registry / @hydra-acp/cli / 0.1.101

@hydra-acp/cli@0.1.101

Multi-client ACP session daemon: spawn agents, attach over WSS, multiplex sessions across editors.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 18 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 1.01 MB of source, external domains: 127.0.0.1, cdn.agentclientprotocol.com

Source & flagged code

9 flagged

dist/cli.jsView file

188package = @hydra-acp/cli; repositoryIdentity = hydra-acp; dependency = update-notifier L188: `),i({exitCode:-1})}})}function NC(t){if(typeof t!="object"||t===null)return!1;let e=t;return e.kind==="terminal"&&typeof e.command=="string"&&Array.isArray(e.args)}async function ... L189: `)}}});function pw(t,e){let n=t&&typeof t=="object"?t.options:void 0;if(Array.isArray(n)){for(let i of e){let o=n.find(a=>typeof a=="object"&&a!==null&&a.kind===i&&typeof a.optionI... L190: `).length;if(this.collapsePastes&&n>10){let s=this.nextPasteId++;this.pastes.set(s,e.text),this.insertText(XR(s,n))}else this.insertText(e.text);return[]}return e.type==="attachmen...

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/cli.jsView on unpkg · L188

1Cross-file remote execution chain: dist/cli.js spawns dist/index.js; helper contains network access plus dynamic code execution. L1: #!/usr/bin/env node L2: var wv=Object.defineProperty;var J=(t,e)=>()=>(t&&(e=t(t=0)),e);var rl=(t,e)=>{for(var n in e)wv(t,n,{get:e[n],enumerable:!0})};import*as we from"path";import*as ol from"os";functi... L3: `,{encoding:"utf8",mode:384})}async function Eo(){let t=await fi();if(t)return t;let e=ui();return await pi(e),process.stderr.write(`hydra-acp: initialized ${$.authToken()} with a ... L4: `),e}var ps=J(()=>{"use strict";me()});import*as Ct from"fs/promises";import*as mp from"fs";import*as En from"path";import{randomBytes as Av}from"crypto";async function Xt(t,e,n={}... L5: `;await Cv(t,r,n)}async function Cv(t,e,n={}){let s=await Rv(t),r=Tv(s);await Ct.mkdir(r,{recursive:!0});let i=`${s}.tmp-${process.pid}-${Ev()}`;try{let o={encoding:"utf8"};n.mode!... L6: `)}async function be(){return await qa(),dl.parse(await ja())}async function hs(t){await qa();let e=await ja();t(e),dl.parse(e),await Xt($.config(),e,{mode:384})}async function Po(... L7: `),o(),e(i);return}if(l===3){o(),n(new Error("password entry cancelled"));return}if(l===127||l===8){i=…

Source & flagged code

9 flagged · loading source

dist/cli.jsView file

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/cli.jsView on unpkg · L188

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.jsView on unpkg · L1

427patternName = generic_password severity = medium line = 427 matchedText = `),proce...ord.

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/cli.jsView on unpkg · L427

428patternName = generic_password severity = medium line = 428 matchedText = `),proce...pty.

Medium

Secret Pattern

Hardcoded password in dist/cli.js

dist/cli.jsView on unpkg · L428

429patternName = generic_password severity = medium line = 429 matchedText = `),proce...tch.

Medium

Secret Pattern

Hardcoded password in dist/cli.js

dist/cli.jsView on unpkg · L429

dist/index.jsView file

4`;await _i(n,r,t)}async function _i(n,e,t={}){let s=await $i(n),r=Fi(s);await Q.mkdir(r,{recursive:!0});let o=`${s}.tmp-${process.pid}-${Oi()}`;try{let i={encoding:"utf8"};t.mode!=... L5: `)}async function Bs(){return await Ji(),Os.parse(await js())}async function Wi(n){await ae(I.config(),n,{mode:384})}function Qi(){return Os.parse({})}function Y(n){return n==="~"|... L6: `)};function Rn(n){Fe=n??(e=>process.stderr.write(e+`

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L4

1import*as Si from"fs";import*as st from"fs/promises";import*as ki from"net";import*as Ai from"tls";import Vu from"fastify";import Ku from"@fastify/websocket";var Rs="acp.v1";functi... L2: `,{encoding:"utf8",mode:384})}async function Pi(){let n=await Ps();if(n)return n;let e=Pt();return await In(e),process.stderr.write(`hydra-acp: initialized ${I.authToken()} with a ... ... L4: `;await _i(n,r,t)}async function _i(n,e,t={}){let s=await $i(n),r=Fi(s);await Q.mkdir(r,{recursive:!0});let o=`${s}.tmp-${process.pid}-${Oi()}`;try{let i={encoding:"utf8"};t.mode!=... L5: `)}async function Bs(){return await Ji(),Os.parse(await js())}async function Wi(n){await ae(I.config(),n,{mode:384})}function Qi(){return Os.parse({})}function Y(n){return n==="~"|... L6: `)};function Rn(n){Fe=n??(e=>process.stderr.write(e+`

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1

1import*as Si from"fs";import*as st from"fs/promises";import*as ki from"net";import*as Ai from"tls";import Vu from"fastify";import Ku from"@fastify/websocket";var Rs="acp.v1";functi... L2: `,{encoding:"utf8",mode:384})}async function Pi(){let n=await Ps();if(n)return n;let e=Pt();return await In(e),process.stderr.write(`hydra-acp: initialized ${I.authToken()} with a ... L3: `),e}import*as Q from"fs/promises";import*as Ts from"fs";import*as ie from"path";import{randomBytes as Ti}from"crypto";async function ae(n,e,t={}){let r=(t.pretty??!0?JSON.stringif... L4: `;await _i(n,r,t)}async function _i(n,e,t={}){let s=await $i(n),r=Fi(s);await Q.mkdir(r,{recursive:!0});let o=`${s}.tmp-${process.pid}-${Oi()}`;try{let i={encoding:"utf8"};t.mode!=... L5: `)}async function Bs(){return await Ji(),Os.parse(await js())}async function Wi(n){await ae(I.config(),n,{mode:384})}function Qi(){return Os.parse({})}function Y(n){return n==="~"|... L6: `)};function Rn(n){Fe=n??(e=>process.stderr.write(e+`

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

73`)),{stopReason:"end_turn"}}runUncompactCommand(){return this.enqueuePrompt(()=>this.runUncompactCommandInline())}async runUncompactCommandInline(){if(!this.uncompactHook)return th... L74: `)}async seedFromImport(){await this.enqueuePrompt(async()=>{let e=await this.buildSwitchTranscript(this.agentId,{intro:"You are continuing a conversation that was imported from an... L75: `)&&t.startsWith("/")?t.split(/\s+/)[0]??"":"",r=s.startsWith("/")?s.slice(1):"",o=r.length>0&&this.aliasableBareVerbs().has(r);if(s==="/model"||s==="/mode"||s==="/sessions"||s==="...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L73

Findings

5 High7 Medium6 Low

HighChild Processdist/index.js

HighSame File Env Network Executiondist/index.js

HighCommand Output Exfiltrationdist/index.js

HighCopied Package Dependency Bridgedist/cli.js

HighCross File Remote Execution Contextdist/cli.js

MediumSecret Patterndist/cli.js

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/cli.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

dist/index.jsView file

Lines 1-24javascript

1import*as Si from"fs";import*as st from"fs/promises";import*as ki from"net";import*as Ai from"tls";import Vu from"fastify";import Ku from"@fastify/websocket";var Rs="acp.v1";function Es(n,e){return n.has(Rs)?Rs:!1}import Ii from"pino";import Gu from"pino-roll";import*as be from"fs/promises";import{homedir as Sn}from"os";import{z as S}from"zod";import*as N from"path";import*as bn from"os";var Mi="HYDRA_ACP_HOME";function Me(n){let e=bn.homedir();return e?n===e?"~":n.startsWith(e+"/")?"~"+n.slice(e.length):n:n}function Ri(){if(process.env.VITEST)return"vitest";if(process.versions.bun||typeof glo ...

2`,{encoding:"utf8",mode:384})}async function Pi(){let n=await Ps();if(n)return n;let e=Pt();return await In(e),process.stderr.write(`hydra-acp: initialized ${I.authToken()} with a fresh service token.

3`),e}import*as Q from"fs/promises";import*as Ts from"fs";import*as ie from"path";import{randomBytes as Ti}from"crypto";async function ae(n,e,t={}){let r=(t.pretty??!0?JSON.stringify(e,null,2):JSON.stringify(e))+`

4`;await _i(n,r,t)}async function _i(n,e,t={}){let s=await $i(n),r=Fi(s);await Q.mkdir(r,{recursive:!0});let o=`${s}.tmp-${process.pid}-${Oi()}`;try{let i={encoding:"utf8"};t.mode!==void 0&&(i.mode=t.mode),await Q.writeFile(o,e,i),await Q.rename(o,s)}catch(i){throw await Q.unlink(o).catch(()=>{}),i}if(t.mode!==void 0)try{Ts.chmodSync(s,t.mode)}catch{}}async function $i(n){let e;try{e=await Q.lstat(n)}catch(r){if(r.code==="ENOENT")return n;throw r}if(!e.isSymbolicLink())return n;let t=await Q.readlink(n),s=ie.isAbsolute(t)?t:ie.resolve(ie.dirname(n),t);try{let r=await Q.realpath(ie.dirname(s));r ...

5`)}async function Bs(){return await Ji(),Os.parse(await js())}async function Wi(n){await ae(I.config(),n,{mode:384})}function Qi(){return Os.parse({})}function Y(n){

6`)};function Rn(n){Fe=n??(e=>process.stderr.write(e+`

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L4

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

7`))}async function Gs(n){if(!n.target.archive)throw new Error(`Agent ${n.agentId} has no archive URL for ${le()??"this platform"}`);if(!n.target.cmd)throw new Error(`Agent ${n.agentId} has no cmd in its binary target`);let e=le();if(!e)throw new Error(`Agent ${n.agentId}: cannot

8`)};function Tn(n){Pn=n??(e=>process.stderr.write(e+`

9`))}async function Xs(n){let e=le();if(!e)throw new Error(`Agent ${n.agentId}: cannot determine platform key for ${process.platform}/${process.arch}`);let t=I.agentNpmInstallDir(n.agentId,e,n.version),s=ua(n.packageSpec),r=la(s),o={installDir:t,packageName:s,hint:n.bin,basename:r},i=fe.join(t,"node_modules",".bin",n.bin);if(await Re(i))return i;if(await Re(t)){let l=await Ys(o);if(l)return l.binPath}await ia({agentId:n.agentId,version:n.version,packageSpec:n.packageSpec,installDir:t,registry:n.registry,onProgress:n.onProgress});let a=await Ys(o);if(a)return a.binPath;let u=await er(t,s),c=type ...

10stderr: ${d}`:`npm install ${n.packageSpec} failed (${c})`))})})}catch(t){if(t.code==="ETXTBSY"&&e<aa)return await new Promise(r=>setTimeout(r,da*(e+1))),Zs(n,e+1);throw t}}function ua(n){if(n.startsWith("@")){let t=n.indexOf("/");if(t===-1)return n;let r=n.slice(t+1).indexOf("@");return r===-1?n:n.slice(0,t+1+r)}let e=n.indexOf("@");return e<=0?n:n.slice(0,e)}function la(n){let e=n.lastIndexOf("/");return e===-1?n:n.slice(e+1)}async function er(n,e){let t=fe.join(n,"node_modules",e,"package.json");try{let s=await ee.readFile(t,"utf8"),r=JSON.parse(s);return typeof r.bin=="string"||typeof r.bi ...

11`);for(;u!==-1;){let c=t.slice(0,u).trim();if(t=t.slice(u+1),c.length>0)try{let d=JSON.parse(c);for(let l of s)l(d)}catch(d){for(let

12`)}}),n.on("end",()=>i()),n.on("error",a=>i(a)),e.on("error",a=>i(a)),{async send(a){if(o)throw new Error("stream is closed");let u=JSON.stringify(a)+`

13`;await new Promise((c,d)=>{e.write(u,l=>{if(l){d(l);return}c()})})},onMessage(a){s.push(a)},onClose(a){r.push(a)},async close(){e.end(),i()}}}import{nanoid as ka}

14`),!t.stdout||!t.stdin)throw new Error("agent subprocess missing stdio");let s=On(t.stdout,t.stdin);this.connection=new Ee(s),t.stderr?.setEncoding("utf8"),t.stderr?.on("data",r=>{if(this.stderrTail=(this.stderrTail+r).slice(-this.stderrTailBytes),this.writeLog(r),this.logger)for(let o of r.split(/\r?\n/))o.length>0&&this.logger.info(`[${e.agentId}] ${o}`);else process.stderr.write(`[${e.agentId}] ${r}`)}),t.on("error",r=>{let o=this.formatFailure(r.message);this.writeLog(`--- spawn error: ${r.message} time=${new Date().toISOString()} ---

15`),this.connection.fail(new Error(o))}),t.on("exit",(r,o)=>{if(this.exited=!0,this.writeLog(`--- exit code=${r} signal=${o} ${this.killed?"(after kill) ":""}time=${new Date().toISOString()} ---

16`),this.fileLog?.end(),this.fileLog=void 0,this.killed)this.logger?.info(`agent ${e.agentId} pid=${t.pid} exited after kill code=${r} signal=${o}`);else{let i=`agent ${e.agentId} exited before responding (code=${r} signal=${o})`;this.connection.fail(new Error(this.formatFailure(i))),this.logger?.warn(`agent ${e.agentId} pid=${t.pid} exited unexpectedly code=${r} signal=${o}`)}for(let i of this.exitHandlers)i(r,o)})}writeLog(e){if(this.fileLog)try{this.fileLog.write(e)}catch{}}formatFailure(e){let t=this.stderrTail.trim();return t?`${e}

17stderr: ${t}`:e}stderrTailText(){return this.stderrTail.trim()}static spawn(e){let t={...process.env,...e.plan.env,...e.extraEnv??{}},s=Aa(e.plan.command,e.plan.args,{cwd:e.cwd,env:t,stdio:["pipe","pipe","pipe"],detached:!0});return s.unref(),new n(e,s)}onExit(e){this.exitHandlers.push(e)}isAlive(){return!this.exited}async kill(e="SIGTERM"){this.exited||(this.killed=!0,this.writeLog(`--- kill requested signal=${e} time=${new Date().toISOString()} ---

18`),this.logger?.info(`agent ${this.agentId} pid=${this.child.pid} kill requested signal=${e}`),await this.connection.close().catch(()=>{}),this.signalProcessGroup(e),await this.waitForExit(this.killEscalationMs),!this.exited&&(this.writeLog(`--- kill escalating signal=SIGKILL time=${new Date().toISOString()} ---

19`),this.logger?.warn(`agent ${this.agentId} pid=${this.child.pid} did not exit after ${e}; sending SIGKILL`),this.signalProcessGroup("SIGKILL"),await this.waitForExit(this.killEscalationMs)))}signalProcessGroup(e){let t=this.child.pid;if(t!==void 0)try{process.kill(-t,e)}catch{try{this.child.kill(e)}catch{}}}waitForExit(e){return this.exited?Promise.resolve():new Promise(t=>{let s=setTimeout(()=>{this.child.off("exit",r),t()},e),r=()=>{clearTimeout(s),t()};this.child.once("exit",r)})}},xa=2e3;function Ma(n){try{let e=I.agentLogFile(n);Nt.mkdirSync(yr.dirname(e),{recursive:!0});let t=Nt.createW ...

20`,Da=["file_path","filePath","path","command","pattern","query"];function ze(n,e={}){let t=e.maxChars??4e5,s=[],r="",o=()=>{r.length!==0&&(s.push(`Assistant: ${r

21`),t)}function Bn(n){let e=La(n),t=qa(n.rawInput);return t.length===0?`Tool: ${e}`:`Tool: ${e}(${t.join(", ")})`}function La(n){return typeof n.name=="string"&&n.name.

22`);for(;t.length>0;){let s=Sr+t.join(`

23`);if(s.length<=e)return s;t.shift()}return Sr}var kr="(untitled)";function Ln(n){let e=[],t=n.synopsis;if(t!==void 0){e.push("--- begin prior session compaction ---"),e.push(`[Title] ${n.title??kr}`),t.goal!==void 0&&t.goal.trim().length>0&&e.push(`[Goal] ${t.goal}`),t.outcome!==void 0&&t.outcome.trim().length>0&&e.push(`[Outcome] ${t.outcome}`);let i=ct("Open threads",t.open_threads);i.length>0&&e.push(i);let a=ct("Decisions",t.decisions);a.length>0&&e.push(a);let u=ct("File edit intentions",t.file_edit_intentions);u.length>0&&e.push(u);let c=ct("Unresolved errors",t.unresolved_errors);c.len ...

24`)}function ct(n,e){if(!e||!Array.isArray(e))return"";let t=e.filter(r=>typeof r=="string"&&r.trim().length>0);if(t.length===0)return"";let s

Long lines were clipped for display.

Lines 53-93javascript

53${i}

54`},_meta:{"hydra-acp":{synthetic:!0}}}}),{stopReason:"end_turn"}}let s=this.agentAdvertisedModes;if(s.length>0&&!s.some(r=>r.id===t)){let r=s.map(o=>o.id).join(", ");throw ne(new Error(`unknown mode: ${t} (known: ${r})`),k.InvalidParams)}return await this.forwardRequest("session/set_mode",{sessionId:this.sessionId,modeId:t}),this.applyModeChange(t),{stopReason:"end_turn"}}async handleConfigCommand(e){let t=e.slice(7).trim().