engineering-platform 2.3.103__tar.gz → 2.3.105__tar.gz

{engineering_platform-2.3.103 → engineering_platform-2.3.105}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: engineering-platform
-Version: 2.3.103
+Version: 2.3.105
 Summary: Local-first Engineering Platform execution operations runtime
 Author: Peter van Tol
 License: MIT

{engineering_platform-2.3.103 → engineering_platform-2.3.105}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "engineering-platform"
-version = "2.3.103"
+version = "2.3.105"
 description = "Local-first Engineering Platform execution operations runtime"
 readme = "README.md"
 requires-python = ">=3.14,<3.15"

{engineering_platform-2.3.103 → engineering_platform-2.3.105}/src/engineering_platform/ENGINEERING_PLATFORM_CONFIG.json

@@ -3,7 +3,7 @@
   "platform": {
     "id": "engineering-platform",
     "name": "Engineering Platform",
-    "version": "2.3.103",
+    "version": "2.3.105",
     "generation": 2,
     "documentation_namespace": "engineering-platform",
     "capability_registry_version": 1

{engineering_platform-2.3.103 → engineering_platform-2.3.105}/src/engineering_platform/ENGINEERING_PLATFORM_VERSION.json

@@ -1,15 +1,15 @@
 {
   "bootstrap_contract": "2026.12",
   "checkpoint_format": 1,
-  "dashboard_version": "2.3.103",
+  "dashboard_version": "2.3.105",
   "handoff_protocol": 1,
   "memory_format": 2,
   "minimum_codex_cli": "0.146.0",
   "inbox_protocol": 1,
-  "platform_version": "2.3.103",
+  "platform_version": "2.3.105",
   "report_format": 2,
-  "runner_version": "2.3.103",
+  "runner_version": "2.3.105",
   "status_model": 1,
   "storage_schema": 45,
-  "watcher_version": "2.3.103"
+  "watcher_version": "2.3.105"
 }

{engineering_platform-2.3.103 → engineering_platform-2.3.105}/src/engineering_platform/platform_version.py

@@ -12,7 +12,7 @@ from .storage import ENGINEERING_STORAGE_SCHEMA_VERSION
 
 SEMVER = re.compile(r"^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$")
 CONTRACT = re.compile(r"^(\d{4})\.(0[1-9]|1[0-2])$")
-CURRENT_PLATFORM_VERSION = "2.3.103"
+CURRENT_PLATFORM_VERSION = "2.3.105"
 MANIFEST_FIELDS = frozenset(
     {
         "platform_version",

{engineering_platform-2.3.103 → engineering_platform-2.3.105}/src/engineering_platform/system_instance_lifecycle.py

@@ -97,10 +97,22 @@ def _atomic_json(path: Path, value: Mapping[str, object]) -> None:
         temporary.unlink(missing_ok=True)
 
 
+def _assert_owned_mode(path: Path, details: os.stat_result) -> None:
+    if stat.S_IMODE(details.st_mode) & 0o022:
+        raise SystemInstanceLifecycleError(
+            f"EP preserved instance contains group/world-writable entry: {path}"
+        )
+
+
 def _regular_digest(path: Path) -> str:
     details = path.lstat()
     if path.is_symlink() or not stat.S_ISREG(details.st_mode):
         raise SystemInstanceLifecycleError(f"EP preserved instance contains unsafe entry: {path}")
+    _assert_owned_mode(path, details)
+    if details.st_nlink != 1:
+        raise SystemInstanceLifecycleError(
+            f"EP preserved instance contains non-exclusive hardlink: {path}"
+        )
     digest = hashlib.sha256()
     with path.open("rb") as stream:
         while True:
@@ -118,6 +130,7 @@ def _tree_digest(root: Path, *, ignored_roots: tuple[Path, ...] = ()) -> str:
         raise SystemInstanceLifecycleError("EP preserved instance root is unavailable") from error
     if root.is_symlink() or not stat.S_ISDIR(details.st_mode):
         raise SystemInstanceLifecycleError("EP preserved instance root is unsafe")
+    _assert_owned_mode(root, details)
     ignored: tuple[tuple[str, ...], ...] = tuple(
         path.relative_to(root).parts for path in ignored_roots
     )
@@ -137,6 +150,7 @@ def _tree_digest(root: Path, *, ignored_roots: tuple[Path, ...] = ()) -> str:
             info = path.lstat()
             if stat.S_ISLNK(info.st_mode) or not stat.S_ISDIR(info.st_mode):
                 raise SystemInstanceLifecycleError(f"EP preserved instance contains unsafe entry: {path}")
+            _assert_owned_mode(path, info)
             entries.append({
                 "path": str(path.relative_to(root)),
                 "kind": "DIRECTORY",
@@ -327,6 +341,7 @@ class SystemInstanceLifecycle:
                 raise SystemInstanceLifecycleError("EP preserved instance changed after terminal preserve")
             return receipt
         with _Lock(instance.lifecycle_lock):
+            _tree_digest(instance.root)
             self.controller.remove(instance)
             if self.controller.loaded(instance) or self.service_interpreter(instance) is not None:
                 raise SystemInstanceLifecycleError("EP preserved service was not fully removed")
@@ -441,6 +456,10 @@ class SystemInstanceLifecycle:
         if state.get("phase") == "COMPLETE":
             return state
         with _Lock(instance.lifecycle_lock):
+            _tree_digest(
+                instance.root,
+                ignored_roots=(instance.operations_root / operation_id,),
+            )
             self.controller.remove(instance)
             if self.controller.loaded(instance) or self.service_interpreter(instance) is not None:
                 raise SystemInstanceLifecycleError("EP purge service was not fully removed")
@@ -458,40 +477,78 @@ class SystemInstanceLifecycle:
                 "PURGE_READY",
                 mutable_instance_data_digest=tree_digest,
                 descriptor_digest=request["descriptor_digest"],
+                # REMOVE publishes its receipt before deleting this tree.  A
+                # process kill can erase instance.json before rmtree finishes.
+                # Retain only the topology and root identity needed to resume
+                # that exact deletion without adopting a replacement root.
+                display_label=instance.display_label,
+                service_account=instance.service_account,
+                root_device=instance.root.stat(follow_symlinks=False).st_dev,
+                root_inode=instance.root.stat(follow_symlinks=False).st_ino,
             )
 
     def resume_purge_target(
         self,
-        instance: system_installation_topology.SystemInstanceTopology,
-        descriptor: Mapping[str, object],
+        instance_id: str,
         operation_id: str,
+        remove_receipt: Mapping[str, object],
     ) -> None:
-        root = self._operation_root(instance.instance_id, operation_id)
+        root = self._operation_root(instance_id, operation_id)
         state = _read_json(root / "state.json")
         if (
             state.get("contract") != CONTRACT
             or state.get("operation") != "PURGE"
             or state.get("phase") != "PURGE_READY"
-            or state.get("instance_id") != instance.instance_id
-            or state.get("descriptor_digest") != _json_digest(dict(descriptor))
+            or state.get("instance_id") != instance_id
+            or state.get("request") != {
+                "instance_id": instance_id,
+                "descriptor_digest": state.get("descriptor_digest"),
+            }
+            or state.get("request_digest") != _json_digest(state["request"])
+            or remove_receipt.get("operation") != "REMOVE"
+            or remove_receipt.get("operation_id") != operation_id
+            or remove_receipt.get("instance_id") != instance_id
+            or not isinstance(remove_receipt.get("evidence"), Mapping)
+            or remove_receipt["evidence"].get("removed_descriptor_digest") != state.get("descriptor_digest")
         ):
             raise SystemInstanceLifecycleError("EP purge recovery evidence is invalid")
-        with _Lock(instance.lifecycle_lock):
+        try:
+            instance = system_installation_topology.system_instance_topology(
+                self.product,
+                instance_id=instance_id,
+                display_label=state["display_label"],
+                service_account=state["service_account"],
+            )
+        except (KeyError, TypeError, ValueError) as error:
+            raise SystemInstanceLifecycleError("EP purge recovery topology is invalid") from error
+        expected = self.product.system_root / "instances" / instance.instance_id
+        if (
+            instance.root != expected
+            or instance.root.is_symlink()
+            or not instance.root.is_relative_to(self.product.system_root / "instances")
+        ):
+            raise SystemInstanceLifecycleError("EP purge recovery target is invalid")
+
+        def verify_original_root() -> None:
+            details = instance.root.stat(follow_symlinks=False)
+            if (details.st_dev, details.st_ino) != (state.get("root_device"), state.get("root_inode")):
+                raise SystemInstanceLifecycleError("EP purge recovery target was replaced")
+
+        # Check before opening the instance-owned lock, which may recreate a
+        # lock directory already erased by the interrupted deletion.
+        verify_original_root()
+        with _Lock(root / "purge-recovery.lock"), _Lock(instance.lifecycle_lock):
+            verify_original_root()
             self.controller.remove(instance)
             if self.controller.loaded(instance) or self.service_interpreter(instance) is not None:
                 raise SystemInstanceLifecycleError("EP purge recovery service was not fully removed")
-            if _tree_digest(
-                instance.root,
-                ignored_roots=(instance.operations_root / operation_id,),
-            ) != state.get("mutable_instance_data_digest"):
-                raise SystemInstanceLifecycleError("EP purge recovery target changed after preparation")
-            expected = self.product.system_root / "instances" / instance.instance_id
-            if (
-                instance.root != expected
-                or instance.root.is_symlink()
-                or not instance.root.is_relative_to(self.product.system_root / "instances")
-            ):
-                raise SystemInstanceLifecycleError("EP purge recovery target is invalid")
+            # The exact root survives until rmtree's final step.  Its contents
+            # may be a strict subset after SIGKILL, so the original whole-tree
+            # digest cannot be required here.  Reject unsafe remaining entries.
+            _tree_digest(instance.root, ignored_roots=(instance.operations_root / operation_id,))
+            if instance.descriptor.exists():
+                if _json_digest(_read_json(instance.descriptor)) != state.get("descriptor_digest"):
+                    raise SystemInstanceLifecycleError("EP purge recovery descriptor changed")
             shutil.rmtree(instance.root)
 
     def record_purge(

{engineering_platform-2.3.103 → engineering_platform-2.3.105}/src/engineering_platform/system_instance_provisioner.py

@@ -665,8 +665,7 @@ class SystemInstanceProvisioner:
         else:
             remove_receipt = prior_remove
             if instance_root.exists() or instance_root.is_symlink():
-                instance, descriptor = self._instance_from_descriptor(instance_id)
-                lifecycle.resume_purge_target(instance, descriptor, operation_id)
+                lifecycle.resume_purge_target(instance_id, operation_id, remove_receipt)
         receipt = lifecycle.record_purge(instance_id, operation_id, remove_receipt)
         return {
             "contract": system_instance_lifecycle.CONTRACT,

{engineering_platform-2.3.103 → engineering_platform-2.3.105}/src/engineering_platform/templates/workspace-config.json

@@ -3,7 +3,7 @@
   "platform": {
     "id": "engineering-platform",
     "name": "Engineering Platform",
-    "version": "2.3.103",
+    "version": "2.3.105",
     "generation": 2,
     "documentation_namespace": "engineering-platform",
     "capability_registry_version": 1

{engineering_platform-2.3.103 → engineering_platform-2.3.105}/src/engineering_platform.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: engineering-platform
-Version: 2.3.103
+Version: 2.3.105
 Summary: Local-first Engineering Platform execution operations runtime
 Author: Peter van Tol
 License: MIT