@peac/cli 0.14.1 → 0.14.3

package/dist/index.mjs

@@ -3,12 +3,12 @@ import { Command, CommanderError, Option } from 'commander';
 import { verifyReceipt, fetchIssuerConfig, parseIssuerConfig, issue, IssueError } from '@peac/protocol';
 import { generateKeypair, base64urlEncode, sign, decode, canonicalize, sha256Hex as sha256Hex$1, validateKeypair, base64urlDecode, derivePublicKey } from '@peac/crypto';
 import * as fs6 from 'fs';
-import { existsSync, readFileSync, writeFileSync, statSync, openSync, constants, closeSync, unlinkSync, createReadStream } from 'fs';
+import { writeFileSync, existsSync, readFileSync, openSync, constants, fstatSync, closeSync, statSync, unlinkSync, createReadStream } from 'fs';
 import * as path6 from 'path';
 import { join, resolve, dirname, delimiter } from 'path';
 import { loadProfile, serializePolicyJson, serializePolicyYaml, ProfileError, createExamplePolicy, loadPolicy, PolicyValidationError, PolicyLoadError, compilePeacTxt, compileRobotsSnippet, compileAiprefTemplates, renderPolicyMarkdown, explainMatches, evaluate, listProfiles, getProfileSummary, parsePolicyDocument } from '@peac/policy-kit';
-import { execSync, spawn } from 'child_process';
 import { createHash, randomBytes } from 'crypto';
+import { execSync, spawn } from 'child_process';
 import { LIFECYCLE_OBSERVATION_TYPE_URIS, computeReceiptRef, CLI_EXECUTION_EXTENSION_KEY, CLI_COMMAND_EXECUTION_TYPE, validateLifecycleObservation, LIFECYCLE_OBSERVATION_EXTENSION_KEY, validateWorkflowContextOrdered, isValidPurposeToken, isCanonicalPurpose, validateObligationsExtension, validateInteractionOrdered, validateDisputeAttestation, validateAttributionAttestation, validateAgentIdentityAttestation, ReceiptClaimsSchema, CliExecutionSchema, isCanonicalIss, parseReceiptClaims, OpaqueRefSchema } from '@peac/schema';
 import { POLICY } from '@peac/kernel';
 import { readDisputeBundle } from '@peac/audit';
@@ -16,6 +16,55 @@ import { createRequire } from 'module';
 import chalk from 'chalk';
 import { readFile } from 'fs/promises';
 
+function readFileBufferSnapshot(path9, options) {
+  let fd;
+  try {
+    fd = openSync(path9, constants.O_RDONLY);
+    const stat = fstatSync(fd);
+    if (stat.isDirectory()) {
+      throw makeErrnoError("EISDIR", `is a directory: ${path9}`);
+    }
+    if (options?.maxBytes !== void 0 && stat.size > options.maxBytes) {
+      throw makeFileTooLargeError(path9, stat.size, options.maxBytes);
+    }
+    const data = readFileSync(fd);
+    if (options?.maxBytes !== void 0 && data.length > options.maxBytes) {
+      throw makeFileTooLargeError(path9, data.length, options.maxBytes);
+    }
+    return data;
+  } finally {
+    if (fd !== void 0) {
+      try {
+        closeSync(fd);
+      } catch {
+      }
+    }
+  }
+}
+function makeFileTooLargeError(path9, actualSize, maxBytes) {
+  const err = new Error(
+    `file size ${actualSize} bytes exceeds limit ${maxBytes} bytes: ${path9}`
+  );
+  err.code = "E_PEAC_FILE_TOO_LARGE";
+  err.actualSize = actualSize;
+  err.maxBytes = maxBytes;
+  return err;
+}
+function writeFileNoOverwrite(path9, data, options) {
+  const encoding = typeof data === "string" ? options?.encoding : null;
+  writeFileSync(path9, data, {
+    encoding,
+    flag: "wx",
+    mode: options?.mode
+  });
+}
+function makeErrnoError(code, message) {
+  const err = new Error(message);
+  err.code = code;
+  return err;
+}
+
+// src/commands/policy.ts
 function getGlobalOptions(cmd) {
   const parent = cmd.parent;
   if (!parent) return {};
@@ -40,14 +89,6 @@ policy.command("init").description("Create a new PEAC policy file").option("-f,
     try {
       const format = options.format?.toLowerCase() || "yaml";
       const outputPath = options.output || (format === "json" ? "peac-policy.json" : "peac-policy.yaml");
-      if (fs6.existsSync(outputPath) && !options.force && !globalOpts.yes) {
-        outputError(
-          `File already exists: ${outputPath}`,
-          { path: outputPath, hint: "Use --force or --yes to overwrite" },
-          globalOpts
-        );
-        process.exit(1);
-      }
       let content;
       let policyName;
       if (options.profile) {
@@ -68,7 +109,24 @@ policy.command("init").description("Create a new PEAC policy file").option("-f,
         content = format === "json" ? serializePolicyJson(example) : serializePolicyYaml(example);
         policyName = "Example Policy";
       }
-      fs6.writeFileSync(outputPath, content, "utf-8");
+      const allowOverwrite = options.force === true || globalOpts.yes === true;
+      try {
+        if (allowOverwrite) {
+          fs6.writeFileSync(outputPath, content, { encoding: "utf-8", flag: "w" });
+        } else {
+          writeFileNoOverwrite(outputPath, content, { encoding: "utf-8" });
+        }
+      } catch (err) {
+        if (err.code === "EEXIST") {
+          outputError(
+            `File already exists: ${outputPath}`,
+            { path: outputPath, hint: "Use --force or --yes to overwrite" },
+            globalOpts
+          );
+          process.exit(1);
+        }
+        throw err;
+      }
       if (globalOpts.json) {
         output(
           {
@@ -484,7 +542,6 @@ policy.command("show-profile").description("Show details of a specific policy pr
   const globalOpts = getGlobalOptions(cmd);
   try {
     const profile = loadProfile(id);
-    const summary = getProfileSummary(id);
     if (globalOpts.json) {
       output(
         {
@@ -2359,20 +2416,37 @@ function findDiffFields(jwsA, jwsB) {
   return diffs.sort();
 }
 async function readBundle(bundlePath, label) {
-  if (!fs6.existsSync(bundlePath)) {
-    return { ok: false, error: `Bundle file not found: ${bundlePath}` };
-  }
-  const stat = fs6.statSync(bundlePath);
-  if (stat.size > MAX_BUNDLE_SIZE) {
-    return { ok: false, error: `Bundle ${label} exceeds 16 MB size limit (${stat.size} bytes)` };
+  let resolved;
+  try {
+    resolved = fs6.realpathSync(bundlePath);
+  } catch (err) {
+    if (err.code === "ENOENT") {
+      return { ok: false, error: `Bundle file not found: ${bundlePath}` };
+    }
+    return { ok: false, error: `Failed to read ${label}: ${err.message}` };
   }
-  const resolved = fs6.realpathSync(bundlePath);
   if (resolved !== bundlePath && !resolved.startsWith(process.cwd())) {
-    if (!fs6.existsSync(resolved)) {
-      return { ok: false, error: `Path traversal detected for ${label}` };
+    return { ok: false, error: `Path traversal detected for ${label}` };
+  }
+  let zipBuffer;
+  try {
+    zipBuffer = readFileBufferSnapshot(bundlePath, { maxBytes: MAX_BUNDLE_SIZE });
+  } catch (err) {
+    const e = err;
+    if (e.code === "ENOENT") {
+      return { ok: false, error: `Bundle file not found: ${bundlePath}` };
+    }
+    if (e.code === "EISDIR") {
+      return { ok: false, error: `Bundle ${label} is not a regular file: ${bundlePath}` };
     }
+    if (e.code === "E_PEAC_FILE_TOO_LARGE") {
+      return {
+        ok: false,
+        error: `Bundle ${label} exceeds 16 MB size limit (${e.actualSize ?? "unknown"} bytes)`
+      };
+    }
+    return { ok: false, error: `Failed to read ${label}: ${err.message}` };
   }
-  const zipBuffer = fs6.readFileSync(bundlePath);
   const result = await readDisputeBundle(zipBuffer);
   if (!result.ok) {
     return { ok: false, error: `Failed to read ${label}: ${result.error.message}` };
@@ -4731,7 +4805,7 @@ program.command("verify").description("Verify a PEAC receipt JWS").argument("<jw
       jws = fs6.readFileSync(jwsInput, "utf-8").trim();
     }
     console.log("Verifying PEAC receipt...\n");
-    const { header, payload } = decode(jws);
+    const { payload } = decode(jws);
     console.log("Receipt Information:");
     console.log(`   Receipt ID: ${payload.rid}`);
     console.log(`   Issuer:     ${payload.iss}`);