feat(cli): add secure supervised Zoo host

Author: taltas

packages/types/src/api.ts

@@ -17,6 +17,15 @@ export type HeadlessCapabilities = {
 	rootTaskResults: true
 }
 
+export type RunOverrides = {
+	provider?: string
+	profile?: string
+	model?: string
+	mode?: string
+	reasoningEffort?: "disabled" | "none" | "minimal" | "low" | "medium" | "high" | "xhigh" | "max"
+	approval?: "interactive" | "safe" | "auto"
+}
+
 export type HeadlessTaskReference = { taskId: string; rootTaskId: string }
 
 export type HeadlessAskResponse =
@@ -52,8 +61,9 @@ export interface RooCodeAPI extends EventEmitter<RooCodeAPIEvents> {
 		text: string
 		images?: string[]
 		configuration?: RooCodeSettings
+		overrides?: RunOverrides
 	}): Promise<HeadlessTaskReference>
-	resumeHeadlessTask(taskId: string): Promise<HeadlessTaskReference>
+	resumeHeadlessTask(taskId: string, overrides?: RunOverrides): Promise<HeadlessTaskReference>
 	respondToHeadlessAsk(input: { taskId: string; askId: string; response: HeadlessAskResponse }): Promise<void>
 	cancelHeadlessTask(input: {
 		rootTaskId: string

packages/vscode-shim/src/__tests__/ExtensionContext.test.ts

@@ -2,6 +2,7 @@ import { ExtensionContextImpl } from "../context/ExtensionContext.js"
 import * as fs from "fs"
 import * as path from "path"
 import { tmpdir } from "os"
+import type { SecretStorage } from "../types.js"
 
 describe("ExtensionContextImpl", () => {
 	let tempDir: string
@@ -69,6 +70,19 @@ describe("ExtensionContextImpl", () => {
 
 			expect(context.environmentVariableCollection).toEqual({})
 		})
+
+		it("uses an injected secure SecretStorage without creating a plaintext file", () => {
+			const secretStorage: SecretStorage = {
+				get: async () => undefined,
+				store: async () => undefined,
+				delete: async () => undefined,
+				onDidChange: () => ({ dispose() {} }),
+			}
+			const storageDir = path.join(tempDir, "secure-storage")
+			const context = new ExtensionContextImpl({ extensionPath, workspacePath, storageDir, secretStorage })
+			expect(context.secrets).toBe(secretStorage)
+			expect(fs.existsSync(path.join(storageDir, "global-storage", "secrets.json"))).toBe(false)
+		})
 	})
 
 	describe("storage paths", () => {

packages/vscode-shim/src/api/create-vscode-api-mock.ts

@@ -55,6 +55,7 @@ import type { CancellationToken } from "../interfaces/document.js"
 import type { Disposable, DiagnosticCollection, IdentityInfo } from "../interfaces/workspace.js"
 import type { RelativePattern } from "../interfaces/document.js"
 import type { UriHandler } from "../interfaces/webview.js"
+import type { SecretStorage } from "../types.js"
 
 // Package version constant
 const Package = { version: "1.0.0" }
@@ -75,6 +76,9 @@ export interface VSCodeAPIMockOptions {
 	 * Set to a temp directory for ephemeral/no-persist mode.
 	 */
 	storageDir?: string
+
+	/** Secure storage supplied by the embedding host. */
+	secretStorage?: SecretStorage
 }
 
 /**
@@ -90,6 +94,7 @@ export function createVSCodeAPIMock(
 		extensionPath: extensionRootPath,
 		workspacePath: workspacePath,
 		storageDir: options?.storageDir,
+		secretStorage: options?.secretStorage,
 	})
 	const workspace = new WorkspaceAPI(workspacePath, context)
 	const window = new WindowAPI()

packages/vscode-shim/src/context/ExtensionContext.ts

@@ -37,6 +37,9 @@ export interface ExtensionContextOptions {
 	 * Extension mode (Production, Development, or Test)
 	 */
 	extensionMode?: ExtensionMode
+
+	/** Secure storage supplied by the embedding host. */
+	secretStorage?: SecretStorage
 }
 
 /**
@@ -108,7 +111,7 @@ export class ExtensionContextImpl implements ExtensionContext {
 			},
 		})
 
-		this.secrets = new FileSecretStorage(this.globalStoragePath)
+		this.secrets = options.secretStorage ?? new FileSecretStorage(this.globalStoragePath)
 
 		// Load extension metadata (packageJSON)
 		this.extension = this.loadExtensionMetadata()

packages/vscode-shim/src/index.ts

@@ -12,6 +12,7 @@
 export {
 	// Main factory function
 	createVSCodeAPIMock,
+	type VSCodeAPIMockOptions,
 
 	// Classes
 	Uri,
@@ -77,6 +78,7 @@ export {
 	type WorkspaceConfiguration,
 	type Memento,
 	type SecretStorage,
+	type SecretStorageChangeEvent,
 	type FileStat,
 	type Terminal,
 	type CancellationToken,

packages/vscode-shim/src/vscode.ts

@@ -52,7 +52,7 @@ export { WorkspaceAPI } from "./api/WorkspaceAPI.js"
 export { TabGroupsAPI, type Tab, type TabInputText, type TabGroup } from "./api/TabGroupsAPI.js"
 export { WindowAPI } from "./api/WindowAPI.js"
 export { CommandsAPI } from "./api/CommandsAPI.js"
-export { createVSCodeAPIMock } from "./api/create-vscode-api-mock.js"
+export { createVSCodeAPIMock, type VSCodeAPIMockOptions } from "./api/create-vscode-api-mock.js"
 
 // ============================================================================
 // Enums from ./types.ts
@@ -76,7 +76,15 @@ export {
 // ============================================================================
 // Types from ./types.ts
 // ============================================================================
-export type { Thenable, Memento, FileStat, TextEditorOptions, ConfigurationInspect } from "./types.js"
+export type {
+	Thenable,
+	Memento,
+	SecretStorage,
+	SecretStorageChangeEvent,
+	FileStat,
+	TextEditorOptions,
+	ConfigurationInspect,
+} from "./types.js"
 
 // ============================================================================
 // Interfaces from ./interfaces/
@@ -142,15 +150,3 @@ export type {
 	DiagnosticCollection,
 	IdentityInfo,
 } from "./interfaces/workspace.js"
-
-// ============================================================================
-// Secret Storage interface (backwards compatibility)
-// ============================================================================
-export interface SecretStorage {
-	get(key: string): Thenable<string | undefined>
-	store(key: string, value: string): Thenable<void>
-	delete(key: string): Thenable<void>
-}
-
-// Import Thenable for SecretStorage interface
-import type { Thenable } from "./types.js"

packages/zoo-host/eslint.config.mjs

@@ -0,0 +1,4 @@
+import { config } from "@roo-code/config-eslint/base"
+
+/** @type {import("eslint").Linter.Config} */
+export default [...config]

packages/zoo-host/package.json

@@ -0,0 +1,26 @@
+{
+	"name": "@roo-code/zoo-host",
+	"description": "Private supervised extension host for the Zoo CLI.",
+	"private": true,
+	"type": "module",
+	"main": "./dist/child.js",
+	"types": "./src/index.ts",
+	"scripts": {
+		"lint": "eslint src --ext=ts --max-warnings=0",
+		"check-types": "tsc --noEmit",
+		"test": "vitest run",
+		"build": "tsc",
+		"clean": "rimraf dist .turbo"
+	},
+	"dependencies": {
+		"@roo-code/types": "workspace:^",
+		"@roo-code/vscode-shim": "workspace:^",
+		"@roo-code/zoo-protocol": "workspace:^"
+	},
+	"devDependencies": {
+		"@roo-code/config-eslint": "workspace:^",
+		"@roo-code/config-typescript": "workspace:^",
+		"@types/node": "22.20.1",
+		"vitest": "4.1.9"
+	}
+}

packages/zoo-host/src/__tests__/host.test.ts

@@ -0,0 +1,74 @@
+import { describe, expect, it, vi } from "vitest"
+
+import { HostCommandDispatcher } from "../dispatcher.js"
+import { validateHostRoots } from "../roots.js"
+import { VaultSecretStorage, type VaultBackend } from "../security.js"
+import { HostTransport } from "../transport.js"
+
+describe("host security and transport", () => {
+	it("requires explicit absolute roots", () => {
+		expect(() =>
+			validateHostRoots({
+				extensionRoot: "relative",
+				workspaceRoot: "/workspace",
+				storageRoot: "/storage",
+				appRoot: "/app",
+			}),
+		).toThrow("extensionRoot")
+		expect(
+			validateHostRoots({
+				extensionRoot: "/extension",
+				workspaceRoot: "/workspace",
+				storageRoot: "/storage",
+				appRoot: "/app",
+			}),
+		).toEqual({
+			extensionRoot: "/extension",
+			workspaceRoot: "/workspace",
+			storageRoot: "/storage",
+			appRoot: "/app",
+		})
+	})
+
+	it("round trips secrets only through the injected vault", async () => {
+		const values = new Map<string, string>()
+		const backend: VaultBackend = {
+			get: vi.fn(async (key) => values.get(key)),
+			store: vi.fn(async (key, value) => void values.set(key, value)),
+			delete: vi.fn(async (key) => void values.delete(key)),
+		}
+		const storage = new VaultSecretStorage(backend)
+		const changes: string[] = []
+		storage.onDidChange(({ key }) => changes.push(key))
+		await storage.store("api-key", "secret")
+		await expect(storage.get("api-key")).resolves.toBe("secret")
+		await storage.delete("api-key")
+		expect(changes).toEqual(["api-key", "api-key"])
+		expect(backend.store).toHaveBeenCalledWith("api-key", "secret")
+	})
+
+	it("uses one monotonic sequence for ACK and DONE", async () => {
+		const sent: unknown[] = []
+		const transport = new HostTransport("host-1", async (message) => void sent.push(message))
+		const api = {
+			startHeadlessTask: vi.fn().mockResolvedValue({ taskId: "root", rootTaskId: "root" }),
+		} as never
+		const dispatcher = new HostCommandDispatcher(api, transport, "/workspace")
+		await dispatcher.dispatch({ v: 1, id: "cmd-1", type: "task.start", workspace: "/workspace", prompt: "hello" })
+		expect(sent).toMatchObject([
+			{ seq: 1, type: "command.ack", commandId: "cmd-1" },
+			{ seq: 2, type: "command.done", commandId: "cmd-1", data: { commandType: "task.start" } },
+		])
+	})
+
+	it("rejects workspace identity changes after ACK", async () => {
+		const sent: unknown[] = []
+		const transport = new HostTransport("host-1", async (message) => void sent.push(message))
+		const dispatcher = new HostCommandDispatcher({} as never, transport, "/workspace")
+		await dispatcher.dispatch({ v: 1, id: "cmd-1", type: "task.start", workspace: "/other", prompt: "hello" })
+		expect(sent).toMatchObject([
+			{ seq: 1, type: "command.ack" },
+			{ seq: 2, type: "command.error", error: { code: "task_failed" } },
+		])
+	})
+})

packages/zoo-host/src/bootstrap.ts

@@ -0,0 +1,59 @@
+import fs from "node:fs"
+import path from "node:path"
+import { createRequire } from "node:module"
+
+import type { RooCodeAPI } from "@roo-code/types"
+import { createVSCodeAPI, type SecretStorage } from "@roo-code/vscode-shim"
+
+import { validateHostRoots, type HostRoots } from "./roots.js"
+
+type ExtensionModule = { activate(context: unknown): Promise<RooCodeAPI>; deactivate?(): Promise<void> }
+
+export async function activateExtensionHost(rootsInput: HostRoots, secretStorage: SecretStorage) {
+	const roots = validateHostRoots(rootsInput)
+	const bundlePath = path.join(roots.extensionRoot, "extension.js")
+	if (!fs.existsSync(bundlePath)) throw new Error(`Extension bundle not found at ${bundlePath}`)
+	const vscode = createVSCodeAPI(roots.extensionRoot, roots.workspaceRoot, undefined, {
+		appRoot: roots.appRoot,
+		storageDir: roots.storageRoot,
+		secretStorage,
+	})
+	;(globalThis as Record<string, unknown>).vscode = vscode
+	const require = createRequire(import.meta.url)
+	const Module = require("module") as {
+		_resolveFilename(request: string, parent: unknown, isMain: boolean, options: unknown): string
+	}
+	const originalResolve = Module._resolveFilename
+	Module._resolveFilename = function (request, parent, isMain, options) {
+		return request === "vscode" ? "zoo-vscode-shim" : originalResolve.call(this, request, parent, isMain, options)
+	}
+	require.cache["zoo-vscode-shim"] = {
+		id: "zoo-vscode-shim",
+		filename: "zoo-vscode-shim",
+		loaded: true,
+		exports: vscode,
+		children: [],
+		paths: [],
+		path: "",
+		isPreloading: false,
+		parent: null,
+		require,
+	} as unknown as NodeJS.Module
+	let extension: ExtensionModule
+	try {
+		extension = require(bundlePath) as ExtensionModule
+	} finally {
+		Module._resolveFilename = originalResolve
+	}
+	const api = await extension.activate(vscode.context)
+	await api.initializeHeadless()
+	return {
+		api,
+		async dispose() {
+			await api.shutdownHeadless()
+			await extension.deactivate?.()
+			vscode.context.dispose()
+			delete (globalThis as Record<string, unknown>).vscode
+		},
+	}
+}