@codyswann/lisa 4.70.3 → 4.71.0

package/all/copy-overwrite/scripts/lisa-work-item.mjs

@@ -1016,7 +1016,7 @@ export function deployBranchEnvironments(config) {
   return new Map([[branch, PRODUCTION]]);
 }
 
-function trackerContract(config = readConfig()) {
+export function trackerContract(config = readConfig()) {
   const provider = requireString(config.tracker, "tracker").toLowerCase();
   const identityRepo = currentRepoIdentity(config);
   if (provider === "github") {
@@ -1483,6 +1483,38 @@ export function soleWorkItem(text, contract, subject) {
   return refs[0];
 }
 
+/**
+ * Resolve a required binding through the authoritative tracker contract.
+ * Consumers supplying trusted committed configuration avoid reparsing trailers
+ * or treating raw `current` output as a checked branch/queue identity.
+ * This does not change ordinary offline/live validation semantics.
+ * @param {string} message Complete final commit message.
+ * @param {object} [options] Trusted configuration and strict live requirement.
+ * @returns {object} Canonical identity and optional actual provider evidence.
+ */
+export function resolveWorkItemContext(message, options = {}) {
+  const contract = trackerContract(options.config ?? readConfig());
+  const state = readState(false);
+  const ref = soleWorkItem(message, contract, COMMIT_SUBJECT);
+  assertStateBranch(state);
+  assertStateMatches(ref, contract);
+  if (options.requireLive && contract.provider !== "github") {
+    throw new TrackingError("Automation provenance requires GitHub tracking");
+  }
+  const issue = options.requireLive
+    ? githubIssue(ref, contract, options.execute ?? run)
+    : undefined;
+  return {
+    ref,
+    provider: contract.provider,
+    repository: contract.repository,
+    identityRepo: contract.identityRepo,
+    branch: state.branch,
+    lifecycle: contract.lifecycle,
+    issue,
+  };
+}
+
 /**
  * The one work item a COMMIT message names.
  * @param {string} message Commit message.
@@ -1843,28 +1875,34 @@ function typeFromLabels(labels) {
  * @param {string|number} number GitHub issue number.
  * @returns {string[]} State of every sub-issue.
  */
-function githubHierarchy(ref, contract, number) {
+/** Literal typed GraphQL fields are shared by the canonical reader and closed native transport. */
+export function githubHierarchyArgs(contract, number, after) {
   const [owner, repo] = contract.repository.split("/");
   const query =
     "query($owner:String!,$repo:String!,$number:Int!,$after:String){repository(owner:$owner,name:$repo){issue(number:$number){subIssues(first:100,after:$after){nodes{state}pageInfo{hasNextPage endCursor}}}}}";
+  const args = [
+    "api",
+    "graphql",
+    "-f",
+    `query=${query}`,
+    "-F",
+    `owner=${owner}`,
+    "-F",
+    `repo=${repo}`,
+    "-F",
+    `number=${number}`,
+  ];
+  if (after) args.push("-F", `after=${after}`);
+  return args;
+}
+
+function githubHierarchy(ref, contract, number, execute = run) {
   const states = [];
   const cursor = { after: null };
 
   do {
-    const args = [
-      "api",
-      "graphql",
-      "-f",
-      `query=${query}`,
-      "-F",
-      `owner=${owner}`,
-      "-F",
-      `repo=${repo}`,
-      "-F",
-      `number=${number}`,
-    ];
-    if (cursor.after) args.push("-F", `after=${cursor.after}`);
-    const result = run("gh", args, { allowFailure: true });
+    const args = githubHierarchyArgs(contract, number, cursor.after);
+    const result = execute("gh", args, { allowFailure: true });
     if (result.status !== 0) throw githubFailure(result, ref);
 
     const response = safeJson(result.stdout, `GitHub issue ${ref} hierarchy`);
@@ -1952,20 +1990,25 @@ export function resetGhVersionCheck() {
   ghVersionChecked = false;
 }
 
-function githubIssue(ref, contract) {
-  assertGhVersion();
+/** The body is required by recovery; all ordinary canonical validation fields remain present. */
+export function githubIssueViewArgs(repository, number) {
+  return [
+    "issue",
+    "view",
+    number,
+    "--repo",
+    repository,
+    "--json",
+    "number,url,state,body,labels,comments,closedByPullRequestsReferences",
+  ];
+}
+
+function githubIssue(ref, contract, execute = run) {
+  assertGhVersion(execute);
   const number = ref.slice(ref.lastIndexOf("#") + 1);
-  const result = run(
+  const result = execute(
     "gh",
-    [
-      "issue",
-      "view",
-      number,
-      "--repo",
-      contract.repository,
-      "--json",
-      "number,url,state,labels,comments,closedByPullRequestsReferences",
-    ],
+    githubIssueViewArgs(contract.repository, number),
     {
       allowFailure: true,
     }
@@ -1985,7 +2028,7 @@ function githubIssue(ref, contract) {
   assertLeaf(
     ref,
     typeFromLabels(issue.labels),
-    githubHierarchy(ref, contract, number)
+    githubHierarchy(ref, contract, number, execute)
   );
   return issue;
 }
@@ -2410,7 +2453,7 @@ export function textContainsBacklink(value, prUrl) {
  * @param {string} prUrl Pull request URL.
  * @returns {string} The comment body.
  */
-function backlinkBody(prUrl) {
+export function backlinkBody(prUrl) {
   return `${MARKER} ${prUrl}`;
 }
 
@@ -2502,7 +2545,7 @@ function managedBacklinkTarget(body) {
  * @returns {{mine: unknown, others: number}} This PR's comment, and how many
  *   managed comments belong to OTHER pull requests.
  */
-function partitionBacklinks(comments, prUrl, bodyOf) {
+export function partitionBacklinks(comments, prUrl, bodyOf) {
   const mine = [];
   let others = 0;
   for (const comment of comments) {
@@ -2538,6 +2581,33 @@ export function backlinkReport(outcome, ref, prUrl) {
   );
 }
 
+/** Complete canonical pagination is shared by the writer and its scoped controller. */
+export function githubBacklinkListArgs(repository, number) {
+  if (
+    !/^[\w.-]+\/[\w.-]+$/.test(repository) ||
+    !/^[1-9]\d*$/.test(String(number))
+  )
+    throw new Error("invalid canonical GitHub backlink repository/issue");
+  return [
+    "api",
+    "--paginate",
+    "--slurp",
+    `repos/${repository}/issues/${number}/comments?per_page=100`,
+  ];
+}
+
+/** Complete slurped pages remain bounded and are shared by the canonical writer and controller grant. */
+export function githubBacklinkComments(pages) {
+  if (
+    !Array.isArray(pages) ||
+    pages.length < 1 ||
+    pages.length > 100 ||
+    pages.some(page => !Array.isArray(page) || page.length > 100)
+  )
+    throw new Error("invalid or over-bound GitHub backlink pages");
+  return pages.flat();
+}
+
 /**
  * Establish the backlink on a GitHub issue.
  * @param {string} ref Canonical `owner/repo#number` reference.
@@ -2547,17 +2617,13 @@ export function backlinkReport(outcome, ref, prUrl) {
  */
 function githubBacklink(ref, prUrl) {
   const [repository, number] = ref.split("#");
-  const listing = run(
-    "gh",
-    [
-      "api",
-      "--paginate",
-      `repos/${repository}/issues/${number}/comments?per_page=100`,
-    ],
-    { allowFailure: true }
-  );
+  const listing = run("gh", githubBacklinkListArgs(repository, number), {
+    allowFailure: true,
+  });
   if (listing.status !== 0) throw githubFailure(listing, ref);
-  const comments = safeJson(listing.stdout, `GitHub comments on ${ref}`);
+  const comments = githubBacklinkComments(
+    safeJson(listing.stdout, `GitHub comments on ${ref}`)
+  );
   // This listing is the read-before-write, and it is fetched here rather than
   // passed in for exactly that reason: the version you last wrote is not the
   // version that is live on a surface other agents also comment on.

package/all/copy-overwrite/scripts/npm-updater-gate-runtime.json

@@ -0,0 +1 @@
+{"platforms":[],"recipeSha256":"260d194175737ed1cfdf6d208696bb58d035a45b2fd27c83a54e75be65ab5cb0","seccomp":{"profile":{"archMap":[{"architecture":"SCMP_ARCH_X86_64","subArchitectures":["SCMP_ARCH_X86","SCMP_ARCH_X32"]},{"architecture":"SCMP_ARCH_AARCH64","subArchitectures":["SCMP_ARCH_ARM"]},{"architecture":"SCMP_ARCH_MIPS64","subArchitectures":["SCMP_ARCH_MIPS","SCMP_ARCH_MIPS64N32"]},{"architecture":"SCMP_ARCH_MIPS64N32","subArchitectures":["SCMP_ARCH_MIPS","SCMP_ARCH_MIPS64"]},{"architecture":"SCMP_ARCH_MIPSEL64","subArchitectures":["SCMP_ARCH_MIPSEL","SCMP_ARCH_MIPSEL64N32"]},{"architecture":"SCMP_ARCH_MIPSEL64N32","subArchitectures":["SCMP_ARCH_MIPSEL","SCMP_ARCH_MIPSEL64"]},{"architecture":"SCMP_ARCH_S390X","subArchitectures":["SCMP_ARCH_S390"]},{"architecture":"SCMP_ARCH_RISCV64","subArchitectures":null},{"architecture":"SCMP_ARCH_LOONGARCH64","subArchitectures":null}],"defaultAction":"SCMP_ACT_ERRNO","defaultErrnoRet":1,"syscalls":[{"action":"SCMP_ACT_ALLOW","names":["accept","accept4","access","adjtimex","alarm","bind","brk","cachestat","capget","capset","chdir","chmod","chown","chown32","clock_adjtime","clock_adjtime64","clock_getres","clock_getres_time64","clock_gettime","clock_gettime64","clock_nanosleep","clock_nanosleep_time64","close","close_range","connect","copy_file_range","creat","dup","dup2","dup3","epoll_create","epoll_create1","epoll_ctl","epoll_ctl_old","epoll_pwait","epoll_pwait2","epoll_wait","epoll_wait_old","eventfd","eventfd2","execve","execveat","exit","exit_group","faccessat","faccessat2","fadvise64","fadvise64_64","fallocate","fanotify_mark","fchdir","fchmod","fchmodat","fchmodat2","fchown","fchown32","fchownat","fcntl","fcntl64","fdatasync","fgetxattr","flistxattr","flock","fork","fremovexattr","fsetxattr","fstat","fstat64","fstatat64","fstatfs","fstatfs64","fsync","ftruncate","ftruncate64","futex","futex_requeue","futex_time64","futex_wait","futex_waitv","futex_wake","futimesat","getcpu","getcwd","getdents","getdents64","getegid","getegid32","geteuid","geteuid32","getgid","getgid32","getgroups","getgroups32","getitimer","getpeername","getpgid","getpgrp","getpid","getppid","getpriority","getrandom","getresgid","getresgid32","getresuid","getresuid32","getrlimit","get_robust_list","getrusage","getsid","getsockname","getsockopt","get_thread_area","gettid","gettimeofday","getuid","getuid32","getxattr","getxattrat","inotify_add_watch","inotify_init","inotify_init1","inotify_rm_watch","io_cancel","ioctl","io_destroy","io_getevents","io_pgetevents","io_pgetevents_time64","ioprio_get","ioprio_set","io_setup","io_submit","ipc","kill","landlock_add_rule","landlock_create_ruleset","landlock_restrict_self","lchown","lchown32","lgetxattr","link","linkat","listen","listmount","listxattr","listxattrat","llistxattr","_llseek","lremovexattr","lseek","lsetxattr","lstat","lstat64","madvise","map_shadow_stack","membarrier","memfd_create","memfd_secret","mincore","mkdir","mkdirat","mknod","mknodat","mlock","mlock2","mlockall","mmap","mmap2","mprotect","mq_getsetattr","mq_notify","mq_open","mq_timedreceive","mq_timedreceive_time64","mq_timedsend","mq_timedsend_time64","mq_unlink","mremap","mseal","msgctl","msgget","msgrcv","msgsnd","msync","munlock","munlockall","munmap","name_to_handle_at","nanosleep","newfstatat","_newselect","open","openat","openat2","pause","pidfd_open","pidfd_send_signal","pipe","pipe2","pkey_alloc","pkey_free","pkey_mprotect","poll","ppoll","ppoll_time64","prctl","pread64","preadv","preadv2","prlimit64","process_mrelease","pselect6","pselect6_time64","pwrite64","pwritev","pwritev2","read","readahead","readlink","readlinkat","readv","recv","recvfrom","recvmmsg","recvmmsg_time64","recvmsg","remap_file_pages","removexattr","removexattrat","rename","renameat","renameat2","restart_syscall","riscv_hwprobe","rmdir","rseq","rt_sigaction","rt_sigpending","rt_sigprocmask","rt_sigqueueinfo","rt_sigreturn","rt_sigsuspend","rt_sigtimedwait","rt_sigtimedwait_time64","rt_tgsigqueueinfo","sched_getaffinity","sched_getattr","sched_getparam","sched_get_priority_max","sched_get_priority_min","sched_getscheduler","sched_rr_get_interval","sched_rr_get_interval_time64","sched_setaffinity","sched_setattr","sched_setparam","sched_setscheduler","sched_yield","seccomp","select","semctl","semget","semop","semtimedop","semtimedop_time64","send","sendfile","sendfile64","sendmmsg","sendmsg","sendto","setfsgid","setfsgid32","setfsuid","setfsuid32","setgid","setgid32","setgroups","setgroups32","setitimer","setpgid","setpriority","setregid","setregid32","setresgid","setresgid32","setresuid","setresuid32","setreuid","setreuid32","setrlimit","set_robust_list","setsid","setsockopt","set_thread_area","set_tid_address","setuid","setuid32","setxattr","setxattrat","shmat","shmctl","shmdt","shmget","shutdown","sigaltstack","signalfd","signalfd4","sigprocmask","sigreturn","socketcall","socketpair","splice","stat","stat64","statfs","statfs64","statmount","statx","symlink","symlinkat","sync","sync_file_range","syncfs","sysinfo","tee","tgkill","time","timer_create","timer_delete","timer_getoverrun","timer_gettime","timer_gettime64","timer_settime","timer_settime64","timerfd_create","timerfd_gettime","timerfd_gettime64","timerfd_settime","timerfd_settime64","times","tkill","truncate","truncate64","ugetrlimit","umask","uname","unlink","unlinkat","uretprobe","utime","utimensat","utimensat_time64","utimes","vfork","vmsplice","wait4","waitid","waitpid","write","writev"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_LT","value":3}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":7}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":8}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":9}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":10}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":13}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":14}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":15}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":16}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":17}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":18}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":21}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":22}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":24}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":26}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":27}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":28}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":29}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":30}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":31}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":32}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":33}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":35}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":36}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":39}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":41}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":42}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":43}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":44}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":45}],"names":["socket"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":0}],"names":["personality"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":8}],"names":["personality"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":131072}],"names":["personality"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":131080}],"names":["personality"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_EQ","value":4294967295}],"names":["personality"]},{"action":"SCMP_ACT_ALLOW","includes":{"arches":["ppc64le"]},"names":["sync_file_range2","swapcontext"]},{"action":"SCMP_ACT_ALLOW","includes":{"arches":["arm","arm64"]},"names":["arm_fadvise64_64","arm_sync_file_range","sync_file_range2","breakpoint","cacheflush","set_tls"]},{"action":"SCMP_ACT_ALLOW","includes":{"arches":["amd64","x32"]},"names":["arch_prctl"]},{"action":"SCMP_ACT_ALLOW","includes":{"arches":["amd64","x32","x86"]},"names":["modify_ldt"]},{"action":"SCMP_ACT_ALLOW","includes":{"arches":["s390","s390x"]},"names":["s390_pci_mmio_read","s390_pci_mmio_write","s390_runtime_instr"]},{"action":"SCMP_ACT_ALLOW","includes":{"arches":["riscv64"]},"names":["riscv_flush_icache"]},{"action":"SCMP_ACT_ALLOW","includes":{"caps":["CAP_SYS_ADMIN"]},"names":["clone","clone3","fanotify_init","fsconfig","fsmount","fsopen","fspick","lookup_dcookie","lsm_get_self_attr","lsm_list_modules","lsm_set_self_attr","mount_setattr","move_mount","open_tree","perf_event_open","quotactl","quotactl_fd","setdomainname","sethostname","syslog","umount"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":0,"op":"SCMP_CMP_MASKED_EQ","value":2114060288}],"excludes":{"arches":["s390","s390x"],"caps":["CAP_SYS_ADMIN"]},"names":["clone"]},{"action":"SCMP_ACT_ALLOW","args":[{"index":1,"op":"SCMP_CMP_MASKED_EQ","value":2114060288}],"comment":"s390 parameter ordering for clone is different","excludes":{"caps":["CAP_SYS_ADMIN"]},"includes":{"arches":["s390","s390x"]},"names":["clone"]},{"action":"SCMP_ACT_ERRNO","errnoRet":38,"excludes":{"caps":["CAP_SYS_ADMIN"]},"names":["clone3"]},{"action":"SCMP_ACT_ALLOW","includes":{"caps":["CAP_SYS_BOOT"]},"names":["reboot"]},{"action":"SCMP_ACT_ALLOW","includes":{"caps":["CAP_SYS_CHROOT"]},"names":["chroot"]},{"action":"SCMP_ACT_ALLOW","includes":{"caps":["CAP_SYS_MODULE"]},"names":["delete_module","init_module","finit_module"]},{"action":"SCMP_ACT_ALLOW","includes":{"caps":["CAP_SYS_PACCT"]},"names":["acct"]},{"action":"SCMP_ACT_ALLOW","includes":{"caps":["CAP_SYS_PTRACE"]},"names":["kcmp","pidfd_getfd","process_madvise"]},{"action":"SCMP_ACT_ALLOW","includes":{"caps":["CAP_SYS_RAWIO"]},"names":["iopl","ioperm"]},{"action":"SCMP_ACT_ALLOW","includes":{"caps":["CAP_SYS_TIME"]},"names":["settimeofday","stime","clock_settime","clock_settime64"]},{"action":"SCMP_ACT_ALLOW","includes":{"caps":["CAP_SYS_TTY_CONFIG"]},"names":["vhangup"]},{"action":"SCMP_ACT_ALLOW","includes":{"caps":["CAP_SYS_NICE"]},"names":["get_mempolicy","mbind","set_mempolicy","set_mempolicy_home_node"]},{"action":"SCMP_ACT_ALLOW","includes":{"caps":["CAP_SYSLOG"]},"names":["syslog"]},{"action":"SCMP_ACT_ALLOW","includes":{"caps":["CAP_PERFMON"]},"names":["perf_event_open"]}]},"sha256":"5c3af609ff2ca4186b0c0d8eef81c75980d0ca67224ec4a0052ea44e710331e2"},"services":[],"supervisorSha256":"2506d8750694b93169f70e71d4c9dd68de0a0724bf9622bf9e15fa6cd2404b69","version":1}

package/all/copy-overwrite/scripts/npm-updater-gate-supervisor.c

@@ -0,0 +1,121 @@
+/* This file is managed by Lisa and IS replaced on each `lisa` run.
+ * Do not edit directly — durable changes belong upstream in Lisa. */
+/* The fixed nonroot PID1 retains deadline/verdict authority across child exec. */
+#define _POSIX_C_SOURCE 200809L
+#include <errno.h>
+#include <signal.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <sys/prctl.h>
+#include <sys/types.h>
+#include <sys/wait.h>
+#include <time.h>
+#include <unistd.h>
+
+static volatile sig_atomic_t interrupted = 0;
+
+static void interruption(int signal_number) {
+  interrupted = signal_number;
+}
+
+static long long milliseconds(void) {
+  struct timespec now;
+  if (clock_gettime(CLOCK_MONOTONIC, &now) != 0) return -1;
+  return (long long)now.tv_sec * 1000 + now.tv_nsec / 1000000;
+}
+
+static void pause_briefly(void) {
+  const struct timespec delay = {0, 20000000};
+  (void)nanosleep(&delay, NULL);
+}
+
+static int deadline_argument(const char *value) {
+  if (!value || !*value) return -1;
+  for (const char *p = value; *p; ++p) {
+    if (*p < '0' || *p > '9') return -1;
+  }
+  errno = 0;
+  char *end = NULL;
+  long result = strtol(value, &end, 10);
+  if (errno || !end || *end || result < 1 || result > 1800000) return -1;
+  return (int)result;
+}
+
+/* Namespace-wide signals are used only after main has established actual PID1. */
+static int cleanup_children(void) {
+  long long started = milliseconds();
+  if (started < 0 || (kill(-1, SIGTERM) != 0 && errno != ESRCH)) return -1;
+  int killed = 0;
+  for (;;) {
+    int status;
+    pid_t reaped;
+    do { reaped = waitpid(-1, &status, WNOHANG); } while (reaped > 0);
+    if (reaped < 0 && errno == ECHILD) return 0;
+    if (reaped < 0 && errno != EINTR) return -1;
+    long long now = milliseconds();
+    if (now < 0 || now - started >= 4000) return -1;
+    if (!killed && now - started >= 2000) {
+      if (kill(-1, SIGKILL) != 0 && errno != ESRCH) return -1;
+      killed = 1;
+    }
+    pause_briefly();
+  }
+}
+
+/* Only a real waitpid result can be the original command's successful verdict. */
+static int await_command(pid_t child, int duration) {
+  long long started = milliseconds();
+  if (started < 0) return 125;
+  for (;;) {
+    int status = 0;
+    pid_t result = waitpid(child, &status, WNOHANG);
+    if (interrupted) return 128 + interrupted;
+    if (result == child) {
+      if (WIFEXITED(status)) return WEXITSTATUS(status);
+      if (WIFSIGNALED(status)) return 128 + WTERMSIG(status);
+      return 125;
+    }
+    if (result < 0 && errno != EINTR) return 125;
+    long long now = milliseconds();
+    if (now < 0) return 125;
+    if (now - started >= duration) return 124;
+    pause_briefly();
+  }
+}
+
+int main(int argc, char **argv) {
+  if (argc == 2 && strcmp(argv[1], "--version") == 0) {
+    puts("lisa-npm-supervisor 1");
+    return 0;
+  }
+  int duration = argc >= 4 ? deadline_argument(argv[1]) : -1;
+  if (duration < 0 || strcmp(argv[2], "--") != 0 || argv[3][0] != '/' ||
+      getpid() != 1 || getuid() == 0 || getgid() == 0) {
+    fputs("lisa supervisor: invalid nonroot PID1 invocation\n", stderr);
+    return 125;
+  }
+  if (prctl(PR_SET_DUMPABLE, 0) != 0 || prctl(PR_GET_DUMPABLE) != 0) {
+    fputs("lisa supervisor: dumpability protection unavailable\n", stderr);
+    return 125;
+  }
+  struct sigaction action;
+  memset(&action, 0, sizeof action);
+  action.sa_handler = interruption;
+  if (sigemptyset(&action.sa_mask) != 0 || sigaction(SIGTERM, &action, NULL) != 0 ||
+      sigaction(SIGINT, &action, NULL) != 0 || sigaction(SIGHUP, &action, NULL) != 0) return 125;
+  fprintf(stderr, "lisa supervisor: pid=1 uid=%lu gid=%lu dumpable=0\n",
+          (unsigned long)getuid(), (unsigned long)getgid());
+  if (fflush(stderr) != 0) return 125;
+  pid_t child = fork();
+  if (child < 0) return 125;
+  if (child == 0) {
+    if (setpgid(0, 0) != 0) _exit(125);
+    execv(argv[3], argv + 3);
+    _exit(errno == ENOENT ? 127 : 126);
+  }
+  int result = await_command(child, duration);
+  if (cleanup_children() != 0) return 125;
+  if (interrupted) return 128 + interrupted;
+  return result;
+}

package/all/copy-overwrite/scripts/npm-updater-gate.Dockerfile

@@ -0,0 +1,49 @@
+# This file is managed by Lisa and IS replaced on each `lisa` run.
+# Do not edit directly — durable changes belong upstream in Lisa.
+# Trusted fixed recipe only. Application/package files never enter this build context.
+ARG TARGETARCH
+FROM --platform=linux/amd64 node@sha256:25330af3531fb5e23318554a0aa911125b6e91b1b777edf7655501d207c067a2 AS node-amd64
+FROM --platform=linux/arm64 node@sha256:a0ddbc73510e98f5e824fd64266ffe1c2c343ba9cf260d95ca2985ad632a3f3e AS node-arm64
+FROM node-${TARGETARCH} AS node-runtime
+FROM --platform=linux/amd64 ruby@sha256:bcb412ff5c2bdace9af8171c410745e227aea813fa951caab539b2f18623d239 AS ruby-amd64
+FROM --platform=linux/arm64 ruby@sha256:2836fb28bf6f9f1d88015861df0b52424daeb499f2816ed9e4ef31c3bc181909 AS ruby-arm64
+FROM ruby-${TARGETARCH}
+ARG TARGETARCH
+COPY --from=node-runtime /usr/local/bin/node /opt/node/bin/node
+COPY --from=node-runtime /usr/local/lib/node_modules /opt/node/lib/node_modules
+ENV PATH=/opt/node/bin:/usr/local/bin:/usr/bin:/bin
+RUN apt-get update && apt-get install --yes --no-install-recommends \
+    bash ca-certificates curl git unzip passwd build-essential pkg-config libmariadb-dev libmariadb-dev-compat libyaml-dev libvips42 libxml2-dev libxslt1-dev \
+    && rm -rf /var/lib/apt/lists/*
+COPY npm-updater-gate-supervisor.c /tmp/npm-updater-gate-supervisor.c
+RUN cc -std=c11 -Wall -Wextra -Werror -O2 /tmp/npm-updater-gate-supervisor.c \
+    -o /usr/local/bin/lisa-npm-supervisor && rm /tmp/npm-updater-gate-supervisor.c
+RUN set -eu; \
+    curl --fail --location --silent --show-error https://registry.npmjs.org/npm/-/npm-11.21.0.tgz --output /tmp/npm.tgz; \
+    test "$(openssl dgst -sha512 -binary /tmp/npm.tgz | base64 -w0)" = 'Zov8KhamNneiLdELtj5YALtNmJW4L4fCLTzjfpzXG2w6MSHcf0UxgdlK5uloCuksWT+7mGUU7wi79cO6RqivPg=='; \
+    mkdir /opt/npm; tar -xzf /tmp/npm.tgz --strip-components=1 -C /opt/npm; \
+    ln -s /opt/npm/bin/npm-cli.js /opt/node/bin/npm; \
+    curl --fail --location --silent --show-error https://rubygems.org/downloads/bundler-2.4.10.gem --output /tmp/bundler.gem; \
+    echo 'b9806fa944063a6a8676a8f9ed4c7c776a36c3bc82f26c5760867a0285b4a121  /tmp/bundler.gem' | sha256sum --check --strict; \
+    gem install --local /tmp/bundler.gem --no-document; \
+    rm /tmp/npm.tgz /tmp/bundler.gem
+RUN set -eu; \
+    case "$TARGETARCH" in \
+      amd64) bun_arch=x64; bun_sha=0322b17f0722da76a64298aad498225aedcbf6df1008a1dee45e16ecb226a3f1; gh_arch=amd64; gh_sha=83d5c2ccad5498f58bf6368acb1ab32588cf43ab3a4b1c301bf36328b1c8bd60; leaks_arch=x64; leaks_sha=551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb ;; \
+      arm64) bun_arch=aarch64; bun_sha=4e9deb6814a7ec7f68725ddd97d0d7b4065bcda9a850f69d497567e995a7fa33; gh_arch=arm64; gh_sha=06f86ec7103d41993b76cd78072f43595c34aaa56506d971d9860e67140bf909; leaks_arch=arm64; leaks_sha=e4a487ee7ccd7d3a7f7ec08657610aa3606637dab924210b3aee62570fb4b080 ;; \
+      *) echo 'Unsupported qualified architecture' >&2; exit 1 ;; \
+    esac; \
+    curl --fail --location --silent --show-error "https://github.com/oven-sh/bun/releases/download/bun-v1.3.8/bun-linux-${bun_arch}.zip" --output /tmp/bun.zip; \
+    echo "${bun_sha}  /tmp/bun.zip" | sha256sum --check --strict; \
+    unzip -p /tmp/bun.zip "bun-linux-${bun_arch}/bun" > /usr/local/bin/bun; chmod 755 /usr/local/bin/bun; \
+    curl --fail --location --silent --show-error "https://github.com/cli/cli/releases/download/v2.96.0/gh_2.96.0_linux_${gh_arch}.tar.gz" --output /tmp/gh.tgz; \
+    echo "${gh_sha}  /tmp/gh.tgz" | sha256sum --check --strict; \
+    tar -xzOf /tmp/gh.tgz "gh_2.96.0_linux_${gh_arch}/bin/gh" > /usr/local/bin/gh; chmod 755 /usr/local/bin/gh; \
+    curl --fail --location --silent --show-error "https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_${leaks_arch}.tar.gz" --output /tmp/gitleaks.tgz; \
+    echo "${leaks_sha}  /tmp/gitleaks.tgz" | sha256sum --check --strict; \
+    tar -xzOf /tmp/gitleaks.tgz gitleaks > /usr/local/bin/gitleaks; chmod 755 /usr/local/bin/gitleaks; \
+    rm /tmp/bun.zip /tmp/gh.tgz /tmp/gitleaks.tgz; \
+    node --version; node /opt/npm/bin/npm-cli.js --version; ruby --version; bundle _2.4.10_ --version; \
+    /usr/sbin/useradd --uid 2001 --user-group --create-home candidate
+USER 2001:2001
+WORKDIR /workspace