copilot-relay 0.4.7 → 0.4.8

package/README.md

@@ -72,7 +72,7 @@ scripts. It asks GitHub with the stored token, so no relay needs to run.
 
 - [Configure models and deep checks](wiki/EN-Configuration.md) · [中文](wiki/ZH-Configuration.md)
 - Run at login: [macOS](wiki/EN-macOS-LaunchAgent.md) · [Windows](wiki/EN-Windows-Service.md) · [Linux](wiki/EN-Linux-systemd.md)
-- [Troubleshoot](wiki/EN-Logging-Troubleshooting.md) · [Understand the architecture](wiki/EN-Architecture.md) · [Contribute](wiki/EN-Development.md)
+- [Commands](wiki/EN-Commands.md) · [Prompt caching](wiki/EN-Prompt-Caching.md) · [Troubleshoot](wiki/EN-Logging-Troubleshooting.md) · [Understand the architecture](wiki/EN-Architecture.md) · [Contribute](wiki/EN-Development.md)
 
 Unofficial research project; not affiliated with GitHub or Anthropic. Upstream
 services and compatibility can change. Model and tool support are not guaranteed;

package/dist/main.js

@@ -49,6 +49,24 @@ var PromptTooLongError = class extends HTTPError {
 	}
 };
 
+//#endregion
+//#region src/lib/file-identity.ts
+/** True when two stats of a path name the same file: the same device and file index. */
+const sameFile$1 = (left, right) => left.dev === right.dev && left.ino === right.ino;
+/**
+* True when a stat of an open handle and a stat of its path name the same file.
+*
+* On Windows the two can disagree on `dev` for the same file: on Node 22.13.1 a path stat
+* reports `dev` 0 while a handle stat reports the volume serial number. There a `dev` of 0 on
+* either side counts as unreported and the file index (`ino`) alone decides, which is weaker
+* evidence than both. Two nonzero `dev` values must still match, and other platforms compare both.
+*/
+const sameOpenedFile = (left, right, platform = process.platform) => {
+	if (left.ino !== right.ino) return false;
+	if (platform === "win32" && (left.dev === 0 || right.dev === 0)) return true;
+	return left.dev === right.dev;
+};
+
 //#endregion
 //#region src/lib/paths.ts
 const homeDir = os.homedir();
@@ -371,7 +389,6 @@ const formatLogValue = (value) => typeof value === "string" ? value : inspect(va
 });
 const escapeLogLineSeparators = (value) => value.replaceAll("\r", "\\r").replaceAll("\n", "\\n").replaceAll(String.fromCodePoint(8232), "\\u2028").replaceAll(String.fromCodePoint(8233), "\\u2029");
 const isMissing$2 = (error) => error.code === "ENOENT";
-const sameFile$2 = (left, right) => left.dev === right.dev && left.ino === right.ino;
 const ensurePrivateDirectory = async (directory) => {
 	await fs.mkdir(directory, { mode: 448 }).catch((error) => {
 		if (error.code !== "EEXIST") throw error;
@@ -382,7 +399,7 @@ const ensurePrivateDirectory = async (directory) => {
 	const handle = await fs.open(directory, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);
 	try {
 		const opened = await handle.stat();
-		if (!opened.isDirectory() || !sameFile$2(observed, opened)) throw new Error("Log directory changed while opening");
+		if (!opened.isDirectory() || !sameOpenedFile(observed, opened)) throw new Error("Log directory changed while opening");
 		await handle.chmod(448);
 	} finally {
 		await handle.close();
@@ -401,10 +418,10 @@ let activeLog;
 let logIdleClose;
 const maxLogWriteBytes = 256 * 1024;
 const hasMode = (stats, mode) => process.platform === "win32" || (stats.mode & 511) === mode;
-const isSameDirectory = (current, checked) => current !== void 0 && current.isDirectory() && sameFile$2(current, checked) && hasMode(current, 448);
+const isSameDirectory = (current, checked) => current !== void 0 && current.isDirectory() && sameFile$1(current, checked) && hasMode(current, 448);
 const isStillActive = async (active) => {
 	const [current, ...directories] = await Promise.all([active.filePath, ...logDirectories].map((target) => fs.lstat(target).catch(() => void 0)));
-	return current !== void 0 && current.isFile() && current.nlink === 1 && sameFile$2(current, active.identity) && hasMode(current, 384) && active.directories.every((checked, index) => isSameDirectory(directories[index], checked));
+	return current !== void 0 && current.isFile() && current.nlink === 1 && sameOpenedFile(current, active.identity) && hasMode(current, 384) && active.directories.every((checked, index) => isSameDirectory(directories[index], checked));
 };
 const openPrivateLog = async (filePath, directories) => {
 	const observed = await fs.lstat(filePath).catch((error) => {
@@ -416,7 +433,7 @@ const openPrivateLog = async (filePath, directories) => {
 	try {
 		const opened = await handle.stat();
 		const current = await fs.lstat(filePath);
-		if (!opened.isFile() || opened.nlink !== 1 || current.isSymbolicLink() || !sameFile$2(opened, current) || observed && !sameFile$2(observed, opened)) throw new Error("Log file changed while opening");
+		if (!opened.isFile() || opened.nlink !== 1 || current.isSymbolicLink() || !sameOpenedFile(opened, current) || observed && !sameOpenedFile(observed, opened)) throw new Error("Log file changed while opening");
 		if (process.platform !== "win32") await handle.chmod(384);
 		return {
 			filePath,
@@ -2296,7 +2313,6 @@ const markDiscardedResponse = (response) => {
 };
 const credentialPattern = /(?:gh[pousr]_|github_pat_|sk-|eyJ)[A-Za-z0-9_-]+/;
 const uuidPattern = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;
-const sameFile$1 = (left, right) => left.dev === right.dev && left.ino === right.ino;
 const noFollow = process.platform === "win32" ? 0 : fs.constants.O_NOFOLLOW;
 const safeValue = (value) => typeof value === "string" && /^[A-Za-z0-9_.:/[\]-]{1,160}$/.test(value) && !/(?:gh[pousr]_|github_pat_|sk-|eyJ)[A-Za-z0-9_-]+/.test(value) ? value : void 0;
 const errorName = (error) => error instanceof Error && [
@@ -2444,7 +2460,7 @@ const privateDirectory = async (directory) => {
 	const handle = await fs.open(directory, fs.constants.O_RDONLY | noFollow);
 	try {
 		const opened = await handle.stat();
-		if (!opened.isDirectory() || !sameFile$1(observed, opened)) throw new Error("Capture directory changed.");
+		if (!opened.isDirectory() || !sameOpenedFile(observed, opened)) throw new Error("Capture directory changed.");
 		await handle.chmod(448);
 		return opened;
 	} finally {
@@ -2456,7 +2472,7 @@ const createPrivateFile = async (file) => {
 	try {
 		const opened = await handle.stat();
 		const current = await fs.lstat(file);
-		if (!opened.isFile() || opened.nlink !== 1 || current.isSymbolicLink() || !sameFile$1(opened, current)) throw new Error("Unsafe capture file.");
+		if (!opened.isFile() || opened.nlink !== 1 || current.isSymbolicLink() || !sameOpenedFile(opened, current)) throw new Error("Unsafe capture file.");
 		return handle;
 	} catch (error) {
 		await handle.close();
@@ -2914,7 +2930,7 @@ var RequestTrace = class RequestTrace {
 			}
 			const opened = await handle.stat();
 			const current = await fs.lstat(file);
-			if (!current.isFile() || current.isSymbolicLink() || opened.nlink !== 1 || !sameFile$1(opened, current)) throw new Error("Capture file changed.");
+			if (!current.isFile() || current.isSymbolicLink() || opened.nlink !== 1 || !sameOpenedFile(opened, current)) throw new Error("Capture file changed.");
 			await handle.writeFile(buffer);
 		}).catch(() => {
 			this.manifest.captureError = "capture_write_failed";
@@ -2967,7 +2983,7 @@ var RequestTrace = class RequestTrace {
 				await this.checkDirectories();
 				const manifest = path.join(this.captureDirectory, "meta.json");
 				const current = await fs.lstat(manifest);
-				if (!current.isFile() || current.isSymbolicLink() || current.nlink !== 1 || !this.metadataStat || !sameFile$1(current, this.metadataStat) || current.size !== this.metadataStat.size || current.mtimeMs !== this.metadataStat.mtimeMs || current.ctimeMs !== this.metadataStat.ctimeMs) throw new Error("Unsafe capture metadata.");
+				if (!current.isFile() || current.isSymbolicLink() || current.nlink !== 1 || !this.metadataStat || !sameOpenedFile(current, this.metadataStat) || current.size !== this.metadataStat.size || current.mtimeMs !== this.metadataStat.mtimeMs || current.ctimeMs !== this.metadataStat.ctimeMs) throw new Error("Unsafe capture metadata.");
 				await fs.rename(path.join(this.captureDirectory, "meta.next.json"), manifest);
 			}
 		}).catch(() => {
@@ -3005,7 +3021,7 @@ const readRetentionManifest = async (file) => {
 	const handle = await fs.open(file, fs.constants.O_RDONLY | noFollow);
 	try {
 		const opened = await handle.stat();
-		if (!sameFile$1(observed, opened) || opened.nlink !== 1 || opened.size !== observed.size) throw new Error("Capture metadata changed.");
+		if (!sameOpenedFile(observed, opened) || opened.nlink !== 1 || opened.size !== observed.size) throw new Error("Capture metadata changed.");
 		const bytes = Buffer.alloc(opened.size);
 		let offset = 0;
 		while (offset < bytes.length) {
@@ -3014,7 +3030,7 @@ const readRetentionManifest = async (file) => {
 			offset += bytesRead;
 		}
 		const current = await fs.lstat(file);
-		if (!sameFile$1(opened, current) || current.size !== opened.size || current.mtimeMs !== opened.mtimeMs) throw new Error("Capture metadata changed.");
+		if (!sameOpenedFile(opened, current) || current.size !== opened.size || current.mtimeMs !== opened.mtimeMs) throw new Error("Capture metadata changed.");
 		return JSON.parse(bytes.toString("utf8"));
 	} finally {
 		await handle.close();
@@ -7741,7 +7757,7 @@ const readCaptureFile = async (directory, file, maximum, optional = false) => {
 	const handle = await fs.open(filePath, fs.constants.O_RDONLY | (process.platform === "win32" ? 0 : fs.constants.O_NOFOLLOW));
 	try {
 		const opened = await handle.stat();
-		requireValid(opened.isFile() && opened.ino === before.ino && opened.dev === before.dev && opened.size === before.size);
+		requireValid(opened.isFile() && sameOpenedFile(opened, before) && opened.size === before.size);
 		const bytes = Buffer.alloc(opened.size);
 		let offset = 0;
 		while (offset < bytes.length) {
@@ -7750,7 +7766,7 @@ const readCaptureFile = async (directory, file, maximum, optional = false) => {
 			offset += read.bytesRead;
 		}
 		const after = await fs.lstat(filePath);
-		requireValid(!after.isSymbolicLink() && after.ino === opened.ino && after.dev === opened.dev && after.size === opened.size && after.mtimeMs === opened.mtimeMs);
+		requireValid(!after.isSymbolicLink() && sameOpenedFile(after, opened) && after.size === opened.size && after.mtimeMs === opened.mtimeMs);
 		return bytes;
 	} finally {
 		await handle.close();