modelos-secure 0.2.0 → 0.3.1

package/README.md

@@ -6,18 +6,37 @@ Tests an AI system for Security, Safety and Quality. One command in the system's
 npx modelos-secure scan .
 ```
 
-It reads the code, draws the system's map and asks only what it cannot work out. Everything it decides goes into `modelos-secure.yaml`. Before it sends anything it says exactly what leaves the machine, and `--explain` prints the outline without sending it. `--offline` keeps everything on your machine.
-
-| Command                                       | Does                                                           |
-| --------------------------------------------- | -------------------------------------------------------------- |
-| `modelos-secure login`                        | Saves a workspace token, and signs in with Google if needed.   |
-| `modelos-secure scan .`                       | Connects this repository. `--offline`, `--explain`, `--yes`.   |
-| `modelos-secure review`                       | Starts a review of this system. `--quick`, `--ci`, `--budget`. |
-| `modelos-secure replay F-031`                 | Replays one finding.                                           |
-| `modelos-secure doctor`                       | Checks the setup and fixes what it can.                        |
-| `modelos-secure export R-1179 --format sarif` | Writes a review's findings as SARIF or JSON.                   |
-
-During a review, actions are held and never run. Outside a review the hooks do nothing. Requires Node 20 or newer. Python apps need Python 3.10 or newer.
+It reads the code the way an engineer would, starting where the app starts, draws the system's map and asks only what it cannot work out. Everything it decides goes into `modelos-secure.yaml`.
+
+Before it sends anything it asks once whether a model may read the code it needs, or only an outline of it, or nothing. Every answer it sends passes a filter that takes secrets out, and settings files, keys and credentials are never read. `.modelos-secure/sent.jsonl` lists what was sent, `--explain` shows the outline and what may and may not be read without sending anything, and `--offline` keeps everything on your machine.
+
+At a terminal, `modelos-secure` on its own starts a session about the app in the folder: ask about it in your own words, and each answer cites the files and lines it rests on, checked against the code.
+
+| Command                                       | Does                                                               |
+| --------------------------------------------- | ------------------------------------------------------------------ |
+| `modelos-secure`                              | At a terminal, a session about the app in this folder.             |
+| `modelos-secure login`                        | Saves a workspace token, and signs in with Google if needed.       |
+| `modelos-secure scan .`                       | Connects this repository. `--offline`, `--explain`, `--yes`.       |
+| `modelos-secure review`                       | Starts a review of this system. `--quick`, `--ci`, `--budget`.     |
+| `modelos-secure replay F-031`                 | Replays one finding.                                               |
+| `modelos-secure doctor`                       | Checks the setup and fixes what it can.                            |
+| `modelos-secure runner`                       | Serves a review's attempts from this machine, in the app's folder. |
+| `modelos-secure export R-1179 --format sarif` | Writes a review's findings as SARIF or JSON.                       |
+| `modelos-secure --version`                    | Prints this CLI's version.                                         |
+
+A review of an app connected by the scan reaches it through a runner on the machine that runs it. `modelos-secure review` starts one itself, and keeps it while the review is paused; a review started from the app needs `modelos-secure runner` running in the app's folder, and says so if none is. A start command is checked before it runs and saved only once the app has started with it.
+
+During a review, actions are held and never run. Outside a review the hooks do nothing. Requires Node 22 or newer. Python apps need Python 3.10 or newer.
+
+Every command says what it takes with `--help`, such as `modelos-secure scan --help`, and refuses a flag it does not take.
+
+| Exit code | Means                                                          |
+| --------- | -------------------------------------------------------------- |
+| 0         | Done.                                                          |
+| 1         | Something failed, or a fix check found a break.                |
+| 2         | The command was used wrongly.                                  |
+| 3         | There are questions only a person can answer, as `--ci` lists. |
+| 130       | Stopped with Ctrl-C. What was done is kept.                    |
 
 ## Signing in
 

package/assets/login-CvPyhFJ7.js

@@ -0,0 +1 @@
+export { t as loginCommand } from "./login-DeAJGhiN.js";

package/assets/{login-DZgP66jr.js → login-DeAJGhiN.js}

@@ -17,7 +17,6 @@ var grey = (t) => paint("90", t);
 var bold = (t) => paint("1", t);
 var interactive = () => Boolean(process.stdin.isTTY && process.stdout.isTTY) && !process.env.CI;
 var pointer = unicode ? "›" : ">";
-var dash = unicode ? "–" : "-";
 function say(line = "") {
 	console.log(line);
 }
@@ -36,6 +35,15 @@ function beforeStopping(work) {
 async function finishBeforeStopping() {
 	await Promise.race([Promise.allSettled(onStop.map((work) => work())), new Promise((resolve) => setTimeout(resolve, 5e3))]);
 }
+/**
+* One line that changes in place while work goes on, at a terminal only: what is being read now.
+* An empty line clears it. Off a terminal it writes nothing, so a log holds only finished steps.
+*/
+function status(line) {
+	if (!process.stdout.isTTY) return;
+	const width = Math.max(20, (process.stdout.columns || 80) - 4);
+	process.stdout.write(`\r\u001b[2K${line ? `  ${grey(line.slice(0, width))}` : ""}`);
+}
 function step(name, detail, state = "done") {
 	if (state === "done") lastStep = name;
 	const right = state === "done" ? "done" : "";
@@ -120,7 +128,10 @@ async function askText(question, secret = false) {
 				resolve(value.trim());
 				return;
 			}
-			if (key.name === "backspace") value = value.slice(0, -1);
+			if (key.name === "backspace") {
+				if (value && !secret) process.stdout.write("\b \b");
+				value = value.slice(0, -1);
+			} else if (key.name === "tab") return;
 			else if (text && !key.ctrl) {
 				value += text;
 				if (!secret) process.stdout.write(text);
@@ -540,7 +551,15 @@ var IapRefusal = class extends ApiError {
 		this.kind = kind;
 	}
 };
+/** Hosts a token may reach over plain http: this machine only, as in local development. */
+var LOCAL_HOSTS = /* @__PURE__ */ new Set([
+	"localhost",
+	"127.0.0.1",
+	"[::1]"
+]);
 function apiClient(connection, options = {}) {
+	const target = new URL(connection.url);
+	if (target.protocol === "http:" && !LOCAL_HOSTS.has(target.hostname)) throw new Error(`The address ${target.origin} starts with http://, so your token would travel in clear. Use its https:// address.`);
 	const proxy = proxyCredentials(connection.google, {
 		saved: (google) => saveRenewed(connection.url, google),
 		...options
@@ -658,4 +677,4 @@ async function loginCommand(given = {}) {
 	const who = connection.google?.email;
 	say(`Saved. This machine now works in ${me.workspace}${who ? `, signed in to Google as ${who}` : ""}.`);
 }
-export { interactive as _, apiClient as a, say as b, Interrupted as c, beforeStopping as d, blue as f, grey as g, finishBeforeStopping as h, IapRefusal as i, ask as l, dash as m, parseLoginLine as n, atAddress as o, bold as p, ApiError as r, readConnection as s, loginCommand as t, askText as u, lastFinishedStep as v, step as x, red as y };
+export { lastFinishedStep as _, apiClient as a, status as b, Interrupted as c, beforeStopping as d, blue as f, interactive as g, grey as h, IapRefusal as i, ask as l, finishBeforeStopping as m, parseLoginLine as n, atAddress as o, bold as p, ApiError as r, readConnection as s, loginCommand as t, askText as u, red as v, step as x, say as y };