herdrdev/herdr

Review signals: 1 connection review, 1 hardcoded secret, 9 known vulnerability, 1 outside write, 28 sensitive read. 6 static matches retained as context.

Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 20 distinct locations. 133 attributed processes.

Gitleaks found a possible hardcoded secret; value withheld. src/platform/windows/notifications.rs

OSV reports a known vulnerability in this dependency version. 8 distinct locations. 9 findings.

Repository processes attempted these writes outside documented output/cache paths. 13 distinct locations. 698 attributed processes.

A repository process attempted to read this sensitive path. 28 distinct locations. 28 findings. 4 attributed processes.

6 hardcoded secret matches retained as context; full list in the evidence.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• agents drive herdr through the cli and socket api: Real input produced the expected result: schemas: error_response, event, request, subscription_event, success_response

  Source: agents drive herdr through the cli and socket api

  Input: herdr api schema

  Expected: the bundled socket API schema is printed with its request and response schema list

  Command: <guest-path> api schema

  Observed: schemas: error_response, event, request, subscription_event, success_response Use `herdr api schema --json` to print the full schema. Use `herdr api schema --output PATH` to write it to a file.

Examples

• just test runs the repository's documented test recipes; this runs its docs-contract recipe: command completed successfully

  Source: justfile docs-contract-test (README.md development section: just test)

  Input: just docs-contract-test

  Expected: bun docs tests pass

  Command: just docs-contract-test

  Observed: es maintained corrections [787.18ms] scripts/docs/versions.test.ts: (pass) normalizeVersion > normalizes 0.7.5 [0.04ms] (pass) normalizeVersion > normalizes v0.7.5 (pass) normalizeVersion > rejects non-release refs [0.03ms] (pass) sortVersionsNewestFirst > sorts semantic versions numerically [0.14ms] scripts/docs/preview.integration.test.ts: (pass) preview documentation snapshots > snapshots and validates the selected commit exactly [247.12ms] (pass) preview documentation snapshots > rejects snapshot drift [226.63ms] 7 pass 0 fail 21 expect() calls Ran 7 tests across 3 files. [1273.00ms]

Local or hosted: local

herdr server (headless) start and CLI socket API operation

cd <guest-path> && pwd && ls -la && git status 2>&1 | head -3; id -u; python3 --version; cat /etc/os-release | head -3; ls /inputs 2>&1
cd <guest-path> && cat README.md 2>/dev/null | head -300
cd <guest-path> && ls -la .coldpass; cat rust-toolchain.toml; which cargo rustc curl sudo; sudo -n true && echo SUDO_OK; curl -fsSL https://herdr.dev/install.sh -o /tmp/install-herdr.sh; echo rc=$?; wc -l /tmp/install-herdr.sh 2>/dev/null; grep -niE 'telemetry|consent|analytics|opt' /tmp/install-herdr.sh | head -20
cat /tmp/install-herdr.sh
sh /tmp/install-herdr.sh; echo rc=$?; ls -la ~/.local/bin/herdr && ~/.local/bin/herdr --version; echo rc=$?
cd <guest-path> && git init -q && git remote add origin https://github.com/herdrdev/herdr && git fetch --depth 1 origin 43b36b68caf593e7623fa389462d8ba097edcb11 2>&1 | tail -3; echo fetch=$?; git reset --mixed FETCH_HEAD 2>&1 | tail -2; git log --oneline -1; cat build.rs; cat .cargo/* 2>/dev/null | head -20; which rustup cargo || echo NO_CARGO
cd /tmp && (curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal --default-toolchain 1.96.1 -c clippy,rustfmt) 2>&1 | tail -5; echo rc=$?; ls ~/.cargo/bin 2>/dev/null | head; which gcc cc pkg-config || echo MISSING_BUILD_TOOLS
cd <guest-path> && sudo -n apt-get update -qq >/dev/null 2>&1; sudo -n DEBIAN_FRONTEND=noninteractive apt-get install -y -qq build-essential pkg-config >/tmp/apt.log 2>&1; echo apt=$?; export PATH=$HOME/.cargo/bin:$PATH; cargo --version && (cargo build --release 2>&1 | tail -15); echo build_rc=${PIPESTATUS[0]}
cd <guest-path> && grep -rniE 'zig' CONTRIBUTING.md AGENTS.md justfile flake.nix nix/ 2>/dev/null | head -30; ls scripts; uname -m
mkdir -p ~/.local/zig && cd ~/.local/zig && curl -fsSL -o zig.tar.xz https://ziglang.org/download/0.16.0/zig-x86_64-linux-0.16.0.tar.xz; echo dl=$?; ls -la zig.tar.xz 2>/dev/null && tar -xJf zig.tar.xz --strip-components=1 && ./zig version
cd <guest-path> && export PATH=$HOME/.cargo/bin:$HOME/.local/zig:$PATH ZIG=$HOME/.local/zig/zig && (cargo build --release > /tmp/cargo-build.log 2>&1); echo build_rc=$?; tail -5 /tmp/cargo-build.log; ls -la target/release/herdr 2>/dev/null && target/release/herdr --version
cd <guest-path> && target/release/herdr --help; echo rc=$?; for s in workspace pane tab server; do echo "== $s"; target/release/herdr $s --help 2>&1 | head -30; done
cd <guest-path> && export PATH=$HOME/.local/bin:$PATH; target/release/herdr status 2>&1; echo rc=$?; target/release/herdr workspace create --help 2>&1 | head -30; target/release/herdr workspace list --help 2>&1 | head -15
cd <guest-path> && timeout 20 target/release/herdr workspace list; echo rc=$?; target/release/herdr status | head -8
cd <guest-path> && nohup target/release/herdr server > /tmp/herdr-server-run.log 2>&1 &
sleep 4; target/release/herdr status | head -12; echo; target/release/herdr workspace list; echo list_rc=$?
pwd; H=<guest-path>; sleep 2; pgrep -af 'herdr server' ; tail -5 /tmp/herdr-server-run.log 2>/dev/null; $H status | head -12; $H workspace list; echo list_rc=$?
H=<guest-path>; $H api --help 2>&1 | head -30; echo ===; $H config --help 2>&1 | head -15; echo ===; $H session --help 2>&1 | head -15; echo ===; $H workspace create --cwd /tmp --label coldpass-probe; echo create_rc=$?
ls -la <guest-path> 2>&1; grep -nE 'stays_running|expected_file|kill|SIGTERM|stop' <guest-path> 2>/dev/null | head -40; ls /inputs 2>&1
H=<guest-path>; $H server stop; echo stop_rc=$?; sleep 2; pgrep -af 'release/herdr server' || echo NO_SERVER; cd <guest-path> && grep -rniE '\b(cron|--once|--now|webhook|scheduler|interval)\b' src --include=*.rs | head -10; echo ===; sed -n 1,40p justfile; which just || echo NO_JUST
pgrep -x herdr || echo NO_HERDR_PROCS; cd <guest-path> && sed -n 1,60p src/app/tab_bar_status.rs
sudo -n DEBIAN_FRONTEND=noninteractive apt-get install -y -qq just >/tmp/apt-just.log 2>&1; echo apt_just=$?; just --version; export PATH=$HOME/.cargo/bin:$HOME/.local/zig:$PATH; (cargo install cargo-nextest --locked > /tmp/nextest-install.log 2>&1); echo nextest_rc=$?; tail -3 /tmp/nextest-install.log; cargo nextest --version 2>&1 | head -2
cd /tmp && curl -fsSL https://bun.sh/install -o /tmp/bun-install.sh && (BUN_INSTALL=$HOME/.bun bash /tmp/bun-install.sh > /tmp/bun-install.log 2>&1); echo bun_rc=$?; tail -2 /tmp/bun-install.log; $HOME/.bun/bin/bun --version; python3 --version
sudo -n DEBIAN_FRONTEND=noninteractive apt-get install -y -qq unzip >/tmp/apt-unzip.log 2>&1; echo unzip_rc=$?; cd /tmp && (BUN_INSTALL=$HOME/.bun bash /tmp/bun-install.sh > /tmp/bun-install.log 2>&1); echo bun_rc=$?; tail -2 /tmp/bun-install.log; $HOME/.bun/bin/bun --version
cd <guest-path> && export PATH=$HOME/.cargo/bin:$HOME/.local/zig:$HOME/.bun/bin:$PATH ZIG=$HOME/.local/zig/zig && (just test > /tmp/just-test.log 2>&1); echo just_test_rc=$?; tail -25 /tmp/just-test.log
export PATH=$HOME/.cargo/bin:$PATH; (cargo install just --locked > /tmp/just-install.log 2>&1); echo rc=$?; tail -2 /tmp/just-install.log; cd <guest-path> && export PATH=$HOME/.cargo/bin:$HOME/.local/zig:$HOME/.bun/bin:$PATH ZIG=$HOME/.local/zig/zig && just --version && (just test > /tmp/just-test.log 2>&1); echo just_test_rc=$?; tail -30 /tmp/just-test.log
free -m; nproc; dmesg 2>/dev/null | tail -3; df -h /tmp | tail -1
cd <guest-path> && export PATH=$HOME/.cargo/bin:$HOME/.local/zig:$HOME/.bun/bin:$PATH ZIG=$HOME/.local/zig/zig CARGO_BUILD_JOBS=1 CARGO_PROFILE_DEV_DEBUG=0 CARGO_PROFILE_TEST_DEBUG=0 && (timeout 3000 just test > /tmp/just-test.log 2>&1); echo just_test_rc=$?; grep -E 'Summary|FAIL|error|panicked|SIGKILL' /tmp/just-test.log | tail -20; tail -15 /tmp/just-test.log
cd <guest-path> && sed -n 115,130p justfile; grep -rn '"engines"' -A3 scripts/docs/package.json docs/package.json package.json 2>/dev/null; find . -name package.json -not -path './target/*' -not -path '*/node_modules/*' | head; grep -rniE 'node ?(version|>=|[0-9]+)|nodejs' .github/workflows/*.yml 2>/dev/null | head -5; ls /usr/bin/node /usr/local/bin/node 2>&1 | head -2
cd <guest-path> && grep -rn -A3 'setup-node\|node-version' .github/ scripts/ 2>/dev/null | head -20; grep -rn "spawnSync\|execFileSync" scripts/docs/preview.integration.test.ts | head -3; grep -rn "NODE_USE_ENV_PROXY" . --include=*.md --include=*.yml --include=*.sh 2>/dev/null | head -3
export NODE_USE_ENV_PROXY=1; cd /tmp && F=$(curl -fsSL https://nodejs.org/dist/latest-v22.x/ | grep -oE 'node-v22\.[0-9.]+-linux-x64\.tar\.xz' | head -1); echo file=$F; curl -fsSL -o /tmp/$F https://nodejs.org/dist/latest-v22.x/$F && mkdir -p $HOME/.local/node && tar -xJf /tmp/$F -C $HOME/.local/node --strip-components=1 && $HOME/.local/node/bin/node --version && $HOME/.local/node/bin/npm --version
cd <guest-path> && export NODE_USE_ENV_PROXY=1 PATH=$HOME/.cargo/bin:$HOME/.local/zig:$HOME/.bun/bin:$HOME/.local/node/bin:$PATH ZIG=$HOME/.local/zig/zig CARGO_BUILD_JOBS=1 CARGO_PROFILE_DEV_DEBUG=0 CARGO_PROFILE_TEST_DEBUG=0 && node --version && npm --version && (timeout 3000 just test > /tmp/just-test2.log 2>&1); echo just_test_rc=$?; grep -E 'Summary|error:|recipe' /tmp/just-test2.log | tail -15; tail -6 /tmp/just-test2.log
sed -n 1195,1225p <guest-path>
cd <guest-path> && mkdir -p .coldpass && H=<guest-path> && cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["<guest-path>","server"],"cwd":"<guest-path>","stays_running":true,"expected_text":"herdr server running"}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"herdr keeps terminals running in a background server","source":"herdr keeps terminals running in a background server when you close the client or lose your SSH connection.","input":"herdr server","expected":"the headless background server starts and reports it is running","probe_kind":"cli","argv":["<guest-path>","server"],"stays_running":true,"expected_text":"herdr server running","cwd":"<guest-path>"}]
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"just test runs the repository's documented test recipes; this runs its docs-contract recipe","source":"justfile docs-contract-test (README.md development section: just test)","input":"just docs-contract-test","expected":"bun docs tests pass","argv":["just","docs-contract-test"],"cwd":"<guest-path>","env":{"PATH":"<guest-path>","NODE_USE_ENV_PROXY":"1"},"expected_text":"Ran 7 tests across 3 files"}]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"reason":"Inspected README.md and CLI help (herdr, server, workspace, pane, tab, session, config, api): no cron, scheduler, --once, --now or webhook entry point. The only interval loop is the in-TUI tab bar status command runner (src/app/tab_bar_status.rs), which runs inside the interactive TUI and is not a README promise; it cannot be triggered once from the CLI.","checks":[]}
EOF
for f in probe claims examples cycles; do python3 -I -c "import json,sys;json.load(open(sys.argv[1]));print('ok',sys.argv[1])" .coldpass/$f.json; done; <env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | tail -60; echo checker_rc=${PIPESTATUS[0]}
H=<guest-path>; $H api schema > /tmp/api-schema-manual.json 2>/tmp/api-schema.err; echo rc=$?; cat /tmp/api-schema.err | head -3; wc -c /tmp/api-schema-manual.json; head -c 400 /tmp/api-schema-manual.json; echo; grep -o '"workspace[._a-z]*"' /tmp/api-schema-manual.json | sort -u | head; pgrep -x herdr || echo NO_HERDR
H=<guest-path>; $H api schema --json > /tmp/api-schema-json.txt; echo rc=$?; wc -c /tmp/api-schema-json.txt; grep -oE '"(method|type|name)": *"[a-z_.]*workspace[a-z_.]*"' /tmp/api-schema-json.txt | sort -u | head -8; grep -oE 'workspace_(create|list)[a-z_]*' /tmp/api-schema-json.txt | sort -u | head
cd <guest-path> && cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"agents drive herdr through the cli and socket api","source":"agents drive herdr through the cli and socket api","input":"herdr api schema","expected":"the bundled socket API schema is printed with its request and response schema list","probe_kind":"cli","argv":["<guest-path>","api","schema"],"expected_text":"schemas: error_response, event, request, subscription_event, success_response","cwd":"<guest-path>"}]
EOF
python3 -I -c "import json;json.load(open('.coldpass/claims.json'));print('ok')"; <env-var>=<guest-path> python3 -I <guest-path> --validate --replay > /tmp/checker1.out 2>&1; echo checker_rc=$?; python3 -I -c "
import json,sys
d=json.load(open('/tmp/checker1.out')) if False else None
" ; head -c 1500 /tmp/checker1.out; echo; grep -o '"problems": \[[^]]*\]' /tmp/checker1.out | head -c 800
cd <guest-path> && mkdir -p .coldpass && cat > .coldpass/report.json <<'EOF'
{
  "outcome": "working",
  "fault_owner": null,
  "operation": "herdr server (headless) start and CLI socket API operation",
  "operation_scope": "Linux x86_64 (Ubuntu 24.04, 4 GB RAM, 2 CPUs); Rust 1.96.1; Zig 0.16.0; Node 22.23.4; bun 1.4.4; just 1.59.0; cargo-nextest 0.9.149; Python 3.12.3",
  "steps": [
    "Ran README installer: curl -fsSL https://herdr.dev/install.sh | sh (installed release 0.9.5 to ~/.local/bin)",
    "Installed prerequisites for source build: rustup toolchain 1.96.1 with clippy and rustfmt, build-essential, pkg-config, Zig 0.16.0",
    "Built pinned source with cargo build --release (target/release/herdr, 0.9.5)",
    "Installed just, cargo-nextest, Node, bun, unzip for the documented development recipes",
    "Ran just test (documented test recipe): rc 0",
    "Ran herdr server (headless) and verified it reports the socket paths",
    "Exercised socket API via herdr workspace create/list against the running server, then stopped it with herdr server stop",
    "Replayed claim with herdr api schema: prints schemas error_response, event, request, subscription_event, success_response",
    "Ran checker: <env-var>=<guest-path> python3 -I <guest-path> --validate --replay: valid true, no problems"
  ],
  "deviations": [
    "The README installer installs the latest release (0.9.5), not a build of the pinned commit; the pinned commit was built separately from source with cargo.",
    "Source build needed installs not stated in the README: rustup, Zig 0.16.0, build-essential, pkg-config, unzip, Node, bun, just (cargo install, since apt just 1.21 rejects the [script] attribute), cargo-nextest.",
    "Debug test build was SIGKILLed on 4 GB RAM; reran with CARGO_BUILD_JOBS=1, CARGO_PROFILE_DEV_DEBUG=0, CARGO_PROFILE_TEST_DEBUG=0, which succeeded.",
    "Claims cannot use stays_running (120 s window), so the server-start claim was replaced with the finite herdr api schema command; the server-start behaviour is covered by the stays_running probe.",
    "Cycle check: detected false. The only interval loop is the in-TUI tab bar status runner, which is not a README promise and cannot be triggered from the CLI."
  ],
  "stuck_step": null,
  "main_blocker": null,
  "plain_failure": null,
  "suggested_fix": null
}
EOF
python3 -I -c "import json;json.load(open('.coldpass/report.json'));print('report ok')"; pgrep -x herdr || echo "no herdr server running"; <env-var>=<guest-path> python3 -I <guest-path> --validate --replay > /tmp/checker2.out 2>&1; echo rc=$?; grep -o '"valid": [a-z]*' /tmp/checker2.out; grep -o '"problems": \[[^]]*\]' /tmp/checker2.out