* test(#3023): failing-first guard — pi must not stage hooks in its reserved dir pi reserves <configDir>/hooks as its deprecated extension location and warns on every startup when it exists. Assert a pi install stages the shared hook bundle under gsd-hooks/ instead, manifests it there, and never creates hooks/. Also adds pi to the local-scope dir table in install-shared.cjs: pi was in RUNTIME_META but not LOCAL_DIR_NAME, so scope:'local' resolved path.join(root, undefined) and no local pi install could be exercised. Fails before the fix. Verified via the remote runner. * fix(#3023): stage pi's shared hook bundle outside pi's reserved hooks/ dir pi reserves <configDir>/hooks as its now-deprecated extension location and warns on every startup when that directory merely exists — checkDeprecatedExtensionDirs() guards the warning with a bare existsSync(), unlike its tools/ sibling. GSD staged its shared hook bundle exactly there, and pi's advised remediation (move it to extensions/) would break the adapter's paths and expose GSD's .js helpers to pi's extension auto-discovery. The bundle directory name is now runtime-descriptor-driven: hostBehaviors .sharedHooksDirName, defaulting to 'hooks' so all 18 other runtimes are byte-identical. pi sets 'gsd-hooks'. The name is validated as a single path segment — separators, dot-only segments, trailing dots, absolute paths, NUL, and Windows reserved device names all fall back to the default, because the value is joined onto a user's config root and written to. Renamed in place rather than relocated: hook scripts resolve siblings via __dirname/.., so a depth change would silently break them. - install / uninstall / manifest sites all read the resolved name - pi/gsd.cjs probes gsd-hooks then hooks, so dev checkouts and half-upgraded trees still resolve; the never-throws contract is preserved - new migration 009 retires the legacy pi hooks/ dir on upgrade, using a new non-recursive remove-empty-dir engine primitive (rmdirSync only, symlink-refusing, containment-guarded); ADR-0008 amended accordingly - fixes two latent name-dependencies the rename exposed: the stale-hook scan and the injection scanner's self-exclusion both hardcoded 'hooks' Verified on the remote runner. Closes #3023 * fix(#3023): close review findings and align emitted provenance with the rename Adversarial review found two defects, and the remote runner found four failure clusters. All fixed here. Review BLOCKER — detect-custom-files was blind to the renamed bundle. GSD_PREFIX_MANAGED_DIRS in gsd-tools.cjs hardcoded 'hooks', so for pi the whole gsd-hooks/ tree was invisible to the custom-file scan and user-added files there were never backed up before the next update's clean-install wipe. The dir set now resolves via the .gsd-runtime marker plus the shipped capability registry (never bin/install.js, which is not shipped into installed trees), and falls back to scanning every known candidate when the runtime cannot be determined — over-scanning is safe, under-scanning is the data loss. Review MAJOR — the pi adapter bound to an empty bundle. resolveSharedHooksDir accepted any directory, so an interrupted install left gsd-hooks/ winning over a fully-staged legacy hooks/ and every hook silently no-opped. A candidate now qualifies only if it is non-empty. Remote-runner clusters: - emitted-provenance had no rule for the gsd-hooks/ family; added two pi-scoped rules pointing at the same sources the existing hooks/ rules use. The table is total, so an unattributed family is a hard failure by design. - pi tests in install-minimal-hooks and the install integration suite asserted the old layout; updated to derive the dir name from the descriptor rather than hardcoding either name. - 19 unrelated-looking failures on node22 only were a leaked fs mock: t.after() runs in registration order, cleanup was registered before mock.restoreAll(), and node22's JS rimraf calls the public fs.rmdirSync while node24's native path does not — so the EACCES stub leaked process-wide on one lane. Restore now runs first. Verified on the remote runner. * fix(#3023): honor PI_CODING_AGENT_DIR, ack the rename ripple, fix expandTilde pi resolves its agent dir as PI_CODING_AGENT_DIR ?? ~/<CONFIG_DIR_NAME>/agent (packages/coding-agent/src/config.ts). GSD's pi descriptor declared an empty configHome.env, so a user with that variable set had GSD installed where pi never looks. Added the env name; the dot-home-nested resolver already handled the override, so no resolver logic changed. Also fixes expandTilde in the shared runtime-homes resolver, found while adding that: it hardcoded os.homedir() and ignored the opts.home every caller threads, so EVERY runtime's tilde-valued env override (claude, antigravity, windsurf, pi) silently resolved against the real home. That is a correctness bug and a test-escape hazard — a sandboxed test asserting on a tilde override reached the developer's actual home directory. Now threaded through every branch; behavior with no injected home is unchanged. Adds the emitted-drift ack fragment for the 58 pi paths whose emitted location moved with the rename. The provenance rules satisfy the totality gate; the differential gate needs the ack because the hook sources are byte-unchanged — only the installer's target directory moved. The two hook files this branch genuinely edits stay attributed and are not double-acked. Note on piConfig.configDir: it is read from pi's OWN installed package.json (getPackageDir walks up from pi's __dirname), alongside piConfig.name — a white-label setting for a redistributed pi fork, not a per-project user setting. Documented accordingly rather than treated as an unsupported override. Verified on the remote runner. * fix(#3023): reject blank env overrides, pin adapter/descriptor parity Three review findings, all fixed. A whitespace-only config-dir override was accepted verbatim: the guard was `if (val)`, falsy only for the empty string, so PI_CODING_AGENT_DIR=' ' resolved to a literal three-space directory name instead of falling back to the descriptor default. Fixed across every env-consuming branch — dot-home, dot-home-nested, all three xdg steps, and generic-agents-root — not just pi's. Non-blank values are still never trimmed, so '~/My Agent Dir' keeps working. pi/gsd.cjs's probe list and the descriptor were two independent sources of truth for the bundle directory name; a future rename would have desynced them silently and left every pi hook quiet with no error. The probe list stays deliberate — it must resolve in a dev checkout and a half-upgraded tree, where the registry's answer would be wrong — so this adds the parity assertion the repo's generative-fix-divergence rule calls for: the descriptor value must be the FIRST candidate, and the default must remain present. Changeset body rewritten to cover the two later user-facing fixes it had not caught up with. Verified on the remote runner. * chore(#3023): backfill changeset PR number * fix(#3023): anchor injection-scan patterns and fix a macOS detection hole CI's security job flagged CONTEXT.md:124 — pre-existing prose reading 'not the same fact as a genuinely empty or absent one'. The match was the 'act as a' INSIDE 'f-act as a': the pattern had no left word boundary, so any word ending in act tripped it (fact, impact, contract, artifact, interact, redact, abstract). My four-line CONTEXT.md edit dragged the latent false positive into this PR because the scan is diff-scoped by file but reads whole files. Anchored with (^|[^[:alnum:]]) rather than rewording maintainer-owned prose, which would have left the class alive for the next PR touching any file saying 'fact as a'. Auditing the rest of the list for the same class surfaced a real detection hole: the eval/exec/Function patterns matched a quote via \x27, a GNU-grep-only hex escape. BSD/macOS grep reads it as four literal characters, so single-quoted eval('...')/exec('...') payloads were NEVER detected there while passing on GNU-grep CI. Replaced with a literal apostrophe class. Boundaries were added only where a real word-suffix collision exists; exec, jailbreak, developer mode and the role-manipulation family were audited and deliberately left unanchored. 22 new cases cover both directions — the false positives now scan clean, and every real payload still fires, including the quote/punctuation/start-of-line boundary forms. Also builds this branch's injection test fixture at runtime instead of carrying the literal phrase, so the payload keeps its teeth without tripping the scan. Verified on the remote runner. --------- Co-authored-by: sim <sim@local>
117 lines
5.2 KiB
JavaScript
117 lines
5.2 KiB
JavaScript
'use strict';
|
|
|
|
/**
|
|
* pi PI_CODING_AGENT_DIR override (#3023).
|
|
*
|
|
* pi's real source (`earendil-works/pi`, `packages/coding-agent/src/config.ts`)
|
|
* reads `PI_CODING_AGENT_DIR` to override its GLOBAL agent dir outright:
|
|
*
|
|
* export function getAgentDir(): string {
|
|
* const envDir = process.env[ENV_AGENT_DIR]; // PI_CODING_AGENT_DIR
|
|
* if (envDir) return expandTildePath(envDir);
|
|
* return join(homedir(), CONFIG_DIR_NAME, "agent");
|
|
* }
|
|
*
|
|
* `capabilities/pi/capability.json`'s `runtime.configHome` previously declared
|
|
* `env: []` (empty), so a user who had set `PI_CODING_AGENT_DIR` got GSD
|
|
* installed to the DEFAULT `~/.pi/agent` — a path pi never reads. The fix adds
|
|
* `PI_CODING_AGENT_DIR` to that array; `resolveConfigHomeFromDescriptor`'s
|
|
* existing `dot-home-nested` env-override branch (already exercised by
|
|
* antigravity/windsurf) requires no new code.
|
|
*
|
|
* Unit-level (`resolveConfigHomeFromDescriptor`) coverage lives in
|
|
* tests/runtime-homes-descriptor-drive.test.cjs, describe block
|
|
* "#3023: pi PI_CODING_AGENT_DIR". This file drives the real, spawned
|
|
* installer end-to-end so the env var is proven to redirect the actual
|
|
* install output, not just the pure resolver function.
|
|
*
|
|
* `capitalConfigDir`/`piConfig.configDir` (pi's OTHER override — a
|
|
* project-`package.json` field that renames the `.pi` segment itself, for
|
|
* both local and global scope) is NOT implemented here: GSD's descriptor
|
|
* vocabulary has no existing mechanism for a runtime whose config-dir name is
|
|
* sourced from a project's own `package.json` (reported to the orchestrator
|
|
* separately; out of scope for this change).
|
|
*/
|
|
|
|
const { test, describe, before } = require('node:test');
|
|
const assert = require('node:assert/strict');
|
|
const fs = require('node:fs');
|
|
const path = require('node:path');
|
|
const { spawnSync } = require('node:child_process');
|
|
|
|
const { INSTALL_SCRIPT, installerEnv, BUILD_SCRIPT } = require('./helpers/install-shared.cjs');
|
|
const { cleanup, createTempDir } = require('./helpers.cjs');
|
|
|
|
// hooks/dist is gitignored and built (DEFECT.HOOKS-DIST-SCOPED-CI): a scoped CI
|
|
// lane does not run build:hooks first, so a real --pi --global install there
|
|
// would emit no gsd-hooks/ dir. Build idempotently before spawning, exactly as
|
|
// the golden/emitted-attribution harnesses do.
|
|
function ensureHooksBuilt() {
|
|
spawnSync(process.execPath, [BUILD_SCRIPT], { encoding: 'utf-8', stdio: 'pipe', timeout: 120_000 });
|
|
}
|
|
|
|
/** Spawn the real installer for --pi --global against a fresh sandbox HOME,
|
|
* WITHOUT --config-dir, so the runtime's own configHome resolution (default
|
|
* or env-var override) is exactly what places the install. */
|
|
function runPiGlobalInstall(home, extraEnv = {}) {
|
|
const result = spawnSync(process.execPath, [INSTALL_SCRIPT, '--pi', '--global'], {
|
|
cwd: home,
|
|
encoding: 'utf8',
|
|
timeout: 120_000,
|
|
env: installerEnv({ HOME: home, USERPROFILE: home, ...extraEnv }),
|
|
});
|
|
assert.strictEqual(result.status, 0,
|
|
`installer exited with status ${result.status}\nstdout: ${result.stdout}\nstderr: ${result.stderr}`);
|
|
return result;
|
|
}
|
|
|
|
function sandboxHome(t, prefix = 'gsd-3023-pi-envdir-') {
|
|
const dir = createTempDir(prefix);
|
|
t.after(() => cleanup(dir));
|
|
return dir;
|
|
}
|
|
|
|
describe('#3023: --pi --global honors PI_CODING_AGENT_DIR', () => {
|
|
before(() => ensureHooksBuilt());
|
|
|
|
test('PI_CODING_AGENT_DIR unset -> installs at the default ~/.pi/agent', (t) => {
|
|
const home = sandboxHome(t);
|
|
runPiGlobalInstall(home);
|
|
|
|
const defaultDir = path.join(home, '.pi', 'agent');
|
|
assert.ok(fs.existsSync(path.join(defaultDir, 'gsd-file-manifest.json')),
|
|
'default install must land under ~/.pi/agent when the env var is unset');
|
|
});
|
|
|
|
test('PI_CODING_AGENT_DIR set -> installs at the overridden path, not ~/.pi/agent', (t) => {
|
|
const home = sandboxHome(t);
|
|
const altAgentDir = sandboxHome(t, 'gsd-3023-pi-envdir-alt-');
|
|
runPiGlobalInstall(home, { PI_CODING_AGENT_DIR: altAgentDir });
|
|
|
|
assert.ok(fs.existsSync(path.join(altAgentDir, 'gsd-file-manifest.json')),
|
|
'install must land at the PI_CODING_AGENT_DIR override');
|
|
assert.ok(!fs.existsSync(path.join(home, '.pi')),
|
|
'the default ~/.pi tree must not be created when the env var redirects the install');
|
|
});
|
|
|
|
test('PI_CODING_AGENT_DIR with a tilde expands against the sandbox HOME', (t) => {
|
|
const home = sandboxHome(t);
|
|
runPiGlobalInstall(home, { PI_CODING_AGENT_DIR: '~/pi-alt-agent' });
|
|
|
|
const expanded = path.join(home, 'pi-alt-agent');
|
|
assert.ok(fs.existsSync(path.join(expanded, 'gsd-file-manifest.json')),
|
|
'a tilde-prefixed PI_CODING_AGENT_DIR must expand against HOME, matching pi\'s own expandTildePath');
|
|
assert.ok(!fs.existsSync(path.join(home, '.pi')),
|
|
'the default ~/.pi tree must not be created when the env var redirects the install');
|
|
});
|
|
|
|
test('an empty-string PI_CODING_AGENT_DIR falls back to the default, never a bogus path', (t) => {
|
|
const home = sandboxHome(t);
|
|
runPiGlobalInstall(home, { PI_CODING_AGENT_DIR: '' });
|
|
|
|
const defaultDir = path.join(home, '.pi', 'agent');
|
|
assert.ok(fs.existsSync(path.join(defaultDir, 'gsd-file-manifest.json')),
|
|
'an empty-string override must be treated as unset and fall back to ~/.pi/agent');
|
|
});
|
|
});
|