@buoy-gg/license 7.0.58 → 7.0.60

package/lib/commonjs/nodeSession.js

@@ -3,4 +3,4 @@
 *
 * Copyright (c) Buoy. All rights reserved. Licensed under the Buoy EULA
 * (https://buoy.gg/terms), not an OSS license.
-*/const DESKTOP_AUDIENCE=exports.DESKTOP_AUDIENCE="app:gg.buoy.desktop";const CLI_AUDIENCE=exports.CLI_AUDIENCE="app:gg.buoy.cli";const LOGIN_TIMEOUT_MS=5*60*1e3;const MAX_BODY_BYTES=4096;const LOCK_STALE_MS=6e4;const LOCK_WAIT_MS=3e4;function defaultSessionFile(){return process.env.BUOY_SESSION_FILE||(0,_nodePath.join)((0,_nodeOs.homedir)(),".buoy","session.json")}function fileSessionStorage(e){const a=async()=>{try{const o=JSON.parse(await _nodeFs.promises.readFile(e,"utf8"));return o&&typeof o==="object"?o:{}}catch{return{}}};const c=async o=>{await _nodeFs.promises.mkdir((0,_nodePath.dirname)(e),{recursive:true,mode:448});if(Object.keys(o).length===0){await _nodeFs.promises.rm(e,{force:true});return}const i=`${e}.${process.pid}.${(0,_nodeCrypto.randomBytes)(4).toString("hex")}.tmp`;await _nodeFs.promises.writeFile(i,JSON.stringify(o),{mode:384});await _nodeFs.promises.rename(i,e)};return{async getItem(o){return(await a())[o]??null},async setItem(o,i){const u=await a();u[o]=i;await c(u)},async removeItem(o){const i=await a();if(!(o in i))return;delete i[o];await c(i)}}}function fileLock(e,a={}){const c=a.staleMs??LOCK_STALE_MS;const o=a.waitMs??LOCK_WAIT_MS;return async(i,u)=>{const r=`${process.pid}:${(0,_nodeCrypto.randomBytes)(8).toString("hex")}`;const t=Date.now()+o;await _nodeFs.promises.mkdir((0,_nodePath.dirname)(e),{recursive:true,mode:448});for(;;){try{await _nodeFs.promises.writeFile(e,r,{flag:"wx",mode:384});break}catch(n){if(n.code!=="EEXIST")throw n;const s=await _nodeFs.promises.stat(e).catch(()=>null);if(s&&Date.now()-s.mtimeMs>c){await _nodeFs.promises.rm(e,{force:true});continue}if(Date.now()>t)throw new Error("Another Buoy process holds the sign-in lock.");await new Promise(p=>setTimeout(p,50))}}try{return await u()}finally{const n=await _nodeFs.promises.readFile(e,"utf8").catch(()=>null);if(n===r)await _nodeFs.promises.rm(e,{force:true})}}}function safeEqual(e,a){const c=Buffer.from(e);const o=Buffer.from(a);return c.length===o.length&&(0,_nodeCrypto.timingSafeEqual)(c,o)}async function receiveCodeOnLoopback(e,a,c,o={}){let i;let u;const r=new Promise((d,l)=>{i=d;u=l});r.catch(()=>{});const t=_nodeHttp.default.createServer((d,l)=>{if(d.headers.origin===c){l.setHeader("Access-Control-Allow-Origin",c);l.setHeader("Access-Control-Allow-Headers","Content-Type");l.setHeader("Access-Control-Allow-Methods","POST, OPTIONS");l.setHeader("Access-Control-Allow-Private-Network","true")}if(d.method==="OPTIONS")return void l.writeHead(204).end();if(d.method!=="POST")return void l.writeHead(405).end();let m="";d.on("data",f=>{m+=f;if(m.length>MAX_BODY_BYTES)d.destroy()});d.on("end",()=>{let f=null;try{f=JSON.parse(m)}catch{}if(!f||typeof f.state!=="string"||!safeEqual(f.state,a))return void l.writeHead(400).end();l.writeHead(200,{"Content-Type":"application/json"}).end('{"ok":true}');if(typeof f.code==="string"&&f.code)p(()=>i(f.code));else p(()=>u(new _sessionManager.SessionError("access_denied","Sign-in was cancelled.")))})});const n=setTimeout(()=>p(()=>u(new _sessionManager.SessionError("timeout","Sign-in took too long."))),o.timeoutMs??LOGIN_TIMEOUT_MS);n.unref?.();const s=()=>p(()=>u(new _sessionManager.SessionError("popup_closed","Sign-in was cancelled.")));o.signal?.addEventListener("abort",s);function p(d){clearTimeout(n);o.signal?.removeEventListener("abort",s);t.close();d()}await new Promise((d,l)=>{t.once("error",l);t.listen(0,"127.0.0.1",()=>d())});const w=t.address();if(!w||typeof w==="string"){p(()=>u(new Error("Could not open a local port")));throw new Error("Could not open a local port")}return{url:`${e}&port=${w.port}`,code:r}}function createNodeSession(e){const a=defaultSessionFile();const c=e.storage??fileSessionStorage(a);const o=(e.signinOrigin??process.env.BUOY_SITE_URL??"https://buoy.gg").replace(/\/$/,"");const i=e.fetch??((t,n)=>fetch(t,n));const u={fetch:i,storage:async()=>c,now:e.now??(()=>Date.now()),random:t=>new Uint8Array((0,_nodeCrypto.randomBytes)(t)),sha256:async t=>new Uint8Array((0,_nodeCrypto.createHash)("sha256").update(t).digest()),openPopup:()=>null,onMessage:()=>()=>{},withLock:fileLock(e.lockFile??`${a}.lock`),setTimer:(t,n)=>{const s=setTimeout(t,Math.min(n,2147483647));s.unref?.();return s},clearTimer:t=>clearTimeout(t),publicKeyHex:e.publicKeyHex};const r=new _sessionManager.SessionManagerImpl(u);r.configure({audience:e.audience,signinOrigin:o});return{manager:r,async load(){await r.load();return r.getStatus()},getStatus:()=>r.getStatus(),signIn:(t={})=>r.signInWith(async(n,s)=>{const{url:p,code:w}=await receiveCodeOnLoopback(n,s,o,t);await e.openBrowser(p);return w}),signOut:()=>r.signOut(),refresh:t=>r.refresh(t),sync:()=>r.sync(),async devToken(){const t=r.getAccessToken();if(!t)return{ok:false,detail:"This computer is not signed in. Run `npx buoy login`."};try{const n=await i(`${o}/api/auth/dev-token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({access_token:t})});const s=await n.json().catch(()=>null);if(n.status===200&&typeof s?.dev_token==="string"){return{ok:true,token:s.dev_token,tier:typeof s.tier==="string"?s.tier:"free"}}return{ok:false,detail:typeof s?.error_description==="string"?s.error_description:"buoy.gg did not make a dev token."}}catch{return{ok:false,detail:"Buoy could not be reached. Check your connection and try again."}}},async isAvailable(){try{const t=await i(`${o}/api/auth/status`,{method:"GET",headers:{}});const n=await t.json().catch(()=>null);return t.status===200&&n?.enabled===true}catch{return false}},subscribe:t=>r.subscribe(t)}}
+*/const DESKTOP_AUDIENCE=exports.DESKTOP_AUDIENCE="app:gg.buoy.desktop";const CLI_AUDIENCE=exports.CLI_AUDIENCE="app:gg.buoy.cli";const LOGIN_TIMEOUT_MS=5*60*1e3;const MAX_BODY_BYTES=4096;const LOCK_STALE_MS=6e4;const LOCK_WAIT_MS=3e4;const STATUS_TIMEOUT_MS=8e3;const DEV_TOKEN_TIMEOUT_MS=15e3;const TLS_INTERCEPT_CODES=new Set(["UNABLE_TO_GET_ISSUER_CERT_LOCALLY","SELF_SIGNED_CERT_IN_CHAIN","DEPTH_ZERO_SELF_SIGNED_CERT","UNABLE_TO_VERIFY_LEAF_SIGNATURE","CERT_UNTRUSTED"]);function describeFetchError(e){const r=e?.cause;if(r&&typeof r.code==="string")return r.code;if(e?.name==="TimeoutError")return"timed out";if(r&&typeof r.message==="string")return r.message;return e instanceof Error?e.message:String(e)}function defaultSessionFile(){return process.env.BUOY_SESSION_FILE||(0,_nodePath.join)((0,_nodeOs.homedir)(),".buoy","session.json")}function fileSessionStorage(e){const r=async()=>{try{const n=JSON.parse(await _nodeFs.promises.readFile(e,"utf8"));return n&&typeof n==="object"?n:{}}catch{return{}}};const u=async n=>{await _nodeFs.promises.mkdir((0,_nodePath.dirname)(e),{recursive:true,mode:448});if(Object.keys(n).length===0){await _nodeFs.promises.rm(e,{force:true});return}const i=`${e}.${process.pid}.${(0,_nodeCrypto.randomBytes)(4).toString("hex")}.tmp`;await _nodeFs.promises.writeFile(i,JSON.stringify(n),{mode:384});await _nodeFs.promises.rename(i,e)};return{async getItem(n){return(await r())[n]??null},async setItem(n,i){const d=await r();d[n]=i;await u(d)},async removeItem(n){const i=await r();if(!(n in i))return;delete i[n];await u(i)}}}function fileLock(e,r={}){const u=r.staleMs??LOCK_STALE_MS;const n=r.waitMs??LOCK_WAIT_MS;return async(i,d)=>{const a=`${process.pid}:${(0,_nodeCrypto.randomBytes)(8).toString("hex")}`;const p=Date.now()+n;await _nodeFs.promises.mkdir((0,_nodePath.dirname)(e),{recursive:true,mode:448});for(;;){try{await _nodeFs.promises.writeFile(e,a,{flag:"wx",mode:384});break}catch(t){if(t.code!=="EEXIST")throw t;const s=await _nodeFs.promises.stat(e).catch(()=>null);if(s&&Date.now()-s.mtimeMs>u){await _nodeFs.promises.rm(e,{force:true});continue}if(Date.now()>p)throw new Error("Another Buoy process holds the sign-in lock.");await new Promise(o=>setTimeout(o,50))}}try{return await d()}finally{const t=await _nodeFs.promises.readFile(e,"utf8").catch(()=>null);if(t===a)await _nodeFs.promises.rm(e,{force:true})}}}function safeEqual(e,r){const u=Buffer.from(e);const n=Buffer.from(r);return u.length===n.length&&(0,_nodeCrypto.timingSafeEqual)(u,n)}async function receiveCodeOnLoopback(e,r,u,n={}){let i;let d;const a=new Promise((c,l)=>{i=c;d=l});a.catch(()=>{});const p=_nodeHttp.default.createServer((c,l)=>{if(c.headers.origin===u){l.setHeader("Access-Control-Allow-Origin",u);l.setHeader("Access-Control-Allow-Headers","Content-Type");l.setHeader("Access-Control-Allow-Methods","POST, OPTIONS");l.setHeader("Access-Control-Allow-Private-Network","true")}if(c.method==="OPTIONS")return void l.writeHead(204).end();if(c.method!=="POST")return void l.writeHead(405).end();let m="";c.on("data",g=>{m+=g;if(m.length>MAX_BODY_BYTES)c.destroy()});c.on("end",()=>{let g=null;try{g=JSON.parse(m)}catch{}if(!g||typeof g.state!=="string"||!safeEqual(g.state,r))return void l.writeHead(400).end();l.writeHead(200,{"Content-Type":"application/json"}).end('{"ok":true}');if(typeof g.code==="string"&&g.code)o(()=>i(g.code));else o(()=>d(new _sessionManager.SessionError("access_denied","Sign-in was cancelled.")))})});const t=setTimeout(()=>o(()=>d(new _sessionManager.SessionError("timeout","Sign-in took too long."))),n.timeoutMs??LOGIN_TIMEOUT_MS);t.unref?.();const s=()=>o(()=>d(new _sessionManager.SessionError("popup_closed","Sign-in was cancelled.")));n.signal?.addEventListener("abort",s);function o(c){clearTimeout(t);n.signal?.removeEventListener("abort",s);p.close();c()}await new Promise((c,l)=>{p.once("error",l);p.listen(0,"127.0.0.1",()=>c())});const f=p.address();if(!f||typeof f==="string"){o(()=>d(new Error("Could not open a local port")));throw new Error("Could not open a local port")}return{url:`${e}&port=${f.port}`,code:a}}function createNodeSession(e){const r=defaultSessionFile();const u=e.storage??fileSessionStorage(r);const n=(e.signinOrigin??process.env.BUOY_SITE_URL??"https://buoy.gg").replace(/\/$/,"");const i=e.fetch??((t,s)=>fetch(t,s));const d={fetch:i,storage:async()=>u,now:e.now??(()=>Date.now()),random:t=>new Uint8Array((0,_nodeCrypto.randomBytes)(t)),sha256:async t=>new Uint8Array((0,_nodeCrypto.createHash)("sha256").update(t).digest()),openPopup:()=>null,onMessage:()=>()=>{},withLock:fileLock(e.lockFile??`${r}.lock`),setTimer:(t,s)=>{const o=setTimeout(t,Math.min(s,2147483647));o.unref?.();return o},clearTimer:t=>clearTimeout(t),publicKeyHex:e.publicKeyHex};const a=new _sessionManager.SessionManagerImpl(d);a.configure({audience:e.audience,signinOrigin:n});const p=async()=>{let t;try{t=await i(`${n}/api/auth/status`,{method:"GET",headers:{},signal:AbortSignal.timeout(STATUS_TIMEOUT_MS)})}catch(o){const f=describeFetchError(o);return TLS_INTERCEPT_CODES.has(f)?{state:"unreachable",detail:f,hint:"Your network may re-sign secure traffic. Point NODE_EXTRA_CA_CERTS at your company's root certificate."}:{state:"unreachable",detail:f}}const s=await t.json().catch(()=>null);if(t.status===200&&s?.enabled===true)return{state:"enabled"};if(t.status===200&&s?.enabled===false)return{state:"disabled"};return{state:"unreachable",detail:s?`HTTP ${t.status}`:`HTTP ${t.status}, not a Buoy answer`}};return{manager:a,async load(){await a.load();return a.getStatus()},getStatus:()=>a.getStatus(),signIn:(t={})=>a.signInWith(async(s,o)=>{const{url:f,code:c}=await receiveCodeOnLoopback(s,o,n,t);await e.openBrowser(f);return c}),signOut:()=>a.signOut(),refresh:t=>a.refresh(t),sync:()=>a.sync(),async devToken(){const t=a.getAccessToken();if(!t)return{ok:false,detail:"This computer is not signed in. Run `npx buoy login`."};try{const s=await i(`${n}/api/auth/dev-token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({access_token:t}),signal:AbortSignal.timeout(DEV_TOKEN_TIMEOUT_MS)});const o=await s.json().catch(()=>null);if(s.status===200&&typeof o?.dev_token==="string"){return{ok:true,token:o.dev_token,tier:typeof o.tier==="string"?o.tier:"free"}}return{ok:false,detail:typeof o?.error_description==="string"?o.error_description:"buoy.gg did not make a dev token."}}catch{return{ok:false,detail:"Buoy could not be reached. Check your connection and try again."}}},checkAvailability:p,async isAvailable(){return(await p()).state==="enabled"},subscribe:t=>a.subscribe(t)}}

package/lib/module/nodeSession.js

@@ -3,4 +3,4 @@
 *
 * Copyright (c) Buoy. All rights reserved. Licensed under the Buoy EULA
 * (https://buoy.gg/terms), not an OSS license.
-*/import k from"node:http";import{createHash as b,randomBytes as y,timingSafeEqual as O}from"node:crypto";import{promises as p}from"node:fs";import{dirname as S,join as T}from"node:path";import{homedir as v}from"node:os";import{SessionManagerImpl as E,SessionError as h}from"./sessionManager.js";export const DESKTOP_AUDIENCE="app:gg.buoy.desktop";export const CLI_AUDIENCE="app:gg.buoy.cli";const A=5*60*1e3;const I=4096;const C=6e4;const _=3e4;export function defaultSessionFile(){return process.env.BUOY_SESSION_FILE||T(v(),".buoy","session.json")}export function fileSessionStorage(n){const i=async()=>{try{const t=JSON.parse(await p.readFile(n,"utf8"));return t&&typeof t==="object"?t:{}}catch{return{}}};const c=async t=>{await p.mkdir(S(n),{recursive:true,mode:448});if(Object.keys(t).length===0){await p.rm(n,{force:true});return}const a=`${n}.${process.pid}.${y(4).toString("hex")}.tmp`;await p.writeFile(a,JSON.stringify(t),{mode:384});await p.rename(a,n)};return{async getItem(t){return(await i())[t]??null},async setItem(t,a){const u=await i();u[t]=a;await c(u)},async removeItem(t){const a=await i();if(!(t in a))return;delete a[t];await c(a)}}}export function fileLock(n,i={}){const c=i.staleMs??C;const t=i.waitMs??_;return async(a,u)=>{const o=`${process.pid}:${y(8).toString("hex")}`;const e=Date.now()+t;await p.mkdir(S(n),{recursive:true,mode:448});for(;;){try{await p.writeFile(n,o,{flag:"wx",mode:384});break}catch(r){if(r.code!=="EEXIST")throw r;const s=await p.stat(n).catch(()=>null);if(s&&Date.now()-s.mtimeMs>c){await p.rm(n,{force:true});continue}if(Date.now()>e)throw new Error("Another Buoy process holds the sign-in lock.");await new Promise(f=>setTimeout(f,50))}}try{return await u()}finally{const r=await p.readFile(n,"utf8").catch(()=>null);if(r===o)await p.rm(n,{force:true})}}}function x(n,i){const c=Buffer.from(n);const t=Buffer.from(i);return c.length===t.length&&O(c,t)}export async function receiveCodeOnLoopback(n,i,c,t={}){let a;let u;const o=new Promise((l,d)=>{a=l;u=d});o.catch(()=>{});const e=k.createServer((l,d)=>{if(l.headers.origin===c){d.setHeader("Access-Control-Allow-Origin",c);d.setHeader("Access-Control-Allow-Headers","Content-Type");d.setHeader("Access-Control-Allow-Methods","POST, OPTIONS");d.setHeader("Access-Control-Allow-Private-Network","true")}if(l.method==="OPTIONS")return void d.writeHead(204).end();if(l.method!=="POST")return void d.writeHead(405).end();let g="";l.on("data",w=>{g+=w;if(g.length>I)l.destroy()});l.on("end",()=>{let w=null;try{w=JSON.parse(g)}catch{}if(!w||typeof w.state!=="string"||!x(w.state,i))return void d.writeHead(400).end();d.writeHead(200,{"Content-Type":"application/json"}).end('{"ok":true}');if(typeof w.code==="string"&&w.code)f(()=>a(w.code));else f(()=>u(new h("access_denied","Sign-in was cancelled.")))})});const r=setTimeout(()=>f(()=>u(new h("timeout","Sign-in took too long."))),t.timeoutMs??A);r.unref?.();const s=()=>f(()=>u(new h("popup_closed","Sign-in was cancelled.")));t.signal?.addEventListener("abort",s);function f(l){clearTimeout(r);t.signal?.removeEventListener("abort",s);e.close();l()}await new Promise((l,d)=>{e.once("error",d);e.listen(0,"127.0.0.1",()=>l())});const m=e.address();if(!m||typeof m==="string"){f(()=>u(new Error("Could not open a local port")));throw new Error("Could not open a local port")}return{url:`${n}&port=${m.port}`,code:o}}export function createNodeSession(n){const i=defaultSessionFile();const c=n.storage??fileSessionStorage(i);const t=(n.signinOrigin??process.env.BUOY_SITE_URL??"https://buoy.gg").replace(/\/$/,"");const a=n.fetch??((e,r)=>fetch(e,r));const u={fetch:a,storage:async()=>c,now:n.now??(()=>Date.now()),random:e=>new Uint8Array(y(e)),sha256:async e=>new Uint8Array(b("sha256").update(e).digest()),openPopup:()=>null,onMessage:()=>()=>{},withLock:fileLock(n.lockFile??`${i}.lock`),setTimer:(e,r)=>{const s=setTimeout(e,Math.min(r,2147483647));s.unref?.();return s},clearTimer:e=>clearTimeout(e),publicKeyHex:n.publicKeyHex};const o=new E(u);o.configure({audience:n.audience,signinOrigin:t});return{manager:o,async load(){await o.load();return o.getStatus()},getStatus:()=>o.getStatus(),signIn:(e={})=>o.signInWith(async(r,s)=>{const{url:f,code:m}=await receiveCodeOnLoopback(r,s,t,e);await n.openBrowser(f);return m}),signOut:()=>o.signOut(),refresh:e=>o.refresh(e),sync:()=>o.sync(),async devToken(){const e=o.getAccessToken();if(!e)return{ok:false,detail:"This computer is not signed in. Run `npx buoy login`."};try{const r=await a(`${t}/api/auth/dev-token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({access_token:e})});const s=await r.json().catch(()=>null);if(r.status===200&&typeof s?.dev_token==="string"){return{ok:true,token:s.dev_token,tier:typeof s.tier==="string"?s.tier:"free"}}return{ok:false,detail:typeof s?.error_description==="string"?s.error_description:"buoy.gg did not make a dev token."}}catch{return{ok:false,detail:"Buoy could not be reached. Check your connection and try again."}}},async isAvailable(){try{const e=await a(`${t}/api/auth/status`,{method:"GET",headers:{}});const r=await e.json().catch(()=>null);return e.status===200&&r?.enabled===true}catch{return false}},subscribe:e=>o.subscribe(e)}}
+*/import E from"node:http";import{createHash as T,randomBytes as y,timingSafeEqual as _}from"node:crypto";import{promises as f}from"node:fs";import{dirname as S,join as b}from"node:path";import{homedir as k}from"node:os";import{SessionManagerImpl as O,SessionError as h}from"./sessionManager.js";export const DESKTOP_AUDIENCE="app:gg.buoy.desktop";export const CLI_AUDIENCE="app:gg.buoy.cli";const A=5*60*1e3;const C=4096;const I=6e4;const v=3e4;const N=8e3;const L=15e3;const H=new Set(["UNABLE_TO_GET_ISSUER_CERT_LOCALLY","SELF_SIGNED_CERT_IN_CHAIN","DEPTH_ZERO_SELF_SIGNED_CERT","UNABLE_TO_VERIFY_LEAF_SIGNATURE","CERT_UNTRUSTED"]);function P(t){const r=t?.cause;if(r&&typeof r.code==="string")return r.code;if(t?.name==="TimeoutError")return"timed out";if(r&&typeof r.message==="string")return r.message;return t instanceof Error?t.message:String(t)}export function defaultSessionFile(){return process.env.BUOY_SESSION_FILE||b(k(),".buoy","session.json")}export function fileSessionStorage(t){const r=async()=>{try{const n=JSON.parse(await f.readFile(t,"utf8"));return n&&typeof n==="object"?n:{}}catch{return{}}};const u=async n=>{await f.mkdir(S(t),{recursive:true,mode:448});if(Object.keys(n).length===0){await f.rm(t,{force:true});return}const i=`${t}.${process.pid}.${y(4).toString("hex")}.tmp`;await f.writeFile(i,JSON.stringify(n),{mode:384});await f.rename(i,t)};return{async getItem(n){return(await r())[n]??null},async setItem(n,i){const l=await r();l[n]=i;await u(l)},async removeItem(n){const i=await r();if(!(n in i))return;delete i[n];await u(i)}}}export function fileLock(t,r={}){const u=r.staleMs??I;const n=r.waitMs??v;return async(i,l)=>{const s=`${process.pid}:${y(8).toString("hex")}`;const p=Date.now()+n;await f.mkdir(S(t),{recursive:true,mode:448});for(;;){try{await f.writeFile(t,s,{flag:"wx",mode:384});break}catch(e){if(e.code!=="EEXIST")throw e;const a=await f.stat(t).catch(()=>null);if(a&&Date.now()-a.mtimeMs>u){await f.rm(t,{force:true});continue}if(Date.now()>p)throw new Error("Another Buoy process holds the sign-in lock.");await new Promise(o=>setTimeout(o,50))}}try{return await l()}finally{const e=await f.readFile(t,"utf8").catch(()=>null);if(e===s)await f.rm(t,{force:true})}}}function U(t,r){const u=Buffer.from(t);const n=Buffer.from(r);return u.length===n.length&&_(u,n)}export async function receiveCodeOnLoopback(t,r,u,n={}){let i;let l;const s=new Promise((c,d)=>{i=c;l=d});s.catch(()=>{});const p=E.createServer((c,d)=>{if(c.headers.origin===u){d.setHeader("Access-Control-Allow-Origin",u);d.setHeader("Access-Control-Allow-Headers","Content-Type");d.setHeader("Access-Control-Allow-Methods","POST, OPTIONS");d.setHeader("Access-Control-Allow-Private-Network","true")}if(c.method==="OPTIONS")return void d.writeHead(204).end();if(c.method!=="POST")return void d.writeHead(405).end();let g="";c.on("data",w=>{g+=w;if(g.length>C)c.destroy()});c.on("end",()=>{let w=null;try{w=JSON.parse(g)}catch{}if(!w||typeof w.state!=="string"||!U(w.state,r))return void d.writeHead(400).end();d.writeHead(200,{"Content-Type":"application/json"}).end('{"ok":true}');if(typeof w.code==="string"&&w.code)o(()=>i(w.code));else o(()=>l(new h("access_denied","Sign-in was cancelled.")))})});const e=setTimeout(()=>o(()=>l(new h("timeout","Sign-in took too long."))),n.timeoutMs??A);e.unref?.();const a=()=>o(()=>l(new h("popup_closed","Sign-in was cancelled.")));n.signal?.addEventListener("abort",a);function o(c){clearTimeout(e);n.signal?.removeEventListener("abort",a);p.close();c()}await new Promise((c,d)=>{p.once("error",d);p.listen(0,"127.0.0.1",()=>c())});const m=p.address();if(!m||typeof m==="string"){o(()=>l(new Error("Could not open a local port")));throw new Error("Could not open a local port")}return{url:`${t}&port=${m.port}`,code:s}}export function createNodeSession(t){const r=defaultSessionFile();const u=t.storage??fileSessionStorage(r);const n=(t.signinOrigin??process.env.BUOY_SITE_URL??"https://buoy.gg").replace(/\/$/,"");const i=t.fetch??((e,a)=>fetch(e,a));const l={fetch:i,storage:async()=>u,now:t.now??(()=>Date.now()),random:e=>new Uint8Array(y(e)),sha256:async e=>new Uint8Array(T("sha256").update(e).digest()),openPopup:()=>null,onMessage:()=>()=>{},withLock:fileLock(t.lockFile??`${r}.lock`),setTimer:(e,a)=>{const o=setTimeout(e,Math.min(a,2147483647));o.unref?.();return o},clearTimer:e=>clearTimeout(e),publicKeyHex:t.publicKeyHex};const s=new O(l);s.configure({audience:t.audience,signinOrigin:n});const p=async()=>{let e;try{e=await i(`${n}/api/auth/status`,{method:"GET",headers:{},signal:AbortSignal.timeout(N)})}catch(o){const m=P(o);return H.has(m)?{state:"unreachable",detail:m,hint:"Your network may re-sign secure traffic. Point NODE_EXTRA_CA_CERTS at your company's root certificate."}:{state:"unreachable",detail:m}}const a=await e.json().catch(()=>null);if(e.status===200&&a?.enabled===true)return{state:"enabled"};if(e.status===200&&a?.enabled===false)return{state:"disabled"};return{state:"unreachable",detail:a?`HTTP ${e.status}`:`HTTP ${e.status}, not a Buoy answer`}};return{manager:s,async load(){await s.load();return s.getStatus()},getStatus:()=>s.getStatus(),signIn:(e={})=>s.signInWith(async(a,o)=>{const{url:m,code:c}=await receiveCodeOnLoopback(a,o,n,e);await t.openBrowser(m);return c}),signOut:()=>s.signOut(),refresh:e=>s.refresh(e),sync:()=>s.sync(),async devToken(){const e=s.getAccessToken();if(!e)return{ok:false,detail:"This computer is not signed in. Run `npx buoy login`."};try{const a=await i(`${n}/api/auth/dev-token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({access_token:e}),signal:AbortSignal.timeout(L)});const o=await a.json().catch(()=>null);if(a.status===200&&typeof o?.dev_token==="string"){return{ok:true,token:o.dev_token,tier:typeof o.tier==="string"?o.tier:"free"}}return{ok:false,detail:typeof o?.error_description==="string"?o.error_description:"buoy.gg did not make a dev token."}}catch{return{ok:false,detail:"Buoy could not be reached. Check your connection and try again."}}},checkAvailability:p,async isAvailable(){return(await p()).state==="enabled"},subscribe:e=>s.subscribe(e)}}

package/lib/typescript/commonjs/headless.d.ts

@@ -8,7 +8,7 @@ export { signCache, verifyCacheSignature } from "./cacheSignature";
 export { LICENSE_CACHE_DURATION, LICENSE_REVALIDATION_INTERVAL, LICENSE_LAUNCH_VALIDATION_TTL, LICENSE_TRANSIENT_RETRY_DELAYS, KEYGEN_CONFIG } from "./config";
 export type { CachedLicense, BuoyTier, KeygenValidationResponse } from "./types";
 export { createNodeSession, fileSessionStorage, fileLock, receiveCodeOnLoopback, defaultSessionFile, DESKTOP_AUDIENCE, CLI_AUDIENCE, } from "./nodeSession";
-export type { NodeSession, NodeSessionOptions, NodeSessionStorage } from "./nodeSession";
+export type { NodeSession, NodeSessionOptions, NodeSessionStorage, SignInAvailability } from "./nodeSession";
 export { SessionError, SessionManagerImpl, SESSION_OFFLINE_GRACE_MS } from "./sessionManager";
 export type { SessionStatus, SessionErrorCode, CodePrompt } from "./sessionManager";
 export { verifySessionToken, mintSessionToken, __setSessionTokenPublicKeyForTests } from "./sessionToken";

package/lib/typescript/commonjs/nodeSession.d.ts

@@ -8,6 +8,20 @@ import { SessionManagerImpl, type SessionDeps, type SessionStatus } from "./sess
 /** First-party app ids buoy.gg signs in without a site list. Keep in step with apps/website signin.server.ts. */
 export declare const DESKTOP_AUDIENCE = "app:gg.buoy.desktop";
 export declare const CLI_AUDIENCE = "app:gg.buoy.cli";
+/**
+ * Whether buoy.gg has sign-in on. "unreachable" is kept apart from
+ * "disabled": a VPN or proxy that lets the browser through but not Node lands
+ * here, and the CLI has to say so instead of quietly taking another path.
+ */
+export type SignInAvailability = {
+    state: "enabled";
+} | {
+    state: "disabled";
+} | {
+    state: "unreachable";
+    detail: string;
+    hint?: string;
+};
 export interface NodeSessionStorage {
     getItem(key: string): Promise<string | null>;
     setItem(key: string, value: string): Promise<void>;
@@ -80,6 +94,8 @@ export interface NodeSession {
     sync(): Promise<void>;
     /** Whether buoy.gg has sign-in turned on. False when it can't be reached. */
     isAvailable(): Promise<boolean>;
+    /** Like isAvailable, but says why: off, or not reachable from this process. */
+    checkAvailability(): Promise<SignInAvailability>;
     subscribe(listener: () => void): () => void;
 }
 export declare function createNodeSession(options: NodeSessionOptions): NodeSession;

package/lib/typescript/commonjs/sessionManager.d.ts

@@ -59,6 +59,7 @@ export interface SessionDeps {
         method: string;
         headers: Record<string, string>;
         body?: string;
+        signal?: AbortSignal;
     }) => Promise<{
         status: number;
         json(): Promise<unknown>;

package/lib/typescript/module/headless.d.ts

@@ -8,7 +8,7 @@ export { signCache, verifyCacheSignature } from "./cacheSignature";
 export { LICENSE_CACHE_DURATION, LICENSE_REVALIDATION_INTERVAL, LICENSE_LAUNCH_VALIDATION_TTL, LICENSE_TRANSIENT_RETRY_DELAYS, KEYGEN_CONFIG } from "./config";
 export type { CachedLicense, BuoyTier, KeygenValidationResponse } from "./types";
 export { createNodeSession, fileSessionStorage, fileLock, receiveCodeOnLoopback, defaultSessionFile, DESKTOP_AUDIENCE, CLI_AUDIENCE, } from "./nodeSession";
-export type { NodeSession, NodeSessionOptions, NodeSessionStorage } from "./nodeSession";
+export type { NodeSession, NodeSessionOptions, NodeSessionStorage, SignInAvailability } from "./nodeSession";
 export { SessionError, SessionManagerImpl, SESSION_OFFLINE_GRACE_MS } from "./sessionManager";
 export type { SessionStatus, SessionErrorCode, CodePrompt } from "./sessionManager";
 export { verifySessionToken, mintSessionToken, __setSessionTokenPublicKeyForTests } from "./sessionToken";

package/lib/typescript/module/nodeSession.d.ts

@@ -8,6 +8,20 @@ import { SessionManagerImpl, type SessionDeps, type SessionStatus } from "./sess
 /** First-party app ids buoy.gg signs in without a site list. Keep in step with apps/website signin.server.ts. */
 export declare const DESKTOP_AUDIENCE = "app:gg.buoy.desktop";
 export declare const CLI_AUDIENCE = "app:gg.buoy.cli";
+/**
+ * Whether buoy.gg has sign-in on. "unreachable" is kept apart from
+ * "disabled": a VPN or proxy that lets the browser through but not Node lands
+ * here, and the CLI has to say so instead of quietly taking another path.
+ */
+export type SignInAvailability = {
+    state: "enabled";
+} | {
+    state: "disabled";
+} | {
+    state: "unreachable";
+    detail: string;
+    hint?: string;
+};
 export interface NodeSessionStorage {
     getItem(key: string): Promise<string | null>;
     setItem(key: string, value: string): Promise<void>;
@@ -80,6 +94,8 @@ export interface NodeSession {
     sync(): Promise<void>;
     /** Whether buoy.gg has sign-in turned on. False when it can't be reached. */
     isAvailable(): Promise<boolean>;
+    /** Like isAvailable, but says why: off, or not reachable from this process. */
+    checkAvailability(): Promise<SignInAvailability>;
     subscribe(listener: () => void): () => void;
 }
 export declare function createNodeSession(options: NodeSessionOptions): NodeSession;

package/lib/typescript/module/sessionManager.d.ts

@@ -59,6 +59,7 @@ export interface SessionDeps {
         method: string;
         headers: Record<string, string>;
         body?: string;
+        signal?: AbortSignal;
     }) => Promise<{
         status: number;
         json(): Promise<unknown>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@buoy-gg/license",
-  "version": "7.0.58",
+  "version": "7.0.60",
   "description": "License validation for React Buoy Pro features",
   "license": "SEE LICENSE IN LICENSE",
   "main": "lib/commonjs/index.js",