@hraness/wordcell 0.26.1 → 0.26.2

package/README.md

@@ -66,14 +66,14 @@ Wordcell keeps the record in Markdown files you own, rebuilds every index from t
 The CLI and TypeScript SDK run with Bun. Install the versioned GitHub archive:
 
 ```sh
-bun add --global --ignore-scripts https://github.com/hraness/wordcell/releases/download/v0.26.1/hraness-wordcell-0.26.1.tgz
+bun add --global --ignore-scripts https://github.com/hraness/wordcell/releases/download/v0.26.2/hraness-wordcell-0.26.2.tgz
 wordcell --help
 ```
 
 Prefer npm? The same release is [mirrored there](https://www.npmjs.com/package/@hraness/wordcell):
 
 ```sh
-npm install --global --ignore-scripts @hraness/wordcell@0.26.1
+npm install --global --ignore-scripts @hraness/wordcell@0.26.2
 wordcell --help
 ```
 
@@ -137,7 +137,7 @@ After trying the CLI, install the public Agent Skill into a compatible agent,
 such as Claude Code, Codex, Cursor, or GitHub Copilot:
 
 ```sh
-bunx skills add hraness/wordcell#v0.26.1 --skill wordcell
+bunx skills add hraness/wordcell#v0.26.2 --skill wordcell
 ```
 
 Then ask:
@@ -348,7 +348,7 @@ exist. [Graph queries and proof limits](https://github.com/hraness/wordcell/blob
 Add the same immutable release to a Bun project:
 
 ```sh
-bun add --exact --ignore-scripts https://github.com/hraness/wordcell/releases/download/v0.26.1/hraness-wordcell-0.26.1.tgz
+bun add --exact --ignore-scripts https://github.com/hraness/wordcell/releases/download/v0.26.2/hraness-wordcell-0.26.2.tgz
 ```
 
 The SDK provides read-only vault sessions, metadata queries, search, graph

package/dist/capture.js

@@ -5,7 +5,7 @@ import {
   captureSummary,
   main,
   runCapture
-} from "./index-zbv70qmk.js";
+} from "./index-h9vyd03z.js";
 import"./index-hacpnaew.js";
 import"./index-k86wepd8.js";
 import {
@@ -13,7 +13,7 @@ import {
   inspectClipEnvironment,
   renderDoctorReport
 } from "./index-nd8v7r0z.js";
-import"./index-5n05se68.js";
+import"./index-hnvx7m1j.js";
 import"./index-ncwzmsge.js";
 import"./index-cd75vky9.js";
 import"./index-2gv8y733.js";

package/dist/cli-bin.js

@@ -2,7 +2,7 @@
 // @bun
 import {
   runWordcellBin
-} from "./index-6jz050v0.js";
+} from "./index-82r6g4py.js";
 import"./index-3t0v457d.js";
 import"./index-8pabwzqg.js";
 import"./index-4knsp9qj.js";

package/dist/cli.js

@@ -6,17 +6,17 @@ import {
   parseArguments,
   runExecutable,
   usage
-} from "./index-8w1zsgcm.js";
+} from "./index-mp5y3ty3.js";
 import"./index-5h5awwh4.js";
 import"./index-m9p2a4mj.js";
 import"./index-9paxge84.js";
 import"./index-j4zgmzjr.js";
 import"./index-npg9z1a4.js";
-import"./index-zbv70qmk.js";
+import"./index-h9vyd03z.js";
 import"./index-hacpnaew.js";
 import"./index-k86wepd8.js";
 import"./index-nd8v7r0z.js";
-import"./index-5n05se68.js";
+import"./index-hnvx7m1j.js";
 import"./index-8pabwzqg.js";
 import"./index-ncwzmsge.js";
 import"./index-cd75vky9.js";
@@ -64,7 +64,7 @@ import {
 
 // src/cli.ts
 async function runStandaloneCli(args = process.argv.slice(2)) {
-  const { standaloneSupportEnvironment, isUsefulSupportResult, runProductSupportCommand, showProductSupportInvitation } = await import("./support-ym4mpf7w.js");
+  const { standaloneSupportEnvironment, isUsefulSupportResult, runProductSupportCommand, showProductSupportInvitation } = await import("./support-9qdr4hb8.js");
   const env = standaloneSupportEnvironment();
   if (args[0] === "support") {
     return await runProductSupportCommand(args.slice(1), { env });

package/dist/clip/browser-profiles.js

@@ -6,7 +6,7 @@ import {
   copyBoundedLocalState,
   isSafeNamedProfile,
   profilePath
-} from "../index-5n05se68.js";
+} from "../index-hnvx7m1j.js";
 import"../index-z1w83f81.js";
 export {
   profilePath,

package/dist/clip/cli.js

@@ -5,11 +5,11 @@ import {
   captureSucceeded,
   captureSummary,
   main
-} from "../index-zbv70qmk.js";
+} from "../index-h9vyd03z.js";
 import"../index-hacpnaew.js";
 import"../index-k86wepd8.js";
 import"../index-nd8v7r0z.js";
-import"../index-5n05se68.js";
+import"../index-hnvx7m1j.js";
 import"../index-ncwzmsge.js";
 import"../index-cd75vky9.js";
 import"../index-2gv8y733.js";

package/dist/evaluation-builder-bin.js

@@ -2,7 +2,7 @@
 // @bun
 import {
   runWordcellBin
-} from "./index-6jz050v0.js";
+} from "./index-82r6g4py.js";
 import"./index-3t0v457d.js";
 import"./index-8pabwzqg.js";
 import"./index-4knsp9qj.js";

package/dist/{index-zbv70qmk.js → index-h9vyd03z.js}

@@ -21,7 +21,7 @@ import {
 } from "./index-nd8v7r0z.js";
 import {
   cloneBrowserProfile
-} from "./index-5n05se68.js";
+} from "./index-hnvx7m1j.js";
 import {
   CONFIRM_LINE,
   acquireBrowser,

package/dist/{index-5n05se68.js → index-hnvx7m1j.js}

@@ -11,13 +11,15 @@ import {
   mkdirSync,
   openSync,
   readdirSync,
+  readlinkSync,
   readSync,
   realpathSync,
   rmSync,
   unlinkSync,
   writeSync
 } from "fs";
-import { homedir } from "os";
+import { spawnSync } from "child_process";
+import { homedir, hostname, tmpdir } from "os";
 import { basename, dirname, isAbsolute, join, resolve, sep } from "path";
 var profileSkipNames = new Set([
   "Cache",
@@ -185,15 +187,82 @@ function localStateEntry(path) {
     throw new BrowserProfileSnapshotError("Chromium Local State is unavailable or unsafe");
   }
 }
+var activeProfileMessage = "Chromium profile is active or retains a stale process lock; fully quit the browser and retry";
+function assertPidAbsent(pid) {
+  try {
+    process.kill(pid, 0);
+  } catch (error) {
+    if (typeof error === "object" && error !== null && "code" in error && error.code === "ESRCH")
+      return;
+  }
+  throw new BrowserProfileSnapshotError(activeProfileMessage);
+}
+function assertSocketUnavailable(path) {
+  const script = `const fs = require("node:fs");
+const net = require("node:net");
+const socket = net.createConnection({ path: fs.readFileSync(0, "utf8") });
+socket.setTimeout(500, () => { socket.destroy(); process.exit(1); });
+socket.once("connect", () => { socket.destroy(); process.exit(1); });
+socket.once("error", error => process.exit(error.code === "ENOENT" || error.code === "ECONNREFUSED" ? 0 : 1));`;
+  const result = spawnSync(process.execPath, ["--no-env-file", "--no-install", "--no-macros", "--no-addons", "--eval", script], {
+    input: path,
+    cwd: tmpdir(),
+    env: {},
+    timeout: 2000,
+    maxBuffer: 1024,
+    stdio: ["pipe", "pipe", "pipe"]
+  });
+  if (result.error || result.status !== 0)
+    throw new BrowserProfileSnapshotError(activeProfileMessage);
+}
 function assertChromiumUserDataIdle(userDataRoot) {
-  let names;
   try {
-    names = readdirSync(userDataRoot);
+    const root = lstatSync(userDataRoot);
+    if (!root.isDirectory() || root.isSymbolicLink() || root.uid !== process.getuid?.())
+      throw new Error;
+    const rootProof = { dev: root.dev, ino: root.ino, ctime: root.ctimeMs };
+    const names = readdirSync(userDataRoot).filter((name) => name.startsWith("Singleton") || name === "DevToolsActivePort").sort();
+    if (names.length === 0)
+      return JSON.stringify({ root: rootProof, locks: [] });
+    if (names.join(",") !== "SingletonCookie,SingletonLock,SingletonSocket")
+      throw new Error;
+    const proof = names.map((name) => {
+      const path = join(userDataRoot, name);
+      const entry = lstatSync(path);
+      if (!entry.isSymbolicLink() || entry.uid !== process.getuid?.())
+        throw new Error;
+      return { name, target: readlinkSync(path), dev: entry.dev, ino: entry.ino, ctime: entry.ctimeMs };
+    });
+    const lock = proof.find((entry) => entry.name === "SingletonLock").target;
+    const prefix = `${hostname()}-`;
+    if (!lock.startsWith(prefix) || !/^[1-9][0-9]*$/.test(lock.slice(prefix.length)))
+      throw new Error;
+    const pid = Number(lock.slice(prefix.length));
+    if (!Number.isSafeInteger(pid) || pid > 2147483647)
+      throw new Error;
+    const socket = proof.find((entry) => entry.name === "SingletonSocket").target;
+    if (!isAbsolute(socket) || resolve(socket) !== socket || basename(socket) !== "SingletonSocket" || !socket.startsWith(`${tmpdir()}${sep}`))
+      throw new Error;
+    if (!/^[0-9]{1,32}$/.test(proof.find((entry) => entry.name === "SingletonCookie").target))
+      throw new Error;
+    assertPidAbsent(pid);
+    assertSocketUnavailable(socket);
+    assertPidAbsent(pid);
+    const finalRoot = lstatSync(userDataRoot);
+    if (!sameEntry(root, finalRoot) || finalRoot.ctimeMs !== root.ctimeMs)
+      throw new Error;
+    const finalNames = readdirSync(userDataRoot).filter((name) => name.startsWith("Singleton") || name === "DevToolsActivePort").sort();
+    if (finalNames.join(",") !== names.join(","))
+      throw new Error;
+    for (const entry of proof) {
+      const path = join(userDataRoot, entry.name);
+      const current = lstatSync(path);
+      if (!current.isSymbolicLink() || current.dev !== entry.dev || current.ino !== entry.ino || current.ctimeMs !== entry.ctime || readlinkSync(path) !== entry.target)
+        throw new Error;
+    }
+    return JSON.stringify({ root: rootProof, locks: proof });
   } catch {
-    throw new BrowserProfileSnapshotError("Chromium user-data root could not be inspected");
-  }
-  if (names.some((name) => name.startsWith("Singleton") || name === "DevToolsActivePort")) {
-    throw new BrowserProfileSnapshotError("Chromium profile is active or retains a stale process lock; fully quit the browser and retry");
+    throw new BrowserProfileSnapshotError(activeProfileMessage);
   }
 }
 function copyBoundedLocalState(source, destination) {
@@ -289,7 +358,7 @@ function cloneBrowserProfile(source, privateDirectory) {
   if (stateEntry.size > maxLocalStateBytes) {
     throw new BrowserProfileSnapshotError("Chromium Local State exceeds its safety bound");
   }
-  assertChromiumUserDataIdle(userDataRoot);
+  const idleProof = assertChromiumUserDataIdle(userDataRoot);
   const userData = join(privateDirectory, "profile-user-data");
   mkdirSync(userData, { mode: 448 });
   chmodSync(userData, 448);
@@ -297,6 +366,9 @@ function cloneBrowserProfile(source, privateDirectory) {
   try {
     cloneProfile(selectedSource, selectedProfile);
     copyBoundedLocalState(localState, join(userData, "Local State"));
+    if (assertChromiumUserDataIdle(userDataRoot) !== idleProof) {
+      throw new BrowserProfileSnapshotError("Chromium profile lock changed while it was copied");
+    }
     return { userDataPath: userData, profileDirectory: "Default" };
   } catch (error) {
     rmSync(userData, { recursive: true, force: true });

package/dist/{index-8w1zsgcm.js → index-mp5y3ty3.js}

@@ -22,7 +22,7 @@ import {
 } from "./index-npg9z1a4.js";
 import {
   main
-} from "./index-zbv70qmk.js";
+} from "./index-h9vyd03z.js";
 import {
   advancedHelp,
   closestMatch,

package/dist/{support-ym4mpf7w.js → support-9qdr4hb8.js}

@@ -2,7 +2,7 @@
 import {
   parseArguments as parseArguments2,
   parseUrlMetadataArguments
-} from "./index-8w1zsgcm.js";
+} from "./index-mp5y3ty3.js";
 import"./index-5h5awwh4.js";
 import {
   parsePdfArguments
@@ -10,11 +10,11 @@ import {
 import"./index-9paxge84.js";
 import"./index-j4zgmzjr.js";
 import"./index-npg9z1a4.js";
-import"./index-zbv70qmk.js";
+import"./index-h9vyd03z.js";
 import"./index-hacpnaew.js";
 import"./index-k86wepd8.js";
 import"./index-nd8v7r0z.js";
-import"./index-5n05se68.js";
+import"./index-hnvx7m1j.js";
 import"./index-8pabwzqg.js";
 import"./index-ncwzmsge.js";
 import"./index-cd75vky9.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hraness/wordcell",
-  "version": "0.26.1",
+  "version": "0.26.2",
   "description": "Wordcell keeps decisions, plans, and sources as Markdown beside your code, so coding agents can find them from the file they are about to change.",
   "license": "MIT",
   "type": "module",

package/skills/wordcell/SKILL.md

@@ -58,7 +58,7 @@ missing:
 ```sh
 command -v wordcell >/dev/null 2>&1 || {
   command -v bun >/dev/null 2>&1 || exit 1
-  bun add --global --ignore-scripts https://github.com/hraness/wordcell/releases/download/v0.26.1/hraness-wordcell-0.26.1.tgz
+  bun add --global --ignore-scripts https://github.com/hraness/wordcell/releases/download/v0.26.2/hraness-wordcell-0.26.2.tgz
 }
 wordcell --help
 ```

package/src/clip/browser-profiles.ts

@@ -9,6 +9,7 @@ import {
   mkdirSync,
   openSync,
   readdirSync,
+  readlinkSync,
   readSync,
   realpathSync,
   rmSync,
@@ -16,7 +17,8 @@ import {
   unlinkSync,
   writeSync,
 } from "node:fs";
-import { homedir } from "node:os";
+import { spawnSync } from "node:child_process";
+import { homedir, hostname, tmpdir } from "node:os";
 import { basename, dirname, isAbsolute, join, resolve, sep } from "node:path";
 
 const profileSkipNames = new Set([
@@ -236,17 +238,67 @@ function localStateEntry(path: string): Stats | null {
   }
 }
 
-function assertChromiumUserDataIdle(userDataRoot: string): void {
-  let names: string[];
+const activeProfileMessage = "Chromium profile is active or retains a stale process lock; fully quit the browser and retry";
+
+function assertPidAbsent(pid: number): void {
   try {
-    names = readdirSync(userDataRoot);
-  } catch {
-    throw new BrowserProfileSnapshotError("Chromium user-data root could not be inspected");
+    process.kill(pid, 0);
+  } catch (error) {
+    if (typeof error === "object" && error !== null && "code" in error && error.code === "ESRCH") return;
   }
-  if (names.some((name) => name.startsWith("Singleton") || name === "DevToolsActivePort")) {
-    throw new BrowserProfileSnapshotError(
-      "Chromium profile is active or retains a stale process lock; fully quit the browser and retry",
-    );
+  throw new BrowserProfileSnapshotError(activeProfileMessage);
+}
+
+function assertSocketUnavailable(path: string): void {
+  const script = `const fs = require("node:fs");
+const net = require("node:net");
+const socket = net.createConnection({ path: fs.readFileSync(0, "utf8") });
+socket.setTimeout(500, () => { socket.destroy(); process.exit(1); });
+socket.once("connect", () => { socket.destroy(); process.exit(1); });
+socket.once("error", error => process.exit(error.code === "ENOENT" || error.code === "ECONNREFUSED" ? 0 : 1));`;
+  const result = spawnSync(process.execPath, ["--no-env-file", "--no-install", "--no-macros", "--no-addons", "--eval", script], {
+    input: path, cwd: tmpdir(), env: {}, timeout: 2000, maxBuffer: 1024, stdio: ["pipe", "pipe", "pipe"],
+  });
+  if (result.error || result.status !== 0) throw new BrowserProfileSnapshotError(activeProfileMessage);
+}
+
+function assertChromiumUserDataIdle(userDataRoot: string): string {
+  try {
+    const root = lstatSync(userDataRoot);
+    if (!root.isDirectory() || root.isSymbolicLink() || root.uid !== process.getuid?.()) throw new Error();
+    const rootProof = { dev: root.dev, ino: root.ino, ctime: root.ctimeMs };
+    const names = readdirSync(userDataRoot).filter((name) => name.startsWith("Singleton") || name === "DevToolsActivePort").sort();
+    if (names.length === 0) return JSON.stringify({ root: rootProof, locks: [] });
+    if (names.join(",") !== "SingletonCookie,SingletonLock,SingletonSocket") throw new Error();
+    const proof = names.map((name) => {
+      const path = join(userDataRoot, name);
+      const entry = lstatSync(path);
+      if (!entry.isSymbolicLink() || entry.uid !== process.getuid?.()) throw new Error();
+      return { name, target: readlinkSync(path), dev: entry.dev, ino: entry.ino, ctime: entry.ctimeMs };
+    });
+    const lock = proof.find((entry) => entry.name === "SingletonLock")!.target;
+    const prefix = `${hostname()}-`;
+    if (!lock.startsWith(prefix) || !/^[1-9][0-9]*$/.test(lock.slice(prefix.length))) throw new Error();
+    const pid = Number(lock.slice(prefix.length));
+    if (!Number.isSafeInteger(pid) || pid > 2147483647) throw new Error();
+    const socket = proof.find((entry) => entry.name === "SingletonSocket")!.target;
+    if (!isAbsolute(socket) || resolve(socket) !== socket || basename(socket) !== "SingletonSocket" || !socket.startsWith(`${tmpdir()}${sep}`)) throw new Error();
+    if (!/^[0-9]{1,32}$/.test(proof.find((entry) => entry.name === "SingletonCookie")!.target)) throw new Error();
+    assertPidAbsent(pid);
+    assertSocketUnavailable(socket);
+    assertPidAbsent(pid);
+    const finalRoot = lstatSync(userDataRoot);
+    if (!sameEntry(root, finalRoot) || finalRoot.ctimeMs !== root.ctimeMs) throw new Error();
+    const finalNames = readdirSync(userDataRoot).filter((name) => name.startsWith("Singleton") || name === "DevToolsActivePort").sort();
+    if (finalNames.join(",") !== names.join(",")) throw new Error();
+    for (const entry of proof) {
+      const path = join(userDataRoot, entry.name);
+      const current = lstatSync(path);
+      if (!current.isSymbolicLink() || current.dev !== entry.dev || current.ino !== entry.ino || current.ctimeMs !== entry.ctime || readlinkSync(path) !== entry.target) throw new Error();
+    }
+    return JSON.stringify({ root: rootProof, locks: proof });
+  } catch {
+    throw new BrowserProfileSnapshotError(activeProfileMessage);
   }
 }
 
@@ -356,7 +408,7 @@ export function cloneBrowserProfile(source: string, privateDirectory: string): C
   if (stateEntry.size > maxLocalStateBytes) {
     throw new BrowserProfileSnapshotError("Chromium Local State exceeds its safety bound");
   }
-  assertChromiumUserDataIdle(userDataRoot);
+  const idleProof = assertChromiumUserDataIdle(userDataRoot);
   const userData = join(privateDirectory, "profile-user-data");
   mkdirSync(userData, { mode: 0o700 });
   chmodSync(userData, 0o700);
@@ -364,6 +416,9 @@ export function cloneBrowserProfile(source: string, privateDirectory: string): C
   try {
     cloneProfile(selectedSource, selectedProfile);
     copyBoundedLocalState(localState, join(userData, "Local State"));
+    if (assertChromiumUserDataIdle(userDataRoot) !== idleProof) {
+      throw new BrowserProfileSnapshotError("Chromium profile lock changed while it was copied");
+    }
     return { userDataPath: userData, profileDirectory: "Default" };
   } catch (error) {
     rmSync(userData, { recursive: true, force: true });