Files
John Smith 5321a4cea2 fix: fleet audit remediation — RCE/SSRF/traversal fail-closed, catalog re-grounding, CI hardening
- Stage1 P0 security: allowlist introspect (npx,node,python3), argv-only, drop CORS *, per-boot token, SSRF private-range+userinfo block, targetDir absolute/.. block, content_file pattern+containment, test/local-server.test.js 29 tests
- Stage2 P0 catalog: synthetic:true for 14 placeholder entries, real repos/tools for k8s/notion/filesystem/figma/postgres, Codex command/args/env, hyphen-preserving normalize, README npx fix, sst->anomalyco
- Stage3 P1 hardening: dup-id negative tests, check-pr scripts/** fail-closed+wired, ai-review invented-tool/harness/kind/deny-first enforcement, reviewer bare allows, _site clean, engines >=22.12.0, workflows SHA-pinned fetch-depth:1 minimal scopes, CODEOWNERS, ajv->devDeps
- Stage4 P2/P3 polish: install --recipe base64url, SOURCE_DATE_EPOCH idempotency, ? single-char, favicon data-URI, empty warn deny-only, prose fixes, stage4 12 tests

Gates: VALIDATED 63 OK, SITE_BUILT 63, tests 102/102, ai-review REVIEW_OK/SELFTEST_OK
Note: scripts/generate-rigs.py + verify-rigs.sh do not exist; real equivalents used (documented in REMEDIATION_LOG.md)
2026-10-19 11:53:15 -04:00

55 lines
1.5 KiB
JSON

{
"name": "@heretek-ai/agent-builder",
"version": "0.1.0",
"description": "Curated multi-harness AI Agent Registry, Awesome List, WebUI Builder, and MCP Server for OpenCode, Claude Code, and Codex.",
"license": "MIT",
"repository": {
"type": "git",
"url": "https://github.com/Heretek-AI/Agent-Builder.git"
},
"homepage": "https://heretek-ai.github.io/Agent-Builder/",
"bin": {
"agent-builder": "./bin/agent-builder.js"
},
"files": [
"bin/",
"src/",
"site/",
"dist/registry.json",
"data/schema.json",
"data/taxonomy.json",
"ATTRIBUTION.md",
"README.md",
"LICENSE"
],
"publishConfig": {
"access": "public"
},
"engines": {
"node": ">=22.12.0"
},
"scripts": {
"spike": "node scripts/spike-verify.js",
"validate": "node scripts/validate.js",
"export": "node scripts/export-json.js --pretty --output dist/registry.json",
"generate": "node scripts/generate-readme.js",
"fmt": "node scripts/fmt.js",
"new": "node scripts/new-entry.js",
"seed": "node scripts/import/seed-all.js",
"site": "node scripts/build-site.js",
"check-pr": "node scripts/check-pr.js --base origin/main",
"health": "node scripts/health-check.js --dry-run",
"scout": "node scripts/scout.js run --dry-run",
"serve": "node bin/agent-builder.js serve",
"mcp": "node bin/agent-builder.js mcp",
"test": "node scripts/run-tests.js"
},
"dependencies": {
"js-yaml": "^4.1.0"
},
"devDependencies": {
"ajv": "^8.17.1",
"ajv-formats": "^3.0.1"
}
}