@greppleai/grip 0.0.1 → 0.1.3

package/dist/core/remote-workspace-protocol/lima-owner-lock.js

@@ -0,0 +1,89 @@
+import { createHash, randomBytes } from "node:crypto";
+import { lstat, open, readFile, unlink } from "node:fs/promises";
+import { join } from "node:path";
+import { prepareSharedLimaOwnerDirectory } from "./lima-owner-directory.js";
+function isAlive(pid) {
+    if (!Number.isSafeInteger(pid) || pid < 1)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === "EPERM";
+    }
+}
+/** Exclusive owner lifetime, not a client lease. Never silently steal a stale lock. */
+export async function acquireSharedLimaOwnerLock(instanceName, baseDirectory) {
+    if (!/^[a-z0-9][a-z0-9-]*$/.test(instanceName))
+        throw new Error("Invalid shared Lima instance name");
+    // The production lock must not follow TMPDIR: separate processes can otherwise
+    // claim the same named VM through different private temporary directories.
+    // An explicit base is reserved for isolated embedded tests.
+    const directory = await prepareSharedLimaOwnerDirectory(baseDirectory ?? "/tmp");
+    const digest = createHash("sha256").update(instanceName).digest("hex").slice(0, 32);
+    const path = join(directory, `lima-owner-${digest}.lock`);
+    const record = { pid: process.pid, nonce: randomBytes(16).toString("hex") };
+    let handle;
+    try {
+        handle = await open(path, "wx", 0o600);
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            throw error;
+        // Even a dead PID is ambiguous (crash during a mutation or VM startup). Manual
+        // reconciliation is required; another owner must not implicitly take over.
+        let state = "unverifiable";
+        try {
+            const info = await lstat(path);
+            if (info.isFile() && info.uid === process.getuid?.() && (info.mode & 0o077) === 0) {
+                const existing = JSON.parse(await readFile(path, "utf8"));
+                state = typeof existing.pid === "number" && isAlive(existing.pid) ? "occupied" : "stale";
+            }
+        }
+        catch {
+            // A racing file change is not grounds for a new owner.
+        }
+        throw new Error(`Shared Lima owner lock ${state}; inspect and reconcile before retrying`);
+    }
+    try {
+        await handle.writeFile(JSON.stringify(record));
+        const identity = await handle.stat();
+        let released = false;
+        const assertHeld = async () => {
+            if (released)
+                throw new Error("Shared Lima owner lock already released");
+            const current = await lstat(path);
+            if (current.dev !== identity.dev || current.ino !== identity.ino || !current.isFile()) {
+                throw new Error("Shared Lima owner lock identity changed; refusing operation");
+            }
+            const content = JSON.parse(await readFile(path, "utf8"));
+            if (content.pid !== record.pid || content.nonce !== record.nonce) {
+                throw new Error("Shared Lima owner lock contents changed; refusing operation");
+            }
+        };
+        return {
+            path,
+            instanceName,
+            assertHeld,
+            async release() {
+                if (released)
+                    return;
+                try {
+                    await assertHeld();
+                    await unlink(path);
+                    released = true;
+                }
+                finally {
+                    await handle.close();
+                }
+            },
+        };
+    }
+    catch (error) {
+        await handle.close();
+        // Do not unlink an ambiguous lock after an interrupted write.
+        throw error;
+    }
+}
+//# sourceMappingURL=lima-owner-lock.js.map

package/dist/core/remote-workspace-protocol/lima-owner-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lima-owner-lock.js","sourceRoot":"","sources":["../../../src/core/remote-workspace-protocol/lima-owner-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAmB,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAc5E,SAAS,OAAO,CAAC,GAAW,EAAW;IACtC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC1D,CAAC;AAAA,CACD;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,YAAoB,EACpB,aAAsB,EACS;IAC/B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACrG,+EAA+E;IAC/E,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,SAAS,GAAG,MAAM,+BAA+B,CAAC,aAAa,IAAI,MAAM,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,MAAM,OAAO,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAe,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACxF,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,+EAA+E;QAC/E,2EAA2E;QAC3E,IAAI,KAAK,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAwB,CAAC;gBACjF,KAAK,GAAG,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1F,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,uDAAuD;QACxD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,yCAAyC,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,UAAU,GAAG,KAAK,IAAmB,EAAE,CAAC;YAC7C,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACzE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBACvF,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAwB,CAAC;YAChF,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YAChF,CAAC;QAAA,CACD,CAAC;QACF,OAAO;YACN,IAAI;YACJ,YAAY;YACZ,UAAU;YACV,KAAK,CAAC,OAAO,GAAkB;gBAC9B,IAAI,QAAQ;oBAAE,OAAO;gBACrB,IAAI,CAAC;oBACJ,MAAM,UAAU,EAAE,CAAC;oBACnB,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;oBACnB,QAAQ,GAAG,IAAI,CAAC;gBACjB,CAAC;wBAAS,CAAC;oBACV,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACtB,CAAC;YAAA,CACD;SACD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,8DAA8D;QAC9D,MAAM,KAAK,CAAC;IACb,CAAC;AAAA,CACD","sourcesContent":["import { createHash, randomBytes } from \"node:crypto\";\nimport { type FileHandle, lstat, open, readFile, unlink } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { prepareSharedLimaOwnerDirectory } from \"./lima-owner-directory.ts\";\n\nexport interface SharedLimaOwnerLock {\n\treadonly path: string;\n\treadonly instanceName: string;\n\tassertHeld(): Promise<void>;\n\trelease(): Promise<void>;\n}\n\ninterface LockRecord {\n\tpid: number;\n\tnonce: string;\n}\n\nfunction isAlive(pid: number): boolean {\n\tif (!Number.isSafeInteger(pid) || pid < 1) return false;\n\ttry {\n\t\tprocess.kill(pid, 0);\n\t\treturn true;\n\t} catch (error) {\n\t\treturn (error as NodeJS.ErrnoException).code === \"EPERM\";\n\t}\n}\n\n/** Exclusive owner lifetime, not a client lease. Never silently steal a stale lock. */\nexport async function acquireSharedLimaOwnerLock(\n\tinstanceName: string,\n\tbaseDirectory?: string,\n): Promise<SharedLimaOwnerLock> {\n\tif (!/^[a-z0-9][a-z0-9-]*$/.test(instanceName)) throw new Error(\"Invalid shared Lima instance name\");\n\t// The production lock must not follow TMPDIR: separate processes can otherwise\n\t// claim the same named VM through different private temporary directories.\n\t// An explicit base is reserved for isolated embedded tests.\n\tconst directory = await prepareSharedLimaOwnerDirectory(baseDirectory ?? \"/tmp\");\n\tconst digest = createHash(\"sha256\").update(instanceName).digest(\"hex\").slice(0, 32);\n\tconst path = join(directory, `lima-owner-${digest}.lock`);\n\tconst record: LockRecord = { pid: process.pid, nonce: randomBytes(16).toString(\"hex\") };\n\tlet handle: FileHandle;\n\ttry {\n\t\thandle = await open(path, \"wx\", 0o600);\n\t} catch (error) {\n\t\tif ((error as NodeJS.ErrnoException).code !== \"EEXIST\") throw error;\n\t\t// Even a dead PID is ambiguous (crash during a mutation or VM startup). Manual\n\t\t// reconciliation is required; another owner must not implicitly take over.\n\t\tlet state = \"unverifiable\";\n\t\ttry {\n\t\t\tconst info = await lstat(path);\n\t\t\tif (info.isFile() && info.uid === process.getuid?.() && (info.mode & 0o077) === 0) {\n\t\t\t\tconst existing = JSON.parse(await readFile(path, \"utf8\")) as Partial<LockRecord>;\n\t\t\t\tstate = typeof existing.pid === \"number\" && isAlive(existing.pid) ? \"occupied\" : \"stale\";\n\t\t\t}\n\t\t} catch {\n\t\t\t// A racing file change is not grounds for a new owner.\n\t\t}\n\t\tthrow new Error(`Shared Lima owner lock ${state}; inspect and reconcile before retrying`);\n\t}\n\ttry {\n\t\tawait handle.writeFile(JSON.stringify(record));\n\t\tconst identity = await handle.stat();\n\t\tlet released = false;\n\t\tconst assertHeld = async (): Promise<void> => {\n\t\t\tif (released) throw new Error(\"Shared Lima owner lock already released\");\n\t\t\tconst current = await lstat(path);\n\t\t\tif (current.dev !== identity.dev || current.ino !== identity.ino || !current.isFile()) {\n\t\t\t\tthrow new Error(\"Shared Lima owner lock identity changed; refusing operation\");\n\t\t\t}\n\t\t\tconst content = JSON.parse(await readFile(path, \"utf8\")) as Partial<LockRecord>;\n\t\t\tif (content.pid !== record.pid || content.nonce !== record.nonce) {\n\t\t\t\tthrow new Error(\"Shared Lima owner lock contents changed; refusing operation\");\n\t\t\t}\n\t\t};\n\t\treturn {\n\t\t\tpath,\n\t\t\tinstanceName,\n\t\t\tassertHeld,\n\t\t\tasync release(): Promise<void> {\n\t\t\t\tif (released) return;\n\t\t\t\ttry {\n\t\t\t\t\tawait assertHeld();\n\t\t\t\t\tawait unlink(path);\n\t\t\t\t\treleased = true;\n\t\t\t\t} finally {\n\t\t\t\t\tawait handle.close();\n\t\t\t\t}\n\t\t\t},\n\t\t};\n\t} catch (error) {\n\t\tawait handle.close();\n\t\t// Do not unlink an ambiguous lock after an interrupted write.\n\t\tthrow error;\n\t}\n}\n"]}

package/dist/core/remote-workspace-protocol/session.d.ts

@@ -59,6 +59,7 @@ export interface RemoteWorkspaceClientProtocolOptions {
     maxTombstones?: number;
     onCatalogChanged?: (event: RemoteWorkspaceCatalogChanged) => void;
     onCatalogRefreshed?: (catalog: RemoteWorkspaceCatalog) => void | Promise<void>;
+    onDisconnect?: (message: string) => void;
 }
 export declare class RemoteWorkspaceClientProtocol {
     private readonly transport;
@@ -72,6 +73,7 @@ export declare class RemoteWorkspaceClientProtocol {
     private readonly maxTombstones;
     private readonly onCatalogChanged;
     private readonly onCatalogRefreshed;
+    private readonly onDisconnect;
     private readonly connectionPrefix;
     private readonly pending;
     private readonly tombstones;