registry / @gleapai/kai-bridge / 0.9.1

@gleapai/kai-bridge@0.9.1

⚠ Under review

Kai Code Bridge runs Kai Code on your computer or server with your own coding subscriptions, local previews, and photo or video verification.

Static Scan Results

scanned 20d ago · by rust-scanner

Static analysis completed at 0.0% confidence. No malicious behavior was detected; 29 low-signal pattern(s) were surfaced and cleared.

Static reason

Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 40 file(s), 583 KB of source, external domains: 127.0.0.1, api.gleap.io, app.gleap.io, code.claude.com, cursor.com, developers.openai.com, downloads.cursor.com, github.com, openrouter.ai, registry.npmjs.org, www.apple.com

Source & flagged code

22 flagged

package.jsonView file

Lines 5-45json

5 "type": "module",

6 "license": "MIT",

7 "bin": {

8 "kai-bridge": "bin/kai-bridge.mjs"

9 },

10 "files": [

11 "bin",

12 "src",

13 "runner",

14 "scripts/postinstall.mjs",

15 "README.md",

16 "scripts/runtime-smoke.mjs",

17 "npm-shrinkwrap.json"

18 ],

19 "engines": {

20 "node": ">=20"

21 },

22 "scripts": {

23 "test": "node --test 'test/**/*.test.mjs'",

24 "sync-runner": "node scripts/sync-runner.mjs",

25 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L25

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L25

26 "runtime:check": "node scripts/runtime-smoke.mjs",

27 "prepack": "node scripts/prepare-release.mjs",

28 "postpack": "node scripts/prepare-release.mjs --clean"

29 },

30 "dependencies": {

31 "@agentclientprotocol/claude-agent-acp": "0.75.1",

32 "@agentclientprotocol/codex-acp": "1.10.0",

33 "@agentclientprotocol/sdk": "1.4.0",

34 "@playwright/mcp": "^0.0.79",

35 "@sockudo/client": "^2.0.0",

36 "chokidar": "^4.0.1",

37 "ws": "^8.21.3",

38 "yaml": "^2.9.0",

39 "@openai/codex": "0.153.4",

40 "@anthropic-ai/claude-agent-sdk": "0.3.266"

41 },

42 "overrides": {

43 "@anthropic-ai/claude-agent-sdk": "$@anthropic-ai/claude-agent-sdk"

44 },

45 "exports": {

bin/kai-bridge.mjsView file

Lines 1-36javascript

1#!/usr/bin/env node

2// kai-bridge — run Gleap Kai Code on this machine.

3//

4// kai-bridge setup guided onboarding: pair · background service · harness sign-ins

5// (a bare `kai-bridge` on an unpaired machine runs it too)

6// kai-bridge login | logout pair this device with your Gleap account / disconnect it

7// kai-bridge install | uninstall run at login (launchd / systemd / Task Scheduler)

8// kai-bridge start run in the foreground (what the service runs)

9// kai-bridge status device, service, profiles, repos

src/profiles.mjsView file

Lines 129-169javascript

129 const c = loginCommand(harness, configDir, kaiHome);

130 if (!c) return null;

131 // Ambient claude must log in with the env untouched so credentials land

132 // in the keychain, where the (equally untouched) probe and turns look.

src/preview-login.mjsView file

Lines 24-64javascript

24import { createRequire } from "node:module";

25import { join } from "node:path";

27import { resolvePreviewBrowser } from "./preview.mjs";

29/** Cookie domains the Server accepts — anything else is not the preview's. */

src/service.mjsView file

Lines 1-24javascript

1// Login-item service: launchd (macOS) / systemd --user (Linux) /

2// Task Scheduler (Windows). Runs `kai-bridge start` at login, restarts

3// on crash, logs under ~/.kai/logs. `kai-bridge install` / `uninstall`.

5import { execFileSync } from "node:child_process";

6import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";

7import { homedir, platform }

src/preview.mjs#virtual:normalized:round1View file

1import { previewPorts } from "./preview-ports.mjs"; L2: // Preview tier A — run the app"s real dev servers next to the session.\n//\n// Each repo may commit a `.gleap/dev.yaml`:\n//\n// services:\n// api: { cwd: Server, run: \"n... L3: // may already own the declared one) — `PORT` is set and `${port:<name>}` ... L6: // already listening is adopted as "your running dev server" — but ONLY when L7: // the listener"s working directory is inside the repo (ports.mjs); anything\n// else on that port is `port_busy`, with pid / command / cwd for the card.\n//\n// Every failure is a... L8: * first on PATH. Under launchd the daemon"s PATH is frozen at install\n * time (service.mjs), so we run through a login shell to pick up\n * nvm/pnpm shims — but on macOS a login s...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/preview.mjs#virtual:normalized:round1View on unpkg · L1

src/daemon.mjsView file

Lines 1-21javascript

1import { cloneRepository, locateRepository } from './repository-setup.mjs';

2// The always-on part: one outbound realtime subscription for commands,

3// REST for everything the device reports. Idles at ~0 CPU; reconnects

4// with backoff; keeps the machine awake only while a turn runs.

5//

6// Commands arrive on `private-bridge-<deviceId>` (Sockudo / Pusher

7// protocol, the same channel family the dashboard uses):

8// bridge.turn.start { commandId, turnId, sessionId, profileId, repos:[{key, mode, base, carryUncommitted}], ...AgentRunOpts }

runner/acp-runner.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

runner/acp-runner.mjs#virtual:normalized:round1View on unpkg

runner/acp-runner.mjsView file

•matchType = normalized_sha256 matchedPackage = @gleapai/kai-bridge@0.6.0 matchedPath = runner/acp-runner.mjs matchedIdentity = npm:QGdsZWFwYWkva2FpLWJyaWRnZQ:0.6.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High