@hasna/hooks 0.10.3 → 0.10.4

package/scripts/validate-package.ts

@@ -1,6 +1,6 @@
 import { spawn, spawnSync } from "node:child_process";
 import { existsSync } from "node:fs";
-import { mkdtemp, mkdir, readFile, realpath, rm, symlink, writeFile } from "node:fs/promises";
+import { copyFile, mkdtemp, mkdir, readFile, realpath, rm, symlink, writeFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
 
 type PackageJson = {
@@ -227,10 +227,19 @@ async function validatePackedNativeSafety(packageDir: string, smokeDir: string):
   const home = join(smokeDir, "native-safety-home");
   await mkdir(home, { mode: 0o700 });
   const settings = join(home, ".codex", "hooks.json");
+  // The supervisor retains its install-time runtime directory. A station's Bun
+  // directory may also contain Trash, so isolate the runtime for this negative
+  // control instead of inheriting the station's executable lookup.
+  const runtimeDir = join(smokeDir, "native-runtime");
+  await mkdir(runtimeDir, { mode: 0o700 });
+  const runtime = join(runtimeDir, "bun");
+  await copyFile(await realpath(process.execPath), runtime);
+  // An unrelated system trash utility remains subject to the package
+  // provenance check; only a verified @hasna/trash is a supported guard.
   const env: NodeJS.ProcessEnv = { ...process.env, HOME: home, HASNA_STATION: "no-such-station", HASNA_HOOKS_CODEX_SETTINGS_PATH: settings };
   for (const key of Object.keys(env)) if (/^(HASNA_HOOKS_|HOOKS_)/.test(key) && key !== "HASNA_HOOKS_CODEX_SETTINGS_PATH") delete env[key];
   const cli = join(packageDir, "bin/index.js");
-  const installed = spawnSync(process.execPath, [cli, "safety", "install", "trash-guard", "--target", "codex"], { cwd: smokeDir, env, encoding: "utf8", timeout: 15_000 });
+  const installed = spawnSync(runtime, [cli, "safety", "install", "trash-guard", "--target", "codex"], { cwd: smokeDir, env, encoding: "utf8", timeout: 15_000 });
   if (installed.status !== 0 || !JSON.parse(installed.stdout).success) throw new Error("Packed native safety registration failed");
   if (existsSync(join(home, ".hasna", "hooks"))) throw new Error("Stateless safety registration created app state");
   const native = JSON.parse(await readFile(settings, "utf8"));
@@ -243,7 +252,7 @@ async function validatePackedNativeSafety(packageDir: string, smokeDir: string):
   if (refused.status !== 0 || JSON.parse(refused.stdout).hookSpecificOutput.permissionDecision !== "deny") throw new Error("Packed native missing-Trash refusal failed");
   const probe = join(smokeDir, "native-registration.ts");
   await writeFile(probe, `import { getRegisteredHooksForTarget } from "@hasna/hooks"; console.log(JSON.stringify(getRegisteredHooksForTarget("global", "codex")));`);
-  const listed = spawnSync(process.execPath, [probe], { cwd: smokeDir, env, encoding: "utf8", timeout: 15_000 });
+  const listed = spawnSync(runtime, [probe], { cwd: smokeDir, env, encoding: "utf8", timeout: 15_000 });
   if (listed.status !== 0 || JSON.stringify(JSON.parse(listed.stdout)) !== '["trash-guard"]') throw new Error("Packed SDK cannot recognize the compiled CLI safety registration");
   const worker = join(packageDir, "bin/native-safety-entry.js");
   const bytes = await readFile(worker);