registry / @crouton-kit/crouter / 0.3.101

@crouton-kit/crouter@0.3.101

⚠ Under review

crtr — agent runtime with memory, plugins, and marketplaces

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 19 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 343 file(s), 4.58 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.exa.ai, bit.ly, claude.ai, dashboard.exa.ai, docs.expo.dev, github.com, mail.google.com, platform.claude.com, platform.composio.dev, pure.md, react.dev, reactrouter.com, www.linkedin.com, www.w3.org

Oversized source lightweight scan

dist/clients/attach/attach-cmd.js6.72 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsObfuscatedHighEntropyStringsMinifiedUrlStringsapi.anthropic.comclaude.aidocs.expo.devgithub.complatform.claude.comwww.w3.org

Source & flagged code

10 flagged

package.jsonView file

Lines 20-60json

20 },

21 "./web": {

22 "import": "./dist/web/index.js",

23 "types": "./dist/web/index.d.ts"

24 }

25 },

26 "files": [

27 "dist",

28 "bin",

29 "!bin/__tests__",

30 "docs",

31 "scripts/postinstall.mjs",

32 "scripts/install-runtime.mjs",

33 "scripts/runtime-lock.mjs",

34 "runtime.lock.json"

35 ],

36 "scripts": {

37 "build": "node scripts/build.mjs",

38 "test:build-output": "node scripts/build-concurrency-test.mjs",

39 "lint:web-px": "node scripts/lint-web-px.mjs",

40 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L40

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L40

41 "install-runtime": "node scripts/install-runtime.mjs",

42 "prepack": "node scripts/runtime-lock.mjs prepack",

43 "postpack": "node scripts/runtime-lock.mjs postpack",

44 "dev": "tsx src/cli.ts",

45 "link": "npm link",

46 "prepublishOnly": "npm run build",

47 "test": "node --import tsx/esm --test 'src/**/__tests__/*.test.ts'",

48 "test:full": "npm run test:full:cheap && npm run test:full:live && npm run test:full:heavy",

49 "test:full:cheap": "node --import tsx/esm --test-concurrency=4 --test $(find src -type f -name '*.test.ts' -path '*/__tests__/*' ! -path '*/__tests__/*/*' ! -path 'src/core/__tests__/live-mutation-verbs.test.ts')",

50 "test:full:live": "node --import tsx/esm --test-concurrency=1 --test src/core/__tests__/live-mutation-verbs.test.ts",

51 "test:full:heavy": "node --import tsx/esm --test-concurrency=1 --test 'src/core/__tests__/full/*.test.ts'"

52 },

53 "overrides": {

54 "@earendil-works/pi-ai": "0.80.6",

55 "@earendil-works/pi-agent-core": "0.80.6",

56 "@earendil-works/pi-tui": "0.80.6"

57 },

58 "repository": {

59 "type": "git",

60 "url": "git+https://github.com/vallum-security/crouter.git"

dist/clients/web/web-cmd.jsView file

Lines 1-32javascript

1// web-cmd.ts — the `crtr surface web` command leaf + registration.

2//

3// Starts the ONE long-running unified web server (server.ts): the crouter web UI

4// host. It serves the shell SPA, the source + command bridge (POST

5// /__crtr/source), the SSE change lane (GET /__crtr/events), and a VERBATIM

6// browser ⇄ broker relay on `ws://HOST:PORT/node/<id>` (the browser becomes

7// the SAME protocol peer as surface attach). The node is selected by the URL, so

8// there is NO positional node here.

9//

10// Command shape (plan §3.6): the CLI path-walker forbids a flat top-level leaf

11// (`defineRoot.subtrees` is `BranchDef[]`), so `web` is a BRANCH wrapping a

12// single leaf: `crtr surface web serve`.

13import { spawn } from 'node:child_process';

14import { defineBranch, defineLeaf } from '../../core/command.js';

High

Child Process

Package source references child process execution.

dist/clients/web/web-cmd.jsView on unpkg · L12

15import { startWebServer } from './server.js';

16const DEFAULT_PORT = 7878;

17/** Best-effort open of the default browser to `url` (the `--open` flag). Never

18 * throws — a failed open just leaves the user to click the printed URL. */

19function openBrowser(url) {

20 const platform = process.platform;

21 const [cmd, args] = platform === 'darwin'

22 ? ['open', [url]]

23 : platform === 'win32'

24 ? ['cmd', ['/c', 'start', '', url]]

25 : ['xdg-open', [url]];

26 try {

27 const child = spawn(cmd, args, { stdio: 'ignore', detached: true });

28 child.on('error', () => {

29 /* no browser opener available — the printed URL is the fallback */

30 });

31 child.unref();

32 }

dist/clients/attach/slash-commands.jsView file

Lines 516-556javascript

516 return true;

517}

518/** `/context`. Opens `crtr node inspect context` as a popup — a

519 * read-only nvim explorer over this node's + its subscriptions' context dirs.

520 * Self-contained popup — no node-focus, no return-pane. */

521function openContext(ctx) {

522 if (process.env['TMUX'] === undefined) {

523 ctx.notify('/context needs tmux');

524 return true;

525 }

526 // The popup runs server-side and won't reliably inherit CRTR_NODE_ID, so pass

527 // this viewer's node id explicitly (mirrors /promote, /resume-node).

528 const nodeId = (ctx.nodeId ?? process.env['CRTR_NODE_ID'] ?? '').trim();

529 if (nodeId === '') {

530 ctx.notify('/context: no node to root on (viewer has no node id)');

531 return true;

532 }

533 popup(`crtr node inspect context --node ${shellQuote(nodeId)}`);

534 return true;

535}

536/** Open `cmd` as a fire-and-forget tmux display-popup (same geometry as the canvas

537 * extensions). tmux runs the trailing string through `sh -c`; the popup owns its

538 * screen and closes itself when the command exits, dropping back to this pane. */

High

Shell

Package source references shell execution.

dist/clients/attach/slash-commands.jsView on unpkg · L536

539function popup(cmd) {

540 try {

541 execFile('tmux', ['display-popup', '-E', '-w', '90%', '-h', '85%', ...surfaceTmuxStyleArgs(), cmd], () => {

542 /* best-effort: popup is self-contained */

543 });

544 }

545 catch {

546 /* best-effort */

547 }

548}

549/** Single-quote a string for safe interpolation into a `sh -c` command line. */

550function shellQuote(s) {

551 return `'${s.replace(/'/g, `'\\''`)}'`;

552}

553// ---------------------------------------------------------------------------

554function usage(ctx, form) {

555 ctx.notify(`Usage: ${form}`);

556 return true;

bin/runtime-selector.mjsView file

Lines 70-93javascript

70 return { ok: true, runtime: { manifest, entryPath } };

71 } catch (error) {

72 return failure(errorMessage(error));

73 }

74}

76/** Resolve a selected runtime without changing process state or writing output. */

77export function tryResolveRuntime(entryName) {

78 const selected = readSelection();

79 if (!selected.ok) return selected;

80 return validate(selected.selection, entryName);

81}

83export function selectRuntime(command, entryName) {

84 const result = tryResolveRuntime(entryName);

85 return result.ok ? result.runtime : fail(command, result.error);

86}

88export async function runSelected(command, entryName) {

89 const runtime = selectRuntime(command, entryName);

90 if (!runtime) return;

91 await import(pathToFileURL(runtime.entryPath).href);

92}

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/runtime-selector.mjsView on unpkg · L90

dist/builtin-pi-packages/pi-crtr-extensions/extensions/crouter-help.tsView file

Lines 1-21typescript

1import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";

2import { execFile } from "node:child_process";

3import { promisify } from "node:util";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/builtin-pi-packages/pi-crtr-extensions/extensions/crouter-help.tsView on unpkg · L1

4import { mkdirSync, readFileSync, writeFileSync } from "node:fs";

5import { homedir } from "node:os";

6import { createHash } from "node:crypto";

7import { dirname, join } from "node:path";

9const run = promisify(execFile);

11// `crtr -h` is the auto-loaded tool guide. Its body leads with a <runtime-state>

12// block (loaded skills + live workers) that changes during a session, so we

13// refresh on a short TTL rather than caching once — stale worker/skill state

14// would defeat the point of surfacing it. The whole guide is wrapped in one

15// outer <crtr-tool-guide> domain; nesting stays at two levels (guide → state).

16const TTL_MS = 15_000;

18// The TTL cache is also persisted to disk, keyed by cwd (skills resolve by

19// scope, so the guide is cwd-specific). Every broker/node is a FRESH process, so

20// the in-memory cache alone is always cold at session_start — each boot would

21// re-spawn the ~0.5s `crtr -h`. The disk layer lets a cluster of node boots

dist/core/self-update.jsView file

Lines 3-43javascript

3// (core) previously imported from commands/update.ts (commands layer).

4import { spawnSync } from 'node:child_process';

5import { fileURLToPath } from 'node:url';

6import { join, dirname } from 'node:path';

7import { readFileSync } from 'node:fs';

8import { listAllPlugins, listAllMarketplaces } from './resolver.js';

9import { pull, fetch, currentSha, remoteSha } from './git.js';

10import { updateState } from './config.js';

11import { nowIso } from './fs-utils.js';

12import { general, network } from './errors.js';

13const __filename = fileURLToPath(import.meta.url);

14const __dirname = dirname(__filename);

15// src/core/self-update.ts → up to src/ → up to pkg root

16const PKG_ROOT = join(__dirname, '..', '..');

17const PACKAGE_JSON_PATH = join(PKG_ROOT, 'package.json');

18export function currentVersion() {

19 const raw = readFileSync(PACKAGE_JSON_PATH, 'utf8');

20 const parsed = JSON.parse(raw);

21 return parsed.version;

22}

23export function selfUpdate() {

24 const res = spawnSync('npm', ['i', '-g', '@crouton-kit/crouter@latest'], { stdio: 'inherit' });

25 if (res.status !== 0) {

26 throw general('npm install failed');

27 }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/core/self-update.jsView on unpkg · L23

28}

29/** Check whether a newer crtr version is available on npm.

30 * Warns to stderr if network unavailable; returns {current, latest} or null if unreachable. */

31export function selfCheck() {

32 const res = spawnSync('npm', ['view', '@crouton-kit/crouter', 'version'], { encoding: 'utf8' });

33 if (res.status !== 0) {

34 return null;

35 }

36 const latest = res.stdout.trim();

37 const current = currentVersion();

38 return { current, latest };

39}

40/** Pull updates for all installed marketplaces and standalone plugins. */

41export function contentUpdate() {

42 const marketplaces = listAllMarketplaces();

43 for (const mkt of marketplaces) {

dist/web-client/assets/martian-mono-latin-wght-normal-5W32yIyr.woff2View file

•path = dist/web-client/assets/martian-mono-latin-wght-normal-5W32yIyr.woff2 kind = high_entropy_blob sizeBytes = 23556 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/web-client/assets/martian-mono-latin-wght-normal-5W32yIyr.woff2View on unpkg

dist/clients/attach/attach-cmd.jsView file

•path = dist/clients/attach/attach-cmd.js kind = oversized_source_file sizeBytes = 7045002 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/clients/attach/attach-cmd.jsView on unpkg

dist/commands/sys/setup.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @crouton-kit/crouter@0.3.97 matchedIdentity = npm:QGNyb3V0b24ta2l0L2Nyb3V0ZXI:0.3.97 similarity = 0.892 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/sys/setup.jsView on unpkg

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/clients/web/web-cmd.jsView file

12// single leaf: `crtr surface web serve`. L13: import { spawn } from 'node:child_process'; L14: import { defineBranch, defineLeaf } from '../../core/command.js';

High

Child Process

Package source references child process execution.

dist/clients/web/web-cmd.jsView on unpkg · L12

dist/clients/attach/slash-commands.jsView file

536/** Open `cmd` as a fire-and-forget tmux display-popup (same geometry as the canvas L537: * extensions). tmux runs the trailing string through `sh -c`; the popup owns its L538: * screen and closes itself when the command exits, dropping back to this pane. */

High

Shell

Package source references shell execution.

dist/clients/attach/slash-commands.jsView on unpkg · L536

bin/runtime-selector.mjsView file

90if (!runtime) return; L91: await import(pathToFileURL(runtime.entryPath).href); L92: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/runtime-selector.mjsView on unpkg · L90

dist/builtin-pi-packages/pi-crtr-extensions/extensions/crouter-help.tsView file

1import type { ExtensionAPI } from "@earendil-works/pi-coding-agent"; L2: import { execFile } from "node:child_process"; L3: import { promisify } from "node:util"; ... L25: const h = createHash("sha1").update(cwd).digest("hex").slice(0, 16); L26: return join(homedir(), ".crouter", "cache", `crouter-help-${h}.json`); L27: } ... L38: try { L39: const c = JSON.parse(readFileSync(file, "utf8")) as { text?: string; at?: number }; L40: if (typeof c.text === "string" && c.text && typeof c.at === "number" && Date.now() - c.at < TTL_MS) { ... L49: try { L50: const { stdout } = await run("crouter", ["-h"], { timeout: 10_000 }); L51: helpText = stdout.trim();

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/builtin-pi-packages/pi-crtr-extensions/extensions/crouter-help.tsView on unpkg · L1

dist/core/self-update.jsView file

23export function selfUpdate() { L24: const res = spawnSync('npm', ['i', '-g', '@crouton-kit/crouter@latest'], { stdio: 'inherit' }); L25: if (res.status !== 0) { L26: throw general('npm install failed'); L27: }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/core/self-update.jsView on unpkg · L23

dist/web-client/assets/martian-mono-latin-wght-normal-5W32yIyr.woff2View file

•path = dist/web-client/assets/martian-mono-latin-wght-normal-5W32yIyr.woff2 kind = high_entropy_blob sizeBytes = 23556 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/web-client/assets/martian-mono-latin-wght-normal-5W32yIyr.woff2View on unpkg

dist/clients/attach/attach-cmd.jsView file

•path = dist/clients/attach/attach-cmd.js kind = oversized_source_file sizeBytes = 7045002 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/clients/attach/attach-cmd.jsView on unpkg

dist/commands/sys/setup.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/sys/setup.jsView on unpkg

Findings

1 Critical6 High5 Medium7 Low

CriticalPrevious Version Dangerous Deltadist/commands/sys/setup.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/clients/web/web-cmd.js

HighShelldist/clients/attach/slash-commands.js

HighRuntime Package Installdist/core/self-update.js

HighShips High Entropy Blobdist/web-client/assets/martian-mono-latin-wght-normal-5W32yIyr.woff2

HighOversized Source Filedist/clients/attach/attach-cmd.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requirebin/runtime-selector.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/builtin-pi-packages/pi-crtr-extensions/extensions/crouter-help.ts

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings