@gajae-code/coding-agent 0.13.2 → 0.14.0

package/src/session/session-storage.ts

@@ -641,6 +641,24 @@ function exactUnlinkFailure(result: NativeExactUnlinkResult): SessionDeleteVerif
 				: "stat";
 	return new SessionDeleteVerificationError(kind, `Exact transcript deletion rejected: ${result.code}`);
 }
+/**
+ * A transcript-phase exact unlink is terminal when no live bytes survive. The
+ * native exchange-placeholder protocol on POSIX always retains a zero-length,
+ * descriptor-scrubbed, fsync'd internal recovery entry after scrubbing the
+ * detached transcript; `payloadDurable` proves the payload was destroyed before
+ * that entry was retained, so a placeholder alone never keeps transcript bytes
+ * alive. A retained successor or unknown path is genuine uncertainty and must
+ * stay `cleanup_pending`.
+ */
+function transcriptDeletionTerminal(result: NativeExactUnlinkResult): boolean {
+	if (result.ok) return true;
+	return (
+		result.code === "cleanup_pending" &&
+		(result as typeof result & { payloadDurable?: boolean }).payloadDurable === true &&
+		result.retainedSuccessorPath === undefined &&
+		result.retainedUnknownPath === undefined
+	);
+}
 
 function isValidManagedSecurityContext(value: SessionStorageSecurityContext): value is ManagedSessionSecurityContext {
 	if (
@@ -1672,7 +1690,8 @@ function exactRemoveSessionStorageLockPath(
 		(result.code === "cleanup_pending" &&
 			result.payloadDurable === true &&
 			!result.retainedSuccessorPath &&
-			!result.retainedUnknownPath)
+			!result.retainedUnknownPath &&
+			(!result.retainedPlaceholderPath || path.resolve(result.retainedPlaceholderPath) !== path.resolve(lockPath)))
 	);
 }
 
@@ -1890,7 +1909,9 @@ export class FileSessionStorage implements SessionStorage {
 								removal.code === "cleanup_pending" &&
 								removal.payloadDurable === true &&
 								!removal.retainedSuccessorPath &&
-								!removal.retainedUnknownPath
+								!removal.retainedUnknownPath &&
+								(!removal.retainedPlaceholderPath ||
+									path.resolve(removal.retainedPlaceholderPath) !== path.resolve(lockPath))
 							) {
 								released = true;
 								return;
@@ -2651,13 +2672,7 @@ export class FileSessionStorage implements SessionStorage {
 				quarantineName: path.basename(plannedTranscriptPath),
 			});
 			if (!deletion.ok) {
-				if (
-					deletion.code === "cleanup_pending" &&
-					(deletion as typeof deletion & { payloadDurable?: boolean }).payloadDurable === true &&
-					deletion.retainedSuccessorPath === undefined &&
-					deletion.retainedUnknownPath === undefined
-				)
-					return { kind: "deleted" };
+				if (transcriptDeletionTerminal(deletion)) return { kind: "deleted" };
 				const error = exactUnlinkFailure(deletion);
 				const retainedAuthority =
 					deletion.detachedPath ||
@@ -2726,13 +2741,7 @@ export class FileSessionStorage implements SessionStorage {
 			quarantineName: path.basename(plannedTranscriptPath),
 		});
 		if (!deletion.ok) {
-			if (
-				deletion.code === "cleanup_pending" &&
-				(deletion as typeof deletion & { payloadDurable?: boolean }).payloadDurable === true &&
-				deletion.retainedSuccessorPath === undefined &&
-				deletion.retainedUnknownPath === undefined
-			)
-				return { kind: "deleted" };
+			if (transcriptDeletionTerminal(deletion)) return { kind: "deleted" };
 			const error = exactUnlinkFailure(deletion);
 			const retainedAuthority =
 				deletion.detachedPath ||

package/src/session/startup-auth-config.ts

@@ -0,0 +1,297 @@
+/**
+ * Read the global startup-auth configuration before Settings is initialized.
+ *
+ * The config file is canonical nested YAML only. Legacy literal dotted auth keys
+ * are rejected with a manual rewrite diagnostic; no compatibility migration is
+ * performed. Environment values are trusted credential sources and take
+ * precedence over global config values.
+ */
+
+import * as os from "node:os";
+import * as path from "node:path";
+import type { AuthCredentialSelector, CredentialRankingMode } from "@gajae-code/ai/core";
+import { $credentialEnv, getAgentDbPath, getAgentDir, getConfigRootDir, isEnoent, logger } from "@gajae-code/utils";
+import { YAML } from "bun";
+import { readSecureTokenFile } from "./secure-token-file";
+
+export interface AuthBrokerClientConfig {
+	url: string;
+	token: string;
+}
+
+export interface StartupAuthConfigSnapshot {
+	broker: AuthBrokerClientConfig | null;
+	/** Opaque credential-store authority used to bind numeric row-id pins. */
+	credentialStoreIdentity: string;
+	/** Persisted authority for global numeric pins; absent values invalidate ID pins. */
+	credentialPinStoreIdentity?: string;
+	credentialRankingMode: CredentialRankingMode;
+	credentialPins: Readonly<Record<string, string>>;
+}
+
+export type StartupAuthConfigErrorKind =
+	| "unreadable"
+	| "invalid-yaml"
+	| "non-mapping-root"
+	| "invalid-auth"
+	| "invalid-broker"
+	| "invalid-gateway"
+	| "invalid-ranking-mode"
+	| "invalid-credential-pins";
+
+/** A malformed startup-auth config aborts resolution rather than downgrading to local authority. */
+export class StartupAuthConfigError extends Error {
+	readonly name = "StartupAuthConfigError";
+	readonly code: StartupAuthConfigErrorKind;
+	readonly causeClass: StartupAuthConfigErrorKind;
+
+	constructor(
+		readonly kind: StartupAuthConfigErrorKind,
+		configPath: string,
+	) {
+		const displayPath = shortenConfigPath(configPath);
+		super(`Startup auth config ${displayPath}: ${kind}.`);
+		this.code = kind;
+		this.causeClass = kind;
+	}
+}
+
+const DEFAULT_CREDENTIAL_RANKING_MODE: CredentialRankingMode = "balanced";
+/** JSON-schema pattern shared with the runtime persisted-selector grammar. */
+export const PERSISTED_CREDENTIAL_SELECTOR_PATTERN = "^(id:[1-9][0-9]*|email:[^@\\s]+@[^@\\s]+|account:\\S+)$";
+const LEGACY_LITERAL_AUTH_KEYS = new Set([
+	"auth.broker.url",
+	"auth.broker.token",
+	"auth.credentialRankingMode",
+	"auth.credentialPins",
+]);
+
+function configPathForAgentDir(agentDir: string): string {
+	return path.join(agentDir, "config.yml");
+}
+
+function shortenConfigPath(configPath: string): string {
+	const absolutePath = path.resolve(configPath).replace(/[\u0000-\u001f\u007f]/gu, "?");
+	const homePath = path.resolve(os.homedir());
+	if (absolutePath === homePath) return "~";
+	const homePrefix = `${homePath}${path.sep}`;
+	return absolutePath.startsWith(homePrefix) ? `~${absolutePath.slice(homePath.length)}` : absolutePath;
+}
+
+function startupAuthConfigError(agentDir: string, kind: StartupAuthConfigErrorKind): StartupAuthConfigError {
+	return new StartupAuthConfigError(kind, configPathForAgentDir(agentDir));
+}
+
+/** Path to the local bearer token file. Created on the broker host by `gjc auth-broker token`. */
+export function getAuthBrokerTokenFilePath(): string {
+	return path.join(getConfigRootDir(), "auth-broker.token");
+}
+
+/** Validate the persisted selector grammar used by `auth.credentialPins`. */
+export function parsePersistedCredentialSelector(value: string): AuthCredentialSelector | undefined {
+	const trimmed = value.trim();
+	if (/^id:[1-9][0-9]*$/.test(trimmed)) return { kind: "id", value: trimmed.slice(3) };
+	if (/^email:[^@\s]+@[^@\s]+$/.test(trimmed)) return { kind: "email", value: trimmed.slice(6) };
+	if (/^account:\S+$/.test(trimmed)) return { kind: "account", value: trimmed.slice(8) };
+	return undefined;
+}
+
+export function isValidPersistedCredentialSelector(value: string): boolean {
+	return parsePersistedCredentialSelector(value) !== undefined;
+}
+
+function asRecord(value: unknown): Record<string, unknown> | undefined {
+	return value !== null && typeof value === "object" && !Array.isArray(value)
+		? (value as Record<string, unknown>)
+		: undefined;
+}
+
+function resolveRankingMode(value: unknown): CredentialRankingMode | undefined {
+	return value === "balanced" || value === "earliest-reset" ? value : undefined;
+}
+
+/** Resolve the documented `$ENV_NAME` indirection without consulting project `.env` values. */
+function resolveNestedBrokerValue(raw: string | undefined): string | undefined {
+	const trimmed = raw?.trim();
+	if (!trimmed) return undefined;
+	const match = /^\$([A-Za-z_][A-Za-z0-9_]*)$/.exec(trimmed);
+	if (!match) return trimmed;
+	return $credentialEnv(match[1]);
+}
+
+function canonicalBrokerUrl(raw: string): string {
+	let parsed: URL;
+	try {
+		parsed = new URL(raw);
+	} catch {
+		throw new Error("Auth broker URL is invalid.");
+	}
+	if ((parsed.protocol !== "http:" && parsed.protocol !== "https:") || parsed.username || parsed.password) {
+		throw new Error("Auth broker URL must be an HTTP(S) origin without credentials.");
+	}
+	if (parsed.search || parsed.hash) throw new Error("Auth broker URL must not contain a query or fragment.");
+	parsed.pathname = parsed.pathname.replace(/\/+$/, "");
+	return parsed.toString().replace(/\/$/, "");
+}
+
+function throwLegacyLiteralKeyError(keys: string[]): never {
+	throw new Error(
+		`Unsupported legacy dotted auth configuration key${keys.length === 1 ? "" : "s"}: ${keys.join(", ")}. ` +
+			"Rewrite config.yml manually using canonical nested YAML (no automatic migration):\n" +
+			"auth:\n" +
+			"  broker:\n" +
+			"    url: <broker-url>\n" +
+			"    token: <broker-token>\n" +
+			"  credentialRankingMode: balanced\n" +
+			"  credentialPins:\n" +
+			"    <provider>: id:<positive-id>\n" +
+			"Do not copy secret values into command output; rewrite the file by hand.",
+	);
+}
+
+function readCredentialPins(
+	auth: Record<string, unknown> | undefined,
+	configPath: string,
+): Readonly<Record<string, string>> {
+	const rawPins = auth?.credentialPins;
+	if (rawPins === undefined) return {};
+	const pins = asRecord(rawPins);
+	if (!pins) throw new StartupAuthConfigError("invalid-credential-pins", configPath);
+
+	const result: Record<string, string> = {};
+	for (const [provider, rawSelector] of Object.entries(pins)) {
+		const normalizedProvider = provider.trim();
+		if (normalizedProvider.length === 0 || /[\u0000-\u001f\u007f]/u.test(normalizedProvider)) {
+			throw new StartupAuthConfigError("invalid-credential-pins", configPath);
+		}
+		if (typeof rawSelector !== "string" || !isValidPersistedCredentialSelector(rawSelector)) {
+			throw new StartupAuthConfigError("invalid-credential-pins", configPath);
+		}
+		result[normalizedProvider] = rawSelector.trim();
+	}
+	return result;
+}
+
+interface GlobalStartupAuthYaml {
+	auth: Record<string, unknown> | undefined;
+	credentialPinStoreIdentity: string | undefined;
+	credentialPins: Readonly<Record<string, string>>;
+}
+
+async function readGlobalStartupAuthYaml(agentDir: string): Promise<GlobalStartupAuthYaml> {
+	const configPath = configPathForAgentDir(agentDir);
+	let raw: string;
+	try {
+		raw = await Bun.file(configPath).text();
+	} catch (error) {
+		if (isEnoent(error)) return { auth: undefined, credentialPinStoreIdentity: undefined, credentialPins: {} };
+		logger.warn("startup auth config.yml unreadable", { path: shortenConfigPath(configPath), cause: "unreadable" });
+		throw startupAuthConfigError(agentDir, "unreadable");
+	}
+	if (raw.trim() === "") return { auth: undefined, credentialPinStoreIdentity: undefined, credentialPins: {} };
+
+	let parsed: unknown;
+	try {
+		parsed = YAML.parse(raw);
+	} catch {
+		logger.warn("startup auth config.yml has invalid YAML", {
+			path: shortenConfigPath(configPath),
+			cause: "invalid-yaml",
+		});
+		throw startupAuthConfigError(agentDir, "invalid-yaml");
+	}
+	const root = asRecord(parsed);
+	if (!root) {
+		logger.warn("startup auth config.yml root is not a mapping", {
+			path: shortenConfigPath(configPath),
+			cause: "non-mapping-root",
+		});
+		throw startupAuthConfigError(agentDir, "non-mapping-root");
+	}
+	const legacyKeys = Object.keys(root).filter(key => LEGACY_LITERAL_AUTH_KEYS.has(key));
+	if (legacyKeys.length > 0) throwLegacyLiteralKeyError(legacyKeys);
+
+	if (root.auth === undefined) return { auth: undefined, credentialPinStoreIdentity: undefined, credentialPins: {} };
+	const auth = asRecord(root.auth);
+	if (!auth) throw startupAuthConfigError(agentDir, "invalid-auth");
+
+	for (const [sectionName, errorKind] of [
+		["broker", "invalid-broker"],
+		["gateway", "invalid-gateway"],
+	] as const) {
+		const section = auth[sectionName];
+		if (section === undefined) continue;
+		const sectionRecord = asRecord(section);
+		if (!sectionRecord) throw startupAuthConfigError(agentDir, errorKind);
+		for (const key of ["url", "token"] as const) {
+			if (Object.hasOwn(sectionRecord, key) && typeof sectionRecord[key] !== "string") {
+				throw startupAuthConfigError(agentDir, errorKind);
+			}
+		}
+	}
+
+	if (Object.hasOwn(auth, "credentialRankingMode") && resolveRankingMode(auth.credentialRankingMode) === undefined) {
+		throw startupAuthConfigError(agentDir, "invalid-ranking-mode");
+	}
+	const credentialPins = readCredentialPins(auth, configPath);
+	const rawCredentialPinStoreIdentity = auth.credentialPinStoreIdentity;
+	const credentialPinStoreIdentity =
+		typeof rawCredentialPinStoreIdentity === "string" && rawCredentialPinStoreIdentity.trim().length > 0
+			? rawCredentialPinStoreIdentity.trim()
+			: undefined;
+	return { auth, credentialPinStoreIdentity, credentialPins };
+}
+
+async function readTokenFile(): Promise<string | undefined> {
+	const token = await readSecureTokenFile(getAuthBrokerTokenFilePath());
+	return token ?? undefined;
+}
+
+/**
+ * Resolve one typed startup-auth snapshot from trusted env and global config.
+ * Project settings are intentionally not read here, so project-scoped pins
+ * cannot influence credential selection.
+ */
+export async function resolveStartupAuthConfig(agentDir: string = getAgentDir()): Promise<StartupAuthConfigSnapshot> {
+	const { auth, credentialPinStoreIdentity, credentialPins } = await readGlobalStartupAuthYaml(agentDir);
+	const broker = asRecord(auth?.broker);
+	const envUrl = $credentialEnv("GJC_AUTH_BROKER_URL")?.trim();
+	const envToken = $credentialEnv("GJC_AUTH_BROKER_TOKEN")?.trim();
+
+	let url = envUrl || undefined;
+	const nestedUrlRaw = typeof broker?.url === "string" ? broker.url : undefined;
+	const nestedUrl = resolveNestedBrokerValue(nestedUrlRaw);
+	if (!url && nestedUrlRaw?.trim() && nestedUrl === undefined) {
+		throw startupAuthConfigError(agentDir, "invalid-broker");
+	}
+	if (!url && nestedUrl) url = nestedUrl;
+	if (url) url = canonicalBrokerUrl(url);
+
+	const configToken = resolveNestedBrokerValue(typeof broker?.token === "string" ? broker.token : undefined);
+
+	let resolvedBroker: AuthBrokerClientConfig | null = null;
+	if (url) {
+		const token = envToken || configToken || (await readTokenFile());
+		if (!token) {
+			throw new Error(
+				"An auth broker URL is configured but no bearer token is available. " +
+					`Set GJC_AUTH_BROKER_TOKEN, the nested \`auth.broker.token\` config entry, or place one at ${getAuthBrokerTokenFilePath()}.`,
+			);
+		}
+		resolvedBroker = { url, token };
+	}
+
+	const rankingMode =
+		resolveRankingMode($credentialEnv("GJC_CREDENTIAL_RANKING_MODE")) ??
+		resolveRankingMode(auth?.credentialRankingMode) ??
+		DEFAULT_CREDENTIAL_RANKING_MODE;
+	return {
+		broker: resolvedBroker,
+		credentialStoreIdentity: resolvedBroker
+			? `broker:${resolvedBroker.url}`
+			: `local:${path.resolve(getAgentDbPath(agentDir))}`,
+		...(credentialPinStoreIdentity ? { credentialPinStoreIdentity } : {}),
+		credentialRankingMode: rankingMode,
+		credentialPins,
+	};
+}