anhedral 0.8.5 → 0.8.6

package/dist/transaction.js

@@ -1,4 +1,4 @@
-import { closeSync, cpSync, fsyncSync, linkSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, renameSync, rmdirSync, rmSync, unlinkSync, writeFileSync, } from 'node:fs';
+import { closeSync, constants, fstatSync, cpSync, fsyncSync, linkSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, renameSync, rmdirSync, rmSync, unlinkSync, writeFileSync, } from 'node:fs';
 import { createHash, randomUUID } from 'node:crypto';
 import os from 'node:os';
 import path from 'node:path';
@@ -232,13 +232,42 @@ function removeEntryDurably(target) {
     if (pathEntryExists(parent))
         syncDirectory(parent);
 }
+/** Reserved recovery metadata must never read devices, pipes or unbounded files. */
+function readRecoveryMetadata(filePath, maximumBytes) {
+    const stat = lstatSync(filePath);
+    if (!stat.isFile() || stat.isSymbolicLink())
+        throw new Error(`Recovery metadata must be a regular file: ${filePath}`);
+    const descriptor = openSync(filePath, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0) | (constants.O_NONBLOCK ?? 0));
+    try {
+        const opened = fstatSync(descriptor);
+        if (!opened.isFile())
+            throw new Error(`Recovery metadata must be a regular file: ${filePath}`);
+        if (opened.size > maximumBytes)
+            throw new Error(`Recovery metadata exceeds size limit: ${filePath}`);
+        const chunks = [];
+        let total = 0;
+        for (;;) {
+            const chunk = Buffer.alloc(Math.min(8192, maximumBytes + 1 - total));
+            const length = readSync(descriptor, chunk, 0, chunk.length, null);
+            if (!length)
+                return Buffer.concat(chunks).toString('utf8');
+            total += length;
+            if (total > maximumBytes)
+                throw new Error(`Recovery metadata exceeds size limit: ${filePath}`);
+            chunks.push(chunk.subarray(0, length));
+        }
+    }
+    finally {
+        closeSync(descriptor);
+    }
+}
 function parseLockOwner(lockPath) {
     if (lstatSync(lockPath).isSymbolicLink()) {
         throw new Error(`Refusing symbolic-link transaction lock at ${lockPath}.`);
     }
     let value;
     try {
-        value = JSON.parse(readFileSync(lockPath, 'utf8'));
+        value = JSON.parse(readRecoveryMetadata(lockPath, 16 * 1024));
     }
     catch (error) {
         throw new Error(`Cannot read transaction lock owner at ${lockPath}; remove it only after confirming no Anhedral process is running.`, { cause: error });
@@ -676,7 +705,7 @@ function recoverInterruptedTransactionUnlocked(root) {
     if (lstatSync(journalPath).isSymbolicLink()) {
         throw new Error(`Refusing symbolic-link transaction journal at ${journalPath}.`);
     }
-    const journal = validateJournal(root, JSON.parse(readFileSync(journalPath, 'utf8')));
+    const journal = validateJournal(root, JSON.parse(readRecoveryMetadata(journalPath, 16 * 1024 * 1024)));
     restoreJournal(root, journal);
     return true;
 }
@@ -697,8 +726,8 @@ export class PostCommitError extends Error {
     committedPaths;
     constructor(committedPaths, cause) {
         const causeMessage = cause instanceof Error ? cause.message : String(cause);
-        super(`Changes were committed successfully, but the post-commit action failed: ${causeMessage}. `
-            + 'The generated files were kept; resolve the failure and rerun the post-commit command.', { cause });
+        super(`Generated files were saved, but the follow-up action failed: ${causeMessage}. `
+            + 'The generated files were kept; resolve the failure and rerun the failed command.', { cause });
         this.name = 'PostCommitError';
         this.committedPaths = Object.freeze([...committedPaths]);
     }

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const GENERATOR_VERSION = "0.8.5";
+export declare const GENERATOR_VERSION = "0.8.6";

package/dist/version.js

@@ -1 +1 @@
-export const GENERATOR_VERSION = '0.8.5';
+export const GENERATOR_VERSION = '0.8.6';