blun-king-cli 9.1.626 → 9.1.628

package/bin/plugin-bootstrap.js

@@ -1,162 +1,163 @@
-'use strict';
-
-const { randomUUID } = require('node:crypto');
-const fs = require('node:fs');
-const path = require('node:path');
-const { selectedAgentSpineRoot, describeAgentSpineSelection, copySelectedAgentSpinePlugin } = require('./managed-plugin-selection.cjs');
-
-const {
-  ensurePrivateDirectory,
-  securePrivateFile,
-  writePrivateFile,
-} = require('./private-paths');
-
-function isObject(value) {
-  return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-
-function readInstalledPlugins(filePath) {
-  if (!fs.existsSync(filePath)) return { version: 1, plugins: [] };
-
-  const parsed = JSON.parse(fs.readFileSync(filePath, 'utf8'));
-  if (!isObject(parsed) || parsed.version !== 1 || !Array.isArray(parsed.plugins)
-    || !parsed.plugins.every(isObject)) {
-    throw new Error(`Ungültige Plugin-Konfiguration: ${filePath}`);
-  }
-  return parsed;
-}
-
-function updatedInstalledPlugins(installed, pluginRoot, now, pluginId = 'telegram') {
-  const previous = installed.plugins.find((plugin) => plugin.id === pluginId);
-  const previousCapabilities = isObject(previous?.capabilities) ? previous.capabilities : {};
-  const previousMcpServers = isObject(previousCapabilities.mcpServers)
-    ? previousCapabilities.mcpServers : {};
-  const previousTelegramMcp = isObject(previousMcpServers[pluginId])
-    ? previousMcpServers[pluginId] : {};
-  const telegram = {
-    ...previous,
-    id: pluginId,
-    root: pluginRoot,
-    source: 'local-path',
-    enabled: true,
-    installedAt: typeof previous?.installedAt === 'string' && previous.installedAt.length > 0
-      ? previous.installedAt : now,
-    updatedAt: now,
-    capabilities: {
-      ...previousCapabilities,
-      mcpServers: {
-        ...previousMcpServers,
-        [pluginId]: { ...previousTelegramMcp, enabled: previousTelegramMcp.enabled === false && pluginId === 'agent-spine' ? false : true },
-      },
-    },
-  };
-
-  const plugins = [];
-  let replaced = false;
-  for (const plugin of installed.plugins) {
-    if (plugin.id !== pluginId) {
-      plugins.push(plugin);
-    } else if (!replaced) {
-      plugins.push(telegram);
-      replaced = true;
-    }
-  }
-  if (!replaced) plugins.push(telegram);
-  return { ...installed, version: 1, plugins };
-}
-
-function writeInstalledPlugins(filePath, installed) {
-  const temporaryPath = path.join(
-    path.dirname(filePath),
-    `.${path.basename(filePath)}.${process.pid}.${randomUUID()}.tmp`,
-  );
-  try {
-    writePrivateFile(temporaryPath, `${JSON.stringify(installed, null, 2)}\n`);
-    fs.renameSync(temporaryPath, filePath);
-  } catch (error) {
-    fs.rmSync(temporaryPath, { force: true });
-    throw error;
-  }
-}
-
-function installManagedTelegramPlugin({ packageRoot, blunDir, now = new Date().toISOString() }) {
-  const sourceRoot = path.join(packageRoot, 'telegram-plugin');
-  const pluginsDir = path.join(blunDir, 'plugins');
-  const managedDir = path.join(pluginsDir, 'managed');
-  const pluginRoot = path.join(managedDir, 'telegram');
-  const installedFile = path.join(pluginsDir, 'installed.json');
-
-  ensurePrivateDirectory(pluginsDir);
-  if (fs.existsSync(installedFile)) securePrivateFile(installedFile);
-  const installed = readInstalledPlugins(installedFile);
-  const updatedInstalled = updatedInstalledPlugins(installed, pluginRoot, now);
-  ensurePrivateDirectory(managedDir);
-  const nonce = `${process.pid}-${randomUUID()}`;
-  const stagingRoot = path.join(managedDir, `.telegram-${nonce}.tmp`);
-  const backupRoot = path.join(managedDir, `.telegram-${nonce}.bak`);
-  let hadPreviousPlugin = false;
-  let installedNewPlugin = false;
-  try {
-    if (fs.existsSync(pluginRoot)) {
-      ensurePrivateDirectory(pluginRoot);
-      hadPreviousPlugin = true;
-    }
-    fs.cpSync(sourceRoot, stagingRoot, { recursive: true, force: true });
-    if (hadPreviousPlugin) fs.renameSync(pluginRoot, backupRoot);
-    try {
-      fs.renameSync(stagingRoot, pluginRoot);
-      installedNewPlugin = true;
-      writeInstalledPlugins(installedFile, updatedInstalled);
-    } catch (error) {
-      if (installedNewPlugin) fs.rmSync(pluginRoot, { recursive: true, force: true });
-      if (hadPreviousPlugin && fs.existsSync(backupRoot)) {
-        fs.renameSync(backupRoot, pluginRoot);
-      }
-      throw error;
-    }
-    if (hadPreviousPlugin) fs.rmSync(backupRoot, { recursive: true, force: true });
-  } finally {
-    fs.rmSync(stagingRoot, { recursive: true, force: true });
-  }
-
-  return { installedFile, pluginRoot };
-}
-
-function installManagedAgentSpinePlugin({ packageRoot, blunDir, now = new Date().toISOString() }) {
-  const installedFile = path.join(blunDir, 'plugins', 'installed.json');
-  ensurePrivateDirectory(path.dirname(installedFile));
-  if (fs.existsSync(installedFile)) securePrivateFile(installedFile);
-  const installed = readInstalledPlugins(installedFile);
-  const records = installed.plugins.filter(plugin => plugin.id === 'agent-spine');
-  if (records.length > 1) throw new Error('Ambiguous AgentSpine registration');
-  const selected = selectedAgentSpineRoot({ installed, blunDir });
-  if (selected) return { installedFile, pluginRoot: selected, reused: true, selected: true };
-  if (records[0]?.enabled === false) {
-    return { installedFile, pluginRoot: records[0].root, reused: true, disabled: true };
-  }
-  if (records[0]) {
-    const currentRoot = records[0].root;
-    if (typeof currentRoot !== 'string' || !path.isAbsolute(currentRoot)) {
-      throw new Error('Invalid AgentSpine registration root');
-    }
-    const managed = path.resolve(blunDir, 'plugins', 'managed');
-    const sameDirectory = (left, right) => process.platform === 'win32'
-      ? left.toLowerCase() === right.toLowerCase() : left === right;
-    if (!sameDirectory(path.dirname(path.resolve(currentRoot)), managed)
-      || !/^agent-spine-[a-f0-9]{64}$/.test(path.basename(currentRoot))) {
-      return { installedFile, pluginRoot: currentRoot, reused: true, custom: true };
-    }
-    // An upgrade must not conceal changes to the previous immutable default.
-    describeAgentSpineSelection({ blunDir, pluginRoot: currentRoot });
-  }
-  const pluginRoot = copySelectedAgentSpinePlugin({ blunDir, sourceRoot: path.join(packageRoot, 'agent-spine-plugin') });
-  if (records[0]?.root === pluginRoot) return { installedFile, pluginRoot, reused: true };
-  writeInstalledPlugins(installedFile, updatedInstalledPlugins(installed, pluginRoot, now, 'agent-spine'));
-  return { installedFile, pluginRoot, reused: false };
-}
-
-module.exports = {
-  installManagedAgentSpinePlugin,
-  installManagedTelegramPlugin,
-  readInstalledPlugins,
-};
+'use strict';
+
+const { randomUUID } = require('node:crypto');
+const fs = require('node:fs');
+const path = require('node:path');
+const { renamePrivateStaging, copyTelegramFiles } = require('./rename-private-staging.cjs');
+const { selectedAgentSpineRoot, describeAgentSpineSelection, copySelectedAgentSpinePlugin } = require('./managed-plugin-selection.cjs');
+
+const {
+  ensurePrivateDirectory,
+  securePrivateFile,
+  writePrivateFile,
+} = require('./private-paths');
+
+function isObject(value) {
+  return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+
+function readInstalledPlugins(filePath) {
+  if (!fs.existsSync(filePath)) return { version: 1, plugins: [] };
+
+  const parsed = JSON.parse(fs.readFileSync(filePath, 'utf8'));
+  if (!isObject(parsed) || parsed.version !== 1 || !Array.isArray(parsed.plugins)
+    || !parsed.plugins.every(isObject)) {
+    throw new Error(`Ungültige Plugin-Konfiguration: ${filePath}`);
+  }
+  return parsed;
+}
+
+function updatedInstalledPlugins(installed, pluginRoot, now, pluginId = 'telegram') {
+  const previous = installed.plugins.find((plugin) => plugin.id === pluginId);
+  const previousCapabilities = isObject(previous?.capabilities) ? previous.capabilities : {};
+  const previousMcpServers = isObject(previousCapabilities.mcpServers)
+    ? previousCapabilities.mcpServers : {};
+  const previousTelegramMcp = isObject(previousMcpServers[pluginId])
+    ? previousMcpServers[pluginId] : {};
+  const telegram = {
+    ...previous,
+    id: pluginId,
+    root: pluginRoot,
+    source: 'local-path',
+    enabled: true,
+    installedAt: typeof previous?.installedAt === 'string' && previous.installedAt.length > 0
+      ? previous.installedAt : now,
+    updatedAt: now,
+    capabilities: {
+      ...previousCapabilities,
+      mcpServers: {
+        ...previousMcpServers,
+        [pluginId]: { ...previousTelegramMcp, enabled: previousTelegramMcp.enabled === false && pluginId === 'agent-spine' ? false : true },
+      },
+    },
+  };
+
+  const plugins = [];
+  let replaced = false;
+  for (const plugin of installed.plugins) {
+    if (plugin.id !== pluginId) {
+      plugins.push(plugin);
+    } else if (!replaced) {
+      plugins.push(telegram);
+      replaced = true;
+    }
+  }
+  if (!replaced) plugins.push(telegram);
+  return { ...installed, version: 1, plugins };
+}
+
+function writeInstalledPlugins(filePath, installed) {
+  const temporaryPath = path.join(
+    path.dirname(filePath),
+    `.${path.basename(filePath)}.${process.pid}.${randomUUID()}.tmp`,
+  );
+  try {
+    writePrivateFile(temporaryPath, `${JSON.stringify(installed, null, 2)}\n`);
+    fs.renameSync(temporaryPath, filePath);
+  } catch (error) {
+    fs.rmSync(temporaryPath, { force: true });
+    throw error;
+  }
+}
+
+function installManagedTelegramPlugin({ packageRoot, blunDir, now = new Date().toISOString() }) {
+  const sourceRoot = path.join(packageRoot, 'telegram-plugin');
+  const pluginsDir = path.join(blunDir, 'plugins');
+  const managedDir = path.join(pluginsDir, 'managed');
+  const pluginRoot = path.join(managedDir, 'telegram');
+  const installedFile = path.join(pluginsDir, 'installed.json');
+
+  ensurePrivateDirectory(pluginsDir);
+  if (fs.existsSync(installedFile)) securePrivateFile(installedFile);
+  const installed = readInstalledPlugins(installedFile);
+  const updatedInstalled = updatedInstalledPlugins(installed, pluginRoot, now);
+  ensurePrivateDirectory(managedDir);
+  const nonce = `${process.pid}-${randomUUID()}`;
+  const stagingRoot = path.join(managedDir, `.telegram-${nonce}.tmp`);
+  const backupRoot = path.join(managedDir, `.telegram-${nonce}.bak`);
+  let hadPreviousPlugin = false;
+  let installedNewPlugin = false;
+  try {
+    if (fs.existsSync(pluginRoot)) {
+      ensurePrivateDirectory(pluginRoot);
+      hadPreviousPlugin = true;
+    }
+    copyTelegramFiles(sourceRoot, stagingRoot);
+    if (hadPreviousPlugin) fs.renameSync(pluginRoot, backupRoot);
+    try {
+      renamePrivateStaging(stagingRoot, pluginRoot);
+      installedNewPlugin = true;
+      writeInstalledPlugins(installedFile, updatedInstalled);
+    } catch (error) {
+      if (installedNewPlugin) fs.rmSync(pluginRoot, { recursive: true, force: true });
+      if (hadPreviousPlugin && fs.existsSync(backupRoot)) {
+        fs.renameSync(backupRoot, pluginRoot);
+      }
+      throw error;
+    }
+    if (hadPreviousPlugin) fs.rmSync(backupRoot, { recursive: true, force: true });
+  } finally {
+    fs.rmSync(stagingRoot, { recursive: true, force: true });
+  }
+
+  return { installedFile, pluginRoot };
+}
+
+function installManagedAgentSpinePlugin({ packageRoot, blunDir, now = new Date().toISOString() }) {
+  const installedFile = path.join(blunDir, 'plugins', 'installed.json');
+  ensurePrivateDirectory(path.dirname(installedFile));
+  if (fs.existsSync(installedFile)) securePrivateFile(installedFile);
+  const installed = readInstalledPlugins(installedFile);
+  const records = installed.plugins.filter(plugin => plugin.id === 'agent-spine');
+  if (records.length > 1) throw new Error('Ambiguous AgentSpine registration');
+  const selected = selectedAgentSpineRoot({ installed, blunDir });
+  if (selected) return { installedFile, pluginRoot: selected, reused: true, selected: true };
+  if (records[0]?.enabled === false) {
+    return { installedFile, pluginRoot: records[0].root, reused: true, disabled: true };
+  }
+  if (records[0]) {
+    const currentRoot = records[0].root;
+    if (typeof currentRoot !== 'string' || !path.isAbsolute(currentRoot)) {
+      throw new Error('Invalid AgentSpine registration root');
+    }
+    const managed = path.resolve(blunDir, 'plugins', 'managed');
+    const sameDirectory = (left, right) => process.platform === 'win32'
+      ? left.toLowerCase() === right.toLowerCase() : left === right;
+    if (!sameDirectory(path.dirname(path.resolve(currentRoot)), managed)
+      || !/^agent-spine-[a-f0-9]{64}$/.test(path.basename(currentRoot))) {
+      return { installedFile, pluginRoot: currentRoot, reused: true, custom: true };
+    }
+    // An upgrade must not conceal changes to the previous immutable default.
+    describeAgentSpineSelection({ blunDir, pluginRoot: currentRoot });
+  }
+  const pluginRoot = copySelectedAgentSpinePlugin({ blunDir, sourceRoot: path.join(packageRoot, 'agent-spine-plugin') });
+  if (records[0]?.root === pluginRoot) return { installedFile, pluginRoot, reused: true };
+  writeInstalledPlugins(installedFile, updatedInstalledPlugins(installed, pluginRoot, now, 'agent-spine'));
+  return { installedFile, pluginRoot, reused: false };
+}
+
+module.exports = {
+  installManagedAgentSpinePlugin,
+  installManagedTelegramPlugin,
+  readInstalledPlugins,
+};

package/bin/rename-private-staging.cjs

@@ -0,0 +1,82 @@
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const pause = new Int32Array(new SharedArrayBuffer(4));
+const RETRY_CODES = new Set(['EPERM', 'EBUSY', 'EACCES']);
+function withWindowsFsRetry(operation, options = {}) {
+  if ((options.platform || process.platform) !== 'win32') return operation();
+  const now = options.now || (() => Number(process.hrtime.bigint()) / 1e6);
+  const sleep = options.sleep || (ms => Atomics.wait(pause, 0, 0, ms));
+  const started = now();
+  let firstError;
+  for (let attempt = 1; ; attempt++) {
+    if (options.validate) options.validate(firstError);
+    try { return operation(); } catch (error) {
+      if (!RETRY_CODES.has(error.code)) throw error;
+      firstError ||= error;
+      const elapsedMs = now() - started;
+      if (attempt >= 11 || elapsedMs >= 500) {
+        firstError.blunFsRetry = { attempts: attempt, elapsedMs, operation: options.label || 'Dateisystemoperation' };
+        firstError.message += ' [BLUN: ' + (options.label || 'Dateisystemoperation')
+          + ' nach ' + attempt + ' Versuchen endgueltig fehlgeschlagen; Originalfehler bleibt erhalten]';
+        throw firstError;
+      }
+      sleep(Math.min(50, 500 - elapsedMs));
+    }
+  }
+}
+function canonical(value) { return path.resolve(value).toLowerCase(); }
+function stagingState(staging, impl, expected) {
+  const parent = path.dirname(path.resolve(staging));
+  if (path.basename(parent) !== 'managed'
+    || !/^\.(?:agent-spine-selected|telegram)-[0-9]+-[a-f0-9-]+\.tmp$/.test(path.basename(staging))
+    || canonical(impl.realpathSync(parent)) !== canonical(parent)) throw new Error('Invalid private staging scope');
+  let stat;
+  try { stat = impl.lstatSync(staging); } catch (error) { if (error.code === 'ENOENT') return null; throw error; }
+  if (!stat.isDirectory() || stat.isSymbolicLink()
+    || canonical(impl.realpathSync(staging)) !== canonical(staging)
+    || (expected && (stat.dev !== expected.dev || stat.ino !== expected.ino))) throw new Error('Private staging identity changed');
+  return stat;
+}
+function renamePrivateStaging(source, target, options = {}) {
+  const impl = options.fsImpl || fs;
+  if ((options.platform || process.platform) !== 'win32') return impl.renameSync(source, target);
+  if (canonical(path.dirname(target)) !== canonical(path.dirname(source))
+    || !/^(?:telegram|agent-spine-[a-f0-9]{64})$/.test(path.basename(target))) throw new Error('Invalid private staging target');
+  const identity = stagingState(source, impl);
+  if (!identity) throw new Error('Private staging is missing');
+  return withWindowsFsRetry(() => impl.renameSync(source, target), {
+    ...options, label: 'Privates Plugin umbenennen', validate(original) {
+      if (!stagingState(source, impl, identity)) throw original || new Error('Private staging disappeared');
+      try { impl.lstatSync(target); } catch (error) { if (error.code === 'ENOENT') return; throw error; }
+      throw original || new Error('Private staging target already exists');
+    },
+  });
+}
+function copyTelegramFiles(source, staging, options = {}) {
+  const impl = options.fsImpl || fs;
+  if ((options.platform || process.platform) !== 'win32') return impl.cpSync(source, staging, { recursive: true, force: true });
+  if (!path.basename(staging).startsWith('.telegram-')) throw new Error('Invalid Telegram staging');
+  if (stagingState(staging, impl)) throw new Error('Telegram staging already exists');
+  let identity;
+  return withWindowsFsRetry(() => {
+    try { return impl.cpSync(source, staging, { recursive: true, force: true }); }
+    catch (error) { identity ||= stagingState(staging, impl); throw error; }
+  }, { ...options, label: 'Telegram-Dateien kopieren', validate() { stagingState(staging, impl, identity); } });
+}
+function writeTelegramTemplate(file, content, options = {}) {
+  const impl = options.fsImpl || fs;
+  const write = options.writeFile || require('./private-paths').writePrivateFile;
+  if ((options.platform || process.platform) !== 'win32') return write(file, content);
+  const parent = path.dirname(path.resolve(file));
+  if (path.basename(file) !== '.env' || path.basename(parent) !== 'telegram'
+    || path.basename(path.dirname(parent)) !== 'channels'
+    || canonical(impl.realpathSync(parent)) !== canonical(parent)) throw new Error('Invalid Telegram template scope');
+  return withWindowsFsRetry(() => write(file, content), {
+    ...options, label: 'Telegram-Vorlagendatei schreiben', validate(original) {
+      try { impl.lstatSync(file); } catch (error) { if (error.code === 'ENOENT') return; throw error; }
+      throw original || new Error('Telegram template already exists; refusing overwrite');
+    },
+  });
+}
+module.exports = { withWindowsFsRetry, renamePrivateStaging, copyTelegramFiles, writeTelegramTemplate };