spacecode 2.5.1 → 2.5.2

package/dist/repl.mjs

@@ -5413,6 +5413,165 @@ var init_instructions_tool = __esm({
   }
 });
 
+// ../agent/src/import/trust.ts
+var TrustError, TrustStore;
+var init_trust = __esm({
+  "../agent/src/import/trust.ts"() {
+    "use strict";
+    TrustError = class extends Error {
+    };
+    TrustStore = class {
+      fs;
+      storePath;
+      hashFn;
+      // session decisions are kept in memory only: key = `${realPath}|${contentHash}`
+      sessionMap = /* @__PURE__ */ new Set();
+      constructor(deps) {
+        this.fs = deps.fs;
+        this.storePath = deps.path;
+        this.hashFn = deps.hash;
+      }
+      async repoStatus(repoPath, files) {
+        const realPath = await this.fs.realPath(repoPath);
+        const contentHash = this.computeContentHash(files);
+        const store = await this.readStore();
+        const entry = store.repos[realPath];
+        if (entry?.decision === "never") return "never";
+        if (this.sessionMap.has(`${realPath}|${contentHash}`)) return "session";
+        if (entry?.decision === "trusted" && entry.contentHash === contentHash) return "trusted";
+        return "untrusted";
+      }
+      async setRepo(repoPath, files, decision) {
+        const realPath = await this.fs.realPath(repoPath);
+        const contentHash = this.computeContentHash(files);
+        if (decision === "session") {
+          this.sessionMap.add(`${realPath}|${contentHash}`);
+          return;
+        }
+        await this.writeStore({ repos: { [realPath]: { decision, contentHash } }, stdio: {} });
+      }
+      async stdioStatus(def) {
+        const store = await this.readStore();
+        return store.stdio[this.computeStdioHash(def)] ? "approved" : "unapproved";
+      }
+      async approveStdio(def) {
+        await this.writeStore({ repos: {}, stdio: { [this.computeStdioHash(def)]: true } });
+      }
+      computeContentHash(files) {
+        const sorted = {};
+        for (const key of Object.keys(files).sort()) sorted[key] = files[key];
+        return this.hashFn(JSON.stringify(sorted));
+      }
+      computeStdioHash(def) {
+        return this.hashFn(JSON.stringify([def.command, def.args, [...def.envNames].sort()]));
+      }
+      async readStore() {
+        const text = await this.fs.readText(this.storePath);
+        if (text === null) return { version: 1, repos: {}, stdio: {} };
+        let parsed;
+        try {
+          parsed = JSON.parse(text);
+        } catch (e) {
+          throw new TrustError(`Failed to parse trust store at ${this.storePath}: ${String(e)}`);
+        }
+        if (typeof parsed !== "object" || parsed === null) {
+          throw new TrustError(`Malformed trust store at ${this.storePath}`);
+        }
+        const obj = parsed;
+        if (obj.version !== 1) {
+          throw new TrustError(`Unsupported trust store version at ${this.storePath}`);
+        }
+        const repos = obj.repos ?? {};
+        const stdio = obj.stdio ?? {};
+        if (typeof repos !== "object" || repos === null) {
+          throw new TrustError(`Malformed repos section in trust store at ${this.storePath}`);
+        }
+        if (typeof stdio !== "object" || stdio === null) {
+          throw new TrustError(`Malformed stdio section in trust store at ${this.storePath}`);
+        }
+        return { version: 1, repos, stdio };
+      }
+      /** Re-reads immediately before the write and merges, so concurrent writers keep each other's entries. */
+      async writeStore(delta) {
+        const current = await this.readStore();
+        const repos = { ...current.repos };
+        for (const [key, next] of Object.entries(delta.repos)) {
+          if (current.repos[key]?.decision === "never" && next.decision === "trusted") continue;
+          repos[key] = next;
+        }
+        const store = { version: 1, repos, stdio: { ...current.stdio, ...delta.stdio } };
+        await this.fs.writeTextAtomic(this.storePath, JSON.stringify(store, null, 2));
+      }
+    };
+  }
+});
+
+// ../agent/src/import/imports-config.ts
+function allOffConfig() {
+  return {
+    categories: {
+      instructions: false,
+      memory: false,
+      permissions: false,
+      commands: false,
+      mcp: false,
+      skills: false,
+      agents: false
+    },
+    models: {}
+  };
+}
+function isPlainObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseImportsConfig(text, path12) {
+  if (text === null) return { config: allOffConfig() };
+  const fail = (reason) => ({ config: allOffConfig(), error: `${path12}: ${reason}` });
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    return fail("invalid JSON");
+  }
+  if (!isPlainObject(parsed)) return fail("top-level JSON must be an object");
+  if (parsed.version !== 1) return fail(`unsupported version ${String(parsed.version)}`);
+  const config = allOffConfig();
+  if (parsed.categories !== void 0) {
+    if (!isPlainObject(parsed.categories)) return fail("categories must be an object");
+    for (const [key, value] of Object.entries(parsed.categories)) {
+      if (!IMPORT_CATEGORIES.includes(key)) return fail(`unknown category key "${key}"`);
+      if (typeof value !== "boolean") return fail(`category "${key}" must be a boolean`);
+      config.categories[key] = value;
+    }
+  }
+  if (parsed.models !== void 0) {
+    if (!isPlainObject(parsed.models)) return fail("models must be an object");
+    for (const key of MODEL_KEYS) {
+      const value = parsed.models[key];
+      if (value === void 0) continue;
+      if (typeof value !== "string" || value.trim() === "") return fail(`model "${key}" must be a non-empty string`);
+      config.models[key] = value;
+    }
+  }
+  return { config };
+}
+var IMPORT_CATEGORIES, MODEL_KEYS;
+var init_imports_config = __esm({
+  "../agent/src/import/imports-config.ts"() {
+    "use strict";
+    IMPORT_CATEGORIES = [
+      "instructions",
+      "memory",
+      "permissions",
+      "commands",
+      "mcp",
+      "skills",
+      "agents"
+    ];
+    MODEL_KEYS = ["main", "agent", "skill", "router"];
+  }
+});
+
 // ../agent/src/index.ts
 var init_src = __esm({
   "../agent/src/index.ts"() {
@@ -5450,13 +5609,15 @@ var init_src = __esm({
     init_coverage();
     init_adapt_plan();
     init_instructions_tool();
+    init_trust();
+    init_imports_config();
   }
 });
 
 // src/api-key.ts
 import { join } from "node:path";
 async function resolveApiKey(deps) {
-  const { env: env3, readFile: readFile5, homedir: homedir3 } = deps;
+  const { env: env3, readFile: readFile6, homedir: homedir3 } = deps;
   for (const name of ["SPACECODE_API_KEY", "ANTHROPIC_API_KEY"]) {
     const value = env3[name]?.trim();
     if (value) return value;
@@ -5465,7 +5626,7 @@ async function resolveApiKey(deps) {
   const file = join(dir, "auth.json");
   let raw;
   try {
-    raw = await readFile5(file);
+    raw = await readFile6(file);
   } catch (err) {
     if (err.code === "ENOENT") return null;
     throw new Error(`Cannot read ${file}: ${err instanceof Error ? err.message : String(err)}`);
@@ -5518,10 +5679,17 @@ function fileCache(deps) {
   };
 }
 async function prepareProfile(deps) {
+  let state;
+  try {
+    state = await prepareProfileUnsafe(deps);
+  } catch (err) {
+    state = EMPTY([`profile: not loaded (unexpected error: ${err instanceof Error ? err.message : String(err)})`]);
+  }
+  if (!deps.importGate) return state;
   try {
-    return await prepareProfileUnsafe(deps);
+    return { ...state, statusLines: [...state.statusLines, ...await deps.importGate()] };
   } catch (err) {
-    return EMPTY([`profile: not loaded (unexpected error: ${err instanceof Error ? err.message : String(err)})`]);
+    return { ...state, statusLines: [...state.statusLines, `imports: gate failed (${err instanceof Error ? err.message : String(err)}); nothing from repos loads`] };
   }
 }
 async function prepareProfileUnsafe(deps) {
@@ -32203,7 +32371,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes2, createHash } = __require("crypto");
+    var { randomBytes: randomBytes2, createHash: createHash2 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -32871,7 +33039,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash("sha1").update(key + GUID).digest("base64");
+        const digest = createHash2("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -33240,7 +33408,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter3 = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash } = __require("crypto");
+    var { createHash: createHash2 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -33547,7 +33715,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash("sha1").update(key + GUID).digest("base64");
+        const digest = createHash2("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -40921,7 +41089,7 @@ var require_core = __commonJS({
       return match && match.index === 0;
     }
     var BACKREF_RE = /\[(?:[^\\\]]|\\.)*\]|\(\??|\\([1-9][0-9]*)|\\./;
-    function join4(regexps, separator = "|") {
+    function join6(regexps, separator = "|") {
       let numCaptures = 0;
       return regexps.map((regex2) => {
         numCaptures += 1;
@@ -41225,7 +41393,7 @@ var require_core = __commonJS({
             this.exec = () => null;
           }
           const terminators = this.regexes.map((el) => el[1]);
-          this.matcherRe = langRe(join4(terminators), true);
+          this.matcherRe = langRe(join6(terminators), true);
           this.lastIndex = 0;
         }
         /** @param {string} s */
@@ -100870,9 +101038,76 @@ var init_node_mentions = __esm({
   }
 });
 
+// src/import-gate.ts
+import { createHash, randomUUID } from "node:crypto";
+import { chmod as chmod3, mkdir as mkdir3, readFile as readFile4, realpath as realpath2, rename as rename3, writeFile as writeFile3 } from "node:fs/promises";
+import { dirname as dirname3, join as join4 } from "node:path";
+async function readOrNull(path12) {
+  try {
+    return await readFile4(path12, "utf8");
+  } catch (err) {
+    if (err.code === "ENOENT") return null;
+    throw err;
+  }
+}
+async function writeTextAtomic(path12, text) {
+  await mkdir3(dirname3(path12), { recursive: true });
+  const tmp = `${path12}.${process.pid}.${randomUUID()}.tmp`;
+  await writeFile3(tmp, text, { mode: 384 });
+  await chmod3(tmp, 384);
+  await rename3(tmp, path12);
+}
+function nodeTrustFs() {
+  return { readText: readOrNull, writeTextAtomic, realPath: (p) => realpath2(p) };
+}
+function createNodeTrustStore(configDir) {
+  return new TrustStore({ fs: nodeTrustFs(), path: join4(configDir, "trust.json"), hash: sha256 });
+}
+async function importGateStatus(deps) {
+  const lines2 = [];
+  const configPath = join4(deps.configDir, "imports.json");
+  try {
+    const loaded = parseImportsConfig(await readOrNull(configPath), configPath);
+    if (loaded.error) lines2.push(`imports: ${loaded.error} (every category off)`);
+    else {
+      const on = IMPORT_CATEGORIES.filter((c) => loaded.config.categories[c]);
+      lines2.push(on.length ? `imports: on for ${on.join(", ")}` : "imports: every category off (default)");
+    }
+  } catch (err) {
+    lines2.push(`imports: not read (${err instanceof Error ? err.message : String(err)}); every category off`);
+  }
+  try {
+    const files = {};
+    for (const name of REPO_SOURCE_FILES) {
+      const text = await readOrNull(join4(deps.cwd, name));
+      if (text !== null) files[name] = text;
+    }
+    const found = Object.keys(files);
+    if (found.length === 0) return lines2;
+    const status = await createNodeTrustStore(deps.configDir).repoStatus(deps.cwd, files);
+    const names = found.join(", ");
+    if (status === "trusted" || status === "session") lines2.push(`repo sources: ${names} (trusted${status === "session" ? " for this session" : ""})`);
+    else if (status === "never") lines2.push(`repo sources: ${names} NOT loaded (marked never trust)`);
+    else lines2.push(`repo sources: ${names} NOT loaded (untrusted${deps.interactive ? "" : ", non-interactive run"})`);
+  } catch (err) {
+    lines2.push(`repo sources: NOT loaded (trust check failed: ${err instanceof Error ? err.message : String(err)})`);
+  }
+  return lines2;
+}
+var REPO_SOURCE_FILES, sha256;
+var init_import_gate = __esm({
+  "src/import-gate.ts"() {
+    "use strict";
+    init_src();
+    REPO_SOURCE_FILES = [".mcp.json", ".claude/settings.json", ".claude/settings.local.json", "CLAUDE.local.md"];
+    sha256 = (text) => createHash("sha256").update(text).digest("hex");
+  }
+});
+
 // src/useReplController.ts
-import { readFile as readFile4, writeFile as writeFile3, mkdir as mkdir3 } from "node:fs/promises";
+import { readFile as readFile5, writeFile as writeFile4, mkdir as mkdir4 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
+import { join as join5 } from "node:path";
 import { execFile as execFile3 } from "node:child_process";
 function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mentionsOpt, sessions, resumeLatest: resumeLatest2, onViewTurns, onViewResume, isEscOwned }) {
   const { exit } = use_app_default();
@@ -101165,7 +101400,7 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
           }
           setIsRunning(true);
           try {
-            const apiKey2 = await resolveApiKey({ env: process.env, readFile: (p) => readFile4(p, "utf-8"), homedir: homedir2 });
+            const apiKey2 = await resolveApiKey({ env: process.env, readFile: (p) => readFile5(p, "utf-8"), homedir: homedir2 });
             if (!apiKey2) {
               notice(MISSING_KEY_MESSAGE);
               return;
@@ -101187,7 +101422,7 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
         }
         case "model": {
           try {
-            const apiKey2 = await resolveApiKey({ env: process.env, readFile: (p) => readFile4(p, "utf-8"), homedir: homedir2 });
+            const apiKey2 = await resolveApiKey({ env: process.env, readFile: (p) => readFile5(p, "utf-8"), homedir: homedir2 });
             if (!apiKey2) {
               notice(MISSING_KEY_MESSAGE);
               return;
@@ -101229,7 +101464,7 @@ ${tools.map((t) => `  ${t.name}`).join("\n")}`);
     try {
       apiKey = await resolveApiKey({
         env: process.env,
-        readFile: (p) => readFile4(p, "utf-8"),
+        readFile: (p) => readFile5(p, "utf-8"),
         homedir: homedir2
       });
     } catch (err) {
@@ -101265,15 +101500,20 @@ ${tools.map((t) => `  ${t.name}`).join("\n")}`);
     try {
       profilePromiseRef.current ??= prepareProfile({
         env: process.env,
-        readFile: (p) => readFile4(p, "utf-8"),
-        writeFile: (p, d) => writeFile3(p, d, { encoding: "utf-8", mode: 384 }),
+        readFile: (p) => readFile5(p, "utf-8"),
+        writeFile: (p, d) => writeFile4(p, d, { encoding: "utf-8", mode: 384 }),
         mkdir: async (p) => {
-          await mkdir3(p, { recursive: true });
+          await mkdir4(p, { recursive: true });
         },
         homedir: homedir2,
         fetch,
         cwd: process.cwd(),
-        gitRoot: gitTopLevel
+        gitRoot: gitTopLevel,
+        importGate: () => importGateStatus({
+          configDir: process.env.SPACECODE_CONFIG_DIR?.trim() || join5(homedir2(), ".spacecode"),
+          cwd: process.cwd(),
+          interactive: Boolean(process.stdin.isTTY)
+        })
       });
       profileRef.current = await profilePromiseRef.current;
       const toolset = createToolset();
@@ -101400,6 +101640,7 @@ var init_useReplController = __esm({
     init_node_mentions();
     init_api_key();
     init_profile_runtime();
+    init_import_gate();
     init_slash_commands();
     init_useEventAccumulator();
     gitTopLevel = () => new Promise((resolve2) => {
@@ -101984,7 +102225,7 @@ function clearOnResize(stdout) {
 var import_jsx_runtime14 = __toESM(require_jsx_runtime(), 1);
 if (process.argv[2] === "import-claude") {
   const { runImportClaude: runImportClaude2 } = await Promise.resolve().then(() => (init_import_claude(), import_claude_exports));
-  const { readFile: readFile5, readdir: readdir3 } = await import("node:fs/promises");
+  const { readFile: readFile6, readdir: readdir3 } = await import("node:fs/promises");
   const { execFile: execFile4 } = await import("node:child_process");
   const gitRoot = () => new Promise((resolve2) => {
     execFile4("git", ["rev-parse", "--show-toplevel"], { cwd: process.cwd() }, (err, stdout) => resolve2(err ? null : stdout.trim() || null));
@@ -101992,8 +102233,8 @@ if (process.argv[2] === "import-claude") {
   const code = await runImportClaude2({
     argv: process.argv.slice(2),
     env: process.env,
-    fs: { readFile: (p) => readFile5(p, "utf-8"), readdir: (p) => readdir3(p) },
-    readFile: (p) => readFile5(p, "utf-8"),
+    fs: { readFile: (p) => readFile6(p, "utf-8"), readdir: (p) => readdir3(p) },
+    readFile: (p) => readFile6(p, "utf-8"),
     homedir: os5.homedir,
     cwd: process.cwd(),
     gitRoot,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spacecode",
-  "version": "2.5.1",
+  "version": "2.5.2",
   "description": "SpaceCode - launch cloud dev environments with AI coding agents",
   "license": "MIT",
   "type": "commonjs",