dsh-memu-memory 1.2.0 → 1.2.2

package/lib/local-vector-service.js

@@ -89,17 +89,19 @@ function profileFor(catalogId) {
 }
 
 function installationFor(id, sharedRuntime = null) {
-  const status = getDownloader().getStatus(id, { deep: false })
+  const status = getDownloader().getStatus(id, { deep: true })
   // 所有可用模型 pin 的是同一个受管 runtime；每个模型各走一遍运行时目录树（几百个文件）
   // 会让每次 getState 多花几百毫秒。上层已经算过一次就复用。
   const runtime = sharedRuntime || localVectorRuntimeStatus({ modelId: id })
+  const degraded = status.state === 'installed' && status.verified === false
   return {
-    status: status.state,
-    installed: status.installed === true,
-    modelDir: status.installed ? path.join(root, id) : null,
+    status: degraded ? 'degraded' : status.state,
+    installed: status.installed === true && !degraded,
+    verified: status.verified ?? null,
+    modelDir: status.installed && !degraded ? path.join(root, id) : null,
     runtimeDir: runtime.ready ? runtime.path : null,
     fingerprintMatches: status.fingerprintMatches ?? null,
-    error: status.error || null,
+    error: degraded ? { code: 'EMBEDDING_INSTALL_TAMPERED', message: 'installed embedding files failed deep verification' } : (status.error || null),
     progress: status.progress || null,
   }
 }
@@ -164,7 +166,7 @@ export function getLocalVectorState() {
 
 export function selectLocalVectorModel(id) {
   const status = getDownloader().getStatus(String(id), { deep: true })
-  if (status.state !== 'installed' || status.fingerprintMatches === false) {
+  if (status.state !== 'installed' || status.verified !== true || status.fingerprintMatches === false) {
     const error = new Error('install and verify the local embedding model before selecting it')
     error.code = 'LOCAL_VECTOR_MODEL_NOT_INSTALLED'
     throw error

package/lib/managed-runtime.js

@@ -20,6 +20,28 @@ export function verifyRuntimeArchive(data, digest) {
   if (crypto.createHash('sha256').update(data).digest('hex') !== digest) throw new Error('managed runtime checksum mismatch; refusing to execute')
 }
 
+function executableFingerprint(file) {
+  try {
+    const stat = fs.lstatSync(file)
+    if (!stat.isFile() || stat.isSymbolicLink()) return null
+    const sha256 = crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex')
+    return { bytes: stat.size, sha256 }
+  } catch {
+    return null
+  }
+}
+
+function verifiedRuntimeMetadata(file, asset) {
+  try {
+    const metadata = JSON.parse(fs.readFileSync(file, 'utf8'))
+    return metadata && metadata.version === UV_VERSION && metadata.archive === asset[0] && metadata.archiveSha256 === asset[1] && Number.isInteger(metadata.executableBytes) && typeof metadata.executableSha256 === 'string'
+      ? metadata
+      : null
+  } catch {
+    return null
+  }
+}
+
 export async function ensureManagedPython({ run, log = () => {}, fetcher = fetch } = {}) {
   const platform = `${process.platform}-${process.arch}`
   const asset = ASSETS[platform]
@@ -33,7 +55,14 @@ export async function ensureManagedPython({ run, log = () => {}, fetcher = fetch
     UV_PYTHON_BIN_DIR: ensureDir(path.join(root, 'bin')),
     UV_NO_PROGRESS: '1', UV_PYTHON_PREFERENCE: 'only-managed', UV_NO_MODIFY_PATH: '1', UV_NO_CONFIG: '1',
   }
-  if (!fs.existsSync(executable)) {
+  const metadataFile = path.join(bin, 'verified.json')
+  const metadata = verifiedRuntimeMetadata(metadataFile, asset)
+  const fingerprint = executableFingerprint(executable)
+  const reusable = Boolean(metadata && fingerprint && metadata.executableBytes === fingerprint.bytes && metadata.executableSha256 === fingerprint.sha256)
+  if (!reusable) {
+    if (fingerprint || fs.existsSync(executable)) log(`managed uv ${UV_VERSION} is missing trusted metadata or was modified; replacing it`)
+    try { fs.rmSync(executable, { force: true }) } catch {}
+    try { fs.rmSync(metadataFile, { force: true }) } catch {}
     log(`no usable Python with pip; downloading pinned uv ${UV_VERSION}`)
     const response = await fetcher(`https://github.com/astral-sh/uv/releases/download/${UV_VERSION}/${asset[0]}`, { signal: AbortSignal.timeout(120_000) })
     if (!response.ok || Number(response.headers.get('content-length')) > 64 * 1024 * 1024) throw new Error('managed runtime download failed or is too large')
@@ -63,7 +92,9 @@ export async function ensureManagedPython({ run, log = () => {}, fetcher = fetch
     }
     if (fs.existsSync(temporary)) fs.renameSync(temporary, executable)
     if (process.platform !== 'win32') fs.chmodSync(executable, 0o700)
-    writeJson(path.join(bin, 'verified.json'), { version: UV_VERSION, archive: asset[0], sha256: asset[1] })
+    const installedFingerprint = executableFingerprint(executable)
+    if (!installedFingerprint) throw new Error('managed runtime executable is not a regular file')
+    writeJson(metadataFile, { version: UV_VERSION, archive: asset[0], archiveSha256: asset[1], executableBytes: installedFingerprint.bytes, executableSha256: installedFingerprint.sha256 })
   }
   const version = await run(executable, ['--version'], { env, timeoutMs: 20_000 })
   if (version.code !== 0 || !version.stdout.startsWith(`uv ${UV_VERSION} `) && version.stdout.trim() !== `uv ${UV_VERSION}`) throw new Error('managed uv version mismatch')