youmd 0.11.0 → 0.13.0

package/scripts/env-vault/restore.sh

@@ -1,8 +1,8 @@
 #!/usr/bin/env bash
-# env-vault/restore.sh — restores .env.local files AND agent-auth secrets from
-# an encrypted vault created by backup.sh. NEVER prints, echoes, or logs any
-# secret VALUES. Restore prints which file paths were restored or skipped; list
-# mode prints target paths plus variable names/counts only.
+# env-vault/restore.sh — restores project .env.local files only from a vault
+# created by backup.sh. It never restores Codex, Claude, OpenAI, Cursor,
+# browser, or provider-auth caches. NEVER prints, echoes, or logs any secret
+# VALUES. Restore prints target paths plus variable names/counts only.
 #
 # Usage: bash restore.sh [--list] [--force] [--map-existing] [--existing-only]
 #        [--skip-agent-auth] [--root <target-root>] <vault-file>
@@ -11,29 +11,16 @@
 #   --root:     destination root for .env.local files
 #               (default: /Users/houstongolden/Desktop/CODE_2025)
 #
-# agent-auth restore map (archive name → absolute home path):
-#   agent-auth/codex-auth.json  → ~/.codex/auth.json
-#   agent-auth/cursor-mcp.json  → ~/.cursor/mcp.json
-#   agent-auth/claude.json      → ~/.claude.json
-
 set -euo pipefail
 
-# ── agent-auth restore map ─────────────────────────────────────────────────────
-# Maps archive name (inside agent-auth/) to its absolute home destination.
-# Format: "archive-name:absolute-destination-path"
-# Must stay in sync with AGENT_SECRET_FILES in backup.sh.
-AGENT_AUTH_MAP=(
-  "codex-auth.json:${HOME}/.codex/auth.json"
-  "cursor-mcp.json:${HOME}/.cursor/mcp.json"
-  "claude.json:${HOME}/.claude.json"
-)
-
 # ── defaults ──────────────────────────────────────────────────────────────────
 TARGET_ROOT="${ENV_VAULT_RESTORE_ROOT:-/Users/houstongolden/Desktop/CODE_2025}"
 FORCE=false
 LIST_ONLY=false
 MAP_EXISTING=false
 EXISTING_ONLY=false
+# Legacy compatibility only. Earlier vault versions could include an
+# `agent-auth/` payload; those archives are rejected before any file is written.
 SKIP_AGENT_AUTH=false
 VAULT_FILE=""
 
@@ -88,7 +75,7 @@ echo "Encryption tool: ${ENC_TOOL}"
 echo "Vault file:      ${VAULT_FILE}"
 echo "Target root:     ${TARGET_ROOT}"
 echo "Project mapping: map-existing=${MAP_EXISTING} existing-only=${EXISTING_ONLY}"
-echo "Agent auth:      $([[ "${SKIP_AGENT_AUTH}" == "true" ]] && echo "skip" || echo "restore")"
+echo "Provider auth:   excluded (legacy auth-bearing vaults are rejected)"
 echo ""
 
 normalize_project_name() {
@@ -172,12 +159,19 @@ echo ""
 # ── extract into work dir ─────────────────────────────────────────────────────
 EXTRACT_DIR="${WORK_DIR}/extracted"
 mkdir -p "${EXTRACT_DIR}"
+
+# Do not turn an older portable vault into a credential migration vector. The
+# contents are never extracted or restored, including in --list mode; the
+# operator must make a new project-env-only backup from the source machine.
+if tar -tf "${TAR_PATH}" | grep -Eq '(^|/)(agent-auth|\.codex|\.claude|\.cursor)(/|$)|(^|/)Library/Application Support/(Claude|Codex|Google/Chrome)(/|$)'; then
+  echo "ERROR: This legacy vault contains protected agent/provider auth material." >&2
+  echo "Refusing to restore it. Create a new project-env-only vault on the source machine." >&2
+  exit 1
+fi
 tar -xf "${TAR_PATH}" -C "${EXTRACT_DIR}"
 
 if [[ "${LIST_ONLY}" == "true" ]]; then
   ENV_COUNT=0
-  AGENT_PRESENT=0
-  AGENT_MISSING=0
 
   echo "Vault contents (secret-safe inventory):"
   while IFS= read -r -d '' ENV_FILE; do
@@ -200,28 +194,8 @@ if [[ "${LIST_ONLY}" == "true" ]]; then
     (( ENV_COUNT++ )) || true
   done < <(find "${EXTRACT_DIR}" -name ".env.local" -print0)
 
-  AGENT_AUTH_SRC="${EXTRACT_DIR}/agent-auth"
-  echo "  agent-auth:"
-  if [[ "${SKIP_AGENT_AUTH}" == "true" ]]; then
-    echo "    skipped by --skip-agent-auth"
-  else
-    for ENTRY in "${AGENT_AUTH_MAP[@]}"; do
-    ARCHIVE_NAME="${ENTRY%%:*}"
-    DEST_PATH="${ENTRY##*:}"
-    SRC_FILE="${AGENT_AUTH_SRC}/${ARCHIVE_NAME}"
-    if [[ -f "${SRC_FILE}" ]]; then
-      FILE_BYTES=$(wc -c < "${SRC_FILE}" | tr -d ' ')
-      echo "    present: agent-auth/${ARCHIVE_NAME} -> ${DEST_PATH} (${FILE_BYTES} bytes)"
-      (( AGENT_PRESENT++ )) || true
-    else
-      echo "    missing: agent-auth/${ARCHIVE_NAME}"
-      (( AGENT_MISSING++ )) || true
-    fi
-    done
-  fi
-
   echo ""
-  echo "List summary: ${ENV_COUNT} .env.local file(s), ${AGENT_PRESENT} agent-auth file(s) present, ${AGENT_MISSING} agent-auth file(s) missing."
+  echo "List summary: ${ENV_COUNT} .env.local file(s); provider/runtime credentials are excluded."
   echo "No files were written and no secret values were printed."
   exit 0
 fi
@@ -267,64 +241,12 @@ while IFS= read -r -d '' ENV_FILE; do
   fi
 done < <(find "${EXTRACT_DIR}" -name ".env.local" -print0)
 
-# ── restore agent-auth files ───────────────────────────────────────────────────
-AGENT_RESTORED=0
-AGENT_SKIPPED=0
-AGENT_BACKED_UP=0
-
-AGENT_AUTH_SRC="${EXTRACT_DIR}/agent-auth"
-
-if [[ "${SKIP_AGENT_AUTH}" == "true" ]]; then
-  echo "Skipping agent-auth restore because --skip-agent-auth was provided."
-  echo ""
-elif [[ -d "${AGENT_AUTH_SRC}" ]]; then
-  echo "Restoring agent-auth files…"
-  for ENTRY in "${AGENT_AUTH_MAP[@]}"; do
-    ARCHIVE_NAME="${ENTRY%%:*}"
-    DEST_PATH="${ENTRY##*:}"
-    SRC_FILE="${AGENT_AUTH_SRC}/${ARCHIVE_NAME}"
-
-    if [[ ! -f "${SRC_FILE}" ]]; then
-      echo "  SKIPPED (not in vault): agent-auth/${ARCHIVE_NAME}"
-      (( AGENT_SKIPPED++ )) || true
-      continue
-    fi
-
-    DEST_DIR="$(dirname "${DEST_PATH}")"
-    mkdir -p "${DEST_DIR}"
-
-    if [[ -f "${DEST_PATH}" ]]; then
-      if [[ "${FORCE}" == "true" ]]; then
-        cp "${SRC_FILE}" "${DEST_PATH}"
-        echo "  RESTORED (overwrite): ${DEST_PATH}"
-        (( AGENT_RESTORED++ )) || true
-      else
-        TS="$(date -u +%Y%m%dT%H%M%SZ)"
-        BAK="${DEST_PATH}.bak.${TS}"
-        cp "${DEST_PATH}" "${BAK}"
-        cp "${SRC_FILE}" "${DEST_PATH}"
-        echo "  RESTORED (backed up old → $(basename "${BAK}")): ${DEST_PATH}"
-        (( AGENT_RESTORED++ )) || true
-        (( AGENT_BACKED_UP++ )) || true
-      fi
-    else
-      cp "${SRC_FILE}" "${DEST_PATH}"
-      echo "  RESTORED (new): ${DEST_PATH}"
-      (( AGENT_RESTORED++ )) || true
-    fi
-  done
-  echo ""
-else
-  echo "No agent-auth/ directory in vault — skipping agent-auth restore."
-  echo ""
-fi
-
 echo ""
 echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
 echo "  Restore summary"
 echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
 echo "  .env.local  — Restored: ${RESTORED}  |  Skipped: ${SKIPPED}  |  Old files backed up: ${BACKED_UP}"
-echo "  agent-auth  — Restored: ${AGENT_RESTORED}  |  Skipped: ${AGENT_SKIPPED}  |  Old files backed up: ${AGENT_BACKED_UP}"
+echo "  provider auth — excluded by policy; none was restored"
 echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
 echo ""
 echo "Secrets are now in place. Do not print or share secret files."

package/scripts/smoke-safe-open-node.cjs

@@ -0,0 +1,50 @@
+/* eslint-disable @typescript-eslint/no-require-imports */
+const assert = require("node:assert/strict");
+const fs = require("node:fs");
+const os = require("node:os");
+const path = require("node:path");
+
+const addon = require(path.resolve(
+  __dirname,
+  "../native/prebuilds/darwin-universal/youmd_safe_open.node",
+));
+
+assert.equal(addon.napiVersion, 8, "expected the ABI-stable Node-API v8 addon");
+assert.equal(typeof addon.safeRead, "function", "safeRead export is missing");
+
+const root = fs.realpathSync.native(fs.mkdtempSync(path.join(os.tmpdir(), "youmd-node-abi-")));
+const outside = fs.realpathSync.native(fs.mkdtempSync(path.join(os.tmpdir(), "youmd-node-abi-outside-")));
+
+try {
+  fs.mkdirSync(path.join(root, "project-context"));
+  fs.writeFileSync(path.join(root, "project-context", "PRD.md"), "verified\n");
+  fs.writeFileSync(path.join(outside, "PRD.md"), "outside\n");
+
+  const stat = fs.lstatSync(root, { bigint: true });
+  const bytes = addon.safeRead(
+    root,
+    "project-context/PRD.md",
+    1024,
+    stat.dev.toString(),
+    stat.ino.toString(),
+  );
+  assert.equal(bytes.toString("utf8"), "verified\n");
+
+  fs.rmSync(path.join(root, "project-context"), { recursive: true });
+  fs.symlinkSync(outside, path.join(root, "project-context"), "dir");
+  assert.throws(
+    () => addon.safeRead(
+      root,
+      "project-context/PRD.md",
+      1024,
+      stat.dev.toString(),
+      stat.ino.toString(),
+    ),
+    /symlink_rejected|unsafe_path/,
+  );
+
+  console.log(`safe-open ABI smoke passed on Node ${process.version}`);
+} finally {
+  fs.rmSync(root, { recursive: true, force: true });
+  fs.rmSync(outside, { recursive: true, force: true });
+}