morluto
22a0746f90
Bind runtime and descriptor cleanup to exact retry leases and retain command supervisors until stop is confirmed. Preserve primary errors, partial Evidence and finalization cancellation reasons. Validate with 88 focused tests, official WABT 1.0.42 CLI/MCP verifier (51 cases), build, static and documentation checks. Command stop failures use controlled source seams; real permission failures and target execution are unverified. Fixes #4787 Fixes #4798
70 lines
2.0 KiB
JavaScript
70 lines
2.0 KiB
JavaScript
import fs from "node:fs";
|
|
import { syncBuiltinESMExports } from "node:module";
|
|
import { dirname, basename, resolve } from "node:path";
|
|
const root = process.env.REA_CLEANUP_PROBE_ROOT;
|
|
const trace = process.env.REA_CLEANUP_PROBE_TRACE;
|
|
const mode = process.env.REA_CLEANUP_PROBE_MODE;
|
|
const selected = process.env.REA_CLEANUP_PROBE_INPUT;
|
|
let removals = 0;
|
|
let deniedInput = false;
|
|
const record = (value) =>
|
|
fs.appendFileSync(trace, JSON.stringify(value) + "\n");
|
|
const rm = fs.promises.rm.bind(fs.promises);
|
|
fs.promises.rm = async (path, ...args) => {
|
|
const value = resolve(String(path));
|
|
if (dirname(value) !== root || !basename(value).startsWith("rea-wabt-"))
|
|
return rm(path, ...args);
|
|
const deny =
|
|
(mode === "runtime-once" && removals++ === 0) ||
|
|
(mode === "runtime-until-allowed" && !fs.existsSync(root + "/allow"));
|
|
if (deny) {
|
|
record({
|
|
kind: "runtime",
|
|
path: value,
|
|
denied: true,
|
|
exists: fs.existsSync(value),
|
|
});
|
|
throw Object.assign(new Error("authored runtime cleanup denial"), {
|
|
code: "EACCES",
|
|
});
|
|
}
|
|
await rm(path, ...args);
|
|
record({
|
|
kind: "runtime",
|
|
path: value,
|
|
denied: false,
|
|
exists: fs.existsSync(value),
|
|
});
|
|
};
|
|
const open = fs.promises.open.bind(fs.promises);
|
|
fs.promises.open = async (path, ...args) => {
|
|
const handle = await open(path, ...args);
|
|
if (mode === "input-once" && resolve(String(path)) === selected) {
|
|
const close = handle.close.bind(handle);
|
|
const descriptor = handle.fd;
|
|
handle.close = async () => {
|
|
if (!deniedInput) {
|
|
deniedInput = true;
|
|
record({
|
|
kind: "input-close",
|
|
path: selected,
|
|
descriptor,
|
|
denied: true,
|
|
});
|
|
throw Object.assign(new Error("authored descriptor cleanup denial"), {
|
|
code: "EACCES",
|
|
});
|
|
}
|
|
await close();
|
|
record({
|
|
kind: "input-close",
|
|
path: selected,
|
|
descriptor,
|
|
denied: false,
|
|
});
|
|
};
|
|
}
|
|
return handle;
|
|
};
|
|
syncBuiltinESMExports();
|