@wrongstack/core 0.8.6 → 0.9.0

package/dist/kernel/index.d.ts

@@ -1,6 +1,6 @@
 export { B as BindOptions, C as Container, D as Decorator, F as Factory, M as Middleware, b as MiddlewareHandler, N as NextFn, P as Pipeline, d as PipelineOptions, T as Token } from '../system-prompt-CWA6ml-d.js';
 export { E as EventBus, a as EventLogger, b as EventMap, c as EventName, L as Listener, S as ScopedEventBus } from '../events-yCpJD4wa.js';
-export { R as RunController, b as RunControllerOptions, T as TOKENS } from '../index-BvZld4Dr.js';
+export { R as RunController, b as RunControllerOptions, T as TOKENS } from '../index-Dl3PaD7f.js';
 import '../context-z2x5gv_V.js';
 import '../compactor-Mw7-rNyb.js';
 import '../config-Bi4Q0fnz.js';

package/dist/{plan-templates-Cqdy6rtM.d.ts → plan-templates-Cc-04Z8o.d.ts}

@@ -331,9 +331,14 @@ declare class RecoveryLock {
      */
     checkAbandoned(): Promise<AbandonedSession | null>;
     /**
-     * Claim the lock for the given session. Overwrites any existing lock
-     * — the caller should have already handled abandonment (via
-     * `checkAbandoned`) before calling this.
+     * Claim the lock for the given session. Uses exclusive-create (`O_EXCL`)
+     * to detect whether another process acquired the lock between our
+     * `checkAbandoned()` call and now. If the file already exists, it means
+     * another process won the race and we throw instead of silently
+     * overwriting their recovery record.
+     *
+     * The caller MUST have already called `checkAbandoned()` and handled its
+     * null return before calling this.
      */
     write(sessionId: string): Promise<void>;
     /**

package/dist/storage/index.d.ts

@@ -1,4 +1,4 @@
-export { A as AbandonedSession, a as AttachmentStoreOptions, C as ConfigLoaderOptions, b as ConfigMigration, c as ConfigMigrationError, d as ConfigSource, D as DEFAULT_CONFIG_MIGRATIONS, e as DefaultAttachmentStore, f as DefaultConfigLoader, g as DefaultConfigStore, h as DefaultMemoryStore, i as DefaultSessionStore, M as MemoryStoreOptions, j as MigrationContext, k as MigrationResult, P as PersistedQueueItem, l as PlanFile, m as PlanItem, n as PlanTemplate, Q as QueueStore, R as RecoveryLock, o as RecoveryLockOptions, S as SessionAnalyzer, p as SessionStoreOptions, T as TodosCheckpointFile, q as addPlanItem, r as attachPlanCheckpoint, s as attachTodosCheckpoint, t as clearPlan, u as deriveTodosFromPlanItem, v as emptyPlan, w as formatPlan, x as formatPlanTemplates, y as getPlanTemplate, z as listPlanTemplates, B as loadPlan, E as loadTodosCheckpoint, F as removePlanItem, G as runConfigMigrations, H as savePlan, I as saveTodosCheckpoint, J as setPlanItemStatus } from '../plan-templates-Cqdy6rtM.js';
+export { A as AbandonedSession, a as AttachmentStoreOptions, C as ConfigLoaderOptions, b as ConfigMigration, c as ConfigMigrationError, d as ConfigSource, D as DEFAULT_CONFIG_MIGRATIONS, e as DefaultAttachmentStore, f as DefaultConfigLoader, g as DefaultConfigStore, h as DefaultMemoryStore, i as DefaultSessionStore, M as MemoryStoreOptions, j as MigrationContext, k as MigrationResult, P as PersistedQueueItem, l as PlanFile, m as PlanItem, n as PlanTemplate, Q as QueueStore, R as RecoveryLock, o as RecoveryLockOptions, S as SessionAnalyzer, p as SessionStoreOptions, T as TodosCheckpointFile, q as addPlanItem, r as attachPlanCheckpoint, s as attachTodosCheckpoint, t as clearPlan, u as deriveTodosFromPlanItem, v as emptyPlan, w as formatPlan, x as formatPlanTemplates, y as getPlanTemplate, z as listPlanTemplates, B as loadPlan, E as loadTodosCheckpoint, F as removePlanItem, G as runConfigMigrations, H as savePlan, I as saveTodosCheckpoint, J as setPlanItemStatus } from '../plan-templates-Cc-04Z8o.js';
 export { D as DefaultSessionReader } from '../session-reader-DsadjyF9.js';
 import { S as SessionRewinder, C as CheckpointInfo, a as RewindResultExtended } from '../session-rewinder-C9HnMkhP.js';
 export { D as DirectorStateCheckpoint, a as DirectorStateSnapshot, b as DirectorSubagentState, c as DirectorTaskState, l as loadDirectorState } from '../director-state-BmYi3DGA.js';
@@ -13,6 +13,8 @@ import '../secret-vault-DoISxaKO.js';
 
 interface SessionRewinderOptions {
     sessionsDir: string;
+    /** The project root directory; used to validate rewind targets stay inside it. */
+    projectRoot: string;
 }
 /**
  * Rewind engine that reads session JSONL files and reverts file system
@@ -20,7 +22,8 @@ interface SessionRewinderOptions {
  */
 declare class DefaultSessionRewinder implements SessionRewinder {
     private readonly sessionsDir;
-    constructor(sessionsDir: string);
+    private readonly projectRoot;
+    constructor(sessionsDir: string, projectRoot: string);
     listCheckpoints(sessionId: string): Promise<CheckpointInfo[]>;
     rewindToCheckpoint(sessionId: string, checkpointIndex: number): Promise<RewindResultExtended>;
     rewindLastN(sessionId: string, n: number): Promise<RewindResultExtended>;

package/dist/storage/index.js

@@ -68,7 +68,7 @@ async function renameWithRetry(from, to) {
       if (!code || !TRANSIENT_RENAME_CODES.has(code) || i === delays.length) {
         throw err;
       }
-      await new Promise((resolve2) => setTimeout(resolve2, delays[i]));
+      await new Promise((resolve3) => setTimeout(resolve3, delays[i]));
     }
   }
   throw lastErr;
@@ -1488,9 +1488,14 @@ var RecoveryLock = class {
     };
   }
   /**
-   * Claim the lock for the given session. Overwrites any existing lock
-   * — the caller should have already handled abandonment (via
-   * `checkAbandoned`) before calling this.
+   * Claim the lock for the given session. Uses exclusive-create (`O_EXCL`)
+   * to detect whether another process acquired the lock between our
+   * `checkAbandoned()` call and now. If the file already exists, it means
+   * another process won the race and we throw instead of silently
+   * overwriting their recovery record.
+   *
+   * The caller MUST have already called `checkAbandoned()` and handled its
+   * null return before calling this.
    */
   async write(sessionId) {
     await ensureDir(path2.dirname(this.file));
@@ -1501,7 +1506,15 @@ var RecoveryLock = class {
       hostname: this.hostname,
       startedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    await atomicWrite(this.file, JSON.stringify(lock), { mode: 384 });
+    try {
+      await fsp.writeFile(this.file, JSON.stringify(lock), { flag: "wx", mode: 384 });
+    } catch (err) {
+      const code = err.code;
+      if (code === "EEXIST") {
+        throw new Error(`Recovery lock already held by another process`);
+      }
+      throw err;
+    }
   }
   /**
    * Release the lock. Idempotent — silently succeeds if the file is
@@ -1945,10 +1958,12 @@ var SessionAnalyzer = class {
   }
 };
 var DefaultSessionRewinder = class {
-  constructor(sessionsDir) {
+  constructor(sessionsDir, projectRoot) {
     this.sessionsDir = sessionsDir;
+    this.projectRoot = projectRoot;
   }
   sessionsDir;
+  projectRoot;
   async listCheckpoints(sessionId) {
     const file = path2.join(this.sessionsDir, `${sessionId}.jsonl`);
     const raw = await fsp.readFile(file, "utf8");
@@ -2005,7 +2020,7 @@ var DefaultSessionRewinder = class {
         }
       }
     }
-    const result = await revertSnapshots(snapshotsToRevert);
+    const result = await revertSnapshots(snapshotsToRevert, this.projectRoot);
     const removedEvents = events.length - targetIdx - 1;
     return { ...result, toPromptIndex: checkpointIndex, removedEvents };
   }
@@ -2035,7 +2050,7 @@ var DefaultSessionRewinder = class {
         snapshotsToRevert.push({ promptIndex: event.promptIndex, files: event.files });
       }
     }
-    const result = await revertSnapshots(snapshotsToRevert.reverse());
+    const result = await revertSnapshots(snapshotsToRevert.reverse(), this.projectRoot);
     return { ...result, toPromptIndex: targetIndex, removedEvents: snapshotsToRevert.length };
   }
   async rewindToStart(sessionId) {
@@ -2051,7 +2066,7 @@ var DefaultSessionRewinder = class {
     if (allSnapshots.length === 0) {
       return { revertedFiles: [], errors: [], toPromptIndex: 0, removedEvents: 0 };
     }
-    const result = await revertSnapshots(allSnapshots.reverse());
+    const result = await revertSnapshots(allSnapshots.reverse(), this.projectRoot);
     return { ...result, toPromptIndex: 0, removedEvents: allSnapshots.length };
   }
 };
@@ -2069,12 +2084,19 @@ function parseEvents(raw) {
   }
   return events;
 }
-async function revertSnapshots(snapshots) {
+async function revertSnapshots(snapshots, projectRoot) {
   const revertedFiles = [];
   const errors = [];
   for (const snapshot of snapshots) {
     for (const file of snapshot.files) {
       try {
+        const absPath = path2.resolve(file.path);
+        const root = path2.resolve(projectRoot);
+        const rel = path2.relative(root, absPath);
+        if (rel.startsWith("..") || path2.isAbsolute(rel)) {
+          errors.push(`${file.path}: path resolves outside project root \u2014 skipping`);
+          continue;
+        }
         if (file.action === "deleted") {
           if (file.before !== null) {
             await atomicWrite(file.path, file.before, { mode: 420 });