u-chan-secrets 3.0.0 → 3.0.2

package/README.md

@@ -2,7 +2,7 @@
 
 A local MCP server that signs into approved websites with Bitwarden credentials. A privileged service performs credential entry in an isolated browser and transfers filtered session state into a dedicated user Chrome profile.
 
-V3 adds diagnostics, temporary approvals, explicit login outcomes, and a native management window. The source version is `3.0.0`; merging this repository does not publish an npm package or update an installed service.
+V3 adds diagnostics, temporary approvals, explicit login outcomes, and a native management window. The source version is `3.0.2`; merging this repository does not publish an npm package or update an installed service.
 
 **Verification:** Windows/macOS build and test CI is separate from installed-service security verification. Native process identity, input isolation, permissions, and installation rehearsals remain [release gates](docs/attack-checklist.md). See [validation evidence](docs/superpowers/research/2026-10-29-v3-validation.md) and [SECURITY.md](SECURITY.md).
 

package/dist/cli.js

@@ -7,7 +7,7 @@ import { fileURLToPath } from 'node:url';
 import { IpcClient } from './ipc/client.js';
 import { defaultEndpoint } from './ipc/endpoint.js';
 import { MAX_FRAME, encode } from './ipc/protocol.js';
-import { runDoctor, doctorExitCode, checkPlaywrightNow, chromeState } from './core/doctor.js';
+import { runDoctor, doctorExitCode, checkPlaywrightNow, chromeState, SERVICE_DIAGNOSTIC_TIMEOUT_MS } from './core/doctor.js';
 import { loadConfig } from './core/config.js';
 const USAGE = 'usage: u-chan install [--mode <easy|hardcore>] [--phrase <phrase>] | uninstall | unlock | lock | mode <easy|hardcore> | import-v1 [path] | audit [limit] | update | doctor [--json] | manage';
 /** import-v1 shows one approval window per entry, each open for up to 2 minutes, one after another. */
@@ -27,7 +27,7 @@ export async function main(argv, d) {
         platform: d.platform,
         registration: async () => d.platform === 'win32' ? (await import('./platform/windows/doctor.js')).checkWindowsRegistration() : d.platform === 'darwin' ? (await import('./platform/darwin/doctor.js')).checkDarwinRegistration() : 'fail',
         service: async () => {
-            const r = await d.connect({ timeoutMs: 5000 }).diagnose();
+            const r = await d.connect({ timeoutMs: SERVICE_DIAGNOSTIC_TIMEOUT_MS }).diagnose();
             if (!r.ok)
                 throw new Error('unavailable');
             const s = JSON.parse(r.message);

package/dist/core/doctor.js

@@ -39,6 +39,8 @@ export async function checkPlaywrightNow(selfPid = process.pid) {
         return 'unknown';
     }
 }
+// Leave room for the service's full native ACL scan and IPC overhead.
+export const SERVICE_DIAGNOSTIC_TIMEOUT_MS = 25000;
 export async function bounded(probe, fallback, timeoutMs = 5000) {
     let timer;
     try {
@@ -54,7 +56,7 @@ export async function bounded(probe, fallback, timeoutMs = 5000) {
 export async function runDoctor(d) {
     const [registration, service, chrome, playwright] = await Promise.all([
         bounded(d.registration, 'unknown'),
-        bounded(d.service, null),
+        bounded(d.service, null, SERVICE_DIAGNOSTIC_TIMEOUT_MS),
         bounded(d.chrome, 'unknown'),
         bounded(d.playwright, 'unknown'),
     ]);
@@ -82,9 +84,9 @@ export function doctorExitCode(report) {
     const required = report.checks.filter(c => c.required);
     return required.some(c => c.state === 'fail') ? 1 : required.some(c => c.state === 'unknown') ? 2 : 0;
 }
-export async function commandState(file, args, passes) {
+export async function commandState(file, args, passes, timeoutMs = 5000) {
     return new Promise(resolve => {
-        execFile(file, args, { timeout: 5000, windowsHide: true, maxBuffer: 65536 }, (err, stdout) => {
+        execFile(file, args, { timeout: timeoutMs, windowsHide: true, maxBuffer: 65536 }, (err, stdout) => {
             resolve(err ? 'unknown' : passes(stdout) ? 'pass' : 'fail');
         });
     });

package/dist/platform/windows/assets/prompt-src.js

@@ -165,7 +165,7 @@ namespace UChan.Platform.Windows.Assets
                         {
                             writer.AutoFlush = true;
                             Console.SetOut(writer);
-                            return RunProtectedDialog(args);
+                            return RunDialogOnCleanThread(args);
                         }
                     }
                     catch { return 1; }
@@ -174,6 +174,21 @@ namespace UChan.Platform.Windows.Assets
             return 1;
         }
 
+        private static int RunDialogOnCleanThread(string[] args)
+        {
+            int result = 1;
+            // The relay thread can own CLR/COM windows. Desktop assignment requires a clean thread.
+            System.Threading.Thread thread = new System.Threading.Thread(delegate()
+            {
+                try { result = RunProtectedDialog(args); }
+                catch { result = 1; }
+            });
+            thread.SetApartmentState(System.Threading.ApartmentState.STA);
+            thread.Start();
+            thread.Join();
+            return result;
+        }
+
         private static int RunProtectedDialog(string[] args)
         {
             IntPtr original = OpenInputDesktop(0, false, 0x0100);

package/dist/platform/windows/doctor.js

@@ -2,6 +2,6 @@ import { commandState } from '../../core/doctor.js';
 export const checkWindowsRegistration = () => commandState('sc.exe', ['query', 'u-chan-secrets'], s => /SERVICE_NAME:\s*u-chan-secrets/i.test(s));
 export function checkWindowsPermissions(home) {
     const encoded = Buffer.from(home, 'utf8').toString('base64');
-    const script = `$ErrorActionPreference='Stop'; $p=[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('${encoded}')); $root=Get-Item -LiteralPath $p -Force; if($root.Attributes -band [IO.FileAttributes]::ReparsePoint){'UNSAFE';exit}; $items=@($root)+@(Get-ChildItem -LiteralPath $p -Force -Recurse); foreach($i in $items){if($i.Attributes -band [IO.FileAttributes]::ReparsePoint){'UNSAFE';exit}; $acl=$i.GetAccessControl(); $owner=$acl.GetOwner([Security.Principal.SecurityIdentifier]).Value; if($owner -notin @('S-1-5-18','S-1-5-32-544')){'UNSAFE';exit}; foreach($ace in $acl.Access){if($ace.AccessControlType -eq 'Allow' -and $ace.IdentityReference.Translate([Security.Principal.SecurityIdentifier]).Value -notin @('S-1-5-18','S-1-5-32-544')){'UNSAFE';exit}} }; 'SAFE'`;
-    return commandState('powershell.exe', ['-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(script, 'utf16le').toString('base64')], s => s.trim() === 'SAFE');
+    const script = `$ErrorActionPreference='Stop'; $p=[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('${encoded}')); $root=Get-Item -LiteralPath $p -Force; if($root.Attributes -band [IO.FileAttributes]::ReparsePoint){'UNSAFE';exit}; $items=@($root)+@(Get-ChildItem -LiteralPath $p -Force -Recurse); foreach($i in $items){if($i.Attributes -band [IO.FileAttributes]::ReparsePoint){'UNSAFE';exit}; $acl=$i.GetAccessControl(); $owner=$acl.GetOwner([Security.Principal.SecurityIdentifier]).Value; if($owner -notin @('S-1-5-18','S-1-5-32-544')){'UNSAFE';exit}; foreach($ace in $acl.GetAccessRules($true,$true,[Security.Principal.SecurityIdentifier])){if($ace.AccessControlType -eq 'Allow' -and $ace.IdentityReference.Value -notin @('S-1-5-18','S-1-5-32-544')){'UNSAFE';exit}} }; 'SAFE'`;
+    return commandState('powershell.exe', ['-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(script, 'utf16le').toString('base64')], s => s.trim() === 'SAFE', 15000);
 }

package/dist/service/doctor.js

@@ -18,7 +18,7 @@ export async function diagnoseService(home, vault, platform) {
             }
             return 'pass';
         }, 'unknown'),
-        bounded(() => platform === 'win32' ? checkWindowsPermissions(home) : checkDarwinPermissions(home), 'unknown'),
+        bounded(() => platform === 'win32' ? checkWindowsPermissions(home) : checkDarwinPermissions(home), 'unknown', 20000),
         bounded(() => vault.status(), 'unavailable'),
     ]);
     return { assets, permissions, vault: status === 'unlocked' ? 'pass' : status === 'unavailable' ? 'unknown' : status };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "u-chan-secrets",
-  "version": "3.0.0",
+  "version": "3.0.2",
   "description": "U-Chan Secrets: local MCP server for Bitwarden-backed logins",
   "license": "MIT",
   "type": "module",

package/scripts/verify-windows-prompt-desktop.mjs

@@ -0,0 +1,50 @@
+// Run from a trusted administrator terminal after building and installing the service.
+// Exercises SYSTEM relay, desktop entry, restoration and reply transport without a password UI.
+import fs from 'node:fs/promises'
+import path from 'node:path'
+import { randomUUID } from 'node:crypto'
+import { promisify } from 'node:util'
+import { execFile } from 'node:child_process'
+import { compileCsharp } from '../dist/platform/windows/assets/compiler.js'
+import { PROMPT_HELPER_CSHARP } from '../dist/platform/windows/assets/prompt-src.js'
+import { defaultAdminCheck } from '../dist/platform/windows/install.js'
+import { setAdminOnlyAcl } from '../dist/platform/windows/acl.js'
+
+if (process.platform !== 'win32' || !await defaultAdminCheck()) throw new Error('Use a trusted Windows administrator terminal')
+const home = path.join(process.env.ProgramData ?? 'C:\\ProgramData', 'u-chan-secrets')
+const root = path.join(home, '#0 backup', 'desktop-probe-' + randomUUID())
+const task = 'UChanDesktopProbe-' + randomUUID()
+const exec = promisify(execFile)
+const powershell = script => exec('powershell.exe', ['-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(script, 'utf16le').toString('base64')], { windowsHide: true })
+const quote = value => "'" + value.replaceAll("'", "''") + "'"
+let registered = false
+try {
+  await fs.mkdir(root)
+  await setAdminOnlyAcl(root)
+  const trace = path.join(root, 'desktop-trace.txt')
+  if (!PROMPT_HELPER_CSHARP.includes('return RunDialog(args);') || !PROMPT_HELPER_CSHARP.includes('SwitchDesktop(original);')) throw new Error('Native probe hooks no longer match; no helper was run')
+  const source = PROMPT_HELPER_CSHARP
+    .replace('return RunDialog(args);', `File.AppendAllText(@"${trace}", "entered"+Environment.NewLine); return 0;`)
+    .replace('SwitchDesktop(original);', `if (SwitchDesktop(original)) File.AppendAllText(@"${trace}", "restored"+Environment.NewLine);`)
+  const helper = path.join(root, 'probe.exe')
+  await compileCsharp(source, helper, { outputType: 'WindowsApplication', referencedAssemblies: ['System.Windows.Forms.dll', 'System.Drawing.dll'] })
+  const output = path.join(root, 'result.json'), runner = path.join(root, 'runner.mjs')
+  await fs.writeFile(runner, `import{execFile}from'node:child_process';import fs from'node:fs';execFile(${JSON.stringify(helper)},['--mode','confirm','--phrase','DISPOSABLE-NATIVE-PROBE','--lines','[]'],{timeout:35000,windowsHide:true},(e,out)=>fs.writeFileSync(${JSON.stringify(output)},JSON.stringify({exitCode:e?.code??0,stdoutBytes:Buffer.byteLength(out)})));`)
+  await setAdminOnlyAcl(root)
+  await powershell(`$ErrorActionPreference='Stop';$a=New-ScheduledTaskAction -Execute ${quote(path.join(home, 'bin', 'node.exe'))} -Argument ${quote('"' + runner + '"')};$p=New-ScheduledTaskPrincipal -UserId 'SYSTEM' -LogonType ServiceAccount -RunLevel Highest;$s=New-ScheduledTaskSettingsSet -ExecutionTimeLimit (New-TimeSpan -Minutes 2) -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries;Register-ScheduledTask -TaskName ${quote(task)} -Action $a -Principal $p -Settings $s | Out-Null`)
+  registered = true
+  await powershell(`Start-ScheduledTask -TaskName ${quote(task)}`)
+  const deadline = Date.now() + 60000
+  let execution
+  while (Date.now() < deadline) {
+    try { execution = JSON.parse(await fs.readFile(output, 'utf8')); break }
+    catch (e) { if (e.code !== 'ENOENT') throw e }
+    await new Promise(resolve => setTimeout(resolve, 500))
+  }
+  const events = await fs.readFile(trace, 'utf8').catch(() => '')
+  const ok = execution?.exitCode === 0 && execution.stdoutBytes === 0 && events.trim() === 'entered\r\nrestored'
+  console.log(JSON.stringify({ ok, nativeDryRun: true, desktopEntered: events.includes('entered'), desktopRestored: events.includes('restored'), execution, evidence: root }))
+  if (!ok) process.exitCode = 1
+} finally {
+  if (registered) await powershell(`Stop-ScheduledTask -TaskName ${quote(task)} -ErrorAction SilentlyContinue;Unregister-ScheduledTask -TaskName ${quote(task)} -Confirm:$false`)
+}