +69199,7 @@ var reportFindingSchema = exports_typebox.Object({
 
 // src/workbench/ws.ts
 var SNAPSHOT_INTERVAL_MS = 150;
+var FOREIGN_WORKSPACE_NOTICE = "That conversation belongs to another workspace.";
 function workbenchSocketHandlers(service) {
   function send(socket, message2) {
     try {
@@ -69115,17 +69211,33 @@ function workbenchSocketHandlers(service) {
       clearInterval(data.timer);
     data.timer = setInterval(() => {
       const conversation = data.conversationId ? service.getConversation(data.conversationId) : undefined;
-      if (!conversation || !conversation.dirty)
+      if (!conversation)
+        return;
+      const revision = conversation.revision;
+      if (revision <= (data.lastRevision ?? 0))
         return;
-      conversation.dirty = false;
+      data.lastRevision = revision;
       send(socket, service.snapshot(conversation));
     }, SNAPSHOT_INTERVAL_MS);
   }
   function attach(socket, data, conversation) {
     data.conversationId = conversation.id;
+    data.lastRevision = conversation.revision;
     send(socket, service.snapshot(conversation));
     pump(socket, data);
   }
+  function governedConversation(data, onForeign, onMissing) {
+    const conversation = data.conversationId ? service.getConversation(data.conversationId) : undefined;
+    if (!conversation) {
+      onMissing();
+      return;
+    }
+    if (!service.canAccess(conversation, data.actor)) {
+      onForeign();
+      return;
+    }
+    return conversation;
+  }
   return {
     open() {},
     async message(socket, raw2) {
@@ -69141,6 +69253,10 @@ function workbenchSocketHandlers(service) {
         switch (message2.type) {
           case "attach": {
             const existing = message2.conversationId ? service.getConversation(message2.conversationId) : undefined;
+            if (existing && !service.canAccess(existing, data.actor)) {
+              send(socket, { type: "notice", level: "error", text: FOREIGN_WORKSPACE_NOTICE });
+              return;
+            }
             const conversation = existing ?? await service.createConversation(data.actor);
             attach(socket, data, conversation);
             send(socket, { type: "models", models: service.listModels() });
@@ -69162,16 +69278,14 @@ function workbenchSocketHandlers(service) {
           }
           case "prompt":
           case "steer": {
-            const conversation = data.conversationId ? service.getConversation(data.conversationId) : undefined;
-            if (!conversation) {
-              send(socket, { type: "notice", level: "error", text: "No conversation attached" });
+            const conversation = governedConversation(data, () => send(socket, { type: "notice", level: "error", text: FOREIGN_WORKSPACE_NOTICE }), () => send(socket, { type: "notice", level: "error", text: "No conversation attached" }));
+            if (!conversation)
               return;
-            }
             await service.prompt(conversation, message2.text);
             break;
           }
           case "select_model": {
-            const conversation = data.conversationId ? service.getConversation(data.conversationId) : undefined;
+            const conversation = governedConversation(data, () => send(socket, { type: "notice", level: "error", text: FOREIGN_WORKSPACE_NOTICE }), () => {});
             if (conversation)
               await service.selectModel(conversation, message2.model);
             break;

package/kifaru-pi.js

@@ -16476,7 +16476,7 @@ var init_installation = __esm(async () => {
         });
     }
     Installation.upgrade = upgrade;
-    Installation.VERSION = "1.0.177";
+    Installation.VERSION = "1.0.178";
     Installation.CHANNEL = typeof KIFARU_CHANNEL === "string" ? KIFARU_CHANNEL : "local";
     Installation.USER_AGENT = `kifaru/${Installation.CHANNEL}/${Installation.VERSION}`;
     async function latest() {
@@ -133185,7 +133185,7 @@ Ctrl+C stops the gateway.`);
 async function handleCli() {
   const args = process.argv.slice(2);
   if (args.includes("--version") || args.includes("-v")) {
-    console.log("1.0.177");
+    console.log("1.0.178");
     process.exit(0);
   }
   if (args.includes("--help") || args.includes("-h")) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "kifaru",
-  "version": "1.0.177",
-  "gitHead": "3ff233ae1832c96ef45583d460e265e266495bb9",
+  "version": "1.0.178",
+  "gitHead": "6918585a066d299c117d06522515ad010e37e688",
   "description": "Kifaru security agent on the Pi runtime",
   "type": "module",
   "license": "MIT",