@optimuslabs/harness-map-staging 1.5.39 → 1.5.40

package/dist/log_config_files/runtime/management_storage.js

@@ -2,7 +2,8 @@
  * Paths and JSON persistence for ~/.optimuslabs/management:
  * - remediation_instructions.json (remediations[])
  */
-import { existsSync, mkdirSync, readFileSync, renameSync, statSync, writeFileSync } from 'node:fs';
+import { randomBytes } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { homedir } from 'node:os';
 import { OPTIMUSLABS_MANAGEMENT_REL, OPTIMUSLABS_LOGS_REL } from '../../bootstrap_constants.js';
@@ -123,13 +124,23 @@ export function writeFileCollectionVscdbContract(contract) {
         return;
     atomicWriteJson(getFileCollectionVscdbContractPath(), sanitized);
 }
+/**
+ * Write `data` as JSON to `filePath` in one step: to a temporary file of this write's own, then a
+ * rename. Two hooks writing at once (two Claude Code windows, the gate and the compliance runner)
+ * each use their own temporary file, so neither can rename the other's half-written one into place.
+ */
 export function atomicWriteJson(filePath, data) {
     const dir = dirname(filePath);
     if (!existsSync(dir))
         mkdirSync(dir, { recursive: true, mode: 0o700 });
-    const tmp = `${filePath}.tmp`;
-    writeFileSync(tmp, JSON.stringify(data, null, 2), 'utf8');
-    renameSync(tmp, filePath);
+    const tmp = `${filePath}.${process.pid}.${randomBytes(4).toString('hex')}.tmp`;
+    try {
+        writeFileSync(tmp, JSON.stringify(data, null, 2), 'utf8');
+        renameSync(tmp, filePath);
+    }
+    finally {
+        rmSync(tmp, { force: true });
+    }
 }
 function parseInstructionsRaw(raw) {
     try {

package/dist/log_config_files/runtime/skill_block_sessions.js

@@ -16,11 +16,16 @@ import { basename } from 'node:path';
 import { atomicWriteJson, getSkillBlockProcessesPath, readRemediationInstructionsFile, } from './management_storage.js';
 import { launchAgentAccessWindow } from '../../agent_access/window_runner.js';
 import { quarantinedAt } from './skill_block.js';
-/** A process's parent, start time and command name, from `ps`; null when it cannot be read. */
-function processRow(pid) {
+/**
+ * A process's parent, start time and command name, from `ps`; null when it cannot be read. `ps`
+ * writes the start time in the user's language ("Do.  5 Nov." in German), which the pattern below
+ * cannot read, so it runs in the C locale.
+ */
+export function processRow(pid) {
     try {
+        const options = { encoding: 'utf8', env: { ...process.env, LC_ALL: 'C' } };
         // A fixed command, no shell, and a process id that is always a number.
-        const out = execFileSync('ps', ['-o', 'ppid=,lstart=,comm=', '-p', String(pid)], { encoding: 'utf8' }).trim(); // nosafe: SAFE801
+        const out = execFileSync('ps', ['-o', 'ppid=,lstart=,comm=', '-p', String(pid)], options).trim(); // nosafe: SAFE801
         const row = out.match(/^(\d+)\s+(\S+\s+\S+\s+\d+\s+[\d:]+\s+\d+)\s+(.*)$/);
         return row ? { parent: Number(row[1]), startedAt: Date.parse(row[2]), name: basename(row[3]).toLowerCase() } : null;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@optimuslabs/harness-map-staging",
-  "version": "1.5.39",
+  "version": "1.5.40",
   "description": "CLI helpers for logging hardware UUIDs and posting startup payloads to Optimus Security.",
   "type": "module",
   "bin": {