registry / @orcha-ai/runtime-bridge / 0.1.0

@orcha-ai/runtime-bridge@0.1.0

Local Orcha runtime bridge for ACP-compatible agent runtimes.

AI Security Review

scanned 22h ago · by lpm-firewall-ai

User-invoked runtime bridge that connects to configured Orcha service and launches configured local agent runtimes. Risk is inherent remote orchestration capability, but it is package-aligned and not installed or activated silently.

Static reason

One or more suspicious static signals were detected.

Trigger

user runs orcha-runtime-bridge run/start with environment configuration

Impact

Remote Orcha requests can prompt configured local agent runtimes after the user runs and configures the bridge.

Mechanism

configured WebSocket runtime bridge and child process adapter

Rationale

The suspicious primitives are consistent with a documented local runtime bridge: user-configured networking, child-process adapters, and optional background pid/log management. There is no lifecycle execution, unconsented agent-control mutation, credential harvesting, or hardcoded exfiltration behavior.

Evidence

package.jsonbin/orcha-runtime-bridge.jsREADME.md.env.example.envORCHA_RUNTIME_ENV_FILEORCHA_RUNTIME_PID_FILE or .orcha-runtime-bridge.pidORCHA_RUNTIME_LOG_FILE or .orcha-runtime-bridge.log/tmp/orcha-runtime-last-message-<uuid>.txtconfigured target command

Network endpoints3

ORCHA_RUNTIME_ORCHA_URL + /api/agent-runtime-bridge/wsorcha.example.comorcha.tansuo.cloud

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for block

bin/orcha-runtime-bridge.js spawns configured runtime commands and relays stdout/stderr as session updates.
Runtime node mode opens a WebSocket to ORCHA_RUNTIME_ORCHA_URL and accepts Orcha RPC requests.
User-invoked start command can detach a background bridge and write pid/log files in cwd or configured paths.

Evidence against

package.json has no preinstall/install/postinstall lifecycle hooks.
No code writes Claude/Codex/Cursor/MCP config or other foreign AI-agent control surfaces.
Command execution is driven by ORCHA_RUNTIME_TARGETS_JSON or documented openclaw/codex examples, not install/import time.
Network endpoint is configured Orcha bridge path; no hardcoded exfiltration host or credential harvesting found.
Env loading reads .env/ORCHA_RUNTIME_ENV_FILE for package configuration and does not enumerate unrelated secrets.

Behavioral surface

Source

EnvironmentVars

Supply chain

Minified

Manifest

NoLicense

scanned 1 file(s), 32.6 KB of source

Source & flagged code

2 flagged

bin/orcha-runtime-bridge.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import{spawn as re}from"node:child_process";import{closeSync as ie,existsSync as oe,mkdirSync as ae,openSync as ce,readFileSync as de,rmSync as ue,writeFileSync as le}from"node:fs";import{dirname as he,resolve as gt}from"node:path";import{fileURLToPath as pe}from"node:url";import{randomUUID as $}from"node:crypto";var M="0.1.0";function R(){return new Date().toISOString()}function d(s){return s!==null&&typeof s=="object"&&!Array.isArray(s)}function o(s){return String(s??"").trim()}function g(s,t){let e=Number.parseInt(String(s??""),10);return Number.isFinite(e)?e:t}function k(s){return Array.is ...

3`):""}var C=class{constructor(t){this.agent=t,this.sessionCounter=0}async sessionNew(){return this.sessionCounter+=1,{sessionId:`echo-${this.agent.agentId}-${this.sessionCounter}`}}async sessionPrompt(t,e){let n=P(t.prompt);return e({sessionId:t.sessionId,update:{sessionUpdate:"agent_message_chunk",content:{type:"text",text:n?`Echo runtime received: ${n}`:"Echo runtime received an empty prompt."}}}),{stopReason:"end_turn"}}async sessionCancel(){return{ok:!0}}};import{spawn as yt}from"node:child_process";var N="2.0",Tt=3e4;function St(s){return{code:Number.isInteger(s?.code)?s.code:-32e3,messag ...

4\r

5`);if(e<0)return;let r=this.headerBuffer.subarray(0,e).toString("utf8").match(/content-length:\s*(\d+)/i);if(!r){h("warn","runtime.protocol","missing Content-Length header",{target:this.label}),this.headerBuffer=Buffer.

6\r

7${n}`:`${n}

8`;this.child.stdin.write(r,e)}onNotification(t,e){let n=this.notificationHandlers.get(t)||new Set;return n.add(e),this.notificationHandlers.set(t,n),()=>{n.delete(e),n.size===0&&this.notificationHandlers.delete(t)}}onRequest(t,e){return this.requestHandlers.set(t,e),()=>this.requestHandlers.delete(t)}onExit(t){return this.exitHandlers.add(t),()=>this.exitHandlers.delete(t)}rejectAll(t){for(let e of this.pending.values())clearTimeout(e.timer),e.reject(t);this.pending.clear()}handleExit(t,e){this.rejectAll(new Error(`runtime exited before response (${t}/${e})`));for(let n of this.exitHandlers)n( ...

9`,_,T,r,e);let b=qt(u);b&&!T.emittedTexts.has(b)&&(T.emittedTexts.add(b),e({sessionId:r,update:{sessionUpdate:"agent_message_chunk",content:{type:"text",text:b}}}));let A=I.trim();A&&h("debug","runtime.cli","runtime stderr",{target:this.agent.targetCode,sessionId:r,stderr:A}),h(

10`}}})}}}async sessionCancel(t){let e=o(t.sessionId),n=this.active.get(e);return n?(h("info","runtime.cli","cancelling runtime child",{target:this.agent.targetCode,sessionId:e,pid:n.pid}),H(n,"SIGTERM"),this.active.delete(e),{ok:!0,cancelled:!0}):{ok:!0,cancelled:!1}}stop(t="stop"){for(let[e,n]of this.active.entries())h("info","runtime.cli","stopping runtime child",{target:this.agent.targetCode,sessionId:e,pid:n.pid,reason:t}),H(n,"SIGTERM");this.active.clear()}};function Gt(s,t,e){let n=d(s?._meta)?s._meta:{};return{...d(s)?s:{},sessionId:t,update:d(s?.update)?s.update:{},_meta:{...n,orchaAgen ...

11`)}];return this.prompt({...t,agentId:n,sessionId:a,prompt:u},e)}async requestPermission({agent:t,runtimeSessionId:e,request:n,emitUpdate:r}){let i=$(),c=this.runtimeSessionIndex.get(`${t.agentId}:${e}`)?.sessionId||e||$(),u={permissionId:i,agentId:t.agentId,sessionId:c,runtimeSessionId:e,request:d(n)?n:{},status:"pending",createdAt:R()};return

12`).replaceAll("\\r","\r").replaceAll("\\t"," ").replaceAll('\\"','"').replaceAll("\\\\","\\")}function se(s){let t=!1,e=!1;for(let n=0;n<s.length;n+=1){let r=s[n],i=s[n-1];if(r==="'"&&!e)t=!t;else if(r==='"'&&!t&&i!=="\\")e=!e;else if(r==="#"&&!t&&!e&&/\s/.test(i||""))return s.slice(0,n)}return s}import{createServer as ne}from"node:http";function J(s,t,e){let n=JSON.stringify(e);s.writeHead(t,{"content-type":"application/json; charset=utf-8","content-length":Buffer.byteLength(n)}),s.end(n)}function y(s={}){return{ok:!0,...s}}function W(s,t,e){return{ok:!1,error:{code:s,message:t,...e===void 0? ...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/orcha-runtime-bridge.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/orcha-runtime-bridge.jsView on unpkg · L1

13`),console.log(JSON.stringify({status:"started",pid:r.pid,pidFile:s,logFile:t}))}async function pt({quiet:s=!1}={}){let t=Q(),e=Z(t);if(!e){s||console.log(JSON.stringify({status:"not_running",pidFile:t}));return}

15Commands:

16 run, foreground Run in the foreground. This is the default.

17 start Start in the background and write a pid file.

18 reload, restart Stop the background process and start it again.

19 stop Stop the background process.

20 status Print background process status as JSON.

Long lines were clipped for display.

Source & flagged code

2 flagged · loading source

bin/orcha-runtime-bridge.jsView file

1#!/usr/bin/env node L2: import{spawn as re}from"node:child_process";import{closeSync as ie,existsSync as oe,mkdirSync as ae,openSync as ce,readFileSync as de,rmSync as ue,writeFileSync as le}from"node:fs"... L3: `):""}var C=class{constructor(t){this.agent=t,this.sessionCounter=0}async sessionNew(){return this.sessionCounter+=1,{sessionId:`echo-${this.agent.agentId}-${this.sessionCounter}`}... L4: \r ... L10: `}}})}}}async sessionCancel(t){let e=o(t.sessionId),n=this.active.get(e);return n?(h("info","runtime.cli","cancelling runtime child",{target:this.agent.targetCode,sessionId:e,pid:n... L11: `)}];return this.prompt({...t,agentId:n,sessionId:a,prompt:u},e)}async requestPermission({agent:t,runtimeSessionId:e,request:n,emitUpdate:r}){let i=$(),c=this.runtimeSessionIndex.g... L12: `).replaceAll("\\r","\r").replaceAll("\\t"," ").replaceAll('\\"','"').replaceAll("\\\\","\\")}function se(s){let t=!1,e=!1;for(let n=0;n<s.length;n+=1){let r=s[n],i=s[n-1];if(r==="...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/orcha-runtime-bridge.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/orcha-runtime-bridge.jsView on unpkg · L1

Findings

2 High1 Medium2 Low

HighSame File Env Network Executionbin/orcha-runtime-bridge.js

HighCommand Output Exfiltrationbin/orcha-runtime-bridge.js

MediumEnvironment Vars

LowScripts Present

LowNo License

Source & flagged code

2 flagged

bin/orcha-runtime-bridge.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

4\r

6\r

7${n}`:`${n}

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/orcha-runtime-bridge.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/orcha-runtime-bridge.jsView on unpkg · L1

15Commands:

16 run, foreground Run in the foreground. This is the default.

17 start Start in the background and write a pid file.

18 reload, restart Stop the background process and start it again.

19 stop Stop the background process.

20 status Print background process status as JSON.

Long lines were clipped for display.