registry / @abide/abide / 0.50.0

@abide/abide@0.50.0

Isomorphic multimodal HTTP framework built for humans and machines in a single Bun runtime

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `abide init-agent` in a project.

Impact

Can alter AI-agent guidance for that project after a user-invoked command.

Mechanism

Writes or refreshes a bounded Abide guide block in project-root `CLAUDE.md`.

Rationale

This is an explicit-user-command AI-agent configuration mutation, which is warn-worthy under the stated policy, not concrete malware. Source inspection found no automatic or unconsented execution chain.

Evidence

package.jsonbin/abide.tssrc/initAgent.tssrc/lib/server/runtime/maybeMountInspector.tsCLAUDE.md

Decision evidence

public snapshot

AI called this Suspicious at 95.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`src/initAgent.ts` writes a marker-delimited guide into `<cwd>/CLAUDE.md`.
`bin/abide.ts` exposes this write through the explicit `abide init-agent` command.

Evidence against

`package.json` contains no `preinstall`, `install`, `postinstall`, or other lifecycle hook.
The agent-file write preserves surrounding content and only replaces its own fenced block.
No credential harvesting, exfiltration endpoint, hidden payload execution, or automatic agent-control mutation was found.
Dynamic inspector loading is opt-in through `ABIDE_ENABLE_INSPECTOR=true` and an explicitly installed optional package.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 831 file(s), 2.10 MB of source, external domains: 127.0.0.1, www.apple.com, www.w3.org

Source & flagged code

2 flagged

src/lib/ui/compile/parseTemplateRecovering.tsView file

Lines 37-77typescript

37`{expr}` interpolation, static/`{expr}`/`on<event>={expr}` attributes, and

38`{#if}/{#for}/{#await}/{#switch}/{#try}` block control flow. Not a full HTML parser — it covers what

39components need and reads brace expressions with quote/nesting awareness so an

40expression containing `<`, `>`, or `}` parses intact. Void elements self-close.

41`` comments are dropped (no node emitted) so they leave no trace in the

42SSR/client output or hydration cursor.

44A `<style>` becomes a `style` node IN PLACE (not hoisted): its CSS body is read

45structurally (not via a raw-source regex) so a `<style>` sitting inside a `{expr}`

46or attribute — e.g. one quoted in a code sample — is read as that expression's

47text, never mistaken for a real style. Keeping it in the tree lets the front-end

48scope it to its sibling subtree (`analyzeComponent`); the node emits no DOM/markup.

50ERROR RECOVERY: this is the non-throwing core. Every malformed construct is RECORDED

51as a `ParseDiagnostic` (via `report`) and the walk recovers with bounded resync,

52returning the best-effort `nodes` alongside every diagnostic — so the LSP surfaces

53all parse errors from one pass over mid-edit source. The throwing `parseTemplate`

54facade re-throws the FIRST diagnostic (preserving today's fail-fast message+offset).

55*/

57/* A line-leading static `import` in a nested script body. The `(?=\s)` requires

58 whitespace after the keyword (sparing `import.meta` and no-space `import(...)`),

59 and `(?!\s*\()` spares a dynamic `import (...)` written with whitespace before the

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/lib/ui/compile/parseTemplateRecovering.tsView on unpkg · L57

60 paren — both legitimate lazy paths — so only a true static import statement matches. */

61const NESTED_STATIC_IMPORT = /^[ \t]*import(?=\s)(?!\s*\()/m

63/* A braced template expression with the absolute source offset of its first

64 (post-trim) character, so the type-checking shadow can map a diagnostic back. */

65type Braced = { code: string; loc: number }

67export function parseTemplateRecovering(

68 source: string,

69 baseOffset = 0,

70 collectTokens = false,

71): { nodes: TemplateNode[]; diagnostics: ParseDiagnostic[]; tokens: SemanticToken[] } {

72 let cursor = 0

74 /* Diagnostics accumulate in walk order; `report` pushes each malformed construct.

75 The facade throws `diagnostics[0]` — the first source-order failure — mirroring

76 today's fail-fast selection (the walk threw before any later site was reached). */

77 const diagnostics: ParseDiagnostic[] = []

src/devEntry.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = @abide/abide@0.46.0 matchedIdentity = npm:QGFiaWRlL2FiaWRl:0.46.0 similarity = 0.525 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/devEntry.tsView on unpkg

Source & flagged code

2 flagged · loading source

src/lib/ui/compile/parseTemplateRecovering.tsView file

57/* A line-leading static `import` in a nested script body. The `(?=\s)` requires L58: whitespace after the keyword (sparing `import.meta` and no-space `import(...)`), L59: and `(?!\s*\()` spares a dynamic `import (...)` written with whitespace before the

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/lib/ui/compile/parseTemplateRecovering.tsView on unpkg · L57

src/devEntry.tsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/devEntry.tsView on unpkg

Findings

1 High3 Medium4 Low

HighPrevious Version Dangerous Deltasrc/devEntry.ts

MediumDynamic Requiresrc/lib/ui/compile/parseTemplateRecovering.ts

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings