oathbound 0.14.0 → 0.15.0

package/update.ts

@@ -1,111 +0,0 @@
-import {
-  writeFileSync, readFileSync, existsSync, mkdirSync,
-  renameSync, chmodSync,
-} from 'node:fs';
-import { join } from 'node:path';
-import { homedir, platform } from 'node:os';
-import { TEAL, GREEN, RESET } from './ui';
-
-export function isNewer(remote: string, local: string): boolean {
-  const parse = (v: string) => v.replace(/^v/, '').split('.').map(Number);
-  const [rMaj, rMin, rPat] = parse(remote);
-  const [lMaj, lMin, lPat] = parse(local);
-  if (rMaj !== lMaj) return rMaj > lMaj;
-  if (rMin !== lMin) return rMin > lMin;
-  return rPat > lPat;
-}
-
-function getCacheDir(): string {
-  if (platform() === 'darwin') {
-    return join(homedir(), 'Library', 'Caches', 'oathbound');
-  }
-  return join(process.env.XDG_CACHE_HOME ?? join(homedir(), '.cache'), 'oathbound');
-}
-
-function getPlatformBinaryName(): string {
-  const p = platform();
-  const os = p === 'win32' ? 'windows' : p === 'darwin' ? 'darwin' : 'linux';
-  const arch = process.arch === 'arm64' ? 'arm64' : 'x64';
-  const ext = p === 'win32' ? '.exe' : '';
-  return `oathbound-${os}-${arch}${ext}`;
-}
-
-function printUpdateBox(current: string, latest: string): void {
-  const line = `Update available: ${current} → ${latest}`;
-  const install = 'Run: npm install -g oathbound';
-  const width = Math.max(line.length, install.length) + 2;
-  const pad = (s: string) => s + ' '.repeat(width - s.length);
-  process.stderr.write(`\n${TEAL}┌${'─'.repeat(width)}┐${RESET}\n`);
-  process.stderr.write(`${TEAL}│${RESET} ${pad(line)}${TEAL}│${RESET}\n`);
-  process.stderr.write(`${TEAL}│${RESET} ${pad(install)}${TEAL}│${RESET}\n`);
-  process.stderr.write(`${TEAL}└${'─'.repeat(width)}┘${RESET}\n`);
-}
-
-export async function checkForUpdate(version: string): Promise<void> {
-  const cacheDir = getCacheDir();
-  const cacheFile = join(cacheDir, 'update-check.json');
-
-  // Check cache freshness (24h) — invalidate if local version changed
-  if (existsSync(cacheFile)) {
-    try {
-      const cache = JSON.parse(readFileSync(cacheFile, 'utf-8'));
-      if (cache.localVersion === version && Date.now() - cache.checkedAt < 86_400_000) {
-        if (cache.latestVersion && isNewer(cache.latestVersion, version)) {
-          printUpdateBox(version, cache.latestVersion);
-        }
-        return;
-      }
-    } catch { /* stale cache, re-check */ }
-  }
-
-  // Fetch latest version from npm
-  const controller = new AbortController();
-  const timeout = setTimeout(() => controller.abort(), 5_000);
-  try {
-    const resp = await fetch(
-      'https://registry.npmjs.org/oathbound?fields=dist-tags',
-      { signal: controller.signal },
-    );
-    clearTimeout(timeout);
-    if (!resp.ok) return;
-    const data = await resp.json() as { 'dist-tags'?: { latest?: string } };
-    const latest = data['dist-tags']?.latest;
-    if (!latest) return;
-
-    // Write cache
-    mkdirSync(cacheDir, { recursive: true });
-    writeFileSync(cacheFile, JSON.stringify({ checkedAt: Date.now(), latestVersion: latest, localVersion: version }));
-
-    if (!isNewer(latest, version)) return;
-
-    // Try auto-update the binary
-    const binaryPath = process.argv[0];
-    if (!binaryPath || binaryPath.includes('bun') || binaryPath.includes('node')) {
-      // Running via bun/node, not compiled binary — just print box
-      printUpdateBox(version, latest);
-      return;
-    }
-
-    const binaryName = getPlatformBinaryName();
-    const url = `https://github.com/Joshuatanderson/oath-bound/releases/download/v${latest}/${binaryName}`;
-    const dlController = new AbortController();
-    const dlTimeout = setTimeout(() => dlController.abort(), 30_000);
-    const dlResp = await fetch(url, { signal: dlController.signal, redirect: 'follow' });
-    clearTimeout(dlTimeout);
-
-    if (!dlResp.ok || !dlResp.body) {
-      printUpdateBox(version, latest);
-      return;
-    }
-
-    const bytes = Buffer.from(await dlResp.arrayBuffer());
-    const tmpPath = `${binaryPath}.update-${Date.now()}`;
-    writeFileSync(tmpPath, bytes);
-    chmodSync(tmpPath, 0o755);
-    renameSync(tmpPath, binaryPath);
-    process.stderr.write(`${TEAL} ✓ Updated oathbound ${version} → ${latest}${RESET}\n`);
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    process.stderr.write(`${TEAL}Update check failed: ${msg}${RESET}\n`);
-  }
-}

package/verify.ts

@@ -1,400 +0,0 @@
-import { createClient } from '@supabase/supabase-js';
-import {
-  writeFileSync, readFileSync, existsSync,
-  readdirSync, statSync,
-} from 'node:fs';
-import { join, resolve } from 'node:path';
-import { tmpdir } from 'node:os';
-import { parse as yamlParse } from 'yaml';
-import { BRAND, TEAL, GREEN, RED, YELLOW, DIM, BOLD, RESET } from './ui';
-import { hashSkillDir } from './content-hash';
-import { readOathboundConfig, type EnforcementLevel } from './config';
-import { isValidSemver } from './semver';
-
-// --- Session state file ---
-interface SessionState {
-  verified: Record<string, string>; // skill name → content_hash
-  rejected: { name: string; reason: string }[];
-  ok: boolean;
-}
-
-function sessionStatePath(sessionId: string): string {
-  return join(tmpdir(), `oathbound-${sessionId}.json`);
-}
-
-async function readStdin(): Promise<string> {
-  const chunks: Buffer[] = [];
-  for await (const chunk of Bun.stdin.stream()) {
-    chunks.push(Buffer.from(chunk));
-  }
-  return Buffer.concat(chunks).toString('utf-8');
-}
-
-export function findSkillsDir(): string {
-  const cwd = process.cwd();
-  const normalized = cwd.replace(/\/+$/, '');
-
-  // Already inside .claude/skills
-  if (normalized.endsWith('.claude/skills')) return cwd;
-
-  // Inside .claude — check for skills/ subdir
-  if (normalized.endsWith('.claude')) {
-    const skills = join(cwd, 'skills');
-    if (existsSync(skills)) return skills;
-  }
-
-  // Check cwd/.claude/skills directly
-  const direct = join(cwd, '.claude', 'skills');
-  if (existsSync(direct)) return direct;
-
-  // Recurse downward (skip noise, limited depth)
-  const SKIP = new Set(['node_modules', '.git', 'dist', 'build', '.next']);
-  function search(dir: string, depth: number): string | null {
-    if (depth <= 0) return null;
-    try {
-      const entries = readdirSync(dir, { withFileTypes: true });
-      for (const entry of entries) {
-        if (!entry.isDirectory() || SKIP.has(entry.name)) continue;
-        if (entry.name === '.claude') {
-          const skills = join(dir, '.claude', 'skills');
-          if (existsSync(skills)) return skills;
-        }
-      }
-      for (const entry of entries) {
-        if (!entry.isDirectory() || SKIP.has(entry.name) || entry.name.startsWith('.')) continue;
-        const result = search(join(dir, entry.name), depth - 1);
-        if (result) return result;
-      }
-    } catch {
-      // permission denied, etc.
-    }
-    return null;
-  }
-
-  return search(cwd, 5) ?? cwd;
-}
-
-/** Extract skill name from a file path if it references .claude/skills/<name>/... */
-function skillNameFromPath(filePath: string): string | null {
-  const marker = '.claude/skills/';
-  const idx = filePath.indexOf(marker);
-  if (idx === -1) return null;
-  const rest = filePath.slice(idx + marker.length);
-  const name = rest.split('/')[0];
-  return name || null;
-}
-
-/** Extract skill name from a bash command if it references .claude/skills/<name>/... */
-function skillNameFromCommand(command: string): string | null {
-  const marker = '.claude/skills/';
-  const idx = command.indexOf(marker);
-  if (idx === -1) return null;
-  const rest = command.slice(idx + marker.length);
-  const name = rest.split(/[\/\s'"]/)[0];
-  return name || null;
-}
-
-function denySkill(skillName: string, reason: string, enforcement: EnforcementLevel): never {
-  process.stderr.write(`\n${TEAL}${BOLD}⬡ oathbound${RESET} ${RED}${BOLD}✗ Blocked${RESET} skill ${BOLD}"${skillName}"${RESET} ${DIM}(${reason})${RESET}\n`);
-  process.stderr.write(`${DIM}  enforcement: ${enforcement} — switch to "warn" in .oathbound.jsonc for development${RESET}\n\n`);
-  console.log(JSON.stringify({
-    hookSpecificOutput: {
-      hookEventName: 'PreToolUse',
-      permissionDecision: 'deny',
-      permissionDecisionReason: `Oathbound: skill "${skillName}" blocked — ${reason} (enforcement: ${enforcement})`,
-    },
-  }));
-  process.exit(0);
-}
-
-function warnSkill(skillName: string, reason: string): never {
-  process.stderr.write(`\n${TEAL}${BOLD}⬡ oathbound${RESET} ${YELLOW}⚠ Warning:${RESET} skill ${BOLD}"${skillName}"${RESET} ${DIM}(${reason})${RESET}\n\n`);
-  process.exit(0);
-}
-
-/** Check if a tool operation references a skill in another project, not ours. */
-function isExternalSkillAccess(
-  toolName: string,
-  toolInput: Record<string, unknown>,
-  skillsDir: string,
-  baseName: string,
-): boolean {
-  const resolvedSkillsDir = resolve(skillsDir);
-
-  if (toolName === 'Read') {
-    const p = String(toolInput.file_path ?? '');
-    if (p && !resolve(p).startsWith(resolvedSkillsDir)) return true;
-  }
-  if (toolName === 'Glob' || toolName === 'Grep') {
-    const p = String(toolInput.path ?? '');
-    if (p && !resolve(p).startsWith(resolvedSkillsDir)) return true;
-  }
-  if (toolName === 'Bash') {
-    const cmd = String(toolInput.command ?? '');
-    // If the command contains an absolute path to .claude/skills/baseName
-    // that ISN'T under our project's skills dir, it's external
-    if (cmd.includes('/.claude/skills/' + baseName) && !cmd.includes(resolvedSkillsDir)) return true;
-  }
-
-  return false;
-}
-
-function parseSkillVersion(skillDir: string): string | null {
-  const skillMdPath = join(skillDir, 'SKILL.md');
-  if (!existsSync(skillMdPath)) return null;
-  const content = readFileSync(skillMdPath, 'utf-8');
-  const match = content.match(/^---\s*\n([\s\S]*?)\n---\s*\n/);
-  if (!match) return null;
-  try {
-    const parsed = yamlParse(match[1]);
-    const v = parsed?.version;
-    if (v == null) return null;
-    const vStr = String(v);
-    return isValidSemver(vStr) ? vStr : null;
-  } catch {
-    return null;
-  }
-}
-
-// --- Verify (SessionStart hook) ---
-export async function verify(supabaseUrl: string, supabaseAnonKey: string): Promise<void> {
-  let input: Record<string, unknown>;
-  try {
-    input = JSON.parse(await readStdin());
-  } catch {
-    process.stderr.write('oathbound verify: invalid JSON on stdin\n');
-    process.exit(1);
-  }
-  const sessionId: string = input.session_id as string;
-  if (!sessionId) {
-    process.stderr.write('oathbound verify: no session_id in stdin\n');
-    process.exit(1);
-  }
-
-  const skillsDir = findSkillsDir();
-
-  // Guard: findSkillsDir() falls back to cwd if no .claude/skills found.
-  // In verify mode, we must NOT hash the entire project — only .claude/skills.
-  if (!skillsDir.endsWith('.claude/skills') && !skillsDir.includes('.claude/skills')) {
-    const state: SessionState = { verified: {}, rejected: [], ok: true };
-    writeFileSync(sessionStatePath(sessionId), JSON.stringify(state));
-    console.log(JSON.stringify({ hookSpecificOutput: { hookEventName: 'SessionStart', additionalContext: 'Oathbound: no .claude/skills/ directory found — nothing to verify.' } }));
-    process.exit(0);
-  }
-
-  // List skill subdirectories
-  const entries = readdirSync(skillsDir, { withFileTypes: true });
-  const skillDirs = entries.filter((e) => e.isDirectory() && !e.name.startsWith('.'));
-
-  if (skillDirs.length === 0) {
-    const state: SessionState = { verified: {}, rejected: [], ok: true };
-    writeFileSync(sessionStatePath(sessionId), JSON.stringify(state));
-    console.log(JSON.stringify({ hookSpecificOutput: { hookEventName: 'SessionStart', additionalContext: 'Oathbound: no skills installed — nothing to verify.' } }));
-    process.exit(0);
-  }
-
-  // Hash each local skill and parse version from SKILL.md
-  const localSkills: Record<string, { hash: string; version: string }> = {};
-  for (const dir of skillDirs) {
-    const fullPath = join(skillsDir, dir.name);
-    const hash = hashSkillDir(fullPath);
-    const version = parseSkillVersion(fullPath) ?? "1.0.0"; // fallback for pre-semver installs
-    localSkills[dir.name] = { hash, version };
-  }
-
-  // Read enforcement config
-  const config = readOathboundConfig();
-  const enforcement: EnforcementLevel = config?.enforcement ?? 'warn';
-
-  // Fetch registry data from Supabase (all versions)
-  // If enforcement=audited, also fetch audit status
-  const supabase = createClient(supabaseUrl, supabaseAnonKey);
-  const selectFields = enforcement === 'audited'
-    ? 'name, namespace, content_hash, version, audits(passed)'
-    : 'name, namespace, content_hash, version';
-  const { data: skills, error } = await supabase
-    .from('skills')
-    .select(selectFields)
-    .order('version', { ascending: false });
-
-  if (error) {
-    process.stderr.write(`oathbound verify: failed to query registry: ${error.message}\n`);
-    process.exit(1);
-  }
-
-  // Build lookup: name → version → { hash, audited }
-  const registryMap = new Map<string, Map<string, { hash: string; audited: boolean }>>();
-  for (const skill of skills ?? []) {
-    if (!skill.content_hash) continue;
-    if (!registryMap.has(skill.name)) {
-      registryMap.set(skill.name, new Map());
-    }
-    const versionMap = registryMap.get(skill.name)!;
-    if (!versionMap.has(skill.version)) {
-      const audited = enforcement === 'audited'
-        ? ((skill as Record<string, unknown>).audits as Array<{ passed: boolean }> | null)?.some(a => a.passed) ?? false
-        : false;
-      versionMap.set(skill.version, { hash: skill.content_hash, audited });
-    }
-  }
-
-  const verified: Record<string, string> = {};
-  const rejected: { name: string; reason: string }[] = [];
-  const warnings: { name: string; reason: string }[] = [];
-
-  process.stderr.write(`${BRAND} ${TEAL}verifying skills...${RESET}\n`);
-
-  for (const [name, { hash: localHash, version }] of Object.entries(localSkills)) {
-    const versionMap = registryMap.get(name);
-    const entry = versionMap?.get(version);
-
-    if (!entry) {
-      process.stderr.write(`${DIM}   ${name}@${version}: ${localHash} (not in registry)${RESET}\n`);
-      if (enforcement === 'warn') {
-        warnings.push({ name, reason: 'not in registry' });
-        verified[name] = localHash;
-      } else {
-        rejected.push({ name, reason: 'not in registry' });
-      }
-    } else if (localHash !== entry.hash) {
-      process.stderr.write(`${RED}   ${name}@${version}: ${localHash} ≠ ${entry.hash}${RESET}\n`);
-      if (enforcement === 'warn') {
-        warnings.push({ name, reason: `content hash mismatch (local: ${localHash.slice(0, 8)}…, registry: ${entry.hash.slice(0, 8)}…)` });
-        verified[name] = localHash;
-      } else {
-        rejected.push({ name, reason: `content hash mismatch (local: ${localHash.slice(0, 8)}…, registry: ${entry.hash.slice(0, 8)}…)` });
-      }
-    } else if (enforcement === 'audited' && !entry.audited) {
-      process.stderr.write(`${YELLOW}   ${name}@${version}: ${localHash} (registered but not audited)${RESET}\n`);
-      rejected.push({ name, reason: 'no passed audit' });
-    } else {
-      process.stderr.write(`${GREEN}   ${name}@${version}: ${localHash} ✓${RESET}\n`);
-      verified[name] = localHash;
-    }
-  }
-
-  const ok = rejected.length === 0;
-  const state: SessionState = { verified, rejected, ok };
-  writeFileSync(sessionStatePath(sessionId), JSON.stringify(state));
-
-  if (ok && warnings.length === 0) {
-    const names = Object.keys(verified).join(', ');
-    console.log(JSON.stringify({
-      hookSpecificOutput: {
-        hookEventName: 'SessionStart',
-        additionalContext: `Oathbound: all ${Object.keys(verified).length} skill(s) verified against registry [${names}]. Skills are safe to use.`,
-      },
-    }));
-    process.exit(0);
-  } else if (ok && warnings.length > 0) {
-    // Warn mode — all skills allowed but with warnings
-    const warnLines = warnings.map((w) => `  ⚠ ${w.name}: ${w.reason}`).join('\n');
-    const names = Object.keys(verified).join(', ');
-    const warnHeader = `${TEAL}${BOLD}⬡ oathbound${RESET} ${YELLOW}⚠ Unverified skills (enforcement: warn):${RESET}`;
-    process.stderr.write(`${warnHeader}\n${warnLines}\n${DIM}  Skills allowed but not verified against registry.${RESET}\n`);
-    console.log(JSON.stringify({
-      hookSpecificOutput: {
-        hookEventName: 'SessionStart',
-        additionalContext: `Oathbound (warn mode): ${Object.keys(verified).length} skill(s) allowed [${names}]. Warnings:\n${warnLines}`,
-      },
-    }));
-    process.exit(0);
-  } else {
-    const lines = rejected.map((r) => `  ${RED}✗${RESET} ${r.name}: ${r.reason}`);
-    process.stderr.write(`\n${TEAL}${BOLD}⬡ oathbound${RESET} ${RED}${BOLD}✗ Skill verification failed${RESET} ${DIM}(enforcement: ${enforcement})${RESET}\n${lines.join('\n')}\n${DIM}  Do NOT use unverified skills.${RESET}\n\n`);
-    process.exit(2);
-  }
-}
-
-// --- Verify --check (PreToolUse hook) ---
-export async function verifyCheck(): Promise<void> {
-  let input: Record<string, unknown>;
-  try {
-    input = JSON.parse(await readStdin());
-  } catch {
-    process.stderr.write('oathbound verify --check: invalid JSON on stdin\n');
-    process.exit(1);
-  }
-  const sessionId: string = input.session_id as string;
-  const toolName: string = (input.tool_name as string) ?? '';
-  const toolInput = (input.tool_input as Record<string, unknown>) ?? {};
-
-  if (!sessionId) process.exit(0);
-
-  // Extract skill name based on which tool triggered the hook
-  let baseName: string | null = null;
-
-  if (toolName === 'Skill') {
-    const skill = toolInput.skill as string | undefined;
-    if (!skill) process.exit(0);
-    baseName = skill.includes(':') ? skill.split(':').pop()! : skill;
-  } else if (toolName === 'Bash') {
-    baseName = skillNameFromCommand((toolInput.command as string) ?? '');
-  } else if (toolName === 'Read') {
-    baseName = skillNameFromPath((toolInput.file_path as string) ?? '');
-  } else if (toolName === 'Glob' || toolName === 'Grep') {
-    baseName = skillNameFromPath((toolInput.path as string) ?? '');
-    // Also check pattern/glob fields for skill path references
-    if (!baseName) baseName = skillNameFromPath((toolInput.pattern as string) ?? '');
-    if (!baseName) baseName = skillNameFromPath((toolInput.glob as string) ?? '');
-  }
-
-  // Not a skill-related operation — allow through
-  if (!baseName) process.exit(0);
-
-  // Read enforcement config
-  const config = readOathboundConfig();
-  const enforcement: EnforcementLevel = config?.enforcement ?? 'warn';
-
-  // Check if the tool is accessing a skill in another project — not our concern
-  const skillsDir = findSkillsDir();
-  if (isExternalSkillAccess(toolName, toolInput, skillsDir, baseName)) {
-    process.exit(0);
-  }
-
-  const stateFile = sessionStatePath(sessionId);
-  if (!existsSync(stateFile)) process.exit(0);
-
-  let state: SessionState;
-  try {
-    state = JSON.parse(readFileSync(stateFile, 'utf-8'));
-  } catch {
-    process.stderr.write('oathbound verify --check: corrupt session state file\n');
-    process.exit(1);
-  }
-
-  // Find the skill directory and re-hash
-  const skillDir = join(skillsDir, baseName);
-
-  if (!existsSync(skillDir) || !statSync(skillDir).isDirectory()) {
-    if (enforcement === 'warn') {
-      warnSkill(baseName, 'not installed locally');
-    } else {
-      denySkill(baseName, 'not installed locally', enforcement);
-    }
-  }
-
-  const currentHash = hashSkillDir(skillDir);
-  const sessionHash = state.verified[baseName];
-
-  if (!sessionHash) {
-    if (enforcement === 'warn') {
-      warnSkill(baseName, 'not verified at session start');
-    } else {
-      denySkill(baseName, 'not verified at session start', enforcement);
-    }
-  }
-
-  if (currentHash !== sessionHash) {
-    if (enforcement === 'warn') {
-      warnSkill(baseName, `modified since session start (${currentHash.slice(0, 8)}… ≠ ${sessionHash.slice(0, 8)}…)`);
-    } else {
-      denySkill(baseName, `modified since session start — tampering detected (${currentHash.slice(0, 8)}… ≠ ${sessionHash.slice(0, 8)}…)`, enforcement);
-    }
-  }
-
-  process.stderr.write(`${GREEN}   ${baseName}: ${currentHash} ✓${RESET}\n`);
-
-  // Hash matches — allow
-  process.exit(0);
-}