registry / constellai / 0.7.4

constellai@0.7.4

Constella — run autonomous AI agent-companies locally: real claude/codex agents, Goals → Specs → Issues → Plans, local models, GitHub & Telegram, all from one cosmic control plane.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 26 file(s), 168 KB of source, external domains: 127.0.0.1, registry.npmjs.org, tailscale.com

Source & flagged code

11 flagged

package.jsonView file

Lines 60-100json

60 "//prebuild": "Purge the webpack module cache before a release build. Next's incremental cache (.next/cache) can re-emit a STALE compiled module after a source edit (observed under OneDrive/Windows mtime quirks), which silently shipped a build that ignored a source fix. A release artifact must compile from source every time — this forces a full recompile (only affects `build`, not `dev`).",

61 "prebuild": "node -e \"require('fs').rmSync('.next/cache',{recursive:true,force:true})\"",

62 "build": "next build --webpack",

63 "//clean:next":

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/constella-update.mjsView file

26*/ L27: import { spawnSync, spawn, execFileSync } from "node:child_process"; L28: import { readFileSync, writeFileSync, mkdirSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/constella-update.mjsView on unpkg · L26

65const alive = (p) => { try { process.kill(p, 0); return true; } catch { return false; } }; L66: const psout = (s) => { try { return execFileSync("powershell", ["-NoProfile", "-Command", s], { timeout: 9000, windowsHide: true }).toString(); } catch { return ""; } }; L67: const ints = (s) => s.split(/\r?\n/).map((x) => +x.trim()).filter((n) => n > 0);

High

Shell

Package source references shell execution.

bin/constella-update.mjsView on unpkg · L65

11* Order matters: it INSTALLS FIRST, with the server still running. A live Constella does NOT lock the L12: * global package files (verified on Windows — `npm i -g` succeeds with the server up), so installing first L13: * just works, and if it can't we haven't taken the host down. Only THEN does it restart the server to load ... L26: */ L27: import { spawnSync, spawn, execFileSync } from "node:child_process"; L28: import { readFileSync, writeFileSync, mkdirSync } from "node:fs";

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/constella-update.mjsView on unpkg · L11

bin/constella.mjsView file

318// on Windows. Best-effort — never blocks boot; the server binds 0.0.0.0 regardless. L319: if (runMode === "vps" && process.env.CONSTELLA_SKIP_TAILSCALE !== "1") { L320: if (process.platform === "win32") { ... L323: const root = typeof process.getuid === "function" && process.getuid() === 0; L324: const sh = (cmd) => { try { execFileSync("sh", ["-c", cmd], { stdio: "inherit" }); } catch { /* best-effort */ } }; L325: const tsOk = () => { try { return spawnSync("tailscale", ["version"], { stdio: "ignore" }).status === 0; } catch { return false; } }; L326: if (!tsOk()) { console.log("• Installing Tailscale…"); sh(`curl -fsSL https://tailscale.com/install.sh | ${root ? "" : "sudo "}sh`); } L327: if (tsOk()) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/constella.mjsView on unpkg · L318

19import { mkdirSync, existsSync, readFileSync, writeFileSync, chmodSync, readdirSync, rmSync } from "node:fs"; L20: import { spawnSync, spawn, execFileSync } from "node:child_process"; L21: import { createInterface } from "node:readline"; ... L33: const cand = join(dir, "node_modules", pkg); L34: if (existsSync(join(cand, "package.json"))) return cand; L35: const parent = dirname(dir); ... L46: try { L47: const b = JSON.parse(readFileSync(join(d, "package.json"), "utf8")).bin; L48: const rel = typeof b === "string" ? b : (b?.[binName] ?? b?.[pkg]); ... L97: try { L98: if (process.platform === "win32") { L99: const d = (p[0] || "C").toUpperCase();

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/constella.mjsView on unpkg · L19

65package = constellai; repositoryIdentity = constella; dependency = better-sqlite3 L65: // So we must actually OPEN a db to trigger the dlopen and surface an ABI mismatch. L66: const tryLoad = () => { try { const D = nativeRequire("better-sqlite3"); new D(":memory:").close(); return null; } catch (e) { return e; } }; L67: const first = tryLoad();

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

bin/constella.mjsView on unpkg · L65

scripts/vps-update.shView file

•path = scripts/vps-update.sh kind = build_helper sizeBytes = 3309 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/vps-update.shView on unpkg

skills/front-end/web-artifacts-builder/scripts/shadcn-components.tar.gzView file

•path = skills/front-end/web-artifacts-builder/scripts/shadcn-components.tar.gz kind = compressed_blob sizeBytes = 19967 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

skills/front-end/web-artifacts-builder/scripts/shadcn-components.tar.gzView on unpkg

skills/design/theme-factory/theme-showcase.pdfView file

•path = skills/design/theme-factory/theme-showcase.pdf kind = high_entropy_blob sizeBytes = 124310 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

skills/design/theme-factory/theme-showcase.pdfView on unpkg

Findings

8 High6 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/constella-update.mjs

HighShellbin/constella-update.mjs

HighSame File Env Network Executionbin/constella.mjs

HighSandbox Evasion Gated Capabilitybin/constella.mjs

HighCopied Package Dependency Bridgebin/constella.mjs

HighRuntime Package Installbin/constella-update.mjs

HighShips High Entropy Blobskills/design/theme-factory/theme-showcase.pdf

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperscripts/vps-update.sh

MediumShips Compressed Blobskills/front-end/web-artifacts-builder/scripts/shadcn-components.tar.gz

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

bin/constella-update.mjsView file

Lines 1-85javascript

1#!/usr/bin/env node

2/**

3 * Constella self-updater — a STANDALONE script that stops the running server, installs the latest npm

4 * release, and relaunches. It runs as its own process (NOT a child the server can take down with it), so

5 * it can kill every node process the server owns, replace the in-use package files, and bring Constella

6 * back on the new version. Two callers:

7 *

8 * • the in-app "Update now" button → spawns this detached + hidden with `--quiet`;

9 * • `constella update` → runs it inline so you can update by hand from any terminal.

10 *

11 * Order matters: it INSTALLS FIRST, with the server still running. A live Constella does NOT lock the

12 * global package files (verified on Windows — `npm i -g` succeeds with the server up), so installing first

13 * just works, and if it can't we haven't taken the host down. Only THEN does it restart the server to load

14 * the new code: stop the process tree (the launcher AND its web + worker children — on Windows

15 * `process.kill` is an uncatchable terminate that does NOT cascade, so they're killed explicitly by PID,

16 * launcher first so its supervisor can't resurrect them) and relaunch. Stopping the server BEFORE npm is

17 * what made earlier updates fail ("installs but loops, never lands"); it survives here only as a fallback

18 * for a host where a live process really does hold the files. POSIX restarts via a SIGTERM cascade.

19 *

20 * The running server is discovered from ~/.constella/run.json (written by the launcher) or, failing that,

21 * from whoever is LISTENing on the port — so a manual run recovers a stuck instance of ANY version.

22 *

23 * Manual use:

24 * node bin/constella-update.mjs # auto-detect the running server, update, relaunch

25 * node bin/constella-update.mjs --mode start --port 3000

26 */

27import { spawnSync, spawn, execFileSync } from "node:child_process";

28import { readFileSync, writeFileSync, mkdirSync } from "node:fs";

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/constella-update.mjsView on unpkg · L11

High

Child Process

Package source references child process execution.

bin/constella-update.mjsView on unpkg · L26

29import { join } from "node:path";

30import { homedir, tmpdir } from "node:os";

32const PKG = "constellai";

33const WIN = process.platform === "win32";

35// CRITICAL: run from a directory OUTSIDE the package being replaced. npm's global install is atomic — it

36// RENAMES the existing `…/node_modules/constellai` dir aside before swapping in the new one, and on Windows

37// you cannot rename a directory tree that contains the npm process's own current working directory. This

38// updater is spawned by the web server, whose cwd is the install dir (`next start` runs with cwd=PKG_ROOT),

39// and npm inherits that cwd → `EBUSY: rename …/constellai`. Stepping out to the OS temp dir lets the rename

40// succeed even with the server fully up. (The real fix for the "installs but loops" bug — not killing files.)

41const SAFE_CWD = tmpdir();

42try { process.chdir(SAFE_CWD); } catch { /* keep current cwd if temp is unavailable */ }

43const has = (n) => process.argv.includes(n);

44const arg = (n, d) => { const i = process.argv.indexOf(n); return i >= 0 ? process.argv[i + 1] : d; };

46const HOME = process.env.CONSTELLA_HOME || arg("--home") || join(homedir(), ".constella");

47const RESULT = join(HOME, "backups", "last-update.json");

48const PIDFILE = join(HOME, "run.json");

49const QUIET = has("--quiet"); // in-app run is detached → no stdout

51let state = {};

52try { state = JSON.parse(readFileSync(PIDFILE, "utf8")); } catch { /* no pidfile → discover by port */ }

53const MODE = arg("--mode") || process.env.CONSTELLA_RUN_MODE || state.mode || "start";

54const PORT = String(arg("--port") || process.env.PORT || state.port || "3000");

55let LAUNCHER = Number(arg("--pid") || process.env.CONSTELLA_LAUNCHER_PID || state.launcherPid || 0);

57const log = (...a) => { if (!QUIET) console.log(...a); };

58const sleep = (ms) => {

59 try { Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms); return; } catch { /* no SAB → busy-wait */ }

60 // Fallback when SharedArrayBuffer is unavailable (sandbox / hardened runtime): a real blocking wait. The old

61 // no-op return made the graceful-shutdown loops spin instantly → an immediate SIGKILL that skipped run.json

62 // cleanup + the child-kill cascade.

63 const end = Date.now() + ms; while (Date.now() < end) { /* block */ }

64};

65const alive = (p) => { try { process.kill(p, 0); return true; } catch { return false; } };

66const psout = (s) => { try { return execFileSync("powershell", ["-NoProfile", "-Command", s], { timeout: 9000, windowsHide: true }).toString(); } catch { return ""; } };

67const ints = (s) => s.split(/\r?\n/).map((x) => +x.trim()).filter((n) => n > 0);

High

Shell

Package source references shell execution.

bin/constella-update.mjsView on unpkg · L65

68function result(o) { try { mkdirSync(join(HOME, "backups"), { recursive: true }); writeFileSync(RESULT, JSON.stringify({ ...o, at: new Date().toISOString() })); } catch { /* best-effort */ } }

70// Windows process helpers (no /T anywhere — we kill by explicit PID so we never terminate ourselves).

71const winKids = (pid) => ints(psout(`Get-CimInstance Win32_Process | Where-Object { $_.ParentProcessId -eq ${pid} } | Select-Object -ExpandProperty ProcessId`));

72const winParent = (pid) => ints(psout(`Get-CimInstance Win32_Process -Filter "ProcessId=${pid}" | Select-Object -ExpandProperty ParentProcessId`))[0] || 0;

73const winPortPid = (port) => ints(psout(`Get-NetTCPConnection -LocalPort ${port} -State Listen -ErrorAction SilentlyContinue | Select-Object -ExpandProperty OwningProcess`))[0] || 0;

74function kill(pid) { if (!pid) return; try { if (WIN) execFileSync("taskkill", ["/F", "/PID", String(pid)], { stdio: "ignore", windowsHide: true }); else process.kill(pid, "SIGTERM"); } catch { /* already gone */ } }

76/** Stop the running Constella so `npm i -g` can overwrite the package. Returns true if it killed one. */

77function stopServer() {

78 if (WIN) {

79 // Resolve the launcher: an explicit/persisted pid, else derive it from the port listener (web → parent).

80 if (!LAUNCHER || !alive(LAUNCHER)) { const web = winPortPid(PORT); if (web) LAUNCHER = winParent(web) || web; }

81 if (!LAUNCHER) { log("• No running server found — updating in place."); return false; }

82 log(`• Stopping Constella (launcher pid ${LAUNCHER})…`);

83 const kids = winKids(LAUNCHER); // web + worker — capture BEFORE the launcher dies

84 kill(LAUNCHER); // launcher first → its supervisor can't auto-restart the children

85 for (const k of kids) kill(k); // then the orphaned web + worker (release the native SQLite lock)

bin/constella.mjsView file

Lines 1-85javascript

1#!/usr/bin/env node

2/**

3 * Constella launcher — installs/boots the local-first runtime, the way `claude` and `codex` do:

4 * everything lives under the user-home runtime root (override with CONSTELLA_HOME).

5 *

6 * npx constellai --onboarding # force the first-time setup wizard

7 * npx constellai --start # local mode (auto-login, 127.0.0.1)

8 * npx constellai --auth # real email + password (127.0.0.1)

9 * npx constellai --vps # server over Tailscale, in Docker (0.0.0.0)

10 * npx constellai --portable [--path <drive>] # run from a USB drive (0.0.0.0)

11 * npx constellai update [--check] # detect/apply a new version

12 * (after `npm i -g constellai`, the short command `constella` works too)

13 *

14 * The launch flag picks the run mode (the UI never picks it in a public build). Network modes

15 * (auth/vps/portable) generate + persist a real BETTER_AUTH_SECRET so boot never uses a public key.

16 */

17import { homedir } from "node:os";

18import { join, dirname } from "node:path";

19import { mkdirSync, existsSync, readFileSync, writeFileSync, chmodSync, readdirSync, rmSync } from "node:fs";

20import { spawnSync, spawn, execFileSync } from "node:child_process";

21import { createInterface } from "node:readline";

22import { randomBytes } from "node:crypto";

23import { fileURLToPath } from "node:url";

24import { createRequire } from "node:module";

26// Find a dependency's install dir by walking the node_modules chain up from the constella package —

27// so it works whether the dep is nested under constella OR hoisted to the install root (the flat

28// `npm i` layout) OR symlinked (the dev pnpm tree). `require.resolve` is NOT used: a package's

29// `exports` map can hide deep subpaths (drizzle-kit hides ./bin.cjs), which broke a clean `npm i`.

30function pkgDir(pkg) {

31 let dir = PKG_ROOT;

32 for (;;) {

33 const cand = join(dir, "node_modules", pkg);

34 if (existsSync(join(cand, "package.json"))) return cand;

35 const parent = dirname(dir);

36 if (parent === dir) return null; // hit the filesystem root

37 dir = parent;

38 }

39}

45 if (!d) return null;

46 try {

47 const b = JSON.parse(readFileSync(join(d, "package.json"), "utf8")).bin;

48 const rel = typeof b === "string" ? b : (b?.[binName] ?? b?.[pkg]);

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/constella.mjsView on unpkg · L19

49 return rel ? join(d, rel) : null;

50 } catch { return null; }

51}

53const nativeRequire = createRequire(import.meta.url);

55/**

56 * Self-heal the native SQLite addon. `better-sqlite3` is a compiled module: its binary must match the

57 * running Node's ABI. It can be wrong when the package was installed under a different Node than the one

58 * now running, OR when an `allow-scripts`/`ignore-scripts` npm policy blocked the prebuild fetch at

59 * install time — both surface at boot as `NODE_MODULE_VERSION … / ERR_DLOPEN_FAILED`, which then makes

60 * the drizzle migrate fail. We fetch the correct prebuilt binary ourselves, **directly** (not via an npm

61 * lifecycle script), so it works even when install scripts are disabled — no manual `npm rebuild` needed.

62 */

63function ensureNativeRuntime() {

64 // NOTE: better-sqlite3 loads its native addon lazily — in the Database constructor, NOT at require().

65 // So we must actually OPEN a db to trigger the dlopen and surface an ABI mismatch.

66 const tryLoad = () => { try { const D = nativeRequire("better-sqlite3"); new D(":memory:").close(); return null; } catch (e) { return e; } };

67 const first = tryLoad();

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

bin/constella.mjsView on unpkg · L65

68 if (!first) return; // already loads — nothing to do

69 const msg = String((first && first.message) || first);

70 // Only act on a native-binary mismatch; let any other error surface through the normal flow.

73 const bsDir = pkgDir("better-sqlite3");

74 if (!bsDir) return;

75 console.log(`• SQLite native module doesn't match Node ${process.version} — fetching the correct build (one-time)…`);

77 // 1) prebuild-install — download the prebuilt binary for this exact Node/ABI (fast, no compiler).

78 let piBin = resolveBin("prebuild-install", "prebuild-install");

79 if (!piBin) { try { piBin = nativeRequire.resolve("prebuild-install/bin.js", { paths: [bsDir, PKG_ROOT] }); } catch { /* not resolvable */ } }

80 if (!piBin) { const nested = join(bsDir, "node_modules", "prebuild-install", "bin.js"); if (existsSync(nested)) piBin = nested; }

81 if (piBin) spawnSync(process.execPath, [piBin], { cwd: bsDir, stdio: "inherit" });

82 if (!tryLoad()) { console.log("• SQLite native module ready."); return; }

84 // 2) Fallback — recompile from source (needs a C/C++ toolchain). Run directly via node-gyp if present.

85 const gyp = resolveBin("node-gyp", "node-gyp");

Lines 298-338javascript

298 changed = ensureSecret(vars, "CONSTELLA_VAULT_KEY", () => randomBytes(32).toString("base64")) || changed;

299 changed = ensureSecret(vars, "CONSTELLA_WORKER_SECRET", () => randomBytes(24).toString("base64url")) || changed;

300 if (changed) {