webbee 0.5.0__tar.gz → 0.5.2__tar.gz

{webbee-0.5.0 → webbee-0.5.2}/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.5.2
+
+* **One server, one machine**: a repo synced over your own `ssh` reports every host key of that server your
+  `known_hosts` trusts (RSA, ECDSA, ed25519), so the panel and your terminal see one machine, not two.
+* Requires `imperal-sdk >= 6.3.4` (10 MB a file, batched syncs).
+
+## 0.5.1
+
+**Security fixes for the remote and local code sync.**
+
+* The system-`sftp` fallback refuses a remote path with a control character: a file name from a server can
+  no longer start a second batch command (sftp's `!` runs a local shell).
+* The local sync never reads a symlink or a path that resolves outside the workspace.
+
 ## 0.5.0
 
 **Webbee v0.5.0: one code graph for every source.**

{webbee-0.5.0 → webbee-0.5.2}/PKG-INFO

@@ -1,13 +1,14 @@
 Metadata-Version: 2.5
 Name: webbee
-Version: 0.5.0
+Version: 0.5.2
 Summary: Webbee 🐝 — the Imperal Cloud coding agent in your terminal
 Project-URL: Homepage, https://imperal.io
 Project-URL: Documentation, https://docs.imperal.io
 Project-URL: Repository, https://github.com/imperalcloud/webbee-code
 Project-URL: Issues, https://github.com/imperalcloud/webbee-code/issues
 Project-URL: Protocol, https://icnli.org
-Author-email: "Imperal, Inc." <hello@imperal.io>
+Author: Imperal, Inc.
+Author-email: Valentin Scerbacov <valentin@imperal.io>
 License-Expression: GPL-3.0-or-later
 License-File: LICENSE
 Keywords: ai-agent,cli,coding-agent,icnli,imperal,llm,terminal,webbee
@@ -29,7 +30,7 @@ Requires-Dist: asyncssh>=2.14
 Requires-Dist: httpx-sse>=0.4
 Requires-Dist: httpx>=0.27
 Requires-Dist: imperal-mcp>=0.5.0
-Requires-Dist: imperal-sdk>=6.3.2
+Requires-Dist: imperal-sdk>=6.3.4
 Requires-Dist: model2vec>=0.8.2; sys_platform != 'darwin' or platform_machine != 'x86_64' or python_version < '3.13'
 Requires-Dist: numpy>=2; sys_platform != 'darwin' or platform_machine != 'x86_64' or python_version < '3.13'
 Requires-Dist: prompt-toolkit>=3

{webbee-0.5.0 → webbee-0.5.2}/pyproject.toml

@@ -1,15 +1,15 @@
 [project]
 name = "webbee"
-version = "0.5.0"
+version = "0.5.2"
 description = "Webbee 🐝 — the Imperal Cloud coding agent in your terminal"
 readme = "README.md"
 license = "GPL-3.0-or-later"
 license-files = ["LICENSE"]
 requires-python = ">=3.9"
-authors = [{ name = "Imperal, Inc.", email = "hello@imperal.io" }]
+authors = [{ name = "Valentin Scerbacov", email = "valentin@imperal.io" }, { name = "Imperal, Inc." }]
 dependencies = [
     "imperal-mcp>=0.5.0",
-    "imperal-sdk>=6.3.2",
+    "imperal-sdk>=6.3.4",
     "asyncssh>=2.14",
     "httpx>=0.27",
     "httpx-sse>=0.4",

webbee-0.5.2/src/webbee/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.5.2"

{webbee-0.5.0 → webbee-0.5.2}/src/webbee/intel/service.py

@@ -291,9 +291,15 @@ class IntelService:
 
                 async def read(paths):
                     got = {}
+                    base = os.path.realpath(self.root)
                     for p in paths:
+                        full = os.path.join(self.root, p)
+                        # never a link, never a path that resolves outside the workspace
+                        real = os.path.realpath(full)
+                        if os.path.islink(full) or not (real == base or real.startswith(base + os.sep)):
+                            continue
                         try:
-                            with open(os.path.join(self.root, p), "rb") as f:
+                            with open(full, "rb") as f:
                                 got[p] = f.read(indexer.MAX_FILE_BYTES + 1)
                         except OSError:
                             continue

{webbee-0.5.0 → webbee-0.5.2}/src/webbee/tools.py

@@ -1012,7 +1012,12 @@ class SystemSftp:
 
     @staticmethod
     def _quote(path: str) -> str:
-        return '"' + str(path).replace("\\", "\\\\").replace('"', '\\"') + '"'
+        # one batch line per command: a control character in a path (a newline names a second command,
+        # and sftp's "!" runs a LOCAL shell) is refused -- names come from the server's listing
+        p = str(path)
+        if any(ord(c) < 32 or ord(c) == 127 for c in p):
+            raise OSError("refused: a control character in a remote path")
+        return '"' + p.replace("\\", "\\\\").replace('"', '\\"') + '"'
 
     def _mtime(self, mon: str, day: str, when: str) -> float:
         import datetime
@@ -1106,7 +1111,11 @@ async def _open_sftp(host: str):
     except Exception as e:      # unreachable, refused, a host key that changed: said, never guessed past
         return None, None, [], f"{type(e).__name__}: {e}"
     key = conn.get_server_host_key()
-    return await conn.start_sftp_client(), conn, ([key.get_fingerprint("sha256")] if key else []), ""
+    # the negotiated key and the host's other keys the user's known_hosts trusts: a server has several (RSA,
+    # ECDSA, ed25519) and another source may have met it by a different one -- one machine, never two
+    fps = sorted({key.get_fingerprint("sha256")} if key else set())
+    fps = sorted(set(fps) | set(known_fingerprints(host)))
+    return await conn.start_sftp_client(), conn, fps, ""
 
 
 async def remote_sync(client, host: str, root: str, paths: list) -> dict:

{webbee-0.5.0 → webbee-0.5.2}/tests/test_intel_service.py

@@ -270,3 +270,20 @@ def test_the_build_sync_carries_the_history_links(tmp_path, monkeypatch):
     svc.build()
     svc.attach_vault(lambda: cloud)
     assert cloud.calls[-1][1]["measured"][0]["dst_path"] == "b.py"
+
+
+def test_a_link_leading_out_of_the_workspace_is_never_read(tmp_path, monkeypatch):
+    """Security review of 0.5.0: the local sync reads no symlink and nothing that resolves outside the root."""
+    import os
+    outside = tmp_path.parent / f"{tmp_path.name}-outside.py"
+    outside.write_text("SECRET = 'outside the workspace'\n")
+    (tmp_path / "a.py").write_text("def alpha():\n    return 1\n")
+    os.symlink(outside, tmp_path / "leak.py")
+    svc = IntelService(str(tmp_path), "rk", cache_dir=str(tmp_path / "c"))
+    _synced(svc, monkeypatch)
+    cloud = _Cloud()
+    svc.build()
+    svc.attach_vault(lambda: cloud)
+    sent = [c[1] for c in cloud.calls if "files" in c[1]]
+    assert sent and all(f["path"] != "leak.py" for c in sent for f in c["files"])
+    assert "outside the workspace" not in repr(cloud.calls)

{webbee-0.5.0 → webbee-0.5.2}/tests/test_tools.py

@@ -869,3 +869,48 @@ def test_system_sftp_answers_lstat_and_realpath_from_the_server():
     asyncio.run(s.realpath("/r/a.py"))
     asyncio.run(s.lstat("/r/a.py"))
     assert len(calls) == n                                    # cached: no new sftp process
+
+
+def test_system_sftp_refuses_a_control_character_in_a_remote_path():
+    """Security review of 0.5.0: a newline would start a second sftp batch command ("!" runs a local shell)."""
+    import asyncio
+    import pytest
+    from webbee.tools import SystemSftp
+    ran = []
+
+    async def batch(cmds):
+        ran.append(cmds)
+        return ""
+    s = SystemSftp("h")
+    s._batch = batch
+    for bad in ("/r/a.py\n!touch /tmp/pwned", "/r/a\rb", "/r/\x00x"):
+        with pytest.raises(OSError):
+            asyncio.run(s.readdir(bad))
+    assert ran == []
+
+
+def test_an_asyncssh_connect_reports_every_key_of_the_host_the_user_trusts(monkeypatch):
+    """Live 2026-10-20: the panel met whm-jump by RSA, the user's ssh by ed25519 -- two machine nodes. The
+    client sends the negotiated key and the host's other known_hosts keys: one machine."""
+    import asyncio
+    import asyncssh
+    import webbee.tools as t
+    monkeypatch.setattr(t, "master_open", lambda host: False)
+    monkeypatch.setattr(t, "known_fingerprints", lambda host: ["SHA256:rsa", "SHA256:ecdsa", "SHA256:ed"])
+
+    class Key:
+        def get_fingerprint(self, alg):
+            return "SHA256:ed"
+
+    class Conn:
+        def get_server_host_key(self):
+            return Key()
+
+        async def start_sftp_client(self):
+            return "sftp"
+
+    async def connect(host, **kw):
+        return Conn()
+    monkeypatch.setattr(asyncssh, "connect", connect)
+    sftp, conn, fps, why = asyncio.run(t._open_sftp("whm-jump"))
+    assert sftp == "sftp" and why == "" and fps == ["SHA256:ecdsa", "SHA256:ed", "SHA256:rsa"]

webbee-0.5.0/src/webbee/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.5.0"