caveat-cli 0.20.3 → 0.21.1

package/dist/caveat.js

@@ -1,10 +1,54 @@
 #!/usr/bin/env node
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+
+// Install the warning handler before loading any SQLite-dependent product module.
 process.removeAllListeners('warning');
-process.on('warning', (w) => {
-  if (w && w.name === 'ExperimentalWarning' && typeof w.message === 'string' && w.message.includes('SQLite')) return;
-  process.stderr.write('(' + (w && w.name) + ') ' + (w && w.message) + '\n');
-});
-import('./index.js').catch((err) => {
-  process.stderr.write('[caveat:fatal] ' + (err && err.stack || err) + '\n');
-  process.exit(1);
+process.on('warning', (warning) => {
+  if (warning?.name === 'ExperimentalWarning' && warning.message.includes('SQLite')) return;
+  process.stderr.write(`(${warning?.name}) ${warning?.message}\n`);
 });
+
+// Node 22.5 includes SQLite behind a startup flag. Own that requirement in the
+// shipped launcher, so ordinary npm-bin/MCP/hook commands keep the public floor.
+// Feature detection also covers other supported Node versions before unflagging.
+const hasSqlite = Boolean(process.getBuiltinModule?.('node:sqlite'));
+const flagPattern = /^--(?:no-)?experimental-sqlite(?:=|$)/;
+// Node treats underscores as hyphens in option names, but retains original
+// tokens in execArgv. Normalize comparisons only; forward argv/env unchanged.
+const explicitFlag = process.execArgv.some((arg) => flagPattern.test(arg.replaceAll('_', '-'))) ||
+  /(?:^|[\s"'])--(?:no-)?experimental-sqlite(?:$|[\s"'=])/.test((process.env.NODE_OPTIONS ?? '').replaceAll('_', '-'));
+
+if (!hasSqlite && !explicitFlag && process.allowedNodeEnvironmentFlags.has('--experimental-sqlite')) {
+  const child = spawn(process.execPath, [
+    ...process.execArgv, '--experimental-sqlite', process.argv[1] ?? fileURLToPath(import.meta.url), ...process.argv.slice(2),
+  ], { stdio: 'inherit', shell: false });
+  const forwardInterrupt = () => child.kill('SIGINT');
+  const forwardTerminate = () => child.kill('SIGTERM');
+  process.on('SIGINT', forwardInterrupt);
+  process.on('SIGTERM', forwardTerminate);
+  const detachSignals = () => {
+    process.removeListener('SIGINT', forwardInterrupt);
+    process.removeListener('SIGTERM', forwardTerminate);
+  };
+  child.once('error', () => {
+    detachSignals();
+    process.stderr.write('[caveat:fatal] unable to start the SQLite-enabled runtime\n');
+    process.exitCode = 1;
+  });
+  child.once('exit', (code, signal) => {
+    detachSignals();
+    if (signal) {
+      // Preserve signal termination rather than turn a killed child into success.
+      try { process.kill(process.pid, signal); }
+      catch { process.exitCode = 1; }
+    } else process.exitCode = code ?? 1;
+  });
+} else {
+  // An explicit enable/disable is never overridden. A failed flagged child
+  // reaches this branch once, so unavailable SQLite cannot create a retry loop.
+  import('./index.js').catch((error) => {
+    process.stderr.write('[caveat:fatal] ' + (error?.stack || error) + '\n');
+    process.exit(1);
+  });
+}

package/dist/factory-private-evidence/capability.v1.schema.json

@@ -0,0 +1,157 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:caveat:factory-private-evidence-capability:v1",
+  "title": "Draft: Caveat official private evidence capability v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "product",
+    "package_version",
+    "public_diagnostic_schema",
+    "private_protocol",
+    "transports",
+    "max_channel_bytes",
+    "operation_receipt"
+  ],
+  "properties": {
+    "schema": {
+      "const": "caveat.factory_private_evidence_capability.v1"
+    },
+    "product": {
+      "const": "caveat"
+    },
+    "package_version": {
+      "type": "string",
+      "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*)(?:\\.(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*))*)?(?:\\+[0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*)?$",
+      "maxLength": 128
+    },
+    "public_diagnostic_schema": {
+      "const": "caveat.native_factory_diagnostics.v1"
+    },
+    "private_protocol": {
+      "const": "caveat.factory_private_evidence.v1"
+    },
+    "transports": {
+      "type": "array",
+      "maxItems": 2,
+      "uniqueItems": true,
+      "items": {
+        "oneOf": [
+          {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "id",
+              "platforms",
+              "launch_paths"
+            ],
+            "properties": {
+              "id": {
+                "const": "posix-fd-v1"
+              },
+              "platforms": {
+                "type": "array",
+                "minItems": 1,
+                "maxItems": 2,
+                "uniqueItems": true,
+                "items": {
+                  "enum": [
+                    "linux",
+                    "darwin"
+                  ]
+                }
+              },
+              "launch_paths": {
+                "type": "array",
+                "minItems": 1,
+                "maxItems": 1,
+                "uniqueItems": true,
+                "items": {
+                  "enum": [
+                    "direct_node_entry"
+                  ]
+                }
+              }
+            }
+          },
+          {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "id",
+              "platforms",
+              "launch_paths"
+            ],
+            "properties": {
+              "id": {
+                "const": "windows-named-pipe-v1"
+              },
+              "platforms": {
+                "type": "array",
+                "minItems": 1,
+                "maxItems": 1,
+                "uniqueItems": true,
+                "items": {
+                  "enum": [
+                    "win32"
+                  ]
+                }
+              },
+              "launch_paths": {
+                "type": "array",
+                "minItems": 1,
+                "maxItems": 2,
+                "uniqueItems": true,
+                "items": {
+                  "enum": [
+                    "native_exe",
+                    "powershell_standard_shim"
+                  ]
+                }
+              }
+            }
+          }
+        ]
+      },
+      "allOf": [
+        {
+          "contains": {
+            "type": "object",
+            "required": [
+              "id"
+            ],
+            "properties": {
+              "id": {
+                "const": "posix-fd-v1"
+              }
+            }
+          },
+          "minContains": 0,
+          "maxContains": 1
+        },
+        {
+          "contains": {
+            "type": "object",
+            "required": [
+              "id"
+            ],
+            "properties": {
+              "id": {
+                "const": "windows-named-pipe-v1"
+              }
+            }
+          },
+          "minContains": 0,
+          "maxContains": 1
+        }
+      ]
+    },
+    "max_channel_bytes": {
+      "const": 16384
+    },
+    "operation_receipt": {
+      "const": "not_supported"
+    }
+  }
+}