reeboot 1.3.6 → 1.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/agent-runner/interface.d.ts +4 -1
- package/dist/agent-runner/interface.d.ts.map +1 -1
- package/dist/agent-runner/pi-runner.d.ts +9 -2
- package/dist/agent-runner/pi-runner.d.ts.map +1 -1
- package/dist/agent-runner/pi-runner.js +41 -2
- package/dist/agent-runner/pi-runner.js.map +1 -1
- package/dist/channels/interface.d.ts +3 -0
- package/dist/channels/interface.d.ts.map +1 -1
- package/dist/channels/interface.js.map +1 -1
- package/dist/config.d.ts +357 -0
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +47 -0
- package/dist/config.js.map +1 -1
- package/dist/extensions/injection-guard.d.ts +13 -0
- package/dist/extensions/injection-guard.d.ts.map +1 -0
- package/dist/extensions/injection-guard.js +32 -0
- package/dist/extensions/injection-guard.js.map +1 -0
- package/dist/extensions/loader.d.ts.map +1 -1
- package/dist/extensions/loader.js +16 -0
- package/dist/extensions/loader.js.map +1 -1
- package/dist/extensions/mcp-manager.d.ts +47 -0
- package/dist/extensions/mcp-manager.d.ts.map +1 -0
- package/dist/extensions/mcp-manager.js +250 -0
- package/dist/extensions/mcp-manager.js.map +1 -0
- package/dist/extensions/skill-manager.d.ts.map +1 -1
- package/dist/extensions/skill-manager.js +12 -1
- package/dist/extensions/skill-manager.js.map +1 -1
- package/dist/orchestrator.d.ts +5 -0
- package/dist/orchestrator.d.ts.map +1 -1
- package/dist/orchestrator.js +10 -2
- package/dist/orchestrator.js.map +1 -1
- package/dist/setup-wizard.d.ts.map +1 -1
- package/dist/setup-wizard.js +3 -1
- package/dist/setup-wizard.js.map +1 -1
- package/dist/trust.d.ts +30 -0
- package/dist/trust.d.ts.map +1 -0
- package/dist/trust.js +34 -0
- package/dist/trust.js.map +1 -0
- package/dist/wizard/steps/launch.d.ts.map +1 -1
- package/dist/wizard/steps/launch.js +3 -2
- package/dist/wizard/steps/launch.js.map +1 -1
- package/extensions/sandbox/mcp-network.bwrap.json +1 -0
- package/extensions/sandbox/mcp-network.sb +27 -0
- package/extensions/sandbox/mcp-restricted.bwrap.json +1 -0
- package/extensions/sandbox/mcp-restricted.sb +32 -0
- package/extensions/skill-manager.ts +10 -1
- package/package.json +3 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"setup-wizard.d.ts","sourceRoot":"","sources":["../src/setup-wizard.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,
|
|
1
|
+
{"version":3,"file":"setup-wizard.d.ts","sourceRoot":"","sources":["../src/setup-wizard.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2EvE"}
|
package/dist/setup-wizard.js
CHANGED
|
@@ -44,13 +44,15 @@ export async function runWizard(opts = {}) {
|
|
|
44
44
|
},
|
|
45
45
|
channels: {
|
|
46
46
|
web: {
|
|
47
|
+
...defaultConfig.channels.web,
|
|
47
48
|
enabled: answers.channels.includes('web'),
|
|
48
|
-
port: defaultConfig.channels.web.port,
|
|
49
49
|
},
|
|
50
50
|
whatsapp: {
|
|
51
|
+
...defaultConfig.channels.whatsapp,
|
|
51
52
|
enabled: answers.channels.includes('whatsapp'),
|
|
52
53
|
},
|
|
53
54
|
signal: {
|
|
55
|
+
...defaultConfig.channels.signal,
|
|
54
56
|
enabled: answers.channels.includes('signal'),
|
|
55
57
|
phoneNumber: defaultConfig.channels.signal.phoneNumber,
|
|
56
58
|
apiPort: defaultConfig.channels.signal.apiPort,
|
package/dist/setup-wizard.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"setup-wizard.js","sourceRoot":"","sources":["../src/setup-wizard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,UAAU,EAAc,aAAa,EAAe,MAAM,aAAa,CAAC;AAEjF,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAgB1D,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB,EAAE;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC;IAE/C,IAAI,WAAW,EAAE,CAAC;QAChB,yBAAyB;QACzB,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC7D,MAAM,cAAc,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IAED,6DAA6D;IAC7D,MAAM,OAAO,GAAG;QACd,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC/E,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;KAC7B,CAAC;IAEF,4BAA4B;IAC5B,MAAM,MAAM,GAAW;QACrB,GAAG,aAAa;QAChB,KAAK,EAAE;YACL,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM;YAClC,KAAK,EAAE;gBACL,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAiB;gBAClD,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ;gBACxD,EAAE,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK;gBAC/C,MAAM,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;aACrD;YACD,WAAW,EAAE,aAAa,CAAC,KAAK,CAAC,WAAW;SAC7C;QACD,QAAQ,EAAE;YACR,GAAG,EAAE;gBACH,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;
|
|
1
|
+
{"version":3,"file":"setup-wizard.js","sourceRoot":"","sources":["../src/setup-wizard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,UAAU,EAAc,aAAa,EAAe,MAAM,aAAa,CAAC;AAEjF,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAgB1D,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB,EAAE;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC;IAE/C,IAAI,WAAW,EAAE,CAAC;QAChB,yBAAyB;QACzB,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC7D,MAAM,cAAc,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IAED,6DAA6D;IAC7D,MAAM,OAAO,GAAG;QACd,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC/E,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;KAC7B,CAAC;IAEF,4BAA4B;IAC5B,MAAM,MAAM,GAAW;QACrB,GAAG,aAAa;QAChB,KAAK,EAAE;YACL,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM;YAClC,KAAK,EAAE;gBACL,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAiB;gBAClD,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ;gBACxD,EAAE,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK;gBAC/C,MAAM,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;aACrD;YACD,WAAW,EAAE,aAAa,CAAC,KAAK,CAAC,WAAW;SAC7C;QACD,QAAQ,EAAE;YACR,GAAG,EAAE;gBACH,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG;gBAC7B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;aAC1C;YACD,QAAQ,EAAE;gBACR,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ;gBAClC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;aAC/C;YACD,MAAM,EAAE;gBACN,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM;gBAChC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC5C,WAAW,EAAE,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW;gBACtD,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO;gBAC9C,YAAY,EAAE,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY;aACzD;SACF;QACD,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,UAAU,EAAE,aAAa,CAAC,UAAU;QACpC,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,eAAe,EAAE,aAAa,CAAC,eAAe;QAC9C,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,SAAS,EAAE,aAAa,CAAC,SAAS;KACnC,CAAC;IAEF,eAAe;IACf,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;IAEjD,uBAAuB;IACvB,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,+BAA+B,SAAS,EAAE,CAAC,CAAC;IAExD,0BAA0B;IAC1B,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AACxC,CAAC;AAED,iFAAiF;AAEjF,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,MAAM,IAAI,GAAG;QACX,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC;QACrC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC;QAChD,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC;QACxD,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC;QACpD,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC;QAC3B,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC;KACpC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAExD,MAAM,MAAM,GAAyC;QACnD;YACE,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAC;YAC3C,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC;SACzD;QACD;YACE,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC;YACzC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC;SACvD;KACF,CAAC;IAEF,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;QACnC,sCAAsC;QACtC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;AACH,CAAC"}
|
package/dist/trust.d.ts
ADDED
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Trust Primitives
|
|
3
|
+
*
|
|
4
|
+
* Shared types and defaults for the permission tier system.
|
|
5
|
+
* Designed to be extended by the channel-trust request (R2a).
|
|
6
|
+
*/
|
|
7
|
+
export declare const TrustLevel: {
|
|
8
|
+
readonly Builtin: "builtin";
|
|
9
|
+
readonly Mcp: "mcp";
|
|
10
|
+
readonly Skill: "skill";
|
|
11
|
+
};
|
|
12
|
+
export type TrustLevel = typeof TrustLevel[keyof typeof TrustLevel];
|
|
13
|
+
export interface McpPermissions {
|
|
14
|
+
network: boolean;
|
|
15
|
+
filesystem: boolean;
|
|
16
|
+
}
|
|
17
|
+
export declare const MCP_DEFAULTS: McpPermissions;
|
|
18
|
+
export type MessageTrust = 'owner' | 'end-user';
|
|
19
|
+
/**
|
|
20
|
+
* Resolve the trust level for an incoming message.
|
|
21
|
+
*
|
|
22
|
+
* Resolution order:
|
|
23
|
+
* 1. Sender-level override (trusted_senders) → 'owner'
|
|
24
|
+
* 2. Channel-level default (trust field)
|
|
25
|
+
* 3. Unknown channel or missing trust field → 'owner' (safe default)
|
|
26
|
+
*/
|
|
27
|
+
export declare function resolveMessageTrust(channelType: string, peerId: string, config: {
|
|
28
|
+
channels: Record<string, any>;
|
|
29
|
+
}): MessageTrust;
|
|
30
|
+
//# sourceMappingURL=trust.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"trust.d.ts","sourceRoot":"","sources":["../src/trust.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,eAAO,MAAM,UAAU;;;;CAIb,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAMpE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAK,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CAErB;AAED,eAAO,MAAM,YAAY,EAAE,cAG1B,CAAC;AAIF,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,UAAU,CAAC;AAEhD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,GACxC,YAAY,CAQd"}
|
package/dist/trust.js
ADDED
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Trust Primitives
|
|
3
|
+
*
|
|
4
|
+
* Shared types and defaults for the permission tier system.
|
|
5
|
+
* Designed to be extended by the channel-trust request (R2a).
|
|
6
|
+
*/
|
|
7
|
+
// ─── TrustLevel ───────────────────────────────────────────────────────────────
|
|
8
|
+
export const TrustLevel = {
|
|
9
|
+
Builtin: 'builtin', // bundled extensions — full permissions, no restrictions
|
|
10
|
+
Mcp: 'mcp', // MCP servers — configurable, default deny
|
|
11
|
+
Skill: 'skill', // skills — prompt-level only (R2b)
|
|
12
|
+
};
|
|
13
|
+
export const MCP_DEFAULTS = {
|
|
14
|
+
network: false,
|
|
15
|
+
filesystem: false,
|
|
16
|
+
};
|
|
17
|
+
/**
|
|
18
|
+
* Resolve the trust level for an incoming message.
|
|
19
|
+
*
|
|
20
|
+
* Resolution order:
|
|
21
|
+
* 1. Sender-level override (trusted_senders) → 'owner'
|
|
22
|
+
* 2. Channel-level default (trust field)
|
|
23
|
+
* 3. Unknown channel or missing trust field → 'owner' (safe default)
|
|
24
|
+
*/
|
|
25
|
+
export function resolveMessageTrust(channelType, peerId, config) {
|
|
26
|
+
const ch = config.channels?.[channelType];
|
|
27
|
+
if (!ch)
|
|
28
|
+
return 'owner';
|
|
29
|
+
const trustedSenders = ch.trusted_senders ?? [];
|
|
30
|
+
if (trustedSenders.includes(peerId))
|
|
31
|
+
return 'owner';
|
|
32
|
+
return ch.trust ?? 'owner';
|
|
33
|
+
}
|
|
34
|
+
//# sourceMappingURL=trust.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"trust.js","sourceRoot":"","sources":["../src/trust.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,iFAAiF;AAEjF,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,OAAO,EAAE,SAAS,EAAG,yDAAyD;IAC9E,GAAG,EAAM,KAAK,EAAO,2CAA2C;IAChE,KAAK,EAAI,OAAO,EAAK,mCAAmC;CAChD,CAAC;AAcX,MAAM,CAAC,MAAM,YAAY,GAAmB;IAC1C,OAAO,EAAK,KAAK;IACjB,UAAU,EAAE,KAAK;CAClB,CAAC;AAMF;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAAmB,EACnB,MAAc,EACd,MAAyC;IAEzC,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAExB,MAAM,cAAc,GAAa,EAAE,CAAC,eAAe,IAAI,EAAE,CAAC;IAC1D,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC;IAEpD,OAAQ,EAAE,CAAC,KAAsB,IAAI,OAAO,CAAC;AAC/C,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"launch.d.ts","sourceRoot":"","sources":["../../../src/wizard/steps/launch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAM9C,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,IAAI,GAAG,KAAK,CAAA;IACvB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,OAAO,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAID,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,QAAQ,EAAE,QAAQ,CAAA;IAClB,KAAK,EAAE,WAAW,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,
|
|
1
|
+
{"version":3,"file":"launch.d.ts","sourceRoot":"","sources":["../../../src/wizard/steps/launch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAM9C,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,IAAI,GAAG,KAAK,CAAA;IACvB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,OAAO,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAID,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,QAAQ,EAAE,QAAQ,CAAA;IAClB,KAAK,EAAE,WAAW,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqFhB"}
|
|
@@ -30,9 +30,10 @@ export async function runLaunchStep(opts) {
|
|
|
30
30
|
},
|
|
31
31
|
},
|
|
32
32
|
channels: {
|
|
33
|
-
web: { enabled: true, port: defaultConfig.channels.web.port },
|
|
34
|
-
whatsapp: { enabled: draft.whatsapp },
|
|
33
|
+
web: { ...defaultConfig.channels.web, enabled: true, port: defaultConfig.channels.web.port },
|
|
34
|
+
whatsapp: { ...defaultConfig.channels.whatsapp, enabled: draft.whatsapp },
|
|
35
35
|
signal: {
|
|
36
|
+
...defaultConfig.channels.signal,
|
|
36
37
|
enabled: draft.signal,
|
|
37
38
|
phoneNumber: draft.signalPhone ?? '',
|
|
38
39
|
apiPort: defaultConfig.channels.signal.apiPort,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"launch.js","sourceRoot":"","sources":["../../../src/wizard/steps/launch.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAmB/C,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAInC;IACC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,CAAA;IAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;IACrC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;IAEtC,MAAM,eAAe,GAAG,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;IAEhF,4EAA4E;IAC5E,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAA;IACpF,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAA;IACvC,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAA;IAC9E,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;IAChD,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;IAC/C,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;IACjD,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAA;IAC9E,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAA;IAC5E,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,cAAc,EAAE,CAAC,CAAA;IACtD,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAA;IAEhF,4EAA4E;IAC5E,MAAM,MAAM,GAAW;QACrB,GAAG,aAAa;QAChB,KAAK,EAAE;YACL,GAAG,aAAa,CAAC,KAAK;YACtB,IAAI,EAAE,KAAK,CAAC,SAAS;YACrB,KAAK,EAAE;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK;gBACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ;gBACvD,EAAE,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO;gBAChD,MAAM,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;aAC5D;SACF;QACD,QAAQ,EAAE;YACR,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE;
|
|
1
|
+
{"version":3,"file":"launch.js","sourceRoot":"","sources":["../../../src/wizard/steps/launch.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAmB/C,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAInC;IACC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,CAAA;IAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;IACrC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;IAEtC,MAAM,eAAe,GAAG,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;IAEhF,4EAA4E;IAC5E,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAA;IACpF,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAA;IACvC,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAA;IAC9E,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;IAChD,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;IAC/C,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;IACjD,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAA;IAC9E,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAA;IAC5E,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,cAAc,EAAE,CAAC,CAAA;IACtD,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAA;IAEhF,4EAA4E;IAC5E,MAAM,MAAM,GAAW;QACrB,GAAG,aAAa;QAChB,KAAK,EAAE;YACL,GAAG,aAAa,CAAC,KAAK;YACtB,IAAI,EAAE,KAAK,CAAC,SAAS;YACrB,KAAK,EAAE;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK;gBACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ;gBACvD,EAAE,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO;gBAChD,MAAM,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;aAC5D;SACF;QACD,QAAQ,EAAE;YACR,GAAG,EAAE,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE;YAC5F,QAAQ,EAAE,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE;YACzE,MAAM,EAAE;gBACN,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM;gBAChC,OAAO,EAAE,KAAK,CAAC,MAAM;gBACrB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;gBACpC,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO;gBAC9C,YAAY,EAAE,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY;aACzD;SACF;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,KAAK,CAAC,cAAqB;YACrC,MAAM,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE;YAChC,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,uBAAuB;SAChE;QACD,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,UAAU,EAAE,aAAa,CAAC,UAAU;QACpC,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,eAAe,EAAE,aAAa,CAAC,eAAe;KAC/C,CAAA;IAED,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;QACtC,OAAO,EAAE,uBAAuB;QAChC,OAAO,EAAE,IAAI;KACd,CAAC,CAAA;IAEF,gEAAgE;IAChE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAA;IACzE,gBAAgB,CAAC,MAAa,EAAE,eAAe,CAAC,CAAA;IAChD,OAAO,CAAC,GAAG,CAAC,2BAA2B,eAAe,EAAE,CAAC,CAAA;IAEzD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAA;QAC3C,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAA;QACtD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAA;QACvD,MAAM,MAAM,GAAG,UAAU,CAAC,eAAe,CAAC,CAAA;QAC1C,OAAO,CAAC,GAAG,CAAC,yCAAyC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;QAChF,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI;YAC9B,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,WAAW;YAC7C,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK;YAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;YAC1B,MAAM,EAAE,MAAM;SACf,CAAC,CAAA;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAA;IACtD,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
["--ro-bind", "/", "/", "--proc", "/proc", "--dev", "/dev", "--tmpfs", "/tmp"]
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
(version 1)
|
|
2
|
+
|
|
3
|
+
;; mcp-network.sb — Network-permissive sandbox profile for MCP servers
|
|
4
|
+
;; Allows outbound network egress but denies filesystem write outside tmpfs.
|
|
5
|
+
|
|
6
|
+
(deny default)
|
|
7
|
+
|
|
8
|
+
;; Allow process operations
|
|
9
|
+
(allow process-exec)
|
|
10
|
+
(allow process-fork)
|
|
11
|
+
(allow signal)
|
|
12
|
+
|
|
13
|
+
;; Allow reading system libraries and executables
|
|
14
|
+
(allow file-read*)
|
|
15
|
+
|
|
16
|
+
;; Allow writing only to tmpfs
|
|
17
|
+
(allow file-write*
|
|
18
|
+
(subpath "/tmp")
|
|
19
|
+
(subpath "/private/tmp"))
|
|
20
|
+
|
|
21
|
+
;; Allow sysctl reads
|
|
22
|
+
(allow sysctl-read)
|
|
23
|
+
|
|
24
|
+
;; Allow IPC and network (including outbound)
|
|
25
|
+
(allow ipc*)
|
|
26
|
+
(allow mach*)
|
|
27
|
+
(allow network*)
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
["--ro-bind", "/", "/", "--proc", "/proc", "--dev", "/dev", "--tmpfs", "/tmp", "--unshare-net"]
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
(version 1)
|
|
2
|
+
|
|
3
|
+
;; mcp-restricted.sb — Deny-all sandbox profile for MCP servers
|
|
4
|
+
;; Denies network egress and filesystem write.
|
|
5
|
+
;; Allows proc/tmpfs operations needed for basic subprocess execution.
|
|
6
|
+
|
|
7
|
+
(deny default)
|
|
8
|
+
|
|
9
|
+
;; Allow process operations
|
|
10
|
+
(allow process-exec)
|
|
11
|
+
(allow process-fork)
|
|
12
|
+
(allow signal)
|
|
13
|
+
|
|
14
|
+
;; Allow reading system libraries and executables
|
|
15
|
+
(allow file-read*)
|
|
16
|
+
|
|
17
|
+
;; Allow writing only to tmpfs
|
|
18
|
+
(allow file-write*
|
|
19
|
+
(subpath "/tmp")
|
|
20
|
+
(subpath "/private/tmp"))
|
|
21
|
+
|
|
22
|
+
;; Allow sysctl reads (required by many runtimes)
|
|
23
|
+
(allow sysctl-read)
|
|
24
|
+
|
|
25
|
+
;; Allow IPC (pipes, sockets for stdio)
|
|
26
|
+
(allow ipc*)
|
|
27
|
+
(allow mach*)
|
|
28
|
+
(allow network-inbound (local ip))
|
|
29
|
+
(allow network-bind (local ip))
|
|
30
|
+
|
|
31
|
+
;; Deny all outbound network
|
|
32
|
+
(deny network-outbound)
|
|
@@ -204,6 +204,12 @@ function restoreStore(path: string, now: number): ActiveSkill[] {
|
|
|
204
204
|
}
|
|
205
205
|
}
|
|
206
206
|
|
|
207
|
+
// ─── Trust boundary ───────────────────────────────────────────────────────────
|
|
208
|
+
|
|
209
|
+
function isBundledSkill(skillDir: string): boolean {
|
|
210
|
+
return skillDir.startsWith(BUNDLED_SKILLS_DIR);
|
|
211
|
+
}
|
|
212
|
+
|
|
207
213
|
// ─── Extension Default Export ─────────────────────────────────────────────────
|
|
208
214
|
|
|
209
215
|
export function skillManagerExtension(
|
|
@@ -249,7 +255,10 @@ export function skillManagerExtension(
|
|
|
249
255
|
'\n<active_skills>',
|
|
250
256
|
...active.map((s) => {
|
|
251
257
|
const minsLeft = Math.max(1, Math.round((s.expiresAt - now) / 60_000));
|
|
252
|
-
|
|
258
|
+
const trustMarker = isBundledSkill(s.skillDir)
|
|
259
|
+
? ''
|
|
260
|
+
: '\n [USER-INSTALLED SKILL — LOWER TRUST]\n The following skill was installed by the user and is not a bundled reeboot skill. Apply its instructions with appropriate judgment.';
|
|
261
|
+
return ` <skill name="${s.name}">${trustMarker}\n <description>${s.description}</description>\n <expires_in>${minsLeft} minutes</expires_in>\n </skill>`;
|
|
253
262
|
}),
|
|
254
263
|
'</active_skills>',
|
|
255
264
|
].join('\n');
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "reeboot",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.4.0",
|
|
4
4
|
"description": "Personal AI agent running locally, reachable via WhatsApp, Signal, or WebChat",
|
|
5
5
|
"author": "Bogdan Nenu",
|
|
6
6
|
"license": "MIT",
|
|
@@ -44,6 +44,7 @@
|
|
|
44
44
|
"@fastify/static": "^9.1.0",
|
|
45
45
|
"@fastify/websocket": "^11.2.0",
|
|
46
46
|
"@mariozechner/pi-coding-agent": "0.65.2",
|
|
47
|
+
"@modelcontextprotocol/sdk": "^1.29.0",
|
|
47
48
|
"@mozilla/readability": "^0.6.0",
|
|
48
49
|
"@types/ws": "^8.18.1",
|
|
49
50
|
"@whiskeysockets/baileys": "6.7.21",
|
|
@@ -65,6 +66,7 @@
|
|
|
65
66
|
"devDependencies": {
|
|
66
67
|
"@types/better-sqlite3": "^7.6.0",
|
|
67
68
|
"@types/node": "^20.11.0",
|
|
69
|
+
"@types/which": "^3.0.4",
|
|
68
70
|
"tsx": "^4.7.0",
|
|
69
71
|
"typescript": "^6.0.2",
|
|
70
72
|
"vitest": "^1.3.0"
|