clinkx 1.1.1 → 1.2.0

package/dist/verified-repair/files.js

@@ -0,0 +1,114 @@
+import { constants, closeSync, fchmodSync, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { randomUUID } from "node:crypto";
+import { isPathWithinAllowedRoots, parseAllowedRootsEnv } from "../allowed-roots.js";
+import { inside, PACKAGE_ROOT, readBounded, safePath, sha } from "../project-verification/files.js";
+export function authorizedDirectory(path, source) {
+    if (!isAbsolute(path))
+        throw new Error("repair directories must be absolute");
+    const target = resolve(path);
+    safePath("/", relative("/", target), true);
+    const roots = parseAllowedRootsEnv({ includeArtifactOnly: !source, rejectBroadRoots: true });
+    if (!isPathWithinAllowedRoots(target, roots))
+        throw new Error(source
+            ? "repair project and copy parent require an authorized source root"
+            : "repair evidence requires an authorized I/O root");
+    return target;
+}
+export function assertSeparated(project, evidence, copyParent) {
+    const overlaps = (a, b) => inside(a, b) || inside(b, a);
+    if (overlaps(project, evidence) || overlaps(project, copyParent) || overlaps(evidence, copyParent)
+        || overlaps(PACKAGE_ROOT, evidence) || overlaps(PACKAGE_ROOT, copyParent)) {
+        throw new Error("repair project, evidence and copy parent must be separate; evidence/copy must be outside the installation");
+    }
+}
+export function captureFiles(project, paths) {
+    let total = 0;
+    return paths.map((path) => {
+        const bytes = readBounded(project, path);
+        total += bytes.length;
+        if (total > 64 * 1024 * 1024)
+            throw new Error("repair captured inputs exceed 64 MiB");
+        const mode = lstatSync(safePath(project, path)).mode & 0o7777;
+        return { path, bytes, sha256: sha(bytes), mode };
+    });
+}
+export function text(bytes) {
+    const value = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    if (value.includes("\0") || !Buffer.from(value, "utf8").equals(bytes))
+        throw new Error("repair writable files must be regular UTF-8 text");
+    return value;
+}
+export function assertCurrent(project, expected, modes) {
+    for (const [path, digest] of expected) {
+        if (sha(readBounded(project, path)) !== digest)
+            throw new Error(`declared input drift: ${path}`);
+        if (modes?.has(path) && (lstatSync(safePath(project, path)).mode & 0o7777) !== modes.get(path))
+            throw new Error(`declared input mode drift: ${path}`);
+    }
+}
+/** Read-only reconciliation of an admitted batch. It never authorizes replay. */
+export function reconcileAppliedPaths(project, admitted) {
+    return admitted.map((entry) => {
+        let actual;
+        try {
+            actual = sha(readBounded(project, entry.path, 64 * 1024));
+        }
+        catch { /* Missing, oversized or unsafe current bytes stay unknown. */ }
+        return { ...entry, status: actual === entry.replacement_sha256 ? "replacement" : actual === entry.original_sha256 ? "original" : "unknown" };
+    });
+}
+export function writeReplacement(project, path, bytes, mode, expected, signal, rename = renameSync) {
+    signal?.throwIfAborted();
+    const target = safePath(project, path);
+    if (sha(readBounded(project, path)) !== expected)
+        throw new Error(`declared input drift before rename: ${path}`);
+    if ((lstatSync(target).mode & 0o7777) !== mode)
+        throw new Error(`declared input mode drift before rename: ${path}`);
+    const temporary = join(dirname(target), `.clinkx-repair-${randomUUID()}.tmp`);
+    const fd = openSync(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, mode);
+    let renamed = false;
+    try {
+        writeFileSync(fd, bytes);
+        fchmodSync(fd, mode);
+        fsyncSync(fd);
+        if (!fstatSync(fd).isFile())
+            throw new Error("repair temporary is not regular");
+        signal?.throwIfAborted();
+        if (sha(readBounded(project, path)) !== expected)
+            throw new Error(`declared input drift before rename: ${path}`);
+        if ((lstatSync(target).mode & 0o7777) !== mode)
+            throw new Error(`declared input mode drift before rename: ${path}`);
+        rename(temporary, target);
+        renamed = true;
+    }
+    finally {
+        closeSync(fd);
+        if (!renamed) {
+            try {
+                unlinkSync(temporary);
+            }
+            catch (error) {
+                if (error.code !== "ENOENT")
+                    throw error;
+            }
+        }
+    }
+}
+export function materialize(root, files, replacements) {
+    for (const file of files) {
+        const target = resolve(root, file.path);
+        if (!inside(root, target))
+            throw new Error("copy path escapes private root");
+        mkdirSync(dirname(target), { recursive: true, mode: 0o700 });
+        const fd = openSync(target, "wx", file.mode);
+        try {
+            writeFileSync(fd, replacements.get(file.path) ?? file.bytes);
+            fchmodSync(fd, file.mode);
+        }
+        finally {
+            closeSync(fd);
+        }
+    }
+}
+//# sourceMappingURL=files.js.map

package/dist/verified-repair/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/verified-repair/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxJ,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,kCAAkC,CAAC;AAIpG,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAe;IAC/D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,oBAAoB,CAAC,EAAE,mBAAmB,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7F,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM;YAClE,CAAC,CAAC,kEAAkE;YACpE,CAAC,CAAC,iDAAiD,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,QAAgB,EAAE,UAAkB;IACnF,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,IAAI,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;WAC7F,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,2GAA2G,CAAC,CAAC;IAC/H,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,KAAwB;IACpE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QACtB,IAAI,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,KAAa;IAChC,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC3I,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,QAAqC,EAAE,KAAmC;IACvH,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;QACjG,IAAI,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;IACxJ,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,qBAAqB,CACnC,OAAe,EAAE,QAAsB;IAEvC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5B,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YAAC,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,8DAA8D,CAAC,CAAC;QAC3I,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,KAAK,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC/I,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,IAAY,EAAE,KAAa,EAAE,IAAY,EACzF,QAAgB,EAAE,MAAoB,EAAE,SAA4B,UAAU;IAC9E,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;IACjH,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;IACpH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,kBAAkB,UAAU,EAAE,MAAM,CAAC,CAAC;IAC9E,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACvH,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACzB,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACrB,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAChF,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;QACjH,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;QACpH,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC1B,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAC9B,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YAAC,CAAC;QACxF,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAA8B,EAAE,YAAyC;IACjH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC7E,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC;YAAC,aAAa,CAAC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;gBACxF,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/dist/verified-repair/host.d.ts

@@ -0,0 +1,14 @@
+import { renameSync } from "node:fs";
+import type { PreparedVerifiedRepair, PrepareVerifiedRepairOptions, VerifiedRepairHost } from "../../clinkx-workflows/dist/verified-repair/host.js";
+import { type RepairRecord } from "../../clinkx-workflows/dist/verified-repair/contract.js";
+import { ProjectVerificationService } from "../project-verification/service.js";
+export declare class NativeVerifiedRepairHost implements VerifiedRepairHost {
+    private readonly service;
+    private readonly rename;
+    constructor(service: ProjectVerificationService, rename?: typeof renameSync);
+    prepare(options: PrepareVerifiedRepairOptions): Promise<PreparedVerifiedRepair>;
+    readInterruptedRun(options: {
+        runId: string;
+        runDir: string;
+    }): Promise<RepairRecord | undefined>;
+}