harnery 0.43.0 → 0.44.0

package/dist/lib/guarded-remove.js

@@ -1,20 +1,43 @@
 import { spawnSync } from "node:child_process";
 import { lstatSync, readdirSync, readlinkSync, realpathSync, rmSync } from "node:fs";
 import { homedir } from "node:os";
-import { basename, dirname, isAbsolute, parse, relative, resolve, sep } from "node:path";
+import { basename, dirname, isAbsolute, join, parse, relative, resolve, sep } from "node:path";
 const protectedNames = new Set([".git", ".harnery", ".credentials", ".ssh", ".gnupg"]);
 const MAX_ENTRIES = 10_000;
+const MAX_OWNED_ARTIFACT_ENTRIES = 100_000;
 /** Permanent removal is deliberately limited to inspected, untracked local outputs. */
 export function guardedRemove(paths, options, checkClaims = () => { }) {
     const cwd = realpathSync(process.cwd());
     const root = checkedPath(options.root, new Set(), true);
-    const allowed = allowedProtected(options.allowProtected ?? [], root, options.liveRoots ?? []);
+    if (options.cleanClone) {
+        if (!options.recursive)
+            throw new Error("Clean clone removal requires --recursive");
+        if (options.allowProtected?.length)
+            throw new Error("Clean clone removal cannot be combined with --allow-protected");
+        if (!options.assertOwnedArtifact)
+            throw new Error("Clean clone removal requires one current caller-owned managed artifact");
+        options.assertOwnedArtifact(root);
+    }
+    const entryLimit = options.entryLimit ?? MAX_ENTRIES;
+    if (!Number.isSafeInteger(entryLimit) ||
+        entryLimit < 1 ||
+        entryLimit > MAX_OWNED_ARTIFACT_ENTRIES)
+        throw new Error(`The entry limit must be an integer from 1 to ${MAX_OWNED_ARTIFACT_ENTRIES}`);
+    const assertEntryLimitAuthority = () => {
+        if (entryLimit <= MAX_ENTRIES)
+            return;
+        if (!options.assertOwnedArtifact)
+            throw new Error("An entry limit above 10000 requires one current caller-owned managed artifact");
+        options.assertOwnedArtifact(root);
+    };
+    const allowed = allowedProtected(options.allowProtected ?? [], root, options.liveRoots ?? [], options.assertOwnedArtifact);
     const rootStat = lstatSync(root);
     const rootFingerprint = fingerprint(rootStat);
     if (!rootStat.isDirectory())
         throw new Error("--root must be a directory");
     if (root === parse(root).root || root === realpathSync(homedir()))
         throw new Error("--root cannot be a filesystem root or home directory");
+    assertEntryLimitAuthority();
     if (paths.length === 0 || paths.length > 100)
         throw new Error("Supply 1-100 explicit targets");
     const targets = paths.map((path) => checkedPath(path, allowed));
@@ -22,6 +45,7 @@ export function guardedRemove(paths, options, checkClaims = () => { }) {
     const removedProtected = new Set();
     const links = [];
     const gitDirs = new Set();
+    const cleanClones = new Set();
     let bytes = 0;
     const devices = new Set();
     for (const target of targets) {
@@ -64,6 +88,10 @@ export function guardedRemove(paths, options, checkClaims = () => { }) {
         if (stat.isDirectory() && !options.recursive)
             throw new Error(`Directory removal requires --recursive: ${target}`);
         const device = stat.dev;
+        if (options.cleanClone) {
+            assertCleanClone(target);
+            cleanClones.add(target);
+        }
         devices.add(device);
         const pending = [target];
         while (pending.length) {
@@ -72,6 +100,12 @@ export function guardedRemove(paths, options, checkClaims = () => { }) {
             if (basename(path) === ARTIFACT_RECORD && insideArtifactWorkspace(path, null))
                 throw new Error(`An artifact's record is managed by the artifact commands: ${path}`);
             if (protectedNames.has(basename(path).toLowerCase())) {
+                if (options.cleanClone && basename(path) === ".git") {
+                    const clone = dirname(path);
+                    assertCleanClone(clone);
+                    cleanClones.add(clone);
+                    allowed.add(path);
+                }
                 if (!allowed.has(path))
                     throw new Error(protectedMessage(path));
                 removedProtected.add(path);
@@ -82,16 +116,16 @@ export function guardedRemove(paths, options, checkClaims = () => { }) {
                 // were already refused if they were links, in checkedPath.)
                 if (path === target)
                     throw new Error(`Path contains a symlink: ${path}`);
-                if (snapshots.size >= MAX_ENTRIES)
-                    throw new Error(`Removal exceeds the ${MAX_ENTRIES}-entry limit; use the owning cleanup command`);
+                if (snapshots.size >= entryLimit)
+                    throw new Error(`Removal exceeds the ${entryLimit}-entry limit; use the owning cleanup command`);
                 snapshots.set(path, fingerprint(info));
                 links.push({ path, target: readlinkSync(path) });
                 continue;
             }
             if (info.dev !== device || (!info.isDirectory() && !info.isFile()))
                 throw new Error(`Mount boundary or special file cannot be removed: ${path}`);
-            if (snapshots.size >= MAX_ENTRIES)
-                throw new Error(`Removal exceeds the ${MAX_ENTRIES}-entry limit; use the owning cleanup command`);
+            if (snapshots.size >= entryLimit)
+                throw new Error(`Removal exceeds the ${entryLimit}-entry limit; use the owning cleanup command`);
             snapshots.set(path, fingerprint(info));
             if (info.isFile())
                 bytes += info.size;
@@ -126,6 +160,7 @@ export function guardedRemove(paths, options, checkClaims = () => { }) {
         root,
         targets,
         entries: snapshots.size,
+        entry_limit: entryLimit,
         bytes,
         protected: [...removedProtected].sort(),
         links,
@@ -137,12 +172,19 @@ export function guardedRemove(paths, options, checkClaims = () => { }) {
     if (checkedPath(options.root, new Set(), true) !== root ||
         fingerprint(lstatSync(root)) !== rootFingerprint)
         throw new Error("Allowed root changed during inspection");
+    assertEntryLimitAuthority();
+    if (options.cleanClone)
+        options.assertOwnedArtifact(root);
+    // Ownership may have been released or changed while the contents were inspected.
+    allowedProtected(options.allowProtected ?? [], root, options.liveRoots ?? [], options.assertOwnedArtifact);
     for (const target of targets) {
         checkedPath(target, allowed);
         assertUntracked(target);
     }
     for (const dir of gitDirs)
         assertNoUnpushedHistory(dir);
+    for (const clone of cleanClones)
+        assertCleanClone(clone);
     checkClaims(targets);
     for (const [path, previous] of snapshots) {
         if (fingerprint(lstatSync(path)) !== previous)
@@ -152,6 +194,44 @@ export function guardedRemove(paths, options, checkClaims = () => { }) {
         rmSync(target, { recursive: Boolean(options.recursive), force: false });
     return { ...report, applied: true };
 }
+/** A disposable clone must not be the only copy of work or a registered worktree. */
+function assertCleanClone(clone) {
+    const metadata = join(clone, ".git");
+    const stat = lstatSync(metadata);
+    if (!stat.isDirectory() || stat.isSymbolicLink())
+        throw new Error(`Clean clone removal requires a standalone .git directory: ${clone}`);
+    const git = (args) => {
+        const result = spawnSync("git", ["-c", "core.fsmonitor=false", "-C", clone, ...args], {
+            encoding: "utf8",
+            timeout: 10_000,
+            maxBuffer: 4 * 1024 * 1024,
+            env: {
+                ...process.env,
+                LC_ALL: "C",
+                GIT_DIR: undefined,
+                GIT_COMMON_DIR: undefined,
+                GIT_WORK_TREE: undefined,
+                GIT_INDEX_FILE: undefined,
+                GIT_OPTIONAL_LOCKS: "0",
+            },
+        });
+        if (result.error || result.status !== 0)
+            throw new Error(`Cannot verify clean clone ${clone}: git ${args[0]} failed`);
+        return result.stdout;
+    };
+    if (realpathSync(git(["rev-parse", "--show-toplevel"]).trim()) !== clone ||
+        realpathSync(resolve(clone, git(["rev-parse", "--git-common-dir"]).trim())) !== metadata)
+        throw new Error(`Clean clone removal refuses shared repository metadata: ${clone}`);
+    const worktrees = git(["worktree", "list", "--porcelain", "-z"])
+        .split("\0")
+        .filter((entry) => entry.startsWith("worktree "));
+    if (worktrees.length !== 1 || worktrees[0] !== `worktree ${clone}`)
+        throw new Error(`Clean clone removal refuses registered or linked worktrees: ${clone}`);
+    if (git(["status", "--porcelain=v1", "--untracked-files=all"]).trim())
+        throw new Error(`Clean clone has uncommitted or untracked work: ${clone}`);
+    if (git(["rev-list", "--max-count=1", "HEAD", "--all", "--reflog", "--not", "--remotes"]).trim())
+        throw new Error(`Clean clone has HEAD, ref or reflog commits not on any remote: ${clone}`);
+}
 /** The metadata file the artifact commands keep in each artifact workspace. */
 const ARTIFACT_RECORD = ".harnery-artifact.json";
 /**
@@ -188,9 +268,9 @@ function insideAllowed(path, allowed) {
  * protected path strictly inside the root, reached without symlinks, and
  * never the Git metadata or Harnery state of a live workspace root.
  */
-function allowedProtected(paths, root, liveRoots) {
+function allowedProtected(paths, root, liveRoots, assertOwnedArtifact) {
     const allowed = new Set();
-    const live = liveRoots.map((dir) => resolve(dir));
+    const live = liveRoots.map((dir) => realpathSync(dir));
     for (const input of paths) {
         if (!input?.trim() || /[\0\r\n*?[\]$]/.test(input))
             throw new Error("Use a nonempty explicit --allow-protected path without wildcards");
@@ -213,11 +293,25 @@ function allowedProtected(paths, root, liveRoots) {
         if (!named && !(info.isDirectory() && isRepositoryMetadata(path)))
             throw new Error(`--allow-protected must name a protected path itself: ${path}`);
         for (const dir of live) {
-            const own = [".git", ".harnery"].map((name) => resolve(dir, name));
-            if (path === dir ||
-                strictlyInside(path, dir) ||
-                own.some((state) => path === state || strictlyInside(state, path)))
+            if (path === dir || strictlyInside(path, dir))
                 throw new Error(`The live workspace's own state cannot be allowed: ${path}`);
+            for (const name of [".git", ".harnery"]) {
+                const state = resolve(dir, name);
+                if (path !== state && !strictlyInside(state, path))
+                    continue;
+                // Only an explicitly named copied state directory inside one owned
+                // artifact may cross the outer live-state ancestor. Other live roots
+                // (including a checkout inside that artifact) still veto the path.
+                if (name === ".harnery" &&
+                    basename(path) === ".harnery" &&
+                    info.isDirectory() &&
+                    dirname(root) === resolve(state, "artifacts") &&
+                    assertOwnedArtifact) {
+                    assertOwnedArtifact(root);
+                    continue;
+                }
+                throw new Error(`The live workspace's own state cannot be allowed: ${path}`);
+            }
         }
         allowed.add(realpathSync(path));
     }

package/dist/lib/identities/assume.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assume.d.ts","sourceRoot":"","sources":["../../../src/lib/identities/assume.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA0BH,MAAM,MAAM,uBAAuB,GAC/B,eAAe,GACf,iBAAiB,GACjB,sBAAsB,GACtB,oBAAoB,GACpB,kBAAkB,GAClB,oBAAoB,GACpB,aAAa,GACb,mBAAmB,CAAC;AAExB,qBAAa,mBAAoB,SAAQ,KAAK;aAE1B,IAAI,EAAE,uBAAuB;gBAA7B,IAAI,EAAE,uBAAuB,EAC7C,OAAO,EAAE,MAAM;CAKlB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,+DAA+D;IAC/D,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAOD;+EAC+E;AAC/E,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,KAAK,SAAa,EAClB,mBAAmB,GAAE,WAAW,CAAC,MAAM,CAAa,GACnD,gBAAgB,GAAG,IAAI,CA6BzB;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAyCT;AAuED,gEAAgE;AAChE,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACjC,oBAAoB,CAyHtB"}
+{"version":3,"file":"assume.d.ts","sourceRoot":"","sources":["../../../src/lib/identities/assume.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA0BH,MAAM,MAAM,uBAAuB,GAC/B,eAAe,GACf,iBAAiB,GACjB,sBAAsB,GACtB,oBAAoB,GACpB,kBAAkB,GAClB,oBAAoB,GACpB,aAAa,GACb,mBAAmB,CAAC;AAExB,qBAAa,mBAAoB,SAAQ,KAAK;aAE1B,IAAI,EAAE,uBAAuB;gBAA7B,IAAI,EAAE,uBAAuB,EAC7C,OAAO,EAAE,MAAM;CAKlB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,+DAA+D;IAC/D,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAOD;+EAC+E;AAC/E,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,KAAK,SAAa,EAClB,mBAAmB,GAAE,WAAW,CAAC,MAAM,CAAa,GACnD,gBAAgB,GAAG,IAAI,CA6BzB;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CA6CT;AAuED,gEAAgE;AAChE,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACjC,oBAAoB,CAyHtB"}

package/dist/lib/identities/assume.js

@@ -85,6 +85,7 @@ export function reclaimAbandonedLocalConflict(coordRoot, conflict) {
     let sessionId = conflict.instance_id;
     let ageSecs;
     const liveRow = readLiveCoordinationRow(coordRoot, conflict.instance_id);
+    let expectedGenerationId = liveRow?.v3_generation_id ?? null;
     if (liveRow) {
         adapter = adapterOf(liveRow.platform);
         sessionId = liveRow.session_id || conflict.instance_id;
@@ -99,8 +100,10 @@ export function reclaimAbandonedLocalConflict(coordRoot, conflict) {
             // It is required to join the exact producer state when recording the sweep.
             adapter = adapterOf(hb.platform);
             sessionId = hb.session_id || conflict.instance_id;
+            expectedGenerationId = hb.v3_generation_id ?? null;
         }
         catch {
+            expectedGenerationId = null;
             /* content unreadable — still reclaim the file */
         }
         try {
@@ -116,6 +119,7 @@ export function reclaimAbandonedLocalConflict(coordRoot, conflict) {
         owner: conflict.instance_id,
         nativeSessionId: sessionId,
         adapter,
+        expectedGenerationId,
         observation: "stale_heartbeat",
         ageMs: Math.max(0, (ageSecs ?? 0) * 1_000),
     });

package/dist/lib/zip/index.d.ts

@@ -0,0 +1,41 @@
+export interface ZipLimits {
+    archiveBytes: number;
+    entryBytes: number;
+    totalBytes: number;
+    entries: number;
+}
+export declare const DEFAULT_ZIP_LIMITS: Readonly<ZipLimits>;
+export interface ZipEntryInfo {
+    name: string;
+    size: number;
+    compressedSize: number;
+    directory: boolean;
+    crc32: number;
+}
+export type ZipSource = string | Uint8Array;
+export interface ReadOptions {
+    limits?: Partial<ZipLimits>;
+}
+export declare function listZip(source: ZipSource, options?: ReadOptions): ZipEntryInfo[];
+export declare function readZipEntries(source: ZipSource, keep?: (name: string) => boolean, options?: ReadOptions): Map<string, Uint8Array>;
+export declare function readZipEntry(source: ZipSource, name: string, options?: ReadOptions): Uint8Array | undefined;
+export declare function readZipText(source: ZipSource, name: string, options?: ReadOptions): string | undefined;
+/** Portable names exclude traversal, device names, streams and ambiguous aliases. */
+export declare function safeEntryPath(root: string, name: string): string;
+export interface ExtractOptions extends ReadOptions {
+    overwrite?: boolean;
+    filter?: (name: string) => boolean;
+}
+/** Preflight all selected names, collisions and existing filesystem paths before writing. */
+export declare function extractZip(source: ZipSource, dest: string, options?: ExtractOptions): string[];
+export interface CreateOptions extends ReadOptions {
+    base?: string;
+    level?: 0 | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9;
+    overwrite?: boolean;
+}
+export declare function buildZip(inputs: readonly string[], options?: CreateOptions): {
+    bytes: Uint8Array;
+    entries: string[];
+};
+export declare function createZip(archive: string, inputs: readonly string[], options?: CreateOptions): string[];
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/zip/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/zip/index.ts"],"names":[],"mappings":"AAoBA,MAAM,WAAW,SAAS;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,SAAS,CAKjD,CAAC;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,UAAU,CAAC;AAC5C,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;CAC7B;AA+JD,wBAAgB,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAE,WAAgB,GAAG,YAAY,EAAE,CAKpF;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,SAAS,EACjB,IAAI,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAoB,EAC5C,OAAO,GAAE,WAAgB,GACxB,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAoBzB;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,WAAgB,GACxB,UAAU,GAAG,SAAS,CAExB;AAED,wBAAgB,WAAW,CACzB,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,WAAgB,GACxB,MAAM,GAAG,SAAS,CAGpB;AAED,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAyBhE;AAsFD,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CACpC;AAED,6FAA6F;AAC7F,wBAAgB,UAAU,CACxB,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,cAAmB,GAC3B,MAAM,EAAE,CAsCV;AAED,MAAM,WAAW,aAAc,SAAQ,WAAW;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9C,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,QAAQ,CACtB,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,OAAO,GAAE,aAAkB,GAC1B;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CA8C1C;AAED,wBAAgB,SAAS,CACvB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,OAAO,GAAE,aAAkB,GAC1B,MAAM,EAAE,CAQV"}