registry / thinkpool-pair / 0.7.285

thinkpool-pair@0.7.285

Share a local coding-agent CLI (Claude Code, Codex, Gemini, Aider, …) into a ThinkPool Code room, live.

Static Scan Results

scanned 1h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 79 file(s), 1.14 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.deepseek.com, api.minimax.io, api.moonshot.ai, api.z.ai, daytvtakmlixpfbbqzjd.supabase.co, openrouter.ai, raw.githubusercontent.com, registry.npmjs.org, thinkpool.io, www.apple.com

Source & flagged code

6 flagged

supabase-key.mjsView file

Lines 25-65javascript

25 3 network GET {WEB_BASE}/api/config. The rotation-repair path.

26 4 stale An expired cache beats the literal: it is strictly newer.

27 5 baked The legacy literal. First-ever boot with no network. Never fails.

29 TWO INVARIANTS, both tested in supabase-key.test.mjs:

31 · A service-shaped key is NEVER adopted, from any source. The network is an

32 input we do not control; a compromised or misconfigured config surface

33 must not be able to hand a user's laptop an RLS-bypassing client.

34 · No key material is ever logged. We log the SOURCE and the SHAPE. (C16.) */

36import os from 'node:os'

37import fs from 'node:fs'

38import path from 'node:path'

39import { classifyKey, isClientSafeKey } from './key-shape.mjs'

41export { classifyKey, isClientSafeKey }

43/* The legacy anon key. Public by design (the web bundle ships it), but now a

44 FALLBACK rather than the source of truth. Do not add new readers. */

45export const BAKED_ANON_KEY = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImRheXR2dGFrbWxpeHBmYmJxempkIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzgwNTMxNzEsImV4cCI6MjA5MzYyOTE3MX0.zYmz8bHUNEY4STUr2JuXChAsKwxNwkwFHe1Hd0Betqo'

Critical

Critical Secret

Package contains a critical-looking secret pattern.

supabase-key.mjsView on unpkg · L45

Critical

Secret Pattern

Supabase service role key (JWT) in supabase-key.mjs

supabase-key.mjsView on unpkg · L45

47export const DEFAULT_SUPABASE_URL = 'https://daytvtakmlixpfbbqzjd.supabase.co'

48export const DEFAULT_WEB_BASE = 'https://thinkpool.io'

50const CACHE_FILE = path.join(os.homedir(), '.thinkpool-pair', 'supabase-key.json')

51const CACHE_TTL_MS = 6 * 60 * 60 * 1000 // 6h — a rotation reaches a rebooting bridge same-day

52const FETCH_TIMEOUT_MS = 2000 // boot latency budget; the literal is right there

54// ── the on-disk cache ──────────────────────────────────────────────────────

55// Sits beside auth.json / dirs.json / served.json in ~/.thinkpool-pair.

56// Contains no secret (a publishable key), so no chmod dance — unlike auth.json.

57export function readCacheFile() {

58 try {

59 const rec = JSON.parse(fs.readFileSync(CACHE_FILE, 'utf8'))

60 if (!rec || typeof rec.key !== 'string' || typeof rec.url !== 'string') return null

61 return { key: rec.key, url: rec.url, at: Number(rec.at) || 0 }

62 } catch { return null }

63}

65export function writeCacheFile(rec) {

service.mjsView file

Lines 3-43javascript

3 so a customer's bridge survives reboot/logout and auto-restarts

4 on crash, on every platform:

5 • macOS → launchd LaunchAgent (KeepAlive)

6 • Linux → systemd --user unit (Restart=always)

7 • Windows → Startup-folder .cmd running --supervise

plan-meters.mjsView file

Lines 1-22javascript

1/* Plan / rate-limit meters for the /usage report.

2 *

3 * WHERE THE NUMBERS COME FROM. `GET https://api.anthropic.com/api/oauth/usage`

4 * with the Claude Code OAuth access token — the SAME endpoint the CLI's own /usage

5 * screen reads. So the percentages and, critically, the RESET TIMES are the

6 * server's, not ours. We never infer a 5-hour block boundary from transcript

7 * timestamps (the ccusage approach): an inferred reset is a number that looks

8 * authoritative and is wrong, which is exactly the bug this module exists to avoid.

9 *

10 * READ-ONLY, AND DELIBERATELY SO. We read the access token and we never refresh it.

hermes-acp-bootstrap.pyView file

•path = hermes-acp-bootstrap.py kind = build_helper sizeBytes = 23064 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hermes-acp-bootstrap.pyView on unpkg

codex-session.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = thinkpool-pair@0.7.282 matchedIdentity = npm:dGhpbmtwb29sLXBhaXI:0.7.282 similarity = 0.962 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

codex-session.mjsView on unpkg

Source & flagged code

6 flagged · loading source

supabase-key.mjsView file

45patternName = supabase_service_key severity = critical line = 45 matchedText = export c...tqo'

Critical

Critical Secret

Package contains a critical-looking secret pattern.

supabase-key.mjsView on unpkg · L45

45patternName = supabase_service_key severity = critical line = 45 matchedText = export c...tqo'

Critical

Secret Pattern

Supabase service role key (JWT) in supabase-key.mjs

supabase-key.mjsView on unpkg · L45

service.mjsView file

23import path from 'node:path' L24: import { execSync } from 'node:child_process' L25: import { hostMemoryAdmission } from './host-memory.mjs' ... L28: // exactly one account service per machine (a second install replaces it). L29: // Room codes flow UNESCAPED into launchctl/systemd shell strings + plist paths, so L30: // this is the security chokepoint: reject anything that isn't a plain alnum code ... L41: const shq = (s) => `'${String(s).replace(/'/g, `'\\''`)}'` L42: export function sanitizeServicePath(value, platform = process.platform) { L43: const sep = platform === 'win32' ? ';' : ':' ... L53: // disposable and isolated, so clearing it cannot mutate a person's npm execution tree. L54: const serviceNpmCache = () => path.join(os.homedir(), '.thinkpool-pair', 'npm-cache') L55: const cacheWipe = (cacheRoot) => `rm -rf ${shq(path.join(cacheRoot, '_npx'))}/* 2>/dev/null`

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

service.mjsView on unpkg · L23

plan-meters.mjsView file

2* L3: * WHERE THE NUMBERS COME FROM. `GET https://api.anthropic.com/api/oauth/usage` L4: * with the Claude Code OAuth access token — the SAME endpoint the CLI's own /usage ... L20: L21: import { execFileSync } from 'node:child_process' L22: import { readFileSync } from 'node:fs' ... L35: const { L36: platform = process.platform, L37: env = process.env, L38: exec = execFileSync, L39: read = readFileSync, L40: home = homedir()

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

plan-meters.mjsView on unpkg · L2

hermes-acp-bootstrap.pyView file

•path = hermes-acp-bootstrap.py kind = build_helper sizeBytes = 23064 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hermes-acp-bootstrap.pyView on unpkg

codex-session.mjsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

codex-session.mjsView on unpkg

Findings

2 Critical2 High5 Medium5 Low

CriticalCritical Secretsupabase-key.mjs

CriticalSecret Patternsupabase-key.mjs

HighSandbox Evasion Gated Capabilityplan-meters.mjs

HighPrevious Version Dangerous Deltacodex-session.mjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistenceservice.mjs

MediumShips Build Helperhermes-acp-bootstrap.py

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

6 flagged

supabase-key.mjsView file

Lines 25-65javascript

25 3 network GET {WEB_BASE}/api/config. The rotation-repair path.

26 4 stale An expired cache beats the literal: it is strictly newer.

27 5 baked The legacy literal. First-ever boot with no network. Never fails.

29 TWO INVARIANTS, both tested in supabase-key.test.mjs:

31 · A service-shaped key is NEVER adopted, from any source. The network is an

32 input we do not control; a compromised or misconfigured config surface

33 must not be able to hand a user's laptop an RLS-bypassing client.

34 · No key material is ever logged. We log the SOURCE and the SHAPE. (C16.) */

36import os from 'node:os'

37import fs from 'node:fs'

38import path from 'node:path'

39import { classifyKey, isClientSafeKey } from './key-shape.mjs'

41export { classifyKey, isClientSafeKey }

43/* The legacy anon key. Public by design (the web bundle ships it), but now a

44 FALLBACK rather than the source of truth. Do not add new readers. */

Critical

Critical Secret

Package contains a critical-looking secret pattern.

supabase-key.mjsView on unpkg · L45

Critical

Secret Pattern

Supabase service role key (JWT) in supabase-key.mjs

supabase-key.mjsView on unpkg · L45

47export const DEFAULT_SUPABASE_URL = 'https://daytvtakmlixpfbbqzjd.supabase.co'

48export const DEFAULT_WEB_BASE = 'https://thinkpool.io'

50const CACHE_FILE = path.join(os.homedir(), '.thinkpool-pair', 'supabase-key.json')

51const CACHE_TTL_MS = 6 * 60 * 60 * 1000 // 6h — a rotation reaches a rebooting bridge same-day

52const FETCH_TIMEOUT_MS = 2000 // boot latency budget; the literal is right there

54// ── the on-disk cache ──────────────────────────────────────────────────────

55// Sits beside auth.json / dirs.json / served.json in ~/.thinkpool-pair.

56// Contains no secret (a publishable key), so no chmod dance — unlike auth.json.

57export function readCacheFile() {

58 try {

59 const rec = JSON.parse(fs.readFileSync(CACHE_FILE, 'utf8'))

60 if (!rec || typeof rec.key !== 'string' || typeof rec.url !== 'string') return null

61 return { key: rec.key, url: rec.url, at: Number(rec.at) || 0 }

62 } catch { return null }

63}

65export function writeCacheFile(rec) {

service.mjsView file

Lines 3-43javascript

3 so a customer's bridge survives reboot/logout and auto-restarts

4 on crash, on every platform:

5 • macOS → launchd LaunchAgent (KeepAlive)

6 • Linux → systemd --user unit (Restart=always)

7 • Windows → Startup-folder .cmd running --supervise

plan-meters.mjsView file

Lines 1-22javascript

1/* Plan / rate-limit meters for the /usage report.

2 *

3 * WHERE THE NUMBERS COME FROM. `GET https://api.anthropic.com/api/oauth/usage`

4 * with the Claude Code OAuth access token — the SAME endpoint the CLI's own /usage

5 * screen reads. So the percentages and, critically, the RESET TIMES are the

6 * server's, not ours. We never infer a 5-hour block boundary from transcript

7 * timestamps (the ccusage approach): an inferred reset is a number that looks

8 * authoritative and is wrong, which is exactly the bug this module exists to avoid.

9 *

10 * READ-ONLY, AND DELIBERATELY SO. We read the access token and we never refresh it.

hermes-acp-bootstrap.pyView file

•path = hermes-acp-bootstrap.py kind = build_helper sizeBytes = 23064 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hermes-acp-bootstrap.pyView on unpkg

codex-session.mjsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

codex-session.mjsView on unpkg