contextos-mcp 0.4.0

package/dist/orchestration/verification-runner.js

@@ -0,0 +1,352 @@
+/**
+ * Worktree test command execution engine with strict security guards and lifecycle hardening.
+ *
+ * Implements Section 16 & Milestones W5.1 and W5.2:
+ * - Structured VerificationSpec with validation and legacy reader
+ * - Command trust validation (bans npx in host mode, whitelist, forbidden eval args)
+ * - Cross-platform process tree termination (Windows taskkill /T /F, POSIX process groups)
+ * - Sensitive output redaction (API keys, tokens, passwords)
+ * - Post-execution candidate immutability verification (HEAD and dirty working tree checks)
+ */
+import { execFileSync, spawn } from "node:child_process";
+import * as path from "node:path";
+import { ExecutionSandbox } from "../sandbox/execution.js";
+import { resolveExecutablePath } from "../utils/command-exists.js";
+import { getSanitizedEnv, killProcessTree, redactSensitiveOutput, STRICT_ENV_ALLOWLIST, } from "../utils/process-security.js";
+export { getSanitizedEnv, killProcessTree, redactSensitiveOutput, STRICT_ENV_ALLOWLIST };
+export const ALLOWED_VERIFY_TOOLS = new Set(["npm", "pnpm", "yarn", "node", "pytest", "cargo", "go", "vitest", "jest"]);
+export const FORBIDDEN_VERIFY_ARGS = new Set(["-e", "-c", "--eval", "--print", "-p", "--input-type"]);
+/**
+ * Parses a string command or object into a canonical VerificationSpec (Section 16.1).
+ */
+export function parseVerificationSpec(input) {
+    if (!input) {
+        throw new Error("Verification specification cannot be empty");
+    }
+    if (typeof input === "object" && input !== null) {
+        const obj = input;
+        if (!obj.executable || typeof obj.executable !== "string" || !obj.executable.trim()) {
+            throw new Error("Invalid verification specification: executable must be a non-empty string");
+        }
+        if (/[&|;`$><%]/.test(obj.executable)) {
+            const err = new Error("Security error: Shell metacharacters and command chaining are prohibited in verification commands");
+            err.code = "CTX_COMMAND_CHAINING_PROHIBITED";
+            throw err;
+        }
+        if (!Array.isArray(obj.args)) {
+            throw new Error("Invalid verification specification: args must be an array of strings");
+        }
+        for (const arg of obj.args) {
+            if (typeof arg !== "string") {
+                throw new Error("Invalid verification specification: every arg must be a string");
+            }
+        }
+        const timeoutMs = typeof obj.timeoutMs === "number" && obj.timeoutMs > 0 ? obj.timeoutMs : 60000;
+        const required = obj.required !== false;
+        const network = obj.network === "allow" ? "allow" : "deny";
+        const allowedOutputPaths = Array.isArray(obj.allowedOutputPaths) ? obj.allowedOutputPaths : [];
+        return {
+            schemaVersion: typeof obj.schemaVersion === "number" ? obj.schemaVersion : 1,
+            executable: obj.executable
+                .trim()
+                .toLowerCase()
+                .replace(/\.(cmd|bat|exe)$/i, ""),
+            args: [...obj.args],
+            timeoutMs,
+            required,
+            network,
+            allowedOutputPaths,
+            cwd: typeof obj.cwd === "string" ? obj.cwd : undefined,
+            env: typeof obj.env === "object" && obj.env !== null ? { ...obj.env } : undefined,
+            trusted: obj.trusted === true,
+            isLegacyString: false,
+        };
+    }
+    if (typeof input === "string") {
+        const trimmed = input.trim();
+        if (!trimmed) {
+            throw new Error("Verification command cannot be empty string");
+        }
+        // Ban shell metacharacters and chaining
+        if (/[&|;`$><%]/.test(trimmed)) {
+            const err = new Error("Security error: Shell metacharacters and command chaining are not permitted in verify_command");
+            err.code = "CTX_COMMAND_CHAINING_PROHIBITED";
+            throw err;
+        }
+        const parts = trimmed.split(/\s+/);
+        const rawExe = parts[0].toLowerCase().replace(/\.(cmd|bat|exe)$/i, "");
+        const args = parts.slice(1);
+        return {
+            schemaVersion: 1,
+            executable: rawExe,
+            args,
+            timeoutMs: 60000,
+            required: true,
+            network: "deny",
+            isLegacyString: true,
+        };
+    }
+    throw new Error("Invalid verification specification format: expected VerificationSpec object or command string");
+}
+/**
+ * Enforces command trust policy (Section 16.2).
+ */
+export function validateCommandTrust(spec, options = {}) {
+    const runnerMode = options.runnerMode || "host-unsafe";
+    // Rule 1: npx is forbidden in host mode (Section 16.2: "npx запрещён в host mode")
+    if (spec.executable === "npx" && runnerMode === "host-unsafe") {
+        const err = new Error('Security error: "npx" execution is strictly forbidden in host mode. Use OCI sandbox or local package runner.');
+        err.code = "CTX_COMMAND_UNTRUSTED";
+        throw err;
+    }
+    // Rule 2: Unlisted tools require OCI runner or explicit local trust
+    if (!ALLOWED_VERIFY_TOOLS.has(spec.executable)) {
+        if (runnerMode === "host-unsafe" && !options.trusted && !spec.trusted) {
+            const err = new Error(`Security error: Command "${spec.executable}" is not in the trusted tools whitelist (${Array.from(ALLOWED_VERIFY_TOOLS).join(", ")}). Arbitrary commands require OCI sandbox or explicit user trust.`);
+            err.code = "CTX_COMMAND_UNTRUSTED";
+            throw err;
+        }
+    }
+    // Rule 3: Inline evaluation arguments prohibited
+    for (const arg of spec.args) {
+        if (FORBIDDEN_VERIFY_ARGS.has(arg.toLowerCase())) {
+            const err = new Error(`Security error: Argument "${arg}" is not permitted in verify_command`);
+            err.code = "CTX_FORBIDDEN_ARGUMENT";
+            throw err;
+        }
+    }
+}
+/**
+ * Checks that the working tree and candidate commit remained immutable (Section 16.3).
+ */
+export function verifyCandidateImmutability(worktreePath, expectedHeadSha) {
+    try {
+        const currentHead = execFileSync("git", ["rev-parse", "HEAD"], {
+            cwd: worktreePath,
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+            windowsHide: true,
+        }).trim();
+        if (expectedHeadSha && currentHead !== expectedHeadSha) {
+            return { clean: false, mutatedHead: true };
+        }
+        const statusOutput = execFileSync("git", ["status", "--porcelain"], {
+            cwd: worktreePath,
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+            windowsHide: true,
+        }).trim();
+        if (statusOutput.length > 0) {
+            const internal = new Set([".contextos-owner", ".contextos-session"]);
+            const dirtyFiles = statusOutput
+                .split("\n")
+                .map((l) => l.trim().slice(3).trim())
+                .filter((f) => f && !internal.has(f));
+            if (dirtyFiles.length > 0) {
+                return { clean: false, mutatedHead: false, dirtyFiles };
+            }
+        }
+        return { clean: true };
+    }
+    catch (e) {
+        // Non-git directory or git failure: fail closed
+        return { clean: false, mutatedHead: false, dirtyFiles: [`git-failure: ${e.message || "unknown"}`] };
+    }
+}
+/**
+ * Executes worktree verification with strict security guards and lifecycle management.
+ */
+export async function runWorktreeVerification(worktreePath, commandOrSpec, options = {}) {
+    let spec;
+    try {
+        spec = parseVerificationSpec(commandOrSpec);
+    }
+    catch (err) {
+        return {
+            verdict: "ERROR",
+            verified: false,
+            output: err instanceof Error ? err.message : String(err),
+            exitCode: null,
+            runnerMode: "host-unsafe",
+        };
+    }
+    try {
+        validateCommandTrust(spec, options);
+    }
+    catch (err) {
+        return {
+            verdict: "ERROR",
+            verified: false,
+            output: err instanceof Error ? err.message : String(err),
+            exitCode: null,
+            runnerMode: "host-unsafe",
+        };
+    }
+    const exePath = await resolveExecutablePath(spec.executable);
+    const targetExecutable = exePath || spec.executable;
+    const executionCwd = spec.cwd ? path.resolve(worktreePath, spec.cwd) : worktreePath;
+    if (!executionCwd.startsWith(path.resolve(worktreePath))) {
+        return {
+            verdict: "ERROR",
+            verified: false,
+            output: `Security Violation: execution cwd "${executionCwd}" escapes worktree root.`,
+            exitCode: null,
+            runnerMode: "host-unsafe",
+        };
+    }
+    // OCI Execution Sandbox Path (Milestones W5.3 and W5.4)
+    if (options.sandbox || options.sandboxMode || options.runnerMode === "oci") {
+        const sandbox = options.sandbox ||
+            new ExecutionSandbox({
+                mode: options.sandboxMode || (options.runnerMode === "oci" ? "oci-required" : "oci-preferred"),
+            });
+        try {
+            const res = await sandbox.execute(executionCwd, [targetExecutable, ...spec.args], {
+                signal: options.signal,
+                timeoutMs: spec.timeoutMs,
+            });
+            if (res.exitCode === 0) {
+                const immutability = verifyCandidateImmutability(worktreePath, options.expectedHeadSha);
+                if (!immutability.clean) {
+                    if (immutability.mutatedHead) {
+                        return {
+                            verdict: "STALE",
+                            verified: false,
+                            output: "Security violation: Verification test command mutated candidate branch commit HEAD",
+                            exitCode: res.exitCode,
+                            runnerMode: res.runnerMode,
+                        };
+                    }
+                    if (immutability.dirtyFiles && immutability.dirtyFiles.length > 0) {
+                        return {
+                            verdict: "STALE",
+                            verified: false,
+                            output: `Security violation: Verification test left uncommitted dirty files in worktree (${immutability.dirtyFiles.join(", ")})`,
+                            exitCode: res.exitCode,
+                            runnerMode: res.runnerMode,
+                        };
+                    }
+                }
+            }
+            return {
+                verdict: res.success ? "PASS" : "FAIL",
+                verified: res.success,
+                output: res.redactedOutput.trim().slice(0, 1500),
+                exitCode: res.exitCode,
+                runnerMode: res.runnerMode,
+            };
+        }
+        catch (err) {
+            const isOciUnavailable = err?.code === "CTX_SANDBOX_OCI_UNAVAILABLE";
+            const isDigestMismatch = err?.code === "CTX_SANDBOX_DIGEST_MISMATCH";
+            const isSecurityViolation = err?.code?.startsWith?.("SEC-") || err?.code === "CTX_SECURITY_VIOLATION";
+            const verdict = isOciUnavailable
+                ? "UNAVAILABLE"
+                : isDigestMismatch || isSecurityViolation
+                    ? "ERROR"
+                    : "ERROR";
+            return {
+                verdict,
+                verified: false,
+                output: err?.message || String(err),
+                exitCode: null,
+                runnerMode: "host-unsafe",
+            };
+        }
+    }
+    return new Promise((resolveResult) => {
+        let settled = false;
+        const finish = (verdict, rawOutput, exitCode) => {
+            if (settled)
+                return;
+            settled = true;
+            const cleanOutput = redactSensitiveOutput(rawOutput).trim().slice(0, 1500);
+            resolveResult({
+                verdict,
+                verified: verdict === "PASS",
+                output: cleanOutput,
+                exitCode,
+                runnerMode: "host-unsafe",
+            });
+        };
+        let child = null;
+        const timeoutMs = spec.timeoutMs || 60000;
+        const timeout = setTimeout(() => {
+            if (child?.pid) {
+                killProcessTree(child.pid);
+            }
+            finish("TIMEOUT", `Verification timed out after ${timeoutMs}ms`, null);
+        }, timeoutMs);
+        const onAbort = () => {
+            if (child?.pid) {
+                killProcessTree(child.pid);
+            }
+            clearTimeout(timeout);
+            finish("CANCELLED", "Verification cancelled by abort signal", null);
+        };
+        if (options.signal?.aborted) {
+            clearTimeout(timeout);
+            finish("CANCELLED", "Verification already aborted", null);
+            return;
+        }
+        if (options.signal) {
+            options.signal.addEventListener("abort", onAbort, { once: true });
+        }
+        try {
+            child = spawn(targetExecutable, [...spec.args], {
+                cwd: executionCwd,
+                env: getSanitizedEnv(spec.env || {}),
+                shell: false,
+                stdio: ["ignore", "pipe", "pipe"],
+                windowsHide: true,
+            });
+            let stdout = "";
+            let stderr = "";
+            child.stdout?.on("data", (d) => {
+                if (stdout.length < 50000)
+                    stdout += d.toString();
+            });
+            child.stderr?.on("data", (d) => {
+                if (stderr.length < 50000)
+                    stderr += d.toString();
+            });
+            child.on("close", (code) => {
+                clearTimeout(timeout);
+                if (options.signal) {
+                    options.signal.removeEventListener("abort", onAbort);
+                }
+                if (code === 0) {
+                    // Post-execution candidate immutability verification (Section 16.3)
+                    const immutability = verifyCandidateImmutability(worktreePath, options.expectedHeadSha);
+                    if (!immutability.clean) {
+                        if (immutability.mutatedHead) {
+                            finish("STALE", "Security violation: Verification test command mutated candidate branch commit HEAD", code);
+                            return;
+                        }
+                        if (immutability.dirtyFiles && immutability.dirtyFiles.length > 0) {
+                            finish("STALE", `Security violation: Verification test left uncommitted dirty files in worktree (${immutability.dirtyFiles.join(", ")})`, code);
+                            return;
+                        }
+                    }
+                }
+                const output = `${stdout}\n${stderr}`;
+                finish(code === 0 ? "PASS" : "FAIL", output, code);
+            });
+            child.on("error", (err) => {
+                clearTimeout(timeout);
+                if (options.signal) {
+                    options.signal.removeEventListener("abort", onAbort);
+                }
+                finish("ERROR", `Verification execution failed: ${err.message}`, null);
+            });
+        }
+        catch (err) {
+            clearTimeout(timeout);
+            if (options.signal) {
+                options.signal.removeEventListener("abort", onAbort);
+            }
+            finish("ERROR", err instanceof Error ? err.message : String(err), null);
+        }
+    });
+}
+//# sourceMappingURL=verification-runner.js.map

package/dist/orchestration/verification-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-runner.js","sourceRoot":"","sources":["../../src/orchestration/verification-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,gBAAgB,EAAoB,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EACN,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,oBAAoB,GACpB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,CAAC;AAEzF,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAExH,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;AAEtG;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IACnD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,KAA4B,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,IAAI,KAAK,CACpB,mGAAmG,CACnG,CAAC;YACD,GAAW,CAAC,IAAI,GAAG,iCAAiC,CAAC;YACtD,MAAM,GAAG,CAAC;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QACzF,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;YACnF,CAAC;QACF,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;QACjG,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC;QACxC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3D,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;QAE/F,OAAO;YACN,aAAa,EAAE,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAC5E,UAAU,EAAE,GAAG,CAAC,UAAU;iBACxB,IAAI,EAAE;iBACN,WAAW,EAAE;iBACb,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAClC,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;YACnB,SAAS;YACT,QAAQ;YACR,OAAO;YACP,kBAAkB;YAClB,GAAG,EAAE,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;YACtD,GAAG,EAAE,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;YACjF,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,IAAI;YAC7B,cAAc,EAAE,KAAK;SACrB,CAAC;IACH,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAChE,CAAC;QAED,wCAAwC;QACxC,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,IAAI,KAAK,CACpB,+FAA+F,CAC/F,CAAC;YACD,GAAW,CAAC,IAAI,GAAG,iCAAiC,CAAC;YACtD,MAAM,GAAG,CAAC;QACX,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAE5B,OAAO;YACN,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,MAAM;YAClB,IAAI;YACJ,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,MAAM;YACf,cAAc,EAAE,IAAI;SACpB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAC;AAClH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CACnC,IAAsB,EACtB,UAAqE,EAAE;IAEvE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC;IAEvD,mFAAmF;IACnF,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAG,IAAI,KAAK,CACpB,8GAA8G,CAC9G,CAAC;QACD,GAAW,CAAC,IAAI,GAAG,uBAAuB,CAAC;QAC5C,MAAM,GAAG,CAAC;IACX,CAAC;IAED,oEAAoE;IACpE,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,IAAI,UAAU,KAAK,aAAa,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACvE,MAAM,GAAG,GAAG,IAAI,KAAK,CACpB,4BAA4B,IAAI,CAAC,UAAU,4CAA4C,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mEAAmE,CACrM,CAAC;YACD,GAAW,CAAC,IAAI,GAAG,uBAAuB,CAAC;YAC5C,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC;IAED,iDAAiD;IACjD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,6BAA6B,GAAG,sCAAsC,CAAC,CAAC;YAC7F,GAAW,CAAC,IAAI,GAAG,wBAAwB,CAAC;YAC7C,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAC1C,YAAoB,EACpB,eAAwB;IAExB,IAAI,CAAC;QACJ,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;YAC9D,GAAG,EAAE,YAAY;YACjB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,WAAW,EAAE,IAAI;SACjB,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,IAAI,eAAe,IAAI,WAAW,KAAK,eAAe,EAAE,CAAC;YACxD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QAED,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE;YACnE,GAAG,EAAE,YAAY;YACjB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,WAAW,EAAE,IAAI;SACjB,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC,CAAC;YACrE,MAAM,UAAU,GAAG,YAAY;iBAC7B,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;YACzD,CAAC;QACF,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QACjB,gDAAgD;QAChD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,gBAAgB,CAAC,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,EAAE,CAAC;IACrG,CAAC;AACF,CAAC;AAWD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,YAAoB,EACpB,aAAwC,EACxC,UAA+B,EAAE;IAQjC,IAAI,IAAsB,CAAC;IAC3B,IAAI,CAAC;QACJ,IAAI,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACvB,OAAO;YACN,OAAO,EAAE,OAAO;YAChB,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACxD,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,aAAa;SACzB,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACJ,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACvB,OAAO;YACN,OAAO,EAAE,OAAO;YAChB,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACxD,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,aAAa;SACzB,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,gBAAgB,GAAG,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IAEpF,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAC1D,OAAO;YACN,OAAO,EAAE,OAAO;YAChB,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,sCAAsC,YAAY,0BAA0B;YACpF,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,aAAa;SACzB,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QAC5E,MAAM,OAAO,GACZ,OAAO,CAAC,OAAO;YACf,IAAI,gBAAgB,CAAC;gBACpB,IAAI,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC;aAC9F,CAAC,CAAC;QAEJ,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,gBAAgB,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE;gBACjF,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,IAAI,CAAC,SAAS;aACzB,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,YAAY,GAAG,2BAA2B,CAAC,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;gBACxF,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;oBACzB,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;wBAC9B,OAAO;4BACN,OAAO,EAAE,OAAO;4BAChB,QAAQ,EAAE,KAAK;4BACf,MAAM,EAAE,oFAAoF;4BAC5F,QAAQ,EAAE,GAAG,CAAC,QAAQ;4BACtB,UAAU,EAAE,GAAG,CAAC,UAAU;yBAC1B,CAAC;oBACH,CAAC;oBACD,IAAI,YAAY,CAAC,UAAU,IAAI,YAAY,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACnE,OAAO;4BACN,OAAO,EAAE,OAAO;4BAChB,QAAQ,EAAE,KAAK;4BACf,MAAM,EAAE,mFAAmF,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;4BAChI,QAAQ,EAAE,GAAG,CAAC,QAAQ;4BACtB,UAAU,EAAE,GAAG,CAAC,UAAU;yBAC1B,CAAC;oBACH,CAAC;gBACF,CAAC;YACF,CAAC;YAED,OAAO;gBACN,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBACtC,QAAQ,EAAE,GAAG,CAAC,OAAO;gBACrB,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;gBAChD,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,UAAU,EAAE,GAAG,CAAC,UAAU;aAC1B,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YACnB,MAAM,gBAAgB,GAAG,GAAG,EAAE,IAAI,KAAK,6BAA6B,CAAC;YACrE,MAAM,gBAAgB,GAAG,GAAG,EAAE,IAAI,KAAK,6BAA6B,CAAC;YACrE,MAAM,mBAAmB,GAAG,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,IAAI,KAAK,wBAAwB,CAAC;YAEtG,MAAM,OAAO,GAAuB,gBAAgB;gBACnD,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,gBAAgB,IAAI,mBAAmB;oBACxC,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,OAAO,CAAC;YAEZ,OAAO;gBACN,OAAO;gBACP,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC;gBACnC,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,aAAa;aACzB,CAAC;QACH,CAAC;IACF,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,aAAa,EAAE,EAAE;QACpC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,OAA2B,EAAE,SAAiB,EAAE,QAAuB,EAAE,EAAE;YAC1F,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,WAAW,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC3E,aAAa,CAAC;gBACb,OAAO;gBACP,QAAQ,EAAE,OAAO,KAAK,MAAM;gBAC5B,MAAM,EAAE,WAAW;gBACnB,QAAQ;gBACR,UAAU,EAAE,aAAa;aACzB,CAAC,CAAC;QACJ,CAAC,CAAC;QAEF,IAAI,KAAK,GAAoC,IAAI,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,IAAI,KAAK,EAAE,GAAG,EAAE,CAAC;gBAChB,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,CAAC,SAAS,EAAE,gCAAgC,SAAS,IAAI,EAAE,IAAI,CAAC,CAAC;QACxE,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,OAAO,GAAG,GAAG,EAAE;YACpB,IAAI,KAAK,EAAE,GAAG,EAAE,CAAC;gBAChB,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;YACD,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,WAAkB,EAAE,wCAAwC,EAAE,IAAI,CAAC,CAAC;QAC5E,CAAC,CAAC;QAEF,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC7B,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,WAAkB,EAAE,8BAA8B,EAAE,IAAI,CAAC,CAAC;YACjE,OAAO;QACR,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,CAAC;YACJ,KAAK,GAAG,KAAK,CAAC,gBAAgB,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC/C,GAAG,EAAE,YAAY;gBACjB,GAAG,EAAE,eAAe,CAAE,IAAI,CAAC,GAA8B,IAAI,EAAE,CAAC;gBAChE,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,WAAW,EAAE,IAAI;aACjB,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAEhB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC9B,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK;oBAAE,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACnD,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC9B,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK;oBAAE,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACnD,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC1B,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACpB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACtD,CAAC;gBAED,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBAChB,oEAAoE;oBACpE,MAAM,YAAY,GAAG,2BAA2B,CAAC,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;oBACxF,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;wBACzB,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;4BAC9B,MAAM,CACL,OAAO,EACP,oFAAoF,EACpF,IAAI,CACJ,CAAC;4BACF,OAAO;wBACR,CAAC;wBACD,IAAI,YAAY,CAAC,UAAU,IAAI,YAAY,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BACnE,MAAM,CACL,OAAO,EACP,mFAAmF,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACxH,IAAI,CACJ,CAAC;4BACF,OAAO;wBACR,CAAC;oBACF,CAAC;gBACF,CAAC;gBAED,MAAM,MAAM,GAAG,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACzB,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACpB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM,CAAC,OAAO,EAAE,kCAAkC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;YACxE,CAAC,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACvB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,CAAC;YACD,MAAM,CAAC,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACzE,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/plugins/adapter.d.ts

@@ -0,0 +1,11 @@
+/**
+ * ContextOS Plugin Supply Chain CLI Adapter
+ * ADR-002: Bundled CJS entrypoint for CLI consumption
+ */
+export { validateArchiveEntry } from "./core/archive.js";
+export { calculateTreeDigest, sha256 } from "./core/digest.js";
+export { ScriptGrantManager } from "./core/grants.js";
+export { validatePluginPinning, verifyNpmTarballIntegrity, } from "./core/pinning.js";
+export type * from "./core/types.js";
+export { THREAT_CODES } from "./core/types.js";
+export { AtomicPluginUpdater } from "./core/updater.js";

package/dist/plugins/adapter.js

@@ -0,0 +1,11 @@
+/**
+ * ContextOS Plugin Supply Chain CLI Adapter
+ * ADR-002: Bundled CJS entrypoint for CLI consumption
+ */
+export { validateArchiveEntry } from "./core/archive.js";
+export { calculateTreeDigest, sha256 } from "./core/digest.js";
+export { ScriptGrantManager } from "./core/grants.js";
+export { validatePluginPinning, verifyNpmTarballIntegrity, } from "./core/pinning.js";
+export { THREAT_CODES } from "./core/types.js";
+export { AtomicPluginUpdater } from "./core/updater.js";
+//# sourceMappingURL=adapter.js.map

package/dist/plugins/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/plugins/adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EACN,qBAAqB,EACrB,yBAAyB,GACzB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/plugins/core/archive.d.ts

@@ -0,0 +1,9 @@
+/**
+ * ContextOS Safe Archive Extraction Scanner
+ * Section 20.4 & Threat Model Hardening
+ */
+import { type ArchiveEntryLimits, type ArchiveValidationResult } from "./types.js";
+/**
+ * Validates an individual archive entry path and metadata against security vulnerabilities.
+ */
+export declare function validateArchiveEntry(entryPath: string, limits?: ArchiveEntryLimits): ArchiveValidationResult;

package/dist/plugins/core/archive.js

@@ -0,0 +1,128 @@
+/**
+ * ContextOS Safe Archive Extraction Scanner
+ * Section 20.4 & Threat Model Hardening
+ */
+import * as path from "node:path";
+import { THREAT_CODES } from "./types.js";
+const WINDOWS_RESERVED_NAMES = /^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\..*)?$/i;
+/**
+ * Validates an individual archive entry path and metadata against security vulnerabilities.
+ */
+export function validateArchiveEntry(entryPath, limits = {}) {
+    if (typeof entryPath !== "string" || !entryPath.trim()) {
+        return {
+            valid: false,
+            code: THREAT_CODES.INVALID_PATH,
+            error: "Empty or non-string archive path",
+        };
+    }
+    const normalized = entryPath.replace(/\\/g, "/").replace(/^\.\//, "");
+    // 1. Absolute path check
+    if (path.isAbsolute(entryPath) ||
+        /^[a-zA-Z]:[\\/]/.test(entryPath) ||
+        /^[a-zA-Z]:/.test(normalized) ||
+        normalized.startsWith("/")) {
+        return {
+            valid: false,
+            code: THREAT_CODES.ABSOLUTE_PATH,
+            error: `Security violation: absolute archive path rejected: "${entryPath}"`,
+        };
+    }
+    // 2. Directory traversal check
+    const parts = normalized.split("/");
+    if (parts.includes("..") || normalized.startsWith("../") || normalized.includes("/../")) {
+        return {
+            valid: false,
+            code: THREAT_CODES.PATH_TRAVERSAL,
+            error: `Security violation: archive path attempts traversal outside destination: "${entryPath}"`,
+        };
+    }
+    // 3. Windows reserved device names
+    for (const part of parts) {
+        if (WINDOWS_RESERVED_NAMES.test(part)) {
+            return {
+                valid: false,
+                code: THREAT_CODES.RESERVED_NAME,
+                error: `Security violation: Windows reserved device name rejected: "${part}" in "${entryPath}"`,
+            };
+        }
+    }
+    // 4. Special files (devices, sockets, fifos)
+    if (limits.entryType === "socket" ||
+        limits.entryType === "fifo" ||
+        limits.entryType === "characterDevice" ||
+        limits.entryType === "blockDevice") {
+        return {
+            valid: false,
+            code: THREAT_CODES.SPECIAL_FILE,
+            error: `Security violation: special device or socket rejected: "${entryPath}" (${limits.entryType})`,
+        };
+    }
+    // 5. Symlink / hardlink escape checks
+    if (limits.linkTarget || limits.entryType === "symlink" || limits.entryType === "hardlink") {
+        if (limits.linkTarget) {
+            const targetNorm = limits.linkTarget.replace(/\\/g, "/");
+            if (path.isAbsolute(limits.linkTarget) || /^[a-zA-Z]:/.test(targetNorm) || targetNorm.startsWith("/")) {
+                return {
+                    valid: false,
+                    code: THREAT_CODES.SYMLINK_ESCAPE,
+                    error: `Security violation: absolute symlink/hardlink target rejected: "${limits.linkTarget}"`,
+                };
+            }
+            const entryDir = path.posix.dirname(normalized);
+            const resolvedTarget = path.posix.normalize(path.posix.join(entryDir, targetNorm));
+            if (resolvedTarget.startsWith("../") || resolvedTarget === ".." || resolvedTarget.includes("/../")) {
+                return {
+                    valid: false,
+                    code: THREAT_CODES.SYMLINK_ESCAPE,
+                    error: `Security violation: symlink target escapes archive boundary: "${limits.linkTarget}"`,
+                };
+            }
+        }
+    }
+    // 6. Case & Unicode collision checks
+    if (limits.seenPaths) {
+        const folded = normalized.toLowerCase().normalize("NFC");
+        if (limits.seenPaths.has(folded)) {
+            return {
+                valid: false,
+                code: THREAT_CODES.CASE_COLLISION,
+                error: `Security violation: case or Unicode collision detected for path: "${entryPath}"`,
+            };
+        }
+        limits.seenPaths.add(folded);
+    }
+    // 7. Compression ratio bomb check
+    if (typeof limits.uncompressedSize === "number" && typeof limits.compressedSize === "number") {
+        if (limits.compressedSize > 0) {
+            const ratio = limits.uncompressedSize / limits.compressedSize;
+            const maxRatio = limits.maxRatio ?? 100;
+            if (ratio > maxRatio && limits.uncompressedSize > 1024 * 1024) {
+                return {
+                    valid: false,
+                    code: THREAT_CODES.RATIO_EXCEEDED,
+                    error: `Security violation: suspicious compression ratio (${ratio.toFixed(1)}x) exceeds limit (${maxRatio}x)`,
+                };
+            }
+        }
+    }
+    // 8. Zip bomb / count & size limits
+    if (typeof limits.currentCount === "number" && limits.maxFiles && limits.currentCount >= limits.maxFiles) {
+        return {
+            valid: false,
+            code: THREAT_CODES.MAX_FILES_EXCEEDED,
+            error: `Security violation: archive exceeds maximum permitted file count (${limits.maxFiles})`,
+        };
+    }
+    if (typeof limits.currentTotalBytes === "number" &&
+        limits.maxTotalBytes &&
+        limits.currentTotalBytes >= limits.maxTotalBytes) {
+        return {
+            valid: false,
+            code: THREAT_CODES.MAX_SIZE_EXCEEDED,
+            error: `Security violation: archive exceeds maximum uncompressed size (${limits.maxTotalBytes} bytes)`,
+        };
+    }
+    return { valid: true };
+}
+//# sourceMappingURL=archive.js.map

package/dist/plugins/core/archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.js","sourceRoot":"","sources":["../../../src/plugins/core/archive.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAyD,YAAY,EAAE,MAAM,YAAY,CAAC;AAEjG,MAAM,sBAAsB,GAAG,mDAAmD,CAAC;AAEnF;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB,EAAE,SAA6B,EAAE;IACtF,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACxD,OAAO;YACN,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,YAAY,CAAC,YAAY;YAC/B,KAAK,EAAE,kCAAkC;SACzC,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAEtE,yBAAyB;IACzB,IACC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAC1B,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;QACjC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;QAC7B,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EACzB,CAAC;QACF,OAAO;YACN,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,YAAY,CAAC,aAAa;YAChC,KAAK,EAAE,wDAAwD,SAAS,GAAG;SAC3E,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACzF,OAAO;YACN,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,YAAY,CAAC,cAAc;YACjC,KAAK,EAAE,6EAA6E,SAAS,GAAG;SAChG,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,OAAO;gBACN,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,YAAY,CAAC,aAAa;gBAChC,KAAK,EAAE,+DAA+D,IAAI,SAAS,SAAS,GAAG;aAC/F,CAAC;QACH,CAAC;IACF,CAAC;IAED,6CAA6C;IAC7C,IACC,MAAM,CAAC,SAAS,KAAK,QAAQ;QAC7B,MAAM,CAAC,SAAS,KAAK,MAAM;QAC3B,MAAM,CAAC,SAAS,KAAK,iBAAiB;QACtC,MAAM,CAAC,SAAS,KAAK,aAAa,EACjC,CAAC;QACF,OAAO;YACN,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,YAAY,CAAC,YAAY;YAC/B,KAAK,EAAE,2DAA2D,SAAS,MAAM,MAAM,CAAC,SAAS,GAAG;SACpG,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QAC5F,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvG,OAAO;oBACN,KAAK,EAAE,KAAK;oBACZ,IAAI,EAAE,YAAY,CAAC,cAAc;oBACjC,KAAK,EAAE,mEAAmE,MAAM,CAAC,UAAU,GAAG;iBAC9F,CAAC;YACH,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAChD,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;YACnF,IAAI,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpG,OAAO;oBACN,KAAK,EAAE,KAAK;oBACZ,IAAI,EAAE,YAAY,CAAC,cAAc;oBACjC,KAAK,EAAE,iEAAiE,MAAM,CAAC,UAAU,GAAG;iBAC5F,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IAED,qCAAqC;IACrC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,OAAO;gBACN,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,YAAY,CAAC,cAAc;gBACjC,KAAK,EAAE,qEAAqE,SAAS,GAAG;aACxF,CAAC;QACH,CAAC;QACD,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,kCAAkC;IAClC,IAAI,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC9F,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,cAAc,CAAC;YAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,GAAG,CAAC;YACxC,IAAI,KAAK,GAAG,QAAQ,IAAI,MAAM,CAAC,gBAAgB,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;gBAC/D,OAAO;oBACN,KAAK,EAAE,KAAK;oBACZ,IAAI,EAAE,YAAY,CAAC,cAAc;oBACjC,KAAK,EAAE,qDAAqD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,QAAQ,IAAI;iBAC7G,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IAED,oCAAoC;IACpC,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1G,OAAO;YACN,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,YAAY,CAAC,kBAAkB;YACrC,KAAK,EAAE,qEAAqE,MAAM,CAAC,QAAQ,GAAG;SAC9F,CAAC;IACH,CAAC;IAED,IACC,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ;QAC5C,MAAM,CAAC,aAAa;QACpB,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,aAAa,EAC/C,CAAC;QACF,OAAO;YACN,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,YAAY,CAAC,iBAAiB;YACpC,KAAK,EAAE,kEAAkE,MAAM,CAAC,aAAa,SAAS;SACtG,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC"}

package/dist/plugins/core/digest.d.ts

@@ -0,0 +1,11 @@
+/**
+ * ContextOS Plugin Full-Tree Digest Calculation
+ * Section 20.3 & Threat Model Hardening
+ */
+import type { TreeDigestOptions, TreeDigestResult } from "./types.js";
+export declare function sha256(data: Buffer | string): string;
+/**
+ * Calculates a deterministic full-tree digest for a directory.
+ * Includes file modes, types (files, symlinks), sizes, and content digests.
+ */
+export declare function calculateTreeDigest(dirPath: string, _options?: TreeDigestOptions): TreeDigestResult;

package/dist/plugins/core/digest.js

@@ -0,0 +1,70 @@
+/**
+ * ContextOS Plugin Full-Tree Digest Calculation
+ * Section 20.3 & Threat Model Hardening
+ */
+import * as crypto from "node:crypto";
+import * as fs from "node:fs";
+import * as path from "node:path";
+export function sha256(data) {
+    return crypto.createHash("sha256").update(data).digest("hex");
+}
+/**
+ * Calculates a deterministic full-tree digest for a directory.
+ * Includes file modes, types (files, symlinks), sizes, and content digests.
+ */
+export function calculateTreeDigest(dirPath, _options = {}) {
+    const resolvedDir = path.resolve(dirPath);
+    if (!fs.existsSync(resolvedDir)) {
+        throw new Error(`Directory does not exist: ${resolvedDir}`);
+    }
+    const fileEntries = [];
+    function walk(current) {
+        const items = fs.readdirSync(current, { withFileTypes: true });
+        // Deterministic alphabetical sorting
+        items.sort((a, b) => a.name.localeCompare(b.name));
+        for (const item of items) {
+            const fullPath = path.join(current, item.name);
+            if (item.isDirectory()) {
+                walk(fullPath);
+            }
+            else if (item.isSymbolicLink()) {
+                const rel = path.relative(resolvedDir, fullPath).replace(/\\/g, "/");
+                const stat = fs.lstatSync(fullPath);
+                const linkTarget = fs.readlinkSync(fullPath);
+                const hash = sha256(linkTarget);
+                fileEntries.push({
+                    relativePath: rel,
+                    size: stat.size,
+                    mode: stat.mode & 0o777,
+                    sha256: hash,
+                    type: "symlink",
+                });
+            }
+            else if (item.isFile()) {
+                const rel = path.relative(resolvedDir, fullPath).replace(/\\/g, "/");
+                const stat = fs.statSync(fullPath);
+                const content = fs.readFileSync(fullPath);
+                const hash = sha256(content);
+                fileEntries.push({
+                    relativePath: rel,
+                    size: stat.size,
+                    mode: stat.mode & 0o777,
+                    sha256: hash,
+                    type: "file",
+                });
+            }
+        }
+    }
+    walk(resolvedDir);
+    // Deterministically sort by relativePath
+    fileEntries.sort((a, b) => a.relativePath.localeCompare(b.relativePath));
+    const manifestString = fileEntries
+        .map((f) => `${f.relativePath}|${f.size}|${f.mode}|${f.type}|${f.sha256}`)
+        .join("\n");
+    const treeDigest = sha256(manifestString);
+    return {
+        treeDigest,
+        files: fileEntries,
+    };
+}
+//# sourceMappingURL=digest.js.map

package/dist/plugins/core/digest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest.js","sourceRoot":"","sources":["../../../src/plugins/core/digest.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,MAAM,UAAU,MAAM,CAAC,IAAqB;IAC3C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,WAA8B,EAAE;IACpF,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,WAAW,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,WAAW,GAAoB,EAAE,CAAC;IAExC,SAAS,IAAI,CAAC,OAAe;QAC5B,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,qCAAqC;QACrC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAEnD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChB,CAAC;iBAAM,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAClC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACrE,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACpC,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;gBAEhC,WAAW,CAAC,IAAI,CAAC;oBAChB,YAAY,EAAE,GAAG;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK;oBACvB,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,SAAS;iBACf,CAAC,CAAC;YACJ,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACrE,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBAE7B,WAAW,CAAC,IAAI,CAAC;oBAChB,YAAY,EAAE,GAAG;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK;oBACvB,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,MAAM;iBACZ,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,CAAC;IAElB,yCAAyC;IACzC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IAEzE,MAAM,cAAc,GAAG,WAAW;SAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;SACzE,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IAE1C,OAAO;QACN,UAAU;QACV,KAAK,EAAE,WAAW;KAClB,CAAC;AACH,CAAC"}