@wrongstack/governance 1.0.1 → 1.0.3

package/dist/index.js

@@ -511,6 +511,7 @@ import * as path3 from "node:path";
 import * as fs from "node:fs/promises";
 import * as net from "node:net";
 import * as path2 from "node:path";
+import { atomicWrite, restrictFilePermissions } from "@wrongstack/persistence";
 
 // src/ipc-endpoint.ts
 import { createHash as createHash3 } from "node:crypto";
@@ -601,18 +602,30 @@ async function ensurePrivateDirectory(projectRoot) {
   if (process.platform !== "win32") await fs.chmod(directory, 448);
   return directory;
 }
+var TRANSIENT_READ_CODES = /* @__PURE__ */ new Set(["EPERM", "EBUSY"]);
+var READ_RETRY_DELAYS_MS = [15, 40, 100, 250];
 async function readBounded(pathname) {
-  try {
-    const value = await fs.readFile(pathname);
-    if (value.byteLength > GOVERNANCE_DAEMON_METADATA_MAX_BYTES) {
-      throw new Error(
-        `Governance daemon metadata exceeds ${GOVERNANCE_DAEMON_METADATA_MAX_BYTES} bytes.`
-      );
+  let attempt = 0;
+  for (; ; ) {
+    try {
+      const value = await fs.readFile(pathname);
+      if (value.byteLength > GOVERNANCE_DAEMON_METADATA_MAX_BYTES) {
+        throw new Error(
+          `Governance daemon metadata exceeds ${GOVERNANCE_DAEMON_METADATA_MAX_BYTES} bytes.`
+        );
+      }
+      return value.toString("utf8");
+    } catch (error) {
+      const code = errorCode(error);
+      if (code === "ENOENT") return null;
+      const delayMs = READ_RETRY_DELAYS_MS[attempt];
+      if (process.platform === "win32" && code !== void 0 && TRANSIENT_READ_CODES.has(code) && delayMs !== void 0) {
+        await delay(delayMs);
+        attempt++;
+        continue;
+      }
+      throw error;
     }
-    return value.toString("utf8");
-  } catch (error) {
-    if (errorCode(error) === "ENOENT") return null;
-    throw error;
   }
 }
 function parseMetadata(raw, projectRoot) {
@@ -747,19 +760,9 @@ async function writeGovernanceDaemonAttachmentBroker(projectRoot, broker) {
   const expected = validated.broker;
   await ensurePrivateDirectory(projectRoot);
   const pathname = governanceDaemonAttachmentBrokerPath(projectRoot);
-  const temporary = `${pathname}.${process.pid}.${expected.instanceId}.tmp`;
-  await fs.writeFile(temporary, `${JSON.stringify(expected, null, 2)}
-`, {
-    encoding: "utf8",
-    mode: 384
-  });
-  if (process.platform !== "win32") await fs.chmod(temporary, 384);
-  try {
-    await fs.rename(temporary, pathname);
-  } catch (error) {
-    await fs.rm(temporary, { force: true }).catch(() => void 0);
-    throw error;
-  }
+  await atomicWrite(pathname, `${JSON.stringify(expected, null, 2)}
+`, { mode: 384 });
+  await restrictFilePermissions(pathname).catch(() => void 0);
 }
 async function readGovernanceDaemonAttachmentBroker(projectRoot) {
   const raw = await readBounded(governanceDaemonAttachmentBrokerPath(projectRoot));
@@ -799,19 +802,9 @@ async function writeGovernanceDaemonMetadata(projectRoot, metadata) {
   const expected = createGovernanceDaemonMetadata(metadata);
   await ensurePrivateDirectory(projectRoot);
   const pathname = governanceDaemonMetadataPath(projectRoot);
-  const temporary = `${pathname}.${process.pid}.${expected.instanceId}.tmp`;
-  await fs.writeFile(temporary, `${JSON.stringify(expected, null, 2)}
-`, {
-    encoding: "utf8",
-    mode: 384
-  });
-  try {
-    await fs.rename(temporary, pathname);
-  } catch {
-    await fs.rm(pathname, { force: true });
-    await fs.rename(temporary, pathname);
-  }
-  if (process.platform !== "win32") await fs.chmod(pathname, 384);
+  await atomicWrite(pathname, `${JSON.stringify(expected, null, 2)}
+`, { mode: 384 });
+  await restrictFilePermissions(pathname).catch(() => void 0);
 }
 async function readGovernanceDaemonMetadata(projectRoot) {
   const raw = await readBounded(governanceDaemonMetadataPath(projectRoot));

package/dist/project-daemon.js

@@ -8,6 +8,7 @@ import { fileURLToPath } from "node:url";
 import * as fs from "node:fs/promises";
 import * as net from "node:net";
 import * as path2 from "node:path";
+import { atomicWrite, restrictFilePermissions } from "@wrongstack/persistence";
 
 // src/ipc-endpoint.ts
 import { createHash } from "node:crypto";
@@ -121,18 +122,30 @@ async function ensurePrivateDirectory(projectRoot) {
   if (process.platform !== "win32") await fs.chmod(directory, 448);
   return directory;
 }
+var TRANSIENT_READ_CODES = /* @__PURE__ */ new Set(["EPERM", "EBUSY"]);
+var READ_RETRY_DELAYS_MS = [15, 40, 100, 250];
 async function readBounded(pathname) {
-  try {
-    const value = await fs.readFile(pathname);
-    if (value.byteLength > GOVERNANCE_DAEMON_METADATA_MAX_BYTES) {
-      throw new Error(
-        `Governance daemon metadata exceeds ${GOVERNANCE_DAEMON_METADATA_MAX_BYTES} bytes.`
-      );
+  let attempt = 0;
+  for (; ; ) {
+    try {
+      const value = await fs.readFile(pathname);
+      if (value.byteLength > GOVERNANCE_DAEMON_METADATA_MAX_BYTES) {
+        throw new Error(
+          `Governance daemon metadata exceeds ${GOVERNANCE_DAEMON_METADATA_MAX_BYTES} bytes.`
+        );
+      }
+      return value.toString("utf8");
+    } catch (error) {
+      const code = errorCode(error);
+      if (code === "ENOENT") return null;
+      const delayMs = READ_RETRY_DELAYS_MS[attempt];
+      if (process.platform === "win32" && code !== void 0 && TRANSIENT_READ_CODES.has(code) && delayMs !== void 0) {
+        await delay(delayMs);
+        attempt++;
+        continue;
+      }
+      throw error;
     }
-    return value.toString("utf8");
-  } catch (error) {
-    if (errorCode(error) === "ENOENT") return null;
-    throw error;
   }
 }
 function parseMetadata(raw, projectRoot) {
@@ -267,19 +280,9 @@ async function writeGovernanceDaemonAttachmentBroker(projectRoot, broker) {
   const expected = validated.broker;
   await ensurePrivateDirectory(projectRoot);
   const pathname = governanceDaemonAttachmentBrokerPath(projectRoot);
-  const temporary = `${pathname}.${process.pid}.${expected.instanceId}.tmp`;
-  await fs.writeFile(temporary, `${JSON.stringify(expected, null, 2)}
-`, {
-    encoding: "utf8",
-    mode: 384
-  });
-  if (process.platform !== "win32") await fs.chmod(temporary, 384);
-  try {
-    await fs.rename(temporary, pathname);
-  } catch (error) {
-    await fs.rm(temporary, { force: true }).catch(() => void 0);
-    throw error;
-  }
+  await atomicWrite(pathname, `${JSON.stringify(expected, null, 2)}
+`, { mode: 384 });
+  await restrictFilePermissions(pathname).catch(() => void 0);
 }
 async function removeOwnedGovernanceDaemonAttachmentBroker(projectRoot, owner) {
   const pathname = governanceDaemonAttachmentBrokerPath(projectRoot);
@@ -315,19 +318,9 @@ async function writeGovernanceDaemonMetadata(projectRoot, metadata) {
   const expected = createGovernanceDaemonMetadata(metadata);
   await ensurePrivateDirectory(projectRoot);
   const pathname = governanceDaemonMetadataPath(projectRoot);
-  const temporary = `${pathname}.${process.pid}.${expected.instanceId}.tmp`;
-  await fs.writeFile(temporary, `${JSON.stringify(expected, null, 2)}
-`, {
-    encoding: "utf8",
-    mode: 384
-  });
-  try {
-    await fs.rename(temporary, pathname);
-  } catch {
-    await fs.rm(pathname, { force: true });
-    await fs.rename(temporary, pathname);
-  }
-  if (process.platform !== "win32") await fs.chmod(pathname, 384);
+  await atomicWrite(pathname, `${JSON.stringify(expected, null, 2)}
+`, { mode: 384 });
+  await restrictFilePermissions(pathname).catch(() => void 0);
 }
 async function readGovernanceDaemonMetadata(projectRoot) {
   const raw = await readBounded(governanceDaemonMetadataPath(projectRoot));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/governance",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "license": "MIT",
   "description": "Deterministic workflow contracts and transition policy for WrongStack orchestration.",
   "repository": {
@@ -27,7 +27,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@wrongstack/persistence": "1.0.1"
+    "@wrongstack/persistence": "1.0.3"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",