skills/pbakaus_impeccable
1
0
Fork 0
mirror of https://github.com/pbakaus/impeccable.git synced 2026-09-12 14:16:28 +03:00
Code Issues Packages Projects Releases Wiki Activity

Oracle: mask the binary path before HOME; export launcher env to the binary

Browse Source 
Prepared with AI assistance (Claude Code).
This commit is contained in:
Paul Bakaus
2026-08-31 19:56:22 -07:00
parent 577dce4323
commit d1135b9764
1 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/oracle/lib.mjs
+7 -4
View File
@@ -90,6 +90,11 @@ export function stageWorkspace(name) {
export function normalize(text, { ws, home = os.homedir() }) {
if (typeof text !== 'string') return text;
let out = text;
// The binary's own path first: it may sit under $HOME or the repo.
if (process.env.IMPECCABLE_BIN) {
const bin = process.env.IMPECCABLE_BIN;
for (const form of [`'${bin}'`, `"${bin}"`, bin]) out = out.split(form).join('<IMPECCABLE>');
}
let wsReal = null;
try { wsReal = ws ? fs.realpathSync(ws) : null; } catch { /* staged dir already gone */ }
for (const [needle, tag] of [
@@ -104,10 +109,6 @@ export function normalize(text, { ws, home = os.homedir() }) {
// Self-referential command lines: the JS prints "node <scripts>/<verb>.mjs", the
// binary prints "<bin> <verb>". Both collapse to "<IMPECCABLE> <verb>".
out = out.replace(/node ['"]?<REPO>\/skill\/scripts\/([a-z-]+)\.mjs['"]?/g, (m, v) => `<IMPECCABLE> ${v === 'context-signals' ? 'signals' : v === 'hook-admin' ? 'hooks' : v}`);
if (process.env.IMPECCABLE_BIN) {
const bin = process.env.IMPECCABLE_BIN;
for (const form of [`'${bin}'`, `"${bin}"`, bin]) out = out.split(form).join('<IMPECCABLE>');
}
// context.mjs probes `which cwebp/sips/magick/ffmpeg`; the set found is a
// property of the recording machine, not of the implementation.
out = out.replace(/IMAGE_TOOLS: available image converters on this machine: [^.]*\. Use the first suitable one; never probe again this session\./g, 'IMAGE_TOOLS: <IMAGE_TOOLS_PROBE>');
@@ -270,6 +271,8 @@ function buildInvocation(c, { impl, bin, ws, isolatedHome }) {
IMPECCABLE_NO_TELEMETRY: '1',
DO_NOT_TRACK: '1',
...(c.isolateHome === false ? {} : { HOME: isolatedHome, USERPROFILE: isolatedHome }),
// What the launcher exports for the binary (see launcher/impeccable in the engine repo).
...(impl === 'bin' ? { IMPECCABLE_SKILL_DIR: path.join(REPO_ROOT, 'skill'), IMPECCABLE_SELF: bin } : {}),
...Object.fromEntries(Object.entries(c.env || {}).map(([k, v]) => [k, v == null ? v : sub(v)])),
};
for (const [k, v] of Object.entries(env)) if (v == null) delete env[k];