@ouro.bot/cli 0.1.0-alpha.808 → 0.1.0-alpha.809

package/changelog.json

@@ -1,6 +1,12 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.809",
+      "changes": [
+        "D-004: keep native device/inode checks exact for large filesystem identities in confined session transactions and private repair artifacts."
+      ]
+    },
     {
       "version": "0.1.0-alpha.808",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.808",
+  "runtimeVersion": "0.1.0-alpha.809",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.808</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.809</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/heart/session-redaction-repair.js

@@ -92,7 +92,7 @@ function directoryChain(directory) {
         parts.push(current);
     }
     return parts.map((file) => {
-        const stat = fs.lstatSync(file);
+        const stat = fs.lstatSync(file, { bigint: true });
         if (!stat.isDirectory() || stat.isSymbolicLink())
             refuse("directory symlink or type mismatch");
         return { path: file, dev: stat.dev, ino: stat.ino };
@@ -100,14 +100,14 @@ function directoryChain(directory) {
 }
 function checkDirectories(pin) {
     for (const entry of pin) {
-        const stat = fs.lstatSync(entry.path);
+        const stat = fs.lstatSync(entry.path, { bigint: true });
         if (!stat.isDirectory() || stat.isSymbolicLink() || !sameInode(entry, stat))
             refuse("directory identity changed");
     }
 }
 function privateDirectory(directory) {
     const pin = directoryChain(directory);
-    if ((fs.lstatSync(directory).mode & 0o777) !== 0o700)
+    if ((fs.lstatSync(directory, { bigint: true }).mode & 511n) !== 448n)
         refuse("artifact directory must have mode 0700");
     return pin;
 }
@@ -115,12 +115,12 @@ function privateFile(file, label, limit) {
     if (!path.isAbsolute(file) || path.resolve(file) !== file)
         refuse("noncanonical file path");
     directoryChain(path.dirname(file));
-    const stat = fs.lstatSync(file);
+    const stat = fs.lstatSync(file, { bigint: true });
     if (!stat.isFile() || stat.isSymbolicLink())
         refuse(`${label} must be a regular file`);
-    if ((stat.mode & 0o777) !== 0o600)
+    if ((stat.mode & 511n) !== 384n)
         refuse(`${label} must have mode 0600`);
-    if (stat.size > limit)
+    if (stat.size > BigInt(limit))
         refuse(`${label} exceeds ${limit / (1024 * 1024)} MiB`);
     return stat;
 }
@@ -129,12 +129,12 @@ function readArtifact(file, label, limit) {
     const original = privateFile(file, label, limit);
     const fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);
     try {
-        const opened = fs.fstatSync(fd);
-        if (!opened.isFile() || !sameInode(original, opened) || (opened.mode & 0o777) !== 0o600 || opened.size > limit)
+        const opened = fs.fstatSync(fd, { bigint: true });
+        if (!opened.isFile() || !sameInode(original, opened) || (opened.mode & 511n) !== 384n || opened.size > BigInt(limit))
             refuse("artifact identity changed");
         const bytes = fs.readFileSync(fd);
         checkDirectories(pin);
-        if (bytes.length > limit || !sameInode(opened, fs.lstatSync(file)))
+        if (bytes.length > limit || !sameInode(opened, fs.lstatSync(file, { bigint: true })))
             refuse("artifact changed during read");
         return bytes;
     }
@@ -326,7 +326,7 @@ function publishArtifacts(directory, artifacts) {
     const pin = privateDirectory(directory);
     for (const artifact of artifacts) {
         try {
-            fs.lstatSync(artifact.path);
+            fs.lstatSync(artifact.path, { bigint: true });
             refuse("final artifact already exists");
         }
         catch (error) {
@@ -342,7 +342,7 @@ function publishArtifacts(directory, artifacts) {
             created.push(record);
             const fd = fs.openSync(record.temporary, fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_EXCL | fs.constants.O_NOFOLLOW, 0o600);
             try {
-                record.identity = fs.fstatSync(fd);
+                record.identity = fs.fstatSync(fd, { bigint: true });
                 fs.writeFileSync(fd, artifact.bytes);
                 fs.fsyncSync(fd);
             }
@@ -369,8 +369,8 @@ function publishArtifacts(directory, artifacts) {
             checkDirectories(pin);
             const readFd = fs.openSync(record.final, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);
             try {
-                const stat = fs.fstatSync(readFd);
-                if (!stat.isFile() || !sameInode(record.identity, stat) || (stat.mode & 0o777) !== 0o600 || stat.size !== artifact.bytes.length
+                const stat = fs.fstatSync(readFd, { bigint: true });
+                if (!stat.isFile() || !sameInode(record.identity, stat) || (stat.mode & 511n) !== 384n || stat.size !== BigInt(artifact.bytes.length)
                     || sha(fs.readFileSync(readFd)) !== sha(artifact.bytes))
                     refuse("published artifact identity or hash mismatch");
             }
@@ -385,7 +385,7 @@ function publishArtifacts(directory, artifacts) {
                 continue;
             try {
                 checkDirectories(pin);
-                const current = fs.lstatSync(record.final);
+                const current = fs.lstatSync(record.final, { bigint: true });
                 if (current.isFile() && !current.isSymbolicLink() && sameInode(current, record.identity))
                     fs.unlinkSync(record.final);
             }
@@ -401,7 +401,7 @@ function publishArtifacts(directory, artifacts) {
                 continue;
             try {
                 checkDirectories(pin);
-                const current = fs.lstatSync(record.temporary);
+                const current = fs.lstatSync(record.temporary, { bigint: true });
                 if (current.isFile() && !current.isSymbolicLink() && sameInode(current, record.identity))
                     fs.unlinkSync(record.temporary);
             }

package/dist/mind/session-transaction.js

@@ -101,7 +101,7 @@ function refuseConfinement() {
 function confinedFile(filePath) {
     let stat;
     try {
-        stat = fs.lstatSync(filePath);
+        stat = fs.lstatSync(filePath, { bigint: true });
     }
     catch (error) {
         if (error?.code === "ENOENT")
@@ -118,7 +118,7 @@ function checkConfinement(pin) {
     for (const directory of pin.directories) {
         let stat;
         try {
-            stat = fs.lstatSync(directory.path);
+            stat = fs.lstatSync(directory.path, { bigint: true });
         }
         catch {
             return refuseConfinement();
@@ -149,7 +149,7 @@ function pinConfinement(sessionPath, root) {
     const directories = paths.map((directory) => {
         let stat;
         try {
-            stat = fs.lstatSync(directory);
+            stat = fs.lstatSync(directory, { bigint: true });
         }
         catch {
             return refuseConfinement();
@@ -498,7 +498,7 @@ function writeSessionTransaction(sessionPath, value, options) {
     try {
         fd = fs.openSync(tempPath, "wx", 0o600);
         if (confinement)
-            temporaryIdentity = fs.fstatSync(fd);
+            temporaryIdentity = fs.fstatSync(fd, { bigint: true });
         fs.writeFileSync(fd, bytes, "utf8");
         fs.fsyncSync(fd);
         fs.closeSync(fd);

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.808",
+  "version": "0.1.0-alpha.809",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.808",
+      "version": "0.1.0-alpha.809",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.808",
+  "version": "0.1.0-alpha.809",
   "engines": {
     "node": ">=22"
   },