registry / @abide/abide / 0.45.0

@abide/abide@0.45.0

Isomorphic multimodal HTTP framework built for humans and machines in a single Bun runtime

AI Security Review

scanned 3h ago · by lpm-firewall-ai

No confirmed malicious attack surface. Network, process, file, and environment operations implement the framework's explicit CLI, server, bundle, and RPC features rather than install-time execution or covert collection.

Static reason

No blocking static signals were detected.

Trigger

User invokes documented CLI/bundle/server features or an application exposes its own framework routes.

Impact

No package-initiated credential harvesting, external exfiltration, stealth persistence, destructive action, or unconsented AI-agent control-surface mutation found.

Mechanism

User-configured framework runtime, local tooling, and optional application CLI distribution.

Rationale

Direct source inspection found no lifecycle-triggered execution or concrete malicious chain. Flagged primitives are aligned with the documented Bun framework and are either user-invoked, application-configured, or loopback-scoped.

Evidence

package.jsonbin/abide.tssrc/initAgent.tssrc/scaffold.tssrc/lib/ui/compile/parseTemplate.tssrc/controlServerWorker.tssrc/lib/bundle/listenLocalControlServer.tssrc/lib/server/cli/handleCliInstall.tssrc/lib/server/cli/handleCliDownload.tssrc/lib/server/reachable.ts

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json: only a test script; no preinstall/install/postinstall hooks.
bin/abide.ts: child processes run only for explicit CLI commands.
src/lib/ui/compile/parseTemplate.ts: scanner's dynamic-import hit is parser validation text, not runtime payload loading.
src/initAgent.ts: writes a fenced pointer only when user runs `abide init-agent`.
src/controlServerWorker.ts: optional Claude bridge requires bundled dependency, `claude` on PATH, random token, and loopback-only control server.
src/lib/server/cli/handleCliInstall.ts: shell installer is an app-server endpoint invoked by a user and validates reflected host input.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 741 file(s), 1.66 MB of source, external domains: 127.0.0.1, www.apple.com, www.w3.org

Source & flagged code

1 flagged

src/lib/ui/compile/parseTemplate.tsView file

Lines 15-55typescript

15const UPPERCASE_START = /^[A-Z]/

16const AWAIT_PREFIX = /^await\b/

17const LEADING_KEYWORD = /^\s*(\S+)/

19/*

20A minimal compile-time parser for the abide template subset: elements, text with

21`{expr}` interpolation, static/`{expr}`/`on<event>={expr}` attributes, and

22`{#if}/{#for}/{#await}/{#switch}/{#try}` block control flow. Not a full HTML parser — it covers what

23components need and reads brace expressions with quote/nesting awareness so an

24expression containing `<`, `>`, or `}` parses intact. Void elements self-close.

25`` comments are dropped (no node emitted) so they leave no trace in the

26SSR/client output or hydration cursor.

28A `<style>` becomes a `style` node IN PLACE (not hoisted): its CSS body is read

29structurally (not via a raw-source regex) so a `<style>` sitting inside a `{expr}`

30or attribute — e.g. one quoted in a code sample — is read as that expression's

31text, never mistaken for a real style. Keeping it in the tree lets the front-end

32scope it to its sibling subtree (`analyzeComponent`); the node emits no DOM/markup.

33*/

35/* A line-leading static `import` in a nested script body. The `(?=\s)` requires

36 whitespace after the keyword (sparing `import.meta` and no-space `import(...)`),

37 and `(?!\s*\()` spares a dynamic `import (...)` written with whitespace before the

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/lib/ui/compile/parseTemplate.tsView on unpkg · L35

38 paren — both legitimate lazy paths — so only a true static import statement matches. */

39const NESTED_STATIC_IMPORT = /^[ \t]*import(?=\s)(?!\s*\()/m

41/* A braced template expression with the absolute source offset of its first

42 (post-trim) character, so the type-checking shadow can map a diagnostic back. */

43type Braced = { code: string; loc: number }

45export function parseTemplate(source: string, baseOffset = 0): { nodes: TemplateNode[] } {

46 let cursor = 0

48 /* Reads a `{...}` expression starting at `cursor` (on the `{`), tracking

49 string literals and nested braces so the matching `}` is found. `loc` is the

50 absolute offset (baseOffset-relative) of the trimmed code's first char. */

51 function readBracedExpression(): Braced {

52 cursor += 1 // past '{'

53 const start = cursor

54 let depth = 1

55 while (cursor < source.length && depth > 0) {

Source & flagged code

1 flagged · loading source

src/lib/ui/compile/parseTemplate.tsView file

35/* A line-leading static `import` in a nested script body. The `(?=\s)` requires L36: whitespace after the keyword (sparing `import.meta` and no-space `import(...)`), L37: and `(?!\s*\()` spares a dynamic `import (...)` written with whitespace before the

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/lib/ui/compile/parseTemplate.tsView on unpkg · L35

Findings

3 Medium4 Low

MediumDynamic Requiresrc/lib/ui/compile/parseTemplate.ts

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

src/lib/ui/compile/parseTemplate.tsView file

Lines 15-55typescript

15const UPPERCASE_START = /^[A-Z]/

16const AWAIT_PREFIX = /^await\b/

17const LEADING_KEYWORD = /^\s*(\S+)/

19/*

20A minimal compile-time parser for the abide template subset: elements, text with

21`{expr}` interpolation, static/`{expr}`/`on<event>={expr}` attributes, and

22`{#if}/{#for}/{#await}/{#switch}/{#try}` block control flow. Not a full HTML parser — it covers what

23components need and reads brace expressions with quote/nesting awareness so an

24expression containing `<`, `>`, or `}` parses intact. Void elements self-close.

25`` comments are dropped (no node emitted) so they leave no trace in the

26SSR/client output or hydration cursor.

28A `<style>` becomes a `style` node IN PLACE (not hoisted): its CSS body is read

29structurally (not via a raw-source regex) so a `<style>` sitting inside a `{expr}`

30or attribute — e.g. one quoted in a code sample — is read as that expression's

31text, never mistaken for a real style. Keeping it in the tree lets the front-end

32scope it to its sibling subtree (`analyzeComponent`); the node emits no DOM/markup.

33*/

35/* A line-leading static `import` in a nested script body. The `(?=\s)` requires

36 whitespace after the keyword (sparing `import.meta` and no-space `import(...)`),

37 and `(?!\s*\()` spares a dynamic `import (...)` written with whitespace before the

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/lib/ui/compile/parseTemplate.tsView on unpkg · L35

38 paren — both legitimate lazy paths — so only a true static import statement matches. */

39const NESTED_STATIC_IMPORT = /^[ \t]*import(?=\s)(?!\s*\()/m

41/* A braced template expression with the absolute source offset of its first

42 (post-trim) character, so the type-checking shadow can map a diagnostic back. */

43type Braced = { code: string; loc: number }

45export function parseTemplate(source: string, baseOffset = 0): { nodes: TemplateNode[] } {

46 let cursor = 0

48 /* Reads a `{...}` expression starting at `cursor` (on the `{`), tracking

49 string literals and nested braces so the matching `}` is found. `loc` is the

50 absolute offset (baseOffset-relative) of the trimmed code's first char. */

51 function readBracedExpression(): Braced {

52 cursor += 1 // past '{'

53 const start = cursor

54 let depth = 1

55 while (cursor < source.length && depth > 0) {