-
Notifications
You must be signed in to change notification settings - Fork 0
✨ Add distributable chat2shell CLI #6
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Changes from all commits
Commits
Show all changes
5 commits
Select commit
Hold shift + click to select a range
77a47e6
✨ Add distributable chat2shell CLI
nbsp1221 6202603
🎨 Clarify public repository boundaries
nbsp1221 e365a19
🔥 Remove redundant network and discovery policies
nbsp1221 4aff6c4
👷 Use version tags for release actions
nbsp1221 10dcb49
🐛 Fix CLI dispatch and state permissions
nbsp1221 File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,10 +1,10 @@ | ||
| # Optional shell environment overrides. Source this file before running chat2shell. | ||
| CHAT2SHELL_HOST=127.0.0.1 | ||
| CHAT2SHELL_PORT=18788 | ||
| CHAT2SHELL_DATA_ROOT="${HOME}/.chat2shell" | ||
| CHAT2SHELL_STATE_DIR="${HOME}/.chat2shell/state" | ||
| CHAT2SHELL_WORKSPACE_ROOT="${HOME}/.chat2shell/workspaces" | ||
| CHAT2SHELL_ALLOWED_HOST_ROOTS="${HOME}/repositories" | ||
| CHAT2SHELL_SECRET_DIR="${HOME}/.secrets/tunnel-client" | ||
| CHAT2SHELL_TUNNEL_CLIENT="${HOME}/.local/bin/tunnel-client" | ||
| CHAT2SHELL_ENABLE_TUNNEL=1 | ||
| export CHAT2SHELL_HOST=127.0.0.1 | ||
| export CHAT2SHELL_PORT=18788 | ||
| export CHAT2SHELL_DATA_ROOT="${HOME}/.chat2shell" | ||
| export CHAT2SHELL_STATE_DIR="${HOME}/.chat2shell/state" | ||
| export CHAT2SHELL_WORKSPACE_ROOT="${HOME}/.chat2shell/workspaces" | ||
| export CHAT2SHELL_ALLOWED_HOST_ROOTS="${HOME}/repositories" | ||
| export CHAT2SHELL_SECRET_DIR="${HOME}/.secrets/tunnel-client" | ||
| export CHAT2SHELL_TUNNEL_CLIENT="${HOME}/.local/bin/tunnel-client" | ||
| export CHAT2SHELL_ENABLE_TUNNEL=1 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,48 @@ | ||
| name: Release | ||
|
|
||
| on: | ||
| release: | ||
| types: | ||
| - published | ||
|
|
||
| permissions: | ||
| contents: read | ||
| id-token: write | ||
|
|
||
| jobs: | ||
| publish: | ||
| name: Publish to npm | ||
| if: github.event.release.prerelease == false | ||
| runs-on: ubuntu-latest | ||
| timeout-minutes: 10 | ||
|
|
||
| steps: | ||
| - name: Check out repository | ||
| uses: actions/checkout@v7 | ||
|
|
||
| - name: Set up pnpm | ||
| uses: pnpm/action-setup@v6 | ||
| with: | ||
| version: 11.23.0 | ||
| run_install: false | ||
|
|
||
| - name: Set up Node.js | ||
| uses: actions/setup-node@v7 | ||
| with: | ||
| node-version: 24 | ||
| cache: pnpm | ||
| registry-url: https://registry.npmjs.org | ||
|
|
||
| - name: Verify release version | ||
| run: | | ||
| package_version="$(node -p "require('./package.json').version")" | ||
| test "v${package_version}" = "${GITHUB_REF_NAME}" | ||
|
|
||
| - name: Install dependencies | ||
| run: pnpm install --frozen-lockfile | ||
|
|
||
| - name: Check package | ||
| run: pnpm check | ||
|
|
||
| - name: Publish package | ||
| run: npm publish --access public --provenance | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| # Roadmap | ||
|
|
||
| chat2shell currently focuses on giving ChatGPT a capable shell inside disposable Docker Sandbox microVMs while keeping the host outside the execution boundary. | ||
|
|
||
| The intended next product directions are: | ||
|
|
||
| - OAuth authentication for deployments that need an authenticated MCP endpoint. | ||
| - A web interface for viewing and managing sandboxes and workspaces. | ||
|
|
||
| These are product directions, not release commitments. The README and architecture document describe the behavior available today. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🟡 [MEDIUM] Release actions are no longer pinned to immutable revisions
The release job has
id-token: writeand ultimately publishes to npm. Replacing the exact commit pins for checkout, pnpm setup, and Node setup with mutable major-version tags allows code introduced by a moved or compromised tag to execute before publication. Such code can alter the checked-out or built package, which the final trustednpm publishstep would then release under this project's identity.Evidence: Offline zizmor 1.30.0 reported high-confidence
unpinned-usesfindings at lines 21, 24, and 30. Auditing the review-base workflow reported nounpinned-usesfindings, and the unchanged CI workflow still pins these same actions to full commit SHAs.Suggested action: Restore full commit-SHA pins for all three actions, retaining version comments for readability, and update the pins through reviewed dependency-update PRs.
Confidence: high
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Not applying this suggestion. This repository intentionally uses upstream major-version tags for GitHub Actions rather than immutable commit SHAs. The associated supply-chain tradeoff is accepted as a project maintenance policy, so these references are deliberate rather than accidental unpinning.