@ghostlytools/cli 1.3.5 → 1.3.7

package/dist/assets/{host-BdS-7nRW.js → host-H0IYKNoK.js}

@@ -1,10 +1,10 @@
-import { $o as extractParamsFromSdp, Ai as isPublicAddress, Jo as RTC_CONFIG, Qo as callSignalHeardAt, Xo as buildSdpFromSignal, Yo as answersOffer, Zo as callRtcConfig, es as parseCallSignal, oi as checkPushEndpoint, qo as CALL_SIGNAL_MAX_AGE_MS, tl as setLinkTraceSink, ts as signalHasVideo, xl as fromBase64Url } from "./src-BLzG4Sfv.js";
-import { a as fedimintSdkOn, r as irohRelayProblem } from "./irohWeb-jErC-V0J.js";
+import { $o as extractParamsFromSdp, Ai as isPublicAddress, Jo as RTC_CONFIG, Qo as callSignalHeardAt, Xo as buildSdpFromSignal, Yo as answersOffer, Zo as callRtcConfig, es as parseCallSignal, oi as checkPushEndpoint, qo as CALL_SIGNAL_MAX_AGE_MS, tl as setLinkTraceSink, ts as signalHasVideo, xl as fromBase64Url } from "./src-gJqfoRKI.js";
+import { a as fedimintSdkOn, r as irohRelayProblem } from "./irohWeb-Bn-JA2kp.js";
 import { r as asCliError, t as CliError } from "./errors-B-zMxbcd.js";
-import { a as findChat } from "./apiKit-eh5qBKIl.js";
-import { _ as flushCardUpdates, c as paymentJson, d as nodeLocalFetch, f as chatJson, g as resumeHolds, h as groupMessageJson, l as reportAppFrames, m as groupJson, p as chatMessageJson, r as callApi, u as servedApps } from "./api-Do7NjRg2.js";
+import { a as findChat } from "./apiKit-BnpVuZrZ.js";
+import { _ as flushCardUpdates, c as paymentJson, d as nodeLocalFetch, f as chatJson, g as resumeHolds, h as groupMessageJson, l as reportAppFrames, m as groupJson, p as chatMessageJson, r as callApi, u as servedApps } from "./api-DlxlF4jP.js";
 import { n as RESTORED_MARK, r as acquireLock } from "./profiles-gPCjLOQq.js";
-import { r as privateFolder, t as ownFolder } from "./privateFolder-Bk9C9oFv.js";
+import { i as proof, l as privateFolder, n as newDaemonSecret, s as ownFolder } from "./daemonProof-B53VnZ1Z.js";
 import { createRequire } from "node:module";
 import { appendFileSync, chmodSync, closeSync, existsSync, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, renameSync, rmSync, statSync, writeFileSync, writeSync } from "node:fs";
 import { readFile } from "node:fs/promises";
@@ -4581,14 +4581,14 @@ async function startRuntime(paths, options = {}) {
 	(await import("./ghostly_iroh_web-BsAEFIjl.js")).initSync({ module: irohWasmBytes() });
 	const [{ registerFileBytes }, { NodeFileBytes }] = await Promise.all([import("./fileBytes-CgbibpbV.js"), import("./fileBytes-CfSXjTFa.js")]);
 	registerFileBytes("native", async () => new NodeFileBytes(paths.files), true);
-	const [{ EngineServer }, { createHyperEndpoint }] = await Promise.all([import("./server-BbPiCghe.js"), import("./endpoint-BOTFMpfS.js")]);
+	const [{ EngineServer }, { createHyperEndpoint }] = await Promise.all([import("./server-CkYscxE3.js"), import("./endpoint-BOTFMpfS.js")]);
 	const network = hyperdhtNetwork();
 	const dht = mainlineNetwork();
-	const mainline = dht.off ? null : new (await (import("./mainline-CYI1tZT7.js"))).Mainline({
+	const mainline = dht.off ? null : new (await (import("./mainline-gU7pE7s2.js"))).Mainline({
 		bootstrap: dht.bootstrap,
 		host: dht.host
 	});
-	const transport = mainline || pinned ? new (await (import("./mainline-CYI1tZT7.js"))).RelaysAndDht(mainline, pinned ? { relays: pinned } : {}, !!pinned) : null;
+	const transport = mainline || pinned ? new (await (import("./mainline-gU7pE7s2.js"))).RelaysAndDht(mainline, pinned ? { relays: pinned } : {}, !!pinned) : null;
 	const apps = servedApps(paths.dir).length > 0;
 	const server = new EngineServer({
 		...transport ? { transport } : {},
@@ -4734,11 +4734,12 @@ async function serve(host) {
 		else ownFolder(ctx.runtime.paths.dir, "the daemon will not put its socket there");
 	}
 	if (existsSync(path)) rmSync(path, { force: true });
+	const secret = newDaemonSecret(ctx.runtime.paths.dir);
 	const sockets = /* @__PURE__ */ new Set();
 	const server = createServer((socket) => {
 		sockets.add(socket);
 		socket.on("close", () => sockets.delete(socket));
-		connection(ctx, socket);
+		connection(ctx, socket, secret);
 	});
 	await new Promise((resolve, reject) => {
 		server.once("error", reject);
@@ -4802,7 +4803,9 @@ function ownerOnlyUmask() {
 		return null;
 	}
 }
-function connection(ctx, socket) {
+/** A client's nonce: 16 to 64 bytes as lowercase hex, so the proof is over nothing but a nonce. */
+var NONCE = /^(?:[0-9a-f]{2}){16,64}$/;
+function connection(ctx, socket, secret) {
 	const unsubscribes = [];
 	let limit = MAX_UNREAD;
 	const unsubscribe = () => {
@@ -4852,6 +4855,21 @@ function connection(ctx, socket) {
 			});
 			return;
 		}
+		if (request.method === "daemon.hello") {
+			const nonce = request.params?.nonce;
+			if (typeof nonce !== "string" || !NONCE.test(nonce)) {
+				write({
+					id,
+					error: new CliError("bad_request", "daemon.hello takes a nonce: 16 to 64 bytes as lowercase hex").toJSON()
+				});
+				return;
+			}
+			write({
+				id,
+				result: { proof: proof(secret, "daemon", nonce) }
+			});
+			return;
+		}
 		if (request.method === "events.subscribe") {
 			if (unsubscribes.length) {
 				write({
@@ -4907,4 +4925,4 @@ function connection(ctx, socket) {
 //#endregion
 export { BASELINE_NEWEST, MAX_LINE, MAX_UNREAD, keepServing, openHost, serve };
 
-//# sourceMappingURL=host-BdS-7nRW.js.map
+//# sourceMappingURL=host-H0IYKNoK.js.map