registry / sma-framework / 3.6.0

sma-framework@3.6.0

SMA (Shared Memory & Automation) - the accountability layer for AI coding agents: layered memory, multi-terminal coordination without a server, and verified claims. Plain files + git, zero LLM in the hot path. Install: npx -y sma-framework@latest init

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 25 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsProtestwareUrlStrings

ManifestNo manifest risk signals triggered.

scanned 215 file(s), 4.26 MB of source, external domains: api.npmjs.org, api.search.brave.com, bitbucket.org, crates.io, docs.cline.bot, github.com, gitlab.com, img.shields.io, pypi.org, raw.githubusercontent.com, registry.npmjs.org, selftest.local, www.codebuddy.ai

Source & flagged code

16 flagged

scripts/sma/__tests__/profile.test.tsView file

Lines 104-145typescript

104 expect((raw as Record<string, unknown>).profileVersion).toBeUndefined()

105 // on-disk bytes untouched (readProfile never writes)

106 expect(readFileSync(v1Path, 'utf8')).toBe(bytes)

107 })

Source & flagged code

16 flagged · loading source

scripts/sma/__tests__/profile.test.tsView file

124patternName = github_pat severity = critical line = 124 matchedText = expect(s...rue)

Critical

Critical Secret

Package contains a critical-looking secret pattern.

scripts/sma/__tests__/profile.test.tsView on unpkg · L124

124patternName = github_pat severity = critical line = 124 matchedText = expect(s...rue)

Critical

Secret Pattern

GitHub personal access token in scripts/sma/__tests__/profile.test.ts

scripts/sma/__tests__/profile.test.tsView on unpkg · L124

125patternName = aws_access_key severity = critical line = 125 matchedText = expect(s...rue)

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/profile.test.ts

scripts/sma/__tests__/profile.test.tsView on unpkg · L125

bin/init.mjsView file

350try { L351: const { pathToFileURL } = await import('node:url'); L352: const embed = await import(pathToFileURL(path.join(pkgRoot, 'scripts', 'sma', 'lib', 'claude-embed.mjs')).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/init.mjsView on unpkg · L350

scripts/sma/lib/registry.mjsView file

32import { fileURLToPath } from 'node:url' L33: import { execFileSync, spawn as childSpawn } from 'node:child_process' L34: import { createHash } from 'node:crypto' ... L97: export function resolveTerminalIdentity(opts = {}) { L98: const env = opts.env ?? process.env L99: const pid = opts.pid ?? process.pid ... L147: export function smaRoot(opts = {}) { L148: const cwd = opts.cwd ?? process.cwd() L149: try {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

scripts/sma/lib/registry.mjsView on unpkg · L32

sma-core/bin/lib/shell-command-projection.cjsView file

17Object.defineProperty(exports, "__esModule", { value: true }); L18: exports.[redacted] = [redacted]; L19: exports.formatHookCommandForRuntime = formatHookCommandForRuntime; ... L64: function [redacted](opts = {}) { L65: const platform = opts.platform || process.platform; L66: const runtime = opts.runtime || 'generic'; ... L345: { L346: label: 'cmd.exe', L347: shell: 'cmd', ... L352: shell: 'bash', L353: command: `echo 'export PATH="${bashTargetDir}:$PATH"' >> ~/.bashrc`, L354: },

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

sma-core/bin/lib/shell-command-projection.cjsView on unpkg · L17

sma-core/workflows/_runtime-launcher.snippet.shView file

•path = sma-core/workflows/_runtime-launcher.snippet.sh kind = build_helper sizeBytes = 4466 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

sma-core/workflows/_runtime-launcher.snippet.shView on unpkg

scripts/sma/__tests__/lint.test.tsView file

819patternName = aws_access_key severity = critical line = 819 matchedText = const aw...ET')

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/lint.test.ts

scripts/sma/__tests__/lint.test.tsView on unpkg · L819

scripts/sma/__tests__/flight.test.tsView file

141patternName = aws_access_key severity = critical line = 141 matchedText = const aw...nd')

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/flight.test.ts

scripts/sma/__tests__/flight.test.tsView on unpkg · L141

144patternName = private_key_rsa severity = critical line = 144 matchedText = const pk...--')

Critical

Secret Pattern

RSA private key in scripts/sma/__tests__/flight.test.ts

scripts/sma/__tests__/flight.test.tsView on unpkg · L144

169patternName = aws_access_key severity = critical line = 169 matchedText = journalT... }],

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/flight.test.ts

scripts/sma/__tests__/flight.test.tsView on unpkg · L169

172patternName = aws_access_key severity = critical line = 172 matchedText = expect(c...LE')

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/flight.test.ts

scripts/sma/__tests__/flight.test.tsView on unpkg · L172

180patternName = aws_access_key severity = critical line = 180 matchedText = expect(i...LE')

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/flight.test.ts

scripts/sma/__tests__/flight.test.tsView on unpkg · L180

181patternName = aws_access_key severity = critical line = 181 matchedText = expect(p...LE')

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/flight.test.ts

scripts/sma/__tests__/flight.test.tsView on unpkg · L181

226patternName = aws_access_key severity = critical line = 226 matchedText = const le...E\n'

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/flight.test.ts

scripts/sma/__tests__/flight.test.tsView on unpkg · L226

229patternName = aws_access_key severity = critical line = 229 matchedText = expect(w...LE')

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/flight.test.ts

scripts/sma/__tests__/flight.test.tsView on unpkg · L229

Findings

12 Critical7 Medium6 Low

CriticalCritical Secretscripts/sma/__tests__/profile.test.ts

CriticalSecret Patternscripts/sma/__tests__/profile.test.ts

CriticalSecret Patternscripts/sma/__tests__/lint.test.ts

CriticalSecret Patternscripts/sma/__tests__/flight.test.ts

MediumDynamic Requirebin/init.mjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencesma-core/bin/lib/shell-command-projection.cjs

MediumProtestware

MediumShips Build Helpersma-core/workflows/_runtime-launcher.snippet.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptoscripts/sma/lib/registry.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

bin/init.mjsView file

Lines 330-370javascript

330 for (const d of ['sessions', 'claims', 'journal', 'reflex']) mkdirSync(path.join(project, '.sma', d), { recursive: true });

331 const gitignorePath = path.join(project, '.gitignore');

332 if (existsSync(gitignorePath)) {

333 const gi = readFileSync(gitignorePath, 'utf8');

334 // Recognize any existing rule that already ignores the .sma directory —

335 // `.sma`, `.sma/`, or the `.sma/*` idiom (often paired with `!.sma/README.md`

336 // to keep the README tracked). Appending a blunt `.sma/` when `.sma/*` is

337 // already present would shadow that re-include (git cannot re-include a file

338 // whose parent dir is excluded), so the check must treat `.sma/*` as covered.

339 if (!/^\.sma\/?\*?\s*$/m.test(gi)) {

340 writeText(gitignorePath, gi + (gi.endsWith('\n') || gi === '' ? '' : '\n') + '.sma/\n');

341 console.log(' + .gitignore added .sma/ line');

342 }

343 }

344 console.log(` + runtime dirs .sma/{sessions,claims,journal,reflex}`);

345

346 // 7.5. CLAUDE.md — managed SMA rules block (BL-165, v3.6): most installs have no

347 // autoMemoryDirectory wiring, so without this pointer the memory corpus is

348 // invisible to the very agent it exists for. Same splice law as `sma emit`,

349 // its own SMA:RULES anchor family; an embed failure warns, NEVER fails the install.

350 try {

351 const { pathToFileURL } = await import('node:url');

352 const embed = await import(pathToFileURL(path.join(pkgRoot, 'scripts', 'sma', 'lib', 'claude-embed.mjs')).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/init.mjsView on unpkg · L350

353 const res = embed.embedRules({ projectDir: project, version });

354 if (res.action === 'skipped-corrupt') {

355 console.warn(' ! CLAUDE.md SMA:RULES anchors are torn — block NOT written; fix the markers and re-run init');

356 } else if (res.action === 'error') {

357 console.warn(` ! CLAUDE.md rules block not written (${res.detail})`);

358 } else {

359 console.log(` + CLAUDE.md SMA rules block (${res.action})`);

360 }

361 } catch (e) {

362 console.warn(` ! CLAUDE.md rules block skipped (${e && e.message ? e.message : e})`);

363 }

364

365 // 8. Plain-language completion summary

366 console.log(`

367Done. SMA${version ? ` v${version}` : ''} is installed${isGlobal ? ' globally' : ' in this project'}.

368

369 What you got:

370 - the SMA engine (workflows, agents, templates) under ${isGlobal ? '~/.claude' : '.claude'}/sma-core

scripts/sma/lib/registry.mjsView file

Lines 12-52javascript

12 * idle|done); liveness is `renewTime`/mtime. Staleness is graduated (D-49-11): fresh ->

13 * attention after ATTENTION_AFTER_MISSES missed beats -> reap-eligible after TTL+grace,

14 * and reap-eligible splits clean (auto-reapable) vs dirty (fresh mtimes inside claimed

15 * globs -> needs-human, NEVER auto-deleted, P3).

16 *

17 * The throttle is mtime-check-then-skip (RESEARCH Open Question 2): hooks are

18 * subprocess-per-event with no daemon, so the only honest throttle is "read own file's

19 * renewTime, skip the write if younger than HEARTBEAT_INTERVAL_MS."

20 *

21 * Node built-ins only; every fs path is dependency-injectable for tests.

22 */

24import {

25 readdirSync as fsReaddirSync,

26 statSync as fsStatSync,

27 rmSync as fsRmSync,

28 existsSync as fsExistsSync,

29 readFileSync as fsReadFileSync,

30} from 'node:fs'

31import { join, dirname } from 'node:path'

32import { fileURLToPath } from 'node:url'

33import { execFileSync, spawn as childSpawn } from 'node:child_process'

34import { createHash } from 'node:crypto'

Low

Weak Crypto

Package source references weak cryptographic algorithms.

scripts/sma/lib/registry.mjsView on unpkg · L32

36import { atomicWriteJson, readJsonSafe } from './fs-atomics.mjs'

37import { compileGlob, normalizePath } from './collision.mjs'

38import { appendEvent } from './journal.mjs'

39import {

40 SESSIONS_DIR,

41 SMA_ROOT,

42 HEARTBEAT_INTERVAL_MS,

43 ATTENTION_AFTER_MISSES,

44 SESSION_TTL_MS,

45 GRACE_MS,

46} from './constants.mjs'

48/** Valid self-reported status values (C12). Liveness is a SEPARATE axis (B16). */

49export const STATUS_VALUES = ['working', 'blocked', 'idle', 'done']

51/** 49.3-13 (D-49.3-21) — the fingerprint's ATTENTION-axis values. Stored on the lease as

52 * `fpStatus`, ALONGSIDE the work-axis `status` above, never conflated with it. */

sma-core/bin/lib/shell-command-projection.cjsView file

Lines 1-37javascript

1"use strict";

2/**

3 * Shell Command Projection Module

4 *

5 * Tracer-bullet seam for runtime-aware projection of serialized command text

6 * that SMA writes into runtime config or prints for copy/paste. This module

7 * does NOT execute commands; it only renders command text for external shells

8 * and runtimes.

9 *

10 * ADR-457 build-at-publish: the hand-written bin/lib/shell-command-projection.cjs

11 * collapsed to a TypeScript source of truth. Behaviour is preserved byte-for-behaviour

12 * from the prior hand-written .cjs; only types are added.

13 */

14var __importDefault = (this && this.__importDefault) || function (mod) {

15 return (mod && mod.__esModule) ? mod : { "default": mod };

16};

17Object.defineProperty(exports, "__esModule", { value: true });

18exports.hookCommandNeedsPowerShellCallOperator = hookCommandNeedsPowerShellCallOperator;

19exports.formatHookCommandForRuntime = formatHookCommandForRuntime;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

sma-core/bin/lib/shell-command-projection.cjsView on unpkg · L17

20exports.shellHookOmitsBashRunner = shellHookOmitsBashRunner;

21exports.buildLocalShellHookCommand = buildLocalShellHookCommand;

22exports.formatManagedHookScriptToken = formatManagedHookScriptToken;

23exports.projectLocalHookPrefix = projectLocalHookPrefix;

24exports.projectPortableHookBaseDir = projectPortableHookBaseDir;

25exports.projectShellCommandText = projectShellCommandText;

26exports.projectManagedHookCommand = projectManagedHookCommand;

27exports.isManagedHookBasename = isManagedHookBasename;

28exports.isManagedHookCommand = isManagedHookCommand;

29exports.projectLegacySettingsHookCommand = projectLegacySettingsHookCommand;

30exports.escapeTomlDoubleQuotedString = escapeTomlDoubleQuotedString;

31exports.projectCodexHookTomlCommand = projectCodexHookTomlCommand;

32exports.escapePowerShellSingleQuoted = escapePowerShellSingleQuoted;

33exports.escapePosixDoubleQuoted = escapePosixDoubleQuoted;

34exports.escapeSingleQuotedShellLiteral = escapeSingleQuotedShellLiteral;

35exports.renderShellActionLines = renderShellActionLines;

36exports.projectPathActionProjection = projectPathActionProjection;

37exports.projectPersistentPathExportActions = projectPersistentPathExportActions;

scripts/sma/__tests__/lint.test.tsView file

Lines 799-839typescript

799 'tags: [tech]',

800 'use-when: probing the MEM-SECRET screen',

801 'importance: 5',

802 '---',

803 '',

804 ].join('\n')

805 writeFileSync(join(dir, 'reference_probe.md'), head + body, 'utf8')

806 return runLint({

807 corpusDir: dir,

808 tagsPath: join(dir, 'TAGS.md'),

809 indexPath: join(dir, 'MEMORY.md'),

810 })

811 } finally {

812 rmSync(dir, { recursive: true, force: true, maxRetries: 3 })

813 }

814}

815

816describe('MEM-SECRET — corpus-door secret screen (49.1-14 task 2)', () => {

817 it('Test 1 (secret shapes): AWS key id, sk- token, and a base64/opaque run each → MEM-SECRET critical', () => {

818 // AWS-style access key id.

819 const aws = findingsOf(lintBody('deploy key AKIAIOSFODNN7EXAMPLE was rotated\n'), 'MEM-SECRET')

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/lint.test.ts

scripts/sma/__tests__/lint.test.tsView on unpkg · L819

820 expect(aws.length).toBeGreaterThanOrEqual(1)

821 expect(aws.every((f) => f.tier === 'critical')).toBe(true)

822 expect(aws.every((f) => f.file === 'reference_probe.md')).toBe(true)

823

824 // sk- prefixed API token.

825 const sk = findingsOf(lintBody('the token was sk-abcdef0123456789ABCDEFxyz not redacted\n'), 'MEM-SECRET')

826 expect(sk.some((f) => f.tier === 'critical')).toBe(true)

827

828 // A 44-char base64/opaque high-entropy run (a leaked secret value).

829 const b64 = findingsOf(lintBody('value=Zm9vYmFyQmF6cXV4MTIzNDU2Nzg5MGFiY2RlZmdoaWpr\n'), 'MEM-SECRET')

830 expect(b64.some((f) => f.tier === 'critical')).toBe(true)

831 })

832

833 it('Test 2 (env var NAME, no value): quoting SMA_SNAPSHOT_TOKEN with no value → no MEM-SECRET (names are fine)', () => {

834 const res = lintBody('Set the `SMA_SNAPSHOT_TOKEN` env var and the OAUTH_STATE_SECRET name before boot.\n')

835 expect(findingsOf(res, 'MEM-SECRET')).toHaveLength(0)

836 })

837

838 it('Test 3 (git sha allowlist): ordinary prose with a 40-hex git sha → no MEM-SECRET', () => {

839 const res = lintBody('Recover from the pre-clobber commit 258eb21c0ffee1234567890abcdef1234567890ab in history.\n')

scripts/sma/__tests__/flight.test.tsView file

Lines 121-161typescript

121 expect(a).toContain('trigger: auto')

122 })

123

124 it('Test 3: 500 marks -> capsule <= CAPSULE_BUDGET; oldest dropped first + truncated marker; header + Current-task intact', () => {

125 const marksTail = Array.from({ length: 500 }, (_, i) => ({ tool: 'Edit', target: `lib/file-${i}.mjs` }))

126 const cap = buildCapsule(capsuleFixture({ marksTail }))

127 expect(Buffer.byteLength(cap, 'utf8')).toBeLessThanOrEqual(CAPSULE_BUDGET)

128 expect(cap).toContain('…truncated')

129 // oldest dropped first: file-0 gone, a late file survives

130 expect(cap).not.toContain('lib/file-0.mjs')

131 expect(cap).toContain('lib/file-499.mjs')

132 // header + Current-task are NEVER truncated

133 expect(cap).toContain('# SMA Flight Capsule')

134 expect(cap).toContain('## Current task')

135 expect(cap).toContain('## Resume')

136 })

137})

138

139describe('scanForSecrets', () => {

140 it('Test 4: redacts AWS key / PRIVATE KEY header / Bearer / sk- token; clean text byte-identical; pure', () => {

141 const aws = scanForSecrets('key AKIAIOSFODNN7EXAMPLE end')

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/flight.test.ts

scripts/sma/__tests__/flight.test.tsView on unpkg · L141

142 expect(aws.text).toBe('key [redacted:aws-access-key] end')

143

144 const pk = scanForSecrets('-----BEGIN RSA PRIVATE KEY-----')

145 expect(pk.text).toBe('[redacted:private-key-header]')

146

147 const bearer = scanForSecrets('Authorization: Bearer abcDEF1234567890token')

148 expect(bearer.text).toContain('[redacted:bearer-token]')

149 expect(bearer.text).not.toContain('abcDEF1234567890token')

150

151 const sk = scanForSecrets('openai sk-abc123DEF456ghi789 done')

152 expect(sk.text).toContain('[redacted:sk-token]')

153 expect(sk.text).not.toContain('sk-abc123DEF456ghi789')

154

155 // clean text passes through byte-identical

156 const clean = 'просто обычный текст без секретов — lib/flight.mjs задача 2'

157 expect(scanForSecrets(clean).text).toBe(clean)

158

159 // SECRET_PATTERNS is exported data (no fs); scan is pure

160 expect(Array.isArray(SECRET_PATTERNS)).toBe(true)

161 expect(SECRET_PATTERNS.length).toBeGreaterThanOrEqual(4)

144patternName = private_key_rsa severity = critical line = 144 matchedText = const pk...--')

Critical

Secret Pattern

RSA private key in scripts/sma/__tests__/flight.test.ts

scripts/sma/__tests__/flight.test.tsView on unpkg · L144

169patternName = aws_access_key severity = critical line = 169 matchedText = journalT... }],

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/flight.test.ts

scripts/sma/__tests__/flight.test.tsView on unpkg · L169

172patternName = aws_access_key severity = critical line = 172 matchedText = expect(c...LE')

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/flight.test.ts

scripts/sma/__tests__/flight.test.tsView on unpkg · L172

180patternName = aws_access_key severity = critical line = 180 matchedText = expect(i...LE')

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/flight.test.ts

scripts/sma/__tests__/flight.test.tsView on unpkg · L180

181patternName = aws_access_key severity = critical line = 181 matchedText = expect(p...LE')

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/flight.test.ts

scripts/sma/__tests__/flight.test.tsView on unpkg · L181

226patternName = aws_access_key severity = critical line = 226 matchedText = const le...E\n'

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/flight.test.ts

scripts/sma/__tests__/flight.test.tsView on unpkg · L226

229patternName = aws_access_key severity = critical line = 229 matchedText = expect(w...LE')

Critical

Secret Pattern

AWS access key ID in scripts/sma/__tests__/flight.test.ts

scripts/sma/__tests__/flight.test.tsView on unpkg · L229