@drisp/cli 0.4.4 → 0.4.7

package/dist/chunk-6TJHAUNB.js

@@ -1,161 +0,0 @@
-import {
-  isLoopbackHost
-} from "./chunk-4CRZXLIP.js";
-
-// src/gateway/auth.ts
-import crypto from "crypto";
-import fs from "fs";
-import path from "path";
-var TOKEN_BYTES = 32;
-function loadOrCreateToken(tokenPath) {
-  try {
-    const buf = fs.readFileSync(tokenPath);
-    const text = buf.toString("utf-8").trim();
-    if (text.length >= 16) return text;
-  } catch (err) {
-    const code = err.code;
-    if (code !== "ENOENT") throw err;
-  }
-  return writeNewToken(tokenPath);
-}
-function rotateGatewayToken(tokenPath) {
-  return writeNewToken(tokenPath);
-}
-function writeNewToken(tokenPath) {
-  const dir = path.dirname(tokenPath);
-  fs.mkdirSync(dir, { recursive: true, mode: 448 });
-  const token = crypto.randomBytes(TOKEN_BYTES).toString("base64url");
-  const tmpPath = `${tokenPath}.tmp-${process.pid}-${crypto.randomBytes(4).toString("hex")}`;
-  fs.writeFileSync(tmpPath, token + "\n", { mode: 384 });
-  try {
-    fs.renameSync(tmpPath, tokenPath);
-  } catch (err) {
-    try {
-      fs.unlinkSync(tmpPath);
-    } catch {
-    }
-    throw err;
-  }
-  if (process.platform !== "win32") {
-    fs.chmodSync(dir, 448);
-    fs.chmodSync(tokenPath, 384);
-  }
-  return token;
-}
-function timingSafeTokenEqual(a, b) {
-  const ab = Buffer.from(a, "utf-8");
-  const bb = Buffer.from(b, "utf-8");
-  if (ab.length !== bb.length) {
-    const filler = Buffer.alloc(Math.max(ab.length, bb.length));
-    crypto.timingSafeEqual(filler, filler);
-    return false;
-  }
-  return crypto.timingSafeEqual(ab, bb);
-}
-function requireTokenForBind(spec, token) {
-  if (spec.kind === "uds" || isLoopbackHost(spec.host)) return;
-  if (!token || token.length < 16) {
-    throw new Error(
-      `gateway: refusing to bind ${spec.host}:${spec.port} without token configured`
-    );
-  }
-  if (spec.tls) return;
-  if (!spec.insecure) {
-    throw new Error(
-      `gateway: refusing to bind ${spec.host}:${spec.port} without TLS; pass --tls-cert/--tls-key, or --insecure only for trusted reverse-proxy/tunnel deployments`
-    );
-  }
-}
-
-// src/infra/config/channels.ts
-import fs2 from "fs";
-import os from "os";
-import path2 from "path";
-function channelSidecarDir(home = os.homedir()) {
-  return path2.join(home, ".config", "athena", "channels");
-}
-function loadChannelSidecars(home = os.homedir()) {
-  const dir = channelSidecarDir(home);
-  const sidecars = [];
-  const errors = [];
-  let entries;
-  try {
-    entries = fs2.readdirSync(dir);
-  } catch (err) {
-    const code = err.code;
-    if (code === "ENOENT") return { sidecars, errors };
-    errors.push({
-      path: dir,
-      reason: `read dir failed: ${err instanceof Error ? err.message : String(err)}`
-    });
-    return { sidecars, errors };
-  }
-  for (const entry of entries) {
-    if (!entry.endsWith(".json")) continue;
-    const full = path2.join(dir, entry);
-    const name = entry.slice(0, -".json".length);
-    const result = loadOne(name, full);
-    if (result.ok) sidecars.push(result.sidecar);
-    else errors.push({ path: full, reason: result.reason });
-  }
-  return { sidecars, errors };
-}
-function loadOne(name, filePath) {
-  let raw;
-  try {
-    if (process.platform !== "win32") {
-      const stat = fs2.statSync(filePath);
-      if ((stat.mode & 63) !== 0) {
-        return {
-          ok: false,
-          reason: `file ${filePath} is too permissive (mode ${(stat.mode & 511).toString(8)}); chmod 600`
-        };
-      }
-    }
-    raw = JSON.parse(fs2.readFileSync(filePath, "utf-8"));
-  } catch (err) {
-    return {
-      ok: false,
-      reason: err instanceof Error ? err.message : String(err)
-    };
-  }
-  if (typeof raw !== "object" || raw === null) {
-    return { ok: false, reason: "config root must be an object" };
-  }
-  const obj = raw;
-  const userIdsRaw = obj["allowed_user_ids"];
-  const allowedUserIds = [];
-  if (userIdsRaw !== void 0) {
-    if (!Array.isArray(userIdsRaw)) {
-      return { ok: false, reason: "allowed_user_ids must be an array" };
-    }
-    for (const id of userIdsRaw) {
-      if (typeof id === "string") allowedUserIds.push(id);
-      else if (typeof id === "number") allowedUserIds.push(String(id));
-      else
-        return {
-          ok: false,
-          reason: "allowed_user_ids entries must be string or number"
-        };
-    }
-  }
-  const options = {};
-  for (const [key, value] of Object.entries(obj)) {
-    if (key === "allowed_user_ids") continue;
-    options[key] = value;
-  }
-  return {
-    ok: true,
-    sidecar: { name, path: filePath, allowedUserIds, options }
-  };
-}
-
-export {
-  loadOrCreateToken,
-  rotateGatewayToken,
-  timingSafeTokenEqual,
-  requireTokenForBind,
-  channelSidecarDir,
-  loadChannelSidecars
-};
-//# sourceMappingURL=chunk-6TJHAUNB.js.map