@catalyst-cloud/cli 0.16.3 → 0.16.6

package/vendor/self-host/darwin-thoughts-custody/watchdog-deadline.mjs

@@ -0,0 +1,39 @@
+function factory(ports) {
+  return function arm({ workerPid, deadlineMs, onDeadline, onUnreaped }) {
+    if (!Number.isSafeInteger(workerPid) || workerPid <= 0 || !Number.isSafeInteger(deadlineMs))
+      throw Error("watchdog_arguments");
+    let expired = false;
+    let fallback;
+    const expire = () => {
+      if (expired) return;
+      expired = true;
+      onDeadline();
+      try {
+        ports.kill(-workerPid, "SIGKILL");
+      } catch (error) {
+        if (error.code !== "ESRCH") {
+          onUnreaped();
+          return;
+        }
+      }
+      // SIGKILL being queued does not prove exit. Never wait on close forever.
+      fallback = ports.setTimeout(onUnreaped, 250);
+    };
+    const timer = ports.setTimeout(expire, Math.max(1, deadlineMs - ports.now()));
+    return {
+      expire,
+      cancel: () => {
+        ports.clearTimeout(timer);
+        if (fallback !== undefined) ports.clearTimeout(fallback);
+      },
+    };
+  };
+}
+export const armProducerDeadline = factory({
+  now: Date.now,
+  setTimeout,
+  clearTimeout,
+  kill: process.kill.bind(process),
+});
+/** Internal test seam, never selected by service arguments. */
+export const createProducerDeadlineTestHarness = factory;

package/vendor/self-host/darwin-thoughts-custody/watchdog.mjs

@@ -0,0 +1,85 @@
+import fs from "node:fs";
+import { spawn } from "node:child_process";
+import { isAbsolute, normalize, dirname } from "node:path";
+import { armProducerDeadline } from "./watchdog-deadline.mjs";
+
+// Separate process: blocked worker IO cannot prevent the absolute process-group kill.
+function fail() {
+  process.stderr.write("darwin_thoughts_producer:service_refused\n");
+  process.exit(1);
+}
+if (
+  process.platform !== "darwin" ||
+  !process.getuid ||
+  !process.geteuid ||
+  process.getuid() <= 0 ||
+  process.getuid() !== process.geteuid() ||
+  process.argv.length !== 4
+)
+  fail();
+const [artifact, config] = process.argv.slice(2);
+for (const path of [artifact, config]) {
+  if (
+    !isAbsolute(path) ||
+    normalize(path) !== path ||
+    path.endsWith("/") ||
+    path.includes("\0") ||
+    fs.realpathSync(path) !== path
+  )
+    fail();
+  const stat = fs.lstatSync(path);
+  const parent = fs.lstatSync(dirname(path));
+  if (
+    !stat.isFile() ||
+    stat.isSymbolicLink() ||
+    stat.uid !== process.getuid() ||
+    stat.nlink !== 1 ||
+    (stat.mode & 0o7777) !== 0o600 ||
+    !parent.isDirectory() ||
+    parent.isSymbolicLink() ||
+    parent.uid !== process.getuid() ||
+    (parent.mode & 0o7777) !== 0o700
+  )
+    fail();
+}
+const deadlineMs = Date.now() + 20_000;
+const worker = spawn(process.execPath, [artifact, config, String(deadlineMs)], {
+  cwd: "/",
+  env: { PATH: "/usr/bin:/bin:/usr/sbin:/sbin" },
+  detached: true,
+  stdio: ["ignore", "pipe", "pipe"],
+});
+let bytes = 0;
+let timedOut = false;
+function kill() {
+  guard.expire();
+}
+const guard = armProducerDeadline({
+  workerPid: worker.pid,
+  deadlineMs: deadlineMs + 2000,
+  onDeadline: () => {
+    timedOut = true;
+  },
+  onUnreaped: fail,
+});
+for (const stream of [worker.stdout, worker.stderr]) {
+  stream.on("data", (chunk) => {
+    bytes += chunk.length;
+    if (bytes > 4096) kill();
+  });
+}
+worker.on("error", () => {
+  guard.cancel();
+  fail();
+});
+worker.on("close", (code) => {
+  guard.cancel();
+  if (timedOut || code !== 0) fail();
+  process.exit(0);
+});
+process.on("SIGTERM", () => {
+  kill();
+});
+process.on("SIGINT", () => {
+  kill();
+});

package/vendor/self-host/provenance.json

@@ -1,8 +1,16 @@
 {
   "repository": "coalesce-labs/catalyst-cloud",
-  "commit": "3efb201e119fb9ce5a3f636c3212fcbed2d7efef",
+  "commit": "3d657787e8d4a0295068d0ea67ea3e7a1f4707a2",
   "sha256": {
-    "deploy/self-host/compose.yaml": "302f4cd6740572bf1a40386f8ec0d3a1b6919fe8c5e303f232c36969d8f36a53",
+    "deploy/self-host/compose.yaml": "0ffb7671c7ea49d8490d6e97093ada0afcb31da3b00092a8768150b090cca0bc",
+    "deploy/self-host/compose.darwin-thoughts.yaml": "6269d66d6f487175ab8560d0648e65c8a0eccb86f69a8dc24daf41d8ae1dcf02",
+    "deploy/self-host/darwin-thoughts-custody/producer.mjs": "0e0f1bbdac23813e8ee57b6eb4ae3dfd24c3f1c51ebe0c3d119a1448734ea05e",
+    "deploy/self-host/darwin-thoughts-custody/verifier.mjs": "2d8c9b5c35e38a25a45098b7606a216109557fb0466113098f503e9d6c8f6b4c",
+    "deploy/self-host/darwin-thoughts-custody/verifier.d.mts": "624428ced2eb18b045b761b49e20b7f52c0fc6c3132689571103ece7b4a1083f",
+    "deploy/self-host/darwin-thoughts-custody/watchdog.mjs": "6b5c7204aacd296c85a216d4f1b3adbe2084024fe37200ec1d24dfc2dec2e12d",
+    "deploy/self-host/darwin-thoughts-custody/watchdog-deadline.mjs": "a642e6d8968f56f635056d3b258e5c4ad186c638a273c26b4528e85b7d2a6346",
+    "deploy/self-host/darwin-thoughts-custody/service.plist.in": "66e9a2c175d2500b1f7130e7c04a5ed07f22bc7425661777f514fa3f2a816496",
+    "deploy/self-host/darwin-thoughts-custody/manifest.json": "ee575635e8135bc2d9e735bb69795d011371e234af1139e30dfee6d4785f4fa4",
     "deploy/self-host/linux-session-egress/session-egress.py": "a20cedfa1e883127ec461e4b7f9588d379fe1633b8244ecd703c81f589d3f142",
     "deploy/self-host/linux-session-egress/catalyst-session-egress.service": "703c150ab23ec87aea47cfc394f63e061b66c4b8c1454a88a9be879c161ce2a5",
     "deploy/self-host/linux-session-egress/catalyst-session-egress-attest.service": "94fa75ea0616f6a1172fc20ca637a5727c36456357e4a977d5bdd65f2fad2e8d",