jason.woltje
abd2791f59
WI-2: mutator-class guard for the compaction directive-freshness mechanism — command-position parser (prefix x var-indirection unified) + primitive-anchored invariant backstop + all-tools-hook fail-close. Parser-complete on principle: realistic evasion matrix RED-regression-covered, residual exotic evasions proven backstop-caught (B-tests), lens-convergence reached. closes #829
104 lines
3.8 KiB
Python
104 lines
3.8 KiB
Python
#!/usr/bin/env python3
|
|
"""Register a runtime parent with the lease broker, then exec without changing PID."""
|
|
|
|
from __future__ import annotations
|
|
|
|
import argparse
|
|
import json
|
|
import os
|
|
import socket
|
|
import sys
|
|
from collections.abc import Callable, Mapping, Sequence
|
|
from pathlib import Path
|
|
from typing import Final
|
|
|
|
MAX_FRAME: Final = 64 * 1024
|
|
BROKER_TIMEOUT_SECONDS: Final = 1.5
|
|
CLAUDE_DANGEROUS_FLAG: Final = "--dangerously-skip-permissions"
|
|
|
|
|
|
def broker_request(socket_path: Path, request: dict[str, object]) -> dict[str, object]:
|
|
payload = (json.dumps(request, separators=(",", ":")) + "\n").encode()
|
|
response = bytearray()
|
|
with socket.socket(socket.AF_UNIX, socket.SOCK_STREAM) as connection:
|
|
connection.settimeout(BROKER_TIMEOUT_SECONDS)
|
|
connection.connect(str(socket_path))
|
|
connection.sendall(payload)
|
|
connection.shutdown(socket.SHUT_WR)
|
|
while len(response) <= MAX_FRAME:
|
|
chunk = connection.recv(min(4096, MAX_FRAME + 1 - len(response)))
|
|
if not chunk:
|
|
break
|
|
response.extend(chunk)
|
|
if len(response) > MAX_FRAME or not response.endswith(b"\n"):
|
|
raise ValueError("invalid broker reply")
|
|
value = json.loads(response)
|
|
if not isinstance(value, dict):
|
|
raise ValueError("invalid broker reply")
|
|
return value
|
|
|
|
|
|
def main(
|
|
argv: Sequence[str] | None = None,
|
|
*,
|
|
environ: Mapping[str, str] | None = None,
|
|
request: Callable[[Path, dict[str, object]], dict[str, object]] = broker_request,
|
|
execute: Callable[[str, list[str], dict[str, str]], object] = os.execvpe,
|
|
) -> int:
|
|
parser = argparse.ArgumentParser()
|
|
parser.add_argument("--runtime", required=True, choices=("claude", "pi"))
|
|
parser.add_argument("--dangerous", action="store_true")
|
|
parser.add_argument("command", nargs=argparse.REMAINDER)
|
|
arguments = parser.parse_args(argv)
|
|
command = arguments.command
|
|
if command and command[0] == "--":
|
|
command = command[1:]
|
|
if not command:
|
|
print("lease-gated runtime command is required", file=sys.stderr)
|
|
return 64
|
|
if arguments.dangerous:
|
|
if arguments.runtime != "claude" or Path(command[0]).name != "claude":
|
|
print("dangerous mode is supported only for the Claude runtime", file=sys.stderr)
|
|
return 64
|
|
command = [command[0], CLAUDE_DANGEROUS_FLAG, *command[1:]]
|
|
|
|
source_environment = os.environ if environ is None else environ
|
|
try:
|
|
socket_path = Path(source_environment["MOSAIC_LEASE_BROKER_SOCKET"])
|
|
generation = int(source_environment.get("MOSAIC_RUNTIME_GENERATION", "1"))
|
|
if generation < 0:
|
|
raise ValueError("invalid generation")
|
|
reply = request(
|
|
socket_path,
|
|
{
|
|
"action": "register_anchor",
|
|
"runtime_generation": generation,
|
|
},
|
|
)
|
|
session_id = reply.get("session_id")
|
|
if (
|
|
reply.get("ok") is not True
|
|
or not isinstance(session_id, str)
|
|
or len(session_id) != 64
|
|
or any(character not in "0123456789abcdef" for character in session_id)
|
|
):
|
|
raise ValueError("registration refused")
|
|
except (KeyError, ValueError, OSError, json.JSONDecodeError):
|
|
print("Mosaic lease broker registration failed; runtime launch denied.", file=sys.stderr)
|
|
return 1
|
|
|
|
environment = dict(source_environment)
|
|
environment["MOSAIC_LEASE_SESSION_ID"] = session_id
|
|
environment["MOSAIC_RUNTIME_GENERATION"] = str(generation)
|
|
environment["MOSAIC_LEASE_RUNTIME"] = arguments.runtime
|
|
try:
|
|
execute(command[0], command, environment)
|
|
except OSError:
|
|
print("Mosaic lease-gated runtime exec failed.", file=sys.stderr)
|
|
return 1
|
|
return 0
|
|
|
|
|
|
if __name__ == "__main__":
|
|
raise SystemExit(main())
|