@fitlab-ai/agent-infra 0.9.14 → 0.9.15

package/dist/lib/internal/demo-promotion.js

@@ -0,0 +1,322 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+const DEMO_ASSET_NAMES = ['gif', 'transcript', 'sha256'];
+const JOURNAL_RELATIVE_PATH = 'assets/.demo-init.promotion.json';
+const PROMOTION_DIR_PREFIX = '.demo-init.promotion-';
+function sha256Bytes(value) {
+    return crypto.createHash('sha256').update(value).digest('hex');
+}
+function sha256File(filePath, io = fs) {
+    return sha256Bytes(io.readFileSync(filePath));
+}
+function assetTargets(cwd) {
+    return {
+        gif: path.join(cwd, 'assets', 'demo-init.gif'),
+        transcript: path.join(cwd, 'assets', 'demo-init.transcript'),
+        sha256: path.join(cwd, 'assets', 'demo-init.transcript.sha256')
+    };
+}
+function journalPath(cwd) {
+    return path.join(cwd, JOURNAL_RELATIVE_PATH);
+}
+function isUnsupportedFsyncError(error) {
+    const code = error.code;
+    return code === 'EINVAL' || code === 'ENOSYS' || code === 'ENOTSUP' || code === 'EPERM';
+}
+function syncFile(filePath, io) {
+    if (!io.openSync || !io.closeSync || !io.fsyncSync)
+        return;
+    const descriptor = io.openSync(filePath, 'r');
+    try {
+        try {
+            io.fsyncSync(descriptor);
+        }
+        catch (error) {
+            if (!isUnsupportedFsyncError(error))
+                throw error;
+        }
+    }
+    finally {
+        io.closeSync(descriptor);
+    }
+}
+function writeJournal(cwd, journal, io) {
+    const target = journalPath(cwd);
+    const temporary = `${target}.tmp-${process.pid}`;
+    io.writeFileSync(temporary, `${JSON.stringify(journal, null, 2)}\n`);
+    syncFile(temporary, io);
+    try {
+        io.renameSync(temporary, target);
+    }
+    catch (error) {
+        try {
+            io.unlinkSync(temporary);
+        }
+        catch { /* preserve primary error */ }
+        throw error;
+    }
+}
+function existingRegularFile(filePath, io) {
+    if (!io.existsSync(filePath))
+        return false;
+    const stat = io.lstatSync(filePath);
+    if (!stat.isFile() || stat.isSymbolicLink())
+        throw new Error(`promotion target is not a regular file: ${filePath}`);
+    return true;
+}
+function removeIfPresent(filePath, io) {
+    if (io.existsSync(filePath))
+        io.unlinkSync(filePath);
+}
+function samePath(left, right) {
+    return path.normalize(path.resolve(left)) === path.normalize(path.resolve(right));
+}
+function pathIsInside(root, candidate) {
+    const relative = path.relative(root, candidate);
+    return relative !== '' && !path.isAbsolute(relative) && relative !== '..' && !relative.startsWith(`..${path.sep}`);
+}
+function existingStat(filePath, io) {
+    try {
+        return io.lstatSync(filePath);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+}
+function validatePromotionJournal(cwd, journal, io) {
+    if (!journal || typeof journal !== 'object')
+        throw new Error('promotion journal is invalid');
+    if (journal.version !== 1 || !['prepared', 'promoting', 'committed'].includes(journal.phase)) {
+        throw new Error('promotion journal is invalid');
+    }
+    if (typeof journal.generation !== 'string' || !journal.generation || /[\r\n]/u.test(journal.generation)) {
+        throw new Error('promotion journal generation is invalid');
+    }
+    if (!Array.isArray(journal.entries) || journal.entries.length !== DEMO_ASSET_NAMES.length) {
+        throw new Error('promotion journal entries are invalid');
+    }
+    if (!Number.isInteger(journal.currentIndex) || journal.currentIndex < -1 || journal.currentIndex >= journal.entries.length) {
+        throw new Error('promotion journal index is invalid');
+    }
+    const assets = path.join(cwd, 'assets');
+    const assetsStat = existingStat(assets, io);
+    if (!assetsStat || assetsStat.isSymbolicLink() || !assetsStat.isDirectory()) {
+        throw new Error('promotion assets directory is invalid');
+    }
+    if (typeof journal.directory !== 'string' || path.isAbsolute(journal.directory)) {
+        throw new Error('promotion journal directory is invalid');
+    }
+    const directory = path.resolve(cwd, journal.directory);
+    const directoryName = path.basename(directory);
+    if (!directoryName.startsWith(PROMOTION_DIR_PREFIX) || directoryName === PROMOTION_DIR_PREFIX
+        || journal.directory !== path.relative(cwd, directory)
+        || !samePath(directory, path.join(assets, directoryName))) {
+        throw new Error('promotion journal directory is invalid');
+    }
+    const directoryStat = existingStat(directory, io);
+    if (directoryStat && (directoryStat.isSymbolicLink() || !directoryStat.isDirectory())) {
+        throw new Error('promotion journal directory is invalid');
+    }
+    const targets = assetTargets(cwd);
+    for (const [index, name] of DEMO_ASSET_NAMES.entries()) {
+        const entry = journal.entries[index];
+        if (!entry || entry.name !== name || typeof entry.target !== 'string' || typeof entry.staging !== 'string'
+            || typeof entry.backup !== 'string' || typeof entry.existed !== 'boolean'
+            || (entry.oldSha256 !== null && typeof entry.oldSha256 !== 'string')
+            || typeof entry.newSha256 !== 'string') {
+            throw new Error('promotion journal entry is invalid');
+        }
+        const target = targets[name];
+        const staging = path.join(directory, path.basename(target));
+        const backup = path.join(directory, `old-${name}`);
+        if (!samePath(entry.target, target) || !samePath(entry.staging, staging) || !samePath(entry.backup, backup)) {
+            throw new Error(`promotion journal path is invalid: ${name}`);
+        }
+        for (const [label, filePath] of [['target', target], ['staging', staging], ['backup', backup]]) {
+            if (!pathIsInside(assets, filePath))
+                throw new Error(`promotion journal path is invalid: ${name}.${label}`);
+            const stat = existingStat(filePath, io);
+            if (stat && (stat.isSymbolicLink() || !stat.isFile())) {
+                throw new Error(`promotion journal path is invalid: ${name}.${label}`);
+            }
+        }
+        if (entry.existed !== (entry.oldSha256 !== null)) {
+            throw new Error(`promotion journal entry is invalid: ${name}`);
+        }
+    }
+    return journal;
+}
+function cleanupJournal(journal, cwd, io) {
+    for (const entry of journal.entries) {
+        removeIfPresent(entry.staging, io);
+        removeIfPresent(entry.backup, io);
+    }
+    io.rmSync(path.join(cwd, journal.directory), { recursive: true, force: true });
+    removeIfPresent(journalPath(cwd), io);
+}
+function verifyTargets(entries, io, expected) {
+    for (const entry of entries) {
+        if (!entry.existed && expected === 'old') {
+            if (io.existsSync(entry.target))
+                throw new Error(`old promotion target unexpectedly exists: ${entry.target}`);
+            continue;
+        }
+        if (!io.existsSync(entry.target))
+            throw new Error(`promotion target is missing: ${entry.target}`);
+        const actual = sha256File(entry.target, io);
+        const wanted = expected === 'old' ? entry.oldSha256 : entry.newSha256;
+        if (!wanted || actual !== wanted)
+            throw new Error(`promotion target has unexpected content: ${entry.target}`);
+    }
+}
+function restoreOld(journal, io) {
+    for (const entry of [...journal.entries].reverse()) {
+        if (!entry.existed) {
+            removeIfPresent(entry.target, io);
+            continue;
+        }
+        if (!io.existsSync(entry.backup) || sha256File(entry.backup, io) !== entry.oldSha256) {
+            throw new Error(`promotion backup is missing or corrupt: ${entry.backup}`);
+        }
+        const restore = `${entry.target}.restore-${process.pid}`;
+        io.copyFileSync(entry.backup, restore);
+        removeIfPresent(entry.target, io);
+        io.renameSync(restore, entry.target);
+    }
+    verifyTargets(journal.entries, io, 'old');
+}
+function recoveryFailure(error) {
+    return {
+        status: 'failed',
+        code: 'DEMO_PROMOTION_RECOVERY_REQUIRED',
+        message: error instanceof Error ? error.message : String(error)
+    };
+}
+function recoverDemoPromotion(cwd, io = fs) {
+    const target = journalPath(cwd);
+    if (!io.existsSync(target))
+        return null;
+    let journal;
+    try {
+        const journalStat = io.lstatSync(target);
+        if (journalStat.isSymbolicLink() || !journalStat.isFile())
+            throw new Error('promotion journal is invalid');
+        journal = JSON.parse(io.readFileSync(target, 'utf8'));
+        journal = validatePromotionJournal(cwd, journal, io);
+        if (journal.phase === 'committed') {
+            try {
+                verifyTargets(journal.entries, io, 'new');
+            }
+            catch {
+                restoreOld(journal, io);
+            }
+        }
+        else {
+            restoreOld(journal, io);
+        }
+        cleanupJournal(journal, cwd, io);
+        return { status: 'committed', code: null, message: null };
+    }
+    catch (error) {
+        return recoveryFailure(error);
+    }
+}
+function createDemoPromotion(cwd, transcript) {
+    const assets = path.join(cwd, 'assets');
+    const directory = fs.mkdtempSync(path.join(assets, PROMOTION_DIR_PREFIX));
+    const staging = {
+        gif: path.join(directory, 'demo-init.gif'),
+        transcript: path.join(directory, 'demo-init.transcript'),
+        sha256: path.join(directory, 'demo-init.transcript.sha256')
+    };
+    const sha256 = sha256Bytes(Buffer.from(transcript, 'utf8'));
+    fs.writeFileSync(staging.transcript, transcript);
+    fs.writeFileSync(staging.sha256, `${sha256}\n`);
+    return { directory, staging, sha256 };
+}
+function promoteDemoAssets(cwd, staging, generation, io = fs) {
+    const targets = assetTargets(cwd);
+    const directory = path.relative(cwd, path.dirname(staging.gif));
+    const journal = {
+        version: 1,
+        generation,
+        phase: 'prepared',
+        currentIndex: -1,
+        directory,
+        entries: []
+    };
+    try {
+        for (const name of DEMO_ASSET_NAMES) {
+            if (!io.existsSync(staging[name]))
+                throw new Error(`staged demo asset is missing: ${staging[name]}`);
+            const target = targets[name];
+            const backup = path.join(path.dirname(staging[name]), `old-${name}`);
+            const existed = existingRegularFile(target, io);
+            const oldSha256 = existed ? sha256File(target, io) : null;
+            if (existed) {
+                io.copyFileSync(target, backup);
+                if (sha256File(backup, io) !== oldSha256)
+                    throw new Error(`promotion backup verification failed: ${target}`);
+            }
+            journal.entries.push({
+                name, target, staging: staging[name], backup, existed, oldSha256,
+                newSha256: sha256File(staging[name], io)
+            });
+        }
+        writeJournal(cwd, journal, io);
+        for (let index = 0; index < journal.entries.length; index += 1) {
+            journal.phase = 'promoting';
+            journal.currentIndex = index;
+            writeJournal(cwd, journal, io);
+            const entry = journal.entries[index];
+            removeIfPresent(entry.target, io);
+            io.renameSync(entry.staging, entry.target);
+            if (sha256File(entry.target, io) !== entry.newSha256)
+                throw new Error(`promoted asset verification failed: ${entry.target}`);
+            writeJournal(cwd, journal, io);
+        }
+        verifyTargets(journal.entries, io, 'new');
+        journal.phase = 'committed';
+        writeJournal(cwd, journal, io);
+        try {
+            cleanupJournal(journal, cwd, io);
+        }
+        catch (error) {
+            return {
+                status: 'failed',
+                code: 'DEMO_PROMOTION_CLEANUP_FAILED',
+                message: error instanceof Error ? error.message : String(error)
+            };
+        }
+        return { status: 'committed', code: null, message: null };
+    }
+    catch (error) {
+        try {
+            if (io.existsSync(journalPath(cwd))) {
+                const persisted = validatePromotionJournal(cwd, JSON.parse(io.readFileSync(journalPath(cwd), 'utf8')), io);
+                if (persisted.phase === 'committed') {
+                    verifyTargets(persisted.entries, io, 'new');
+                    return {
+                        status: 'failed',
+                        code: 'DEMO_PROMOTION_CLEANUP_FAILED',
+                        message: error instanceof Error ? error.message : String(error)
+                    };
+                }
+                restoreOld(persisted, io);
+                cleanupJournal(persisted, cwd, io);
+            }
+            else {
+                io.rmSync(path.dirname(staging.gif), { recursive: true, force: true });
+            }
+            return { status: 'failed', code: 'DEMO_PROMOTION_FAILED', message: error instanceof Error ? error.message : String(error) };
+        }
+        catch (rollbackError) {
+            return recoveryFailure(rollbackError);
+        }
+    }
+}
+export { DEMO_ASSET_NAMES, JOURNAL_RELATIVE_PATH, assetTargets, createDemoPromotion, journalPath, promoteDemoAssets, recoverDemoPromotion, sha256Bytes };
+//# sourceMappingURL=demo-promotion.js.map