blun-king-cli 9.1.601 → 9.1.603

package/bin/runtime-exit-ledger.cjs

@@ -1,144 +1,144 @@
-'use strict';
-
-const fs = require('node:fs');
-const os = require('node:os');
-const path = require('node:path');
-
-const DEFAULT_MAX_BYTES = 1024 * 1024;
-const DEFAULT_RETAIN_BYTES = 512 * 1024;
-
-function runtimeExitLedgerPath(homeDir) {
-  return path.join(homeDir, 'diagnostics', 'runtime-exits.jsonl');
-}
-
-function sanitizeExitText(input, maxChars = 2048) {
-  let value = String(input ?? '');
-  const homes = new Set([os.homedir(), process.env.USERPROFILE, process.env.HOME]
-    .filter((entry) => typeof entry === 'string' && entry.length > 2));
-  for (const home of homes) {
-    for (const variant of [path.normalize(home), home.replaceAll('\\', '/')]) {
-      const escaped = variant.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&');
-      value = value.replace(new RegExp(escaped, process.platform === 'win32' ? 'giu' : 'gu'), '$HOME');
-    }
-  }
-  value = value
-    .replace(/[A-Za-z]:[\\/]Users[\\/][^\\/\s"']+/giu, '$HOME')
-    .replace(/\/home\/[^/\s"']+/gu, '$HOME')
-    .replace(/(Authorization\s*:\s*Bearer\s+)[^\s,;]+/giu, '$1<redacted>')
-    .replace(/\bsk-[A-Za-z0-9_-]{10,}\b/gu, '<redacted>')
-    .replace(/\b\d{6,}:[A-Za-z0-9_-]{20,}\b/gu, '<redacted>')
-    .replace(/("(?:api[_-]?key|access[_-]?token|refresh[_-]?token|token|secret|password)"\s*:\s*)"(?:\\.|[^"\\])*"/giu, '$1"<redacted>"')
-    .replace(/((?:api[_-]?key|access[_-]?token|refresh[_-]?token|token|secret|password)\s*[=:]\s*)[^\s,;}]+/giu, '$1<redacted>')
-    .replace(/(https?:\/\/[^\s/:@]+:)[^\s/@]+@/giu, '$1<redacted>@');
-  return value.length <= maxChars ? value : `${value.slice(0, maxChars)}...[truncated]`;
-}
-
-function buildRuntimeExitRecord(input) {
-  const now = typeof input.now === 'function' ? input.now() : new Date();
-  const record = { schemaVersion: 1, ts: new Date(now).toISOString() };
-  for (const key of ['source', 'kind', 'signal', 'phase', 'cliVersion', 'profile', 'sessionId', 'lastTool', 'detail']) {
-    if (input[key] !== undefined && input[key] !== '') record[key] = sanitizeExitText(input[key]);
-  }
-  for (const [key, value] of Object.entries({ exitCode: input.exitCode, pid: input.pid ?? process.pid,
-    ppid: input.ppid ?? process.ppid, childPid: input.childPid })) {
-    if (Number.isInteger(value)) record[key] = value;
-  }
-  if (typeof input.loaded === 'boolean') record.loaded = input.loaded;
-  if (input.error !== undefined && input.error !== null) {
-    record.error = {
-      name: sanitizeExitText(input.error.name || 'Error', 160),
-      message: sanitizeExitText(input.error.message || input.error),
-      stack: sanitizeExitText(input.error.stack || '', 8192),
-    };
-  }
-  return record;
-}
-
-function directoryIdentity(directory) {
-  const stat = fs.lstatSync(directory, { bigint: true });
-  if (!stat.isDirectory() || stat.isSymbolicLink()) throw new Error('Unsafe exit directory');
-  return stat;
-}
-
-function sameIdentity(left, right) {
-  return left.dev === right.dev && left.ino === right.ino;
-}
-
-function regularLedger(stat) {
-  if (!stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1n) throw new Error('Unsafe exit ledger');
-  return stat;
-}
-
-function trimLedger(descriptor, maxBytes, retainBytes, incomingBytes) {
-  const size = Number(regularLedger(fs.fstatSync(descriptor, { bigint: true })).size);
-  if (!Number.isSafeInteger(size)) throw new Error('Invalid exit ledger size');
-  if (size + incomingBytes <= maxBytes) return;
-  const keepBytes = Math.max(0, Math.min(size, retainBytes, maxBytes - incomingBytes));
-  const contents = Buffer.alloc(keepBytes);
-  const read = fs.readSync(descriptor, contents, 0, keepBytes, size - keepBytes);
-  const tail = contents.subarray(0, read);
-  const lineStart = size > keepBytes ? tail.indexOf(0x0a) + 1 : 0;
-  fs.ftruncateSync(descriptor, 0);
-  fs.writeFileSync(descriptor, lineStart > 0 || size === keepBytes ? tail.subarray(lineStart) : '');
-}
-
-function recordRuntimeExit(input = {}) {
-  let descriptor;
-  let appendDescriptor;
-  try {
-    const homeDir = typeof input.homeDir === 'string' ? input.homeDir.trim() : '';
-    if (!homeDir || !path.isAbsolute(homeDir)) return false;
-    // Pin the private home and diagnostic directory before opening any output.
-    fs.mkdirSync(homeDir, { recursive: true, mode: 0o700 });
-    const homeIdentity = directoryIdentity(homeDir);
-    const file = runtimeExitLedgerPath(homeDir);
-    const directory = path.dirname(file);
-    try { fs.mkdirSync(directory, { mode: 0o700 }); }
-    catch (error) { if (error.code !== 'EEXIST') throw error; }
-    const directoryStat = directoryIdentity(directory);
-    let before;
-    try { before = regularLedger(fs.lstatSync(file, { bigint: true })); }
-    catch (error) { if (error.code !== 'ENOENT') throw error; }
-    const flags = fs.constants.O_RDWR | (fs.constants.O_NOFOLLOW ?? 0)
-      | (fs.constants.O_NONBLOCK ?? 0) | (before ? 0 : fs.constants.O_CREAT | fs.constants.O_EXCL);
-    descriptor = fs.openSync(file, flags, 0o600);
-    const opened = regularLedger(fs.fstatSync(descriptor, { bigint: true }));
-    if ((before && !sameIdentity(before, opened))
-      || !sameIdentity(opened, regularLedger(fs.lstatSync(file, { bigint: true })))
-      || !sameIdentity(homeIdentity, directoryIdentity(homeDir))
-      || !sameIdentity(directoryStat, directoryIdentity(directory))) throw new Error('Exit ledger changed');
-    const maxBytes = Math.max(1024, Number.isInteger(input.maxBytes) ? input.maxBytes : DEFAULT_MAX_BYTES);
-    const retainBytes = Math.max(0, Number.isInteger(input.retainBytes) ? input.retainBytes : DEFAULT_RETAIN_BYTES);
-    const record = buildRuntimeExitRecord(input);
-    let line = `${JSON.stringify(record)}\n`;
-    // Retain identity/exit fields even when a diagnostic detail exceeds the cap.
-    for (const key of ['error', 'detail', 'lastTool', 'sessionId', 'profile', 'cliVersion', 'phase', 'source', 'kind', 'signal']) {
-      if (Buffer.byteLength(line) <= maxBytes) break;
-      delete record[key];
-      record.truncated = true;
-      line = `${JSON.stringify(record)}\n`;
-    }
-    trimLedger(descriptor, maxBytes, retainBytes, Buffer.byteLength(line));
-    // Windows append-only handles cannot truncate. Keep both handles bound to
-    // the same checked inode, using the second handle only for atomic append.
-    appendDescriptor = fs.openSync(file, fs.constants.O_WRONLY | fs.constants.O_APPEND
-      | (fs.constants.O_NOFOLLOW ?? 0) | (fs.constants.O_NONBLOCK ?? 0));
-    if (!sameIdentity(opened, regularLedger(fs.fstatSync(appendDescriptor, { bigint: true })))
-      || !sameIdentity(opened, regularLedger(fs.lstatSync(file, { bigint: true })))
-      || !sameIdentity(homeIdentity, directoryIdentity(homeDir))
-      || !sameIdentity(directoryStat, directoryIdentity(directory))) throw new Error('Exit ledger changed');
-    fs.appendFileSync(appendDescriptor, line, { encoding: 'utf8' });
-    try { fs.fchmodSync(descriptor, 0o600); } catch {}
-    return true;
-  } catch {
-    return false;
-  } finally {
-    if (appendDescriptor !== undefined) { try { fs.closeSync(appendDescriptor); } catch {} }
-    if (descriptor !== undefined) { try { fs.closeSync(descriptor); } catch {} }
-  }
-}
-
-module.exports = {
-  DEFAULT_MAX_BYTES, DEFAULT_RETAIN_BYTES, buildRuntimeExitRecord, recordRuntimeExit,
-  runtimeExitLedgerPath, sanitizeExitText,
-};
+'use strict';
+
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+
+const DEFAULT_MAX_BYTES = 1024 * 1024;
+const DEFAULT_RETAIN_BYTES = 512 * 1024;
+
+function runtimeExitLedgerPath(homeDir) {
+  return path.join(homeDir, 'diagnostics', 'runtime-exits.jsonl');
+}
+
+function sanitizeExitText(input, maxChars = 2048) {
+  let value = String(input ?? '');
+  const homes = new Set([os.homedir(), process.env.USERPROFILE, process.env.HOME]
+    .filter((entry) => typeof entry === 'string' && entry.length > 2));
+  for (const home of homes) {
+    for (const variant of [path.normalize(home), home.replaceAll('\\', '/')]) {
+      const escaped = variant.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&');
+      value = value.replace(new RegExp(escaped, process.platform === 'win32' ? 'giu' : 'gu'), '$HOME');
+    }
+  }
+  value = value
+    .replace(/[A-Za-z]:[\\/]Users[\\/][^\\/\s"']+/giu, '$HOME')
+    .replace(/\/home\/[^/\s"']+/gu, '$HOME')
+    .replace(/(Authorization\s*:\s*Bearer\s+)[^\s,;]+/giu, '$1<redacted>')
+    .replace(/\bsk-[A-Za-z0-9_-]{10,}\b/gu, '<redacted>')
+    .replace(/\b\d{6,}:[A-Za-z0-9_-]{20,}\b/gu, '<redacted>')
+    .replace(/("(?:api[_-]?key|access[_-]?token|refresh[_-]?token|token|secret|password)"\s*:\s*)"(?:\\.|[^"\\])*"/giu, '$1"<redacted>"')
+    .replace(/((?:api[_-]?key|access[_-]?token|refresh[_-]?token|token|secret|password)\s*[=:]\s*)[^\s,;}]+/giu, '$1<redacted>')
+    .replace(/(https?:\/\/[^\s/:@]+:)[^\s/@]+@/giu, '$1<redacted>@');
+  return value.length <= maxChars ? value : `${value.slice(0, maxChars)}...[truncated]`;
+}
+
+function buildRuntimeExitRecord(input) {
+  const now = typeof input.now === 'function' ? input.now() : new Date();
+  const record = { schemaVersion: 1, ts: new Date(now).toISOString() };
+  for (const key of ['source', 'kind', 'signal', 'phase', 'cliVersion', 'profile', 'sessionId', 'lastTool', 'detail']) {
+    if (input[key] !== undefined && input[key] !== '') record[key] = sanitizeExitText(input[key]);
+  }
+  for (const [key, value] of Object.entries({ exitCode: input.exitCode, pid: input.pid ?? process.pid,
+    ppid: input.ppid ?? process.ppid, childPid: input.childPid })) {
+    if (Number.isInteger(value)) record[key] = value;
+  }
+  if (typeof input.loaded === 'boolean') record.loaded = input.loaded;
+  if (input.error !== undefined && input.error !== null) {
+    record.error = {
+      name: sanitizeExitText(input.error.name || 'Error', 160),
+      message: sanitizeExitText(input.error.message || input.error),
+      stack: sanitizeExitText(input.error.stack || '', 8192),
+    };
+  }
+  return record;
+}
+
+function directoryIdentity(directory) {
+  const stat = fs.lstatSync(directory, { bigint: true });
+  if (!stat.isDirectory() || stat.isSymbolicLink()) throw new Error('Unsafe exit directory');
+  return stat;
+}
+
+function sameIdentity(left, right) {
+  return left.dev === right.dev && left.ino === right.ino;
+}
+
+function regularLedger(stat) {
+  if (!stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1n) throw new Error('Unsafe exit ledger');
+  return stat;
+}
+
+function trimLedger(descriptor, maxBytes, retainBytes, incomingBytes) {
+  const size = Number(regularLedger(fs.fstatSync(descriptor, { bigint: true })).size);
+  if (!Number.isSafeInteger(size)) throw new Error('Invalid exit ledger size');
+  if (size + incomingBytes <= maxBytes) return;
+  const keepBytes = Math.max(0, Math.min(size, retainBytes, maxBytes - incomingBytes));
+  const contents = Buffer.alloc(keepBytes);
+  const read = fs.readSync(descriptor, contents, 0, keepBytes, size - keepBytes);
+  const tail = contents.subarray(0, read);
+  const lineStart = size > keepBytes ? tail.indexOf(0x0a) + 1 : 0;
+  fs.ftruncateSync(descriptor, 0);
+  fs.writeFileSync(descriptor, lineStart > 0 || size === keepBytes ? tail.subarray(lineStart) : '');
+}
+
+function recordRuntimeExit(input = {}) {
+  let descriptor;
+  let appendDescriptor;
+  try {
+    const homeDir = typeof input.homeDir === 'string' ? input.homeDir.trim() : '';
+    if (!homeDir || !path.isAbsolute(homeDir)) return false;
+    // Pin the private home and diagnostic directory before opening any output.
+    fs.mkdirSync(homeDir, { recursive: true, mode: 0o700 });
+    const homeIdentity = directoryIdentity(homeDir);
+    const file = runtimeExitLedgerPath(homeDir);
+    const directory = path.dirname(file);
+    try { fs.mkdirSync(directory, { mode: 0o700 }); }
+    catch (error) { if (error.code !== 'EEXIST') throw error; }
+    const directoryStat = directoryIdentity(directory);
+    let before;
+    try { before = regularLedger(fs.lstatSync(file, { bigint: true })); }
+    catch (error) { if (error.code !== 'ENOENT') throw error; }
+    const flags = fs.constants.O_RDWR | (fs.constants.O_NOFOLLOW ?? 0)
+      | (fs.constants.O_NONBLOCK ?? 0) | (before ? 0 : fs.constants.O_CREAT | fs.constants.O_EXCL);
+    descriptor = fs.openSync(file, flags, 0o600);
+    const opened = regularLedger(fs.fstatSync(descriptor, { bigint: true }));
+    if ((before && !sameIdentity(before, opened))
+      || !sameIdentity(opened, regularLedger(fs.lstatSync(file, { bigint: true })))
+      || !sameIdentity(homeIdentity, directoryIdentity(homeDir))
+      || !sameIdentity(directoryStat, directoryIdentity(directory))) throw new Error('Exit ledger changed');
+    const maxBytes = Math.max(1024, Number.isInteger(input.maxBytes) ? input.maxBytes : DEFAULT_MAX_BYTES);
+    const retainBytes = Math.max(0, Number.isInteger(input.retainBytes) ? input.retainBytes : DEFAULT_RETAIN_BYTES);
+    const record = buildRuntimeExitRecord(input);
+    let line = `${JSON.stringify(record)}\n`;
+    // Retain identity/exit fields even when a diagnostic detail exceeds the cap.
+    for (const key of ['error', 'detail', 'lastTool', 'sessionId', 'profile', 'cliVersion', 'phase', 'source', 'kind', 'signal']) {
+      if (Buffer.byteLength(line) <= maxBytes) break;
+      delete record[key];
+      record.truncated = true;
+      line = `${JSON.stringify(record)}\n`;
+    }
+    trimLedger(descriptor, maxBytes, retainBytes, Buffer.byteLength(line));
+    // Windows append-only handles cannot truncate. Keep both handles bound to
+    // the same checked inode, using the second handle only for atomic append.
+    appendDescriptor = fs.openSync(file, fs.constants.O_WRONLY | fs.constants.O_APPEND
+      | (fs.constants.O_NOFOLLOW ?? 0) | (fs.constants.O_NONBLOCK ?? 0));
+    if (!sameIdentity(opened, regularLedger(fs.fstatSync(appendDescriptor, { bigint: true })))
+      || !sameIdentity(opened, regularLedger(fs.lstatSync(file, { bigint: true })))
+      || !sameIdentity(homeIdentity, directoryIdentity(homeDir))
+      || !sameIdentity(directoryStat, directoryIdentity(directory))) throw new Error('Exit ledger changed');
+    fs.appendFileSync(appendDescriptor, line, { encoding: 'utf8' });
+    try { fs.fchmodSync(descriptor, 0o600); } catch {}
+    return true;
+  } catch {
+    return false;
+  } finally {
+    if (appendDescriptor !== undefined) { try { fs.closeSync(appendDescriptor); } catch {} }
+    if (descriptor !== undefined) { try { fs.closeSync(descriptor); } catch {} }
+  }
+}
+
+module.exports = {
+  DEFAULT_MAX_BYTES, DEFAULT_RETAIN_BYTES, buildRuntimeExitRecord, recordRuntimeExit,
+  runtimeExitLedgerPath, sanitizeExitText,
+};

package/bin/runtime-exit-ledger.d.cts

@@ -1,23 +1,23 @@
-export interface RuntimeExitInput {
-  homeDir?: string;
-  source?: string;
-  kind?: string;
-  signal?: string;
-  phase?: string;
-  cliVersion?: string;
-  profile?: string;
-  sessionId?: string;
-  lastTool?: string;
-  detail?: string;
-  exitCode?: number;
-  pid?: number;
-  ppid?: number;
-  childPid?: number;
-  loaded?: boolean;
-  error?: unknown;
-  maxBytes?: number;
-  retainBytes?: number;
-  now?: () => Date | number | string;
-}
-
-export function recordRuntimeExit(input?: RuntimeExitInput): boolean;
+export interface RuntimeExitInput {
+  homeDir?: string;
+  source?: string;
+  kind?: string;
+  signal?: string;
+  phase?: string;
+  cliVersion?: string;
+  profile?: string;
+  sessionId?: string;
+  lastTool?: string;
+  detail?: string;
+  exitCode?: number;
+  pid?: number;
+  ppid?: number;
+  childPid?: number;
+  loaded?: boolean;
+  error?: unknown;
+  maxBytes?: number;
+  retainBytes?: number;
+  now?: () => Date | number | string;
+}
+
+export function recordRuntimeExit(input?: RuntimeExitInput): boolean;