mtech-ai-local-runner 0.1.87 → 0.1.89

package/dist/src/publication/candidate-limits.js

@@ -60,7 +60,8 @@ export function changedBytes(before, after) {
     return reject('CHANGE_MEASUREMENT_REJECTED');
 }
 export function candidatePayloadBytes(files, report) { return Buffer.byteLength(JSON.stringify({ files, ...(report === undefined ? {} : { validation_report: report }) }), 'utf8'); }
-export function measureSplitDelta(diff, limits, report) {
+/** withModes: the frozen scope lists file modes (design 2026-11-02), so each file carries the mode it keeps; delta_modes checks it. */
+export function measureSplitDelta(diff, limits, report, withModes = false) {
     const delta = JSON.parse(diff);
     if (delta?.format !== 'local-candidate-binary-diff-v1' || !Array.isArray(delta.changes) || !delta.changes.length || delta.changes.length > limits.max_changed_files)
         reject('FILE_COUNT_REJECTED');
@@ -78,7 +79,7 @@ export function measureSplitDelta(diff, limits, report) {
         changes += changedBytes(before, after);
         if (changes > limits.max_change_bytes)
             reject('CHANGE_LIMIT_REJECTED');
-        return { path: c.path, status: c.status, content_base64: c.status === 'deleted' ? null : after.toString('base64'), content_sha256: c.status === 'deleted' ? null : createHash('sha256').update(after).digest('hex') };
+        return { path: c.path, status: c.status, content_base64: c.status === 'deleted' ? null : after.toString('base64'), content_sha256: c.status === 'deleted' ? null : createHash('sha256').update(after).digest('hex'), ...(withModes ? { mode: c.status === 'deleted' ? null : c.after_mode === 0o100755 ? '100755' : '100644' } : {}) };
     });
     if (!changes)
         reject('CHANGE_MEASUREMENT_REJECTED');

package/dist/src/publication/git-snapshot.js

@@ -198,7 +198,8 @@ export class GitSnapshotHost {
                 if (before.length > o.maxFileBytes)
                     throw denied();
             }
-            total += (before?.length ?? 0) + (current?.bytes.length ?? 0);
+            // The cap bounds the tree, as matches() and batchObjects() do: each path counts once, at its larger version.
+            total += Math.max(before?.length ?? 0, current?.bytes.length ?? 0);
             if (total > o.maxTotalBytes)
                 throw denied();
             if (current)

package/dist/src/publication/server-ci-host.js

@@ -13,6 +13,8 @@ import { FilePublicationJournal } from './journal.js';
 import { GitSnapshotHost, SNAPSHOT_TREE_MAX_BYTES } from './git-snapshot.js';
 import { PublicationOutcomeUnknownError } from './publisher.js';
 import { isLocalFixAdapter } from './local-fix-adapters.js';
+/** Design 2026-11-02: a frozen scope listing exactly these lets an unchanged 100755 regular file keep its mode. */
+export const FILE_MODES = ['100644', '100755'];
 const denied = () => Error('LOCAL_FIX_SERVER_CI_REJECTED');
 /** Work Decision b3d7eb22: a failed Gateway publication call is repeated for at most this long; the coordinator heartbeat keeps the lease. */
 export const PUBLICATION_RETRY_WINDOW_MS = 900_000;
@@ -83,6 +85,10 @@ export function createServerCiLocalFixHost(options) {
             if (!lifecycle.isCurrent() || !isLocalFixAdapter(pkg.runtime_adapter) || !scope || scope.verification_mode !== mode || scope.ci_profile_fingerprint !== registration.ci_profile_fingerprint || protocolHash(scope.ci_profile) !== protocolHash(registration.ci_profile) || !Array.isArray(scope.required_commands) || scope.required_commands.length || !scope.registered_tests || typeof scope.registered_tests !== 'object' || Object.keys(scope.registered_tests).length || !Array.isArray(allowed) || !allowed.length || allowed.some(p => typeof p !== 'string' || !(safePath(p) || p.endsWith('/**') && safePath(p.slice(0, -3)))) || protocolHash(allowed) !== protocolHash(pkg.allowed_paths) || repo.key !== registration.project || job.gatewayTaskPackageFingerprint !== protocolHash(pkg) || Object.entries(registration.receipt).some(([k, v]) => scope[k] !== v) || root !== options.privateRoot || !st.isDirectory() || st.isSymbolicLink() || (st.mode & 0o077) !== 0 || (process.getuid && st.uid !== process.getuid()) || root === input.checkoutPath || root.startsWith(input.checkoutPath + path.sep))
                 throw denied();
             const limits = candidateLimits(rawLimits, mode === 'gateway_publish_v1');
+            // Without file_modes (an older Gateway or contract) only 100644 is published and no file carries a mode; any other list is refused.
+            const fileModes = scope.file_modes !== undefined;
+            if (fileModes && protocolHash(scope.file_modes) !== protocolHash(FILE_MODES))
+                throw denied();
             const fence = { jobId: job.id, generation: job.generation, leaseToken: job.leaseToken, launchGrant: job.launchGrant, bindingId: input.bindingId };
             const binding = bindingProof((await options.gateway.localPublicationContext(fence)).context);
             if (binding.runner_id !== options.runnerId || binding.binding_id !== input.bindingId || binding.job_id !== job.id || binding.generation !== job.generation || binding.work_loop_id !== job.workLoopId || binding.repository_key !== repo.key || binding.base_commit_sha !== repo.base_commit_sha || binding.working_branch !== repo.working_branch || binding.working_branch !== `ai-work/local/${binding.attempt_id}` || binding.attempt_id !== scope.attempt_id || binding.contract_fingerprint !== job.gatewayContractFingerprint || binding.task_package_fingerprint !== job.gatewayTaskPackageFingerprint || binding.launch_fingerprint !== job.launchFingerprint)
@@ -131,7 +137,7 @@ export function createServerCiLocalFixHost(options) {
                         let split;
                         if (limits.version === 2) {
                             try {
-                                split = measureSplitDelta(observed.diff, limits, report);
+                                split = measureSplitDelta(observed.diff, limits, report, fileModes);
                             }
                             catch (error) {
                                 const code = trustedCandidateLimitCode(error);
@@ -143,7 +149,10 @@ export function createServerCiLocalFixHost(options) {
                         if (!observed.changed_files.length || observed.changed_files.length > limits.max_changed_files)
                             throw publicationError(phase, 'LOCAL_FIX_FILE_COUNT_REJECTED');
                         // The v1 wire represents ordinary text bytes only. Refuse any change whose
-                        // executable/type metadata would be lost by the provider's regular-file write.
+                        // executable/type metadata would be lost by the provider's regular-file write:
+                        // a mode change, an executable added file, and every type but a regular file.
+                        // Under file_modes an unchanged 100755 file keeps its mode; the Gateway checks
+                        // that mode at the frozen base and reads it back before any PR.
                         phase = 'delta_format';
                         let delta;
                         try {
@@ -155,14 +164,16 @@ export function createServerCiLocalFixHost(options) {
                         if (!delta || delta.format !== 'local-candidate-binary-diff-v1' || !Array.isArray(delta.changes) || delta.changes.length !== observed.changed_files.length)
                             throw denied();
                         phase = 'delta_modes';
-                        const represented = [];
+                        const represented = [], modes = new Map();
+                        const kept = (m) => m === 0o100644 || fileModes && m === 0o100755;
                         for (const value of delta.changes) {
                             if (!value || typeof value !== 'object' || Array.isArray(value))
                                 throw denied();
                             const c = value;
-                            if (typeof c.path !== 'string' || !['added', 'modified', 'deleted'].includes(String(c.status)) || c.before_mode !== (c.status === 'added' ? null : 0o100644) || c.after_mode !== (c.status === 'deleted' ? null : 0o100644))
+                            if (typeof c.path !== 'string' || !['added', 'modified', 'deleted'].includes(String(c.status)) || (c.status === 'added' ? c.before_mode !== null || c.after_mode !== 0o100644 : c.status === 'deleted' ? !kept(c.before_mode) || c.after_mode !== null : !kept(c.before_mode) || c.after_mode !== c.before_mode))
                                 throw denied();
                             represented.push({ path: c.path, status: c.status });
+                            modes.set(c.path, c.status === 'deleted' ? null : c.after_mode === 0o100755 ? '100755' : '100644');
                         }
                         if (protocolHash(represented) !== protocolHash(observed.changed_files))
                             throw denied();
@@ -173,8 +184,9 @@ export function createServerCiLocalFixHost(options) {
                             phase = 'delta_scope';
                             if (!safePath(f.path) || testInfrastructure(f.path) || !allowed.some(s => matches(f.path, s)))
                                 throw denied();
+                            const modeField = fileModes ? { mode: modes.get(f.path) } : {};
                             if (f.status === 'deleted') {
-                                files.push({ ...f, content_base64: null, content_sha256: null });
+                                files.push({ ...f, content_base64: null, content_sha256: null, ...modeField });
                                 continue;
                             }
                             phase = 'candidate_files';
@@ -190,12 +202,14 @@ export function createServerCiLocalFixHost(options) {
                                 for (const s of [after, named])
                                     if (!s.isFile() || s.nlink !== 1n || s.dev !== before.dev || s.ino !== before.ino || s.size !== before.size || s.mtimeNs !== before.mtimeNs || s.ctimeNs !== before.ctimeNs || s.mode !== before.mode)
                                         throw denied();
+                                if (fileModes && ((before.mode & 73n) !== 0n) !== (modeField.mode === '100755'))
+                                    throw denied();
                                 bytes += content.length;
                                 if (limits.version !== 2 && bytes > limits.max_diff_bytes)
                                     throw publicationError(phase, 'LOCAL_FIX_DIFF_LIMIT_REJECTED');
                                 if (content.includes(0) || !Buffer.from(content.toString('utf8'), 'utf8').equals(content))
                                     throw publicationError(phase, 'LOCAL_FIX_FILE_ENCODING_REJECTED');
-                                files.push({ ...f, content_base64: content.toString('base64'), content_sha256: createHash('sha256').update(content).digest('hex') });
+                                files.push({ ...f, content_base64: content.toString('base64'), content_sha256: createHash('sha256').update(content).digest('hex'), ...modeField });
                             }
                             finally {
                                 await fd.close();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mtech-ai-local-runner",
-  "version": "0.1.87",
+  "version": "0.1.89",
   "private": false,
   "license": "UNLICENSED",
   "bin": {