nccgs 2.1.1 → 3.0.0-rc.2

package/.claude/nccgs/tools/verification-worker.mjs

@@ -1,71 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import { spawn } from "node:child_process";
-import { atomicJson, contained, json } from "./policy.mjs";
-import { snapshot, taskPath } from "./gates.mjs";
-import { acquireLock, pidState, treeState } from "./process-lock.mjs";
-import { readJob, jobDirectory, finishJob } from "./verification-jobs.mjs";
-import { startCommand } from "./command-process.mjs";
-
-const [mode, project, id] = process.argv.slice(2);
-const directory = jobDirectory(project, id);
-if (mode === "launch") {
-  const diagnostics = fs.openSync(path.join(directory, "worker.log"), "a");
-  const child = spawn(process.execPath, [fileURLToPath(import.meta.url), "execute", project, id],
-    { cwd: project, detached: true, stdio: ["ignore", diagnostics, diagnostics], windowsHide: true });
-  child.once("error", error => { fs.closeSync(diagnostics); console.error(error.message); process.exitCode = 1; });
-  child.once("spawn", () => { fs.closeSync(diagnostics); atomicJson(path.join(directory, "launch.json"), { pid: child.pid, at: new Date().toISOString() }); child.unref(); });
-} else if (mode === "execute") {
-  const job = readJob(project, id), lock = acquireLock(path.join(directory, "owner.lock"), { jobId: id, taskId: job.taskId });
-  let child, timer, logFd;
-  const result = { startedAt: new Date().toISOString(), exitCode: null, signal: null, error: null, timedOut: false };
-  try {
-    if (job.supervisorDeadline !== undefined && Date.now() >= job.supervisorDeadline) {
-      result.timedOut = true;
-      throw new Error("Supervised run deadline reached before verifier started");
-    }
-    if (snapshot(project, json(taskPath(project, job.taskId))).sha256 !== job.snapshot) throw new Error("Source changed before verifier started");
-    logFd = fs.openSync(contained(project, `.nccgs/evidence/check-${id}.log`), "wx");
-    let logged = 0;
-    const log = data => { const remaining = 16 * 1024 * 1024 - logged; if (remaining > 0) { const chunk = Buffer.from(data).subarray(0, remaining); fs.writeSync(logFd, chunk); logged += chunk.length; } };
-    lock.update({ phase: "spawning" });
-    const managed = startCommand({ executable: job.executable, args: job.arguments, cwd: project, stateDirectory: directory, id, stdio: ["ignore", "pipe", "pipe"] });
-    child = managed.child;
-    const terminate = reason => {
-      result.error = reason;
-      if (child.pid && pidState(child.pid) === "alive") {
-        // This is the OS Job Object host: closing its handle kills all members.
-        // The independent group probe below must still confirm zero descendants.
-        if (process.platform === "win32") child.kill("SIGKILL");
-        else { try { process.kill(-child.pid, "SIGKILL"); } catch { /* final state checked below */ } }
-      }
-    };
-    process.once("SIGINT", () => terminate("Verification interrupted by SIGINT"));
-    process.once("SIGTERM", () => terminate("Verification interrupted by SIGTERM"));
-    child.stdout.on("data", log); child.stderr.on("data", log);
-    child.once("spawn", () => lock.update({ phase: "running", child: managed.identity() }));
-    const remainingMs = job.supervisorDeadline === undefined ? job.timeoutMs : Math.max(1, Math.min(job.timeoutMs, job.supervisorDeadline - Date.now()));
-    timer = setTimeout(() => { result.timedOut = true; terminate("ETIMEDOUT: Verification command timed out"); }, remainingMs);
-    await new Promise(resolve => {
-      child.once("error", error => { result.error = error.message; resolve(); });
-      child.once("close", (code, signal) => { result.exitCode = code; result.signal = signal; resolve(); });
-    });
-    clearTimeout(timer);
-    if (logged === 16 * 1024 * 1024) { fs.writeSync(logFd, "\n[NCCGS log truncated at 16 MiB]\n"); result.error ||= "Verifier output exceeded the bounded log size"; }
-    if (child.pid && treeState(lock.record.child) !== "dead") throw new Error("Command tree not proven stopped; preserve owner lock for inspection");
-    lock.update({ phase: "finished", child: null });
-    fs.closeSync(logFd); logFd = undefined;
-    finishJob(project, job, result);
-  } catch (error) {
-    result.error = error.message;
-    if (logFd !== undefined) { fs.closeSync(logFd); logFd = undefined; }
-    // A surviving command must keep its slot; never publish completion over it.
-    if (!lock.record.child || treeState(lock.record.child) === "dead") {
-      lock.update({ phase: "finished", child: null }); finishJob(project, job, result);
-    } else fs.writeFileSync(path.join(directory, "worker-error.txt"), error.stack || error.message);
-  } finally {
-    clearTimeout(timer);
-    if (lock.record.phase === "finished" || (!child && lock.record.phase !== "spawning")) lock.release();
-  }
-} else throw new Error("Unknown verification worker mode");

package/.claude/nccgs/tools/windows-compiler-server.cs

@@ -1,163 +0,0 @@
-using System;
-using System.Collections.Generic;
-using System.IO;
-using System.IO.Pipes;
-using System.Runtime.InteropServices;
-using System.Security.Cryptography;
-using System.Security.Principal;
-using System.Text;
-using System.Text.RegularExpressions;
-
-// Optional, fail-closed cleanup for the qualified Unity/Roslyn binary pair.
-// Never kill or exempt a descendant. The caller still waits for an empty Job.
-// Shutdown frame matches BuildRequest.CreateShutdown().WriteAsync() in Roslyn
-// 41a5af9d2c459a06c0795bf21a1c046200f375bf (4.3.1). Unknown builds are untouched.
-internal sealed class NccgsUnityCompilerShutdown {
-  const string CompilerHash = "a671cfd0e1ca5621845cc62c62e1de06233a9c48de76151bc51d36758cd1ca5f";
-  const string HostHash = "d2607dbc6c95c252baaba299b659f156b388c6130ac846f79eb4c768f91a019f";
-  const string Commit = "41a5af9d2c459a06c0795bf21a1c046200f375bf";
-  readonly HashSet<int> attempted = new HashSet<int>();
-  DateTime nextScan = DateTime.MinValue;
-  sealed class Candidate : IDisposable {
-    internal int Pid; internal IntPtr Handle; internal string Pipe;
-    public void Dispose() { if(Handle!=IntPtr.Zero) CloseHandle(Handle); Handle=IntPtr.Zero; }
-  }
-  [DllImport("kernel32.dll", SetLastError=true)] static extern bool QueryInformationJobObject(IntPtr job,int kind,IntPtr data,int size,IntPtr returned);
-  [DllImport("kernel32.dll", SetLastError=true)] static extern IntPtr OpenProcess(uint access,bool inherit,int pid);
-  [DllImport("kernel32.dll", SetLastError=true)] static extern bool IsProcessInJob(IntPtr process,IntPtr job,out bool member);
-  [DllImport("kernel32.dll", CharSet=CharSet.Unicode, SetLastError=true)] static extern bool QueryFullProcessImageName(IntPtr process,int flags,StringBuilder name,ref int size);
-  [DllImport("kernel32.dll", SetLastError=true)] static extern bool GetNamedPipeServerProcessId(IntPtr pipe,out uint pid);
-  [DllImport("kernel32.dll")] static extern bool CloseHandle(IntPtr handle);
-  [DllImport("kernel32.dll")] static extern uint WaitForSingleObject(IntPtr handle,uint timeout);
-  [DllImport("kernel32.dll")] static extern IntPtr LocalFree(IntPtr memory);
-  [DllImport("ntdll.dll")] static extern int NtQueryInformationProcess(IntPtr process,int kind,IntPtr data,int size,out int needed);
-  [DllImport("shell32.dll", CharSet=CharSet.Unicode, SetLastError=true)] static extern IntPtr CommandLineToArgvW(string command,out int count);
-
-  static bool OwnedAlive(IntPtr job,IntPtr process) {
-    bool member;
-    return WaitForSingleObject(process,0)==258 && IsProcessInJob(process,job,out member) && member;
-  }
-  static int[] Members(IntPtr job) {
-    for(int size=4096;size<=1048576;size*=2) {
-      IntPtr data=Marshal.AllocHGlobal(size);
-      try {
-        if(!QueryInformationJobObject(job,3,data,size,IntPtr.Zero)) {
-          if(Marshal.GetLastWin32Error()==234) continue;
-          return null;
-        }
-        int count=Marshal.ReadInt32(data,4);
-        if(count<0 || count>(size-8)/IntPtr.Size) return null;
-        int[] result=new int[count];
-        for(int i=0;i<count;i++) result[i]=checked((int)Marshal.ReadIntPtr(data,8+i*IntPtr.Size).ToInt64());
-        return result;
-      } finally { Marshal.FreeHGlobal(data); }
-    }
-    return null;
-  }
-  static string Image(IntPtr process) {
-    int length=32768; var text=new StringBuilder(length);
-    return QueryFullProcessImageName(process,0,text,ref length) ? text.ToString() : null;
-  }
-  static string Command(IntPtr process) {
-    int needed; NtQueryInformationProcess(process,60,IntPtr.Zero,0,out needed);
-    if(needed<16 || needed>131072) return null;
-    IntPtr data=Marshal.AllocHGlobal(needed);
-    try {
-      int size; if(NtQueryInformationProcess(process,60,data,needed,out size)!=0) return null;
-      int bytes=(ushort)Marshal.ReadInt16(data);
-      IntPtr text=Marshal.ReadIntPtr(data,IntPtr.Size==8?8:4);
-      long offset=text.ToInt64()-data.ToInt64();
-      if(bytes%2!=0 || offset<0 || offset+bytes>needed) return null;
-      return Marshal.PtrToStringUni(text,bytes/2);
-    } finally { Marshal.FreeHGlobal(data); }
-  }
-  static string[] Arguments(string command) {
-    if(String.IsNullOrEmpty(command)) return null;
-    int count; IntPtr data=CommandLineToArgvW(command,out count);
-    if(data==IntPtr.Zero) return null;
-    try {
-      var result=new string[count];
-      for(int i=0;i<count;i++) result[i]=Marshal.PtrToStringUni(Marshal.ReadIntPtr(data,i*IntPtr.Size));
-      return result;
-    } finally { LocalFree(data); }
-  }
-  static string Digest(string file) {
-    using(var stream=File.OpenRead(file)) using(var hash=SHA256.Create())
-      return BitConverter.ToString(hash.ComputeHash(stream)).Replace("-","").ToLowerInvariant();
-  }
-  internal static string QualifiedPipe(string image,string[] args) {
-    if(image==null || args==null || args.Length!=4 || args[1]!="exec" || !Path.IsPathRooted(args[2])) return null;
-    string compiler=Path.GetFullPath(args[2]);
-    string suffix=Path.Combine("Editor","Data","DotNetSdkRoslyn","VBCSCompiler.dll");
-    if(!compiler.EndsWith(Path.DirectorySeparatorChar+suffix,StringComparison.OrdinalIgnoreCase)) return null;
-    string data=Path.GetDirectoryName(Path.GetDirectoryName(compiler));
-    if(!String.Equals(Path.GetFullPath(image),Path.Combine(data,"NetCoreRuntime","dotnet.exe"),StringComparison.OrdinalIgnoreCase)) return null;
-    if(!args[3].StartsWith("-pipename:",StringComparison.Ordinal)) return null;
-    string pipe=args[3].Substring(10);
-    if(!Regex.IsMatch(pipe,@"\A[A-Za-z0-9_.-]{1,160}\z")) return null;
-    if(Digest(compiler)!=CompilerHash || Digest(image)!=HostHash) return null;
-    return pipe;
-  }
-  internal static byte[] ShutdownFrame() {
-    using(var body=new MemoryStream()) {
-      using(var writer=new BinaryWriter(body,Encoding.Unicode,true)) {
-        writer.Write(Guid.Empty.ToByteArray()); writer.Write((uint)1146299681);
-        writer.Write(Commit); writer.Write(1); writer.Write(1360294437);
-        writer.Write(0); writer.Write(0); writer.Flush();
-      }
-      using(var framed=new MemoryStream()) using(var writer=new BinaryWriter(framed)) {
-        writer.Write(checked((int)body.Length)); writer.Write(body.ToArray()); return framed.ToArray();
-      }
-    }
-  }
-  static bool ReadExact(Stream stream,byte[] bytes) {
-    int offset=0;
-    while(offset<bytes.Length) {
-      var read=stream.ReadAsync(bytes,offset,bytes.Length-offset);
-      if(!read.Wait(1000) || read.Result==0) return false;
-      offset+=read.Result;
-    }
-    return true;
-  }
-  // Peer PID is verified on this exact open pipe before any bytes are written.
-  // A same-name pipe belonging to a foreign server receives no shutdown request.
-  internal static bool Request(IntPtr job,IntPtr process,int pid,string pipeName) {
-    using(var pipe=new NamedPipeClientStream(".",pipeName,PipeDirection.InOut,PipeOptions.Asynchronous,TokenImpersonationLevel.Identification)) {
-      pipe.Connect(250);
-      uint serverPid;
-      if(!GetNamedPipeServerProcessId(pipe.SafePipeHandle.DangerousGetHandle(),out serverPid) || serverPid!=(uint)pid || !OwnedAlive(job,process)) return false;
-      byte[] frame=ShutdownFrame();
-      if(!pipe.WriteAsync(frame,0,frame.Length).Wait(1000)) return false;
-      byte[] length=new byte[4]; if(!ReadExact(pipe,length) || BitConverter.ToInt32(length,0)!=8) return false;
-      byte[] response=new byte[8]; if(!ReadExact(pipe,response)) return false;
-      return BitConverter.ToInt32(response,0)==3 && BitConverter.ToInt32(response,4)==pid;
-    }
-  }
-  internal void TryRequest(IntPtr job) {
-    if(DateTime.UtcNow<nextScan) return;
-    nextScan=DateTime.UtcNow.AddMilliseconds(500);
-    var candidates=new List<Candidate>();
-    try {
-      int[] members=Members(job); if(members==null || members.Length==0) return;
-      foreach(int pid in members) {
-        IntPtr process=OpenProcess(0x00101000,false,pid);
-        if(process==IntPtr.Zero) return; // uncertain membership/liveness: leave ownership alone
-        var candidate=new Candidate { Pid=pid,Handle=process };
-        candidates.Add(candidate);
-        if(!OwnedAlive(job,process)) return;
-        string image=Image(process);
-        if(String.Equals(image,Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.System),"conhost.exe"),StringComparison.OrdinalIgnoreCase)) continue;
-        candidate.Pipe=QualifiedPipe(image,Arguments(Command(process)));
-        // Do not shut down even a known compiler while another real worker remains.
-        if(candidate.Pipe==null) return;
-      }
-      foreach(var c in candidates) {
-        if(c.Pipe==null || !attempted.Add(c.Pid)) continue;
-        bool acknowledged=false;
-        try { acknowledged=Request(job,c.Handle,c.Pid,c.Pipe); } catch { /* keep original ownership and timeout */ }
-        Console.Error.WriteLine("[NCCGS] Owned Unity compiler {0}: graceful shutdown {1}; waiting for all descendants.",c.Pid,acknowledged?"acknowledged":"unconfirmed");
-      }
-    } catch { /* Unknown runtime/process data never authorizes cleanup or completion. */ }
-    finally { foreach(var c in candidates) c.Dispose(); }
-  }
-}

package/.claude/nccgs/tools/windows-job.cs

@@ -1,103 +0,0 @@
-using System;
-using System.Text;
-using System.Runtime.InteropServices;
-public static class NccgsWindowsJob {
-  [StructLayout(LayoutKind.Sequential)] struct Startup {
-    public int cb; public IntPtr reserved, desktop, title;
-    public int x,y,xSize,ySize,xCount,yCount,fill,flags; public short show,reserved2;
-    public IntPtr reservedPtr,input,output,error;
-  }
-  [StructLayout(LayoutKind.Sequential)] struct StartupEx { public Startup startup; public IntPtr attributes; }
-  [StructLayout(LayoutKind.Sequential)] struct Proc { public IntPtr process,thread; public int pid,tid; }
-  [StructLayout(LayoutKind.Sequential)] struct BasicLimit {
-    public long processTime,jobTime; public uint flags; public UIntPtr min,max; public uint active; public UIntPtr affinity; public uint priority,scheduling;
-  }
-  [StructLayout(LayoutKind.Sequential)] struct Io { public ulong a,b,c,d,e,f; }
-  [StructLayout(LayoutKind.Sequential)] struct Limits { public BasicLimit basic; public Io io; public UIntPtr processMemory,jobMemory,peakProcess,peakJob; }
-  [StructLayout(LayoutKind.Sequential)] struct Accounting { public long user,kernel,periodUser,periodKernel; public uint faults,total,active,terminated; }
-  [DllImport("kernel32.dll", CharSet=CharSet.Unicode, SetLastError=true)] static extern IntPtr CreateJobObject(IntPtr attributes,string name);
-  [DllImport("kernel32.dll", CharSet=CharSet.Unicode, SetLastError=true)] static extern IntPtr OpenJobObject(uint access,bool inherit,string name);
-  [DllImport("kernel32.dll", SetLastError=true)] static extern bool SetInformationJobObject(IntPtr job,int kind,ref Limits data,int size);
-  [DllImport("kernel32.dll", SetLastError=true)] static extern bool QueryInformationJobObject(IntPtr job,int kind,out Accounting data,int size,IntPtr returned);
-  [DllImport("kernel32.dll", SetLastError=true)] static extern bool InitializeProcThreadAttributeList(IntPtr list,int count,int flags,ref IntPtr size);
-  [DllImport("kernel32.dll", SetLastError=true)] static extern bool UpdateProcThreadAttribute(IntPtr list,uint flags,IntPtr attribute,IntPtr value,IntPtr size,IntPtr previous,IntPtr returned);
-  [DllImport("kernel32.dll")] static extern void DeleteProcThreadAttributeList(IntPtr list);
-  [DllImport("kernel32.dll", CharSet=CharSet.Unicode, SetLastError=true)] static extern bool CreateProcess(string app,StringBuilder command,IntPtr pa,IntPtr ta,bool inherit,uint flags,IntPtr env,string cwd,ref StartupEx startup,out Proc proc);
-  [DllImport("kernel32.dll")] static extern IntPtr GetStdHandle(int id);
-  [DllImport("kernel32.dll")] static extern bool CloseHandle(IntPtr handle);
-  [DllImport("kernel32.dll")] static extern bool GetExitCodeProcess(IntPtr process,out uint code);
-  [DllImport("kernel32.dll")] static extern uint WaitForSingleObject(IntPtr handle,uint timeout);
-  static Exception Error(string operation) { return new System.ComponentModel.Win32Exception(Marshal.GetLastWin32Error(),operation); }
-  public static int Active(string name) {
-    IntPtr job=OpenJobObject(4,false,name);
-    if(job==IntPtr.Zero) return Marshal.GetLastWin32Error()==2 ? 0 : -1;
-    try { Accounting data; return QueryInformationJobObject(job,1,out data,Marshal.SizeOf(typeof(Accounting)),IntPtr.Zero) ? (int)data.active : -1; }
-    finally { CloseHandle(job); }
-  }
-  static string Quote(string arg) {
-    StringBuilder s=new StringBuilder("\""); int slashes=0;
-    foreach(char c in arg) {
-      if(c=='\\') { slashes++; continue; }
-      if(c=='\"') { s.Append('\\',slashes*2+1); s.Append(c); slashes=0; continue; }
-      s.Append('\\',slashes); slashes=0; s.Append(c);
-    }
-    s.Append('\\',slashes*2); return s.Append('"').ToString();
-  }
-  public static int Run(string executable,string[] args,string cwd,string name) {
-    if(!System.IO.Path.IsPathRooted(executable)) {
-      string found=null;
-      foreach(string dir in (cwd+";"+Environment.GetEnvironmentVariable("PATH")).Split(';')) {
-        foreach(string extension in new string[]{"",".exe",".com"}) {
-          string candidate=System.IO.Path.Combine(dir,executable+extension);
-          if(System.IO.File.Exists(candidate)) { found=candidate; break; }
-        }
-        if(found!=null) break;
-      }
-      if(found==null) throw new System.IO.FileNotFoundException("Executable not found",executable);
-      executable=found;
-    }
-    IntPtr job=CreateJobObject(IntPtr.Zero,name), attributes=IntPtr.Zero, value=IntPtr.Zero;
-    Proc proc=new Proc(); bool initialized=false;
-    if(job==IntPtr.Zero) throw Error("CreateJobObject");
-    try {
-      Limits limits=new Limits(); limits.basic.flags=0x2000;
-      if(!SetInformationJobObject(job,9,ref limits,Marshal.SizeOf(typeof(Limits)))) throw Error("Kill-on-close policy");
-      IntPtr size=IntPtr.Zero; InitializeProcThreadAttributeList(IntPtr.Zero,1,0,ref size);
-      attributes=Marshal.AllocHGlobal(size);
-      if(!InitializeProcThreadAttributeList(attributes,1,0,ref size)) throw Error("Initialize attributes"); initialized=true;
-      value=Marshal.AllocHGlobal(IntPtr.Size); Marshal.WriteIntPtr(value,job);
-      if(!UpdateProcThreadAttribute(attributes,0,new IntPtr(0x0002000D),value,new IntPtr(IntPtr.Size),IntPtr.Zero,IntPtr.Zero)) throw Error("Atomic Job Object membership");
-      StartupEx start=new StartupEx(); start.startup.cb=Marshal.SizeOf(typeof(StartupEx)); start.attributes=attributes;
-      start.startup.flags=0x100; start.startup.input=GetStdHandle(-10); start.startup.output=GetStdHandle(-11); start.startup.error=GetStdHandle(-12);
-      StringBuilder command=new StringBuilder(Quote(executable)); foreach(string arg in args) command.Append(" ").Append(Quote(arg));
-      if(!CreateProcess(executable,command,IntPtr.Zero,IntPtr.Zero,true,0x00080000|0x08000000,IntPtr.Zero,cwd,ref start,out proc)) throw Error("Create process in Job Object");
-      WaitForSingleObject(proc.process,0xffffffff); uint code; if(!GetExitCodeProcess(proc.process,out code)) throw Error("Process result");
-      // A root exit is not completion: retain ownership until every descendant exits.
-      var compilerShutdown=new NccgsUnityCompilerShutdown();
-      for(;;) {
-        Accounting data;
-        if(!QueryInformationJobObject(job,1,out data,Marshal.SizeOf(typeof(Accounting)),IntPtr.Zero)) throw Error("Descendant state");
-        if(data.active==0) break;
-        compilerShutdown.TryRequest(job);
-        System.Threading.Thread.Sleep(50);
-      }
-      return unchecked((int)code);
-    } finally {
-      if(proc.thread!=IntPtr.Zero) CloseHandle(proc.thread); if(proc.process!=IntPtr.Zero) CloseHandle(proc.process);
-      if(initialized) DeleteProcThreadAttributeList(attributes); if(attributes!=IntPtr.Zero) Marshal.FreeHGlobal(attributes); if(value!=IntPtr.Zero) Marshal.FreeHGlobal(value);
-      CloseHandle(job);
-    }
-  }
-  public static int Main(string[] args) {
-    try {
-      if(args.Length==2 && args[0]=="probe") { Console.WriteLine(Active(args[1])); return 0; }
-      if(args.Length!=2 || args[0]!="run") throw new ArgumentException("run SPEC or probe NAME required");
-      var serializer=new System.Web.Script.Serialization.JavaScriptSerializer();
-      var spec=serializer.Deserialize<System.Collections.Generic.Dictionary<string,object>>(System.IO.File.ReadAllText(args[1]));
-      var values=(System.Collections.ArrayList)spec["arguments"];
-      string[] forwarded=new string[values.Count]; for(int i=0;i<values.Count;i++) forwarded[i]=(string)values[i];
-      return Run((string)spec["executable"],forwarded,(string)spec["cwd"],(string)spec["groupName"]);
-    } catch(Exception error) { Console.Error.WriteLine(error.ToString()); return 125; }
-  }
-
-}