@triflux/core 10.77.0 → 10.79.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@triflux/core",
-  "version": "10.77.0",
+  "version": "10.79.0",
   "description": "triflux core — CLI routing, adapters. Zero native dependencies.",
   "type": "module",
   "main": "hub/index.mjs",

package/scripts/lib/native-peer-permissions.mjs

@@ -112,12 +112,12 @@ function trustedPackageTree(packageRoot, nodePath, tmuxPath) {
     !existing(resolvedNode)?.isFile()
   )
     return false;
+  // Homebrew prefix는 git 저장소일 수 있으므로 node_modules까지만 검사한다.
   let ancestor = packageRoot;
   while (true) {
     if (existing(path.join(ancestor, ".git"))) return false;
-    const parent = path.dirname(ancestor);
-    if (parent === ancestor) break;
-    ancestor = parent;
+    if (ancestor === path.dirname(packageRoot)) break;
+    ancestor = path.dirname(ancestor);
   }
   const stack = [packageRoot];
   while (stack.length) {
@@ -125,6 +125,7 @@ function trustedPackageTree(packageRoot, nodePath, tmuxPath) {
     const meta = existing(current);
     if (
       !meta ||
+      path.basename(current).toLowerCase() === ".git" ||
       meta.isSymbolicLink() ||
       ![0, process.getuid()].includes(meta.uid) ||
       (meta.mode & 0o002) !== 0
@@ -232,8 +233,8 @@ export function inspectPeerPermission({
   tmuxPath,
   platform = process.platform,
 } = {}) {
+  if (platform === "win32") return { status: "unsupported" };
   const plan = peerPermissionPlan({ home, packageRoot, nodePath, tmuxPath });
-  if (platform === "win32") return { status: "unsupported", plan };
   const effectiveNodePath = nodePath || resolveStableNodeBin();
   if (
     !trustedPackageTree(
@@ -334,12 +335,9 @@ export function installPeerPermission({
     platform,
   });
   const { plan, status } = inspected;
+  if (status === "unsupported") return { status, changed: false };
   if (status === "approved") return { status: "approved", changed: false };
-  if (
-    status === "conflict" ||
-    status === "unavailable" ||
-    status === "unsupported"
-  )
+  if (status === "conflict" || status === "unavailable")
     return {
       status,
       changed: false,
@@ -502,8 +500,10 @@ export async function offerPeerPermission({
     tmuxPath,
     platform,
   });
-  if (state.status === "unsupported")
+  if (state.status === "unsupported") {
+    notice("Windows 는 자동 승인 없이 tfx-peer 를 직접 실행한다");
     return { status: "unsupported", changed: false };
+  }
   if (state.status === "approved")
     return { status: "approved", changed: false };
   if (fromUpdate) {

package/scripts/lib/native-peer-windows.mjs

@@ -0,0 +1,137 @@
+import { execFileSync } from "node:child_process";
+
+const WINDOWS_POWERSHELL = String.raw`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe`;
+
+function windowsPowerShellEnv() {
+  // PowerShell 7의 모듈 경로를 빼서 Windows PowerShell 5.1이 기본값을 복원하게 한다.
+  return Object.fromEntries(
+    Object.entries(process.env).filter(([key]) =>
+      ["systemroot", "windir", "temp", "tmp", "userprofile"].includes(
+        key.toLowerCase(),
+      ),
+    ),
+  );
+}
+
+export function readWindowsPeerState(
+  files,
+  { pids = [], execFile = execFileSync } = {},
+) {
+  if (!files.length && !pids.length)
+    return { acls: new Map(), procStarts: new Map() };
+  const script = `
+$ErrorActionPreference = 'Stop'
+[Console]::InputEncoding = [Text.UTF8Encoding]::new($false)
+[Console]::OutputEncoding = [Text.UTF8Encoding]::new($false)
+$request = ConvertFrom-Json ([Console]::In.ReadToEnd())
+$userSid = [System.Security.Principal.WindowsIdentity]::GetCurrent().User.Value
+$acls = @(foreach ($p in $request.paths) {
+  try {
+    $item = if ([System.IO.Directory]::Exists($p)) { [System.IO.DirectoryInfo]::new($p) } else { [System.IO.FileInfo]::new($p) }
+    $acl = $item.GetAccessControl()
+    [pscustomobject]@{
+      path = $p
+      userSid = $userSid
+      ownerSid = $acl.GetOwner([System.Security.Principal.SecurityIdentifier]).Value
+      reparsePoint = [bool]($item.Attributes -band [IO.FileAttributes]::ReparsePoint)
+      access = @(foreach ($rule in $acl.GetAccessRules($true, $true, [System.Security.Principal.SecurityIdentifier])) {
+        [pscustomobject]@{
+          sid = $rule.IdentityReference.Value
+          rights = [long]$rule.FileSystemRights
+          type = $rule.AccessControlType.ToString()
+          inheritanceFlags = [int]$rule.InheritanceFlags
+          propagationFlags = [int]$rule.PropagationFlags
+        }
+      })
+    }
+  } catch {
+    [pscustomobject]@{ path = $p; error = $_.Exception.Message }
+  }
+})
+$processes = @(foreach ($processId in $request.pids) {
+  try {
+    $start = [System.Diagnostics.Process]::GetProcessById($processId).StartTime.ToFileTimeUtc().ToString([Globalization.CultureInfo]::InvariantCulture)
+    [pscustomobject]@{ pid = $processId; procStart = $start }
+  } catch {
+    [pscustomobject]@{ pid = $processId; error = $_.Exception.Message }
+  }
+})
+ConvertTo-Json -InputObject @{ acls = $acls; processes = $processes } -Depth 5 -Compress
+`;
+  const rows = JSON.parse(
+    execFile(
+      WINDOWS_POWERSHELL,
+      ["-NoProfile", "-NonInteractive", "-Command", script],
+      {
+        input: JSON.stringify({ paths: files, pids }),
+        encoding: "utf8",
+        timeout: 10000,
+        maxBuffer: 32 * 1024 * 1024,
+        windowsHide: true,
+        env: windowsPowerShellEnv(),
+      },
+    ),
+  );
+  if (!Array.isArray(rows.acls) || !Array.isArray(rows.processes))
+    throw new Error("Invalid Windows peer response");
+  return {
+    acls: new Map(
+      rows.acls
+        .filter((row) => !Object.hasOwn(row, "error"))
+        .map((row) => [row.path, row]),
+    ),
+    procStarts: new Map(
+      rows.processes
+        .filter(
+          (row) =>
+            !Object.hasOwn(row, "error") &&
+            typeof row.procStart === "string" &&
+            /^\d+$/.test(row.procStart),
+        )
+        .map((row) => [row.pid, row.procStart]),
+    ),
+  };
+}
+
+export function readWindowsAcls(files, options) {
+  return readWindowsPeerState(files, options).acls;
+}
+
+export function assertWindowsAcl(acl, kind, { privateMode = true } = {}) {
+  const trusted = new Set([acl?.userSid, "S-1-5-18", "S-1-5-32-544"]);
+  // 개별 쓰기·삭제·ACL 변경과 generic write/all을 함께 거른다.
+  const writes =
+    0x2 |
+    0x4 |
+    0x10 |
+    0x40 |
+    0x100 |
+    0x10000 |
+    0x40000 |
+    0x80000 |
+    0x40000000 |
+    0x10000000;
+  if (
+    !/^S-1-\d+(?:-\d+)+$/.test(acl?.userSid || "") ||
+    !trusted.has(acl.ownerSid) ||
+    acl.reparsePoint !== false ||
+    !Array.isArray(acl.access) ||
+    !acl.access.length ||
+    acl.access.some(
+      (ace) =>
+        !/^S-1-\d+(?:-\d+)+$/.test(ace.sid || "") ||
+        !["Allow", "Deny"].includes(ace.type) ||
+        !Number.isInteger(ace.rights) ||
+        ace.rights < -2147483648 ||
+        ace.rights > 0xffffffff ||
+        (ace.type === "Allow" &&
+          !(
+            Number.isInteger(ace.propagationFlags) &&
+            (ace.propagationFlags & 2) !== 0
+          ) &&
+          !trusted.has(ace.sid) &&
+          (privateMode || (ace.rights & writes) !== 0)),
+    )
+  )
+    throw new Error(`Unsafe ${kind}`);
+}