@xyne/xyne-cli@0.4.1: AI-agent control-surface risk

Loading npm security reports…

Source & flagged code

12 flagged

package.jsonView file

Lines 70-154json

70 "types": "./dist-lib/src/agent/runtime/types.d.ts",

71 "import": "./dist-lib/src/agent/runtime/types.js",

72 "default": "./dist-lib/src/agent/runtime/types.js"

73 },

74 "./local-server": {

75 "types": "./dist-lib/src/utils/local-server.d.ts",

76 "import": "./dist-lib/src/utils/local-server.js",

77 "default": "./dist-lib/src/utils/local-server.js"

78 }

79 },

80 "bin": {

81 "xyne": "dist/index.js"

82 },

83 "files": [

84 "dist/**/*",

85 "dist-lib/**/*",

86 "scripts/postinstall.js",

87 "scripts/patch-pi-auth-guidance.js",

88 "scripts/patch-pi-retry-classifier.js"

89 ],

90 "scripts": {

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg · L90

91 "build:installer": "node scripts/build-installer.js",

92 "build:lib": "bunx tsc -p tsconfig.lib.json && mkdir -p dist-lib/src/pets/hosts/macos && cp src/pets/hosts/macos/PetOverlay.swift dist-lib/src/pets/hosts/macos/PetOverlay.swift",

93 "changelog": "node scripts/generate-changelog.js",

94 "dev": "bun run src/index.ts",

95 "build": "bun run build:npm",

96 "build:npm": "bun run changelog && bun run build:clean && bun run build:protocol && bun run build:lib && bun run build:compile && bun run build:webpack-bundle && bun run build:binary:release && bun run build:npm-dist && bun run build:launcher",

97 "build:binaries": "bun run changelog && bun run build:clean && bun run build:protocol && bun run build:compile && bun run build:webpack-bundle && bun run build:binary:release && bun run build:launcher",

98 "build:clean": "rm -rf dist dist-lib binaries temp-build packages/protocol/dist",

99 "build:protocol": "npm --prefix packages/protocol run build",

100 "build:compile": "bunx tsc --outDir temp-build --declaration false --sourceMap false",

101 "build:webpack-bundle": "node scripts/webpack-bundle.js",

102 "build:obfuscate": "node scripts/obfuscate-code.js",

103 "build:npm-dist": "mkdir -p dist && cp -r temp-build/* dist/ && mkdir -p dist/src/agent/themes dist/src/pets/hosts/macos && cp -r src/agent/themes/* dist/src/agent/themes/ && cp src/pets/hosts/macos/PetOverlay.swift dist/src/pets/hosts/macos/PetOverlay.swift && node scripts/copy-patched-packages.js && rm -rf temp-build",

104 "build:all": "bun run build:npm",

105 "build:binary:prepare": "node scripts/ensure-build-optional-deps.js && node scripts/patch-worker-inline.js && node scripts/patch-pi-auth-guidance.js && node scripts/patch-pi-retry-classifier.js",

106 "build:binary:release": "bun run build:binary:prepare && mkdir -p binaries && bun run build:binary:linux-x64 && bun run build:binary:linux-arm && bun run build:binary:macos-intel && bun run build:binary:macos-arm && bun run build:binary:windows && node scripts/copy-binaries-to-packages.js",

107 "build:binary:all": "bun run build:binary:prepare && mkdir -p binaries && bun run build:binary:linux-x64 && bun run build:binary:linux-arm && bun run build:binary:macos-intel && bun run build:binary:macos-arm && bun run build:binary:windows",

108 "build:binary:linux-x64": "bun build --compile --target=bun-linux-x64-baseline --outfile binaries/xyne-linux-x64 ./temp-build/src/index.js",

109 "build:binary:linux-arm": "bun build --compile --target=bun-linux-aarch64 --outfile binaries/xyne-linux-arm64 ./temp-build/src/index.js",

110 "build:binary:macos-intel": "bun build --compile --target=bun-darwin-x64-baseline --outfile binaries/xyne-macos-intel ./temp-build/src/index.js",

114 "start": "node dist/index.js",

115 "typecheck": "tsc --noEmit",

116 "test": "echo 'Tests skipped for CLI build'",

117 "test:harness": "bun test scripts/eval-runner-support.test.ts scripts/eval-session-trace.test.ts src/agent/bridge.interaction.test.ts src/agent/prompts/generated.test.ts src/agent/runtime/prompt-composition.test.ts src/agent/runtime/tool-heartbeat.test.ts src/agent/runtime/testing/llm-request-capture.test.ts src/agent/runtime/llm-request-composition.test.ts src/agent/runtime/interaction-trace.test.ts src/agent/tools/review-prompt/index.test.ts src/agent/tools/session-name.test.ts src/agent/tools/tool-error-recovery.test.ts src/core/cli/get-turn-error.test.ts src/core/cli/llm-request-wire.i ...

118 "test:lifecycle:protocol": "npm --prefix packages/protocol test -- interaction-state.test.ts",

119 "test:lifecycle:agent": "bun test src/agent/permissions/permissions.isolation.test.ts",

120 "test:tool-contracts": "bun test src/agent/tools/sessions.test.ts src/agent/tools/skill/first-turn.test.ts src/agent/tools/phase4-contracts.test.ts src/agent/tools/background/lifecycle.test.ts src/agent/tools/lsp-shutdown.test.ts src/agent/tools/mcp/progressive-discovery.test.ts src/agent/tools/mcp/effects.test.ts src/agent/tools/vespa-memory/contracts.test.ts src/agent/tools/spaces/contracts.test.ts",

121 "test:privacy": "bun test src/agent/privacy.test.ts src/agent/tools/notify.test.ts src/agent/tools/truncation/truncation.test.ts src/agent/tools/mcp/effects.test.ts src/agent/tools/spaces/effects.test.ts src/agent/tools/session-summary.test.ts src/agent/tools/vespa-memory/capture.test.ts",

122 "prompts:generate": "node scripts/gen-agent-prompts.cjs",

123 "prompts:check": "node scripts/gen-agent-prompts.cjs --check",

124 "subagents:generate": "node scripts/gen-subagent-builtins.cjs",

125 "subagents:check": "node scripts/gen-subagent-builtins.cjs --check",

126 "generated:check": "bun run prompts:check && bun run subagents:check && bun run docs:check",

127 "eval:harness": "bun scripts/eval-llm-communication.ts",

128 "lint": "bunx eslint src --ext .ts,.tsx",

129 "format": "bunx prettier --write \"src/**/*.{ts,tsx,json,md}\"",

130 "update-doc": "bun src/agent/tools/info/update-docs/index.ts",

131 "docs:check": "bun src/agent/tools/info/update-docs/check-docs-current.ts",

132 "docs:check:staged": "bun src/agent/tools/info/update-docs/check-docs-current.ts --staged",

133 "prepare": "node scripts/install-git-hooks.js",

134 "postinstall": "node scripts/postinstall.js && node scripts/patch-pi-auth-guidance.js && node scripts/patch-pi-retry-classifier.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L134

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L134

135 "setup-hooks": "node scripts/install-git-hooks.js",

136 "setup": "bun scripts/setup.js",

137 "cli:setup": "bun run build && npm install -g .",

138 "cli:remove": "npm uninstall -g @xyne/xyne-cli",

139 "cli:update": "bun run build && npm uninstall -g @xyne/xyne-cli && npm install -g .",

140 "prepublishOnly": "bun run build:npm",

141 "release": "bun run build:npm && npm publish --access public",

142 "release:all": "bun run build:npm && node scripts/publish-all.js"

143 },

144 "dependencies": {

145 "@clack/prompts": "^1.2.0",

146 "@earendil-works/pi-agent-core": "0.80.2",

147 "@earendil-works/pi-ai": "0.80.2",

148 "@earendil-works/pi-coding-agent": "0.80.2",

149 "@earendil-works/pi-tui": "0.80.2",

150 "@modelcontextprotocol/sdk": "^1.27.1",

151 "@opentui/core": "0.1.93",

152 "@sinclair/typebox": "^0.34.48",

153 "ajv": "^8.18.0",

154 "chalk": "^5.3.0",

Long lines were clipped for display.

•dependencies registry_only=@opentui/core-darwin-arm64,@opentui/core-darwin-x64,@opentui/core-linux-arm64,@opentui/core-linux-x64,@opentui/core-win32-x64

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

dist-lib/src/pets/hosts/macos/index.jsView file

Lines 1-21javascript

1import { spawn, spawnSync } from "node:child_process";

2import { existsSync, mkdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist-lib/src/pets/hosts/macos/index.jsView on unpkg · L1

3import { randomUUID } from "node:crypto";

dist-lib/src/agent/tools/background/registry.jsView file

Lines 74-114javascript

74 }

75 const running = this.list().filter((j) => j.status === "running").length;

dist-lib/src/agent/runtime/testing/llm-request-capture.jsView file

Lines 1-41javascript

1var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {

2 if (typeof path === "string"

dist-lib/src/agent/bridge.jsView file

Lines 1-27javascript

1/**

2 * Bridge connecting an AgentSession to a XyneUI implementation.

3 *

4 * connectUI() wires up event dispatch and input actions, returning

5 * a disconnect handle for cleanup.

6 */

7import { getAgentDir, ProjectTrustStore } from "@earendil-works/pi-coding-agent";

8import { execFile } from

scripts/postinstall.jsView file

Lines 20-50javascript

20}

22const platform = process.platform;

23const nodeArch = process.arch;

24const bunArch = getBunArch();

dist/src/index.jsView file

•path = dist/src/index.js kind = oversized_source_file sizeBytes = 11896992 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/src/index.jsView on unpkg

•path = dist/src/index.js kind = oversized_cli_entrypoint sizeBytes = 11896992 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/src/index.jsView on unpkg

dist-lib/src/agent/runtime/embedded-pi-runtime.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @xyne/xyne-cli@0.3.1 matchedIdentity = npm:QHh5bmUveHluZS1jbGk:0.3.1 similarity = 0.425 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist-lib/src/agent/runtime/embedded-pi-runtime.jsView on unpkg

Source & flagged code

12 flagged · loading source

package.jsonView file

•dependencies registry_only=@opentui/core-darwin-arm64,@opentui/core-darwin-x64,@opentui/core-linux-arm64,@opentui/core-linux-x64,@opentui/core-win32-x64

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js && node scripts/patch-pi-auth-guidance.js && node scripts/patch-pi-retry-classifier.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js && node scripts/patch-pi-auth-guidance.js && node scripts/patch-pi-retry-classifier.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz

@xyne/xyne-cli@0.4.1: AI-agent control-surface risk | LPM Firewall