feat: refactor script_fix to white-hat mission with _system verification#14
Merged
jscriptcoder merged 6 commits intomainfrom Mar 28, 2026
Merged
feat: refactor script_fix to white-hat mission with _system verification#14jscriptcoder merged 6 commits intomainfrom
jscriptcoder merged 6 commits intomainfrom
Conversation
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
script_fix missions are now authorized contractor missions (like forensics): - SSH entry forced, root password provided in briefing - Scripts use _system() instead of echo(_decode()) for verification - _system() gives PASS/FAIL feedback when player tests with node() - mail() re-executes the script to verify _system() was called correctly - No ACCESS-KEY exchange — player sends "done" to complete - Mail content is optional for script_fix (and other state-check missions) - Mission board descriptions updated to white-hat framing - _decode() preserved for script_auto (future PR will convert it) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
jscriptcoder
changed the title
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
No players exist yet, so no backwards compatibility concern with changing the PRNG sequence for script_fix seeds. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Fix completion table: script_fix sends "done", not ACCESS-KEY - Remove misleading "Same verification as script_fix" from script_auto description Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
_decodewith_systemverification — mail runs the script to check correctnessChanges
src/utils/scriptRunner.ts— New lightweight script runner for mail verification (sandboxednew Function()with_systemcapture)src/generation/pools/scriptFix.ts— All 63echo(_decode(...))calls replaced with_system(...)src/commands/node.ts— AddedgetSystemFnsupport alongside existinggetDecodeFnsrc/hooks/useCommands.ts—_systeminjected for script_fix,_decodepreserved for script_autosrc/generation/attackChain.ts— Removed ACCESS-KEY generation, added root password to briefingsrc/generation/generateMission.ts— SSH entry forced for script_fix (like forensics)src/commands/mail.ts— NewverifyScriptFixreads and executes script, checks_systemvalue; content now optional for state-check missionssrc/commands/accept.ts— Updated briefing hint (no ACCESS-KEY mention)src/mission/missionBoard.ts— White-hat framing for DKC-003, DKC-009, DKC-013; seeds updated to SSH entryTest plan
_system()injection tests (PASS/FAIL feedback, undefined when not provided)_systemcall, optional content)_systemin content, noexpectedProof)🤖 Generated with Claude Code