@volter/teams 0.2.42 → 0.2.44

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/teams",
-  "version": "0.2.42",
+  "version": "0.2.44",
   "type": "module",
   "description": "Volter Teams, the neutral team plane: machine identity and daemon core, the local door and server link, admission from machine grants, product doors, and the Teams server's neutral routes (company RFC 0008).",
   "license": "MIT",

package/redact.mjs

@@ -134,23 +134,29 @@ const anyKeyword = new RegExp([...new Set(RULES.flatMap((rule) => rule.keywords)
 const CUSTODY_LOOK_MS = 30_000;
 let custodyCache = null, custodyStamp = null, custodyLookedAt = 0;
 const stampOf = (file) => { try { const s = statSync(file); return `${s.ino}:${s.size}:${s.mtimeMs}`; } catch { return '-'; } };
-function custodyFiles(env) {
+const custodyUnreadable=()=>Object.assign(new Error('a declared custody file or its registry could not be read; capture transfer refused'),{code:'custody_unreadable'});
+function custodyFiles(env, fresh) {
   const home = env.SUPERCODE_HOME || join(env.XDG_CONFIG_HOME || join(homedir(), '.config'), 'supercode');
   let files = String(env.SUPERCODE_CUSTODY_FILES ?? '').split(delimiter).filter(Boolean);
-  try { files = files.concat(JSON.parse(readFileSync(join(home, 'custody.json'), 'utf8')).files ?? []); } catch { /* none named */ }
+  try {
+    const named=JSON.parse(readFileSync(join(home, 'custody.json'), 'utf8')).files??[];
+    if(fresh&&(!Array.isArray(named)||named.some(file=>typeof file!=='string')))throw custodyUnreadable();
+    files=files.concat(named);
+  } catch(error) { if(fresh&&error?.code!=='ENOENT')throw custodyUnreadable(); }
   return { files, stamp: [join(home, 'custody.json'), ...files].map(stampOf).join('|') };
 }
-/** Each custody value (at least 8 characters) with the variable that holds it, longest first. */
-export function custodyValues(env = process.env) {
+/** Each custody value (at least 8 characters) with the variable that holds it, longest first. `fresh` bypasses both
+ * the interval and stat memo and refuses unreadable declared files or a malformed/unreadable registry. */
+export function custodyValues(env = process.env, { fresh = false } = {}) {
   const now = Date.now();
-  if (custodyCache && now - custodyLookedAt < CUSTODY_LOOK_MS) return custodyCache;
+  if (!fresh && custodyCache && now - custodyLookedAt < CUSTODY_LOOK_MS) return custodyCache;
   custodyLookedAt = now;
-  const { files, stamp } = custodyFiles(env);
-  if (custodyCache && stamp === custodyStamp) return custodyCache;
+  const { files, stamp } = custodyFiles(env, fresh);
+  if (!fresh && custodyCache && stamp === custodyStamp) return custodyCache;
   custodyStamp = stamp;
   const values = new Map();
   for (const file of files) {
-    let text = ''; try { if (existsSync(file)) text = readFileSync(file, 'utf8'); } catch { continue; }
+    let text = ''; try { if (fresh||existsSync(file)) text = readFileSync(file, 'utf8'); } catch { if(fresh)throw custodyUnreadable();continue; }
     for (const line of text.split('\n')) {
       const m = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/.exec(line);
       if (!m) continue;
@@ -169,7 +175,12 @@ export function custodyValues(env = process.env) {
 let custodyBasis = null;
 /** What a redaction was made under (the rule set and the custody values), as a digest: text found clean under one
  * basis is clean under it again, and needs another look only when it changes. */
-export function redactionBasis(env = process.env) { custodyValues(env); return custodyBasis; }
+export function redactionBasis(env = process.env, options) { custodyValues(env, options); return custodyBasis; }
+/** One custody observation and its basis, for a batch that must not change policy between its values. */
+export function redactionSnapshot(env = process.env, options) {
+  const values = custodyValues(env, options);
+  return { values, basis: custodyBasis };
+}
 
 // Text this far either side of a keyword is searched by a bounded rule, beyond its longest match.
 const WINDOW_MARGIN = 256;
@@ -184,12 +195,12 @@ function keywordSpans(hits, length, keywords, reach) {
 }
 
 /** `text` with every secret replaced by its marker. */
-export function redactText(text, env = process.env) {
+export function redactText(text, env = process.env, custody) {
   if (typeof text !== 'string' || text.length < 8) return text;
   let out = text;
   // Custody values are random, so one alternation of them gives the regex engine nothing to skip on: each is looked
   // for on its own, which reads a 5 MB text in a few dozen milliseconds.
-  for (const { value, name } of custodyValues(env)) if (out.includes(value)) out = out.split(value).join(`[redacted:${name}]`);
+  for (const { value, name } of custody ?? custodyValues(env)) if (out.includes(value)) out = out.split(value).join(`[redacted:${name}]`);
   if (/(?:sct|sci|sca|sat|whsec)_/.test(out)) out = out.replace(TEAM_TOKENS, (_, kind, hook) => `[redacted:teams-${kind ?? hook}-token]`);
   // Every rule has keywords, so a text holding none of them is done (the one test is cheap; finding where each keyword
   // occurs is not, and most texts are short and hold none).
@@ -220,9 +231,9 @@ export function redactText(text, env = process.env) {
 }
 
 /** A JSON value with every string in it redacted (keys kept). */
-export function redactValue(value, env = process.env) {
-  if (typeof value === 'string') return redactText(value, env);
-  if (Array.isArray(value)) return value.map((item) => redactValue(item, env));
-  if (value && typeof value === 'object') return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, redactValue(item, env)]));
+export function redactValue(value, env = process.env, custody) {
+  if (typeof value === 'string') return redactText(value, env, custody);
+  if (Array.isArray(value)) return value.map((item) => redactValue(item, env, custody));
+  if (value && typeof value === 'object') return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, redactValue(item, env, custody)]));
   return value;
 }