@dorokuma/herdsman 0.9.0 → 0.11.5

package/dist/src/shared/unix-peercred.js

@@ -0,0 +1,144 @@
+import { spawnSync } from "node:child_process";
+import { existsSync, readFileSync, readlinkSync, realpathSync, statSync } from "node:fs";
+import { isAbsolute } from "node:path";
+/** Linux `SO_PEERCRED` (include/uapi/asm-generic/socket.h). */
+const SOL_SOCKET = 1;
+const SO_PEERCRED = 17;
+/** Distro python3 only — never search PATH (a fake `python3` earlier on PATH must not win). */
+export const PYTHON3_CANDIDATES = ["/usr/bin/python3", "/bin/python3"];
+let cachedPython3Path;
+export function unixSocketFd(socket) {
+    const fd = socket._handle?.fd;
+    return typeof fd === "number" && Number.isInteger(fd) && fd >= 0 ? fd : undefined;
+}
+/**
+ * Read the connecting process pid from a Linux Unix-domain socket via SO_PEERCRED.
+ * Same-UID threat model: this binds a connection to a process, not a user.
+ */
+export function linuxPeerPid(socket) {
+    if (process.platform !== "linux")
+        return undefined;
+    const fd = unixSocketFd(socket);
+    return fd === undefined ? undefined : linuxPeerPidFromFd(fd);
+}
+export function linuxPeerPidFromFd(fd) {
+    if (process.platform !== "linux")
+        return undefined;
+    const python3 = resolvePython3Path();
+    if (!python3) {
+        console.error("Herdsman cannot read UDS peer pid: python3 not found at /usr/bin/python3 or /bin/python3");
+        return undefined;
+    }
+    const result = spawnSync(python3, [
+        "-c",
+        [
+            "import socket, struct, sys",
+            `s = socket.fromfd(0, socket.AF_UNIX, socket.SOCK_STREAM)`,
+            `cred = s.getsockopt(${SOL_SOCKET}, ${SO_PEERCRED}, struct.calcsize("3i"))`,
+            "pid, _uid, _gid = struct.unpack('3i', cred)",
+            "sys.stdout.write(str(pid))",
+        ].join("; "),
+    ], {
+        encoding: "utf8",
+        stdio: [fd, "pipe", "pipe"],
+        timeout: 2_000,
+    });
+    if (result.error || result.status !== 0) {
+        console.error("Herdsman python3 SO_PEERCRED helper failed", result.error?.message ?? (result.stderr || `exit ${result.status}`));
+        return undefined;
+    }
+    const pid = Number.parseInt((result.stdout ?? "").trim(), 10);
+    return Number.isInteger(pid) && pid > 1 ? pid : undefined;
+}
+export function resolvePython3Path() {
+    if (cachedPython3Path)
+        return cachedPython3Path;
+    for (const candidate of PYTHON3_CANDIDATES) {
+        if (!isTrustedPython3(candidate))
+            continue;
+        cachedPython3Path = candidate;
+        return candidate;
+    }
+    return undefined;
+}
+export function peerBoundToPanePid(peerPid, panePid) {
+    if (!Number.isInteger(peerPid) || !Number.isInteger(panePid) || peerPid <= 1 || panePid <= 1) {
+        return false;
+    }
+    if (peerPid === panePid)
+        return true;
+    return isAncestorPid(panePid, peerPid);
+}
+export function peerBoundToPaneCwd(peerPid, paneCwd) {
+    if (!Number.isInteger(peerPid) || peerPid <= 1)
+        return false;
+    if (typeof paneCwd !== "string" || paneCwd.length === 0)
+        return false;
+    const peerCwd = processCwd(peerPid);
+    if (!peerCwd)
+        return false;
+    return sameCwd(peerCwd, paneCwd);
+}
+function processCwd(pid) {
+    try {
+        return readlinkSync(`/proc/${pid}/cwd`);
+    }
+    catch {
+        return undefined;
+    }
+}
+function sameCwd(left, right) {
+    return normalizeCwd(left) === normalizeCwd(right);
+}
+function normalizeCwd(value) {
+    try {
+        return realpathSync(value);
+    }
+    catch {
+        return value.length > 1 && value.endsWith("/") ? value.slice(0, -1) : value;
+    }
+}
+function isTrustedPython3(path) {
+    if (!isAbsolute(path))
+        return false;
+    try {
+        if (!existsSync(path))
+            return false;
+        const st = statSync(path);
+        if (!st.isFile())
+            return false;
+        const resolved = realpathSync(path);
+        return resolved.startsWith("/usr/bin/python") || resolved.startsWith("/bin/python");
+    }
+    catch {
+        return false;
+    }
+}
+function isAncestorPid(ancestor, pid) {
+    let current = pid;
+    for (let step = 0; step < 32; step += 1) {
+        const parent = parentPid(current);
+        if (parent === undefined || parent <= 1)
+            return false;
+        if (parent === ancestor)
+            return true;
+        if (parent === current)
+            return false;
+        current = parent;
+    }
+    return false;
+}
+function parentPid(pid) {
+    try {
+        const status = readFileSync(`/proc/${pid}/status`, "utf8");
+        const match = /^PPid:\s*(\d+)\s*$/m.exec(status);
+        if (!match)
+            return undefined;
+        const ppid = Number.parseInt(match[1] ?? "", 10);
+        return Number.isInteger(ppid) && ppid >= 0 ? ppid : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=unix-peercred.js.map

package/dist/src/shared/unix-peercred.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unix-peercred.js","sourceRoot":"","sources":["../../../src/shared/unix-peercred.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEzF,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,+DAA+D;AAC/D,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,+FAA+F;AAC/F,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,kBAAkB,EAAE,cAAc,CAAU,CAAC;AAEhF,IAAI,iBAAqC,CAAC;AAE1C,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,EAAE,GAAI,MAAwC,CAAC,OAAO,EAAE,EAAE,CAAC;IACjE,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACpF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,0FAA0F,CAC3F,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CACtB,OAAO,EACP;QACE,IAAI;QACJ;YACE,4BAA4B;YAC5B,0DAA0D;YAC1D,uBAAuB,UAAU,KAAK,WAAW,0BAA0B;YAC3E,6CAA6C;YAC7C,4BAA4B;SAC7B,CAAC,IAAI,CAAC,IAAI,CAAC;KACb,EACD;QACE,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC;QAC3B,OAAO,EAAE,KAAK;KACf,CACF,CAAC;IACF,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,CACX,4CAA4C,EAC5C,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC,CACpE,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,IAAI,iBAAiB;QAAE,OAAO,iBAAiB,CAAC;IAChD,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;QAC3C,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;YAAE,SAAS;QAC3C,iBAAiB,GAAG,SAAS,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,OAAe;IACjE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QAC7F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,OAAe;IACjE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,KAAa;IAC1C,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;YAAE,OAAO,KAAK,CAAC;QAC/B,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,GAAW;IAClD,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACrC,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/drizzle/0008_pane_tombstones.sql

@@ -0,0 +1,9 @@
+CREATE TABLE `agent_pane_tombstones` (
+	`closed_at` integer NOT NULL,
+	`herdr_session_name` text NOT NULL,
+	`pane_generation` text,
+	`pane_id` text NOT NULL,
+	FOREIGN KEY (`herdr_session_name`) REFERENCES `herdr_sessions`(`name`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE INDEX `agent_pane_tombstones_pane_idx` ON `agent_pane_tombstones` (`herdr_session_name`,`pane_id`);

package/drizzle/0009_high_lake.sql

@@ -0,0 +1,24 @@
+CREATE TABLE `daemon_meta` (
+	`key` text PRIMARY KEY NOT NULL,
+	`value` text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `status_event_plans` (
+	`agent_id` text NOT NULL,
+	`attempts` integer DEFAULT 0 NOT NULL,
+	`compact_history_json` text,
+	`created_at` integer NOT NULL,
+	`from_status` text NOT NULL,
+	`herdr_event_key` text,
+	`herdr_session_name` text NOT NULL,
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`last_error` text,
+	`pane_generation` text,
+	`pane_id` text NOT NULL,
+	`status` text DEFAULT 'pending' NOT NULL,
+	`to_status` text NOT NULL,
+	`updated_at` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `status_event_plans_session_key_idx` ON `status_event_plans` (`herdr_session_name`,`herdr_event_key`) WHERE herdr_event_key IS NOT NULL;--> statement-breakpoint
+CREATE INDEX `status_event_plans_status_id_idx` ON `status_event_plans` (`status`,`id`);