chainlesschain 0.163.8 → 0.165.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chainlesschain",
-  "version": "0.163.8",
+  "version": "0.165.1",
   "description": "CLI for ChainlessChain - install, configure, and manage your personal AI management system",
   "type": "module",
   "bin": {
@@ -56,6 +56,9 @@
     "scripts/postinstall.mjs",
     "scripts/repair-node-pty.mjs",
     "scripts/build-windows-sandbox-helper.ps1",
+    "scripts/macos-mcp-launcher-build.mjs",
+    "scripts/macos-mcp-launcher-preinstall.sh",
+    "scripts/macos-mcp-launcher-postinstall.sh",
     "scripts/command-lifecycle-report.mjs",
     "README.md"
   ],
@@ -83,8 +86,8 @@
     "@chainlesschain/core-infra": "0.1.1",
     "@chainlesschain/core-mtc": "0.2.3",
     "@chainlesschain/core-multisig": "0.1.4",
-    "@chainlesschain/personal-data-hub": "0.4.57",
-    "@chainlesschain/session-core": "0.3.4",
+    "@chainlesschain/personal-data-hub": "0.4.58",
+    "@chainlesschain/session-core": "0.3.5",
     "@chainlesschain/shared-logger": "0.1.1",
     "@inquirer/prompts": "^7.2.0",
     "@noble/curves": "^1.9.7",
@@ -93,7 +96,7 @@
     "chalk": "^5.4.1",
     "commander": "^12.1.0",
     "esbuild-wasm": "0.28.1",
-    "js-yaml": "^3.14.0",
+    "js-yaml": "^3.15.1",
     "ora": "^8.1.1",
     "semver": "^7.6.3",
     "sql.js": "^1.14.1",

package/scripts/macos-mcp-launcher-build.mjs

@@ -0,0 +1,317 @@
+#!/usr/bin/env node
+
+import crypto from "node:crypto";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { spawnSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
+import {
+  MACOS_MCP_LAUNCHER_INPUTS,
+  MACOS_MCP_LAUNCHER_INSTALL_CONTRACT_SCHEMA,
+  isMacosMcpLauncherPackageVersion,
+  verifyMacosMcpLauncherInstallContract,
+} from "../src/lib/process-execution-broker/macos-mcp-launcher-contract.js";
+
+export {
+  MACOS_MCP_LAUNCHER_INSTALL_CONTRACT_SCHEMA,
+  verifyMacosMcpLauncherInstallContract,
+};
+export const MACOS_MCP_LAUNCHER_SOURCE = MACOS_MCP_LAUNCHER_INPUTS.sourcePath;
+export const MACOS_MCP_LAUNCHER_PROTOCOL =
+  MACOS_MCP_LAUNCHER_INPUTS.protocolPath;
+
+function sha256(bytes) {
+  return crypto.createHash("sha256").update(bytes).digest("hex");
+}
+
+export function loadMacosMcpLauncherBuildInputs() {
+  return MACOS_MCP_LAUNCHER_INPUTS;
+}
+
+function cString(value) {
+  if (typeof value !== "string" || value.includes("\0")) {
+    throw new TypeError("generated C string must be NUL-free");
+  }
+  return JSON.stringify(value);
+}
+
+export function generatedMacosMcpLauncherHeader(inputs) {
+  const { protocol } = inputs;
+  return [
+    "#ifndef CHAINLESSCHAIN_MACOS_MCP_LAUNCHER_GENERATED_H",
+    "#define CHAINLESSCHAIN_MACOS_MCP_LAUNCHER_GENERATED_H",
+    `#define CC_PROTOCOL_VERSION ${protocol.protocolVersion}`,
+    `#define CC_PROTOCOL_SHA256 ${cString(inputs.protocolSha256)}`,
+    `#define CC_HELPER_SOURCE_SHA256 ${cString(inputs.sourceSha256)}`,
+    `#define CC_GATE_BOOTSTRAP_SHA256 ${cString(inputs.gateBootstrapSha256)}`,
+    `#define CC_GATE_BOOTSTRAP ${cString(inputs.gateBootstrap)}`,
+    `#define CC_PACKAGE_IDENTIFIER ${cString(protocol.packageIdentifier)}`,
+    `#define CC_HELPER_INSTALL_PATH ${cString(protocol.helperInstallPath)}`,
+    `#define CC_INSTALL_CONTRACT_PATH ${cString(protocol.installContractPath)}`,
+    `#define CC_SNAPSHOT_ROOT ${cString(protocol.snapshotRoot)}`,
+    `#define CC_SNAPSHOT_LOCK_NAME ${cString(protocol.snapshotLockName)}`,
+    `#define CC_SANDBOX_EXECUTABLE ${cString(protocol.sandboxExecutable)}`,
+    `#define CC_RUNTIME_FD ${protocol.runtimeFd}`,
+    `#define CC_ENTRY_FD ${protocol.entryFd}`,
+    `#define CC_CAPSULE_ROOT_FD ${protocol.capsuleRootFd}`,
+    `#define CC_GATE_FD ${protocol.gateFd}`,
+    `#define CC_READY_FD ${protocol.readyFd}`,
+    `#define CC_CALLER_LIFELINE_FD ${protocol.callerLifelineFd}`,
+    `#define CC_MAXIMUM_RUNTIME_BYTES ${protocol.maximumRuntimeBytes}`,
+    `#define CC_MAXIMUM_ENTRY_BYTES ${protocol.maximumEntryBytes}`,
+    `#define CC_MAXIMUM_PASSTHROUGH_ARGS ${protocol.maximumPassthroughArgs}`,
+    `#define CC_MAX_STALE_SNAPSHOTS ${protocol.maximumStaleSnapshots}`,
+    `#define CC_READY_TIMEOUT_MS ${protocol.readyTimeoutMs}`,
+    "#endif",
+    "",
+  ].join("\n");
+}
+
+function run(command, args, options = {}) {
+  const result = spawnSync(command, args, {
+    encoding: "utf8",
+    stdio: "pipe",
+    timeout: 120_000,
+    ...options,
+  });
+  if (result.error || result.status !== 0 || result.signal) {
+    const detail = String(result.stderr || result.stdout || "").trim();
+    throw (
+      result.error ||
+      new Error(
+        `${path.basename(command)} failed (${result.status ?? result.signal}): ${detail}`,
+      )
+    );
+  }
+  return result;
+}
+
+export function macosMcpLauncherCompilerArguments({
+  sdkPath,
+  temporaryRoot,
+  sourcePath = MACOS_MCP_LAUNCHER_SOURCE,
+  outputPath,
+}) {
+  for (const [name, value] of Object.entries({
+    sdkPath,
+    temporaryRoot,
+    sourcePath,
+    outputPath,
+  })) {
+    if (typeof value !== "string" || !path.isAbsolute(value)) {
+      throw new TypeError(`${name} must be an absolute path`);
+    }
+  }
+  return [
+    "-std=c11",
+    "-O2",
+    "-Wall",
+    "-Wextra",
+    "-Werror",
+    "-Wno-deprecated-declarations",
+    "-mmacosx-version-min=13.0",
+    "-isysroot",
+    sdkPath,
+    "-I",
+    temporaryRoot,
+    sourcePath,
+    "-o",
+    outputPath,
+  ];
+}
+
+export function buildMacosMcpLauncher(outputPath, options = {}) {
+  if ((options.platform || process.platform) !== "darwin") {
+    throw new Error("macOS MCP launcher can only be compiled on macOS");
+  }
+  const inputs = loadMacosMcpLauncherBuildInputs();
+  const temporaryRoot = fs.mkdtempSync(
+    path.join(options.tmpdir || os.tmpdir(), "cc-macos-mcp-launcher-build-"),
+  );
+  try {
+    const header = path.join(temporaryRoot, "macos-mcp-launcher-generated.h");
+    fs.writeFileSync(header, generatedMacosMcpLauncherHeader(inputs), {
+      mode: 0o600,
+    });
+    const output = path.resolve(outputPath);
+    fs.mkdirSync(path.dirname(output), { recursive: true });
+    const clang = run("/usr/bin/xcrun", [
+      "--sdk",
+      "macosx",
+      "--find",
+      "clang",
+    ]).stdout.trim();
+    const sdkPath = fs.realpathSync(
+      run("/usr/bin/xcrun", [
+        "--sdk",
+        "macosx",
+        "--show-sdk-path",
+      ]).stdout.trim(),
+    );
+    run(
+      clang,
+      macosMcpLauncherCompilerArguments({
+        sdkPath,
+        temporaryRoot,
+        outputPath: output,
+      }),
+    );
+    fs.chmodSync(output, 0o755);
+    return Object.freeze({ output, ...inputs });
+  } finally {
+    fs.rmSync(temporaryRoot, { recursive: true, force: true });
+  }
+}
+
+function parseCodesignDetails(stderr) {
+  const details = String(stderr || "");
+  const teamIdentifier = details.match(/^TeamIdentifier=(.+)$/mu)?.[1];
+  const signingIdentifier = details.match(/^Identifier=(.+)$/mu)?.[1];
+  if (!teamIdentifier || !/^[A-Z0-9]{10}$/u.test(teamIdentifier)) {
+    throw new Error("signed helper has no valid Developer ID team identifier");
+  }
+  if (signingIdentifier !== "com.chainlesschain.cli.mcp-launcher") {
+    throw new Error("signed helper identifier does not match the launcher");
+  }
+  if (!/^CodeDirectory .+ flags=.+\(runtime\)/mu.test(details)) {
+    throw new Error("signed helper does not require the hardened runtime");
+  }
+  return { teamIdentifier, signingIdentifier };
+}
+
+export function createMacosMcpLauncherInstallContract({
+  helperPath,
+  expectedTeamIdentifier,
+  expectedDesignatedRequirement,
+  packageVersion,
+  platform = process.platform,
+}) {
+  if (platform !== "darwin") {
+    throw new Error("signed helper contract can only be created on macOS");
+  }
+  if (!/^[A-Z0-9]{10}$/u.test(expectedTeamIdentifier || "")) {
+    throw new Error("expected macOS team identifier is invalid");
+  }
+  if (
+    typeof expectedDesignatedRequirement !== "string" ||
+    !expectedDesignatedRequirement.startsWith("identifier ")
+  ) {
+    throw new Error("expected designated requirement is invalid");
+  }
+  if (!isMacosMcpLauncherPackageVersion(packageVersion)) {
+    throw new Error("macOS MCP launcher package version is invalid");
+  }
+  const inputs = loadMacosMcpLauncherBuildInputs();
+  const helper = path.resolve(helperPath);
+  const verification = run("/usr/bin/codesign", [
+    "--verify",
+    "--strict",
+    "--verbose=4",
+    `-R=${expectedDesignatedRequirement}`,
+    helper,
+  ]);
+  const description = run("/usr/bin/codesign", ["-dvvv", helper]);
+  const signing = parseCodesignDetails(description.stderr);
+  const requirement = run("/usr/bin/codesign", [
+    "-dr",
+    "-",
+    helper,
+  ]).stderr.match(/^designated => (.+)$/mu)?.[1];
+  if (
+    verification.status !== 0 ||
+    signing.teamIdentifier !== expectedTeamIdentifier ||
+    requirement !== expectedDesignatedRequirement
+  ) {
+    throw new Error("helper signature does not match protected release policy");
+  }
+  const helperBytes = fs.readFileSync(helper);
+  return Object.freeze({
+    schema: MACOS_MCP_LAUNCHER_INSTALL_CONTRACT_SCHEMA,
+    protocolVersion: inputs.protocol.protocolVersion,
+    protocolSha256: inputs.protocolSha256,
+    sourceSha256: inputs.sourceSha256,
+    gateBootstrapSha256: inputs.gateBootstrapSha256,
+    helperSha256: sha256(helperBytes),
+    helperBytes: helperBytes.length,
+    packageIdentifier: inputs.protocol.packageIdentifier,
+    packageVersion,
+    helperInstallPath: inputs.protocol.helperInstallPath,
+    installContractPath: inputs.protocol.installContractPath,
+    snapshotRoot: inputs.protocol.snapshotRoot,
+    snapshotLockName: inputs.protocol.snapshotLockName,
+    sandboxExecutable: inputs.protocol.sandboxExecutable,
+    ownerUid: 0,
+    ownerGid: 0,
+    helperMode: "4555",
+    contractMode: "0444",
+    snapshotRootMode: "0711",
+    snapshotLockMode: "0600",
+    snapshotLockMechanism:
+      "root-helper-openat-o_excl-preserve-inode-across-upgrade-v1",
+    signingIdentifier: signing.signingIdentifier,
+    teamIdentifier: signing.teamIdentifier,
+    designatedRequirement: requirement,
+    hardenedRuntimeRequired: true,
+    notarizedPackageRequired: true,
+    rootInstallRequired: true,
+    runtimeSnapshotMechanism: "root-copy-hash-protected-path-ready-unlink-v1",
+    entrySnapshotMechanism:
+      "root-copy-hash-readonly-reopen-unlink-fsync-fd4-v1",
+    targetDescriptorMechanism:
+      "stdio-fd3-null-fd4-entry-fd5-null-fd6-gate-fd7-ready-bootstrap-close-v1",
+    callerLifelineFd: inputs.protocol.callerLifelineFd,
+    globalLaunchSerialization: true,
+    maximumStaleSnapshots: inputs.protocol.maximumStaleSnapshots,
+    sandboxExecLiveGateRequired: true,
+    parentDeathLiveGateRequired: true,
+    inPlaceOverwriteLiveGateRequired: true,
+    signalFloodLiveGateRequired: true,
+    snapshotLockUpgradeLiveGateRequired: true,
+  });
+}
+
+function usage() {
+  throw new Error(
+    "usage: macos-mcp-launcher-build.mjs build <output> | contract <signed-helper> <team-id> <requirement> <package-version> <output.json>",
+  );
+}
+
+function main(argv = process.argv.slice(2)) {
+  if (argv[0] === "build" && argv.length === 2) {
+    const built = buildMacosMcpLauncher(argv[1]);
+    process.stdout.write(`${built.sourceSha256}  ${built.output}\n`);
+    return;
+  }
+  if (argv[0] === "contract" && argv.length === 6) {
+    const contract = createMacosMcpLauncherInstallContract({
+      helperPath: argv[1],
+      expectedTeamIdentifier: argv[2],
+      expectedDesignatedRequirement: argv[3],
+      packageVersion: argv[4],
+    });
+    verifyMacosMcpLauncherInstallContract(contract);
+    fs.writeFileSync(
+      path.resolve(argv[5]),
+      `${JSON.stringify(contract, null, 2)}\n`,
+      {
+        mode: 0o600,
+      },
+    );
+    process.stdout.write(`${contract.helperSha256}  ${argv[5]}\n`);
+    return;
+  }
+  usage();
+}
+
+if (
+  process.argv[1] &&
+  path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)
+) {
+  try {
+    main();
+  } catch (error) {
+    process.stderr.write(`macOS MCP launcher build failed: ${error.message}\n`);
+    process.exitCode = 1;
+  }
+}

package/scripts/macos-mcp-launcher-postinstall.sh

@@ -0,0 +1,54 @@
+#!/bin/sh
+
+set -eu
+
+helper='/Library/PrivilegedHelperTools/com.chainlesschain.cli.mcp-launcher'
+contract='/Library/PrivilegedHelperTools/com.chainlesschain.cli.mcp-launcher.json'
+base='/Library/Application Support/ChainlessChain'
+launcher="$base/McpLauncher"
+snapshot_root="$launcher/runtime"
+lock="$snapshot_root/launcher.lock"
+
+verify_directory() {
+  candidate=$1
+  expected_mode=$2
+  if [ -L "$candidate" ] || [ ! -d "$candidate" ]; then
+    echo "invalid macOS MCP launcher directory: $candidate" >&2
+    exit 77
+  fi
+  if [ "$(/usr/bin/stat -f '%u:%g:%Lp' "$candidate")" != "0:0:$expected_mode" ]; then
+    echo "untrusted macOS MCP launcher directory metadata: $candidate" >&2
+    exit 77
+  fi
+}
+
+verify_regular() {
+  candidate=$1
+  expected_mode=$2
+  if [ -L "$candidate" ] || [ ! -f "$candidate" ]; then
+    echo "invalid macOS MCP launcher member: $candidate" >&2
+    exit 77
+  fi
+  if [ "$(/usr/bin/stat -f '%u:%g:%Lp:%l' "$candidate")" != "0:0:$expected_mode:1" ]; then
+    echo "untrusted macOS MCP launcher member metadata: $candidate" >&2
+    exit 77
+  fi
+}
+
+# This script deliberately never repairs pre-existing ownership or modes. The
+# signed pkg payload installs the helper, contract, and directories. The helper
+# creates the lock with openat(O_CREAT|O_EXCL|O_NOFOLLOW) only when absent; an
+# exact existing lock is verified and preserved across upgrades.
+verify_directory '/Library' 755
+verify_directory '/Library/PrivilegedHelperTools' 755
+verify_directory '/Library/Application Support' 755
+verify_directory "$base" 755
+verify_directory "$launcher" 755
+verify_directory "$snapshot_root" 711
+verify_regular "$helper" 4555
+verify_regular "$contract" 444
+/usr/bin/codesign --verify --strict --verbose=4 "$helper"
+"$helper" --install-lock-v1
+verify_regular "$lock" 600
+
+exit 0

package/scripts/macos-mcp-launcher-preinstall.sh

@@ -0,0 +1,61 @@
+#!/bin/sh
+
+set -eu
+
+helper='/Library/PrivilegedHelperTools/com.chainlesschain.cli.mcp-launcher'
+contract='/Library/PrivilegedHelperTools/com.chainlesschain.cli.mcp-launcher.json'
+base='/Library/Application Support/ChainlessChain'
+launcher="$base/McpLauncher"
+snapshot_root="$launcher/runtime"
+lock="$snapshot_root/launcher.lock"
+
+verify_directory() {
+  candidate=$1
+  expected_mode=$2
+  optional=$3
+  if [ ! -e "$candidate" ] && [ ! -L "$candidate" ]; then
+    [ "$optional" = 1 ] && return 0
+    echo "required macOS MCP launcher parent is absent: $candidate" >&2
+    exit 77
+  fi
+  if [ -L "$candidate" ] || [ ! -d "$candidate" ]; then
+    echo "refusing untrusted macOS MCP launcher directory: $candidate" >&2
+    exit 77
+  fi
+  if [ "$(/usr/bin/stat -f '%u:%g:%Lp' "$candidate")" != "0:0:$expected_mode" ]; then
+    echo "refusing macOS MCP launcher directory metadata: $candidate" >&2
+    exit 77
+  fi
+}
+
+verify_regular_if_present() {
+  candidate=$1
+  expected_mode=$2
+  if [ ! -e "$candidate" ] && [ ! -L "$candidate" ]; then
+    return 0
+  fi
+  if [ -L "$candidate" ] || [ ! -f "$candidate" ]; then
+    echo "refusing untrusted macOS MCP launcher member: $candidate" >&2
+    exit 77
+  fi
+  if [ "$(/usr/bin/stat -f '%u:%g:%Lp:%l' "$candidate")" != "0:0:$expected_mode:1" ]; then
+    echo "refusing macOS MCP launcher member metadata: $candidate" >&2
+    exit 77
+  fi
+}
+
+# Every optional product component is either absent below a verified,
+# non-user-writable root parent or already has the exact trusted metadata from
+# an earlier signed install. A non-root caller therefore cannot swap it after
+# this check; root compromise remains explicitly out of scope.
+verify_directory '/Library' 755 0
+verify_directory '/Library/Application Support' 755 0
+verify_directory '/Library/PrivilegedHelperTools' 755 1
+verify_directory "$base" 755 1
+verify_directory "$launcher" 755 1
+verify_directory "$snapshot_root" 711 1
+verify_regular_if_present "$helper" 4555
+verify_regular_if_present "$contract" 444
+verify_regular_if_present "$lock" 600
+
+exit 0

package/src/assets/web-panel/.build-hash

@@ -1 +1 @@
-0533b40f709896f0e2716d88e81405f70b394c6b070a69ffec5111a5a71096eb
+7501ce7991944fc2f8f59425dd357617431dca3c12f0059d15e4ca10e63b4df7