mstro-app 0.4.17 → 0.4.20

package/dist/server/services/credentials.js

@@ -1,110 +0,0 @@
-// Copyright (c) 2025-present Mstro, Inc. All rights reserved.
-// Licensed under the MIT License. See LICENSE file for details.
-/**
- * Credentials Service
- *
- * Manages persistent authentication credentials stored in ~/.mstro/credentials.json
- *
- * Structure:
- * {
- *   "token": "device-token-here",
- *   "userId": "user-uuid",
- *   "email": "user@example.com",
- *   "name": "User Name",
- *   "deviceId": "device-uuid",
- *   "clientId": "client-uuid",
- *   "createdAt": "2024-01-01T00:00:00.000Z",
- *   "lastRefreshedAt": "2024-01-01T00:00:00.000Z"
- * }
- */
-import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-const MSTRO_DIR = join(homedir(), '.mstro');
-const CREDENTIALS_FILE = join(MSTRO_DIR, 'credentials.json');
-/**
- * Ensure the ~/.mstro directory exists
- */
-function ensureMstroDir() {
-    if (!existsSync(MSTRO_DIR)) {
-        mkdirSync(MSTRO_DIR, { recursive: true, mode: 0o700 });
-    }
-}
-/**
- * Get stored credentials, or null if not logged in
- */
-export function getCredentials() {
-    if (!existsSync(CREDENTIALS_FILE)) {
-        return null;
-    }
-    try {
-        const content = readFileSync(CREDENTIALS_FILE, 'utf-8');
-        const credentials = JSON.parse(content);
-        // Validate required fields
-        if (!credentials.token || !credentials.userId || !credentials.email || !credentials.clientId) {
-            console.warn('Invalid credentials file, missing required fields');
-            return null;
-        }
-        return credentials;
-    }
-    catch (err) {
-        console.warn('Failed to read credentials file:', err);
-        return null;
-    }
-}
-/**
- * Save credentials after successful login
- */
-export function saveCredentials(credentials) {
-    ensureMstroDir();
-    writeFileSync(CREDENTIALS_FILE, JSON.stringify(credentials, null, 2), {
-        mode: 0o600 // Read/write for owner only
-    });
-}
-/**
- * Update the token (used during refresh)
- */
-export function updateToken(newToken) {
-    const credentials = getCredentials();
-    if (!credentials) {
-        throw new Error('No credentials to update');
-    }
-    credentials.token = newToken;
-    credentials.lastRefreshedAt = new Date().toISOString();
-    saveCredentials(credentials);
-}
-/**
- * Delete credentials (logout)
- */
-export function deleteCredentials() {
-    if (!existsSync(CREDENTIALS_FILE)) {
-        return false;
-    }
-    try {
-        unlinkSync(CREDENTIALS_FILE);
-        return true;
-    }
-    catch (err) {
-        console.error('Failed to delete credentials:', err);
-        return false;
-    }
-}
-/**
- * Check if user is logged in
- */
-export function isLoggedIn() {
-    return getCredentials() !== null;
-}
-/**
- * Get the credentials file path (for display)
- */
-export function getCredentialsPath() {
-    return CREDENTIALS_FILE;
-}
-/**
- * Get the mstro directory path
- */
-export function getMstroDir() {
-    return MSTRO_DIR;
-}
-//# sourceMappingURL=credentials.js.map

package/dist/server/services/credentials.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../../server/services/credentials.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,gEAAgE;AAEhE;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAA;AAC3C,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAA;AAa5D;;GAEG;AACH,SAAS,cAAc;IACrB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACxD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAA;QAEtD,2BAA2B;QAC3B,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC7F,OAAO,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAA;YACjE,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,WAAW,CAAA;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAA;QACrD,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,WAAwB;IACtD,cAAc,EAAE,CAAA;IAChB,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QACpE,IAAI,EAAE,KAAK,CAAC,4BAA4B;KACzC,CAAC,CAAA;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAA;IACpC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAC7C,CAAC;IAED,WAAW,CAAC,KAAK,GAAG,QAAQ,CAAA;IAC5B,WAAW,CAAC,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACtD,eAAe,CAAC,WAAW,CAAC,CAAA;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,IAAI,CAAC;QACH,UAAU,CAAC,gBAAgB,CAAC,CAAA;QAC5B,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAA;QACnD,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,cAAc,EAAE,KAAK,IAAI,CAAA;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,gBAAgB,CAAA;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/server/services/sandbox-utils.d.ts

@@ -1,8 +0,0 @@
-/**
- * Create a sanitized environment for sandboxed execution.
- * Strips sensitive env vars and sets HOME to the project directory.
- */
-export declare function sanitizeEnvForSandbox(env: NodeJS.ProcessEnv, workingDir: string, options?: {
-    overrideHome?: boolean;
-}): Record<string, string>;
-//# sourceMappingURL=sandbox-utils.d.ts.map

package/dist/server/services/sandbox-utils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sandbox-utils.d.ts","sourceRoot":"","sources":["../../../server/services/sandbox-utils.ts"],"names":[],"mappings":"AAsDA;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GACnC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAmBxB"}

package/dist/server/services/sandbox-utils.js

@@ -1,75 +0,0 @@
-// Copyright (c) 2025-present Mstro, Inc. All rights reserved.
-// Licensed under the MIT License. See LICENSE file for details.
-/**
- * Sandbox Utilities
- *
- * Environment sanitization for sandboxed shared sessions.
- * Used by both PTY manager (terminal) and Claude invoker (prompts)
- * to restrict shared users to the project directory.
- */
-/** Env var prefixes that may contain secrets or grant access outside the project */
-const BLOCKED_PREFIXES = [
-    'AWS_',
-    'GITHUB_',
-    'GH_',
-    'NPM_',
-    'DOCKER_',
-    'SSH_',
-    'GPG_',
-    'AZURE_',
-    'GCP_',
-    'GOOGLE_',
-    'OPENAI_',
-    'ANTHROPIC_',
-    'STRIPE_',
-    'TWILIO_',
-    'SENDGRID_',
-    'DATADOG_',
-    'SENTRY_',
-    'SLACK_',
-    'DISCORD_',
-];
-/** Specific env vars that may contain secrets or sensitive paths */
-const BLOCKED_KEYS = new Set([
-    'HISTFILE',
-    'LESSHISTFILE',
-    'MYSQL_PWD',
-    'PGPASSWORD',
-    'PGPASSFILE',
-    'REDIS_URL',
-    'DATABASE_URL',
-    'MONGO_URI',
-    'MONGODB_URI',
-    'SECRET_KEY',
-    'API_KEY',
-    'API_SECRET',
-    'ACCESS_TOKEN',
-    'REFRESH_TOKEN',
-    'PRIVATE_KEY',
-    'JWT_SECRET',
-]);
-/**
- * Create a sanitized environment for sandboxed execution.
- * Strips sensitive env vars and sets HOME to the project directory.
- */
-export function sanitizeEnvForSandbox(env, workingDir, options) {
-    const result = {};
-    for (const [key, value] of Object.entries(env)) {
-        if (!value)
-            continue;
-        if (BLOCKED_KEYS.has(key))
-            continue;
-        if (BLOCKED_PREFIXES.some(p => key.startsWith(p)))
-            continue;
-        result[key] = value;
-    }
-    // Override HOME to project directory so `cd ~` stays sandboxed (e.g. terminals).
-    // Claude Code processes opt out (overrideHome: false) to preserve OAuth auth lookup.
-    if (options?.overrideHome !== false) {
-        result.HOME = workingDir;
-    }
-    // Marker so scripts can detect sandboxed execution
-    result.MSTRO_SANDBOXED = '1';
-    return result;
-}
-//# sourceMappingURL=sandbox-utils.js.map

package/dist/server/services/sandbox-utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sandbox-utils.js","sourceRoot":"","sources":["../../../server/services/sandbox-utils.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,gEAAgE;AAEhE;;;;;;GAMG;AAEH,oFAAoF;AACpF,MAAM,gBAAgB,GAAG;IACvB,MAAM;IACN,SAAS;IACT,KAAK;IACL,MAAM;IACN,SAAS;IACT,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,SAAS;IACT,SAAS;IACT,YAAY;IACZ,SAAS;IACT,SAAS;IACT,WAAW;IACX,UAAU;IACV,SAAS;IACT,QAAQ;IACR,UAAU;CACX,CAAC;AAEF,oEAAoE;AACpE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,UAAU;IACV,cAAc;IACd,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,cAAc;IACd,WAAW;IACX,aAAa;IACb,YAAY;IACZ,SAAS;IACT,YAAY;IACZ,cAAc;IACd,eAAe;IACf,aAAa;IACb,YAAY;CACb,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAsB,EACtB,UAAkB,EAClB,OAAoC;IAEpC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAC5D,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,iFAAiF;IACjF,qFAAqF;IACrF,IAAI,OAAO,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,GAAG,UAAU,CAAC;IAC3B,CAAC;IACD,mDAAmD;IACnD,MAAM,CAAC,eAAe,GAAG,GAAG,CAAC;IAE7B,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/server/mcp/bouncer-sandbox.ts

@@ -1,214 +0,0 @@
-// Copyright (c) 2025-present Mstro, Inc. All rights reserved.
-// Licensed under the MIT License. See LICENSE file for details.
-
-/**
- * Sandbox Harness for Bouncer Testing
- *
- * Wraps command execution in Anthropic's sandbox-runtime (bubblewrap on Linux,
- * sandbox-exec on macOS) to safely test what happens when the bouncer FAILS —
- * i.e., when a malicious tool call gets through.
- *
- * Usage in tests:
- *   const harness = new BouncerSandboxHarness();
- *   await harness.initialize();
- *   const result = await harness.executeInSandbox('rm -rf /tmp/test-canary');
- *   expect(result.violations).toContain(...)
- *   await harness.cleanup();
- */
-
-import { execSync } from 'node:child_process';
-import { existsSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-
-export interface SandboxExecResult {
-  /** The sandboxed command that was actually run */
-  wrappedCommand: string;
-  /** Whether sandbox-runtime is available on this platform */
-  sandboxAvailable: boolean;
-  /** Whether the sandbox contained the operation (no violations) */
-  contained: boolean;
-  /** List of violation descriptions if any escaped the sandbox */
-  violations: string[];
-}
-
-export interface CanaryCheckResult {
-  /** Whether the canary file still exists (should be true if sandbox contained the write) */
-  canaryIntact: boolean;
-  /** Whether a file was written outside the sandbox (should be false) */
-  escapeDetected: boolean;
-}
-
-/**
- * Test harness that wraps command execution in sandbox-runtime.
- * Provides canary files and violation tracking to verify containment.
- */
-export class BouncerSandboxHarness {
-  private sandboxManager: Awaited<typeof import('@anthropic-ai/sandbox-runtime')>['SandboxManager'] | null = null;
-  private sandboxAvailable = false;
-  private tempDir: string;
-  private canaryDir: string;
-
-  constructor() {
-    this.tempDir = mkdtempSync(join(tmpdir(), 'bouncer-sandbox-'));
-    this.canaryDir = join(this.tempDir, 'canaries');
-    mkdirSync(this.canaryDir, { recursive: true });
-  }
-
-  /**
-   * Initialize the sandbox. Falls back gracefully if bwrap/sandbox-exec not available.
-   */
-  async initialize(): Promise<{ available: boolean; reason?: string }> {
-    try {
-      const { SandboxManager } = await import('@anthropic-ai/sandbox-runtime');
-
-      if (!SandboxManager.isSupportedPlatform()) {
-        return { available: false, reason: 'Platform not supported by sandbox-runtime' };
-      }
-
-      const deps = SandboxManager.checkDependencies();
-      if (deps.errors.length > 0) {
-        return {
-          available: false,
-          reason: `Missing dependencies: ${deps.errors.join(', ')}`,
-        };
-      }
-
-      await SandboxManager.initialize({
-        network: {
-          allowedDomains: [], // Block ALL network access
-          deniedDomains: ['*'],
-        },
-        filesystem: {
-          denyRead: [
-            '/home/*/.ssh',
-            '/home/*/.aws',
-            '/home/*/.gnupg',
-            '/etc/shadow',
-            '/etc/passwd',
-          ],
-          allowWrite: [this.tempDir], // Only allow writes to our temp dir
-          denyWrite: [
-            '/',
-            '/home',
-            '/etc',
-            '/usr',
-            '/var',
-          ],
-        },
-      });
-
-      this.sandboxManager = SandboxManager;
-      this.sandboxAvailable = true;
-      return { available: true };
-    } catch (error: unknown) {
-      const msg = error instanceof Error ? error.message : String(error);
-      return { available: false, reason: `Failed to initialize sandbox: ${msg}` };
-    }
-  }
-
-  /**
-   * Execute a command inside the sandbox. Returns containment results.
-   * If sandbox is not available, validates the bouncer decision only (no actual execution).
-   */
-  async executeInSandbox(command: string): Promise<SandboxExecResult> {
-    if (!this.sandboxAvailable || !this.sandboxManager) {
-      return {
-        wrappedCommand: command,
-        sandboxAvailable: false,
-        contained: true,
-        violations: ['Sandbox not available — decision-only testing mode'],
-      };
-    }
-
-    const violations: string[] = [];
-    try {
-      const wrappedCommand = await this.sandboxManager.wrapWithSandbox(command);
-
-      // Execute the wrapped command and capture violations
-      try {
-        execSync(wrappedCommand, {
-          timeout: 5000,
-          stdio: 'pipe',
-          cwd: this.tempDir,
-        });
-      } catch {
-        // Command failure inside sandbox is expected for malicious ops
-      }
-
-      // Check violation store
-      const stderr = this.sandboxManager.annotateStderrWithSandboxFailures(command, '');
-      if (stderr) {
-        violations.push(stderr);
-      }
-
-      this.sandboxManager.cleanupAfterCommand();
-
-      return {
-        wrappedCommand,
-        sandboxAvailable: true,
-        contained: violations.length === 0,
-        violations,
-      };
-    } catch (error: unknown) {
-      const msg = error instanceof Error ? error.message : String(error);
-      violations.push(`Sandbox execution error: ${msg}`);
-      return {
-        wrappedCommand: command,
-        sandboxAvailable: true,
-        contained: true, // Error means the command didn't execute
-        violations,
-      };
-    }
-  }
-
-  /**
-   * Place a canary file and return a checker to verify containment.
-   * If a sandboxed command can delete or modify the canary, containment failed.
-   */
-  placeCanary(name: string): { path: string; check: () => CanaryCheckResult } {
-    const canaryPath = join(this.canaryDir, name);
-    const escapePath = join(this.canaryDir, `${name}.escaped`);
-    writeFileSync(canaryPath, `canary-${Date.now()}`, 'utf-8');
-
-    return {
-      path: canaryPath,
-      check: () => ({
-        canaryIntact: existsSync(canaryPath),
-        escapeDetected: existsSync(escapePath),
-      }),
-    };
-  }
-
-  /**
-   * Get the temp directory where sandboxed commands can write.
-   */
-  getSandboxWriteDir(): string {
-    return this.tempDir;
-  }
-
-  /**
-   * Whether the sandbox is actually available and initialized.
-   */
-  isAvailable(): boolean {
-    return this.sandboxAvailable;
-  }
-
-  /**
-   * Clean up temp dirs and reset sandbox state.
-   */
-  async cleanup(): Promise<void> {
-    try {
-      if (this.sandboxManager) {
-        await this.sandboxManager.reset();
-      }
-    } catch {
-      // Ignore cleanup errors
-    }
-    try {
-      rmSync(this.tempDir, { recursive: true, force: true });
-    } catch {
-      // Ignore cleanup errors
-    }
-  }
-}

package/server/services/credentials.ts

@@ -1,134 +0,0 @@
-// Copyright (c) 2025-present Mstro, Inc. All rights reserved.
-// Licensed under the MIT License. See LICENSE file for details.
-
-/**
- * Credentials Service
- *
- * Manages persistent authentication credentials stored in ~/.mstro/credentials.json
- *
- * Structure:
- * {
- *   "token": "device-token-here",
- *   "userId": "user-uuid",
- *   "email": "user@example.com",
- *   "name": "User Name",
- *   "deviceId": "device-uuid",
- *   "clientId": "client-uuid",
- *   "createdAt": "2024-01-01T00:00:00.000Z",
- *   "lastRefreshedAt": "2024-01-01T00:00:00.000Z"
- * }
- */
-
-import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs'
-import { homedir } from 'node:os'
-import { join } from 'node:path'
-
-const MSTRO_DIR = join(homedir(), '.mstro')
-const CREDENTIALS_FILE = join(MSTRO_DIR, 'credentials.json')
-
-export interface Credentials {
-  token: string
-  userId: string
-  email: string
-  name?: string
-  deviceId?: string
-  clientId: string
-  createdAt: string
-  lastRefreshedAt?: string
-}
-
-/**
- * Ensure the ~/.mstro directory exists
- */
-function ensureMstroDir(): void {
-  if (!existsSync(MSTRO_DIR)) {
-    mkdirSync(MSTRO_DIR, { recursive: true, mode: 0o700 })
-  }
-}
-
-/**
- * Get stored credentials, or null if not logged in
- */
-export function getCredentials(): Credentials | null {
-  if (!existsSync(CREDENTIALS_FILE)) {
-    return null
-  }
-
-  try {
-    const content = readFileSync(CREDENTIALS_FILE, 'utf-8')
-    const credentials = JSON.parse(content) as Credentials
-
-    // Validate required fields
-    if (!credentials.token || !credentials.userId || !credentials.email || !credentials.clientId) {
-      console.warn('Invalid credentials file, missing required fields')
-      return null
-    }
-
-    return credentials
-  } catch (err) {
-    console.warn('Failed to read credentials file:', err)
-    return null
-  }
-}
-
-/**
- * Save credentials after successful login
- */
-export function saveCredentials(credentials: Credentials): void {
-  ensureMstroDir()
-  writeFileSync(CREDENTIALS_FILE, JSON.stringify(credentials, null, 2), {
-    mode: 0o600 // Read/write for owner only
-  })
-}
-
-/**
- * Update the token (used during refresh)
- */
-export function updateToken(newToken: string): void {
-  const credentials = getCredentials()
-  if (!credentials) {
-    throw new Error('No credentials to update')
-  }
-
-  credentials.token = newToken
-  credentials.lastRefreshedAt = new Date().toISOString()
-  saveCredentials(credentials)
-}
-
-/**
- * Delete credentials (logout)
- */
-export function deleteCredentials(): boolean {
-  if (!existsSync(CREDENTIALS_FILE)) {
-    return false
-  }
-
-  try {
-    unlinkSync(CREDENTIALS_FILE)
-    return true
-  } catch (err) {
-    console.error('Failed to delete credentials:', err)
-    return false
-  }
-}
-
-/**
- * Check if user is logged in
- */
-export function isLoggedIn(): boolean {
-  return getCredentials() !== null
-}
-
-/**
- * Get the credentials file path (for display)
- */
-export function getCredentialsPath(): string {
-  return CREDENTIALS_FILE
-}
-
-/**
- * Get the mstro directory path
- */
-export function getMstroDir(): string {
-  return MSTRO_DIR
-}

package/server/services/sandbox-utils.ts

@@ -1,82 +0,0 @@
-// Copyright (c) 2025-present Mstro, Inc. All rights reserved.
-// Licensed under the MIT License. See LICENSE file for details.
-
-/**
- * Sandbox Utilities
- *
- * Environment sanitization for sandboxed shared sessions.
- * Used by both PTY manager (terminal) and Claude invoker (prompts)
- * to restrict shared users to the project directory.
- */
-
-/** Env var prefixes that may contain secrets or grant access outside the project */
-const BLOCKED_PREFIXES = [
-  'AWS_',
-  'GITHUB_',
-  'GH_',
-  'NPM_',
-  'DOCKER_',
-  'SSH_',
-  'GPG_',
-  'AZURE_',
-  'GCP_',
-  'GOOGLE_',
-  'OPENAI_',
-  'ANTHROPIC_',
-  'STRIPE_',
-  'TWILIO_',
-  'SENDGRID_',
-  'DATADOG_',
-  'SENTRY_',
-  'SLACK_',
-  'DISCORD_',
-];
-
-/** Specific env vars that may contain secrets or sensitive paths */
-const BLOCKED_KEYS = new Set([
-  'HISTFILE',
-  'LESSHISTFILE',
-  'MYSQL_PWD',
-  'PGPASSWORD',
-  'PGPASSFILE',
-  'REDIS_URL',
-  'DATABASE_URL',
-  'MONGO_URI',
-  'MONGODB_URI',
-  'SECRET_KEY',
-  'API_KEY',
-  'API_SECRET',
-  'ACCESS_TOKEN',
-  'REFRESH_TOKEN',
-  'PRIVATE_KEY',
-  'JWT_SECRET',
-]);
-
-/**
- * Create a sanitized environment for sandboxed execution.
- * Strips sensitive env vars and sets HOME to the project directory.
- */
-export function sanitizeEnvForSandbox(
-  env: NodeJS.ProcessEnv,
-  workingDir: string,
-  options?: { overrideHome?: boolean }
-): Record<string, string> {
-  const result: Record<string, string> = {};
-
-  for (const [key, value] of Object.entries(env)) {
-    if (!value) continue;
-    if (BLOCKED_KEYS.has(key)) continue;
-    if (BLOCKED_PREFIXES.some(p => key.startsWith(p))) continue;
-    result[key] = value;
-  }
-
-  // Override HOME to project directory so `cd ~` stays sandboxed (e.g. terminals).
-  // Claude Code processes opt out (overrideHome: false) to preserve OAuth auth lookup.
-  if (options?.overrideHome !== false) {
-    result.HOME = workingDir;
-  }
-  // Marker so scripts can detect sandboxed execution
-  result.MSTRO_SANDBOXED = '1';
-
-  return result;
-}