meshcode 2.11.15__tar.gz → 2.11.16__tar.gz

{meshcode-2.11.15 → meshcode-2.11.16}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: meshcode
-Version: 2.11.15
+Version: 2.11.16
 Summary: Real-time communication between AI agents — Supabase-backed CLI
 Author-email: MeshCode <hello@meshcode.io>
 License: MIT

{meshcode-2.11.15 → meshcode-2.11.16}/meshcode/__init__.py

@@ -1,5 +1,5 @@
 """MeshCode — Real-time communication between AI agents."""
-__version__ = "2.11.15"
+__version__ = "2.11.16"
 
 # Exception hierarchy — eagerly imported (lightweight, no deps)
 from meshcode.exceptions import (  # noqa: F401

meshcode-2.11.16/meshcode/rpc_allowlist.py

@@ -0,0 +1,106 @@
+"""Single source of truth for agent-callable mc_* RPCs.
+
+Used by:
+  - mig 334 (GRANT EXECUTE TO anon, authenticated, service_role per name)
+  - scripts/check_rpc_grants.py (CI gate calling mc_check_rpc_grants)
+  - tests/test_rpc_grants.py (unit test that asserts list invariants)
+
+When adding a new agent-callable RPC, add its bare name (no schema, no args)
+here AND issue a mig that grants it. The CI gate then catches drift.
+
+Excluded by convention (must NOT be on this list):
+  - mc_admin_*       (privileged management)
+  - mc_billing_*     (billing surface)
+  - mc_force_*       (force operations — service_role only)
+  - _mc_*            (internal helpers)
+
+Exception: mc_force_clear_stale_lease is intentionally agent-callable —
+it's the install-guard's recovery path for orphan leases (mig 086 + 136).
+See FORCE_PREFIX_EXEMPT.
+"""
+
+FORCE_PREFIX_EXEMPT = {"mc_force_clear_stale_lease"}
+
+AGENT_CALLABLE_RPCS = [
+    # ── Tasks
+    "mc_task_create",
+    "mc_task_claim",
+    "mc_task_complete",
+    "mc_task_reassign",
+    "mc_task_cancel",
+    "mc_task_reject",
+    "mc_task_approve",
+    "mc_task_search",
+    "mc_task_reschedule",       # mig 330
+    "mc_task_get_deps",         # mig 330
+    "mc_tasks_due_soon",        # mig 329
+    "mc_task_is_blocked",       # mig 329
+    "mc_task_unblock_chain",    # mig 329
+    "mc_tasks_for_goal",        # mig 230
+
+    # ── Agents
+    "mc_register_agent",
+    "mc_agent_set_status_by_api_key",
+    "mc_acquire_agent_lease",
+    "mc_release_agent_lease",
+    "mc_force_clear_stale_lease",
+    "mc_heartbeat",
+    "mc_get_agent_idle_times",  # mig 322
+    "mc_agent_persona",
+    "mc_agent_time_context",      # mig 328
+    "mc_agent_time_context_all",  # mig 328
+
+    # ── Boot context
+    "mc_boot",                    # mig 271
+    "mc_agent_boot_context",
+    "mc_resolve_project",
+
+    # ── Messages
+    "mc_send_message",
+    "mc_send_multi",
+    "mc_broadcast",
+    "mc_log_activity",
+    "mc_dispatch_should_refuse",  # mig 327
+
+    # ── Memory
+    "mc_memory_set",
+    "mc_memory_list",
+    "mc_memory_search",
+    "mc_memory_contradictions",
+
+    # ── Decisions / outcomes
+    "mc_has_open_decision",
+    "mc_decide",
+    "mc_outcome",
+    "mc_explain",
+
+    # ── Validation / pairing
+    "mc_validate_api_key",
+    "mc_create_pairing_session",
+    "mc_poll_pairing_session",
+
+    # ── Device-code OAuth (mig 326)
+    "mc_device_code_create",
+    "mc_device_code_session_info",
+    "mc_device_code_approve",
+    "mc_device_code_poll",
+    "mc_device_token_validate",
+    "mc_device_token_revoke",
+    "mc_device_token_rename",
+    "mc_device_tokens_list",
+
+    # ── Tier check (mig 330)
+    "mc_tier_check_limit",
+
+    # ── Health (mig 335)
+    "mc_health_check_secrets",
+    "mc_check_rpc_grants",        # mig 336 — self-referential is fine
+
+    # ── Misc agent-callable
+    "mc_list_user_projects",
+]
+
+
+def is_agent_callable(name: str) -> bool:
+    """Quick membership check."""
+    return name in AGENT_CALLABLE_RPCS

{meshcode-2.11.15 → meshcode-2.11.16}/meshcode.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: meshcode
-Version: 2.11.15
+Version: 2.11.16
 Summary: Real-time communication between AI agents — Supabase-backed CLI
 Author-email: MeshCode <hello@meshcode.io>
 License: MIT

{meshcode-2.11.15 → meshcode-2.11.16}/meshcode.egg-info/SOURCES.txt

@@ -19,6 +19,7 @@ meshcode/preferences.py
 meshcode/protocol_handler.py
 meshcode/protocol_v2.py
 meshcode/quickstart.py
+meshcode/rpc_allowlist.py
 meshcode/run_agent.py
 meshcode/secrets.py
 meshcode/self_update.py
@@ -213,6 +214,7 @@ tests/test_mark_read_batch.py
 tests/test_migration_integrity.py
 tests/test_realtime_event_freshness.py
 tests/test_rls_cross_tenant.py
+tests/test_rpc_grants.py
 tests/test_rpc_migrations.py
 tests/test_security_regressions.py
 tests/test_sentinel.py

{meshcode-2.11.15 → meshcode-2.11.16}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "meshcode"
-version = "2.11.15"
+version = "2.11.16"
 description = "Real-time communication between AI agents — Supabase-backed CLI"
 readme = "README.md"
 license = {text = "MIT"}

meshcode-2.11.16/tests/test_rpc_grants.py

@@ -0,0 +1,76 @@
+"""Tests for the rpc_allowlist + grant-coverage script (AUDIT-S2).
+
+Live grant verification runs in CI via scripts/check_rpc_grants.py against
+a real Supabase. These tests check the allowlist invariants offline so
+local dev pytest still works without DB credentials.
+"""
+import re
+
+import pytest
+
+from meshcode.rpc_allowlist import (
+    AGENT_CALLABLE_RPCS,
+    FORCE_PREFIX_EXEMPT,
+    is_agent_callable,
+)
+
+
+def test_allowlist_is_nonempty():
+    assert len(AGENT_CALLABLE_RPCS) >= 10
+
+
+def test_allowlist_has_no_duplicates():
+    assert len(AGENT_CALLABLE_RPCS) == len(set(AGENT_CALLABLE_RPCS))
+
+
+def test_allowlist_no_excluded_prefixes():
+    """Per convention, admin/billing/force/internal RPCs MUST NOT be agent-callable.
+
+    Exception: FORCE_PREFIX_EXEMPT lists known mc_force_* RPCs that are
+    legitimately agent-callable (install-guard recovery path).
+    """
+    forbidden = re.compile(r"^(mc_admin_|mc_billing_|mc_force_|_mc_)")
+    bad = [
+        n for n in AGENT_CALLABLE_RPCS
+        if forbidden.match(n) and n not in FORCE_PREFIX_EXEMPT
+    ]
+    assert not bad, f"convention violation — these must not be agent-callable: {bad}"
+
+
+def test_allowlist_all_start_with_mc_prefix():
+    bad = [n for n in AGENT_CALLABLE_RPCS if not n.startswith("mc_")]
+    assert not bad, f"all entries must be public.mc_* RPCs; bad: {bad}"
+
+
+def test_is_agent_callable_helper():
+    assert is_agent_callable("mc_task_create") is True
+    assert is_agent_callable("mc_admin_disconnect") is False
+    assert is_agent_callable("nonexistent_rpc") is False
+
+
+def test_known_agent_rpcs_are_listed():
+    """Sentinel: if any of these go missing the allowlist has regressed."""
+    must_have = [
+        "mc_task_create",
+        "mc_send_message",
+        "mc_heartbeat",
+        "mc_boot",
+        "mc_acquire_agent_lease",
+        "mc_validate_api_key",
+        "mc_memory_set",
+    ]
+    missing = [n for n in must_have if n not in AGENT_CALLABLE_RPCS]
+    assert not missing, f"core agent RPCs missing from allowlist: {missing}"
+
+
+def test_known_non_agent_rpcs_are_NOT_listed():
+    must_not_have = [
+        "mc_admin_disconnect_agent",
+        "mc_admin_force_release_lease",
+        "mc_billing_set_plan",
+        "mc_force_clear_all",
+        "_mc_assert_task_scope",
+        "_mc_api_key_row",
+    ]
+    leaks = [n for n in must_not_have if n in AGENT_CALLABLE_RPCS]
+    assert not leaks, f"privileged RPCs incorrectly on allowlist: {leaks}"