nterminal 1.3.4 → 1.3.6

package/dist/server/hooks/helperJournal.js

@@ -0,0 +1,74 @@
+import { createHash } from 'node:crypto';
+import { HookControlError, replace, sameSnapshot, snapshot, syncSnapshot } from './hookFiles.js';
+function hash(value) { return value === null ? null : createHash('sha256').update(value.text).digest('hex'); }
+function validHash(value) { return value === null || (typeof value === 'string' && /^[a-f0-9]{64}$/.test(value)); }
+/** All methods require the runtime installation lock, including recovery. */
+export class HelperJournal {
+    helperPath;
+    recordPath;
+    constructor(helperPath, recordPath) {
+        this.helperPath = helperPath;
+        this.recordPath = recordPath;
+    }
+    parse(saved) {
+        if (!saved)
+            return null;
+        let value;
+        try {
+            value = JSON.parse(saved.text);
+        }
+        catch {
+            throw new HookControlError('manifest_malformed');
+        }
+        if (!value || typeof value !== 'object' || Array.isArray(value) || value.helperPath !== this.helperPath
+            || !(value.version === 1 && typeof value.sha256 === 'string' && validHash(value.sha256)
+                || value.version === 2 && (value.phase === 'committed' && validHash(value.sha256)
+                    || value.phase === 'prepared' && validHash(value.oldSha256) && validHash(value.newSha256)))) {
+            throw new HookControlError('manifest_malformed');
+        }
+        return value;
+    }
+    committed(sha256) {
+        return JSON.stringify({ version: 2, helperPath: this.helperPath, phase: 'committed', sha256 }, null, 2) + '\n';
+    }
+    async resolve() {
+        let saved = await snapshot(this.recordPath);
+        const owner = this.parse(saved);
+        const helper = await snapshot(this.helperPath);
+        if (!owner)
+            return { helper, record: saved, owned: false };
+        const actual = hash(helper);
+        if (owner.version === 2 && owner.phase === 'prepared') {
+            if (actual !== owner.oldSha256 && actual !== owner.newSha256)
+                throw new HookControlError('helper_modified');
+            // Finish the helper durability barrier even if the previous writer exited
+            // between rename/unlink and directory fsync. Recovery never needs H2 bytes.
+            await syncSnapshot(this.helperPath, helper);
+            saved = await replace(this.recordPath, saved, this.committed(actual), { durable: true });
+        }
+        else if (actual !== owner.sha256) {
+            throw new HookControlError(helper ? 'helper_modified' : 'helper_missing');
+        }
+        return { helper, record: saved, owned: true };
+    }
+    async transition(before, text) {
+        if (!before.owned && before.helper && before.helper.text !== text)
+            throw new HookControlError('helper_conflict');
+        if (before.owned && (before.helper?.text ?? null) === text) {
+            await syncSnapshot(this.helperPath, before.helper);
+            await syncSnapshot(this.recordPath, before.record);
+            // The helper may change while the ownership record's durability barrier runs.
+            if (!sameSnapshot(await snapshot(this.helperPath), before.helper))
+                throw new HookControlError('config_changed');
+            return before;
+        }
+        const newSha256 = text === null ? null : createHash('sha256').update(text).digest('hex');
+        const prepared = JSON.stringify({ version: 2, helperPath: this.helperPath, phase: 'prepared',
+            oldSha256: hash(before.helper), newSha256 }, null, 2) + '\n';
+        const pending = await replace(this.recordPath, before.record, prepared, { durable: true });
+        const helper = await replace(this.helperPath, before.helper, text, { durable: true });
+        const record = await replace(this.recordPath, pending, this.committed(newSha256), { durable: true });
+        return { helper, record, owned: true };
+    }
+}
+//# sourceMappingURL=helperJournal.js.map

package/dist/server/hooks/helperJournal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helperJournal.js","sourceRoot":"","sources":["../../../src/server/hooks/helperJournal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAqB,MAAM,gBAAgB,CAAC;AAOpH,SAAS,IAAI,CAAC,KAAmB,IAAU,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClI,SAAS,SAAS,CAAC,KAAc,IAAmB,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3I,6EAA6E;AAC7E,MAAM,OAAO,aAAa;IACH;IAA6B;IAAlD,YAAqB,UAAkB,EAAW,UAAkB;QAA/C,eAAU,GAAV,UAAU,CAAQ;QAAW,eAAU,GAAV,UAAU,CAAQ;IAAG,CAAC;IAEhE,KAAK,CAAC,KAAmB;QAC/B,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;QAAC,CAAC;QACnG,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;eAClG,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;mBAClF,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;uBAC5E,KAAK,CAAC,KAAK,KAAK,UAAU,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAClG,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,KAAkB,CAAC;IAC5B,CAAC;IAEO,SAAS,CAAC,MAAY;QAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACjH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACtD,IAAI,MAAM,KAAK,KAAK,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC,SAAS;gBAAE,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;YAC5G,0EAA0E;YAC1E,4EAA4E;YAC5E,MAAM,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC5C,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;aAAM,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAmB,EAAE,IAAmB;QACvD,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QACjH,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3D,MAAM,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACnD,8EAA8E;YAC9E,IAAI,CAAC,YAAY,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;YAChH,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU;YAC1F,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACrG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;CACF"}

package/dist/server/hooks/hookBinding.d.ts

@@ -0,0 +1,39 @@
+import type { PtyTranscriptSource } from '../terminal/PtyAdapter.js';
+import { type TranscriptHeaderReader, type TranscriptHeaderProof, type TranscriptHeaderResult, type WritableTranscriptFdProof } from '../terminal/transcriptHeader.js';
+export interface HookProcessIdentity {
+    pid: number;
+    startTicks: string;
+}
+export interface HookOwner extends HookProcessIdentity {
+    provider: 'codex' | 'claude';
+    foreground: boolean;
+    shared?: boolean;
+}
+export declare function readHookOwner(identity: HookProcessIdentity, provider: 'codex' | 'claude'): Promise<HookOwner | null>;
+export type HookTranscriptValidation = {
+    status: 'valid';
+    source: PtyTranscriptSource;
+    proof: TranscriptHeaderProof;
+    verification: 'header' | 'native';
+} | Exclude<TranscriptHeaderResult, {
+    status: 'valid';
+}> | {
+    status: 'pending';
+    reason: 'owner_changed';
+};
+export interface HookTranscriptProofRequest {
+    owner: HookOwner;
+    proof: TranscriptHeaderProof;
+    reason: 'limit' | 'unresolved';
+    ancestorSessionIds: readonly string[];
+}
+export interface HookTranscriptValidationOptions {
+    /** Trusted internal overrides, including isolated fixtures; never request parameters. */
+    rootPath?: string;
+    procRoot?: string;
+    readOwner?: typeof readHookOwner;
+    reader?: TranscriptHeaderReader;
+    resolveNativeProof?: (request: HookTranscriptProofRequest) => Promise<WritableTranscriptFdProof | null>;
+}
+export declare function inspectHookTranscript(owner: HookOwner, sessionId: string, filePath: string, options?: HookTranscriptValidationOptions): Promise<HookTranscriptValidation>;
+export declare function validateHookTranscript(owner: HookOwner, sessionId: string, filePath: string, options?: HookTranscriptValidationOptions): Promise<PtyTranscriptSource | null>;

package/dist/server/hooks/hookBinding.js

@@ -0,0 +1,91 @@
+import { readFile, readlink } from 'node:fs/promises';
+import path from 'node:path';
+import os from 'node:os';
+import { identifyProcess } from '../system/processIdentity.js';
+import { readProcessEnvValuesAsync } from '../terminal/procfs.js';
+import { findWritableTranscriptFd, sharedTranscriptHeaderReader, revalidateTranscriptHeaderProof, writableTranscriptFdCurrent } from '../terminal/transcriptHeader.js';
+export async function readHookOwner(identity, provider) {
+    try {
+        const raw = await readFile(`/proc/${identity.pid}/stat`, 'utf8');
+        const fields = raw.slice(raw.lastIndexOf(')') + 2).trim().split(/\s+/);
+        if (fields[19] !== identity.startTicks || fields[0] === 'Z' || fields[0] === 'X')
+            return null;
+        const executable = await readlink(`/proc/${identity.pid}/exe`);
+        const args = (await readFile(`/proc/${identity.pid}/cmdline`, 'utf8')).split('\0');
+        const process = identifyProcess('', executable, args, false);
+        if (process.name !== provider)
+            return null;
+        return { ...identity, provider, foreground: fields[4] !== '0' && fields[2] === fields[5] && process.category !== 'shared',
+            shared: process.category === 'shared' };
+    }
+    catch {
+        return null;
+    }
+}
+function sameHookOwner(current, expected) {
+    return current !== null && current.pid === expected.pid && current.startTicks === expected.startTicks
+        && current.provider === expected.provider && current.foreground === expected.foreground
+        && (current.shared ?? false) === (expected.shared ?? false);
+}
+// Call only after pane ownership is established. Shared daemons additionally
+// require the Manager's exact native client/session gate, not an ancestry match.
+export async function inspectHookTranscript(owner, sessionId, filePath, options = {}) {
+    const readOwner = options.readOwner ?? readHookOwner;
+    try {
+        if (!sameHookOwner(await readOwner(owner, owner.provider), owner))
+            return { status: 'pending', reason: 'owner_changed' };
+        let rootPath = options.rootPath;
+        if (rootPath === undefined) {
+            const env = await readProcessEnvValuesAsync(owner.pid, ['HOME', 'CODEX_HOME', 'CLAUDE_CONFIG_DIR']);
+            const home = env.get('HOME') || os.homedir();
+            rootPath = owner.provider === 'codex'
+                ? path.join(env.get('CODEX_HOME') || path.join(home, '.codex'), 'sessions')
+                : path.join(env.get('CLAUDE_CONFIG_DIR') || path.join(home, '.claude'), 'projects');
+        }
+        const request = { provider: owner.provider, sessionId, filePath, rootPath };
+        const result = await (options.reader ?? sharedTranscriptHeaderReader).read(request);
+        if (result.status === 'invalid')
+            return result;
+        let verification = 'header';
+        let native = null;
+        if (result.status === 'pending') {
+            if (!result.proof || (result.reason !== 'limit' && result.reason !== 'unresolved'))
+                return result;
+            native = options.resolveNativeProof
+                ? await options.resolveNativeProof({ owner, proof: { ...result.proof }, reason: result.reason,
+                    ancestorSessionIds: result.ancestorSessionIds ?? [] })
+                : await findWritableTranscriptFd(owner, result.proof, options.procRoot);
+            if (!native || native.kind !== 'writable-fd')
+                return result;
+            if (native.provider !== owner.provider || native.sessionId !== sessionId)
+                return { status: 'invalid', reason: 'identity_conflict' };
+            if (native.ownerPid !== owner.pid || native.ownerStartTicks !== owner.startTicks || native.filePath !== result.proof.filePath
+                || native.dev !== result.proof.dev || native.ino !== result.proof.ino)
+                return result;
+            const lineage = native.ancestorSessionIds ?? result.lineageSessionIds;
+            if (result.ancestorSessionIds?.length && (!lineage || lineage.length > 32
+                || !result.ancestorSessionIds.every(id => lineage.includes(id))))
+                return result;
+            if (!await writableTranscriptFdCurrent(native, options.procRoot))
+                return result;
+            verification = 'native';
+        }
+        const proof = result.proof;
+        if (!sameHookOwner(await readOwner(owner, owner.provider), owner))
+            return { status: 'pending', reason: 'owner_changed' };
+        if (native && !await writableTranscriptFdCurrent(native, options.procRoot))
+            return { status: 'pending', reason: 'changed' };
+        const currentProof = await revalidateTranscriptHeaderProof(proof, request, result.status === 'valid' || result.reason === 'limit');
+        if (!currentProof)
+            return { status: 'pending', reason: 'changed' };
+        return { status: 'valid', source: { provider: owner.provider, sessionId, filePath: currentProof.filePath }, proof: currentProof, verification };
+    }
+    catch {
+        return { status: 'pending', reason: 'unavailable' };
+    }
+}
+export async function validateHookTranscript(owner, sessionId, filePath, options = {}) {
+    const result = await inspectHookTranscript(owner, sessionId, filePath, options);
+    return result.status === 'valid' ? result.source : null;
+}
+//# sourceMappingURL=hookBinding.js.map

package/dist/server/hooks/hookBinding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hookBinding.js","sourceRoot":"","sources":["../../../src/server/hooks/hookBinding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAElE,OAAO,EAAE,wBAAwB,EAAE,4BAA4B,EAAE,+BAA+B,EAAE,2BAA2B,EAE3F,MAAM,iCAAiC,CAAC;AAa1E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAA6B,EAAE,QAA4B;IAC7F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,QAAQ,CAAC,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,QAAQ,CAAC,UAAU,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC9F,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,SAAS,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,SAAS,QAAQ,CAAC,GAAG,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;YACvH,MAAM,EAAE,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAuBD,SAAS,aAAa,CAAC,OAAyB,EAAE,QAAmB;IACnE,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;WAChG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;WACpF,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,6EAA6E;AAC7E,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAgB,EAChB,SAAiB,EACjB,QAAgB,EAChB,UAA2C,EAAE;IAE7C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC;IACrD,IAAI,CAAC;QACH,IAAI,CAAC,aAAa,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACzH,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAChC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,mBAAmB,CAAC,CAAC,CAAC;YACpG,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;YAC7C,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,OAAO;gBACnC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,UAAU,CAAC;gBAC3E,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,4BAA4B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAC/C,IAAI,YAAY,GAAwB,QAAQ,CAAC;QACjD,IAAI,MAAM,GAAqC,IAAI,CAAC;QACpD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,CAAC;gBAAE,OAAO,MAAM,CAAC;YAClG,MAAM,GAAG,OAAO,CAAC,kBAAkB;gBACjC,CAAC,CAAC,MAAM,OAAO,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM;oBAC3F,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;gBACxD,CAAC,CAAC,MAAM,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC1E,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;gBAAE,OAAO,MAAM,CAAC;YAC5D,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YACpI,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,eAAe,KAAK,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,QAAQ;mBACxH,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG;gBAAE,OAAO,MAAM,CAAC;YACvF,MAAM,OAAO,GAAG,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,iBAAiB,CAAC;YACtE,IAAI,MAAM,CAAC,kBAAkB,EAAE,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE;mBACpE,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC;YAClF,IAAI,CAAC,MAAM,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;gBAAE,OAAO,MAAM,CAAC;YAChF,YAAY,GAAG,QAAQ,CAAC;QAC1B,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAM,CAAC;QAC5B,IAAI,CAAC,aAAa,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACzH,IAAI,MAAM,IAAI,CAAC,MAAM,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC5H,MAAM,YAAY,GAAG,MAAM,+BAA+B,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;QACnI,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACnE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;IAClJ,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAgB,EAChB,SAAiB,EACjB,QAAgB,EAChB,UAA2C,EAAE;IAE7C,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC"}

package/dist/server/hooks/hookFiles.d.ts

@@ -0,0 +1,24 @@
+export declare class HookControlError extends Error {
+    readonly code: string;
+    readonly path?: string | undefined;
+    /** Offending filesystem path for operator diagnostics; never file contents. */
+    constructor(code: string, path?: string | undefined);
+}
+export type FileSnapshot = {
+    text: string;
+    mode: number;
+    ino: number;
+    dev: number;
+} | null;
+export declare const MAX_FILE_BYTES: number;
+export declare function missing(error: unknown): boolean;
+export declare function sameSnapshot(a: FileSnapshot, b: FileSnapshot): boolean;
+export declare function safeParents(target: string): Promise<void>;
+export declare function ensureDirectory(directory: string): Promise<void>;
+export declare function snapshot(target: string, owned?: boolean): Promise<FileSnapshot>;
+export declare function syncDirectory(directory: string): Promise<void>;
+export declare function syncSnapshot(target: string, expected: FileSnapshot): Promise<void>;
+export declare function replace(target: string, expected: FileSnapshot, text: string | null, options?: {
+    durable?: boolean;
+    onApplied?: (after: FileSnapshot) => void;
+}): Promise<FileSnapshot>;

package/dist/server/hooks/hookFiles.js

@@ -0,0 +1,160 @@
+import { constants } from 'node:fs';
+import { lstat, mkdir, open, rename, unlink } from 'node:fs/promises';
+import { randomUUID } from 'node:crypto';
+import path from 'node:path';
+export class HookControlError extends Error {
+    code;
+    path;
+    /** Offending filesystem path for operator diagnostics; never file contents. */
+    constructor(code, path) {
+        super(code);
+        this.code = code;
+        this.path = path;
+    }
+}
+export const MAX_FILE_BYTES = 1024 * 1024;
+export function missing(error) { return error?.code === 'ENOENT'; }
+export function sameSnapshot(a, b) {
+    return a === null || b === null ? a === b : a.text === b.text && a.mode === b.mode && a.ino === b.ino && a.dev === b.dev;
+}
+export async function safeParents(target) {
+    let directory = path.dirname(target);
+    while (true) {
+        try {
+            const info = await lstat(directory);
+            if (!info.isDirectory() || info.isSymbolicLink())
+                throw new HookControlError('unsafe_path', directory);
+        }
+        catch (error) {
+            if (!missing(error))
+                throw error;
+        }
+        const parent = path.dirname(directory);
+        if (parent === directory)
+            return;
+        directory = parent;
+    }
+}
+export async function ensureDirectory(directory) {
+    await safeParents(path.join(directory, '_'));
+    await mkdir(directory, { recursive: true, mode: 0o700 });
+    // A previous interrupted mkdir may leave existing but unsynced ancestors.
+    // Persist the entire reachable chain before publishing external references.
+    let current = path.resolve(directory);
+    while (true) {
+        await syncDirectory(current);
+        const parent = path.dirname(current);
+        if (parent === current)
+            return;
+        current = parent;
+    }
+}
+export async function snapshot(target, owned = true) {
+    await safeParents(target);
+    let handle;
+    try {
+        handle = await open(target, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+    }
+    catch (error) {
+        if (missing(error))
+            return null;
+        if (error.code === 'ELOOP')
+            throw new HookControlError('unsafe_path', target);
+        throw error;
+    }
+    try {
+        const info = await handle.stat();
+        if (!info.isFile() || (owned && (info.nlink !== 1 || (process.getuid && info.uid !== process.getuid()))))
+            throw new HookControlError('unsafe_path', target);
+        if (info.size > MAX_FILE_BYTES)
+            throw new HookControlError('config_too_large');
+        const buffer = Buffer.alloc(MAX_FILE_BYTES + 1);
+        let length = 0;
+        while (length < buffer.length) {
+            const { bytesRead } = await handle.read(buffer, length, buffer.length - length, null);
+            if (!bytesRead)
+                break;
+            length += bytesRead;
+        }
+        if (length > MAX_FILE_BYTES)
+            throw new HookControlError('config_too_large');
+        const text = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(buffer.subarray(0, length));
+        return { text, mode: info.mode & 0o777, ino: info.ino, dev: info.dev };
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function syncDirectory(directory) {
+    await safeParents(path.join(directory, '_'));
+    const handle = await open(directory, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+    try {
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function syncSnapshot(target, expected) {
+    if (!sameSnapshot(await snapshot(target), expected))
+        throw new HookControlError('config_changed');
+    if (expected) {
+        const handle = await open(target, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+        try {
+            const info = await handle.stat();
+            if (info.ino !== expected.ino || info.dev !== expected.dev)
+                throw new HookControlError('config_changed');
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    await syncDirectory(path.dirname(target));
+    if (!sameSnapshot(await snapshot(target), expected))
+        throw new HookControlError('config_changed');
+}
+export async function replace(target, expected, text, options = {}) {
+    if (text !== null && Buffer.byteLength(text) > MAX_FILE_BYTES)
+        throw new HookControlError('config_too_large');
+    const current = await snapshot(target);
+    if (!sameSnapshot(current, expected))
+        throw new HookControlError('config_changed');
+    if (current?.text === text || (current === null && text === null)) {
+        if (options.durable)
+            await syncSnapshot(target, current);
+        return current;
+    }
+    const temp = `${target}.nterminal-${randomUUID()}.tmp`;
+    try {
+        let after = null;
+        if (text !== null) {
+            const file = await open(temp, 'wx', expected?.mode ?? 0o600);
+            try {
+                await file.writeFile(text);
+                await file.chmod(expected?.mode ?? 0o600);
+                await file.sync();
+                const info = await file.stat();
+                after = { text, mode: info.mode & 0o777, ino: info.ino, dev: info.dev };
+            }
+            finally {
+                await file.close();
+            }
+        }
+        if (!sameSnapshot(await snapshot(target), expected))
+            throw new HookControlError('config_changed');
+        if (text === null)
+            await unlink(target);
+        else
+            await rename(temp, target);
+        options.onApplied?.(after);
+        if (options.durable)
+            await syncDirectory(path.dirname(target));
+        return after;
+    }
+    finally {
+        await unlink(temp).catch((error) => { if (!missing(error))
+            throw error; });
+    }
+}
+//# sourceMappingURL=hookFiles.js.map

package/dist/server/hooks/hookFiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hookFiles.js","sourceRoot":"","sources":["../../../src/server/hooks/hookFiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAEpB;IAAuB;IAD5C,+EAA+E;IAC/E,YAAqB,IAAY,EAAW,IAAa;QAAI,KAAK,CAAC,IAAI,CAAC,CAAC;QAApD,SAAI,GAAJ,IAAI,CAAQ;QAAW,SAAI,GAAJ,IAAI,CAAS;IAAiB,CAAC;CAC5E;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,UAAU,OAAO,CAAC,KAAc,IAAa,OAAQ,KAA+B,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC;AAChH,MAAM,UAAU,YAAY,CAAC,CAAe,EAAE,CAAe;IAC3D,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC;AAC3H,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc;IAC9C,IAAI,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QACzG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,SAAS,GAAG,MAAM,CAAC;IACrB,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB;IACrD,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,0EAA0E;IAC1E,4EAA4E;IAC5E,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO;QAC/B,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,KAAK,GAAG,IAAI;IACzD,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QAAC,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IACtG,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACzK,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC5J,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc;YAAE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;QAChD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC;YACtF,IAAI,CAAC,SAAS;gBAAE,MAAM;YACtB,MAAM,IAAI,SAAS,CAAC;QACtB,CAAC;QACD,IAAI,MAAM,GAAG,cAAc;YAAE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3G,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IACzE,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACrC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB;IACnD,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACxG,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AAChE,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,QAAsB;IACvE,IAAI,CAAC,YAAY,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IAClG,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACpG,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;gBAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;YACzG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IACrC,CAAC;IACD,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,IAAI,CAAC,YAAY,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;AACpG,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,QAAsB,EAAE,IAAmB,EACvF,UAA4E,EAAE;IAC9E,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc;QAAE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IAC9G,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IACnF,IAAI,OAAO,EAAE,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAClE,IAAI,OAAO,CAAC,OAAO;YAAE,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACzD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,MAAM,cAAc,UAAU,EAAE,MAAM,CAAC;IACvD,IAAI,CAAC;QACH,IAAI,KAAK,GAAiB,IAAI,CAAC;QAC/B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,KAAK,CAAC,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,KAAK,CAAC,CAAC;gBAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBACzF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC/B,KAAK,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1E,CAAC;oBAAS,CAAC;gBAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QAClG,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;;YAAM,MAAM,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzE,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,OAAO,CAAC,OAAO;YAAE,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AACpG,CAAC"}

package/dist/server/hooks/hookInstallation.d.ts

@@ -0,0 +1,108 @@
+import { type CodexHookTrust } from './codexTrust.js';
+export type { CodexHookTrust } from './codexTrust.js';
+export type HookProvider = 'codex' | 'claude';
+export interface ProviderHookInstallation {
+    provider: HookProvider;
+    installed: boolean;
+    configPath: string;
+    notifyConfigPath?: string;
+    approvalRequired: boolean | null;
+    reason?: string;
+    /** Offending path for `unsafe_path`; never file contents. */
+    unsafePath?: string;
+    /** Non-fatal, bounded reason codes that can explain why installed hooks may not run. */
+    warnings?: string[];
+    /** Installed Codex hooks: how many NTerminal definitions exist and the helper command they run. */
+    hookCount?: number;
+    hookCommand?: string;
+    /** Codex's own trust report, from the last trust operation or check while the files are unchanged. */
+    trust?: CodexHookTrust;
+}
+export type CodexHookTrustResult = ProviderHookInstallation & {
+    trust: CodexHookTrust;
+};
+export interface HookInstallationOptions {
+    stateDir: string;
+    homeDir?: string;
+    /** Explicit effective provider homes, including values loaded from a runtime env file. */
+    providerHomes?: Partial<Record<HookProvider, string>>;
+    /** Resolve relative homes/state paths against the runtime's working directory. */
+    baseDir?: string;
+    /** Procfs identity source; isolated tests provide a synthetic tree. */
+    procRoot?: string;
+    /** Optional stable host identity source; unavailable IDs restrict recovery to this boot. */
+    machineIdPath?: string;
+    previewMode?: boolean;
+    /** Path to the packaged standalone helper, not JavaScript source text. */
+    helperSource?: string;
+    nodeExecutable?: string;
+    /** Read-only managed policy locations; isolated tests provide synthetic directories. */
+    codexSystemDir?: string;
+    claudeManagedDir?: string;
+    /** Codex CLI for trust operations; default: `codex` resolved like the user's shell PATH. */
+    codexExecutable?: string;
+    /** Environment for the short-lived Codex app-server (tests); default: process.env. */
+    codexEnv?: NodeJS.ProcessEnv;
+    /** Hard limit for one Codex app-server session, including startup. */
+    codexTimeoutMs?: number;
+}
+export interface ManagedHelperRefresh {
+    updated: boolean;
+    reason?: string;
+}
+export declare class HookInstallation {
+    private readonly options;
+    private hooksDir;
+    private readonly lexicalHooksDir;
+    private helperPath;
+    private helperOwnershipPath;
+    private helperJournal;
+    private endpointPath;
+    private readonly nodeExecutable;
+    private readonly homes;
+    private resolved;
+    /** Last successful Codex trust report, valid only while hooks.json, config.toml, and the manifest are unchanged. */
+    private codexTrustCache;
+    private codexTrustCheck;
+    constructor(options: HookInstallationOptions);
+    /**
+     * Resolve symlinks once per operation. The receiver authenticates the helper
+     * by comparing its argv with realpath(stateDir)/hooks, so commands must use the
+     * resolved path. Provider homes may be user-owned symlinks (dotfiles); all I/O
+     * then targets the resolved path, which has no symlink components left.
+     */
+    private prepare;
+    status(provider: HookProvider): Promise<ProviderHookInstallation>;
+    install(provider: HookProvider): Promise<ProviderHookInstallation>;
+    remove(provider: HookProvider): Promise<ProviderHookInstallation>;
+    /**
+     * After explicit operator confirmation: ask Codex (a private, short-lived
+     * `codex app-server`) to trust exactly NTerminal's installed hooks, as
+     * pressing Trust in `/hooks` would. Serialized with install/remove.
+     */
+    trustCodexHooks(): Promise<CodexHookTrustResult>;
+    /** Read-only `hooks/list` report, reused while the relevant files are unchanged. */
+    checkCodexTrust(): Promise<CodexHookTrustResult>;
+    private codexTrust;
+    private codexFingerprint;
+    refreshManagedHelper(): Promise<ManagedHelperRefresh>;
+    private helperReferenced;
+    private displayPaths;
+    private context;
+    private result;
+    /** Current definitions: guarded POSIX command, async where the response is unused. */
+    private entries;
+    private argv;
+    /** Every definition shape an earlier NTerminal version could have written for this node. */
+    private generations;
+    /** Exact argv arrays of NTerminal's own legacy notify commands recorded in this manifest. */
+    private ownedNotify;
+    /** Root `notify = [...]` whose decoded argv exactly equals an owned legacy command, however Codex reformatted it. */
+    private isOwnedNotify;
+    private referencesHelper;
+    private manifest;
+    /** Cheap, read-only policy checks. Unknown managed state is a warning, never an install blocker. */
+    private codexPolicy;
+    private claudePolicy;
+    private change;
+}