registry / @retasc/cli / 1.3.2

@retasc/cli@1.3.2

Retasc CLI — sign in with GitHub, create projects, mint agent API keys, and wire your agent to the Retasc MCP server in one command.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 18 file(s), 130 KB of source, external domains: github.com, mcp.retasc.com, unique-lyrebird-934.convex.cloud

Source & flagged code

3 flagged

dist/proxy.jsView file

Lines 1-29javascript

1// Liveness watchdog proxy (RTSC-44). A stdio MCP server the harness (Claude Code,

2// Codex, OpenCode, …) spawns. It transparently forwards every JSON-RPC message to

3// the remote Retasc MCP over HTTP and — by watching claim tokens in the responses —

4// keeps claimed issues' leases alive with out-of-band `heartbeat` calls. The LLM

5// never heartbeats. Fail-safe: if this process dies, heartbeats stop and the server

6// reclaims the lease (the correct default) — a broken watchdog is never worse than

7// no watchdog. Self-enforcing: no proxy → no Retasc tools → can't orphan a lease.

8import { createInterface } from "node:readline";

9import { hostname } from "node:os";

10import { spawn, spawnSync } from "node:child_process";

11import { dirname, resolve } from "node:path";

High

Child Process

Package source references child process execution.

dist/proxy.jsView on unpkg · L9

12import { fileURLToPath } from "node:url";

13import { applyObservation, heartbeatRequest, isClaimLost, shouldReapOnClose, } from "./lib/watchdog.js";

14import { resolveConn } from "./lib/keystore.js";

15import { toolResult as parseTool } from "./lib/toolresult.js";

16import { mintSessionKey, appendFallbackNotice } from "./lib/session.js";

17// RTSC-92/98: resolve the workspace key via the SHARED resolver, so the proxy and

18// the direct commands (claim/tidy/done) can never diverge. The proxy carries its

19// binding in its own env (RETASC_MCP_KEY legacy, or RETASC_WORKSPACE → keystore).

20const resolved = resolveConn({ env: process.env, defaultUrl: "https://mcp.retasc.com/mcp" });

21let MCP_URL = resolved.url;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/proxy.jsView on unpkg · L9

22const KEY = resolved.key;

23const HEARTBEAT_MS = Number(process.env.RETASC_HEARTBEAT_MS) || 10 * 60 * 1000;

24const leases = new Map();

25let hbSeq = -1; // out-of-band heartbeat ids are negative — never collide with the harness's

26// Per-session key (RTSC-50): starts as the workspace key; on startup we mint a

27// session key and switch to it so this session is distinguishable from others.

28let activeKey = KEY;

29// Set when session-key minting failed and we fell back to the workspace key —

dist/commands/mcp.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @retasc/cli@1.2.3 matchedIdentity = npm:QHJldGFzYy9jbGk:1.2.3 similarity = 0.556 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/mcp.jsView on unpkg

Source & flagged code

3 flagged · loading source

dist/proxy.jsView file

9import { hostname } from "node:os"; L10: import { spawn, spawnSync } from "node:child_process"; L11: import { dirname, resolve } from "node:path";

High

Child Process

Package source references child process execution.

dist/proxy.jsView on unpkg · L9

9import { hostname } from "node:os"; L10: import { spawn, spawnSync } from "node:child_process"; L11: import { dirname, resolve } from "node:path"; ... L19: // binding in its own env (RETASC_MCP_KEY legacy, or RETASC_WORKSPACE → keystore). L20: const resolved = resolveConn({ env: process.env, defaultUrl: "https://mcp.retasc.com/mcp" }); L21: let MCP_URL = resolved.url;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/proxy.jsView on unpkg · L9

dist/commands/mcp.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/mcp.jsView on unpkg

Findings

4 High2 Medium5 Low

HighChild Processdist/proxy.js

HighShell

HighSame File Env Network Executiondist/proxy.js

HighPrevious Version Dangerous Deltadist/commands/mcp.js

MediumNetwork

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/proxy.jsView file

Lines 1-29javascript

1// Liveness watchdog proxy (RTSC-44). A stdio MCP server the harness (Claude Code,

2// Codex, OpenCode, …) spawns. It transparently forwards every JSON-RPC message to

3// the remote Retasc MCP over HTTP and — by watching claim tokens in the responses —

4// keeps claimed issues' leases alive with out-of-band `heartbeat` calls. The LLM

5// never heartbeats. Fail-safe: if this process dies, heartbeats stop and the server

6// reclaims the lease (the correct default) — a broken watchdog is never worse than

7// no watchdog. Self-enforcing: no proxy → no Retasc tools → can't orphan a lease.

8import { createInterface } from "node:readline";

9import { hostname } from "node:os";

10import { spawn, spawnSync } from "node:child_process";

11import { dirname, resolve } from "node:path";

High

Child Process

Package source references child process execution.

dist/proxy.jsView on unpkg · L9

12import { fileURLToPath } from "node:url";

13import { applyObservation, heartbeatRequest, isClaimLost, shouldReapOnClose, } from "./lib/watchdog.js";

14import { resolveConn } from "./lib/keystore.js";

15import { toolResult as parseTool } from "./lib/toolresult.js";

16import { mintSessionKey, appendFallbackNotice } from "./lib/session.js";

17// RTSC-92/98: resolve the workspace key via the SHARED resolver, so the proxy and

18// the direct commands (claim/tidy/done) can never diverge. The proxy carries its

19// binding in its own env (RETASC_MCP_KEY legacy, or RETASC_WORKSPACE → keystore).

20const resolved = resolveConn({ env: process.env, defaultUrl: "https://mcp.retasc.com/mcp" });

21let MCP_URL = resolved.url;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/proxy.jsView on unpkg · L9

22const KEY = resolved.key;

23const HEARTBEAT_MS = Number(process.env.RETASC_HEARTBEAT_MS) || 10 * 60 * 1000;

24const leases = new Map();

25let hbSeq = -1; // out-of-band heartbeat ids are negative — never collide with the harness's

26// Per-session key (RTSC-50): starts as the workspace key; on startup we mint a

27// session key and switch to it so this session is distinguishable from others.

28let activeKey = KEY;

29// Set when session-key minting failed and we fell back to the workspace key —

dist/commands/mcp.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/mcp.jsView on unpkg