shennian 0.4.2 → 0.4.4

package/dist/publish-build-manifest.json

@@ -81,8 +81,8 @@
     },
     {
       "file": "src/agents/detect.js",
-      "beforeBytes": 3055,
-      "afterBytes": 1544
+      "beforeBytes": 3366,
+      "afterBytes": 1504
     },
     {
       "file": "src/agents/external-channel-instructions.js",
@@ -166,8 +166,8 @@
     },
     {
       "file": "src/agents/pi-managed-extension.js",
-      "beforeBytes": 8913,
-      "afterBytes": 8208
+      "beforeBytes": 10216,
+      "afterBytes": 9261
     },
     {
       "file": "src/agents/pi-managed-model-broker.js",

package/dist/src/agents/detect.d.ts

@@ -9,5 +9,5 @@ export type DetectedAgent = {
     executableFingerprint?: string;
     models?: ModelInfo[];
 };
-export declare function isPiCodingAgentRuntimeCompatible(piVersion: string | undefined, nodeVersion?: string): boolean;
+export declare function isPiCodingAgentRuntimeCompatible(piVersion: string | undefined): boolean;
 export declare function detectAgents(): DetectedAgent[];

package/dist/src/agents/detect.js

@@ -1 +1 @@
-import{AVAILABLE_BUILTIN_AGENT_TYPES as m}from"@shennian/wire";import{loadConfig as c}from"../config/index.js";import{getBuiltinAgentVersion as l,resolveBuiltinCommand as u}from"./command-spec.js";import{registerCustomRuntimeSecurity as a,resolveCustomRuntimeExecutableFingerprint as f}from"./custom-managed-runtime.js";import{resolveManagedAgentExecutableIdentity as d}from"../security/managed-agent-executable.js";const p=m.filter(t=>t!=="pi");function i(t,r){const o=t?.match(/(?:^|v)(\d+)\.(\d+)\.(\d+)/);if(!o)return!1;const e=o.slice(1,4).map(Number);for(let n=0;n<r.length;n+=1)if(e[n]!==r[n])return e[n]>r[n];return!0}function g(t,r=process.versions.node){return i(r,[22,19,0])&&i(t,[0,85,0])}function A(t){const r=t.models?.length?t.models:t.model?[t.model]:[],o=t.defaultModel??t.model;return r.map(e=>({id:e,name:e,isDefault:e===o}))}function y(){const t=[];for(const o of p){const e=u(o);if(!e)continue;const n=l(o,e);if(o==="pi-coding-agent"&&!g(n))continue;const s=d(e);t.push({type:o,command:e.command,args:e.args,version:n,runtimePlatform:s.platform,runtimeIsWsl:s.isWsl,executableFingerprint:s.executableFingerprint})}const r=c();for(const[o,e]of Object.entries(r.customAgents??{})){const n=`custom:${o}`;a(n,e),t.push({type:n,command:e.command,args:[],version:e.caps.version,runtimePlatform:process.platform,runtimeIsWsl:process.platform==="linux"&&!!(process.env.WSL_DISTRO_NAME||process.env.WSL_INTEROP),executableFingerprint:f(e),models:A(e.caps)})}return t}export{y as detectAgents,g as isPiCodingAgentRuntimeCompatible};
+import{AVAILABLE_BUILTIN_AGENT_TYPES as i}from"@shennian/wire";import{loadConfig as m}from"../config/index.js";import{getBuiltinAgentVersion as c,resolveBuiltinCommand as l}from"./command-spec.js";import{registerCustomRuntimeSecurity as u,resolveCustomRuntimeExecutableFingerprint as a}from"./custom-managed-runtime.js";import{resolveManagedAgentExecutableIdentity as f}from"../security/managed-agent-executable.js";const d=i.filter(t=>t!=="pi");function p(t,r){const o=t?.match(/(?:^|v)(\d+)\.(\d+)\.(\d+)/);if(!o)return!1;const e=o.slice(1,4).map(Number);for(let n=0;n<r.length;n+=1)if(e[n]!==r[n])return e[n]>r[n];return!0}function g(t){return p(t,[0,85,0])}function A(t){const r=t.models?.length?t.models:t.model?[t.model]:[],o=t.defaultModel??t.model;return r.map(e=>({id:e,name:e,isDefault:e===o}))}function y(){const t=[];for(const o of d){const e=l(o);if(!e)continue;const n=c(o,e);if(o==="pi-coding-agent"&&!g(n))continue;const s=f(e);t.push({type:o,command:e.command,args:e.args,version:n,runtimePlatform:s.platform,runtimeIsWsl:s.isWsl,executableFingerprint:s.executableFingerprint})}const r=m();for(const[o,e]of Object.entries(r.customAgents??{})){const n=`custom:${o}`;u(n,e),t.push({type:n,command:e.command,args:[],version:e.caps.version,runtimePlatform:process.platform,runtimeIsWsl:process.platform==="linux"&&!!(process.env.WSL_DISTRO_NAME||process.env.WSL_INTEROP),executableFingerprint:a(e),models:A(e.caps)})}return t}export{y as detectAgents,g as isPiCodingAgentRuntimeCompatible};

package/dist/src/agents/pi-managed-extension.js

@@ -1,4 +1,4 @@
-import t from"node:fs";import n from"node:path";function p(e){const r=n.resolve(e.policy.adapterPolicy.workDir),i=e.policy.adapterPolicy.fileAccess!=="workspace-read",o=e.allowRoomControl,a=e.allowManagerControl,s=e.allowHostShell,c=`
+import t from"node:fs";import n from"node:path";function p(e){const r=t.realpathSync(n.resolve(e.policy.adapterPolicy.workDir)),i=e.policy.adapterPolicy.fileAccess!=="workspace-read",a=e.allowRoomControl,s=e.allowManagerControl,o=e.allowHostShell,c=`
 import fs from 'node:fs';
 import path from 'node:path';
 import { spawn } from 'node:child_process';
@@ -6,25 +6,33 @@ import { Type } from 'typebox';
 
 const ROOT = ${JSON.stringify(r)};
 const WRITABLE = ${JSON.stringify(i)};
-const ALLOW_ROOM = ${JSON.stringify(o)};
-const ALLOW_MANAGER = ${JSON.stringify(a)};
-const ALLOW_HOST_SHELL = ${JSON.stringify(s)};
+const ALLOW_ROOM = ${JSON.stringify(a)};
+const ALLOW_MANAGER = ${JSON.stringify(s)};
+const ALLOW_HOST_SHELL = ${JSON.stringify(o)};
 const MAX_READ = 1024 * 1024;
 const MAX_WRITE = 4 * 1024 * 1024;
-const SENSITIVE = /(^|[\\/])(\\.env(?:\\.|$)|\\.ssh|\\.aws|\\.config|\\.shennian|Library[\\/]Keychains|AppData[\\/]Roaming[\\/]Microsoft[\\/]Credentials)([\\/]|$)/i;
+const SENSITIVE_NAMES = new Set(['.ssh', '.aws', '.config', '.shennian']);
+function sensitive(candidate) {
+  const parts = String(candidate).split(/[\\\\/]+/).filter(Boolean).map(part => part.toLowerCase());
+  if (parts.some(part => part === '.env' || part.startsWith('.env.') || SENSITIVE_NAMES.has(part))) return true;
+  const joined = '/' + parts.join('/') + '/';
+  return joined.includes('/library/keychains/') || joined.includes('/appdata/roaming/microsoft/credentials/');
+}
 
 function inside(root, candidate) {
   const relative = path.relative(root, candidate);
   return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
 }
 function rejectSensitive(candidate) {
-  if (SENSITIVE.test(candidate)) throw new Error('managed_path_sensitive');
+  if (sensitive(candidate)) throw new Error('managed_path_sensitive');
 }
 function resolveExisting(raw) {
   const candidate = path.resolve(ROOT, String(raw || '.'));
   rejectSensitive(candidate);
   const real = fs.realpathSync(candidate);
   if (!inside(ROOT, real)) throw new Error('managed_path_outside_workspace');
+  const stat = fs.lstatSync(real);
+  if (stat.isFile() && stat.nlink > 1) throw new Error('managed_path_link_rejected');
   return real;
 }
 function resolveWrite(raw) {
@@ -55,6 +63,20 @@ function tokenize(command) {
   if (current) result.push(current);
   return result;
 }
+function commandAllowed(argv) {
+  if (argv[0] !== 'shennian') return false;
+  if (ALLOW_ROOM && argv[1] === 'room') {
+    return ['status', 'read', 'send', 'pause'].includes(argv[2]) ||
+      (argv[2] === 'attachment' && argv[3] === 'get');
+  }
+  if (ALLOW_MANAGER && argv[1] === 'manager') {
+    if (argv[2] === 'memory') return argv[3] === 'path';
+    if (argv[2] !== 'sessions') return false;
+    if (['list', 'start', 'send', 'stop', 'read'].includes(argv[3])) return true;
+    return argv[3] === 'queue' && ['list', 'edit', 'delete'].includes(argv[4]);
+  }
+  return false;
+}
 
 export default function (pi) {
   pi.registerTool({ name: 'read', label: 'Read', description: 'Read a file inside the authorized workspace.', parameters: Type.Object({ path: Type.String(), offset: Type.Optional(Type.Number()), limit: Type.Optional(Type.Number()) }), async execute(_id, p) {
@@ -63,16 +85,16 @@ export default function (pi) {
     return textResult(lines.slice(offset - 1, offset - 1 + limit).join('\\n'));
   }});
   pi.registerTool({ name: 'ls', label: 'List', description: 'List a directory inside the authorized workspace.', parameters: Type.Object({ path: Type.Optional(Type.String()) }), async execute(_id, p) {
-    const dir = resolveExisting(p.path || '.'); return textResult(fs.readdirSync(dir, { withFileTypes: true }).slice(0, 1000).map(e => e.name + (e.isDirectory() ? '/' : '')).join('\\n'));
+    const dir = resolveExisting(p.path || '.'); return textResult(fs.readdirSync(dir, { withFileTypes: true }).filter(e => !sensitive(path.join(dir, e.name))).slice(0, 1000).map(e => e.name + (e.isDirectory() ? '/' : '')).join('\\n'));
   }});
   pi.registerTool({ name: 'find', label: 'Find', description: 'Find file names inside the authorized workspace.', parameters: Type.Object({ pattern: Type.String(), path: Type.Optional(Type.String()) }), async execute(_id, p) {
     const base = resolveExisting(p.path || '.'); const needle = String(p.pattern).toLowerCase(); const out = []; const queue = [base];
-    while (queue.length && out.length < 1000) { const dir = queue.shift(); for (const e of fs.readdirSync(dir, { withFileTypes: true })) { const full = path.join(dir, e.name); if (SENSITIVE.test(full) || e.isSymbolicLink()) continue; if (e.name.toLowerCase().includes(needle)) out.push(path.relative(ROOT, full)); if (e.isDirectory()) queue.push(full); } }
+    while (queue.length && out.length < 1000) { const dir = queue.shift(); for (const e of fs.readdirSync(dir, { withFileTypes: true })) { const full = path.join(dir, e.name); if (sensitive(full) || e.isSymbolicLink()) continue; const stat = fs.lstatSync(full); if (stat.isFile() && stat.nlink > 1) continue; if (e.name.toLowerCase().includes(needle)) out.push(path.relative(ROOT, full)); if (e.isDirectory()) queue.push(full); } }
     return textResult(out.join('\\n'));
   }});
   pi.registerTool({ name: 'grep', label: 'Grep', description: 'Search text files inside the authorized workspace.', parameters: Type.Object({ pattern: Type.String(), path: Type.Optional(Type.String()) }), async execute(_id, p) {
     const base = resolveExisting(p.path || '.'); const regex = new RegExp(String(p.pattern), 'i'); const out = []; const queue = [base];
-    while (queue.length && out.length < 1000) { const next = queue.shift(); const stat = fs.statSync(next); if (stat.isDirectory()) { for (const e of fs.readdirSync(next, { withFileTypes: true })) { const full = path.join(next, e.name); if (!SENSITIVE.test(full) && !e.isSymbolicLink()) queue.push(full); } continue; } if (!stat.isFile() || stat.size > MAX_READ) continue; const lines = fs.readFileSync(next, 'utf8').split(/\\r?\\n/); lines.forEach((line, i) => { if (out.length < 1000 && regex.test(line)) out.push(path.relative(ROOT, next) + ':' + (i + 1) + ':' + line); }); }
+    while (queue.length && out.length < 1000) { const next = queue.shift(); const stat = fs.statSync(next); if (stat.isDirectory()) { for (const e of fs.readdirSync(next, { withFileTypes: true })) { const full = path.join(next, e.name); if (!sensitive(full) && !e.isSymbolicLink()) queue.push(full); } continue; } if (!stat.isFile() || stat.nlink > 1 || stat.size > MAX_READ) continue; const lines = fs.readFileSync(next, 'utf8').split(/\\r?\\n/); lines.forEach((line, i) => { if (out.length < 1000 && regex.test(line)) out.push(path.relative(ROOT, next) + ':' + (i + 1) + ':' + line); }); }
     return textResult(out.join('\\n'));
   }});
   pi.registerTool({ name: 'write', label: 'Write', description: 'Write a file inside the authorized workspace.', parameters: Type.Object({ path: Type.String(), content: Type.String() }), async execute(_id, p) {
@@ -82,7 +104,7 @@ export default function (pi) {
     const file = resolveWrite(p.path); const current = fs.readFileSync(file, 'utf8'); if (!p.oldText || !current.includes(p.oldText)) throw new Error('managed_edit_target_not_found'); const next = current.replace(p.oldText, p.newText); if (Buffer.byteLength(next, 'utf8') > MAX_WRITE) throw new Error('managed_write_size_rejected'); fs.writeFileSync(file, next, { encoding: 'utf8', flag: 'w' }); return textResult('Edited ' + path.relative(ROOT, file));
   }});
   pi.registerTool({ name: 'bash', label: 'Shennian control', description: 'Run only capability-scoped shennian room or manager commands. General shell commands are unavailable.', parameters: Type.Object({ command: Type.String() }), async execute(_id, p, signal) {
-    const argv = tokenize(p.command); const scoped = argv[0] === 'shennian' && ((ALLOW_ROOM && argv[1] === 'room') || (ALLOW_MANAGER && argv[1] === 'manager')); if (!ALLOW_HOST_SHELL && !scoped) throw new Error('managed_shell_command_rejected');
+    const argv = tokenize(p.command); if (!ALLOW_HOST_SHELL && !commandAllowed(argv)) throw new Error('managed_shell_command_rejected');
     return await new Promise((resolve, reject) => { const child = ALLOW_HOST_SHELL ? spawn(String(p.command), [], { cwd: ROOT, shell: true, env: process.env, windowsHide: true }) : spawn('shennian', argv.slice(1), { cwd: ROOT, shell: false, env: process.env, windowsHide: true }); let output = ''; const add = c => { output = (output + String(c)).slice(0, 256 * 1024); }; child.stdout.on('data', add); child.stderr.on('data', add); signal?.addEventListener('abort', () => child.kill('SIGTERM'), { once: true }); child.once('error', reject); child.once('close', code => resolve(textResult(output + '\\n[exit ' + code + ']'))); });
   }});
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shennian",
-  "version": "0.4.2",
+  "version": "0.4.4",
   "description": "Shennian — AI Agent Control Plane CLI",
   "type": "module",
   "bin": {