registry / @orcha-ai/runtime-bridge / 0.1.1

@orcha-ai/runtime-bridge@0.1.1

Local Orcha runtime bridge for ACP-compatible agent runtimes.

AI Security Review

scanned 22h ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a user-invoked Orcha runtime bridge that connects to a configured Orcha URL and runs configured local agent runtimes.

Static reason

One or more suspicious static signals were detected.

Trigger

Running orcha-runtime-bridge bin/start/run after user configuration

Impact

Remote Orcha requests can drive configured local runtimes, but this is package-aligned and opt-in.

Mechanism

User-configured runtime bridge and process launcher

Rationale

Static inspection shows dual-use bridge behavior that is documented and user-invoked, with no install-time execution, unconsented agent control-surface mutation, exfiltration, or hidden persistence. The scanner findings are explained by expected env parsing, WebSocket communication, and configured child-process runtime adapters.

Evidence

package.jsonbin/orcha-runtime-bridge.jsREADME.md.env.example.env.orcha-runtime-bridge.pid.orcha-runtime-bridge.log/tmp/orcha-runtime-last-message-*.txt

Network endpoints2

ORCHA_RUNTIME_ORCHA_URL + /api/agent-runtime-bridge/wsorcha.example.com/api/agent-runtime-bridge/ws

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for block

bin/orcha-runtime-bridge.js opens outbound WebSocket to ORCHA_RUNTIME_ORCHA_URL and handles remote runtime requests.
bin/orcha-runtime-bridge.js can spawn configured runtime commands from ORCHA_RUNTIME_TARGETS_JSON.
start command can daemonize and write pid/log files in cwd or configured paths.

Evidence against

package.json has no npm lifecycle hooks; execution is via bin or start script only.
Network endpoint, token, and runtime targets are user-configured in env/.env, matching README deployment flow.
No code writes Claude/Codex/MCP config, agent instructions, shell startup files, VCS hooks, or foreign control surfaces.
No credential/file harvesting beyond loading local .env and optional runtime artifact files provided by target output.
HTTP server mode binds 127.0.0.1 by default and uses optional bearer token when configured.

Behavioral surface

Source

EnvironmentVars

Supply chain

Minified

Manifest

NoLicense

scanned 1 file(s), 35.9 KB of source

Source & flagged code

2 flagged

bin/orcha-runtime-bridge.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import{spawn as Rt}from"node:child_process";import{closeSync as St,existsSync as Ut,mkdirSync as xt,openSync as Ot,readFileSync as Nt,rmSync as At,writeFileSync as bt}from"node:fs";import{dirname as Mt,resolve as Ae}from"node:path";import{fileURLToPath as kt}from"node:url";import{randomUUID as $}from"node:crypto";var U="0.1.1";function x(){return new Date().toISOString()}function u(s){return s!==null&&typeof s=="object"&&!Array.isArray(s)}function o(s){return String(s??"").trim()}function T(s,e){let t=Number.parseInt(String(s??""),10);return Number.isFinite(t)?t:e}function v(s){return Array.is ...

3`):""}var C=class{constructor(e){this.agent=e,this.sessionCounter=0}async sessionNew(){return this.sessionCounter+=1,{sessionId:`echo-${this.agent.agentId}-${this.sessionCounter}`}}async sessionPrompt(e,t){let r=P(e.prompt);return t({sessionId:e.sessionId,update:{sessionUpdate:"agent_message_chunk",content:{type:"text",text:r?`Echo runtime received: ${r}`:"Echo runtime received an empty prompt."}}}),{stopReason:"end_turn"}}async sessionCancel(){return{ok:!0}}};import{spawn as Pe}from"node:child_process";var A="2.0",Ce=3e4;function Le(s){return{code:Number.isInteger(s?.code)?s.code:-32e3,messag ...

4\r

5`);if(t<0)return;let n=this.headerBuffer.subarray(0,t).toString("utf8").match(/content-length:\s*(\d+)/i);if(!n){m("warn","runtime.protocol","missing Content-Length header",{target:this.label}),this.headerBuffer=Buffer.

6\r

7${r}`:`${r}

8`;this.child.stdin.write(n,t)}onNotification(e,t){let r=this.notificationHandlers.get(e)||new Set;return r.add(t),this.notificationHandlers.set(e,r),()=>{r.delete(t),r.size===0&&this.notificationHandlers.delete(e)}}onRequest(e,t){return this.requestHandlers.set(e,t),()=>this.requestHandlers.delete(e)}onExit(e){return this.exitHandlers.add(e),()=>this.exitHandlers.delete(e)}rejectAll(e){for(let t of this.pending.values())clearTimeout(t.timer),t.reject(e);this.pending.clear()}handleExit(e,t){this.rejectAll(new Error(`runtime exited before response (${e}/${t})`));for(let r of this.exitHandlers)r( ...

9`,y,_,n,t);let M=ct(d);M&&!_.emittedTexts.has(M)&&(_.emittedTexts.add(M),t({sessionId:n,update:{sessionUpdate:"agent_message_chunk",content:{type:"text",text:M}}}));let k=w.trim();k&&m("debug","runtime.cli","runtime stderr",{target:this.agent.targetCode,sessionId:n,stderr:k}),m("info",

10`}}})}}}async sessionCancel(e){let t=o(e.sessionId),r=this.active.get(t);return r?(m("info","runtime.cli","cancelling runtime child",{target:this.agent.targetCode,sessionId:t,pid:r.pid}),D(r,"SIGTERM"),this.active.delete(t),{ok:!0,cancelled:!0}):{ok:!0,cancelled:!1}}stop(e="stop"){for(let[t,r]of this.active.entries())m("info","runtime.cli","stopping runtime child",{target:this.agent.targetCode,sessionId:t,pid:r.pid,reason:e}),D(r,"SIGTERM");this.active.clear()}};function dt(s,e,t){let r=u(s?._meta)?s._meta:{};return{...u(s)?s:{},sessionId:e,update:u(s?.update)?s.update:{},_meta:{...r,orchaAgen ...

11`)}];return this.prompt({...e,agentId:r,sessionId:a,prompt:d},t)}async requestPermission({agent:e,runtimeSessionId:t,request:r,emitUpdate:n}){let i=$(),c=this.runtimeSessionIndex.get(`${e.agentId}:${t}`)?.sessionId||t||$(),d={permissionId:i,agentId:e.agentId,sessionId:c,runtimeSessionId:t,request:u(r)?r:{},status:"pending",createdAt:x()};return

12`).replaceAll("\\r","\r").replaceAll("\\t"," ").replaceAll('\\"','"').replaceAll("\\\\","\\")}function Tt(s){let e=!1,t=!1;for(let r=0;r<s.length;r+=1){let n=s[r],i=s[r-1];if(n==="'"&&!t)e=!e;else if(n==='"'&&!e&&i!=="\\")t=!t;else if(n==="#"&&!e&&!t&&/\s/.test(i||""))return s.slice(0,r)}return s}import{createServer as Et}from"node:http";function J(s,e,t){let r=JSON.stringify(t);s.writeHead(e,{"content-type":"application/json; charset=utf-8","content-length":Buffer.byteLength(r)}),s.end(r)}function S(s={}){return{ok:!0,...s}}function ee(s,e,t){return{ok:!1,error:{code:s,message:e,...t===void 0 ...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/orcha-runtime-bridge.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/orcha-runtime-bridge.jsView on unpkg · L1

13`),console.log(JSON.stringify({status:"started",pid:n.pid,pidFile:s,logFile:e}))}async function xe({quiet:s=!1}={}){let e=re(),t=se(e);if(!t){s||console.log(JSON.stringify({status:"not_running",pidFile:e}));return}

15Commands:

16 run, foreground Run in the foreground. This is the default.

17 start Start in the background and write a pid file.

18 reload, restart Stop the background process and start it again.

19 stop Stop the background process.

20 status Print background process status as JSON.

Long lines were clipped for display.

Source & flagged code

2 flagged · loading source

bin/orcha-runtime-bridge.jsView file

1#!/usr/bin/env node L2: import{spawn as Rt}from"node:child_process";import{closeSync as St,existsSync as Ut,mkdirSync as xt,openSync as Ot,readFileSync as Nt,rmSync as At,writeFileSync as bt}from"node:fs"... L3: `):""}var C=class{constructor(e){this.agent=e,this.sessionCounter=0}async sessionNew(){return this.sessionCounter+=1,{sessionId:`echo-${this.agent.agentId}-${this.sessionCounter}`}... L4: \r ... L10: `}}})}}}async sessionCancel(e){let t=o(e.sessionId),r=this.active.get(t);return r?(m("info","runtime.cli","cancelling runtime child",{target:this.agent.targetCode,sessionId:t,pid:r... L11: `)}];return this.prompt({...e,agentId:r,sessionId:a,prompt:d},t)}async requestPermission({agent:e,runtimeSessionId:t,request:r,emitUpdate:n}){let i=$(),c=this.runtimeSessionIndex.g... L12: `).replaceAll("\\r","\r").replaceAll("\\t"," ").replaceAll('\\"','"').replaceAll("\\\\","\\")}function Tt(s){let e=!1,t=!1;for(let r=0;r<s.length;r+=1){let n=s[r],i=s[r-1];if(n==="...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/orcha-runtime-bridge.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/orcha-runtime-bridge.jsView on unpkg · L1

Findings

2 High1 Medium2 Low

HighSame File Env Network Executionbin/orcha-runtime-bridge.js

HighCommand Output Exfiltrationbin/orcha-runtime-bridge.js

MediumEnvironment Vars

LowScripts Present

LowNo License

Source & flagged code

2 flagged

bin/orcha-runtime-bridge.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

4\r

6\r

7${r}`:`${r}

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/orcha-runtime-bridge.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/orcha-runtime-bridge.jsView on unpkg · L1

15Commands:

16 run, foreground Run in the foreground. This is the default.

17 start Start in the background and write a pid file.

18 reload, restart Stop the background process and start it again.

19 stop Stop the background process.

20 status Print background process status as JSON.

Long lines were clipped for display.