simlock simctl and simlock adb on a worker run only against the caller's lease, and fill the device in
Los mantenedores suelen responder en 1 día
Nadie ha tomado este issue todavía.
Evaluación
- Dificultad
- 5/5
- Tiempo estimado
- Más de una semana
- Aptitud para principiantes
- 35/100
- Tipo de issue
- Nueva funcionalidad
- Claridad
- Bastante claro
- Estado de actividad
- Activo
- Stack tecnológico
- typescript
Línea de trabajo
Start with src/contract/operations.ts and driverPassthrough, then trace #driverPassthrough in src/daemon/dispatcher.ts and the CLI spawn path. Read the lease lookup in the agent-device front and the drivers’ per-verb refusal rules to map where authorization and device insertion belong. Check the existing passthrough tests; done means worker commands are scoped to the caller’s selected lease, with single-lease device filling and the documented refusal cases covered.
Escrito por el modelo de indexación a partir del texto del issue.
Descripción
Problem
On a worker, simlock simctl <args> and simlock adb <args> are not tied to the caller's lease. driver.passthrough has no authorization beyond the agent role (src/contract/operations.ts, driverPassthrough), the dispatcher resolves the command with only the tool and arguments (src/daemon/dispatcher.ts, #driverPassthrough), and the CLI spawns whatever comes back. Any UDID or serial on the command line runs, held or not. Through a gateway the same command goes through device.exec, which refuses without a lease (#deviceExec, UnknownLeaseError). --lease on a worker is "accepted and ignored" (working-with-a-device.mdx). The docs' own list of product gaps from the website rewrite (commit daa279ada) names this.
Two things follow from scoping the wrappers to the lease:
1. Enforcement of the one promise Simlock makes. simlock simctl install <other agent's UDID> … is refused with a message naming the caller's own device. booted and an adb call without -s are refused when the caller holds a lease, since they can reach another agent's device on the shared set or server. This is still an accident boundary: xcrun simctl stays reachable. It closes the case where an agent follows the rule "use simlock simctl" and still hits the wrong device because it copied the wrong id.
2. Less for the agent to carry. When the caller holds exactly one lease, the device argument can be filled in: simlock simctl install ./MyApp.app and simlock adb install app-debug.apk run against the caller's device. With several leases, --lease <id> picks one, as on a gateway today. The agent no longer copies the UDID out of the grant JSON into every command, and the instructions text shrinks.
Context
Found in the 2026-10-23 product review. The maintainer agreed to pursue it.
Facts for the spec session:
- The caller's identity on the socket is the requester (
SIMLOCK_AGENT_ID, the Claude Code or Codex session id, else the pid). Leases are found by requester, asheldForAnotherin the agent-device front already does withlease.list. - The admin role bypasses
ownsLeasetoday. Whether an operator at the terminal keeps unscoped passthrough (likely yes, with--leaseoptional) is a decision. - Where the device argument sits differs per tool:
simctl <verb> <udid> …for most verbs,adb -s <serial>before the verb,devicectl --device <udid>. The drivers already know their refusal lists per verb and can own the insertion rule. --export-envand the grantenvironmentcarry no device identifier for virtual devices; filling the argument in removes most of the need (#944 covers the environment side).- Tests pin today's behaviour that a worker's passthrough takes no lease; they change with this.
Written by an agent.
- Lenguaje dominante
- TypeScript
- Estrellas
- 22
- Forks
- 2
- Merge medio
- 7 h 38 min
- PR fusionados (30 d)
- 413
Preparar el entorno
Este proyecto no incluye contenedor de desarrollo, Dockerfile ni guía de contribución, así que la configuración corre por tu cuenta: empieza por su README y consulta nuestra guía para la primera contribución para los pasos generales.
Primeros pasos
- Lee el issue completo y luego la guía de contribución del proyecto.
- Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
- Haz un fork del repositorio y trabaja en una rama.
- Abre un pull request que haga referencia al número del issue.
Más de callstackincubator/simlock
-
bug:ready
Dificultad 2/5 1-3 horas Aptitud para principiantes 70/100
callstackincubator/simlock#639 · 3 comentarios ·
Los mantenedores suelen responder en 1 día
-
A lease renew right after a gateway restart answers UNKNOWN_LEASE and the client drops the leaseAbierto
Dificultad 4/5 3-5 días Aptitud para principiantes 45/100
callstackincubator/simlock#983 · 2 comentarios ·
Los mantenedores suelen responder en 1 día
-
iOS simulators can live in Xcode's device set (drivers.ios.deviceSet)Posiblemente ocupada @V3RON la tomó hace 1 día. Abiertotask:blocked
Dificultad 5/5 Más de una semana Aptitud para principiantes 38/100
callstackincubator/simlock#968 · 2 comentarios ·
Los mantenedores suelen responder en 1 día
-
feature:planned
Dificultad 5/5 Más de una semana Aptitud para principiantes 35/100
callstackincubator/simlock#962 · 4 comentarios ·
Los mantenedores suelen responder en 1 día
-
request:new
Dificultad 5/5 Más de una semana Aptitud para principiantes 35/100
callstackincubator/simlock#946 · 1 comentario ·
Los mantenedores suelen responder en 1 día
Todos los issues de callstackincubator/simlock
Issues similares
-
Dificultad 2/5 1-3 horas Aptitud para principiantes 62/100
Merit-Systems/x402scan#1312 ·
-
Dificultad 2/5 1-3 horas Aptitud para principiantes 78/100
Los mantenedores suelen responder en 1 día
-
Native Web
Dificultad 1/5 Menos de una hora Aptitud para principiantes 80/100
digitalfabrik/integreat-app#4517 ·
Los mantenedores suelen responder en 2 días
-
TLS guide repeats certs/ in the certificate directoryPosiblemente ocupada @maheshrijal la tomó hoy. Abierto
Dificultad 1/5 Menos de una hora Aptitud para principiantes 92/100
prometheus/docs#3156 ·
Los mantenedores suelen responder en 2 días
-
Dificultad 2/5 1-3 horas Aptitud para principiantes 83/100
medusajs/dtc-starter#90 ·
Los mantenedores suelen responder en 1 día