@ai21/gateway 0.6.0 → 1.0.0

package/dist/login/credentials.js

@@ -1,12 +1,33 @@
 /**
- * Where a signed-in session lives between runs: one owner-only file holding a Firebase
- * refresh token, which is long-lived and acts as the user. Keyed by gateway URL, so a
- * staging or local session cannot be handed to production.
+ * The signed-in session on disk: one owner-only file, keyed by gateway URL so a staging
+ * session is never used against production.
+ *
+ * Metadata (who, which workspace, when) goes through `load`/`save`. Secrets go through a
+ * `SecretStore`; `fileSecretStore` keeps them in this same file, in the flat shape
+ * earlier releases read. Since both write one file, every write merges into the entry.
  */
-import { chmodSync, mkdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
+import { windowsFileAcl } from "./fileAcl.js";
+import { withLock } from "./lock.js";
 const DIR_MODE = 0o700;
 const FILE_MODE = 0o600;
+const platformAcl = process.platform === "win32" ? windowsFileAcl() : undefined;
+function aclFor(ctx) {
+    return ctx.acl ?? platformAcl;
+}
+/** One command reads the file several times; one warning per problem is enough. */
+const warned = new WeakMap();
+function warnOnce(ctx, message) {
+    if (ctx.warn === undefined)
+        return;
+    const seen = warned.get(ctx.warn) ?? new Set();
+    warned.set(ctx.warn, seen);
+    if (seen.has(message))
+        return;
+    seen.add(message);
+    ctx.warn(message);
+}
 export function credentialsPath(ctx) {
     return join(ctx.home, ".config", "ai21-gateway", "credentials.json");
 }
@@ -21,37 +42,60 @@ function readFile(path) {
         return undefined;
     }
 }
+/** Checks metadata only; the caller asks the `SecretStore` whether the secrets exist. */
 function isComplete(value) {
     if (typeof value !== "object" || value === null)
         return false;
     const c = value;
-    return (typeof c["refreshToken"] === "string" &&
-        typeof c["firebaseApiKey"] === "string" &&
+    return (typeof c["firebaseApiKey"] === "string" &&
         typeof c["projectId"] === "string" &&
         typeof c["userId"] === "string" &&
         typeof c["userEmail"] === "string");
 }
-export function load(gateway, ctx) {
-    const path = credentialsPath(ctx);
+/** The owner-only check, shared by every read of the file. */
+function unreadableReason(path, ctx) {
     let mode;
     try {
         mode = statSync(path).mode & 0o777;
     }
     catch {
-        return { kind: "none" };
+        return undefined;
+    }
+    // Checked on read too: the file may predate this version or have been copied in, and a
+    // readable refresh token is another local user's session.
+    const acl = aclFor(ctx);
+    if (acl !== undefined)
+        return aclReason(path, acl, ctx);
+    if ((mode & 0o077) !== 0) {
+        return `${path} is readable by other users (mode ${mode.toString(8)}). Run \`chmod 600 ${path}\`, or delete it and sign in again.`;
+    }
+    return undefined;
+}
+/** A check that could not run is warned about, not enforced: refusing then would lock out every Windows user whose `icacls` misbehaves. */
+function aclReason(path, acl, ctx) {
+    const inspection = acl.inspect(path);
+    switch (inspection.kind) {
+        case "owner-only":
+            return undefined;
+        case "unknown":
+            warnOnce(ctx, `Could not check who can read ${path}: ${inspection.reason}`);
+            return undefined;
+        case "broader":
+            return (`${path} is readable by other accounts (${inspection.others.join(", ")}). ` +
+                `Run \`icacls "${path}"\` to see who, or delete it and sign in again.`);
+    }
+}
+export function load(gateway, ctx) {
+    const path = credentialsPath(ctx);
+    try {
+        statSync(path);
     }
-    /* Checked on read too: the file may predate this version or have been copied in, and a
-     * readable refresh token is another local user's session.
-     *
-     * Skipped on Windows, which has no POSIX mode: Node reports 0o666 for an ordinary
-     * writable file, so this would refuse every session and advise a `chmod` that does not
-     * exist there. ACLs are the equivalent, and checking them is not this function's job. */
-    if (process.platform !== "win32" && (mode & 0o077) !== 0) {
-        return {
-            kind: "unusable",
-            reason: `${path} is readable by other users (mode ${mode.toString(8)}). Run \`chmod 600 ${path}\`, or delete it and sign in again.`,
-        };
+    catch {
+        return { kind: "none" };
     }
+    const refused = unreadableReason(path, ctx);
+    if (refused !== undefined)
+        return { kind: "unusable", reason: refused };
     const file = readFile(path);
     if (file === undefined) {
         return { kind: "unusable", reason: `${path} is not readable as JSON. Delete it and sign in again.` };
@@ -64,35 +108,99 @@ export function load(gateway, ctx) {
         : { kind: "unusable", reason: `the stored session for ${gateway} is incomplete. Sign in again.` };
 }
 /**
- * Writes one gateway's credential, leaving the others alone. Created at 0600 rather than
- * chmodded after: the gap between the two is openable by another local user.
+ * Restricted while still empty, so the secret is never on disk under a broader ACL;
+ * the truncating write and the rename both keep the DACL. A leftover temp is removed
+ * first, since it would carry its old ACL through that write.
  */
-export function save(gateway, credential, ctx) {
-    const path = credentialsPath(ctx);
-    mkdirSync(dirname(path), { recursive: true, mode: DIR_MODE });
-    const existing = readFile(path) ?? {};
-    const merged = { ...existing, [gateway]: credential };
-    // Temp then rename, so an interrupted write cannot replace a whole session with half of one.
+function writeOwnerOnly(path, content, ctx) {
     const temp = `${path}.tmp`;
-    writeFileSync(temp, `${JSON.stringify(merged, null, 2)}\n`, { mode: FILE_MODE });
+    rmSync(temp, { force: true });
+    writeFileSync(temp, "", { mode: FILE_MODE });
     chmodSync(temp, FILE_MODE);
+    // Warn, not fail: the read-time check refuses the file if it really is shared.
+    const failed = aclFor(ctx)?.restrictToOwner(temp);
+    if (failed !== undefined)
+        warnOnce(ctx, `Could not restrict ${path} to your account: ${failed}`);
+    writeFileSync(temp, `${JSON.stringify(content, null, 2)}\n`);
     renameSync(temp, path);
 }
-/** Forgets one gateway's session. Returns false when there was nothing to forget. */
+/** Sits beside the credentials file, so one lock covers every gateway's entry. */
+export function lockPath(ctx) {
+    return `${credentialsPath(ctx)}.lock`;
+}
+/**
+ * Merges one gateway's entry, leaving the others alone. Created at 0600 rather than
+ * chmodded after: the gap between the two is openable by another local user. Read and
+ * write happen under one lock, or concurrent processes drop each other's entries.
+ */
+function mutate(gateway, ctx, change) {
+    const path = credentialsPath(ctx);
+    mkdirSync(dirname(path), { recursive: true, mode: DIR_MODE });
+    return withLock(lockPath(ctx), () => {
+        const existing = readFile(path) ?? {};
+        const next = change(existing[gateway] ?? {});
+        if (next === undefined)
+            return false;
+        const merged = { ...existing, [gateway]: next };
+        // Temp then rename, so an interrupted write cannot replace a whole session with half of one.
+        writeOwnerOnly(path, merged, ctx);
+        return true;
+    });
+}
+/** The keys the file tier owns as a secret store, and the only ones `save` carries over. */
+const SECRET_NAMES = ["refreshToken", "ai21Key"];
+/**
+ * Replaces the metadata and keeps only the secret fields. Not a blanket merge: an
+ * optional field such as `workspaceId` would otherwise survive from the previous user.
+ */
+export function save(gateway, metadata, ctx) {
+    mutate(gateway, ctx, (entry) => ({
+        ...Object.fromEntries(SECRET_NAMES.filter((name) => name in entry).map((name) => [name, entry[name]])),
+        ...metadata,
+    }));
+}
+/** Keeps secrets in the credentials file itself; the fallback where no keychain is reachable. */
+export function fileSecretStore(ctx) {
+    return {
+        tier: "file",
+        read: (gateway, name) => Promise.resolve(readSecret(gateway, name, ctx)),
+        write: (gateway, name, value) => {
+            mutate(gateway, ctx, (entry) => ({ ...entry, [name]: value }));
+            return Promise.resolve();
+        },
+        forget: (gateway, name) => Promise.resolve(mutate(gateway, ctx, (entry) => (name in entry ? omit(entry, name) : undefined))),
+    };
+}
+function readSecret(gateway, name, ctx) {
+    const path = credentialsPath(ctx);
+    // A file other users can read is not a source of secrets, the same as on load.
+    if (unreadableReason(path, ctx) !== undefined)
+        return undefined;
+    const value = readFile(path)?.[gateway]?.[name];
+    return typeof value === "string" ? value : undefined;
+}
+function omit(entry, name) {
+    return Object.fromEntries(Object.entries(entry).filter(([key]) => key !== name));
+}
+/**
+ * Removes one gateway's entry from this file. Returns false when there was none.
+ * Secrets held by another tier are not touched; forget them through the store.
+ */
 export function clear(gateway, ctx) {
     const path = credentialsPath(ctx);
-    const existing = readFile(path);
-    if (existing === undefined || existing[gateway] === undefined)
+    if (!existsSync(path))
         return false;
-    const rest = Object.fromEntries(Object.entries(existing).filter(([key]) => key !== gateway));
-    if (Object.keys(rest).length === 0) {
-        rmSync(path, { force: true });
+    return withLock(lockPath(ctx), () => {
+        const existing = readFile(path);
+        if (existing === undefined || existing[gateway] === undefined)
+            return false;
+        const rest = Object.fromEntries(Object.entries(existing).filter(([key]) => key !== gateway));
+        if (Object.keys(rest).length === 0) {
+            rmSync(path, { force: true });
+            return true;
+        }
+        writeOwnerOnly(path, rest, ctx);
         return true;
-    }
-    const temp = `${path}.tmp`;
-    writeFileSync(temp, `${JSON.stringify(rest, null, 2)}\n`, { mode: FILE_MODE });
-    chmodSync(temp, FILE_MODE);
-    renameSync(temp, path);
-    return true;
+    });
 }
 //# sourceMappingURL=credentials.js.map

package/dist/login/credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/login/credentials.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1G,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,SAAS,GAAG,KAAK,CAAC;AAkBxB,MAAM,UAAU,eAAe,CAAC,GAAoB;IAClD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;AACvE,CAAC;AAWD,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAE/D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5E,CAAC,CAAE,MAAyB;YAC5B,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAE9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAE3C,OAAO,CACL,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,QAAQ;QACrC,OAAO,CAAC,CAAC,gBAAgB,CAAC,KAAK,QAAQ;QACvC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ;QAClC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,CACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,OAAe,EAAE,GAAoB;IACxD,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAElC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED;;;;;6FAKyF;IACzF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,GAAG,IAAI,qCAAqC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,IAAI,qCAAqC;SACpI,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,wDAAwD,EAAE,CAAC;IACvG,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAEjD,OAAO,UAAU,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE;QAC3C,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,0BAA0B,OAAO,gCAAgC,EAAE,CAAC;AACtG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,IAAI,CAAC,OAAe,EAAE,UAA4B,EAAE,GAAoB;IACtF,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE9D,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,MAAM,GAAmB,EAAE,GAAG,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IAEtE,6FAA6F;IAC7F,MAAM,IAAI,GAAG,GAAG,IAAI,MAAM,CAAC;IAC3B,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACjF,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3B,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,KAAK,CAAC,OAAe,EAAE,GAAoB;IACzD,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAE5E,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC;IAC7F,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,IAAI,MAAM,CAAC;IAC3B,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/E,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3B,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEvB,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/login/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,cAAc,EAAgB,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGrC,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,SAAS,GAAG,KAAK,CAAC;AAsBxB,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAEhF,SAAS,MAAM,CAAC,GAAoB;IAClC,OAAO,GAAG,CAAC,GAAG,IAAI,WAAW,CAAC;AAChC,CAAC;AAED,mFAAmF;AACnF,MAAM,MAAM,GAAG,IAAI,OAAO,EAA0C,CAAC;AAErE,SAAS,QAAQ,CAAC,GAAoB,EAAE,OAAe;IACrD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO;IAEnC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;IACvD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IAE9B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAoB;IAClD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;AACvE,CAAC;AAYD,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAE/D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5E,CAAC,CAAE,MAAyB;YAC5B,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAE9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAE3C,OAAO,CACL,OAAO,CAAC,CAAC,gBAAgB,CAAC,KAAK,QAAQ;QACvC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ;QAClC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,CACnC,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,SAAS,gBAAgB,CAAC,IAAY,EAAE,GAAoB;IAC1D,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,uFAAuF;IACvF,0DAA0D;IAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAExD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,IAAI,qCAAqC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,IAAI,qCAAqC,CAAC;IACrI,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,2IAA2I;AAC3I,SAAS,SAAS,CAAC,IAAY,EAAE,GAAY,EAAE,GAAoB;IACjE,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,YAAY;YACf,OAAO,SAAS,CAAC;QACnB,KAAK,SAAS;YACZ,QAAQ,CAAC,GAAG,EAAE,gCAAgC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YAE5E,OAAO,SAAS,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,CACL,GAAG,IAAI,mCAAmC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;gBAC3E,iBAAiB,IAAI,iDAAiD,CACvE,CAAC;IACN,CAAC;AACH,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,OAAe,EAAE,GAAoB;IACxD,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAElC,IAAI,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAExE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,wDAAwD,EAAE,CAAC;IACvG,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAEjD,OAAO,UAAU,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE;QAC3C,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,0BAA0B,OAAO,gCAAgC,EAAE,CAAC;AACtG,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,OAAuB,EAAE,GAAoB;IACjF,MAAM,IAAI,GAAG,GAAG,IAAI,MAAM,CAAC;IAC3B,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7C,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAE3B,+EAA+E;IAC/E,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,SAAS;QAAE,QAAQ,CAAC,GAAG,EAAE,sBAAsB,IAAI,qBAAqB,MAAM,EAAE,CAAC,CAAC;IAEjG,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7D,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,QAAQ,CAAC,GAAoB;IAC3C,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,SAAS,MAAM,CAAC,OAAe,EAAE,GAAoB,EAAE,MAA2C;IAChG,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAElC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE9D,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE;QAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAE7C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAErC,MAAM,MAAM,GAAmB,EAAE,GAAG,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;QAEhE,6FAA6F;QAC7F,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAElC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4FAA4F;AAC5F,MAAM,YAAY,GAA0B,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;AAExE;;;GAGG;AACH,MAAM,UAAU,IAAI,CAAC,OAAe,EAAE,QAAwB,EAAE,GAAoB;IAClF,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/B,GAAG,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtG,GAAG,QAAQ;KACZ,CAAC,CAAC,CAAC;AACN,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,eAAe,CAAC,GAAoB;IAClD,OAAO;QACL,IAAI,EAAE,MAAM;QAEZ,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAExE,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAE/D,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CACxB,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;KACpG,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAAgB,EAAE,GAAoB;IACzE,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,+EAA+E;IAC/E,IAAI,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAEhE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAEhD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,IAAI,CAAC,KAAY,EAAE,IAAgB;IAC1C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAC,OAAe,EAAE,GAAoB;IACzD,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAEpC,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE;QAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAE5E,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC;QAC7F,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAE9B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAEhC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/login/fileAcl.d.ts

@@ -0,0 +1,29 @@
+import { type SyncCommandRunner } from "./keychain/runner.js";
+export type AclInspection = {
+    readonly kind: "owner-only";
+} | {
+    readonly kind: "broader";
+    readonly others: readonly string[];
+}
+/** The check itself could not run; callers must not treat this as a violation. */
+ | {
+    readonly kind: "unknown";
+    readonly reason: string;
+};
+export interface FileAcl {
+    /** Returns why it failed, or undefined on success. Never throws: a write must not fail on this. */
+    restrictToOwner(path: string): string | undefined;
+    inspect(path: string): AclInspection;
+}
+/** Reads the SID from `whoami /user`, whose CSV form is `"host\user","S-1-5-21-..."`. */
+export declare function parseUserSid(stdout: string): string | undefined;
+/**
+ * Which SIDs the DACL grants anything to, other than `userSid` and the trusted set.
+ * Deny and inherit-only entries grant nothing to this file and are skipped.
+ * Undefined when the text holds no DACL at all.
+ *
+ * A conditional or callback ACE (`X*`, `Z*`) counts as broader whoever it names: its
+ * nested parentheses end the parse, so the entries after it go unread.
+ */
+export declare function grantsBeyond(sddl: string, userSid: string): readonly string[] | undefined;
+export declare function windowsFileAcl(run?: SyncCommandRunner): FileAcl;

package/dist/login/fileAcl.js

@@ -0,0 +1,129 @@
+/**
+ * The Windows arm of "owner-only". NTFS has no POSIX mode, so a `0600` write
+ * protects nothing there; the equivalent is a DACL naming only the current user.
+ *
+ * Synchronous because it runs inside the credentials-file lock, which is.
+ */
+import { mkdtempSync, readFileSync, rmSync, statSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join, win32 } from "node:path";
+import { failureReason, runCredentialCommandSync } from "./keychain/runner.js";
+/** A local call; long only because Windows Defender can stall a first spawn. */
+const ACL_TIMEOUT_MS = 10_000;
+/** Absolute, because Windows searches the current directory before PATH. */
+function system32(tool) {
+    return win32.join(process.env["SystemRoot"] ?? "C:\\Windows", "System32", tool);
+}
+/**
+ * Principals that may hold access besides the user, as root can read a `0600` file.
+ * Both forms, since SDDL abbreviates well-known SIDs.
+ */
+const TRUSTED = new Set(["SY", "S-1-5-18", "BA", "S-1-5-32-544"]);
+/** Reads the SID from `whoami /user`, whose CSV form is `"host\user","S-1-5-21-..."`. */
+export function parseUserSid(stdout) {
+    return /"(S-1-[0-9-]+)"\s*$/m.exec(stdout)?.[1];
+}
+/** SDDL writes the machine's built-in Administrator and Guest accounts as aliases, not SIDs. */
+const ACCOUNT_ALIASES = { LA: "-500", LG: "-501" };
+function isUser(sid, userSid) {
+    const rid = ACCOUNT_ALIASES[sid];
+    return sid === userSid || (rid !== undefined && userSid.endsWith(rid));
+}
+/**
+ * Which SIDs the DACL grants anything to, other than `userSid` and the trusted set.
+ * Deny and inherit-only entries grant nothing to this file and are skipped.
+ * Undefined when the text holds no DACL at all.
+ *
+ * A conditional or callback ACE (`X*`, `Z*`) counts as broader whoever it names: its
+ * nested parentheses end the parse, so the entries after it go unread.
+ */
+export function grantsBeyond(sddl, userSid) {
+    const dacl = /D:([A-Z_]*)((?:\([^)]*\))*)/.exec(sddl);
+    if (dacl === null)
+        return undefined;
+    // A null DACL: no access control at all, so everyone has full access.
+    if (dacl[1].includes("NO_ACCESS_CONTROL"))
+        return ["WD"];
+    const others = new Set();
+    for (const [, ace] of dacl[2].matchAll(/\(([^)]*)\)/g)) {
+        const [type = "", flags = "", , , , sid = ""] = ace.split(";");
+        const conditional = /^[XZ]/.test(type);
+        if (!conditional && (type.includes("D") || flags.includes("IO")))
+            continue;
+        if (conditional || (!isUser(sid, userSid) && !TRUSTED.has(sid)))
+            others.add(sid);
+    }
+    return [...others];
+}
+export function windowsFileAcl(run = runCredentialCommandSync) {
+    let userSid;
+    // One command reads the file several times, at two processes per inspection.
+    const inspected = new Map();
+    const currentUser = () => {
+        if (userSid !== undefined)
+            return userSid;
+        const outcome = run(system32("whoami.exe"), ["/user", "/fo", "csv", "/nh"], { timeoutMs: ACL_TIMEOUT_MS });
+        const sid = outcome.code === 0 ? parseUserSid(outcome.stdout) : undefined;
+        if (sid === undefined)
+            throw new Error(`could not identify the current user (whoami: ${failureReason(outcome)})`);
+        userSid = sid;
+        return sid;
+    };
+    const icacls = (args) => {
+        const outcome = run(system32("icacls.exe"), args, { timeoutMs: ACL_TIMEOUT_MS });
+        if (outcome.code !== 0)
+            throw new Error(`icacls: ${failureReason(outcome)}`);
+    };
+    return {
+        restrictToOwner(path) {
+            try {
+                // `*SID` rather than a name: names are localised and may not round-trip through a console codepage.
+                icacls([path, "/inheritance:r", "/grant:r", `*${currentUser()}:F`]);
+                return undefined;
+            }
+            catch (err) {
+                return err.message;
+            }
+        },
+        inspect(path) {
+            // A rewrite renames in a new file, and an ACL edit moves ctime, so either invalidates this.
+            let version;
+            try {
+                const { ino, ctimeMs } = statSync(path);
+                version = `${ino}:${ctimeMs}`;
+            }
+            catch {
+                // Unreadable here is left to icacls to report.
+            }
+            const cached = inspected.get(path);
+            if (version !== undefined && cached?.version === version)
+                return cached.result;
+            const result = inspectNow(path);
+            if (version !== undefined && result.kind !== "unknown")
+                inspected.set(path, { version, result });
+            return result;
+        },
+    };
+    function inspectNow(path) {
+        // `/save` is the only icacls output with raw SIDs, and it writes only to a file.
+        let scratch;
+        try {
+            const sid = currentUser();
+            scratch = mkdtempSync(join(tmpdir(), "ai21-gateway-acl-"));
+            const saved = join(scratch, "acl");
+            icacls([path, "/save", saved]);
+            const others = grantsBeyond(readFileSync(saved, "utf16le"), sid);
+            if (others === undefined)
+                return { kind: "unknown", reason: "icacls /save wrote no DACL" };
+            return others.length === 0 ? { kind: "owner-only" } : { kind: "broader", others };
+        }
+        catch (err) {
+            return { kind: "unknown", reason: err.message };
+        }
+        finally {
+            if (scratch !== undefined)
+                rmSync(scratch, { recursive: true, force: true });
+        }
+    }
+}
+//# sourceMappingURL=fileAcl.js.map

package/dist/login/fileAcl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileAcl.js","sourceRoot":"","sources":["../../src/login/fileAcl.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAA0B,MAAM,sBAAsB,CAAC;AAEvG,gFAAgF;AAChF,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,4EAA4E;AAC5E,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;AAclE,yFAAyF;AACzF,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,gGAAgG;AAChG,MAAM,eAAe,GAAqC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AAErF,SAAS,MAAM,CAAC,GAAW,EAAE,OAAe;IAC1C,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAEjC,OAAO,GAAG,KAAK,OAAO,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,OAAe;IACxD,MAAM,IAAI,GAAG,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAEpC,sEAAsE;IACtE,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,AAAD,EAAG,AAAD,EAAG,AAAD,EAAG,GAAG,GAAG,EAAE,CAAC,GAAG,GAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QAE3E,IAAI,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAyB,wBAAwB;IAC9E,IAAI,OAA2B,CAAC;IAChC,6EAA6E;IAC7E,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwE,CAAC;IAElG,MAAM,WAAW,GAAG,GAAW,EAAE;QAC/B,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAE1C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;QAC3G,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAElH,OAAO,GAAG,GAAG,CAAC;QAEd,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,IAAuB,EAAQ,EAAE;QAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;QACjF,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC;IAEF,OAAO;QACL,eAAe,CAAC,IAAI;YAClB,IAAI,CAAC;gBACH,oGAAoG;gBACpG,MAAM,CAAC,CAAC,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;gBAEpE,OAAO,SAAS,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAQ,GAAa,CAAC,OAAO,CAAC;YAChC,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI;YACV,4FAA4F;YAC5F,IAAI,OAA2B,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACxC,OAAO,GAAG,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,+CAA+C;YACjD,CAAC;YACD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,EAAE,OAAO,KAAK,OAAO;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC;YAE/E,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAEjG,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;IAEF,SAAS,UAAU,CAAC,IAAY;QAC9B,iFAAiF;QACjF,IAAI,OAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnC,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YAE/B,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;YACjE,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;YAE3F,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACpF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;QAC7D,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/login/keychain/linux.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The Linux tier: the Secret Service, through `secret-tool` from libsecret.
+ *
+ * Usually absent: `libsecret-tools` is not installed by default, and servers, containers
+ * and SSH sessions have no Secret Service on the bus. So the file tier is the normal
+ * outcome on Linux. Availability is presence on PATH, never `secret-tool --version`,
+ * which exits 2. WSL is excluded: it rarely has a session bus.
+ *
+ * The secret goes in on stdin and comes out on stdout unchanged, so unlike macOS it needs
+ * no encoding.
+ */
+import { type PathLookup } from "../../verify.js";
+import type { SecretStore } from "../secretStore.js";
+import { type CommandRunner } from "./runner.js";
+export declare const SECRET_TOOL = "secret-tool";
+export interface LinuxKeychainDeps {
+    readonly run: CommandRunner;
+    readonly lookup: PathLookup;
+    /** `/proc/sys/kernel/osrelease`, or undefined where it cannot be read. */
+    readonly osRelease: () => string | undefined;
+    /** Overridden only by tests, so they cannot collide with real entries. */
+    readonly service?: string | undefined;
+}
+/** "microsoft" on WSL2, "Microsoft" on WSL1. */
+export declare function isWsl(osRelease: string | undefined): boolean;
+/** The path to `secret-tool` when this machine can use it, otherwise undefined. */
+export declare function findSecretTool(deps: LinuxKeychainDeps): string | undefined;
+export declare function linuxKeychainStore(deps: LinuxKeychainDeps, executable: string): SecretStore;

package/dist/login/keychain/linux.js

@@ -0,0 +1,57 @@
+/**
+ * The Linux tier: the Secret Service, through `secret-tool` from libsecret.
+ *
+ * Usually absent: `libsecret-tools` is not installed by default, and servers, containers
+ * and SSH sessions have no Secret Service on the bus. So the file tier is the normal
+ * outcome on Linux. Availability is presence on PATH, never `secret-tool --version`,
+ * which exits 2. WSL is excluded: it rarely has a session bus.
+ *
+ * The secret goes in on stdin and comes out on stdout unchanged, so unlike macOS it needs
+ * no encoding.
+ */
+import { findOnPath } from "../../verify.js";
+import { KEYCHAIN_SERVICE, KEYCHAIN_TIMEOUT_MS, accountFor, failureReason } from "./runner.js";
+export const SECRET_TOOL = "secret-tool";
+/** How the entry is labelled in Seahorse or KWalletManager, for a human deleting it. */
+const LABEL = "AI21 Gateway CLI";
+/** "microsoft" on WSL2, "Microsoft" on WSL1. */
+export function isWsl(osRelease) {
+    return (osRelease ?? "").toLowerCase().includes("microsoft");
+}
+/** The path to `secret-tool` when this machine can use it, otherwise undefined. */
+export function findSecretTool(deps) {
+    if (deps.lookup.platform !== "linux" || isWsl(deps.osRelease()))
+        return undefined;
+    return findOnPath(SECRET_TOOL, deps.lookup);
+}
+export function linuxKeychainStore(deps, executable) {
+    const service = deps.service ?? KEYCHAIN_SERVICE;
+    const attributes = (gateway, name) => ["service", service, "account", accountFor(gateway, name)];
+    const run = (args, input) => deps.run(executable, args, { input, timeoutMs: KEYCHAIN_TIMEOUT_MS });
+    const read = async (gateway, name) => {
+        const outcome = await run(["lookup", ...attributes(gateway, name)]);
+        // A timeout throws so the caller stops asking; any other miss reads as "not stored".
+        if (outcome.timedOut)
+            throw new Error("the secret service did not answer in time");
+        if (outcome.code !== 0 || outcome.stdout === "")
+            return undefined;
+        // As-is: `secret-tool` adds a newline only when stdout is a terminal, never on a pipe.
+        return outcome.stdout;
+    };
+    return {
+        tier: "keychain",
+        read,
+        async write(gateway, name, value) {
+            const outcome = await run(["store", "--label", LABEL, ...attributes(gateway, name)], value);
+            if (outcome.code !== 0)
+                throw new Error(`the secret service rejected the write: ${failureReason(outcome)}`);
+        },
+        async forget(gateway, name) {
+            // `clear` exits 0 whether or not anything matched, so a lookup answers "was it there".
+            const existing = await read(gateway, name);
+            await run(["clear", ...attributes(gateway, name)]);
+            return existing !== undefined;
+        },
+    };
+}
+//# sourceMappingURL=linux.js.map

package/dist/login/keychain/linux.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux.js","sourceRoot":"","sources":["../../../src/login/keychain/linux.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAmB,MAAM,iBAAiB,CAAC;AAE9D,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,UAAU,EAAE,aAAa,EAAsB,MAAM,aAAa,CAAC;AAEnH,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;AAEzC,wFAAwF;AACxF,MAAM,KAAK,GAAG,kBAAkB,CAAC;AAWjC,gDAAgD;AAChD,MAAM,UAAU,KAAK,CAAC,SAA6B;IACjD,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/D,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,IAAuB;IACpD,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IAElF,OAAO,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAuB,EAAE,UAAkB;IAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACjD,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,IAAgB,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACrH,MAAM,GAAG,GAAG,CAAC,IAAuB,EAAE,KAAc,EAAE,EAAE,CACtD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAExE,MAAM,IAAI,GAAG,KAAK,EAAE,OAAe,EAAE,IAAgB,EAA+B,EAAE;QACpF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpE,qFAAqF;QACrF,IAAI,OAAO,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAEnF,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,SAAS,CAAC;QAElE,uFAAuF;QACvF,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,UAAU;QAEhB,IAAI;QAEJ,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK;YAC9B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAE5F,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9G,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI;YACxB,uFAAuF;YACvF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC3C,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAEnD,OAAO,QAAQ,KAAK,SAAS,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/login/keychain/macos.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The macOS tier: generic passwords in the login keychain, via `/usr/bin/security`.
+ *
+ * One entry per secret, so the refresh token and the AI21 key keep the independent
+ * lifetimes the store promises. The account carries the gateway, so a staging secret is
+ * never returned for production:
+ *
+ *     service  ai21-gateway
+ *     account  https://api.ai21.com/gateway#ai21Key
+ *
+ * Writes go through `security -i`, which reads the command from stdin: the one-shot form
+ * takes the secret as `-w <value>`, visible in `ps`. Values are base64 so they need no
+ * quoting there, and so `security` does not hex-encode non-ASCII on the way out.
+ *
+ * No `-T` list, so any process running as this user can read the entries through
+ * `security`, as it can the file. What the keychain adds is encryption at rest and no
+ * plaintext in backups, not protection from the user's own processes.
+ */
+import type { SecretStore } from "../secretStore.js";
+import { type CommandRunner } from "./runner.js";
+export declare const SECURITY_BIN = "/usr/bin/security";
+export interface MacosKeychainDeps {
+    readonly run: CommandRunner;
+    readonly platform: NodeJS.Platform;
+    /** Overridden only by the live CI test, so it cannot collide with real entries. */
+    readonly service?: string | undefined;
+}
+/** `security` ships with every macOS. Whether the keychain answers is found out at runtime. */
+export declare function macosKeychainAvailable(deps: MacosKeychainDeps): boolean;
+export declare function macosKeychainStore(deps: MacosKeychainDeps): SecretStore;

package/dist/login/keychain/macos.js

@@ -0,0 +1,52 @@
+import { KEYCHAIN_SERVICE, KEYCHAIN_TIMEOUT_MS, accountFor, failureReason } from "./runner.js";
+export const SECURITY_BIN = "/usr/bin/security";
+/** Marks a value this tool wrote; anything else under the service is not ours to decode. */
+const ENCODING_PREFIX = "ai21-b64:";
+/** `security` ships with every macOS. Whether the keychain answers is found out at runtime. */
+export function macosKeychainAvailable(deps) {
+    return deps.platform === "darwin";
+}
+/** Single-quoted for `security -i`, which is not a POSIX shell: it backslash-escapes inside quotes. */
+function quote(value) {
+    return `'${value.replace(/[\\']/g, (c) => `\\${c}`)}'`;
+}
+export function macosKeychainStore(deps) {
+    const service = deps.service ?? KEYCHAIN_SERVICE;
+    const run = (args, input) => deps.run(SECURITY_BIN, args, { input, timeoutMs: KEYCHAIN_TIMEOUT_MS });
+    return {
+        tier: "keychain",
+        async read(gateway, name) {
+            const account = accountFor(gateway, name);
+            const outcome = await run(["find-generic-password", "-s", service, "-a", account, "-w"]);
+            // A timeout throws so the caller stops asking; any other miss reads as "not stored".
+            if (outcome.timedOut)
+                throw new Error("the macOS keychain did not answer in time");
+            if (outcome.code !== 0)
+                return undefined;
+            return decode(outcome.stdout.trim());
+        },
+        async write(gateway, name, value) {
+            const account = accountFor(gateway, name);
+            // -U updates in place; without it a second sign-in errors on the existing entry.
+            const command = ["add-generic-password", "-U", "-s", quote(service), "-a", quote(account), "-w", quote(encode(value))].join(" ") + "\n";
+            const outcome = await run(["-i"], command);
+            if (outcome.code !== 0) {
+                throw new Error(`the macOS keychain rejected the write: ${failureReason(outcome)}`);
+            }
+        },
+        async forget(gateway, name) {
+            const account = accountFor(gateway, name);
+            const outcome = await run(["delete-generic-password", "-s", service, "-a", account]);
+            return outcome.code === 0;
+        },
+    };
+}
+function encode(value) {
+    return `${ENCODING_PREFIX}${Buffer.from(value, "utf8").toString("base64")}`;
+}
+function decode(stored) {
+    if (!stored.startsWith(ENCODING_PREFIX))
+        return undefined;
+    return Buffer.from(stored.slice(ENCODING_PREFIX.length), "base64").toString("utf8");
+}
+//# sourceMappingURL=macos.js.map

package/dist/login/keychain/macos.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"macos.js","sourceRoot":"","sources":["../../../src/login/keychain/macos.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,UAAU,EAAE,aAAa,EAAsB,MAAM,aAAa,CAAC;AAEnH,MAAM,CAAC,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAEhD,4FAA4F;AAC5F,MAAM,eAAe,GAAG,WAAW,CAAC;AASpC,+FAA+F;AAC/F,MAAM,UAAU,sBAAsB,CAAC,IAAuB;IAC5D,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;AACpC,CAAC;AAED,uGAAuG;AACvG,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAuB;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACjD,MAAM,GAAG,GAAG,CAAC,IAAuB,EAAE,KAAc,EAAE,EAAE,CACtD,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAE1E,OAAO;QACL,IAAI,EAAE,UAAU;QAEhB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI;YACtB,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAEzF,qFAAqF;YACrF,IAAI,OAAO,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAEnF,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YAEzC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK;YAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,iFAAiF;YACjF,MAAM,OAAO,GACX,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CACzG,GAAG,CACJ,GAAG,IAAI,CAAC;YAEX,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAE3C,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,0CAA0C,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI;YACxB,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YAErF,OAAO,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,GAAG,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,MAAM,CAAC,MAAc;IAC5B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,SAAS,CAAC;IAE1D,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACtF,CAAC"}