openmeld 0.3.231 → 0.3.232

package/dist/published-production-safety-CgXxtdMK.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"published-production-safety-CgXxtdMK.js","names":[],"sources":["../src/config/published-production-safety.ts"],"sourcesContent":["import { homedir } from \"node:os\";\nimport { join, resolve } from \"node:path\";\nimport type { OpenMeldPathResolutionInput } from \"./paths\";\nimport {\n  resolveDefaultOpenMeldHomeDirname,\n  resolveExplicitOpenMeldEnvPreset,\n  resolveOpenMeldEnvPreset,\n  resolveOpenMeldRootDir,\n} from \"./paths\";\n\nconst PUBLISHED_PRODUCTION_OPENMELD_ROOT = normalizeComparablePath(\n  join(homedir(), resolveDefaultOpenMeldHomeDirname(\"prod\"))\n);\n\nexport function assertNoPublishedProductionMutationDuringTests(\n  pathInput: OpenMeldPathResolutionInput,\n  targetName: string\n): void {\n  if (!isTestProcess(pathInput)) {\n    return;\n  }\n  if (!isPublishedProductionOpenMeldRoot(pathInput)) {\n    return;\n  }\n  throw new Error(\n    [\n      `Refusing to mutate ${targetName} in the published production lane during tests.`,\n      \"Set OPENMELD_HOME to a fresh temporary directory, or run the validation through openmeld-dev or openmeld-canary.\",\n    ].join(\" \")\n  );\n}\n\n/**\n * The OS service manager registration (launchd label / systemd unit / Windows\n * service name) is a per-user global resource keyed only by the env preset.\n * OPENMELD_HOME isolates lane files but does NOT isolate this registration, so\n * a process with an isolated root can still stop, boot out, or uninstall the\n * real published production service. Fail closed before any such mutation:\n * - test processes must never mutate the production registration, and\n * - a non-test process whose effective root left the published production\n *   lane must state its intent with an explicit OPENMELD_ENV_PRESET.\n */\nexport function assertSafePublishedProductionServiceRegistrationMutation(\n  operation: string,\n  pathInput: OpenMeldPathResolutionInput = {}\n): void {\n  if (resolveOpenMeldEnvPreset(pathInput) !== \"prod\") {\n    return;\n  }\n  if (isTestProcess(pathInput)) {\n    throw new Error(\n      [\n        `Refusing to ${operation} the published production OpenMeld Service registration during tests.`,\n        \"OPENMELD_HOME does not isolate the OS service manager registration.\",\n        \"Target an isolated lane with OPENMELD_ENV_PRESET=dev-local or OPENMELD_ENV_PRESET=canary, or stub the service manager.\",\n      ].join(\" \")\n    );\n  }\n  if (resolveExplicitOpenMeldEnvPreset(pathInput) === \"prod\") {\n    return;\n  }\n  if (isPublishedProductionOpenMeldRoot(pathInput)) {\n    return;\n  }\n  throw new Error(\n    [\n      `Refusing to ${operation} the published production OpenMeld Service registration:`,\n      \"the effective OpenMeld root is outside the published production lane, but the service identity resolved to the production label.\",\n      \"Set OPENMELD_ENV_PRESET explicitly to state which service registration this command must mutate.\",\n    ].join(\" \")\n  );\n}\n\nexport function isPublishedProductionOpenMeldRoot(\n  pathInput: OpenMeldPathResolutionInput\n): boolean {\n  return (\n    normalizeComparablePath(resolveOpenMeldRootDir(pathInput)) ===\n    PUBLISHED_PRODUCTION_OPENMELD_ROOT\n  );\n}\n\nexport function isTestProcess(\n  pathInput: OpenMeldPathResolutionInput = {}\n): boolean {\n  const env = pathInput.env ?? process.env;\n  const argv = pathInput.argv ?? process.argv;\n  return (\n    env.NODE_ENV === \"test\" ||\n    env.VITEST === \"true\" ||\n    typeof env.VITEST_WORKER_ID === \"string\" ||\n    typeof env.JEST_WORKER_ID === \"string\" ||\n    argv.some((arg) => arg.includes(\"vitest\"))\n  );\n}\n\nfunction normalizeComparablePath(path: string): string {\n  const normalized = resolve(path);\n  return process.platform === \"win32\" ? normalized.toLowerCase() : normalized;\n}\n"],"mappings":";;;;;;AAUA,MAAM,qCAAqC,wBACzC,KAAK,QAAQ,GAAG,kCAAkC,MAAM,CAAC,CAC3D;AAEA,SAAgB,+CACd,WACA,YACM;CACN,IAAI,CAAC,cAAc,SAAS,GAC1B;CAEF,IAAI,CAAC,kCAAkC,SAAS,GAC9C;CAEF,MAAM,IAAI,MACR,CACE,sBAAsB,WAAW,kDACjC,kHACF,CAAC,CAAC,KAAK,GAAG,CACZ;AACF;;;;;;;;;;;AAYA,SAAgB,yDACd,WACA,YAAyC,CAAC,GACpC;CACN,IAAI,yBAAyB,SAAS,MAAM,QAC1C;CAEF,IAAI,cAAc,SAAS,GACzB,MAAM,IAAI,MACR;EACE,eAAe,UAAU;EACzB;EACA;CACF,CAAC,CAAC,KAAK,GAAG,CACZ;CAEF,IAAI,iCAAiC,SAAS,MAAM,QAClD;CAEF,IAAI,kCAAkC,SAAS,GAC7C;CAEF,MAAM,IAAI,MACR;EACE,eAAe,UAAU;EACzB;EACA;CACF,CAAC,CAAC,KAAK,GAAG,CACZ;AACF;AAEA,SAAgB,kCACd,WACS;CACT,OACE,wBAAwB,uBAAuB,SAAS,CAAC,MACzD;AAEJ;AAEA,SAAgB,cACd,YAAyC,CAAC,GACjC;CACT,MAAM,MAAM,UAAU,OAAO,QAAQ;CACrC,MAAM,OAAO,UAAU,QAAQ,QAAQ;CACvC,OACE,IAAI,aAAa,UACjB,IAAI,WAAW,UACf,OAAO,IAAI,qBAAqB,YAChC,OAAO,IAAI,mBAAmB,YAC9B,KAAK,MAAM,QAAQ,IAAI,SAAS,QAAQ,CAAC;AAE7C;AAEA,SAAS,wBAAwB,MAAsB;CACrD,MAAM,aAAa,QAAQ,IAAI;CAC/B,OAAO,QAAQ,aAAa,UAAU,WAAW,YAAY,IAAI;AACnE"}