registry / constellai / 0.7.1

constellai@0.7.1

Constella — run autonomous AI agent-companies locally: real claude/codex agents, Goals → Specs → Issues → Plans, local models, GitHub & Telegram, all from one cosmic control plane.

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 26 file(s), 168 KB of source, external domains: 127.0.0.1, registry.npmjs.org, tailscale.com

Source & flagged code

11 flagged

package.jsonView file

Lines 60-100json

60 "//prebuild": "Purge the webpack module cache before a release build. Next's incremental cache (.next/cache) can re-emit a STALE compiled module after a source edit (observed under OneDrive/Windows mtime quirks), which silently shipped a build that ignored a source fix. A release artifact must compile from source every time — this forces a full recompile (only affects `build`, not `dev`).",

61 "prebuild": "node -e \"require('fs').rmSync('.next/cache',{recursive:true,force:true})\"",

62 "build": "next build --webpack",

63 "//clean:next": "Purge the ENTIRE .next (server + static + cache), not just the cache. An incremental `next build` over a stale .next/server + .next/static (under OneDrive/Windows mtime quirks) can ship an artifact whose RSC/manifest references client-chunk state the emitted static chunks don't match — the published 0.2.15 did exactly this, crashing /login at hydration with 'invariant expected layout router to be mounted'. The release build must start from an empty .next.",

64 "clean:next": "node -e \"require('fs').rmSync('.next',{recursive:true,force:true})\"",

65 "//build:release": "Clean, from-scratch production build for the artifact that ships. `validate` (the pre-publish gate) uses this; plain `build` stays incremental for fast local iteration.",

66 "build:release": "npm run clean:next && next build --webpack",

67 "//smoke": "Pre-publish smoke gate: boots the built package in isolation and loads /login (signin + signup) in headless Chrome, asserting no 'invariant expected layout router' / 'broke at the root'. Run after `validate`, before `npm publish`. Catches a bad .next artifact before it ever ships.",

68 "smoke": "node scripts/smoke-login.mjs",

69 "start": "node scripts/start-all.mjs",

70 "start:web": "next start",

71 "lint": "eslint .",

72 "lint:i18n": "eslint src/components src/app --max-warnings 0",

73 "parity": "node scripts/i18n-parity.mjs",

74 "typecheck": "tsc --noEmit",

75 "validate": "npm run typecheck && npm run parity && npm run build:release",

76 "update": "node bin/constella.mjs update",

77 "clean": "node scripts/clean-repo.mjs",

78 "prepublishOnly": "drizzle-kit generate --config drizzle.config.mjs && npm run validate",

79 "prepack": "node scripts/trim-next.mjs",

80 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L80

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L80

81 "db:dir": "node -e \"require('fs').mkdirSync('.constella',{recursive:true})\"",

82 "db:generate": "drizzle-kit generate --config drizzle.config.mjs",

83 "predb:migrate": "npm run db:dir",

84 "db:migrate": "drizzle-kit migrate --config drizzle.config.mjs",

85 "predb:push": "npm run db:dir",

86 "db:push": "drizzle-kit push --config drizzle.config.mjs",

87 "db:studio": "drizzle-kit studio --config drizzle.config.mjs",

88 "predb:seed": "npm run db:dir",

89 "db:seed": "tsx src/db/seed.ts",

90 "db:migrate-fs": "tsx src/db/migrate-fs.ts",

91 "db:defake-models": "tsx src/db/defake-models.ts",

92 "db:reset-state": "tsx src/db/reset-state.ts",

93 "db:repair-fs": "tsx src/db/repair-fs.ts",

94 "db:nuke": "node -e \"const fs=require('fs'),os=require('os'),p=require('path');fs.rmSync('.constella',{recursive:true,force:true});fs.rmSync(p.join(process.env.CONSTELLA_HOME||p.join(os.homedir(),'.constella'),'organizations'),{recursive:true,force:true})\"",

95 "db:reset": "npm run db:nuke && npm run db:migrate",

96 "db:reset-demo": "npm run db:nuke && npm run db:migrate && npm run db:seed && npm run db:repair-fs",

97 "worker": "node --env-file=.env bin/worker.mjs",

98 "constella": "node bin/constella.mjs"

99 },

100 "bin": {

bin/constella-update.mjsView file

Lines 1-85javascript

1#!/usr/bin/env node

2/**

3 * Constella self-updater — a STANDALONE script that stops the running server, installs the latest npm

4 * release, and relaunches. It runs as its own process (NOT a child the server can take down with it), so

5 * it can kill every node process the server owns, replace the in-use package files, and bring Constella

6 * back on the new version. Two callers:

7 *

8 * • the in-app "Update now" button → spawns this detached + hidden with `--quiet`;

9 * • `constella update` → runs it inline so you can update by hand from any terminal.

10 *

11 * Order matters: it INSTALLS FIRST, with the server still running. A live Constella does NOT lock the

bin/constella.mjsView file

Lines 1-85javascript

1#!/usr/bin/env node

2/**

3 * Constella launcher — installs/boots the local-first runtime, the way `claude` and `codex` do:

4 * everything lives under the user-home runtime root (override with CONSTELLA_HOME).

5 *

6 * npx constellai --onboarding # force the first-time setup wizard

7 * npx constellai --start # local mode (auto-login, 127.0.0.1)

8 * npx constellai --auth # real email + password (127.0.0.1)

9 * npx constellai --vps # server over Tailscale, in Docker (0.0.0.0)

10 * npx constellai --portable [--path <drive>] # run from a USB drive (0.0.0.0)

11 * npx constellai update [--check] # detect/apply a new version

scripts/vps-update.shView file

•path = scripts/vps-update.sh kind = build_helper sizeBytes = 3309 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/vps-update.shView on unpkg

skills/front-end/web-artifacts-builder/scripts/shadcn-components.tar.gzView file

•path = skills/front-end/web-artifacts-builder/scripts/shadcn-components.tar.gz kind = compressed_blob sizeBytes = 19967 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

skills/front-end/web-artifacts-builder/scripts/shadcn-components.tar.gzView on unpkg

skills/design/theme-factory/theme-showcase.pdfView file

•path = skills/design/theme-factory/theme-showcase.pdf kind = high_entropy_blob sizeBytes = 124310 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

skills/design/theme-factory/theme-showcase.pdfView on unpkg

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/constella-update.mjsView file

26*/ L27: import { spawnSync, spawn, execFileSync } from "node:child_process"; L28: import { readFileSync, writeFileSync, mkdirSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/constella-update.mjsView on unpkg · L26

65const alive = (p) => { try { process.kill(p, 0); return true; } catch { return false; } }; L66: const psout = (s) => { try { return execFileSync("powershell", ["-NoProfile", "-Command", s], { timeout: 9000, windowsHide: true }).toString(); } catch { return ""; } }; L67: const ints = (s) => s.split(/\r?\n/).map((x) => +x.trim()).filter((n) => n > 0);

High

Shell

Package source references shell execution.

bin/constella-update.mjsView on unpkg · L65

11* Order matters: it INSTALLS FIRST, with the server still running. A live Constella does NOT lock the L12: * global package files (verified on Windows — `npm i -g` succeeds with the server up), so installing first L13: * just works, and if it can't we haven't taken the host down. Only THEN does it restart the server to load ... L26: */ L27: import { spawnSync, spawn, execFileSync } from "node:child_process"; L28: import { readFileSync, writeFileSync, mkdirSync } from "node:fs";

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/constella-update.mjsView on unpkg · L11

bin/constella.mjsView file

318// on Windows. Best-effort — never blocks boot; the server binds 0.0.0.0 regardless. L319: if (runMode === "vps" && process.env.CONSTELLA_SKIP_TAILSCALE !== "1") { L320: if (process.platform === "win32") { ... L323: const root = typeof process.getuid === "function" && process.getuid() === 0; L324: const sh = (cmd) => { try { execFileSync("sh", ["-c", cmd], { stdio: "inherit" }); } catch { /* best-effort */ } }; L325: const tsOk = () => { try { return spawnSync("tailscale", ["version"], { stdio: "ignore" }).status === 0; } catch { return false; } }; L326: if (!tsOk()) { console.log("• Installing Tailscale…"); sh(`curl -fsSL https://tailscale.com/install.sh | ${root ? "" : "sudo "}sh`); } L327: if (tsOk()) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/constella.mjsView on unpkg · L318

19import { mkdirSync, existsSync, readFileSync, writeFileSync, chmodSync, readdirSync, rmSync } from "node:fs"; L20: import { spawnSync, spawn, execFileSync } from "node:child_process"; L21: import { createInterface } from "node:readline"; ... L33: const cand = join(dir, "node_modules", pkg); L34: if (existsSync(join(cand, "package.json"))) return cand; L35: const parent = dirname(dir); ... L46: try { L47: const b = JSON.parse(readFileSync(join(d, "package.json"), "utf8")).bin; L48: const rel = typeof b === "string" ? b : (b?.[binName] ?? b?.[pkg]); ... L97: try { L98: if (process.platform === "win32") { L99: const d = (p[0] || "C").toUpperCase();

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/constella.mjsView on unpkg · L19

65package = constellai; repositoryIdentity = constella; dependency = better-sqlite3 L65: // So we must actually OPEN a db to trigger the dlopen and surface an ABI mismatch. L66: const tryLoad = () => { try { const D = nativeRequire("better-sqlite3"); new D(":memory:").close(); return null; } catch (e) { return e; } }; L67: const first = tryLoad();

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

bin/constella.mjsView on unpkg · L65

scripts/vps-update.shView file

•path = scripts/vps-update.sh kind = build_helper sizeBytes = 3309 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/vps-update.shView on unpkg

skills/front-end/web-artifacts-builder/scripts/shadcn-components.tar.gzView file

•path = skills/front-end/web-artifacts-builder/scripts/shadcn-components.tar.gz kind = compressed_blob sizeBytes = 19967 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

skills/front-end/web-artifacts-builder/scripts/shadcn-components.tar.gzView on unpkg

skills/design/theme-factory/theme-showcase.pdfView file

•path = skills/design/theme-factory/theme-showcase.pdf kind = high_entropy_blob sizeBytes = 124310 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

skills/design/theme-factory/theme-showcase.pdfView on unpkg

Findings

8 High6 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/constella-update.mjs

HighShellbin/constella-update.mjs

HighSame File Env Network Executionbin/constella.mjs

HighSandbox Evasion Gated Capabilitybin/constella.mjs

HighCopied Package Dependency Bridgebin/constella.mjs

HighRuntime Package Installbin/constella-update.mjs

HighShips High Entropy Blobskills/design/theme-factory/theme-showcase.pdf

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperscripts/vps-update.sh

MediumShips Compressed Blobskills/front-end/web-artifacts-builder/scripts/shadcn-components.tar.gz

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

11 flagged

package.jsonView file

Lines 60-100json

61 "prebuild": "node -e \"require('fs').rmSync('.next/cache',{recursive:true,force:true})\"",

62 "build": "next build --webpack",

64 "clean:next": "node -e \"require('fs').rmSync('.next',{recursive:true,force:true})\"",

65 "//build:release": "Clean, from-scratch production build for the artifact that ships. `validate` (the pre-publish gate) uses this; plain `build` stays incremental for fast local iteration.",

66 "build:release": "npm run clean:next && next build --webpack",

68 "smoke": "node scripts/smoke-login.mjs",

69 "start": "node scripts/start-all.mjs",

70 "start:web": "next start",

71 "lint": "eslint .",

72 "lint:i18n": "eslint src/components src/app --max-warnings 0",

73 "parity": "node scripts/i18n-parity.mjs",

74 "typecheck": "tsc --noEmit",

75 "validate": "npm run typecheck && npm run parity && npm run build:release",

76 "update": "node bin/constella.mjs update",

77 "clean": "node scripts/clean-repo.mjs",

78 "prepublishOnly": "drizzle-kit generate --config drizzle.config.mjs && npm run validate",

79 "prepack": "node scripts/trim-next.mjs",

80 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L80

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L80

81 "db:dir": "node -e \"require('fs').mkdirSync('.constella',{recursive:true})\"",

82 "db:generate": "drizzle-kit generate --config drizzle.config.mjs",

83 "predb:migrate": "npm run db:dir",

84 "db:migrate": "drizzle-kit migrate --config drizzle.config.mjs",

85 "predb:push": "npm run db:dir",

86 "db:push": "drizzle-kit push --config drizzle.config.mjs",

87 "db:studio": "drizzle-kit studio --config drizzle.config.mjs",

88 "predb:seed": "npm run db:dir",

89 "db:seed": "tsx src/db/seed.ts",

90 "db:migrate-fs": "tsx src/db/migrate-fs.ts",

91 "db:defake-models": "tsx src/db/defake-models.ts",

92 "db:reset-state": "tsx src/db/reset-state.ts",

93 "db:repair-fs": "tsx src/db/repair-fs.ts",

95 "db:reset": "npm run db:nuke && npm run db:migrate",

96 "db:reset-demo": "npm run db:nuke && npm run db:migrate && npm run db:seed && npm run db:repair-fs",

97 "worker": "node --env-file=.env bin/worker.mjs",

98 "constella": "node bin/constella.mjs"

99 },

100 "bin": {

bin/constella-update.mjsView file

Lines 1-85javascript

1#!/usr/bin/env node

2/**

3 * Constella self-updater — a STANDALONE script that stops the running server, installs the latest npm

4 * release, and relaunches. It runs as its own process (NOT a child the server can take down with it), so

5 * it can kill every node process the server owns, replace the in-use package files, and bring Constella

6 * back on the new version. Two callers:

7 *

8 * • the in-app "Update now" button → spawns this detached + hidden with `--quiet`;

9 * • `constella update` → runs it inline so you can update by hand from any terminal.

10 *

11 * Order matters: it INSTALLS FIRST, with the server still running. A live Constella does NOT lock the

bin/constella.mjsView file

Lines 1-85javascript

1#!/usr/bin/env node

2/**

3 * Constella launcher — installs/boots the local-first runtime, the way `claude` and `codex` do:

4 * everything lives under the user-home runtime root (override with CONSTELLA_HOME).

5 *

6 * npx constellai --onboarding # force the first-time setup wizard

7 * npx constellai --start # local mode (auto-login, 127.0.0.1)

8 * npx constellai --auth # real email + password (127.0.0.1)

9 * npx constellai --vps # server over Tailscale, in Docker (0.0.0.0)

10 * npx constellai --portable [--path <drive>] # run from a USB drive (0.0.0.0)

11 * npx constellai update [--check] # detect/apply a new version

scripts/vps-update.shView file

•path = scripts/vps-update.sh kind = build_helper sizeBytes = 3309 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/vps-update.shView on unpkg

skills/front-end/web-artifacts-builder/scripts/shadcn-components.tar.gzView file

•path = skills/front-end/web-artifacts-builder/scripts/shadcn-components.tar.gz kind = compressed_blob sizeBytes = 19967 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

skills/front-end/web-artifacts-builder/scripts/shadcn-components.tar.gzView on unpkg

skills/design/theme-factory/theme-showcase.pdfView file

•path = skills/design/theme-factory/theme-showcase.pdf kind = high_entropy_blob sizeBytes = 124310 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

skills/design/theme-factory/theme-showcase.pdfView on unpkg

Lines 298-338javascript

298 changed = ensureSecret(vars, "CONSTELLA_VAULT_KEY", () => randomBytes(32).toString("base64")) || changed;

299 changed = ensureSecret(vars, "CONSTELLA_WORKER_SECRET", () => randomBytes(24).toString("base64url")) || changed;

300 if (changed) {

301 writeFileSync(ENV_FILE, Object.entries(vars).map(([k, v]) => `${k}=${v}`).join("\n") + "\n", { mode: 0o600 });

302 try { chmodSync(ENV_FILE, 0o600); } catch { /* best-effort on Windows */ }

303 }

304 console.log(`• Secrets ready (stored in ${ENV_FILE}, never printed).`);

305}

306

307// Portable: validate the drive BEFORE installing/booting (minimum 32 GB free; no upper recommendation).

308if (runMode === "portable") {

309 const free = freeBytes(HOME);

310 const gb = Math.round((free / 1e9) * 10) / 10;

311 if (free && free < 32e9) { console.error(`✖ Portable needs at least 32 GB free — only ${gb} GB on ${HOME}. Use a bigger drive.`); process.exit(1); }

312 else if (free) console.log(`• ${gb} GB free on the drive — good (32 GB minimum; more headroom only helps if you carry local models).`);

313}

314

315// VPS on a HOST: one-command setup — ensure Tailscale is installed and joined, so the `0.0.0.0` bind is

316// reachable privately on your tailnet (the `npx constellai --vps` quick path). Skipped when

317// CONSTELLA_SKIP_TAILSCALE=1 (the systemd service sets it — vps-install.sh already joined the tailnet) and

318// on Windows. Best-effort — never blocks boot; the server binds 0.0.0.0 regardless.

319if (runMode === "vps" && process.env.CONSTELLA_SKIP_TAILSCALE !== "1") {

320 if (process.platform === "win32") {

321 console.log("• VPS on Windows → set up Tailscale manually (host Tailscale auto-setup is Linux-only). Skipping.");

322 } else {

323 const root = typeof process.getuid === "function" && process.getuid() === 0;

324 const sh = (cmd) => { try { execFileSync("sh", ["-c", cmd], { stdio: "inherit" }); } catch { /* best-effort */ } };

325 const tsOk = () => { try { return spawnSync("tailscale", ["version"], { stdio: "ignore" }).status === 0; } catch { return false; } };

326 if (!tsOk()) { console.log("• Installing Tailscale…"); sh(`curl -fsSL https://tailscale.com/install.sh | ${root ? "" : "sudo "}sh`); }

327 if (tsOk()) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/constella.mjsView on unpkg · L318

328 console.log("• Joining your tailnet (a browser auth URL prints if this host isn't joined yet)…");

329 sh(`${root ? "" : "sudo "}tailscale up`);

330 try {

331 const ip = execFileSync("tailscale", ["ip", "-4"], { timeout: 5000 }).toString().trim().split(/\s+/)[0];

332 if (ip) {

333 const origin = `http://${ip}:${port}`;

334 addTrustedAuthOrigin(origin, { makeBase: true });

335 console.log(`• VPS reachable on your tailnet at: ${origin}`);

336 }

337 } catch { /* ip probe best-effort */ }

338 } else {