mirror of
https://github.com/morluto/rea
synced 2026-10-28 06:46:47 -04:00
70cd4cbfb8
Replace fixed Linux Hopper release pins with current vendor feed metadata, complete detached-PGP package verification under the stable publisher primary key, and authenticated package evidence for offline admission. Share parsed publisher facts across approved setup, doctor and the pre-execution guard. Preserve existing ownership, cancellation, private-display and cleanup rules. Fixes #3577 Normalize empty XDG settings, preserve backups during approved cache repair, and retain publisher cleanup through cancellation and shutdown. Exercise cold offline verification without reusing process-local proof state. Serialize approved cache publication across processes, restore old evidence on failure, and share the existing lease owner from process without changing its identities. Validation: 438 focused tests (six platform-related skips), full static/documentation checks, real Ubuntu 24.04 official Hopper 6.6.0 setup/CLI/MCP, offline ordinary-user admission, launcher mutation rejection, and cold/warm verification measurements. Official RPM metadata mismatch is tracked separately in #3578 and fails closed. BREAKING CHANGE: Older Linux Hopper builds admitted by the fixed allowlist now require retained publisher-signed package evidence or an approved update to the current public demo. Update explicit HOPPER_LAUNCHER_PATH values when migrating; the live feed exposes only its current release. Co-authored-by: Kaoru0822 <208281322+kaoru0822-kitauji@users.noreply.github.com> Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com>
104 lines
3.9 KiB
TypeScript
104 lines
3.9 KiB
TypeScript
import { mkdir, mkdtemp, readdir, rm, writeFile } from "node:fs/promises";
|
|
import { join } from "node:path";
|
|
import { expect, it, onTestFinished } from "vitest";
|
|
|
|
import { snapshotHopperRuntime } from "../../../../scripts/lib/real-hopper-cleanup.mjs";
|
|
import { acquireHopperTargetLease } from "../../../../src/process/HopperLease.js";
|
|
import { createTestTempDirectory } from "../../../fixtures/temporaryDirectory.js";
|
|
|
|
it.skipIf(process.platform === "win32")(
|
|
"does not classify a released shared lease directory as a session leak",
|
|
async () => {
|
|
const parent = await createLeaseWorkspace();
|
|
const directory = join(parent, "rea-hopper-501");
|
|
const targetPath = join(parent, "target");
|
|
await writeFile(targetPath, "source-owned lease target");
|
|
const before = await snapshotHopperRuntime(parent, directory);
|
|
const acquired = await acquireHopperTargetLease({
|
|
targetPath,
|
|
targetKind: "executable",
|
|
loaderArgs: [],
|
|
runId: "released-verifier-lease",
|
|
directory,
|
|
});
|
|
if (!acquired.acquired) throw new Error("Expected the owned target lease");
|
|
await acquired.lease.release();
|
|
|
|
expect(await readdir(directory)).toEqual([]);
|
|
expect(await snapshotHopperRuntime(parent, directory)).toEqual(before);
|
|
},
|
|
);
|
|
|
|
it.skipIf(process.platform === "win32")(
|
|
"retains an unreleased real target-lease socket in cleanup observations",
|
|
async () => {
|
|
const parent = await createLeaseWorkspace();
|
|
const directory = join(parent, "rea-hopper-501");
|
|
const targetPath = join(parent, "target");
|
|
await writeFile(targetPath, "source-owned lease target");
|
|
const acquired = await acquireHopperTargetLease({
|
|
targetPath,
|
|
targetKind: "executable",
|
|
loaderArgs: [],
|
|
runId: "retained-verifier-lease",
|
|
directory,
|
|
});
|
|
if (!acquired.acquired) throw new Error("Expected the owned target lease");
|
|
try {
|
|
const children = await readdir(directory);
|
|
expect(children).toHaveLength(1);
|
|
expect(await snapshotHopperRuntime(parent, directory)).toEqual(
|
|
new Set(children.map((name) => join(directory, name))),
|
|
);
|
|
} finally {
|
|
await acquired.lease.release();
|
|
}
|
|
},
|
|
);
|
|
|
|
it("reports retained sessions belonging to observed MCP processes", async () => {
|
|
const parent = await createTestTempDirectory("rea-cleanup-retained-session-");
|
|
const directory = join(parent, "rea-hopper-501");
|
|
const previous = join(parent, "rea-existing-session");
|
|
await mkdir(previous);
|
|
const before = await snapshotHopperRuntime(parent, directory);
|
|
const retained = join(parent, "rea-retained-session");
|
|
const unrelated = join(parent, "rea-unrelated-session");
|
|
const unknown = join(parent, "rea-no-ownership-record");
|
|
for (const path of [retained, unrelated, unknown]) await mkdir(path);
|
|
await writeFile(join(retained, "bootstrap.py"), "source-owned fixture");
|
|
await writeFile(
|
|
join(retained, "ownership.json"),
|
|
JSON.stringify({ parent_pid: process.pid }),
|
|
);
|
|
await writeFile(
|
|
join(unrelated, "ownership.json"),
|
|
JSON.stringify({ parent_pid: process.pid + 1 }),
|
|
);
|
|
const after = await snapshotHopperRuntime(
|
|
parent,
|
|
directory,
|
|
new Set([process.pid]),
|
|
);
|
|
|
|
expect([...after].filter((path) => !before.has(path))).toEqual([retained]);
|
|
});
|
|
|
|
it("reports an unexpected file at the shared lease root", async () => {
|
|
const parent = await createTestTempDirectory("rea-cleanup-invalid-lease-");
|
|
const directory = join(parent, "rea-hopper-501");
|
|
await writeFile(directory, "unexpected lease root file");
|
|
|
|
expect(await snapshotHopperRuntime(parent, directory)).toEqual(
|
|
new Set([directory]),
|
|
);
|
|
});
|
|
|
|
const createLeaseWorkspace = async (): Promise<string> => {
|
|
// Unix socket paths must fit the host sockaddr_un limit, independently of
|
|
// the test runner's potentially long redirected temporary directory.
|
|
const parent = await mkdtemp("/tmp/rhv-");
|
|
onTestFinished(() => rm(parent, { recursive: true, force: true }));
|
|
return parent;
|
|
};
|