@bjoernrochel/sevro 1.0.0 → 1.1.0

package/dist/src/fixtures/setup.js

@@ -0,0 +1,175 @@
+import { spawn } from "../runtime-process.js";
+import { mkdir, mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { delimiter, isAbsolute, join } from "node:path";
+import { isRecord } from "../value-guards.js";
+import { requireCandidateRuntime } from "../candidate-artifacts.js";
+import { ProcessDeadline, terminateOwnedProcessGroup, } from "../process-lifecycle.js";
+const MAX_COMMAND_BYTES = 64 * 1024;
+const MAX_ENV_BYTES = 16 * 1024;
+const TIMEOUT_MS = 120_000;
+const RESERVED_ENV = new Set([
+    "PATH",
+    "HOME",
+    "TMPDIR",
+    "GIT_CONFIG_GLOBAL",
+    "GIT_CONFIG_NOSYSTEM",
+    "GIT_TERMINAL_PROMPT",
+]);
+function setupRecord(value) {
+    if (!isRecord(value))
+        throw new Error("invalid fixture setup");
+    return value;
+}
+function validArgument(value) {
+    return typeof value === "string" && value.length > 0 && !value.includes("\0");
+}
+function argumentList(value) {
+    return (Array.isArray(value) &&
+        value.length > 0 &&
+        value.length <= 16 &&
+        value.every(validArgument));
+}
+function setupCommand(value) {
+    if (!argumentList(value))
+        throw new Error("invalid fixture setup command");
+    const executable = value[0];
+    if (!absoluteExecutable(executable) ||
+        Buffer.byteLength(value.join("\0"), "utf8") > MAX_COMMAND_BYTES)
+        throw new Error("invalid fixture setup command");
+    return value;
+}
+function absoluteExecutable(value) {
+    return value !== undefined && isAbsolute(value);
+}
+function validEnvironmentEntry([name, value]) {
+    return (/^[A-Z][A-Z0-9_]*$/.test(name) &&
+        !RESERVED_ENV.has(name) &&
+        validEnvironmentValue(value));
+}
+function validEnvironmentValue(value) {
+    return (typeof value === "string" &&
+        !value.includes("\0") &&
+        !/\{\{(?!sevro\.(?:project|workspace)\}\})/.test(value));
+}
+function environmentRecord(value) {
+    if (!isRecord(value))
+        throw new Error("invalid fixture setup environment");
+    return value;
+}
+function setupEnvironment(value) {
+    const environment = environmentRecord(value);
+    const entries = Object.entries(environment);
+    if (entries.length > 32 ||
+        entries.some((entry) => !validEnvironmentEntry(entry)) ||
+        Buffer.byteLength(JSON.stringify(environment), "utf8") > MAX_ENV_BYTES)
+        throw new Error("invalid fixture setup environment");
+    return environment;
+}
+/** Validate a trusted extension's bounded fixture setup command. */
+export function prepareFixtureSetup(value) {
+    if (value === undefined)
+        return null;
+    const input = setupRecord(value);
+    if (Object.keys(input).some((key) => key !== "command" && key !== "environment"))
+        throw new Error("unsupported fixture setup field");
+    const command = setupCommand(input.command);
+    const environment = setupEnvironment(input.environment ?? {});
+    return { command, environment };
+}
+function setupPath(directory) {
+    const inherited = process.env.PATH ?? "/usr/bin:/bin";
+    return directory ? `${directory}${delimiter}${inherited}` : inherited;
+}
+function executionEnvironment(setup, options, home) {
+    const environment = Object.fromEntries(Object.entries(setup.environment).map(([name, value]) => [
+        name,
+        value
+            .replaceAll("{{sevro.project}}", options.projectRoot)
+            .replaceAll("{{sevro.workspace}}", options.workspace),
+    ]));
+    return {
+        PATH: setupPath(options.fixtureBinDir),
+        HOME: options.candidateRuntimeRoot
+            ? join(options.candidateRuntimeRoot, "home")
+            : home,
+        TMPDIR: home,
+        LANG: process.env.LANG ?? "C",
+        GIT_CONFIG_GLOBAL: process.platform === "win32" ? "NUL" : "/dev/null",
+        GIT_CONFIG_NOSYSTEM: "1",
+        GIT_TERMINAL_PROMPT: "0",
+        GIT_AUTHOR_NAME: "Sevro Fixture",
+        GIT_AUTHOR_EMAIL: "fixture@sevro.invalid",
+        GIT_COMMITTER_NAME: "Sevro Fixture",
+        GIT_COMMITTER_EMAIL: "fixture@sevro.invalid",
+        GIT_AUTHOR_DATE: "2000-01-01T00:00:00+00:00",
+        GIT_COMMITTER_DATE: "2000-01-01T00:00:00+00:00",
+        ...environment,
+    };
+}
+class FixtureSetupExecution {
+    setup;
+    options;
+    home;
+    proc;
+    deadline;
+    constructor(setup, options, home) {
+        this.setup = setup;
+        this.options = options;
+        this.home = home;
+        this.deadline = new ProcessDeadline({
+            timeoutMs: TIMEOUT_MS,
+            signal: options.signal,
+            interruption: (reason) => new Error(reason === "timeout"
+                ? "fixture setup timed out"
+                : "fixture setup cancelled"),
+        });
+    }
+    async run() {
+        this.proc = spawn(this.setup.command, {
+            cwd: this.options.workspace,
+            env: executionEnvironment(this.setup, this.options, this.home),
+            detached: process.platform !== "win32",
+            stdin: "ignore",
+            stdout: "ignore",
+            stderr: "ignore",
+        });
+        const code = await this.deadline.wait(this.proc.exited);
+        if (code !== 0)
+            throw new Error(`fixture setup failed (${code})`);
+    }
+    async stop() {
+        if (!this.proc)
+            return;
+        terminateOwnedProcessGroup(this.proc);
+        await this.proc.exited;
+    }
+    async dispose() {
+        this.deadline.dispose();
+        await rm(this.home, { recursive: true, force: true });
+    }
+}
+/** Run setup after fixture history and before evaluator artifacts are mounted. */
+export async function runFixtureSetup(setup, options) {
+    if (options.signal?.aborted)
+        throw new Error("fixture setup cancelled");
+    await requireCandidateRuntime(options.candidateRuntimeRoot);
+    if (options.candidateRuntimeRoot)
+        await mkdir(join(options.candidateRuntimeRoot, "home"), {
+            recursive: true,
+            mode: 0o700,
+        });
+    const home = await mkdtemp(join(tmpdir(), "sevro-setup-"));
+    const execution = new FixtureSetupExecution(setup, options, home);
+    try {
+        await execution.run();
+    }
+    catch (error) {
+        await execution.stop();
+        throw error;
+    }
+    finally {
+        await execution.dispose();
+    }
+}
+//# sourceMappingURL=setup.js.map

package/dist/src/fixtures/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAmB,8BAA2B;AAC5D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,yBAAyB;AACtD,OAAO,EAAE,MAAM,EAAE,gBAAgB;AACjC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,kBAAkB;AACxD,OAAO,EAAE,QAAQ,EAAE,2BAAwB;AAC3C,OAAO,EAAE,uBAAuB,EAAE,kCAA+B;AACjE,OAAO,EACL,eAAe,EACf,0BAA0B,GAC3B,gCAA6B;AAE9B,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AACpC,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC;AAChC,MAAM,UAAU,GAAG,OAAO,CAAC;AAC3B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,MAAM;IACN,MAAM;IACN,QAAQ;IACR,mBAAmB;IACnB,qBAAqB;IACrB,qBAAqB;CACtB,CAAC,CAAC;AAWH,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,EAAE;QAClB,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,IACE,CAAC,kBAAkB,CAAC,UAAU,CAAC;QAC/B,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,GAAG,iBAAiB;QAE/D,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAyB;IACnD,OAAO,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAC,IAAI,EAAE,KAAK,CAAoB;IAC7D,OAAO,CACL,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9B,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;QACvB,qBAAqB,CAAC,KAAK,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrB,CAAC,0CAA0C,CAAC,IAAI,CAAC,KAAK,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C,IACE,OAAO,CAAC,MAAM,GAAG,EAAE;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,GAAG,aAAa;QAEtE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,OAAO,WAAqC,CAAC;AAC/C,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,IACE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,aAAa,CAAC;QAE5E,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC9D,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC;AAUD,SAAS,SAAS,CAAC,SAA6B;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,eAAe,CAAC;IACtD,OAAO,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAmB,EACnB,OAA4B,EAC5B,IAAY;IAEZ,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CACpC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACvD,IAAI;QACJ,KAAK;aACF,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC,WAAW,CAAC;aACpD,UAAU,CAAC,qBAAqB,EAAE,OAAO,CAAC,SAAS,CAAC;KACxD,CAAC,CACH,CAAC;IACF,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC;QACtC,IAAI,EAAE,OAAO,CAAC,oBAAoB;YAChC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC;YAC5C,CAAC,CAAC,IAAI;QACR,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG;QAC7B,iBAAiB,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW;QACrE,mBAAmB,EAAE,GAAG;QACxB,mBAAmB,EAAE,GAAG;QACxB,eAAe,EAAE,eAAe;QAChC,gBAAgB,EAAE,uBAAuB;QACzC,kBAAkB,EAAE,eAAe;QACnC,mBAAmB,EAAE,uBAAuB;QAC5C,eAAe,EAAE,2BAA2B;QAC5C,kBAAkB,EAAE,2BAA2B;QAC/C,GAAG,WAAW;KACf,CAAC;AACJ,CAAC;AAED,MAAM,qBAAqB;IAIN;IACA;IACA;IALX,IAAI,CAAyB;IACpB,QAAQ,CAAkB;IAC3C,YACmB,KAAmB,EACnB,OAA4B,EAC5B,IAAY;QAFZ,UAAK,GAAL,KAAK,CAAc;QACnB,YAAO,GAAP,OAAO,CAAqB;QAC5B,SAAI,GAAJ,IAAI,CAAQ;QAE7B,IAAI,CAAC,QAAQ,GAAG,IAAI,eAAe,CAAC;YAClC,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CACvB,IAAI,KAAK,CACP,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,yBAAyB;gBAC3B,CAAC,CAAC,yBAAyB,CAC9B;SACJ,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG;QACP,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;YACpC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YAC3B,GAAG,EAAE,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;YAC9D,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;YACtC,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,GAAG,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;CACF;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAmB,EACnB,OAA4B;IAE5B,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACxE,MAAM,uBAAuB,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,oBAAoB;QAC9B,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,EAAE;YACtD,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC","sourcesContent":["import { spawn, type Subprocess } from \"../runtime-process\";\nimport { mkdir, mkdtemp, rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { delimiter, isAbsolute, join } from \"node:path\";\nimport { isRecord } from \"../value-guards\";\nimport { requireCandidateRuntime } from \"../candidate-artifacts\";\nimport {\n  ProcessDeadline,\n  terminateOwnedProcessGroup,\n} from \"../process-lifecycle\";\n\nconst MAX_COMMAND_BYTES = 64 * 1024;\nconst MAX_ENV_BYTES = 16 * 1024;\nconst TIMEOUT_MS = 120_000;\nconst RESERVED_ENV = new Set([\n  \"PATH\",\n  \"HOME\",\n  \"TMPDIR\",\n  \"GIT_CONFIG_GLOBAL\",\n  \"GIT_CONFIG_NOSYSTEM\",\n  \"GIT_TERMINAL_PROMPT\",\n]);\n\nexport interface FixtureSetupDeclaration {\n  command: string[];\n  environment?: Record<string, string>;\n}\n\nexport interface FixtureSetup extends FixtureSetupDeclaration {\n  environment: Record<string, string>;\n}\n\nfunction setupRecord(value: unknown): Record<string, unknown> {\n  if (!isRecord(value)) throw new Error(\"invalid fixture setup\");\n  return value;\n}\n\nfunction validArgument(value: unknown): value is string {\n  return typeof value === \"string\" && value.length > 0 && !value.includes(\"\\0\");\n}\n\nfunction argumentList(value: unknown): value is string[] {\n  return (\n    Array.isArray(value) &&\n    value.length > 0 &&\n    value.length <= 16 &&\n    value.every(validArgument)\n  );\n}\n\nfunction setupCommand(value: unknown): string[] {\n  if (!argumentList(value)) throw new Error(\"invalid fixture setup command\");\n  const executable = value[0];\n  if (\n    !absoluteExecutable(executable) ||\n    Buffer.byteLength(value.join(\"\\0\"), \"utf8\") > MAX_COMMAND_BYTES\n  )\n    throw new Error(\"invalid fixture setup command\");\n  return value;\n}\n\nfunction absoluteExecutable(value: string | undefined): boolean {\n  return value !== undefined && isAbsolute(value);\n}\n\nfunction validEnvironmentEntry([name, value]: [string, unknown]): boolean {\n  return (\n    /^[A-Z][A-Z0-9_]*$/.test(name) &&\n    !RESERVED_ENV.has(name) &&\n    validEnvironmentValue(value)\n  );\n}\n\nfunction validEnvironmentValue(value: unknown): value is string {\n  return (\n    typeof value === \"string\" &&\n    !value.includes(\"\\0\") &&\n    !/\\{\\{(?!sevro\\.(?:project|workspace)\\}\\})/.test(value)\n  );\n}\n\nfunction environmentRecord(value: unknown): Record<string, unknown> {\n  if (!isRecord(value)) throw new Error(\"invalid fixture setup environment\");\n  return value;\n}\n\nfunction setupEnvironment(value: unknown): Record<string, string> {\n  const environment = environmentRecord(value);\n  const entries = Object.entries(environment);\n  if (\n    entries.length > 32 ||\n    entries.some((entry) => !validEnvironmentEntry(entry)) ||\n    Buffer.byteLength(JSON.stringify(environment), \"utf8\") > MAX_ENV_BYTES\n  )\n    throw new Error(\"invalid fixture setup environment\");\n  return environment as Record<string, string>;\n}\n\n/** Validate a trusted extension's bounded fixture setup command. */\nexport function prepareFixtureSetup(value: unknown): FixtureSetup | null {\n  if (value === undefined) return null;\n  const input = setupRecord(value);\n  if (\n    Object.keys(input).some((key) => key !== \"command\" && key !== \"environment\")\n  )\n    throw new Error(\"unsupported fixture setup field\");\n  const command = setupCommand(input.command);\n  const environment = setupEnvironment(input.environment ?? {});\n  return { command, environment };\n}\n\ninterface FixtureSetupOptions {\n  workspace: string;\n  projectRoot: string;\n  fixtureBinDir?: string;\n  signal?: AbortSignal;\n  candidateRuntimeRoot?: string;\n}\n\nfunction setupPath(directory: string | undefined): string {\n  const inherited = process.env.PATH ?? \"/usr/bin:/bin\";\n  return directory ? `${directory}${delimiter}${inherited}` : inherited;\n}\n\nfunction executionEnvironment(\n  setup: FixtureSetup,\n  options: FixtureSetupOptions,\n  home: string,\n) {\n  const environment = Object.fromEntries(\n    Object.entries(setup.environment).map(([name, value]) => [\n      name,\n      value\n        .replaceAll(\"{{sevro.project}}\", options.projectRoot)\n        .replaceAll(\"{{sevro.workspace}}\", options.workspace),\n    ]),\n  );\n  return {\n    PATH: setupPath(options.fixtureBinDir),\n    HOME: options.candidateRuntimeRoot\n      ? join(options.candidateRuntimeRoot, \"home\")\n      : home,\n    TMPDIR: home,\n    LANG: process.env.LANG ?? \"C\",\n    GIT_CONFIG_GLOBAL: process.platform === \"win32\" ? \"NUL\" : \"/dev/null\",\n    GIT_CONFIG_NOSYSTEM: \"1\",\n    GIT_TERMINAL_PROMPT: \"0\",\n    GIT_AUTHOR_NAME: \"Sevro Fixture\",\n    GIT_AUTHOR_EMAIL: \"fixture@sevro.invalid\",\n    GIT_COMMITTER_NAME: \"Sevro Fixture\",\n    GIT_COMMITTER_EMAIL: \"fixture@sevro.invalid\",\n    GIT_AUTHOR_DATE: \"2000-01-01T00:00:00+00:00\",\n    GIT_COMMITTER_DATE: \"2000-01-01T00:00:00+00:00\",\n    ...environment,\n  };\n}\n\nclass FixtureSetupExecution {\n  private proc: Subprocess | undefined;\n  private readonly deadline: ProcessDeadline;\n  constructor(\n    private readonly setup: FixtureSetup,\n    private readonly options: FixtureSetupOptions,\n    private readonly home: string,\n  ) {\n    this.deadline = new ProcessDeadline({\n      timeoutMs: TIMEOUT_MS,\n      signal: options.signal,\n      interruption: (reason) =>\n        new Error(\n          reason === \"timeout\"\n            ? \"fixture setup timed out\"\n            : \"fixture setup cancelled\",\n        ),\n    });\n  }\n\n  async run(): Promise<void> {\n    this.proc = spawn(this.setup.command, {\n      cwd: this.options.workspace,\n      env: executionEnvironment(this.setup, this.options, this.home),\n      detached: process.platform !== \"win32\",\n      stdin: \"ignore\",\n      stdout: \"ignore\",\n      stderr: \"ignore\",\n    });\n    const code = await this.deadline.wait(this.proc.exited);\n    if (code !== 0) throw new Error(`fixture setup failed (${code})`);\n  }\n\n  async stop(): Promise<void> {\n    if (!this.proc) return;\n    terminateOwnedProcessGroup(this.proc);\n    await this.proc.exited;\n  }\n\n  async dispose(): Promise<void> {\n    this.deadline.dispose();\n    await rm(this.home, { recursive: true, force: true });\n  }\n}\n\n/** Run setup after fixture history and before evaluator artifacts are mounted. */\nexport async function runFixtureSetup(\n  setup: FixtureSetup,\n  options: FixtureSetupOptions,\n): Promise<void> {\n  if (options.signal?.aborted) throw new Error(\"fixture setup cancelled\");\n  await requireCandidateRuntime(options.candidateRuntimeRoot);\n  if (options.candidateRuntimeRoot)\n    await mkdir(join(options.candidateRuntimeRoot, \"home\"), {\n      recursive: true,\n      mode: 0o700,\n    });\n  const home = await mkdtemp(join(tmpdir(), \"sevro-setup-\"));\n  const execution = new FixtureSetupExecution(setup, options, home);\n  try {\n    await execution.run();\n  } catch (error) {\n    await execution.stop();\n    throw error;\n  } finally {\n    await execution.dispose();\n  }\n}\n"]}

package/dist/src/fixtures/tools.js

@@ -0,0 +1,57 @@
+import { chmod, lstat, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { isRecord } from "../value-guards.js";
+export function isMissingFile(error) {
+    return error instanceof Error && "code" in error && error.code === "ENOENT";
+}
+function validContent(content) {
+    return (typeof content === "string" && content.length > 0 && !content.includes("\0"));
+}
+function validEntry([name, content], pattern) {
+    return pattern.test(name) && name.length <= 64 && validContent(content);
+}
+function declarationBytes(entries) {
+    return entries.reduce((size, [name, content]) => size +
+        Buffer.byteLength(name, "utf8") +
+        Buffer.byteLength(content, "utf8"), 0);
+}
+/** Shared bounds for trusted Git hook and fixture executable declarations. */
+export function prepareFixtureTools(value, pattern, maxTools, message) {
+    if (value === undefined)
+        return null;
+    if (!isRecord(value))
+        throw new Error(message);
+    const entries = Object.entries(value);
+    validateToolBounds(entries, pattern, maxTools, message);
+    return value;
+}
+function validateToolBounds(entries, pattern, maxTools, message) {
+    if (entries.length > maxTools ||
+        entries.some((entry) => !validEntry(entry, pattern)) ||
+        declarationBytes(entries) > 1024 * 1024)
+        throw new Error(message);
+}
+async function validateToolTarget(path, message) {
+    try {
+        const existing = await lstat(path);
+        if (!existing.isFile() || existing.isSymbolicLink())
+            throw new Error(message);
+    }
+    catch (error) {
+        if (!isMissingFile(error))
+            throw error;
+    }
+}
+/** Preserve target-type checks and executable modes for both declaration kinds. */
+export async function installFixtureTools(tools, directory, messages) {
+    const root = await lstat(directory);
+    if (!root.isDirectory() || root.isSymbolicLink())
+        throw new Error(messages.directory);
+    for (const [name, content] of Object.entries(tools)) {
+        const target = join(directory, name);
+        await validateToolTarget(target, messages.target);
+        await writeFile(target, content, { mode: 0o755 });
+        await chmod(target, 0o755);
+    }
+}
+//# sourceMappingURL=tools.js.map

package/dist/src/fixtures/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,yBAAyB;AAC3D,OAAO,EAAE,IAAI,EAAE,kBAAkB;AACjC,OAAO,EAAE,QAAQ,EAAE,2BAAwB;AAE3C,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB;IACpC,OAAO,CACL,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC7E,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,CAAC,IAAI,EAAE,OAAO,CAAoB,EAClC,OAAe;IAEf,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA4B;IACpD,OAAO,OAAO,CAAC,MAAM,CACnB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CACxB,IAAI;QACJ,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;QAC/B,MAAM,CAAC,UAAU,CAAC,OAAiB,EAAE,MAAM,CAAC,EAC9C,CAAC,CACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CACjC,KAAc,EACd,OAAe,EACf,QAAgB,EAChB,OAAe;IAEf,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxD,OAAO,KAA+B,CAAC;AACzC,CAAC;AAED,SAAS,kBAAkB,CACzB,OAA4B,EAC5B,OAAe,EACf,QAAgB,EAChB,OAAe;IAEf,IACE,OAAO,CAAC,MAAM,GAAG,QAAQ;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpD,gBAAgB,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,IAAI;QAEvC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,IAAY,EACZ,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE;YACjD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;IACzC,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA6B,EAC7B,SAAiB,EACjB,QAA+C;IAE/C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAC9C,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC","sourcesContent":["import { chmod, lstat, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { isRecord } from \"../value-guards\";\n\nexport function isMissingFile(error: unknown): boolean {\n  return error instanceof Error && \"code\" in error && error.code === \"ENOENT\";\n}\n\nfunction validContent(content: unknown): content is string {\n  return (\n    typeof content === \"string\" && content.length > 0 && !content.includes(\"\\0\")\n  );\n}\n\nfunction validEntry(\n  [name, content]: [string, unknown],\n  pattern: RegExp,\n): boolean {\n  return pattern.test(name) && name.length <= 64 && validContent(content);\n}\n\nfunction declarationBytes(entries: [string, unknown][]): number {\n  return entries.reduce(\n    (size, [name, content]) =>\n      size +\n      Buffer.byteLength(name, \"utf8\") +\n      Buffer.byteLength(content as string, \"utf8\"),\n    0,\n  );\n}\n\n/** Shared bounds for trusted Git hook and fixture executable declarations. */\nexport function prepareFixtureTools(\n  value: unknown,\n  pattern: RegExp,\n  maxTools: number,\n  message: string,\n): Record<string, string> | null {\n  if (value === undefined) return null;\n  if (!isRecord(value)) throw new Error(message);\n  const entries = Object.entries(value);\n  validateToolBounds(entries, pattern, maxTools, message);\n  return value as Record<string, string>;\n}\n\nfunction validateToolBounds(\n  entries: [string, unknown][],\n  pattern: RegExp,\n  maxTools: number,\n  message: string,\n): void {\n  if (\n    entries.length > maxTools ||\n    entries.some((entry) => !validEntry(entry, pattern)) ||\n    declarationBytes(entries) > 1024 * 1024\n  )\n    throw new Error(message);\n}\n\nasync function validateToolTarget(\n  path: string,\n  message: string,\n): Promise<void> {\n  try {\n    const existing = await lstat(path);\n    if (!existing.isFile() || existing.isSymbolicLink())\n      throw new Error(message);\n  } catch (error) {\n    if (!isMissingFile(error)) throw error;\n  }\n}\n\n/** Preserve target-type checks and executable modes for both declaration kinds. */\nexport async function installFixtureTools(\n  tools: Record<string, string>,\n  directory: string,\n  messages: { directory: string; target: string },\n): Promise<void> {\n  const root = await lstat(directory);\n  if (!root.isDirectory() || root.isSymbolicLink())\n    throw new Error(messages.directory);\n  for (const [name, content] of Object.entries(tools)) {\n    const target = join(directory, name);\n    await validateToolTarget(target, messages.target);\n    await writeFile(target, content, { mode: 0o755 });\n    await chmod(target, 0o755);\n  }\n}\n"]}

package/dist/src/fixtures/workspace-state.js

@@ -0,0 +1,155 @@
+import { realpathSync } from "node:fs";
+import { lstat, mkdir, mkdtemp, realpath, readFile, readdir, rm, writeFile, } from "node:fs/promises";
+import { tmpdir, userInfo } from "node:os";
+import { basename, dirname, join } from "node:path";
+import { ownerStatus, processIdentity, validProcessIdentity, } from "../run-owner.js";
+import { isRecord } from "../value-guards.js";
+import { isMissingFile } from "./tools.js";
+import { atomicWriteJson } from "../storage.js";
+import { clearFixtureContents } from "./cleanup.js";
+const RETENTION_MS = 24 * 60 * 60_000;
+/** One stable boundary protects both existing and subsequently allocated peers. */
+export function workspaceStatePath() {
+    const base = process.platform === "linux" ? "/var/tmp" : tmpdir();
+    return join(realpathSync(base), "sevro-workspaces-private");
+}
+export async function workspaceStateParent() {
+    const root = workspaceStatePath();
+    await mkdir(root, { recursive: true, mode: 0o700 });
+    const info = await lstat(root);
+    if (!info.isDirectory() ||
+        info.uid !== userInfo().uid ||
+        (info.mode & 0o077) !== 0)
+        throw new Error("workspace namespace must be an owned private directory");
+    return realpath(root);
+}
+export async function allocateWorkspace() {
+    const owner = processIdentity(process.pid);
+    if (!owner)
+        throw new Error("cannot verify workspace owner identity");
+    const parent = await workspaceStateParent();
+    await workspaceMetadataDirectory(parent);
+    const workspace = await realpath(await mkdtemp(join(parent, "case-")));
+    try {
+        await writeFile(workspaceOwnerPath(workspace), JSON.stringify({
+            format: "sevro.workspace-owner.v1",
+            owner,
+            state: "active",
+            timestamp: Date.now(),
+        }), { mode: 0o600, flag: "wx" });
+        return workspace;
+    }
+    catch (cause) {
+        await rm(workspace, { recursive: true, force: true });
+        throw cause;
+    }
+}
+async function workspaceMetadataDirectory(parent) {
+    const root = join(parent, ".owners");
+    await mkdir(root, { mode: 0o700, recursive: true });
+    const metadata = await lstat(root);
+    if (!ownedDirectory(metadata) || (metadata.mode & 0o077) !== 0)
+        throw new Error("workspace metadata must be an owned private directory");
+    return root;
+}
+function workspaceOwnerPath(workspace) {
+    return join(dirname(workspace), ".owners", `${basename(workspace)}.json`);
+}
+function validWorkspaceLifecycle(value) {
+    return ((value.state === "active" || value.state === "retained") &&
+        typeof value.timestamp === "number" &&
+        Number.isFinite(value.timestamp));
+}
+function validWorkspaceOwner(value) {
+    return (isRecord(value) &&
+        value.format === "sevro.workspace-owner.v1" &&
+        validWorkspaceLifecycle(value) &&
+        validProcessIdentity(value.owner));
+}
+function privateOwnerFile(info) {
+    return (info.isFile() &&
+        info.uid === userInfo().uid &&
+        info.size <= 4096 &&
+        (info.mode & 0o077) === 0);
+}
+async function readWorkspaceOwner(workspace) {
+    const path = workspaceOwnerPath(workspace);
+    if (!privateOwnerFile(await lstat(path)))
+        return null;
+    return JSON.parse(await readFile(path, "utf8"));
+}
+async function workspaceOwner(workspace) {
+    try {
+        const value = await readWorkspaceOwner(workspace);
+        return validWorkspaceOwner(value) ? value : null;
+    }
+    catch {
+        // Unreadable or malformed ownership cannot authorize temporary-data deletion.
+        return null;
+    }
+}
+export async function retainWorkspace(workspace) {
+    if (!workspaceBoundaryException(workspaceStatePath(), workspace).length)
+        return;
+    const record = await workspaceOwner(workspace);
+    if (!record || record.state === "retained")
+        return;
+    await atomicWriteJson(workspaceOwnerPath(workspace), {
+        ...record,
+        state: "retained",
+        timestamp: Date.now(),
+    });
+}
+export async function removeWorkspace(workspace) {
+    await rm(workspace, { recursive: true, force: true });
+    if (workspaceBoundaryException(workspaceStatePath(), workspace).length)
+        await rm(workspaceOwnerPath(workspace), { force: true });
+}
+async function expireWorkspace(workspace, cutoff) {
+    const record = await workspaceOwner(workspace);
+    if (!record || !expiredOwner(record, cutoff))
+        return;
+    const info = await lstat(workspace).catch((cause) => {
+        if (isMissingFile(cause))
+            return null;
+        throw cause;
+    });
+    if (info && !ownedDirectory(info))
+        return;
+    await clearExpiredWorkspace(workspace, info);
+}
+async function clearExpiredWorkspace(workspace, info) {
+    if (info)
+        await clearFixtureContents(workspace);
+    await removeWorkspace(workspace);
+}
+function ownedDirectory(info) {
+    return info.isDirectory() && info.uid === userInfo().uid;
+}
+function expiredOwner(record, cutoff) {
+    return (record.timestamp < cutoff &&
+        (record.state === "retained" || ownerStatus(record.owner) === "dead"));
+}
+/** Reclaim only owned inactive temporary data; evidence directories are never scanned. */
+export async function cleanupExpiredWorkspaces() {
+    const parent = await workspaceStateParent();
+    const metadata = await workspaceMetadataDirectory(parent);
+    const cutoff = Date.now() - RETENTION_MS;
+    for (const entry of await readdir(metadata, { withFileTypes: true }))
+        if (entry.isFile() && /^case-[a-zA-Z0-9]+\.json$/.test(entry.name)) {
+            const workspace = join(parent, entry.name.slice(0, -5));
+            await expireWorkspace(workspace, cutoff).catch((cause) => {
+                if (!isMissingFile(cause))
+                    console.warn(`temporary workspace cleanup did not complete: ${workspace}`);
+            });
+        }
+}
+/** Only a runner-owned direct child can be an exception to this deny boundary. */
+export function workspaceBoundaryException(root, workspace) {
+    return root === workspaceStatePath() &&
+        workspace !== undefined &&
+        dirname(workspace) === root
+        ? [workspace]
+        : [];
+}
+//# sourceMappingURL=workspace-state.js.map

package/dist/src/fixtures/workspace-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-state.js","sourceRoot":"","sources":["workspace-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,gBAAgB;AAEvC,OAAO,EACL,KAAK,EACL,KAAK,EACL,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,EAAE,EACF,SAAS,GACV,yBAAyB;AAC1B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB;AAC3C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB;AACpD,OAAO,EACL,WAAW,EACX,eAAe,EACf,oBAAoB,GAErB,wBAAqB;AACtB,OAAO,EAAE,QAAQ,EAAE,2BAAwB;AAC3C,OAAO,EAAE,aAAa,EAAE,mBAAgB;AACxC,OAAO,EAAE,eAAe,EAAE,sBAAmB;AAC7C,OAAO,EAAE,oBAAoB,EAAE,qBAAkB;AAEjD,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAQtC,mFAAmF;AACnF,MAAM,UAAU,kBAAkB;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClE,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IACE,CAAC,IAAI,CAAC,WAAW,EAAE;QACnB,IAAI,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC,GAAG;QAC3B,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAEzB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAC5C,MAAM,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,SAAS,CACb,kBAAkB,CAAC,SAAS,CAAC,EAC7B,IAAI,CAAC,SAAS,CAAC;YACb,MAAM,EAAE,0BAA0B;YAClC,KAAK;YACL,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,EACF,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAC5B,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,MAAc;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACrC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,uBAAuB,CAAC,KAA8B;IAC7D,OAAO,CACL,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC;QACxD,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CACjC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,KAAK,CAAC,MAAM,KAAK,0BAA0B;QAC3C,uBAAuB,CAAC,KAAK,CAAC;QAC9B,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAW;IACnC,OAAO,CACL,IAAI,CAAC,MAAM,EAAE;QACb,IAAI,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC,GAAG;QAC3B,IAAI,CAAC,IAAI,IAAI,IAAI;QACjB,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACjD,MAAM,IAAI,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAClD,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB;IACrD,IAAI,CAAC,0BAA0B,CAAC,kBAAkB,EAAE,EAAE,SAAS,CAAC,CAAC,MAAM;QACrE,OAAO;IACT,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO;IACnD,MAAM,eAAe,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE;QACnD,GAAG,MAAM;QACT,KAAK,EAAE,UAAU;QACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB;IACrD,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,0BAA0B,CAAC,kBAAkB,EAAE,EAAE,SAAS,CAAC,CAAC,MAAM;QACpE,MAAM,EAAE,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,SAAiB,EACjB,MAAc;IAEd,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;QAAE,OAAO;IACrD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC3D,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO;IAC1C,MAAM,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,SAAiB,EACjB,IAAkB;IAElB,IAAI,IAAI;QAAE,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,cAAc,CAAC,IAAW;IACjC,OAAO,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC,GAAG,CAAC;AAC3D,CAAC;AAED,SAAS,YAAY,CAAC,MAAsB,EAAE,MAAc;IAC1D,OAAO,CACL,MAAM,CAAC,SAAS,GAAG,MAAM;QACzB,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QAClE,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,MAAM,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAChE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;oBACvB,OAAO,CAAC,IAAI,CACV,iDAAiD,SAAS,EAAE,CAC7D,CAAC;YACN,CAAC,CAAC,CAAC;QACL,CAAC;AACL,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,0BAA0B,CACxC,IAAY,EACZ,SAAkB;IAElB,OAAO,IAAI,KAAK,kBAAkB,EAAE;QAClC,SAAS,KAAK,SAAS;QACvB,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI;QAC3B,CAAC,CAAC,CAAC,SAAS,CAAC;QACb,CAAC,CAAC,EAAE,CAAC;AACT,CAAC","sourcesContent":["import { realpathSync } from \"node:fs\";\nimport type { Stats } from \"node:fs\";\nimport {\n  lstat,\n  mkdir,\n  mkdtemp,\n  realpath,\n  readFile,\n  readdir,\n  rm,\n  writeFile,\n} from \"node:fs/promises\";\nimport { tmpdir, userInfo } from \"node:os\";\nimport { basename, dirname, join } from \"node:path\";\nimport {\n  ownerStatus,\n  processIdentity,\n  validProcessIdentity,\n  type ProcessIdentity,\n} from \"../run-owner\";\nimport { isRecord } from \"../value-guards\";\nimport { isMissingFile } from \"./tools\";\nimport { atomicWriteJson } from \"../storage\";\nimport { clearFixtureContents } from \"./cleanup\";\n\nconst RETENTION_MS = 24 * 60 * 60_000;\ninterface WorkspaceOwner {\n  format: \"sevro.workspace-owner.v1\";\n  owner: ProcessIdentity;\n  state: \"active\" | \"retained\";\n  timestamp: number;\n}\n\n/** One stable boundary protects both existing and subsequently allocated peers. */\nexport function workspaceStatePath(): string {\n  const base = process.platform === \"linux\" ? \"/var/tmp\" : tmpdir();\n  return join(realpathSync(base), \"sevro-workspaces-private\");\n}\n\nexport async function workspaceStateParent(): Promise<string> {\n  const root = workspaceStatePath();\n  await mkdir(root, { recursive: true, mode: 0o700 });\n  const info = await lstat(root);\n  if (\n    !info.isDirectory() ||\n    info.uid !== userInfo().uid ||\n    (info.mode & 0o077) !== 0\n  )\n    throw new Error(\"workspace namespace must be an owned private directory\");\n  return realpath(root);\n}\n\nexport async function allocateWorkspace(): Promise<string> {\n  const owner = processIdentity(process.pid);\n  if (!owner) throw new Error(\"cannot verify workspace owner identity\");\n  const parent = await workspaceStateParent();\n  await workspaceMetadataDirectory(parent);\n  const workspace = await realpath(await mkdtemp(join(parent, \"case-\")));\n  try {\n    await writeFile(\n      workspaceOwnerPath(workspace),\n      JSON.stringify({\n        format: \"sevro.workspace-owner.v1\",\n        owner,\n        state: \"active\",\n        timestamp: Date.now(),\n      }),\n      { mode: 0o600, flag: \"wx\" },\n    );\n    return workspace;\n  } catch (cause) {\n    await rm(workspace, { recursive: true, force: true });\n    throw cause;\n  }\n}\n\nasync function workspaceMetadataDirectory(parent: string): Promise<string> {\n  const root = join(parent, \".owners\");\n  await mkdir(root, { mode: 0o700, recursive: true });\n  const metadata = await lstat(root);\n  if (!ownedDirectory(metadata) || (metadata.mode & 0o077) !== 0)\n    throw new Error(\"workspace metadata must be an owned private directory\");\n  return root;\n}\n\nfunction workspaceOwnerPath(workspace: string): string {\n  return join(dirname(workspace), \".owners\", `${basename(workspace)}.json`);\n}\n\nfunction validWorkspaceLifecycle(value: Record<string, unknown>): boolean {\n  return (\n    (value.state === \"active\" || value.state === \"retained\") &&\n    typeof value.timestamp === \"number\" &&\n    Number.isFinite(value.timestamp)\n  );\n}\n\nfunction validWorkspaceOwner(value: unknown): value is WorkspaceOwner {\n  return (\n    isRecord(value) &&\n    value.format === \"sevro.workspace-owner.v1\" &&\n    validWorkspaceLifecycle(value) &&\n    validProcessIdentity(value.owner)\n  );\n}\n\nfunction privateOwnerFile(info: Stats): boolean {\n  return (\n    info.isFile() &&\n    info.uid === userInfo().uid &&\n    info.size <= 4096 &&\n    (info.mode & 0o077) === 0\n  );\n}\n\nasync function readWorkspaceOwner(workspace: string): Promise<unknown> {\n  const path = workspaceOwnerPath(workspace);\n  if (!privateOwnerFile(await lstat(path))) return null;\n  return JSON.parse(await readFile(path, \"utf8\")) as unknown;\n}\n\nasync function workspaceOwner(\n  workspace: string,\n): Promise<WorkspaceOwner | null> {\n  try {\n    const value = await readWorkspaceOwner(workspace);\n    return validWorkspaceOwner(value) ? value : null;\n  } catch {\n    // Unreadable or malformed ownership cannot authorize temporary-data deletion.\n    return null;\n  }\n}\n\nexport async function retainWorkspace(workspace: string): Promise<void> {\n  if (!workspaceBoundaryException(workspaceStatePath(), workspace).length)\n    return;\n  const record = await workspaceOwner(workspace);\n  if (!record || record.state === \"retained\") return;\n  await atomicWriteJson(workspaceOwnerPath(workspace), {\n    ...record,\n    state: \"retained\",\n    timestamp: Date.now(),\n  });\n}\n\nexport async function removeWorkspace(workspace: string): Promise<void> {\n  await rm(workspace, { recursive: true, force: true });\n  if (workspaceBoundaryException(workspaceStatePath(), workspace).length)\n    await rm(workspaceOwnerPath(workspace), { force: true });\n}\n\nasync function expireWorkspace(\n  workspace: string,\n  cutoff: number,\n): Promise<void> {\n  const record = await workspaceOwner(workspace);\n  if (!record || !expiredOwner(record, cutoff)) return;\n  const info = await lstat(workspace).catch((cause: unknown) => {\n    if (isMissingFile(cause)) return null;\n    throw cause;\n  });\n  if (info && !ownedDirectory(info)) return;\n  await clearExpiredWorkspace(workspace, info);\n}\n\nasync function clearExpiredWorkspace(\n  workspace: string,\n  info: Stats | null,\n): Promise<void> {\n  if (info) await clearFixtureContents(workspace);\n  await removeWorkspace(workspace);\n}\n\nfunction ownedDirectory(info: Stats): boolean {\n  return info.isDirectory() && info.uid === userInfo().uid;\n}\n\nfunction expiredOwner(record: WorkspaceOwner, cutoff: number): boolean {\n  return (\n    record.timestamp < cutoff &&\n    (record.state === \"retained\" || ownerStatus(record.owner) === \"dead\")\n  );\n}\n\n/** Reclaim only owned inactive temporary data; evidence directories are never scanned. */\nexport async function cleanupExpiredWorkspaces(): Promise<void> {\n  const parent = await workspaceStateParent();\n  const metadata = await workspaceMetadataDirectory(parent);\n  const cutoff = Date.now() - RETENTION_MS;\n  for (const entry of await readdir(metadata, { withFileTypes: true }))\n    if (entry.isFile() && /^case-[a-zA-Z0-9]+\\.json$/.test(entry.name)) {\n      const workspace = join(parent, entry.name.slice(0, -5));\n      await expireWorkspace(workspace, cutoff).catch((cause: unknown) => {\n        if (!isMissingFile(cause))\n          console.warn(\n            `temporary workspace cleanup did not complete: ${workspace}`,\n          );\n      });\n    }\n}\n\n/** Only a runner-owned direct child can be an exception to this deny boundary. */\nexport function workspaceBoundaryException(\n  root: string,\n  workspace?: string,\n): string[] {\n  return root === workspaceStatePath() &&\n    workspace !== undefined &&\n    dirname(workspace) === root\n    ? [workspace]\n    : [];\n}\n"]}