registry / zelari-code / 0.7.8

zelari-code@0.7.8

Zelari Code — AI Council coding agent CLI. Multi-agent orchestration (Caronte, Nettuno, Gerione, Plutone, Minosse, Lucifero) with slash commands, provider-agnostic LLM streaming, and self-update.

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 119 file(s), 1.84 MB of source, external domains: api.minimax.chat, api.minimaxi.chat, api.openai.com, api.tavily.com, api.x.ai, api.z.ai, auth.x.ai, github.com, html.duckduckgo.com, json-schema.org, registry.npmjs.org

Source & flagged code

6 flagged

dist/cli/updater.jsView file

Lines 1-38javascript

1/**

2 * updater — npm registry self-update mechanism for zelari-code.

3 *

4 * Functions:

5 * - getCurrentVersion(): reads bundled package.json

6 * - checkForUpdate(): fetches https://registry.npmjs.org/zelari-code/latest,

7 * compares semver, returns { currentVersion, latestVersion, updateAvailable }

8 * - performUpdate(): spawns `npm install -g zelari-code@latest`,

9 * captures stdout/stderr, returns { ok, output, error? }

10 *

11 * All network + spawn operations are injectable for testing (see tests).

12 *

13 * Channel: `latest` only (locked per user decision, v3-N).

14 * No self-restart: caller is expected to display "please restart manually".

15 *

16 * @see docs/plans/2026-06-30-anathema-coder-v3-N.md

17 */

18import { createRequire } from 'node:module';

19import { spawn } from 'node:child_process';

20import path from 'node:path';

High

Child Process

Package source references child process execution.

dist/cli/updater.jsView on unpkg · L18

21import { fileURLToPath } from 'node:url';

22const require = createRequire(import.meta.url);

23const __dirname = path.dirname(fileURLToPath(import.meta.url));

24/**

25 * Read the bundled package.json and return its version.

26 * Falls back to '0.0.0' if the file cannot be resolved (very unlikely).

27 */

28export function getCurrentVersion() {

29 try {

30 // Resolve from the package root (this file lives at <pkg>/electron/cli/updater.ts

31 // or <pkg>/dist/electron/cli/updater.js after build)

32 const pkgPath = path.resolve(__dirname, '..', '..', 'package.json');

33 const pkg = require(pkgPath);

34 return pkg.version;

35 }

36 catch {

37 return '0.0.0';

38 }

Lines 106-146javascript

106 const latest = await fetchLatestVersion(fetcher, registryUrl);

107 if ('error' in latest) {

108 return {

109 currentVersion,

110 latestVersion: currentVersion,

111 updateAvailable: false,

112 error: latest.error,

113 };

bin/zelari-code.jsView file

Lines 1-41javascript

1#!/usr/bin/env node

2/**

3 * zelari-code — npm bin entrypoint.

4 *

5 * Spawned by npm when running `zelari-code` from anywhere after

6 * `npm install -g zelari-code`. Resolves to the compiled CLI bundle

7 * (tsc + esbuild output) OR falls back to tsx (dev/source workflow).

8 *

9 * Strategy:

10 * 1. If `dist/cli/main.bundled.js` exists (production build), require it.

11 * 2. Otherwise (dev/source install), use tsx to run the TS source directly.

12 *

dist/cli/main.bundled.jsView file

201systemPromptFragment: `You research using the retrieval system and the web. L202: - Use the retrieval tool listed in your AVAILABLE TOOLS (searchDocuments or searchRAG) to find prior knowledge before answering. L203: - For external facts (library docs, APIs, best practices), use web_search, then fetch_url on the best result. ... L15833: import { existsSync } from "node:fs"; L15834: import { spawnSync } from "node:child_process"; L15835: function resolveShell(forceReResolve = false) { ... L17740: try { L17741: const raw = readFileSync(file2, "utf-8"); L17742: const parsed = JSON.parse(raw); ... L17863: { id: "openai-compatible", displayName: "OpenAI-compatible", envVar: "OPENAI_API_KEY" }, L17864: { id: "minimax", displayName: "MiniMax", envVar: "MINIMAX_API_KEY", baseUrl: "https://api.MiniMax.chat/v1" }, L17865: { id: "glm", displayName: "GLM / Z.AI", envVar: "GLM_API_KEY", baseUrl: "https://api.z.ai/v1" },

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/cli/main.bundled.jsView on unpkg · L201

642assignProp: () => assignProp, L643: base64ToUint8Array: () => base64ToUint8Array, L644: base64urlToUint8Array: () => base64urlToUint8Array, ... L1522: error: new (_Err ?? $ZodError)(result.issues.map((iss) => finalizeIssue(iss, ctx, config()))) L1523: } : { success: true, data: result.value }; L1524: }; ... L3051: try { L3052: new URL(`http://[${payload.value}]`); L3053: } catch { ... L15833: import { existsSync } from "node:fs"; L15834: import { spawnSync } from "node:child_process"; L15835: function resolveShell(forceReResolve = false) {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli/main.bundled.jsView on unpkg · L642

dist/cli/workspace/postCouncilHook.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = zelari-code@0.7.5 matchedIdentity = npm:emVsYXJpLWNvZGU:0.7.5 similarity = 0.862 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli/workspace/postCouncilHook.jsView on unpkg

Source & flagged code

6 flagged · loading source

dist/cli/updater.jsView file

18import { createRequire } from 'node:module'; L19: import { spawn } from 'node:child_process'; L20: import path from 'node:path';

High

Child Process

Package source references child process execution.

dist/cli/updater.jsView on unpkg · L18

126* On Windows, `spawn('npm', ...)` fails with ENOENT because npm is a .cmd L127: * shim — `shell: true` lets the shell resolve the extension. L128: */

High

Shell

Package source references shell execution.

dist/cli/updater.jsView on unpkg · L126

bin/zelari-code.jsView file

21L22: const require = createRequire(import.meta.url); L23: const __dirname = path.dirname(fileURLToPath(import.meta.url));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/zelari-code.jsView on unpkg · L21

dist/cli/main.bundled.jsView file

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/cli/main.bundled.jsView on unpkg · L201

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli/main.bundled.jsView on unpkg · L642

dist/cli/workspace/postCouncilHook.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli/workspace/postCouncilHook.jsView on unpkg

Findings

4 High4 Medium7 Low

HighChild Processdist/cli/updater.js

HighShelldist/cli/updater.js

HighRemote Agent Bridgedist/cli/main.bundled.js

HighPrevious Version Dangerous Deltadist/cli/workspace/postCouncilHook.js

MediumDynamic Requirebin/zelari-code.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/cli/main.bundled.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

6 flagged

dist/cli/updater.jsView file

Lines 1-38javascript

1/**

2 * updater — npm registry self-update mechanism for zelari-code.

3 *

4 * Functions:

5 * - getCurrentVersion(): reads bundled package.json

6 * - checkForUpdate(): fetches https://registry.npmjs.org/zelari-code/latest,

7 * compares semver, returns { currentVersion, latestVersion, updateAvailable }

8 * - performUpdate(): spawns `npm install -g zelari-code@latest`,

9 * captures stdout/stderr, returns { ok, output, error? }

10 *

11 * All network + spawn operations are injectable for testing (see tests).

12 *

13 * Channel: `latest` only (locked per user decision, v3-N).

14 * No self-restart: caller is expected to display "please restart manually".

15 *

16 * @see docs/plans/2026-06-30-anathema-coder-v3-N.md

17 */

18import { createRequire } from 'node:module';

19import { spawn } from 'node:child_process';

20import path from 'node:path';

High

Child Process

Package source references child process execution.

dist/cli/updater.jsView on unpkg · L18

21import { fileURLToPath } from 'node:url';

22const require = createRequire(import.meta.url);

23const __dirname = path.dirname(fileURLToPath(import.meta.url));

24/**

25 * Read the bundled package.json and return its version.

26 * Falls back to '0.0.0' if the file cannot be resolved (very unlikely).

27 */

28export function getCurrentVersion() {

29 try {

30 // Resolve from the package root (this file lives at <pkg>/electron/cli/updater.ts

31 // or <pkg>/dist/electron/cli/updater.js after build)

32 const pkgPath = path.resolve(__dirname, '..', '..', 'package.json');

33 const pkg = require(pkgPath);

34 return pkg.version;

35 }

36 catch {

37 return '0.0.0';

38 }

Lines 106-146javascript

106 const latest = await fetchLatestVersion(fetcher, registryUrl);

107 if ('error' in latest) {

108 return {

109 currentVersion,

110 latestVersion: currentVersion,

111 updateAvailable: false,

112 error: latest.error,

113 };

bin/zelari-code.jsView file

Lines 1-41javascript

1#!/usr/bin/env node

2/**

3 * zelari-code — npm bin entrypoint.

4 *

5 * Spawned by npm when running `zelari-code` from anywhere after

6 * `npm install -g zelari-code`. Resolves to the compiled CLI bundle

7 * (tsc + esbuild output) OR falls back to tsx (dev/source workflow).

8 *

9 * Strategy:

10 * 1. If `dist/cli/main.bundled.js` exists (production build), require it.

11 * 2. Otherwise (dev/source install), use tsx to run the TS source directly.

12 *

dist/cli/main.bundled.jsView file

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/cli/main.bundled.jsView on unpkg · L201

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli/main.bundled.jsView on unpkg · L642

dist/cli/workspace/postCouncilHook.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli/workspace/postCouncilHook.jsView on unpkg