assertledger 1.2.0 → 1.3.1

package/dist/engine/index.js

@@ -1,20 +1,20 @@
 import { spawn } from "node:child_process";
 import { createHash } from "node:crypto";
 import { createReadStream } from "node:fs";
-import { cp, lstat, mkdir, mkdtemp, open, readdir, readFile, realpath, rename, rm, stat, writeFile, } from "node:fs/promises";
+import { cp, link, lstat, mkdir, mkdtemp, open, readdir, readFile, realpath, rename, rm, stat, writeFile, } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 import { Readable } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { createScanner, SyntaxKind } from "typescript/unstable/ast";
-import { AdapterSchema, isRepositoryExcludeName, parseAgenticBenchmarkAcquisitionRequest, parseAgenticBenchmarkAcquisitionResult, parseEvidenceManifest, parseRepositoryAudit, parseRepositoryInitConfig, parseRepositoryInitConfigV2, parseRepositoryInitLock, parseRepositoryInitLockV2, parseRepositoryInitResult, parseRepositoryInitResultV2, parseVersionedRepositoryInitConfig, parseVersionedRepositoryInitLock, parseVerificationRequest, parseVersionedVerificationRequest, RepositoryInitDetectionsSchema, repositoryInitConfigDigest, repositoryInitConfigV2Digest, repositoryInitLockDigest, repositoryInitLockV2Digest, } from "../contracts/index.js";
+import { AdapterSchema, isRepositoryExcludeName, parseAgenticBenchmarkAcquisitionRequest, parseAgenticBenchmarkAcquisitionResult, parseEvidenceManifest, parseRepositoryAudit, parseRepositoryInitConfig, parseRepositoryInitConfigV2, parseRepositoryInitLock, parseRepositoryInitLockV2, parseRepositoryInitResult, parseRepositoryInitResultV2, parseVerificationRequest, parseVersionedRepositoryInitConfig, parseVersionedRepositoryInitLock, parseVersionedVerificationRequest, RepositoryInitDetectionsSchema, repositoryInitConfigDigest, repositoryInitConfigV2Digest, repositoryInitLockDigest, repositoryInitLockV2Digest, } from "../contracts/index.js";
 import { assertSafeRelativePath, canonicalize, createAgenticBenchmark, decideEvidence, portablePathKey, replayAgenticBenchmark, replayEvidenceManifest, sealManifestArtifact, sha256Canonical, } from "../core/index.js";
-import { NODE_TEST_ADAPTER_PROFILE } from "./adapters/node-test-profile.js";
 import { BUN_TEST_ADAPTER_PROFILE } from "./adapters/bun-test-profile.js";
+import { NODE_TEST_ADAPTER_PROFILE } from "./adapters/node-test-profile.js";
 import { runNodeTestRuntimePreflight, } from "./adapters/node-test-runtime.js";
-import { CONTAINER_LIMITATIONS, CONTAINER_REPORTER_FILE, CONTAINER_RESULT_FILE, CONTAINER_WORKSPACE, DEFAULT_CONTAINER_RUNTIME_COMMAND, prepareContainerBackend, runContainerExecution, } from "./container.js";
 import { normalizeRuntimeFacts, RUNTIME_FACTS_VERSION } from "./adapters/runtime-facts.js";
+import { CONTAINER_LIMITATIONS, CONTAINER_REPORTER_FILE, CONTAINER_RESULT_FILE, CONTAINER_WORKSPACE, DEFAULT_CONTAINER_RUNTIME_COMMAND, prepareContainerBackend, runContainerExecution, } from "./container.js";
 import { NODE_TEST_REPORTER_SOURCE } from "./node-test-reporter.js";
 import { runBunRuntimeDoctorChecks, runRuntimeDoctorChecks, } from "./runtime-doctor.js";
 const DEFAULT_EXCLUDES = new Set([".git", ".testforge", "node_modules"]);
@@ -35,6 +35,20 @@ const INIT_LOCK_FILE = "assertledger.lock.json";
 const INIT_MANAGED_FILES = new Set([INIT_CONFIG_FILE, INIT_LOCK_FILE]);
 const INIT_PACKAGE_MANAGERS = ["pnpm", "npm", "yarn", "bun", "uv", "poetry", "pip"];
 const INIT_FRAMEWORKS = ["node:test", "vitest", "jest", "bun:test", "pytest"];
+export class RepositoryInitWriteError extends Error {
+    targetPath;
+    temporaryPath;
+    temporaryCleanup;
+    installedPaths;
+    constructor(cause, targetPath, temporaryPath, temporaryCleanup, installedPaths) {
+        super("INIT_WRITE_FAILED", { cause });
+        this.name = "RepositoryInitWriteError";
+        this.targetPath = targetPath;
+        this.temporaryPath = temporaryPath;
+        this.temporaryCleanup = temporaryCleanup;
+        this.installedPaths = installedPaths;
+    }
+}
 async function removeTemporaryDirectory(directory) {
     await rm(directory, TEMPORARY_CLEANUP_OPTIONS);
 }
@@ -310,6 +324,13 @@ async function configuredRepositoryFramework(root) {
         return undefined;
     }
 }
+/** The refusal of a repository link. The message stays the stable code, which callers match and
+ * the CLI classifies by value; the link found travels as the cause so a facade can name it. */
+function repositoryLinkError(relative) {
+    return new Error("UNSUPPORTED_REPOSITORY_SYMLINK", {
+        cause: relative.split(path.sep).join("/"),
+    });
+}
 async function walkFiles(root, excludes) {
     const files = [];
     const spellings = new Map();
@@ -324,7 +345,7 @@ async function walkFiles(root, excludes) {
             const relative = path.posix.join(relativeDirectory.split(path.sep).join("/"), entry.name);
             const entryStats = await lstat(path.join(root, ...relative.split("/")));
             if (entryStats.isSymbolicLink())
-                throw new Error("UNSUPPORTED_REPOSITORY_SYMLINK");
+                throw repositoryLinkError(relative);
             registerPortablePath(spellings, relative);
             if (entryStats.isDirectory())
                 await visit(relative);
@@ -584,16 +605,75 @@ function initJavaScriptModuleSpecifiers(source) {
     specifiers.delete("");
     return specifiers;
 }
-async function atomicInitWrite(root, relative, content) {
+async function atomicInitWrite(root, relative, content, action, installedPaths, dependencies = {}) {
     const target = path.join(root, relative);
     const temporary = path.join(root, `.${relative}.${process.pid}.${Date.now()}.tmp`);
+    const openTemporary = dependencies.openTemporary ?? ((temporaryPath) => open(temporaryPath, "wx"));
+    const writeTemporary = dependencies.writeTemporary ??
+        ((_temporaryPath, temporaryContent, handle) => handle.writeFile(temporaryContent));
+    const renameTemporary = dependencies.renameTemporary ?? rename;
+    const linkTemporary = dependencies.linkTemporary ?? link;
+    const removeTemporary = dependencies.removeTemporary ?? ((temporaryPath) => rm(temporaryPath, { force: true }));
+    let temporaryOwned = false;
+    let temporaryHandle;
+    let temporaryHandleClosed = true;
+    let targetInstalled = false;
     try {
-        await writeFile(temporary, content, { flag: "wx" });
-        await rename(temporary, target);
+        temporaryHandle = await openTemporary(temporary);
+        temporaryOwned = true;
+        temporaryHandleClosed = false;
+        try {
+            await writeTemporary(temporary, content, temporaryHandle);
+        }
+        finally {
+            await temporaryHandle.close();
+            temporaryHandleClosed = true;
+        }
+        if (action === "CREATE") {
+            await linkTemporary(temporary, target);
+            targetInstalled = true;
+            await removeTemporary(temporary);
+        }
+        else {
+            await renameTemporary(temporary, target);
+            targetInstalled = true;
+        }
     }
     catch (error) {
-        await rm(temporary, { force: true });
-        throw error;
+        let temporaryCleanup = "NOT_OWNED";
+        if (!temporaryOwned) {
+            try {
+                await lstat(temporary);
+                temporaryCleanup = "UNRESOLVED";
+            }
+            catch (inspectionError) {
+                if (inspectionError.code !== "ENOENT") {
+                    temporaryCleanup = "UNRESOLVED";
+                }
+            }
+        }
+        if (temporaryOwned && !temporaryHandleClosed && temporaryHandle !== undefined) {
+            try {
+                await temporaryHandle.close();
+                temporaryHandleClosed = true;
+            }
+            catch {
+                temporaryCleanup = "UNRESOLVED";
+            }
+        }
+        if (temporaryOwned) {
+            temporaryCleanup = "REMOVED";
+            try {
+                await removeTemporary(temporary);
+            }
+            catch {
+                temporaryCleanup = "UNRESOLVED";
+            }
+        }
+        throw new RepositoryInitWriteError(error, target, temporary, temporaryCleanup, [
+            ...installedPaths,
+            ...(targetInstalled ? [target] : []),
+        ]);
     }
 }
 function initEmptyDetections(reasonCodes) {
@@ -620,7 +700,7 @@ function initTerminalResult(status, detections, reasonCodes) {
     };
     return bunBuiltIn ? parseRepositoryInitResultV2(result) : parseRepositoryInitResult(result);
 }
-export async function initializeRepository(requestedRoot, options = {}) {
+export async function initializeRepository(requestedRoot, options = {}, writeDependencies = {}) {
     let root;
     try {
         root = await realpath(requestedRoot);
@@ -1082,11 +1162,14 @@ export async function initializeRepository(requestedRoot, options = {}) {
         ? parseRepositoryInitResultV2(resultValue)
         : parseRepositoryInitResult(resultValue);
     if (!options.dryRun) {
+        const installedPaths = [];
         for (const action of actions) {
             const file = plannedFiles.find((candidate) => candidate.path === action.path);
             if (file === undefined)
                 throw new Error("INIT_PLAN_INCONSISTENT");
-            await atomicInitWrite(root, file.path, file.content);
+            await atomicInitWrite(root, file.path, file.content, action.kind, installedPaths, writeDependencies);
+            if (action.kind === "CREATE")
+                installedPaths.push(path.join(root, file.path));
         }
     }
     return result;