codexgpt 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.example.md +20 -0
- package/CHANGELOG.md +342 -0
- package/CHATGPT_PROMPT.md +12 -0
- package/CLOUDFLARED_VERIFIED_INSTALL.md +94 -0
- package/CODEX_PROMPT.md +12 -0
- package/CONTRIBUTING.md +62 -0
- package/DOMAIN_SETUP.md +275 -0
- package/FAQ.md +366 -0
- package/FAQ_ZH.md +329 -0
- package/LICENSE +21 -0
- package/PUBLIC_LAUNCH_CHECKLIST.md +111 -0
- package/README.md +490 -0
- package/README_ZH.md +747 -0
- package/SECURITY.md +295 -0
- package/config.example.env +103 -0
- package/dist/access/fullAccessLease.js +148 -0
- package/dist/access/fullAccessLease.js.map +1 -0
- package/dist/access/protectedRoots.js +122 -0
- package/dist/access/protectedRoots.js.map +1 -0
- package/dist/access/rootAdmission.js +347 -0
- package/dist/access/rootAdmission.js.map +1 -0
- package/dist/analysis/cache.js +27 -0
- package/dist/analysis/cache.js.map +1 -0
- package/dist/analysis/classify.js +102 -0
- package/dist/analysis/classify.js.map +1 -0
- package/dist/analysis/extract.js +139 -0
- package/dist/analysis/extract.js.map +1 -0
- package/dist/analysis/graph.js +22 -0
- package/dist/analysis/graph.js.map +1 -0
- package/dist/analysis/impact.js +167 -0
- package/dist/analysis/impact.js.map +1 -0
- package/dist/analysis/index.js +215 -0
- package/dist/analysis/index.js.map +1 -0
- package/dist/analysis/inventory.js +51 -0
- package/dist/analysis/inventory.js.map +1 -0
- package/dist/analysis/providers.js +24 -0
- package/dist/analysis/providers.js.map +1 -0
- package/dist/analysis/rank.js +27 -0
- package/dist/analysis/rank.js.map +1 -0
- package/dist/analysis/types.js +8 -0
- package/dist/analysis/types.js.map +1 -0
- package/dist/audit/canonicalJson.js +79 -0
- package/dist/audit/canonicalJson.js.map +1 -0
- package/dist/audit/diagnostics.js +128 -0
- package/dist/audit/diagnostics.js.map +1 -0
- package/dist/audit/index.js +12 -0
- package/dist/audit/index.js.map +1 -0
- package/dist/audit/lifecycleV3.js +53 -0
- package/dist/audit/lifecycleV3.js.map +1 -0
- package/dist/audit/lifecycleV4.js +70 -0
- package/dist/audit/lifecycleV4.js.map +1 -0
- package/dist/audit/lock.js +195 -0
- package/dist/audit/lock.js.map +1 -0
- package/dist/audit/queryTool.js +120 -0
- package/dist/audit/queryTool.js.map +1 -0
- package/dist/audit/runtime.js +48 -0
- package/dist/audit/runtime.js.map +1 -0
- package/dist/audit/schemas.js +640 -0
- package/dist/audit/schemas.js.map +1 -0
- package/dist/audit/store.js +1309 -0
- package/dist/audit/store.js.map +1 -0
- package/dist/audit/transactionParticipant.js +45 -0
- package/dist/audit/transactionParticipant.js.map +1 -0
- package/dist/audit/types.js +11 -0
- package/dist/audit/types.js.map +1 -0
- package/dist/auth/audit.js +44 -0
- package/dist/auth/audit.js.map +1 -0
- package/dist/auth/authorizationStore.js +333 -0
- package/dist/auth/authorizationStore.js.map +1 -0
- package/dist/auth/challenges.js +25 -0
- package/dist/auth/challenges.js.map +1 -0
- package/dist/auth/clientStore.js +469 -0
- package/dist/auth/clientStore.js.map +1 -0
- package/dist/auth/cloudflareConfig.js +112 -0
- package/dist/auth/cloudflareConfig.js.map +1 -0
- package/dist/auth/configuration.js +167 -0
- package/dist/auth/configuration.js.map +1 -0
- package/dist/auth/credentialStore.js +65 -0
- package/dist/auth/credentialStore.js.map +1 -0
- package/dist/auth/deploymentLock.js +220 -0
- package/dist/auth/deploymentLock.js.map +1 -0
- package/dist/auth/deploymentRegistry.js +149 -0
- package/dist/auth/deploymentRegistry.js.map +1 -0
- package/dist/auth/errors.js +26 -0
- package/dist/auth/errors.js.map +1 -0
- package/dist/auth/grantStore.js +307 -0
- package/dist/auth/grantStore.js.map +1 -0
- package/dist/auth/index.js +39 -0
- package/dist/auth/index.js.map +1 -0
- package/dist/auth/keyManager.js +148 -0
- package/dist/auth/keyManager.js.map +1 -0
- package/dist/auth/localAdminSession.js +173 -0
- package/dist/auth/localAdminSession.js.map +1 -0
- package/dist/auth/metadata.js +69 -0
- package/dist/auth/metadata.js.map +1 -0
- package/dist/auth/oauthProvider.js +589 -0
- package/dist/auth/oauthProvider.js.map +1 -0
- package/dist/auth/ownerApproval.js +51 -0
- package/dist/auth/ownerApproval.js.map +1 -0
- package/dist/auth/policyIdentity.js +189 -0
- package/dist/auth/policyIdentity.js.map +1 -0
- package/dist/auth/rateLimits.js +66 -0
- package/dist/auth/rateLimits.js.map +1 -0
- package/dist/auth/recovery.js +275 -0
- package/dist/auth/recovery.js.map +1 -0
- package/dist/auth/requestContext.js +34 -0
- package/dist/auth/requestContext.js.map +1 -0
- package/dist/auth/resourceMiddleware.js +147 -0
- package/dist/auth/resourceMiddleware.js.map +1 -0
- package/dist/auth/runtimeStatus.js +51 -0
- package/dist/auth/runtimeStatus.js.map +1 -0
- package/dist/auth/schemas.js +84 -0
- package/dist/auth/schemas.js.map +1 -0
- package/dist/auth/stateStore.js +468 -0
- package/dist/auth/stateStore.js.map +1 -0
- package/dist/auth/tokenService.js +631 -0
- package/dist/auth/tokenService.js.map +1 -0
- package/dist/auth/toolSecurity.js +108 -0
- package/dist/auth/toolSecurity.js.map +1 -0
- package/dist/auth/types.js +6 -0
- package/dist/auth/types.js.map +1 -0
- package/dist/auth/windowsDpapi.js +193 -0
- package/dist/auth/windowsDpapi.js.map +1 -0
- package/dist/bashOps.js +292 -0
- package/dist/bashOps.js.map +1 -0
- package/dist/capabilitiesOps.js +412 -0
- package/dist/capabilitiesOps.js.map +1 -0
- package/dist/changesets/crypto.js +92 -0
- package/dist/changesets/crypto.js.map +1 -0
- package/dist/changesets/index.js +9 -0
- package/dist/changesets/index.js.map +1 -0
- package/dist/changesets/moveStore.js +237 -0
- package/dist/changesets/moveStore.js.map +1 -0
- package/dist/changesets/moveUndo.js +386 -0
- package/dist/changesets/moveUndo.js.map +1 -0
- package/dist/changesets/schemas.js +234 -0
- package/dist/changesets/schemas.js.map +1 -0
- package/dist/changesets/store.js +573 -0
- package/dist/changesets/store.js.map +1 -0
- package/dist/changesets/types.js +9 -0
- package/dist/changesets/types.js.map +1 -0
- package/dist/changesets/undo.js +525 -0
- package/dist/changesets/undo.js.map +1 -0
- package/dist/changesets/unifiedUndo.js +31 -0
- package/dist/changesets/unifiedUndo.js.map +1 -0
- package/dist/cliEnvironment.js +85 -0
- package/dist/cliEnvironment.js.map +1 -0
- package/dist/codexSessions.js +733 -0
- package/dist/codexSessions.js.map +1 -0
- package/dist/codexgptSupertool.js +216 -0
- package/dist/codexgptSupertool.js.map +1 -0
- package/dist/codexproSupertool.js +204 -0
- package/dist/codexproSupertool.js.map +1 -0
- package/dist/config.js +733 -0
- package/dist/config.js.map +1 -0
- package/dist/control/localApprovalClient.js +287 -0
- package/dist/control/localApprovalClient.js.map +1 -0
- package/dist/control/localApprovalServer.js +466 -0
- package/dist/control/localApprovalServer.js.map +1 -0
- package/dist/control/runtime.js +178 -0
- package/dist/control/runtime.js.map +1 -0
- package/dist/control/schemas.js +184 -0
- package/dist/control/schemas.js.map +1 -0
- package/dist/control/windowsLocalControl.js +348 -0
- package/dist/control/windowsLocalControl.js.map +1 -0
- package/dist/fsOps.js +541 -0
- package/dist/fsOps.js.map +1 -0
- package/dist/git/admission.js +26 -0
- package/dist/git/admission.js.map +1 -0
- package/dist/git/branchService.js +51 -0
- package/dist/git/branchService.js.map +1 -0
- package/dist/git/capabilities.js +143 -0
- package/dist/git/capabilities.js.map +1 -0
- package/dist/git/commitService.js +344 -0
- package/dist/git/commitService.js.map +1 -0
- package/dist/git/durableState.js +151 -0
- package/dist/git/durableState.js.map +1 -0
- package/dist/git/execution.js +451 -0
- package/dist/git/execution.js.map +1 -0
- package/dist/git/fileTransaction.js +50 -0
- package/dist/git/fileTransaction.js.map +1 -0
- package/dist/git/indexService.js +421 -0
- package/dist/git/indexService.js.map +1 -0
- package/dist/git/integrations.js +653 -0
- package/dist/git/integrations.js.map +1 -0
- package/dist/git/locks.js +287 -0
- package/dist/git/locks.js.map +1 -0
- package/dist/git/mutationContext.js +92 -0
- package/dist/git/mutationContext.js.map +1 -0
- package/dist/git/mutationJournal.js +91 -0
- package/dist/git/mutationJournal.js.map +1 -0
- package/dist/git/mutationService.js +352 -0
- package/dist/git/mutationService.js.map +1 -0
- package/dist/git/normalization.js +57 -0
- package/dist/git/normalization.js.map +1 -0
- package/dist/git/objectQuarantine.js +243 -0
- package/dist/git/objectQuarantine.js.map +1 -0
- package/dist/git/opaqueRecordStore.js +187 -0
- package/dist/git/opaqueRecordStore.js.map +1 -0
- package/dist/git/operationStore.js +287 -0
- package/dist/git/operationStore.js.map +1 -0
- package/dist/git/parsers.js +311 -0
- package/dist/git/parsers.js.map +1 -0
- package/dist/git/privateIndex.js +79 -0
- package/dist/git/privateIndex.js.map +1 -0
- package/dist/git/productionBootstrap.js +39 -0
- package/dist/git/productionBootstrap.js.map +1 -0
- package/dist/git/readService.js +846 -0
- package/dist/git/readService.js.map +1 -0
- package/dist/git/recovery.js +417 -0
- package/dist/git/recovery.js.map +1 -0
- package/dist/git/repositoryIdentity.js +611 -0
- package/dist/git/repositoryIdentity.js.map +1 -0
- package/dist/git/repositoryStore.js +237 -0
- package/dist/git/repositoryStore.js.map +1 -0
- package/dist/git/resources.js +113 -0
- package/dist/git/resources.js.map +1 -0
- package/dist/git/restoreService.js +178 -0
- package/dist/git/restoreService.js.map +1 -0
- package/dist/git/reviewToken.js +86 -0
- package/dist/git/reviewToken.js.map +1 -0
- package/dist/git/stashService.js +566 -0
- package/dist/git/stashService.js.map +1 -0
- package/dist/git/stateToken.js +139 -0
- package/dist/git/stateToken.js.map +1 -0
- package/dist/gitOps.js +147 -0
- package/dist/gitOps.js.map +1 -0
- package/dist/guard.js +608 -0
- package/dist/guard.js.map +1 -0
- package/dist/guidance/diagnostics.js +14 -0
- package/dist/guidance/diagnostics.js.map +1 -0
- package/dist/guidance/instructions.js +167 -0
- package/dist/guidance/instructions.js.map +1 -0
- package/dist/guidance/mode.js +18 -0
- package/dist/guidance/mode.js.map +1 -0
- package/dist/guidance/openaiSkillMetadata.js +29 -0
- package/dist/guidance/openaiSkillMetadata.js.map +1 -0
- package/dist/guidance/safeTextReader.js +171 -0
- package/dist/guidance/safeTextReader.js.map +1 -0
- package/dist/guidance/skillCatalog.js +70 -0
- package/dist/guidance/skillCatalog.js.map +1 -0
- package/dist/guidance/skillDiscovery.js +353 -0
- package/dist/guidance/skillDiscovery.js.map +1 -0
- package/dist/guidance/skillMetadata.js +115 -0
- package/dist/guidance/skillMetadata.js.map +1 -0
- package/dist/guidance/skillResources.js +146 -0
- package/dist/guidance/skillResources.js.map +1 -0
- package/dist/handoffOps.js +449 -0
- package/dist/handoffOps.js.map +1 -0
- package/dist/http/localAdminApp.js +203 -0
- package/dist/http/localAdminApp.js.map +1 -0
- package/dist/http/oauthMcpRuntime.js +294 -0
- package/dist/http/oauthMcpRuntime.js.map +1 -0
- package/dist/http/publicApp.js +350 -0
- package/dist/http/publicApp.js.map +1 -0
- package/dist/http/securityHeaders.js +11 -0
- package/dist/http/securityHeaders.js.map +1 -0
- package/dist/http.js +2076 -0
- package/dist/http.js.map +1 -0
- package/dist/moves/engine.js +1079 -0
- package/dist/moves/engine.js.map +1 -0
- package/dist/moves/index.js +6 -0
- package/dist/moves/index.js.map +1 -0
- package/dist/moves/planner.js +270 -0
- package/dist/moves/planner.js.map +1 -0
- package/dist/moves/recovery.js +557 -0
- package/dist/moves/recovery.js.map +1 -0
- package/dist/moves/service.js +300 -0
- package/dist/moves/service.js.map +1 -0
- package/dist/moves/types.js +11 -0
- package/dist/moves/types.js.map +1 -0
- package/dist/mutations/index.js +4 -0
- package/dist/mutations/index.js.map +1 -0
- package/dist/mutations/lifecycle.js +165 -0
- package/dist/mutations/lifecycle.js.map +1 -0
- package/dist/mutations/localService.js +163 -0
- package/dist/mutations/localService.js.map +1 -0
- package/dist/mutations/runtime.js +322 -0
- package/dist/mutations/runtime.js.map +1 -0
- package/dist/mutations/types.js +2 -0
- package/dist/mutations/types.js.map +1 -0
- package/dist/mutations/writers.js +360 -0
- package/dist/mutations/writers.js.map +1 -0
- package/dist/patchOps.js +420 -0
- package/dist/patchOps.js.map +1 -0
- package/dist/policy/approval.js +306 -0
- package/dist/policy/approval.js.map +1 -0
- package/dist/policy/audit.js +88 -0
- package/dist/policy/audit.js.map +1 -0
- package/dist/policy/authorizationFacts.js +187 -0
- package/dist/policy/authorizationFacts.js.map +1 -0
- package/dist/policy/compat.js +104 -0
- package/dist/policy/compat.js.map +1 -0
- package/dist/policy/context.js +31 -0
- package/dist/policy/context.js.map +1 -0
- package/dist/policy/enforcement.js +46 -0
- package/dist/policy/enforcement.js.map +1 -0
- package/dist/policy/evaluator.js +338 -0
- package/dist/policy/evaluator.js.map +1 -0
- package/dist/policy/executionCapabilities.js +80 -0
- package/dist/policy/executionCapabilities.js.map +1 -0
- package/dist/policy/executionResources.js +192 -0
- package/dist/policy/executionResources.js.map +1 -0
- package/dist/policy/fullAccessResources.js +23 -0
- package/dist/policy/fullAccessResources.js.map +1 -0
- package/dist/policy/hardPolicy.js +50 -0
- package/dist/policy/hardPolicy.js.map +1 -0
- package/dist/policy/identity.js +142 -0
- package/dist/policy/identity.js.map +1 -0
- package/dist/policy/integration.js +331 -0
- package/dist/policy/integration.js.map +1 -0
- package/dist/policy/pendingApprovals.js +301 -0
- package/dist/policy/pendingApprovals.js.map +1 -0
- package/dist/policy/profileStore.js +367 -0
- package/dist/policy/profileStore.js.map +1 -0
- package/dist/policy/resources.js +249 -0
- package/dist/policy/resources.js.map +1 -0
- package/dist/policy/runtime.js +713 -0
- package/dist/policy/runtime.js.map +1 -0
- package/dist/policy/schemas.js +625 -0
- package/dist/policy/schemas.js.map +1 -0
- package/dist/policy/toolPolicy.js +141 -0
- package/dist/policy/toolPolicy.js.map +1 -0
- package/dist/policy/transport.js +10 -0
- package/dist/policy/transport.js.map +1 -0
- package/dist/policy/types.js +31 -0
- package/dist/policy/types.js.map +1 -0
- package/dist/proContext.js +675 -0
- package/dist/proContext.js.map +1 -0
- package/dist/process/authority.js +18 -0
- package/dist/process/authority.js.map +1 -0
- package/dist/process/backendDiscovery.js +83 -0
- package/dist/process/backendDiscovery.js.map +1 -0
- package/dist/process/commandCompiler.js +71 -0
- package/dist/process/commandCompiler.js.map +1 -0
- package/dist/process/outputCursor.js +67 -0
- package/dist/process/outputCursor.js.map +1 -0
- package/dist/process/outputQuota.js +94 -0
- package/dist/process/outputQuota.js.map +1 -0
- package/dist/process/outputRing.js +138 -0
- package/dist/process/outputRing.js.map +1 -0
- package/dist/process/processAuditCoordinator.js +52 -0
- package/dist/process/processAuditCoordinator.js.map +1 -0
- package/dist/process/processManager.js +311 -0
- package/dist/process/processManager.js.map +1 -0
- package/dist/process/runCommand.js +332 -0
- package/dist/process/runCommand.js.map +1 -0
- package/dist/process/streamingRedactor.js +105 -0
- package/dist/process/streamingRedactor.js.map +1 -0
- package/dist/process/types.js +2 -0
- package/dist/process/types.js.map +1 -0
- package/dist/process/windowsHostClient.js +604 -0
- package/dist/process/windowsHostClient.js.map +1 -0
- package/dist/process/windowsHostProtocol.js +270 -0
- package/dist/process/windowsHostProtocol.js.map +1 -0
- package/dist/process/windowsPersistentBackend.js +263 -0
- package/dist/process/windowsPersistentBackend.js.map +1 -0
- package/dist/productionRuntime.js +907 -0
- package/dist/productionRuntime.js.map +1 -0
- package/dist/profileStore.js +231 -0
- package/dist/profileStore.js.map +1 -0
- package/dist/redact.js +124 -0
- package/dist/redact.js.map +1 -0
- package/dist/searchOps.js +186 -0
- package/dist/searchOps.js.map +1 -0
- package/dist/selfTestOps.js +786 -0
- package/dist/selfTestOps.js.map +1 -0
- package/dist/semantic/budgets.js +12 -0
- package/dist/semantic/budgets.js.map +1 -0
- package/dist/semantic/builtin/typescriptAssets.js +68 -0
- package/dist/semantic/builtin/typescriptAssets.js.map +1 -0
- package/dist/semantic/builtin/typescriptProvider.js +211 -0
- package/dist/semantic/builtin/typescriptProvider.js.map +1 -0
- package/dist/semantic/builtin/typescriptWorker.js +365 -0
- package/dist/semantic/builtin/typescriptWorker.js.map +1 -0
- package/dist/semantic/diffPreview.js +36 -0
- package/dist/semantic/diffPreview.js.map +1 -0
- package/dist/semantic/index.js +11 -0
- package/dist/semantic/index.js.map +1 -0
- package/dist/semantic/manager.js +522 -0
- package/dist/semantic/manager.js.map +1 -0
- package/dist/semantic/positions.js +86 -0
- package/dist/semantic/positions.js.map +1 -0
- package/dist/semantic/previewStore.js +276 -0
- package/dist/semantic/previewStore.js.map +1 -0
- package/dist/semantic/projectResolver.js +309 -0
- package/dist/semantic/projectResolver.js.map +1 -0
- package/dist/semantic/sourceSnapshot.js +54 -0
- package/dist/semantic/sourceSnapshot.js.map +1 -0
- package/dist/semantic/status.js +46 -0
- package/dist/semantic/status.js.map +1 -0
- package/dist/semantic/types.js +2 -0
- package/dist/semantic/types.js.map +1 -0
- package/dist/server.js +8676 -0
- package/dist/server.js.map +1 -0
- package/dist/stdio.js +64 -0
- package/dist/stdio.js.map +1 -0
- package/dist/toolCardWidget.js +2000 -0
- package/dist/toolCardWidget.js.map +1 -0
- package/dist/tools/contracts/catalog.js +111 -0
- package/dist/tools/contracts/catalog.js.map +1 -0
- package/dist/tools/contracts/index.js +8 -0
- package/dist/tools/contracts/index.js.map +1 -0
- package/dist/tools/contracts/registration.js +27 -0
- package/dist/tools/contracts/registration.js.map +1 -0
- package/dist/tools/contracts/schemas.js +11 -0
- package/dist/tools/contracts/schemas.js.map +1 -0
- package/dist/tools/contracts/types.js +2 -0
- package/dist/tools/contracts/types.js.map +1 -0
- package/dist/tools/contracts/v3.js +76 -0
- package/dist/tools/contracts/v3.js.map +1 -0
- package/dist/tools/contracts/v4.js +39 -0
- package/dist/tools/contracts/v4.js.map +1 -0
- package/dist/tools/contracts/v5.js +20 -0
- package/dist/tools/contracts/v5.js.map +1 -0
- package/dist/tools/phase3dServer.js +350 -0
- package/dist/tools/phase3dServer.js.map +1 -0
- package/dist/tools/schemas/applyPatch.js +388 -0
- package/dist/tools/schemas/applyPatch.js.map +1 -0
- package/dist/tools/schemas/bash.js +202 -0
- package/dist/tools/schemas/bash.js.map +1 -0
- package/dist/tools/schemas/closeWorkspace.js +105 -0
- package/dist/tools/schemas/closeWorkspace.js.map +1 -0
- package/dist/tools/schemas/codexContext.js +402 -0
- package/dist/tools/schemas/codexContext.js.map +1 -0
- package/dist/tools/schemas/codexSessions.js +328 -0
- package/dist/tools/schemas/codexSessions.js.map +1 -0
- package/dist/tools/schemas/codexgpt.js +1068 -0
- package/dist/tools/schemas/codexgpt.js.map +1 -0
- package/dist/tools/schemas/codexgptInventory.js +359 -0
- package/dist/tools/schemas/codexgptInventory.js.map +1 -0
- package/dist/tools/schemas/codexgptSelfTest.js +563 -0
- package/dist/tools/schemas/codexgptSelfTest.js.map +1 -0
- package/dist/tools/schemas/codexpro.js +917 -0
- package/dist/tools/schemas/codexpro.js.map +1 -0
- package/dist/tools/schemas/codexproInventory.js +352 -0
- package/dist/tools/schemas/codexproInventory.js.map +1 -0
- package/dist/tools/schemas/codexproSelfTest.js +546 -0
- package/dist/tools/schemas/codexproSelfTest.js.map +1 -0
- package/dist/tools/schemas/common.js +21 -0
- package/dist/tools/schemas/common.js.map +1 -0
- package/dist/tools/schemas/createTaskWorktree.js +51 -0
- package/dist/tools/schemas/createTaskWorktree.js.map +1 -0
- package/dist/tools/schemas/edit.js +321 -0
- package/dist/tools/schemas/edit.js.map +1 -0
- package/dist/tools/schemas/execution.js +330 -0
- package/dist/tools/schemas/execution.js.map +1 -0
- package/dist/tools/schemas/exportProContext.js +370 -0
- package/dist/tools/schemas/exportProContext.js.map +1 -0
- package/dist/tools/schemas/getTaskWorktree.js +19 -0
- package/dist/tools/schemas/getTaskWorktree.js.map +1 -0
- package/dist/tools/schemas/gitBranch.js +42 -0
- package/dist/tools/schemas/gitBranch.js.map +1 -0
- package/dist/tools/schemas/gitCommit.js +40 -0
- package/dist/tools/schemas/gitCommit.js.map +1 -0
- package/dist/tools/schemas/gitCreateBranch.js +22 -0
- package/dist/tools/schemas/gitCreateBranch.js.map +1 -0
- package/dist/tools/schemas/gitDiff.js +222 -0
- package/dist/tools/schemas/gitDiff.js.map +1 -0
- package/dist/tools/schemas/gitLog.js +41 -0
- package/dist/tools/schemas/gitLog.js.map +1 -0
- package/dist/tools/schemas/gitRestore.js +47 -0
- package/dist/tools/schemas/gitRestore.js.map +1 -0
- package/dist/tools/schemas/gitStage.js +33 -0
- package/dist/tools/schemas/gitStage.js.map +1 -0
- package/dist/tools/schemas/gitStash.js +102 -0
- package/dist/tools/schemas/gitStash.js.map +1 -0
- package/dist/tools/schemas/gitStatus.js +226 -0
- package/dist/tools/schemas/gitStatus.js.map +1 -0
- package/dist/tools/schemas/gitV4Common.js +205 -0
- package/dist/tools/schemas/gitV4Common.js.map +1 -0
- package/dist/tools/schemas/guidance.js +40 -0
- package/dist/tools/schemas/guidance.js.map +1 -0
- package/dist/tools/schemas/handoffToAgent.js +276 -0
- package/dist/tools/schemas/handoffToAgent.js.map +1 -0
- package/dist/tools/schemas/handoffToCodex.js +137 -0
- package/dist/tools/schemas/handoffToCodex.js.map +1 -0
- package/dist/tools/schemas/inspectWorkspace.js +379 -0
- package/dist/tools/schemas/inspectWorkspace.js.map +1 -0
- package/dist/tools/schemas/listTaskWorktrees.js +21 -0
- package/dist/tools/schemas/listTaskWorktrees.js.map +1 -0
- package/dist/tools/schemas/listWorkspaces.js +134 -0
- package/dist/tools/schemas/listWorkspaces.js.map +1 -0
- package/dist/tools/schemas/loadSkill.js +619 -0
- package/dist/tools/schemas/loadSkill.js.map +1 -0
- package/dist/tools/schemas/mergeTaskWorktree.js +105 -0
- package/dist/tools/schemas/mergeTaskWorktree.js.map +1 -0
- package/dist/tools/schemas/movePaths.js +175 -0
- package/dist/tools/schemas/movePaths.js.map +1 -0
- package/dist/tools/schemas/openCurrentWorkspace.js +174 -0
- package/dist/tools/schemas/openCurrentWorkspace.js.map +1 -0
- package/dist/tools/schemas/openFullAccessWorkspace.js +81 -0
- package/dist/tools/schemas/openFullAccessWorkspace.js.map +1 -0
- package/dist/tools/schemas/openWorkspace.js +193 -0
- package/dist/tools/schemas/openWorkspace.js.map +1 -0
- package/dist/tools/schemas/queryAuditEvents.js +193 -0
- package/dist/tools/schemas/queryAuditEvents.js.map +1 -0
- package/dist/tools/schemas/read.js +199 -0
- package/dist/tools/schemas/read.js.map +1 -0
- package/dist/tools/schemas/readCodexSession.js +353 -0
- package/dist/tools/schemas/readCodexSession.js.map +1 -0
- package/dist/tools/schemas/readHandoff.js +446 -0
- package/dist/tools/schemas/readHandoff.js.map +1 -0
- package/dist/tools/schemas/removeTaskWorktree.js +40 -0
- package/dist/tools/schemas/removeTaskWorktree.js.map +1 -0
- package/dist/tools/schemas/search.js +235 -0
- package/dist/tools/schemas/search.js.map +1 -0
- package/dist/tools/schemas/semantic.js +195 -0
- package/dist/tools/schemas/semantic.js.map +1 -0
- package/dist/tools/schemas/serverConfig.js +157 -0
- package/dist/tools/schemas/serverConfig.js.map +1 -0
- package/dist/tools/schemas/showChanges.js +283 -0
- package/dist/tools/schemas/showChanges.js.map +1 -0
- package/dist/tools/schemas/transactionResult.js +11 -0
- package/dist/tools/schemas/transactionResult.js.map +1 -0
- package/dist/tools/schemas/tree.js +136 -0
- package/dist/tools/schemas/tree.js.map +1 -0
- package/dist/tools/schemas/undoChangeSet.js +152 -0
- package/dist/tools/schemas/undoChangeSet.js.map +1 -0
- package/dist/tools/schemas/waitForHandoff.js +462 -0
- package/dist/tools/schemas/waitForHandoff.js.map +1 -0
- package/dist/tools/schemas/workspaceSnapshot.js +145 -0
- package/dist/tools/schemas/workspaceSnapshot.js.map +1 -0
- package/dist/tools/schemas/write.js +285 -0
- package/dist/tools/schemas/write.js.map +1 -0
- package/dist/transactions/atomicFs.js +438 -0
- package/dist/transactions/atomicFs.js.map +1 -0
- package/dist/transactions/atomicStateFile.js +190 -0
- package/dist/transactions/atomicStateFile.js.map +1 -0
- package/dist/transactions/engine.js +574 -0
- package/dist/transactions/engine.js.map +1 -0
- package/dist/transactions/index.js +12 -0
- package/dist/transactions/index.js.map +1 -0
- package/dist/transactions/installation.js +158 -0
- package/dist/transactions/installation.js.map +1 -0
- package/dist/transactions/manifestV2Store.js +96 -0
- package/dist/transactions/manifestV2Store.js.map +1 -0
- package/dist/transactions/participantRecovery.js +98 -0
- package/dist/transactions/participantRecovery.js.map +1 -0
- package/dist/transactions/recovery.js +513 -0
- package/dist/transactions/recovery.js.map +1 -0
- package/dist/transactions/schemas.js +365 -0
- package/dist/transactions/schemas.js.map +1 -0
- package/dist/transactions/stateRoot.js +63 -0
- package/dist/transactions/stateRoot.js.map +1 -0
- package/dist/transactions/types.js +11 -0
- package/dist/transactions/types.js.map +1 -0
- package/dist/transactions/workspaceLock.js +201 -0
- package/dist/transactions/workspaceLock.js.map +1 -0
- package/dist/workspaceOps.js +924 -0
- package/dist/workspaceOps.js.map +1 -0
- package/dist/worktrees/candidateWorkspace.js +566 -0
- package/dist/worktrees/candidateWorkspace.js.map +1 -0
- package/dist/worktrees/manager.js +258 -0
- package/dist/worktrees/manager.js.map +1 -0
- package/dist/worktrees/materializer.js +60 -0
- package/dist/worktrees/materializer.js.map +1 -0
- package/dist/worktrees/mergeExecute.js +498 -0
- package/dist/worktrees/mergeExecute.js.map +1 -0
- package/dist/worktrees/mergePlanStore.js +247 -0
- package/dist/worktrees/mergePlanStore.js.map +1 -0
- package/dist/worktrees/mergePrepare.js +709 -0
- package/dist/worktrees/mergePrepare.js.map +1 -0
- package/dist/worktrees/recovery.js +294 -0
- package/dist/worktrees/recovery.js.map +1 -0
- package/dist/worktrees/remove.js +296 -0
- package/dist/worktrees/remove.js.map +1 -0
- package/dist/worktrees/remover.js +57 -0
- package/dist/worktrees/remover.js.map +1 -0
- package/dist/worktrees/root.js +47 -0
- package/dist/worktrees/root.js.map +1 -0
- package/dist/worktrees/service.js +245 -0
- package/dist/worktrees/service.js.map +1 -0
- package/dist/worktrees/store.js +156 -0
- package/dist/worktrees/store.js.map +1 -0
- package/dist/worktrees/treeManifest.js +106 -0
- package/dist/worktrees/treeManifest.js.map +1 -0
- package/dist/worktrees/verificationReceipts.js +215 -0
- package/dist/worktrees/verificationReceipts.js.map +1 -0
- package/dist/worktrees/verificationTerminal.js +23 -0
- package/dist/worktrees/verificationTerminal.js.map +1 -0
- package/dist/worktrees/workspaceAuthority.js +64 -0
- package/dist/worktrees/workspaceAuthority.js.map +1 -0
- package/docs/favicon.svg +5 -0
- package/docs/index.html +624 -0
- package/docs/og.svg +52 -0
- package/docs/script.js +33 -0
- package/docs/star.svg +11 -0
- package/docs/styles.css +1571 -0
- package/docs/zh.html +428 -0
- package/package.json +121 -0
- package/scripts/analysis-cli-smoke.mjs +81 -0
- package/scripts/analysis-smoke.mjs +179 -0
- package/scripts/atomic-file.mjs +137 -0
- package/scripts/ci-change-classifier.mjs +59 -0
- package/scripts/ci-failure-summary.mjs +92 -0
- package/scripts/cloudflared-installer.mjs +215 -0
- package/scripts/cloudflared-release.mjs +63 -0
- package/scripts/codexgpt-entry.mjs +235 -0
- package/scripts/codexgpt.mjs +4987 -0
- package/scripts/connector-auth-output-shim.cjs +66 -0
- package/scripts/doctor-smoke.mjs +90 -0
- package/scripts/doctor.mjs +165 -0
- package/scripts/exact-head-ci.mjs +126 -0
- package/scripts/execute-handoff-smoke-platform-compat.mjs +38 -0
- package/scripts/execute-handoff-smoke.mjs +1117 -0
- package/scripts/g8-u-live-probe.mjs +208 -0
- package/scripts/http-smoke-compat.mjs +151 -0
- package/scripts/http-smoke.mjs +776 -0
- package/scripts/long-task-runner.mjs +1037 -0
- package/scripts/oauth-admin.mjs +1608 -0
- package/scripts/output-bounds.mjs +29 -0
- package/scripts/owned-temp-root.d.mts +50 -0
- package/scripts/owned-temp-root.mjs +567 -0
- package/scripts/phase-4a-smoke.mjs +36 -0
- package/scripts/policy-windows-spike.mjs +135 -0
- package/scripts/pro-apply.mjs +152 -0
- package/scripts/pro-bundle.mjs +121 -0
- package/scripts/pro-smoke.mjs +97 -0
- package/scripts/process-identity.mjs +67 -0
- package/scripts/repository-policy.mjs +166 -0
- package/scripts/run-and-summarize.mjs +134 -0
- package/scripts/run-smoke.mjs +52 -0
- package/scripts/run-with-cleanup.mjs +98 -0
- package/scripts/settings-smoke-platform-compat.mjs +85 -0
- package/scripts/settings-smoke.mjs +769 -0
- package/scripts/smoke-platform-compat.mjs +302 -0
- package/scripts/smoke.mjs +1180 -0
- package/scripts/stress-contract-compat.mjs +94 -0
- package/scripts/stress.mjs +882 -0
- package/scripts/test-domains.mjs +247 -0
- package/scripts/test-execution-profile-manifest.mjs +273 -0
- package/scripts/test-execution-profiles.mjs +147 -0
- package/scripts/test-performance-reporter.mjs +291 -0
- package/scripts/toolchain-manager.mjs +266 -0
- package/scripts/toolchains.json +19 -0
- package/scripts/windows-conpty-probe-child.mjs +82 -0
- package/scripts/windows-conpty-worker.ps1 +24 -0
- package/scripts/windows-credential-host-manifest.json +16 -0
- package/scripts/windows-credential-host-protocol-v1.json +16 -0
- package/scripts/windows-credential-host.cs +256 -0
- package/scripts/windows-credential-host.ps1 +26 -0
- package/scripts/windows-local-control-manifest.json +23 -0
- package/scripts/windows-local-control-spike.cs +738 -0
- package/scripts/windows-local-control-spike.mjs +415 -0
- package/scripts/windows-local-control-spike.ps1 +35 -0
- package/scripts/windows-local-control.cs +738 -0
- package/scripts/windows-local-control.ps1 +35 -0
- package/scripts/windows-native-api-inventory-v1.json +90 -0
- package/scripts/windows-process-host-manifest.json +20 -0
- package/scripts/windows-process-host-protocol-v1.json +59 -0
- package/scripts/windows-process-host.cs +2385 -0
- package/scripts/windows-process-host.ps1 +59 -0
- package/scripts/windows-realpath-shim.cjs +78 -0
|
@@ -0,0 +1,158 @@
|
|
|
1
|
+
import fs from "node:fs";
|
|
2
|
+
import path from "node:path";
|
|
3
|
+
import { createHmac, hkdfSync, randomBytes as nodeRandomBytes } from "node:crypto";
|
|
4
|
+
import { installationStateV1Schema } from "./schemas.js";
|
|
5
|
+
import { normalizeCanonicalWorkspaceRoot, transactionStateDirectories } from "./stateRoot.js";
|
|
6
|
+
import { TransactionError } from "./types.js";
|
|
7
|
+
function syncDirectoryBestEffort(directory) {
|
|
8
|
+
let fd;
|
|
9
|
+
try {
|
|
10
|
+
fd = fs.openSync(directory, "r");
|
|
11
|
+
fs.fsyncSync(fd);
|
|
12
|
+
}
|
|
13
|
+
catch {
|
|
14
|
+
// Directory fsync is not supported uniformly, especially on Windows.
|
|
15
|
+
}
|
|
16
|
+
finally {
|
|
17
|
+
if (fd !== undefined)
|
|
18
|
+
fs.closeSync(fd);
|
|
19
|
+
}
|
|
20
|
+
}
|
|
21
|
+
function parseInstallationState(text) {
|
|
22
|
+
try {
|
|
23
|
+
return installationStateV1Schema.parse(JSON.parse(text));
|
|
24
|
+
}
|
|
25
|
+
catch {
|
|
26
|
+
throw new TransactionError("TRANSACTION_STATE_CORRUPT", "Persisted installation state is invalid.");
|
|
27
|
+
}
|
|
28
|
+
}
|
|
29
|
+
function readInstallationState(file) {
|
|
30
|
+
try {
|
|
31
|
+
return parseInstallationState(fs.readFileSync(file, "utf8"));
|
|
32
|
+
}
|
|
33
|
+
catch (error) {
|
|
34
|
+
if (error instanceof TransactionError)
|
|
35
|
+
throw error;
|
|
36
|
+
if (error.code === "ENOENT")
|
|
37
|
+
throw error;
|
|
38
|
+
throw new TransactionError("TRANSACTION_STATE_CORRUPT", "Persisted installation state could not be read.");
|
|
39
|
+
}
|
|
40
|
+
}
|
|
41
|
+
export function loadOrCreateInstallationState(options) {
|
|
42
|
+
const stateRoot = path.resolve(options.stateRoot);
|
|
43
|
+
const directories = transactionStateDirectories(stateRoot);
|
|
44
|
+
fs.mkdirSync(stateRoot, { recursive: true, mode: 0o700 });
|
|
45
|
+
for (const directory of [
|
|
46
|
+
directories.instances,
|
|
47
|
+
directories.workspaceLocks,
|
|
48
|
+
directories.auditLocks,
|
|
49
|
+
directories.transactions,
|
|
50
|
+
directories.changesets,
|
|
51
|
+
directories.audit
|
|
52
|
+
]) {
|
|
53
|
+
fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
|
|
54
|
+
}
|
|
55
|
+
try {
|
|
56
|
+
return readInstallationState(directories.installationFile);
|
|
57
|
+
}
|
|
58
|
+
catch (error) {
|
|
59
|
+
if (error.code !== "ENOENT")
|
|
60
|
+
throw error;
|
|
61
|
+
}
|
|
62
|
+
const randomBytes = options.randomBytes ?? nodeRandomBytes;
|
|
63
|
+
const installationIdBytes = randomBytes(16);
|
|
64
|
+
const masterKeyBytes = randomBytes(32);
|
|
65
|
+
if (installationIdBytes.length !== 16 || masterKeyBytes.length !== 32) {
|
|
66
|
+
throw new TransactionError("TRANSACTION_STATE_CORRUPT", "Installation random source returned an invalid length.");
|
|
67
|
+
}
|
|
68
|
+
const candidate = {
|
|
69
|
+
schemaVersion: 1,
|
|
70
|
+
installationId: `install_${installationIdBytes.toString("hex")}`,
|
|
71
|
+
masterKeyBase64: masterKeyBytes.toString("base64"),
|
|
72
|
+
createdAt: new Date((options.now ?? Date.now)()).toISOString()
|
|
73
|
+
};
|
|
74
|
+
installationStateV1Schema.parse(candidate);
|
|
75
|
+
const temporaryFile = path.join(stateRoot, `.codexgpt-install-${installationIdBytes.toString("hex")}.tmp`);
|
|
76
|
+
let fd;
|
|
77
|
+
let published = false;
|
|
78
|
+
try {
|
|
79
|
+
fd = fs.openSync(temporaryFile, "wx", 0o600);
|
|
80
|
+
fs.writeFileSync(fd, `${JSON.stringify(candidate)}\n`, "utf8");
|
|
81
|
+
fs.fsyncSync(fd);
|
|
82
|
+
fs.closeSync(fd);
|
|
83
|
+
fd = undefined;
|
|
84
|
+
try {
|
|
85
|
+
fs.chmodSync(temporaryFile, 0o600);
|
|
86
|
+
}
|
|
87
|
+
catch {
|
|
88
|
+
// Windows ACL semantics are outside the portable mode-bit contract.
|
|
89
|
+
}
|
|
90
|
+
try {
|
|
91
|
+
fs.linkSync(temporaryFile, directories.installationFile);
|
|
92
|
+
published = true;
|
|
93
|
+
syncDirectoryBestEffort(stateRoot);
|
|
94
|
+
}
|
|
95
|
+
catch (error) {
|
|
96
|
+
if (error.code !== "EEXIST") {
|
|
97
|
+
throw new TransactionError("TRANSACTION_STATE_CORRUPT", "Installation state could not be published.");
|
|
98
|
+
}
|
|
99
|
+
}
|
|
100
|
+
}
|
|
101
|
+
catch (error) {
|
|
102
|
+
if (fd !== undefined) {
|
|
103
|
+
fs.closeSync(fd);
|
|
104
|
+
fd = undefined;
|
|
105
|
+
}
|
|
106
|
+
if (error instanceof TransactionError)
|
|
107
|
+
throw error;
|
|
108
|
+
throw new TransactionError("TRANSACTION_STATE_CORRUPT", "Installation state could not be created.");
|
|
109
|
+
}
|
|
110
|
+
finally {
|
|
111
|
+
if (fd !== undefined)
|
|
112
|
+
fs.closeSync(fd);
|
|
113
|
+
try {
|
|
114
|
+
fs.unlinkSync(temporaryFile);
|
|
115
|
+
if (published)
|
|
116
|
+
syncDirectoryBestEffort(stateRoot);
|
|
117
|
+
}
|
|
118
|
+
catch {
|
|
119
|
+
// Best-effort cleanup; publication correctness does not depend on the temporary name.
|
|
120
|
+
}
|
|
121
|
+
installationIdBytes.fill(0);
|
|
122
|
+
masterKeyBytes.fill(0);
|
|
123
|
+
}
|
|
124
|
+
return readInstallationState(directories.installationFile);
|
|
125
|
+
}
|
|
126
|
+
export function deriveTransactionSubkey(masterKey, label) {
|
|
127
|
+
if (masterKey.length !== 32) {
|
|
128
|
+
throw new TransactionError("TRANSACTION_STATE_CORRUPT", "Installation master key has an invalid length.");
|
|
129
|
+
}
|
|
130
|
+
if (!/^[a-z][a-z0-9-]{0,63}$/.test(label)) {
|
|
131
|
+
throw new TransactionError("TRANSACTION_PRECONDITION_FAILED", "Transaction subkey label is invalid.");
|
|
132
|
+
}
|
|
133
|
+
return Buffer.from(hkdfSync("sha256", masterKey, Buffer.alloc(0), Buffer.from(`codexgpt/phase3/${label}/v1`, "utf8"), 32));
|
|
134
|
+
}
|
|
135
|
+
export function workspaceStateKeyForRoot(canonicalRoot, masterKey, platform = process.platform) {
|
|
136
|
+
const key = deriveTransactionSubkey(masterKey, "workspace-state");
|
|
137
|
+
try {
|
|
138
|
+
const normalized = normalizeCanonicalWorkspaceRoot(canonicalRoot, platform);
|
|
139
|
+
const digest = createHmac("sha256", key).update(normalized, "utf8").digest("hex");
|
|
140
|
+
return `wsk_${digest.slice(0, 32)}`;
|
|
141
|
+
}
|
|
142
|
+
finally {
|
|
143
|
+
key.fill(0);
|
|
144
|
+
}
|
|
145
|
+
}
|
|
146
|
+
export function installationMasterKey(state) {
|
|
147
|
+
try {
|
|
148
|
+
const parsed = installationStateV1Schema.parse(state);
|
|
149
|
+
const key = Buffer.from(parsed.masterKeyBase64, "base64");
|
|
150
|
+
if (key.length !== 32)
|
|
151
|
+
throw new Error("invalid length");
|
|
152
|
+
return key;
|
|
153
|
+
}
|
|
154
|
+
catch {
|
|
155
|
+
throw new TransactionError("TRANSACTION_STATE_CORRUPT", "Installation master key has an invalid length.");
|
|
156
|
+
}
|
|
157
|
+
}
|
|
158
|
+
//# sourceMappingURL=installation.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"installation.js","sourceRoot":"","sources":["../../src/transactions/installation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,IAAI,eAAe,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC5B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAQpB,SAAS,uBAAuB,CAAC,SAAiB;IAChD,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACjC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,OAAO,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CACxB,2BAA2B,EAC3B,0CAA0C,CAC3C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,OAAO,sBAAsB,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB;YAAE,MAAM,KAAK,CAAC;QACnD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,MAAM,IAAI,gBAAgB,CACxB,2BAA2B,EAC3B,iDAAiD,CAClD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAAiC;IAEjC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAC;IAC3D,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,KAAK,MAAM,SAAS,IAAI;QACtB,WAAW,CAAC,SAAS;QACrB,WAAW,CAAC,cAAc;QAC1B,WAAW,CAAC,UAAU;QACtB,WAAW,CAAC,YAAY;QACxB,WAAW,CAAC,UAAU;QACtB,WAAW,CAAC,KAAK;KAClB,EAAE,CAAC;QACF,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC;QACH,OAAO,qBAAqB,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,eAAe,CAAC;IAC3D,MAAM,mBAAmB,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5C,MAAM,cAAc,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,mBAAmB,CAAC,MAAM,KAAK,EAAE,IAAI,cAAc,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtE,MAAM,IAAI,gBAAgB,CACxB,2BAA2B,EAC3B,wDAAwD,CACzD,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAwB;QACrC,aAAa,EAAE,CAAC;QAChB,cAAc,EAAE,WAAW,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;QAChE,eAAe,EAAE,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAClD,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;KAC/D,CAAC;IACF,yBAAyB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAE3C,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAC7B,SAAS,EACT,qBAAqB,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAC/D,CAAC;IACF,IAAI,EAAsB,CAAC;IAC3B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7C,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/D,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjB,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjB,EAAE,GAAG,SAAS,CAAC;QACf,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;QACD,IAAI,CAAC;YACH,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC;YACzD,SAAS,GAAG,IAAI,CAAC;YACjB,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,IAAI,gBAAgB,CACxB,2BAA2B,EAC3B,4CAA4C,CAC7C,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACjB,EAAE,GAAG,SAAS,CAAC;QACjB,CAAC;QACD,IAAI,KAAK,YAAY,gBAAgB;YAAE,MAAM,KAAK,CAAC;QACnD,MAAM,IAAI,gBAAgB,CACxB,2BAA2B,EAC3B,0CAA0C,CAC3C,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAC7B,IAAI,SAAS;gBAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,sFAAsF;QACxF,CAAC;QACD,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,qBAAqB,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,KAAa;IACtE,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,gBAAgB,CACxB,2BAA2B,EAC3B,gDAAgD,CACjD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,gBAAgB,CACxB,iCAAiC,EACjC,sCAAsC,CACvC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CACzB,QAAQ,EACR,SAAS,EACT,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EACf,MAAM,CAAC,IAAI,CAAC,mBAAmB,KAAK,KAAK,EAAE,MAAM,CAAC,EAClD,EAAE,CACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,aAAqB,EACrB,SAAiB,EACjB,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,GAAG,GAAG,uBAAuB,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,+BAA+B,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClF,OAAO,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACtC,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAA0B;IAC9D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACzD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CACxB,2BAA2B,EAC3B,gDAAgD,CACjD,CAAC;IACJ,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,96 @@
|
|
|
1
|
+
import fs from "node:fs";
|
|
2
|
+
import path from "node:path";
|
|
3
|
+
import { createHmac, timingSafeEqual } from "node:crypto";
|
|
4
|
+
import { canonicalJson } from "../audit/canonicalJson.js";
|
|
5
|
+
import { AtomicJsonFileStore, manifestPathFor } from "./atomicStateFile.js";
|
|
6
|
+
import { deriveTransactionSubkey } from "./installation.js";
|
|
7
|
+
import { transactionManifestV2Schema } from "./schemas.js";
|
|
8
|
+
import { transactionWorkspaceStateDirectory } from "./stateRoot.js";
|
|
9
|
+
import { TransactionError } from "./types.js";
|
|
10
|
+
export class TransactionManifestV2Store {
|
|
11
|
+
stateRoot;
|
|
12
|
+
atomic;
|
|
13
|
+
key;
|
|
14
|
+
constructor(stateRoot, masterKey) {
|
|
15
|
+
this.stateRoot = stateRoot;
|
|
16
|
+
this.atomic = new AtomicJsonFileStore(stateRoot, transactionManifestV2Schema);
|
|
17
|
+
this.key = deriveTransactionSubkey(masterKey, "transaction-manifest-v2");
|
|
18
|
+
}
|
|
19
|
+
dispose() {
|
|
20
|
+
this.key.fill(0);
|
|
21
|
+
}
|
|
22
|
+
sign(manifest) {
|
|
23
|
+
const { manifestMac: _ignored, ...facts } = manifest;
|
|
24
|
+
const manifestMac = createHmac("sha256", this.key)
|
|
25
|
+
.update(canonicalJson(facts), "utf8")
|
|
26
|
+
.digest("hex");
|
|
27
|
+
return transactionManifestV2Schema.parse({ ...facts, manifestMac });
|
|
28
|
+
}
|
|
29
|
+
verify(manifest) {
|
|
30
|
+
const expected = this.sign(manifest).manifestMac;
|
|
31
|
+
const actual = Buffer.from(manifest.manifestMac, "hex");
|
|
32
|
+
const expectedBytes = Buffer.from(expected, "hex");
|
|
33
|
+
if (actual.length !== expectedBytes.length || !timingSafeEqual(actual, expectedBytes)) {
|
|
34
|
+
throw new TransactionError("TRANSACTION_STATE_CORRUPT", "Transaction manifest authentication failed.");
|
|
35
|
+
}
|
|
36
|
+
return manifest;
|
|
37
|
+
}
|
|
38
|
+
read(workspaceStateKey, transactionId) {
|
|
39
|
+
return this.verify(this.atomic.read(manifestPathFor(this.stateRoot, workspaceStateKey, transactionId)));
|
|
40
|
+
}
|
|
41
|
+
writeInitial(manifest) {
|
|
42
|
+
if (manifest.generation !== 1 || manifest.state !== "preparing") {
|
|
43
|
+
throw new TransactionError("TRANSACTION_STATE_CORRUPT", "Initial V2 transaction manifest must be generation 1 and preparing.");
|
|
44
|
+
}
|
|
45
|
+
const signed = this.sign(manifest);
|
|
46
|
+
const file = manifestPathFor(this.stateRoot, signed.workspaceStateKey, signed.transactionId);
|
|
47
|
+
if (fs.existsSync(file)) {
|
|
48
|
+
throw new TransactionError("TRANSACTION_STATE_CORRUPT", "Initial transaction manifest already exists.");
|
|
49
|
+
}
|
|
50
|
+
return this.atomic.write(file, signed);
|
|
51
|
+
}
|
|
52
|
+
writeNext(previous, next) {
|
|
53
|
+
const verifiedPrevious = this.verify(transactionManifestV2Schema.parse(previous));
|
|
54
|
+
const signedNext = this.sign(next);
|
|
55
|
+
if (signedNext.schemaVersion !== 2 ||
|
|
56
|
+
signedNext.transactionId !== verifiedPrevious.transactionId ||
|
|
57
|
+
signedNext.changeSetId !== verifiedPrevious.changeSetId ||
|
|
58
|
+
signedNext.workspaceStateKey !== verifiedPrevious.workspaceStateKey ||
|
|
59
|
+
signedNext.generation !== verifiedPrevious.generation + 1) {
|
|
60
|
+
throw new TransactionError("TRANSACTION_STATE_CORRUPT", "V2 transaction manifest transition is not monotonic.");
|
|
61
|
+
}
|
|
62
|
+
const persisted = this.read(verifiedPrevious.workspaceStateKey, verifiedPrevious.transactionId);
|
|
63
|
+
if (persisted.generation !== verifiedPrevious.generation || persisted.manifestMac !== verifiedPrevious.manifestMac) {
|
|
64
|
+
throw new TransactionError("TRANSACTION_STATE_CORRUPT", "V2 transaction manifest transition is stale.");
|
|
65
|
+
}
|
|
66
|
+
return this.atomic.write(manifestPathFor(this.stateRoot, signedNext.workspaceStateKey, signedNext.transactionId), signedNext);
|
|
67
|
+
}
|
|
68
|
+
list(workspaceStateKey) {
|
|
69
|
+
const directory = transactionWorkspaceStateDirectory(this.stateRoot, "transactions", workspaceStateKey);
|
|
70
|
+
let names;
|
|
71
|
+
try {
|
|
72
|
+
names = fs.readdirSync(directory);
|
|
73
|
+
}
|
|
74
|
+
catch (error) {
|
|
75
|
+
if (error.code === "ENOENT")
|
|
76
|
+
return [];
|
|
77
|
+
throw new TransactionError("TRANSACTION_STATE_CORRUPT", "Transaction manifest directory is unreadable.");
|
|
78
|
+
}
|
|
79
|
+
const result = [];
|
|
80
|
+
for (const name of names.filter((value) => /^tx_[a-f0-9]{32}\.json$/.test(value)).sort()) {
|
|
81
|
+
const file = path.join(directory, name);
|
|
82
|
+
let version;
|
|
83
|
+
try {
|
|
84
|
+
version = JSON.parse(fs.readFileSync(file, "utf8")).schemaVersion;
|
|
85
|
+
}
|
|
86
|
+
catch {
|
|
87
|
+
throw new TransactionError("TRANSACTION_STATE_CORRUPT", "Transaction manifest is unreadable.");
|
|
88
|
+
}
|
|
89
|
+
if (version !== 2)
|
|
90
|
+
continue;
|
|
91
|
+
result.push(this.verify(this.atomic.read(file)));
|
|
92
|
+
}
|
|
93
|
+
return result;
|
|
94
|
+
}
|
|
95
|
+
}
|
|
96
|
+
//# sourceMappingURL=manifestV2Store.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"manifestV2Store.js","sourceRoot":"","sources":["../../src/transactions/manifestV2Store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,kCAAkC,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAA4D,MAAM,YAAY,CAAC;AAExG,MAAM,OAAO,0BAA0B;IAIR;IAHZ,MAAM,CAA6C;IACnD,GAAG,CAAS;IAE7B,YAA6B,SAAiB,EAAE,SAAiB;QAApC,cAAS,GAAT,SAAS,CAAQ;QAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAmB,CAAC,SAAS,EAAE,2BAA2B,CAAC,CAAC;QAC9E,IAAI,CAAC,GAAG,GAAG,uBAAuB,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO;QACL,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IAEO,IAAI,CAAC,QAA4E;QACvF,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,GAAG,QAAiC,CAAC;QAC9E,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC;aAC/C,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;aACpC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,2BAA2B,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACtE,CAAC;IAEO,MAAM,CAAC,QAA+B;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACxD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,EAAE,6CAA6C,CAAC,CAAC;QACzG,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,iBAAyB,EAAE,aAAqB;QACnD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,YAAY,CAAC,QAAoD;QAC/D,IAAI,QAAQ,CAAC,UAAU,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAChE,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,EAAE,qEAAqE,CAAC,CAAC;QACjI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAC7F,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,EAAE,8CAA8C,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,SAAS,CAAC,QAA+B,EAAE,IAAwE;QACjH,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IACE,UAAU,CAAC,aAAa,KAAK,CAAC;YAC9B,UAAU,CAAC,aAAa,KAAK,gBAAgB,CAAC,aAAa;YAC3D,UAAU,CAAC,WAAW,KAAK,gBAAgB,CAAC,WAAW;YACvD,UAAU,CAAC,iBAAiB,KAAK,gBAAgB,CAAC,iBAAiB;YACnE,UAAU,CAAC,UAAU,KAAK,gBAAgB,CAAC,UAAU,GAAG,CAAC,EACzD,CAAC;YACD,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,EAAE,sDAAsD,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAChG,IAAI,SAAS,CAAC,UAAU,KAAK,gBAAgB,CAAC,UAAU,IAAI,SAAS,CAAC,WAAW,KAAK,gBAAgB,CAAC,WAAW,EAAE,CAAC;YACnH,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,EAAE,8CAA8C,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CACtB,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,iBAAiB,EAAE,UAAU,CAAC,aAAa,CAAC,EACvF,UAAU,CACX,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,iBAAyB;QAC5B,MAAM,SAAS,GAAG,kCAAkC,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;QACxG,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAClE,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,EAAE,+CAA+C,CAAC,CAAC;QAC3G,CAAC;QACD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACzF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACxC,IAAI,OAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC;YACpE,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,EAAE,qCAAqC,CAAC,CAAC;YACjG,CAAC;YACD,IAAI,OAAO,KAAK,CAAC;gBAAE,SAAS;YAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}
|
|
@@ -0,0 +1,98 @@
|
|
|
1
|
+
import { TransactionError } from "./types.js";
|
|
2
|
+
function timestamp(now) {
|
|
3
|
+
const value = new Date(now()).toISOString();
|
|
4
|
+
if (value === "Invalid Date") {
|
|
5
|
+
throw new TransactionError("TRANSACTION_RECOVERY_REQUIRED", "Participant recovery clock is invalid.");
|
|
6
|
+
}
|
|
7
|
+
return value;
|
|
8
|
+
}
|
|
9
|
+
export class DurableParticipantRecoveryAdapter {
|
|
10
|
+
options;
|
|
11
|
+
now;
|
|
12
|
+
constructor(options) {
|
|
13
|
+
this.options = options;
|
|
14
|
+
this.now = options.now ?? Date.now;
|
|
15
|
+
}
|
|
16
|
+
async probe(manifest, participant) {
|
|
17
|
+
if (participant === "audit") {
|
|
18
|
+
return this.options.auditStore.probeExecutionParticipant(manifest.changeSetId);
|
|
19
|
+
}
|
|
20
|
+
if (participant === "change_set") {
|
|
21
|
+
return manifest.schemaVersion === 2
|
|
22
|
+
? this.options.moveChangeSetStore.probe(manifest.workspaceStateKey, manifest.changeSetId)
|
|
23
|
+
: this.options.changeSetStore.probe(manifest.workspaceStateKey, manifest.changeSetId);
|
|
24
|
+
}
|
|
25
|
+
if (participant === "original_change_set" && manifest.schemaVersion === 2) {
|
|
26
|
+
const reference = manifest.participantReferences.original_change_set;
|
|
27
|
+
const match = /^original_change_set:(cs_[a-f0-9]{32})$/.exec(reference ?? "");
|
|
28
|
+
if (!match)
|
|
29
|
+
return "unknown";
|
|
30
|
+
try {
|
|
31
|
+
const original = this.options.moveChangeSetStore.read(manifest.workspaceStateKey, match[1]);
|
|
32
|
+
if (original.state === "active")
|
|
33
|
+
return "absent";
|
|
34
|
+
if (original.state !== "undone")
|
|
35
|
+
return "unknown";
|
|
36
|
+
const reverse = this.options.moveChangeSetStore.read(manifest.workspaceStateKey, manifest.changeSetId);
|
|
37
|
+
return reverse.toolName === "undo_change_set" && reverse.revertsChangeSetId === original.changeSetId
|
|
38
|
+
? "present"
|
|
39
|
+
: "unknown";
|
|
40
|
+
}
|
|
41
|
+
catch {
|
|
42
|
+
return "unknown";
|
|
43
|
+
}
|
|
44
|
+
}
|
|
45
|
+
return "unknown";
|
|
46
|
+
}
|
|
47
|
+
compensateV1(manifest) {
|
|
48
|
+
const current = this.options.changeSetStore.read(manifest.workspaceStateKey, manifest.changeSetId);
|
|
49
|
+
if (current.state === "recovery_required")
|
|
50
|
+
return;
|
|
51
|
+
if (current.state !== "active") {
|
|
52
|
+
throw new TransactionError("TRANSACTION_RECOVERY_REQUIRED", "V1 change-set compensation found an incompatible state.");
|
|
53
|
+
}
|
|
54
|
+
this.options.changeSetStore.transition(manifest.workspaceStateKey, manifest.changeSetId, {
|
|
55
|
+
expectedGeneration: current.generation,
|
|
56
|
+
state: "recovery_required",
|
|
57
|
+
updatedAt: timestamp(this.now)
|
|
58
|
+
});
|
|
59
|
+
}
|
|
60
|
+
compensateV2(manifest) {
|
|
61
|
+
const current = this.options.moveChangeSetStore.read(manifest.workspaceStateKey, manifest.changeSetId);
|
|
62
|
+
if (current.state === "recovery_required")
|
|
63
|
+
return;
|
|
64
|
+
if (current.state !== "active") {
|
|
65
|
+
throw new TransactionError("TRANSACTION_RECOVERY_REQUIRED", "V2 change-set compensation found an incompatible state.");
|
|
66
|
+
}
|
|
67
|
+
this.options.moveChangeSetStore.transition(manifest.workspaceStateKey, manifest.changeSetId, {
|
|
68
|
+
expectedGeneration: current.generation,
|
|
69
|
+
state: "recovery_required",
|
|
70
|
+
updatedAt: timestamp(this.now)
|
|
71
|
+
});
|
|
72
|
+
}
|
|
73
|
+
async compensatePartial(manifest, presentParticipants) {
|
|
74
|
+
if (presentParticipants.includes("original_change_set")) {
|
|
75
|
+
throw new TransactionError("TRANSACTION_RECOVERY_REQUIRED", "An original change-set transition cannot be safely compensated after reverse effects diverged.");
|
|
76
|
+
}
|
|
77
|
+
if (!presentParticipants.includes("change_set"))
|
|
78
|
+
return;
|
|
79
|
+
if (manifest.schemaVersion === 2)
|
|
80
|
+
this.compensateV2(manifest);
|
|
81
|
+
else
|
|
82
|
+
this.compensateV1(manifest);
|
|
83
|
+
}
|
|
84
|
+
async recordRecovery(manifest, action, resultCode) {
|
|
85
|
+
await this.options.auditStore.recordTransactionRecovery({
|
|
86
|
+
action,
|
|
87
|
+
transactionId: manifest.transactionId,
|
|
88
|
+
changeSetId: manifest.changeSetId,
|
|
89
|
+
operationCount: manifest.operations.length,
|
|
90
|
+
resultCode,
|
|
91
|
+
timestamp: manifest.updatedAt
|
|
92
|
+
});
|
|
93
|
+
}
|
|
94
|
+
}
|
|
95
|
+
export function createDurableParticipantRecoveryAdapter(options) {
|
|
96
|
+
return new DurableParticipantRecoveryAdapter(options);
|
|
97
|
+
}
|
|
98
|
+
//# sourceMappingURL=participantRecovery.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"participantRecovery.js","sourceRoot":"","sources":["../../src/transactions/participantRecovery.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAc9C,SAAS,SAAS,CAAC,GAAiB;IAClC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;QAC7B,MAAM,IAAI,gBAAgB,CACxB,+BAA+B,EAC/B,wCAAwC,CACzC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,iCAAiC;IAGf;IAFZ,GAAG,CAAe;IAEnC,YAA6B,OAAiD;QAAjD,YAAO,GAAP,OAAO,CAA0C;QAC5E,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,KAAK,CACT,QAA6B,EAC7B,WAAmB;QAEnB,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YACjC,OAAO,QAAQ,CAAC,aAAa,KAAK,CAAC;gBACjC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,WAAW,CAAC;gBACzF,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,WAAW,KAAK,qBAAqB,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;YAC1E,MAAM,SAAS,GAAG,QAAQ,CAAC,qBAAqB,CAAC,mBAAmB,CAAC;YACrE,MAAM,KAAK,GAAG,yCAAyC,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YAC9E,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5F,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ;oBAAE,OAAO,QAAQ,CAAC;gBACjD,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ;oBAAE,OAAO,SAAS,CAAC;gBAClD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAClD,QAAQ,CAAC,iBAAiB,EAC1B,QAAQ,CAAC,WAAW,CACrB,CAAC;gBACF,OAAO,OAAO,CAAC,QAAQ,KAAK,iBAAiB,IAAI,OAAO,CAAC,kBAAkB,KAAK,QAAQ,CAAC,WAAW;oBAClG,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,SAAS,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,YAAY,CAAC,QAA4D;QAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAC9C,QAAQ,CAAC,iBAAiB,EAC1B,QAAQ,CAAC,WAAW,CACrB,CAAC;QACF,IAAI,OAAO,CAAC,KAAK,KAAK,mBAAmB;YAAE,OAAO;QAClD,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,gBAAgB,CACxB,+BAA+B,EAC/B,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,UAAU,CACpC,QAAQ,CAAC,iBAAiB,EAC1B,QAAQ,CAAC,WAAW,EACpB;YACE,kBAAkB,EAAE,OAAO,CAAC,UAAU;YACtC,KAAK,EAAE,mBAAmB;YAC1B,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;SAC/B,CACF,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,QAA4D;QAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAClD,QAAQ,CAAC,iBAAiB,EAC1B,QAAQ,CAAC,WAAW,CACrB,CAAC;QACF,IAAI,OAAO,CAAC,KAAK,KAAK,mBAAmB;YAAE,OAAO;QAClD,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,gBAAgB,CACxB,+BAA+B,EAC/B,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,UAAU,CACxC,QAAQ,CAAC,iBAAiB,EAC1B,QAAQ,CAAC,WAAW,EACpB;YACE,kBAAkB,EAAE,OAAO,CAAC,UAAU;YACtC,KAAK,EAAE,mBAAmB;YAC1B,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;SAC/B,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,QAA6B,EAC7B,mBAAsC;QAEtC,IAAI,mBAAmB,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,gBAAgB,CACxB,+BAA+B,EAC/B,gGAAgG,CACjG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO;QACxD,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC;YAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;;YACzD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,QAA6B,EAC7B,MAAuE,EACvE,UAAkB;QAElB,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC;YACtD,MAAM;YACN,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,cAAc,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM;YAC1C,UAAU;YACV,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,UAAU,uCAAuC,CACrD,OAAiD;IAEjD,OAAO,IAAI,iCAAiC,CAAC,OAAO,CAAC,CAAC;AACxD,CAAC"}
|