@codyswann/lisa 4.28.5 → 4.29.0

package/dist/configs/vitest/scratch-namespace-authority.d.ts

@@ -0,0 +1,80 @@
+import { parseScratchRunRootName, scratchRunRootName, type ScratchPathIdentity } from "./scratch-owner.js";
+/** Public compatibility name for the exact managed namespace. */
+export declare const SCRATCH_NAMESPACE = "lisa-scratch";
+/** Prefix identifying a per-process run root inside the namespace. */
+export declare const RUN_ROOT_PREFIX = "run-";
+/** Legacy default retained for callers; age alone never authorizes deletion. */
+export declare const DEFAULT_RECLAIM_AGE_MS: number;
+/** Absolute cap shared by startup inspection and destructive sweeps. */
+export declare const MAX_SCRATCH_NAMESPACE_SCAN_ENTRIES = 120000;
+/** Maximum UTF-8 bytes accepted in one direct namespace basename. */
+export declare const MAX_SCRATCH_NAMESPACE_NAME_BYTES = 1024;
+/** Maximum direct entries one already-authorized suite audit may retain. */
+export declare const SCRATCH_DIRECT_ENTRY_LIMIT = 100000;
+/** Maximum UTF-8 bytes in one authorized direct-child basename. */
+export declare const SCRATCH_DIRECT_NAME_BYTES = 1024;
+/** Recognisable quarantine prefix, with a random suffix per removal. */
+export declare const SCRATCH_QUARANTINE_PREFIX = ".lisa-quarantine-";
+/** Namespace identity plus local ownership facts. */
+export interface ScratchNamespaceIdentity extends ScratchPathIdentity {
+    readonly uid: number | undefined;
+}
+/** Authority required before any destructive scratch operation. */
+export interface ScratchNamespaceAuthority {
+    readonly baseCanonicalPath: string;
+    readonly namespace: ScratchNamespaceIdentity;
+}
+/**
+ * Resolve the only public platform-temp authority.
+ * @returns Logical platform temp root
+ */
+export declare const scratchBaseDir: () => string;
+/**
+ * Resolve the shared namespace directory.
+ * @returns Managed namespace path
+ */
+export declare const scratchNamespaceDir: () => string;
+/** Build one unique direct run-root basename. */
+export declare const runRootName: typeof scratchRunRootName;
+/** Parse one recognized direct run-root basename. */
+export declare const parseRunRootName: typeof parseScratchRunRootName;
+/**
+ * Consume injected direct namespace basenames under the 120k hard bound.
+ * @param names - Direct namespace basenames
+ * @returns Deterministically sorted names
+ */
+export declare function collectBoundedScratchNamespaceNames(names: Iterable<string>): readonly string[];
+/**
+ * Stream one real namespace without following direct children.
+ * @param dir - Namespace path
+ * @returns Validated direct basenames
+ */
+export declare function readBoundedScratchNamespace(dir: string): readonly string[];
+/**
+ * Validate one direct-name stream under the distinct 100k suite bound.
+ * @param names - Direct basename stream
+ * @returns Validated names in source order
+ */
+export declare function collectBoundedScratchNames(names: Iterable<string>): readonly string[];
+/**
+ * Stream one already-authorized directory under the 100k suite bound.
+ * @param directory - Authorized suite directory
+ * @returns Validated direct basenames
+ */
+export declare function readBoundedScratchNames(directory: string): readonly string[];
+/**
+ * Establish and pin the canonical scratch namespace.
+ * @returns Filesystem authority for its exact direct `lisa-scratch` child
+ */
+export declare function createScratchNamespaceAuthority(): ScratchNamespaceAuthority;
+/**
+ * Revalidate that the namespace is still the directory authority pinned.
+ * @param authority - Captured namespace authority
+ */
+export declare function assertScratchNamespaceAuthority(authority: ScratchNamespaceAuthority): void;
+/**
+ * Resolve authority for an existing exact namespace without creating it.
+ * @returns Captured authority, or undefined when absent
+ */
+export declare function authorityForExistingScratchNamespace(): ScratchNamespaceAuthority | undefined;
+//# sourceMappingURL=scratch-namespace-authority.d.ts.map

package/dist/configs/vitest/scratch-namespace-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scratch-namespace-authority.d.ts","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-namespace-authority.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,uBAAuB,EACvB,kBAAkB,EAElB,KAAK,mBAAmB,EACzB,MAAM,oBAAoB,CAAC;AAK5B,iEAAiE;AACjE,eAAO,MAAM,iBAAiB,iBAA+B,CAAC;AAE9D,sEAAsE;AACtE,eAAO,MAAM,eAAe,SAA0B,CAAC;AAEvD,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,QAAqB,CAAC;AAEzD,wEAAwE;AACxE,eAAO,MAAM,kCAAkC,SAAU,CAAC;AAE1D,qEAAqE;AACrE,eAAO,MAAM,gCAAgC,OAAQ,CAAC;AAEtD,4EAA4E;AAC5E,eAAO,MAAM,0BAA0B,SAAU,CAAC;AAElD,mEAAmE;AACnE,eAAO,MAAM,yBAAyB,OAAQ,CAAC;AAE/C,wEAAwE;AACxE,eAAO,MAAM,yBAAyB,sBAAsB,CAAC;AAE7D,qDAAqD;AACrD,MAAM,WAAW,wBAAyB,SAAQ,mBAAmB;IACnE,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,mEAAmE;AACnE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;CAC9C;AAED;;;GAGG;AACH,eAAO,MAAM,cAAc,QAAO,MAAqB,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,mBAAmB,QAAO,MACS,CAAC;AAEjD,iDAAiD;AACjD,eAAO,MAAM,WAAW,2BAAqB,CAAC;AAE9C,qDAAqD;AACrD,eAAO,MAAM,gBAAgB,gCAA0B,CAAC;AAWxD;;;;GAIG;AACH,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtB,SAAS,MAAM,EAAE,CA0BnB;AAoBD;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAgB1E;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtB,SAAS,MAAM,EAAE,CAiBnB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAe5E;AAiFD;;;GAGG;AACH,wBAAgB,+BAA+B,IAAI,yBAAyB,CAiB3E;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,yBAAyB,GACnC,IAAI,CAqBN;AAED;;;GAGG;AACH,wBAAgB,oCAAoC,IAChD,yBAAyB,GACzB,SAAS,CAuBZ"}

package/dist/configs/vitest/scratch-namespace-authority.js

@@ -0,0 +1,291 @@
+/** Canonical platform-temp namespace capture and immutable identity authority. */
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { SCRATCH_RUN_ROOT_PREFIX, parseScratchRunRootName, scratchRunRootName, scratchPathIdentity, } from "./scratch-owner.js";
+/** Exact shared namespace basename used by the authority implementation. */
+const AUTHORIZED_SCRATCH_NAMESPACE = "lisa-scratch";
+/** Public compatibility name for the exact managed namespace. */
+export const SCRATCH_NAMESPACE = AUTHORIZED_SCRATCH_NAMESPACE;
+/** Prefix identifying a per-process run root inside the namespace. */
+export const RUN_ROOT_PREFIX = SCRATCH_RUN_ROOT_PREFIX;
+/** Legacy default retained for callers; age alone never authorizes deletion. */
+export const DEFAULT_RECLAIM_AGE_MS = 6 * 60 * 60 * 1000;
+/** Absolute cap shared by startup inspection and destructive sweeps. */
+export const MAX_SCRATCH_NAMESPACE_SCAN_ENTRIES = 120_000;
+/** Maximum UTF-8 bytes accepted in one direct namespace basename. */
+export const MAX_SCRATCH_NAMESPACE_NAME_BYTES = 1_024;
+/** Maximum direct entries one already-authorized suite audit may retain. */
+export const SCRATCH_DIRECT_ENTRY_LIMIT = 100_000;
+/** Maximum UTF-8 bytes in one authorized direct-child basename. */
+export const SCRATCH_DIRECT_NAME_BYTES = 1_024;
+/** Recognisable quarantine prefix, with a random suffix per removal. */
+export const SCRATCH_QUARANTINE_PREFIX = ".lisa-quarantine-";
+/**
+ * Resolve the only public platform-temp authority.
+ * @returns Logical platform temp root
+ */
+export const scratchBaseDir = () => os.tmpdir();
+/**
+ * Resolve the shared namespace directory.
+ * @returns Managed namespace path
+ */
+export const scratchNamespaceDir = () => path.join(scratchBaseDir(), SCRATCH_NAMESPACE);
+/** Build one unique direct run-root basename. */
+export const runRootName = scratchRunRootName;
+/** Parse one recognized direct run-root basename. */
+export const parseRunRootName = parseScratchRunRootName;
+/**
+ * Stable code-point ordering independent of host locale.
+ * @param left - Left basename
+ * @param right - Right basename
+ * @returns Sort comparator result
+ */
+const codePointCompare = (left, right) => left === right ? 0 : left < right ? -1 : 1;
+/**
+ * Consume injected direct namespace basenames under the 120k hard bound.
+ * @param names - Direct namespace basenames
+ * @returns Deterministically sorted names
+ */
+export function collectBoundedScratchNamespaceNames(names) {
+    const collected = [];
+    for (const name of names) {
+        if (name === "" ||
+            name === "." ||
+            name === ".." ||
+            name.includes("/") ||
+            name.includes("\\")) {
+            throw new Error(`Scratch namespace scan refused non-basename: ${name}`);
+        }
+        if (Buffer.byteLength(name, "utf8") > MAX_SCRATCH_NAMESPACE_NAME_BYTES) {
+            throw new Error(`Scratch namespace name exceeds ${String(MAX_SCRATCH_NAMESPACE_NAME_BYTES)} bytes`);
+        }
+        if (collected.length >= MAX_SCRATCH_NAMESPACE_SCAN_ENTRIES) {
+            throw new Error(`Scratch namespace scan exceeds ${String(MAX_SCRATCH_NAMESPACE_SCAN_ENTRIES)} entries`);
+        }
+        // eslint-disable-next-line functional/immutable-data -- bounded streaming avoids attacker-sized materialization
+        collected.push(name);
+    }
+    return [...collected].sort(codePointCompare);
+}
+/**
+ * Open one real namespace directory while preserving absence.
+ * @param dir - Namespace path
+ * @returns Open handle, or undefined when absent
+ */
+function openScratchNamespace(dir) {
+    try {
+        const stat = fs.lstatSync(dir);
+        if (stat.isSymbolicLink() || !stat.isDirectory()) {
+            throw new Error(`Scratch namespace is not a real directory: ${dir}`);
+        }
+        return fs.opendirSync(dir);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+}
+/**
+ * Stream one real namespace without following direct children.
+ * @param dir - Namespace path
+ * @returns Validated direct basenames
+ */
+export function readBoundedScratchNamespace(dir) {
+    const directory = openScratchNamespace(dir);
+    if (directory === undefined)
+        return [];
+    try {
+        return collectBoundedScratchNamespaceNames((function* entries() {
+            for (;;) {
+                const entry = directory.readSync();
+                if (entry === null)
+                    return;
+                yield entry.name;
+            }
+        })());
+    }
+    finally {
+        directory.closeSync();
+    }
+}
+/**
+ * Validate one direct-name stream under the distinct 100k suite bound.
+ * @param names - Direct basename stream
+ * @returns Validated names in source order
+ */
+export function collectBoundedScratchNames(names) {
+    const collected = [];
+    for (const name of names) {
+        if (Buffer.byteLength(name, "utf8") > SCRATCH_DIRECT_NAME_BYTES) {
+            throw new Error(`Scratch direct basename exceeds ${String(SCRATCH_DIRECT_NAME_BYTES)} bytes`);
+        }
+        // eslint-disable-next-line functional/immutable-data -- refuse before retaining the 100001st entry
+        collected.push(name);
+        if (collected.length > SCRATCH_DIRECT_ENTRY_LIMIT) {
+            throw new Error(`Scratch direct entry count exceeds ${String(SCRATCH_DIRECT_ENTRY_LIMIT)}`);
+        }
+    }
+    return collected;
+}
+/**
+ * Stream one already-authorized directory under the 100k suite bound.
+ * @param directory - Authorized suite directory
+ * @returns Validated direct basenames
+ */
+export function readBoundedScratchNames(directory) {
+    const handle = fs.opendirSync(directory);
+    try {
+        return collectBoundedScratchNames({
+            *[Symbol.iterator]() {
+                for (;;) {
+                    const entry = handle.readSync();
+                    if (entry === null)
+                        return;
+                    yield entry.name;
+                }
+            },
+        });
+    }
+    finally {
+        handle.closeSync();
+    }
+}
+/**
+ * Return the current uid where the platform supplies one.
+ * @returns Current uid or undefined on platforms without uid ownership
+ */
+const currentUid = () => process.getuid?.();
+/**
+ * Ensure the namespace path exists as a real directory.
+ * @param namespacePath - Exact namespace path
+ */
+function assertRealDirectory(namespacePath) {
+    const existing = fs.lstatSync(namespacePath);
+    if (existing.isSymbolicLink()) {
+        throw new Error(`Scratch namespace must not be a symlink: ${namespacePath}`);
+    }
+    if (!existing.isDirectory()) {
+        throw new Error(`Scratch namespace is not a directory: ${namespacePath}`);
+    }
+}
+/**
+ * Create the namespace or accept a concurrent creator only after revalidation.
+ * @param namespacePath - Exact namespace path
+ */
+function ensureNamespaceDirectory(namespacePath) {
+    try {
+        assertRealDirectory(namespacePath);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+        try {
+            fs.mkdirSync(namespacePath, { mode: 0o700 });
+        }
+        catch (mkdirError) {
+            if (mkdirError.code !== "EEXIST") {
+                throw mkdirError;
+            }
+            assertRealDirectory(namespacePath);
+        }
+    }
+}
+/**
+ * Assert local namespace ownership without silently broadening authority.
+ * @param namespacePath - Exact namespace path
+ */
+function enforceNamespaceOwnership(namespacePath) {
+    const stat = fs.lstatSync(namespacePath);
+    const uid = currentUid();
+    if (uid !== undefined && stat.uid !== uid) {
+        throw new Error(`Scratch namespace uid ${String(stat.uid)} does not match current uid ${String(uid)}`);
+    }
+    if ((stat.mode & 0o777) !== 0o700) {
+        throw new Error(`Scratch namespace mode must be 0700: ${namespacePath}`);
+    }
+}
+/**
+ * Capture the namespace identity after its creation and mode repair.
+ * @param namespacePath - Exact namespace path
+ * @param baseCanonicalPath - Pinned physical temp base
+ * @returns Captured authority
+ */
+function captureNamespaceAuthority(namespacePath, baseCanonicalPath) {
+    const uid = currentUid();
+    const identity = scratchPathIdentity(namespacePath);
+    if (path.dirname(identity.canonicalPath) !== baseCanonicalPath) {
+        throw new Error("Scratch namespace escaped its canonical temp base");
+    }
+    return {
+        baseCanonicalPath,
+        namespace: { ...identity, uid },
+    };
+}
+/**
+ * Establish and pin the canonical scratch namespace.
+ * @returns Filesystem authority for its exact direct `lisa-scratch` child
+ */
+export function createScratchNamespaceAuthority() {
+    const baseDir = os.tmpdir();
+    const baseStat = fs.lstatSync(baseDir);
+    if (baseStat.isSymbolicLink()) {
+        throw new Error(`Scratch temp base must not be a symlink: ${baseDir}`);
+    }
+    if (!baseStat.isDirectory()) {
+        throw new Error(`Scratch temp base is not a directory: ${baseDir}`);
+    }
+    const baseCanonicalPath = fs.realpathSync(baseDir);
+    const namespacePath = path.join(baseCanonicalPath, AUTHORIZED_SCRATCH_NAMESPACE);
+    ensureNamespaceDirectory(namespacePath);
+    enforceNamespaceOwnership(namespacePath);
+    return captureNamespaceAuthority(namespacePath, baseCanonicalPath);
+}
+/**
+ * Revalidate that the namespace is still the directory authority pinned.
+ * @param authority - Captured namespace authority
+ */
+export function assertScratchNamespaceAuthority(authority) {
+    const current = scratchPathIdentity(authority.namespace.canonicalPath);
+    if (current.dev !== authority.namespace.dev ||
+        current.ino !== authority.namespace.ino ||
+        current.canonicalPath !== authority.namespace.canonicalPath) {
+        throw new Error("Scratch namespace identity changed after authority capture");
+    }
+    const stat = fs.lstatSync(authority.namespace.canonicalPath);
+    if ((stat.mode & 0o777) !== 0o700) {
+        throw new Error("Scratch namespace mode changed after authority capture");
+    }
+    if (authority.namespace.uid !== undefined &&
+        stat.uid !== authority.namespace.uid) {
+        throw new Error("Scratch namespace uid changed after authority capture");
+    }
+}
+/**
+ * Resolve authority for an existing exact namespace without creating it.
+ * @returns Captured authority, or undefined when absent
+ */
+export function authorityForExistingScratchNamespace() {
+    const dir = path.join(os.tmpdir(), AUTHORIZED_SCRATCH_NAMESPACE);
+    try {
+        const stat = fs.lstatSync(dir);
+        if (stat.isSymbolicLink() || !stat.isDirectory()) {
+            throw new Error(`Scratch namespace must be a real directory: ${dir}`);
+        }
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+    if (path.basename(dir) !== AUTHORIZED_SCRATCH_NAMESPACE) {
+        throw new Error(`Scratch namespace must be the exact ${AUTHORIZED_SCRATCH_NAMESPACE} child`);
+    }
+    const authority = createScratchNamespaceAuthority();
+    if (fs.realpathSync(dir) !== authority.namespace.canonicalPath) {
+        throw new Error("Scratch namespace path does not match canonical authority");
+    }
+    return authority;
+}
+//# sourceMappingURL=scratch-namespace-authority.js.map

package/dist/configs/vitest/scratch-namespace-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scratch-namespace-authority.js","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-namespace-authority.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,GAEpB,MAAM,oBAAoB,CAAC;AAE5B,4EAA4E;AAC5E,MAAM,4BAA4B,GAAG,cAAc,CAAC;AAEpD,iEAAiE;AACjE,MAAM,CAAC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAE9D,sEAAsE;AACtE,MAAM,CAAC,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAEvD,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzD,wEAAwE;AACxE,MAAM,CAAC,MAAM,kCAAkC,GAAG,OAAO,CAAC;AAE1D,qEAAqE;AACrE,MAAM,CAAC,MAAM,gCAAgC,GAAG,KAAK,CAAC;AAEtD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,0BAA0B,GAAG,OAAO,CAAC;AAElD,mEAAmE;AACnE,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAE/C,wEAAwE;AACxE,MAAM,CAAC,MAAM,yBAAyB,GAAG,mBAAmB,CAAC;AAa7D;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,GAAW,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;AAExD;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAW,EAAE,CAC9C,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAEjD,iDAAiD;AACjD,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAE9C,qDAAqD;AACrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAExD;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CAC/D,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE7C;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CACjD,KAAuB;IAEvB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IACE,IAAI,KAAK,EAAE;YACX,IAAI,KAAK,GAAG;YACZ,IAAI,KAAK,IAAI;YACb,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EACnB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,gCAAgC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,CAAC,gCAAgC,CAAC,QAAQ,CACnF,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,IAAI,kCAAkC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,CAAC,kCAAkC,CAAC,UAAU,CACvF,CAAC;QACJ,CAAC;QACD,gHAAgH;QAChH,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,GAAW;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,8CAA8C,GAAG,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,OAAO,mCAAmC,CACxC,CAAC,QAAQ,CAAC,CAAC,OAAO;YAChB,SAAS,CAAC;gBACR,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACnC,IAAI,KAAK,KAAK,IAAI;oBAAE,OAAO;gBAC3B,MAAM,KAAK,CAAC,IAAI,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,EAAE,CACL,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,SAAS,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAAuB;IAEvB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,yBAAyB,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CACb,mCAAmC,MAAM,CAAC,yBAAyB,CAAC,QAAQ,CAC7E,CAAC;QACJ,CAAC;QACD,mGAAmG;QACnG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,SAAS,CAAC,MAAM,GAAG,0BAA0B,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,sCAAsC,MAAM,CAAC,0BAA0B,CAAC,EAAE,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB;IACvD,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,0BAA0B,CAAC;YAChC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAChB,SAAS,CAAC;oBACR,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;oBAChC,IAAI,KAAK,KAAK,IAAI;wBAAE,OAAO;oBAC3B,MAAM,KAAK,CAAC,IAAI,CAAC;gBACnB,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,SAAS,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AACD;;;GAGG;AACH,MAAM,UAAU,GAAG,GAAuB,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AAEhE;;;GAGG;AACH,SAAS,mBAAmB,CAAC,aAAqB;IAChD,MAAM,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,4CAA4C,aAAa,EAAE,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,yCAAyC,aAAa,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAAC,aAAqB;IACrD,IAAI,CAAC;QACH,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,IAAK,UAAoC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5D,MAAM,UAAU,CAAC;YACnB,CAAC;YACD,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,yBAAyB,CAAC,aAAqB;IACtD,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,yBAAyB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,GAAG,CAAC,EAAE,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,wCAAwC,aAAa,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,yBAAyB,CAChC,aAAqB,EACrB,iBAAyB;IAEzB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,iBAAiB,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO;QACL,iBAAiB;QACjB,SAAS,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE;KAChC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B;IAC7C,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,4CAA4C,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,iBAAiB,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAC7B,iBAAiB,EACjB,4BAA4B,CAC7B,CAAC;IACF,wBAAwB,CAAC,aAAa,CAAC,CAAC;IACxC,yBAAyB,CAAC,aAAa,CAAC,CAAC;IACzC,OAAO,yBAAyB,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC7C,SAAoC;IAEpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACvE,IACE,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,SAAS,CAAC,GAAG;QACvC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,SAAS,CAAC,GAAG;QACvC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,SAAS,CAAC,aAAa,EAC3D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IACE,SAAS,CAAC,SAAS,CAAC,GAAG,KAAK,SAAS;QACrC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,SAAS,CAAC,GAAG,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oCAAoC;IAGlD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,+CAA+C,GAAG,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,4BAA4B,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,uCAAuC,4BAA4B,QAAQ,CAC5E,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,+BAA+B,EAAE,CAAC;IACpD,IAAI,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/configs/vitest/scratch-owner.d.ts

@@ -0,0 +1,131 @@
+/** Owner-marker filename stored directly inside every run root. */
+export declare const SCRATCH_OWNER_FILE = ".lisa-scratch-owner.json";
+/** Prefix identifying a per-process run root inside the namespace. */
+export declare const SCRATCH_RUN_ROOT_PREFIX = "run-";
+/** Filesystem identity pinned into an owner record. */
+export interface ScratchPathIdentity {
+    readonly canonicalPath: string;
+    readonly dev: number;
+    readonly ino: number;
+}
+/** Version-one durable owner marker. */
+export interface ScratchOwnerRecordV1 {
+    readonly schema: 1;
+    readonly pid: number;
+    readonly processBirthFingerprint: string;
+    readonly createdAt: string;
+    readonly token: string;
+    readonly suiteLabel: string;
+    readonly registeredPrefixes: readonly string[];
+    readonly namespace: ScratchPathIdentity;
+    readonly root: ScratchPathIdentity;
+}
+/** Minimal namespace authority consumed while constructing a record. */
+interface OwnerAuthority {
+    readonly namespace: ScratchPathIdentity;
+}
+/** Inputs for a new owner record. */
+export interface CreateScratchOwnerRecordOptions {
+    readonly authority: OwnerAuthority;
+    readonly root: string;
+    readonly pid?: number;
+    readonly processBirthFingerprint?: string;
+    readonly suiteLabel: string;
+    readonly registeredPrefixes: readonly string[];
+    /** Precommitted 128-bit ownership token, when a supervisor armed it first. */
+    readonly token?: string;
+    readonly now?: Date;
+}
+/** Probes used to classify a persisted owner. */
+export interface ScratchOwnerProbes {
+    readonly isProcessAlive: (pid: number) => boolean;
+    readonly processBirthFingerprint: (pid: number) => string | undefined;
+}
+/** Safe reclaim verdict for an owner record. */
+export type ScratchOwnerDisposition = "reclaim" | "preserve";
+/** Injectable seams for one bulk process-birth snapshot. */
+export interface ProcessBirthFingerprintSnapshotOptions {
+    /** Platform contract to exercise; defaults to the current platform. */
+    readonly platform?: NodeJS.Platform;
+    /** Bounded macOS batch runner, injectable for deterministic call-count tests. */
+    readonly runDarwinBatch?: (pids: readonly number[]) => string | undefined;
+}
+/**
+ * Capture process birth once for a bounded pid set.
+ *
+ * Darwin has no `/proc`, so namespace audits must not launch one `ps` process
+ * per live scratch root. This snapshot deduplicates pids and reads them in
+ * bounded 256-pid batches; callers reuse the returned map throughout one
+ * sweep/inspection transaction.
+ * @param pids - Process ids needed by one audit transaction
+ * @param options - Platform and deterministic batch seam
+ * @returns A complete lookup whose missing observations remain undefined
+ */
+export declare function processBirthFingerprintSnapshot(pids: readonly number[], options?: ProcessBirthFingerprintSnapshotOptions): ReadonlyMap<number, string | undefined>;
+/**
+ * Read the OS-authoritative birth fingerprint for a process.
+ * @param pid - Process id to inspect
+ * @returns Fingerprint, or undefined on an unsupported/ambiguous platform
+ */
+export declare function processBirthFingerprint(pid: number): string | undefined;
+/**
+ * Fingerprint the current process for a newly-created marker.
+ *
+ * Unsupported platforms still need an opaque value to make the marker
+ * complete. Reclaim never treats this fallback as authoritative: a live pid on
+ * such a platform yields an ambiguous observation and is preserved.
+ * @returns Current process birth fingerprint
+ */
+export declare function currentProcessBirthFingerprint(): string;
+/** Ownership encoded in a legacy or current run-root basename. */
+export interface RunRootOwner {
+    readonly pid: number;
+    readonly startedAt: number;
+}
+/**
+ * Build a run-root basename.
+ * @param pid - Owning process id
+ * @param startedAt - Creation epoch milliseconds
+ * @param suffix - Opaque random suffix
+ * @returns Direct namespace-child basename
+ */
+export declare function scratchRunRootName(pid: number, startedAt: number, suffix: string): string;
+/**
+ * Parse the owner fields encoded in a run-root basename.
+ * @param name - Direct namespace-child basename
+ * @returns Parsed owner, or undefined for an unrelated name
+ */
+export declare function parseScratchRunRootName(name: string): RunRootOwner | undefined;
+/**
+ * Decide whether a valid owner may be reclaimed.
+ * @param record - Persisted owner marker
+ * @param probes - Kernel probes, injectable for deterministic tests
+ * @returns Fail-closed reclaim disposition
+ */
+export declare function classifyScratchOwner(record: ScratchOwnerRecordV1, probes: ScratchOwnerProbes): ScratchOwnerDisposition;
+/**
+ * Capture an immutable filesystem identity without following a final symlink.
+ * @param candidate - Existing regular file or directory
+ * @returns Canonical path plus device/inode identity
+ */
+export declare function scratchPathIdentity(candidate: string): ScratchPathIdentity;
+/**
+ * Construct a version-one owner marker from live filesystem state.
+ * @param options - Owner and path facts
+ * @returns Immutable owner record
+ */
+export declare function createScratchOwnerRecord(options: CreateScratchOwnerRecordOptions): ScratchOwnerRecordV1;
+/**
+ * Write an owner marker without permitting a pre-existing file or symlink.
+ * @param root - Owned run root
+ * @param record - Marker to persist
+ */
+export declare function writeScratchOwnerRecord(root: string, record: ScratchOwnerRecordV1): void;
+/**
+ * Read and validate an owner marker without following a marker symlink.
+ * @param root - Run root containing the marker
+ * @returns Validated owner marker
+ */
+export declare function readScratchOwnerRecord(root: string): ScratchOwnerRecordV1;
+export {};
+//# sourceMappingURL=scratch-owner.d.ts.map

package/dist/configs/vitest/scratch-owner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scratch-owner.d.ts","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-owner.ts"],"names":[],"mappings":"AAcA,mEAAmE;AACnE,eAAO,MAAM,kBAAkB,6BAA6B,CAAC;AAE7D,sEAAsE;AACtE,eAAO,MAAM,uBAAuB,SAAS,CAAC;AAE9C,uDAAuD;AACvD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,wCAAwC;AACxC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;CACpC;AAED,wEAAwE;AACxE,UAAU,cAAc;IACtB,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED,qCAAqC;AACrC,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,8EAA8E;IAC9E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;CACrB;AAED,iDAAiD;AACjD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAClD,QAAQ,CAAC,uBAAuB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;CACvE;AAED,gDAAgD;AAChD,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,UAAU,CAAC;AAQ7D,4DAA4D;AAC5D,MAAM,WAAW,sCAAsC;IACrD,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,iFAAiF;IACjF,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,GAAG,SAAS,CAAC;CAC3E;AA8ED;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,GAAE,sCAA2C,GACnD,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CA6BzC;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGvE;AAOD;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,IAAI,MAAM,CAEvD;AAED,kEAAkE;AAClE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,MAAM,CAER;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,GACX,YAAY,GAAG,SAAS,CAU1B;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,oBAAoB,EAC5B,MAAM,EAAE,kBAAkB,GACzB,uBAAuB,CAQzB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,mBAAmB,CAU1E;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,+BAA+B,GACvC,oBAAoB,CAgBtB;AA2DD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,oBAAoB,GAC3B,IAAI,CAaN;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAczE"}