@williambeto/ai-workflow 2.2.6 → 2.3.0

package/src/core/workspace/read-only-workspace.js

@@ -0,0 +1,119 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+import os from "node:os";
+import crypto from "node:crypto";
+
+async function copyDirectory(src, dest) {
+  const entries = await fs.readdir(src, { withFileTypes: true });
+  for (const entry of entries) {
+    if (entry.name === ".git" || entry.name === "node_modules" || entry.name === "tmp") {
+      continue;
+    }
+    const srcPath = path.join(src, entry.name);
+    const destPath = path.join(dest, entry.name);
+
+    if (entry.isDirectory()) {
+      await fs.mkdir(destPath, { recursive: true });
+      await copyDirectory(srcPath, destPath);
+    } else if (entry.isFile()) {
+      await fs.copyFile(srcPath, destPath);
+    }
+  }
+}
+
+async function captureHashSnapshot(dir) {
+  const snapshot = {};
+  await scanDir(dir, dir, snapshot);
+  return snapshot;
+}
+
+async function scanDir(baseDir, currentDir, snapshot) {
+  const entries = await fs.readdir(currentDir, { withFileTypes: true });
+  for (const entry of entries) {
+    if (entry.name === "opencode.jsonc" || entry.name === "node_modules" || entry.name === ".git" || entry.name === "EVIDENCE.json" || entry.name === "tmp") {
+      continue;
+    }
+    const fullPath = path.join(currentDir, entry.name);
+    const relPath = path.relative(baseDir, fullPath);
+
+    if (entry.isDirectory()) {
+      await scanDir(baseDir, fullPath, snapshot);
+    } else if (entry.isFile()) {
+      try {
+        const content = await fs.readFile(fullPath);
+        const hash = crypto.createHash("sha256").update(content).digest("hex");
+        snapshot[relPath] = hash;
+      } catch {
+        // ignore
+      }
+    }
+  }
+}
+
+/**
+ * Runs a function inside a temporary copy of the workspace.
+ * Mutating the workspace inside this temp directory will trigger a BLOCKED result.
+ */
+export async function runInReadOnlyWorkspace(originalCwd, runFn) {
+  const tempDir = await fs.mkdtemp(path.join(os.tmpdir(), "opencode-ro-"));
+  
+  try {
+    // 1. Copy repository files recursively (excluding git/node_modules/tmp)
+    await copyDirectory(originalCwd, tempDir);
+
+    // 2. Write the required opencode.jsonc permission config file
+    const opencodeConfig = {
+      permission: {
+        edit: "deny",
+        external_directory: "deny",
+        bash: {
+          "*": "deny",
+          "git status*": "allow",
+          "git diff*": "allow",
+          "git log*": "allow",
+          "grep *": "allow",
+          "find *": "allow"
+        }
+      }
+    };
+    await fs.writeFile(
+      path.join(tempDir, "opencode.jsonc"),
+      JSON.stringify(opencodeConfig, null, 2)
+    );
+
+    // 3. Capture initial file hash snapshot
+    const snapshotBefore = await captureHashSnapshot(tempDir);
+
+    // 4. Execute the callback function inside the temp directory
+    const runResult = await runFn(tempDir);
+
+    // 5. Capture post-run snapshot and verify no file mutations occurred
+    const snapshotAfter = await captureHashSnapshot(tempDir);
+
+    const mutated = [];
+    for (const [file, hash] of Object.entries(snapshotAfter)) {
+      if (snapshotBefore[file] !== hash) {
+        mutated.push(file);
+      }
+    }
+    for (const file of Object.keys(snapshotBefore)) {
+      if (snapshotAfter[file] === undefined) {
+        mutated.push(file);
+      }
+    }
+
+    if (mutated.length > 0) {
+      return {
+        success: false,
+        error: `Read-only confinement violation: mutating changes detected inside temporary workspace: ${mutated.join(", ")}`,
+        commandsRun: runResult.commandsRun || [],
+        eventCount: runResult.eventCount || 0
+      };
+    }
+
+    return runResult;
+  } finally {
+    // 6. Delete the temporary workspace copy
+    await fs.rm(tempDir, { recursive: true, force: true }).catch(() => {});
+  }
+}