@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/core/remote/iroh/control.js

@@ -0,0 +1,326 @@
+import { createHash } from "node:crypto";
+import { chmod, lstat, mkdir, rm } from "node:fs/promises";
+import { connect } from "node:net";
+import { tmpdir } from "node:os";
+import { basename, dirname, join } from "node:path";
+import { isIrohRemoteRelayMode } from "./protocol.js";
+export const IROH_REMOTE_PAIR_CONTROL_REQUEST_TYPE = "volt_iroh_pair_request";
+export const IROH_REMOTE_PAIR_CONTROL_RESPONSE_TYPE = "volt_iroh_pair_response";
+export const IROH_REMOTE_REVOKE_CONTROL_REQUEST_TYPE = "volt_iroh_revoke_request";
+export const IROH_REMOTE_REVOKE_CONTROL_RESPONSE_TYPE = "volt_iroh_revoke_response";
+export const DEFAULT_IROH_REMOTE_CONTROL_TIMEOUT_MS = 5_000;
+const DEFAULT_IROH_REMOTE_CONTROL_ACTIVE_RETRY_ATTEMPTS = 10;
+const DEFAULT_IROH_REMOTE_CONTROL_ACTIVE_RETRY_DELAY_MS = 250;
+const IROH_REMOTE_CONTROL_ROOT_DIR = "volt-iroh-remote";
+const IROH_REMOTE_UNIX_CONTROL_PATH_MAX_BYTES = 100;
+export function getIrohRemoteControlPath(statePath) {
+    const hash = createHash("sha256").update(statePath).digest("hex").slice(0, 32);
+    if (process.platform === "win32") {
+        return `\\\\.\\pipe\\volt-iroh-remote-${hash}`;
+    }
+    const defaultPath = join(tmpdir(), IROH_REMOTE_CONTROL_ROOT_DIR, hash, "control.sock");
+    if (Buffer.byteLength(defaultPath, "utf8") <= IROH_REMOTE_UNIX_CONTROL_PATH_MAX_BYTES) {
+        return defaultPath;
+    }
+    return join("/tmp", IROH_REMOTE_CONTROL_ROOT_DIR, hash, "control.sock");
+}
+export async function ensureIrohRemoteControlDirectory(controlPath) {
+    if (process.platform === "win32") {
+        return;
+    }
+    const controlDir = dirname(controlPath);
+    const controlRootDir = dirname(controlDir);
+    if (basename(controlRootDir) === IROH_REMOTE_CONTROL_ROOT_DIR) {
+        await ensureOwnerOnlyIrohRemoteControlDirectory(controlRootDir);
+    }
+    await ensureOwnerOnlyIrohRemoteControlDirectory(controlDir);
+}
+export async function listenIrohRemoteControlServer(server, controlPath, options = {}) {
+    await ensureIrohRemoteControlDirectory(controlPath);
+    const activeRetryAttempts = options.activeRetryAttempts ?? DEFAULT_IROH_REMOTE_CONTROL_ACTIVE_RETRY_ATTEMPTS;
+    const activeRetryDelayMs = options.activeRetryDelayMs ?? DEFAULT_IROH_REMOTE_CONTROL_ACTIVE_RETRY_DELAY_MS;
+    for (let attempt = 0;; attempt += 1) {
+        try {
+            await listenServer(server, controlPath);
+            return;
+        }
+        catch (error) {
+            if (process.platform === "win32" || !(error instanceof Error) || !isNodeErrorCode(error, "EADDRINUSE")) {
+                throw error;
+            }
+            if (await canConnectToControlPath(controlPath)) {
+                if (attempt < activeRetryAttempts) {
+                    await delay(activeRetryDelayMs);
+                    continue;
+                }
+                throw new Error(`Iroh remote host control channel is already active for this state path: ${controlPath}`);
+            }
+            await rm(controlPath, { force: true });
+        }
+    }
+}
+function listenServer(server, controlPath) {
+    return new Promise((resolveListen, rejectListen) => {
+        const cleanup = () => {
+            server.off("error", handleError);
+            server.off("listening", handleListening);
+        };
+        const handleError = (error) => {
+            cleanup();
+            rejectListen(error);
+        };
+        const handleListening = () => {
+            cleanup();
+            resolveListen();
+        };
+        server.once("error", handleError);
+        server.once("listening", handleListening);
+        try {
+            server.listen(controlPath);
+        }
+        catch (error) {
+            cleanup();
+            rejectListen(error instanceof Error ? error : new Error(String(error)));
+        }
+    });
+}
+function canConnectToControlPath(controlPath) {
+    return new Promise((resolveConnect) => {
+        const socket = connect(controlPath);
+        let settled = false;
+        const finish = (canConnect) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timeout);
+            socket.destroy();
+            resolveConnect(canConnect);
+        };
+        const timeout = setTimeout(() => finish(false), 250);
+        socket.once("connect", () => finish(true));
+        socket.once("error", () => finish(false));
+    });
+}
+function delay(ms) {
+    return new Promise((resolveDelay) => {
+        setTimeout(resolveDelay, ms);
+    });
+}
+function isNodeErrorCode(error, code) {
+    return "code" in error && error.code === code;
+}
+async function ensureOwnerOnlyIrohRemoteControlDirectory(path) {
+    await mkdir(path, { recursive: true, mode: 0o700 });
+    const pathStat = await lstat(path);
+    if (!pathStat.isDirectory() || pathStat.isSymbolicLink()) {
+        throw new Error(`Iroh remote host control directory is not a directory: ${path}`);
+    }
+    const currentUid = process.getuid?.();
+    if (currentUid !== undefined && pathStat.uid !== currentUid) {
+        throw new Error(`Iroh remote host control directory is owned by another user: ${path}`);
+    }
+    if ((pathStat.mode & 0o777) !== 0o700) {
+        await chmod(path, 0o700);
+    }
+}
+export function parseIrohRemoteControlRequest(value) {
+    const request = expectRecord(value, "Iroh remote control request");
+    const type = expectString(request.type, "control request type");
+    if (type === IROH_REMOTE_PAIR_CONTROL_REQUEST_TYPE) {
+        return parseIrohRemotePairControlRequestRecord(request);
+    }
+    if (type === IROH_REMOTE_REVOKE_CONTROL_REQUEST_TYPE) {
+        return parseIrohRemoteRevokeControlRequestRecord(request);
+    }
+    throw new Error(`Unsupported Iroh remote control request type: ${type}`);
+}
+export function parseIrohRemotePairControlRequest(value) {
+    return parseIrohRemotePairControlRequestRecord(expectRecord(value, "Iroh remote pair control request"));
+}
+function parseIrohRemotePairControlRequestRecord(request) {
+    const type = expectString(request.type, "pair control request type");
+    if (type !== IROH_REMOTE_PAIR_CONTROL_REQUEST_TYPE) {
+        throw new Error(`Unsupported Iroh remote pair control request type: ${type}`);
+    }
+    const relayMode = expectOptionalRelayMode(request.relayMode, "pair control request relayMode");
+    const unsafeApproval = expectOptionalUnsafeApproval(request.unsafeApproval, "pair control request unsafeApproval");
+    const allowTools = expectOptionalString(request.allowTools, "pair control request allowTools");
+    const labelHint = expectOptionalString(request.labelHint, "pair control request labelHint");
+    const ttlMs = expectOptionalPositiveNumber(request.ttlMs, "pair control request ttlMs");
+    return {
+        type: IROH_REMOTE_PAIR_CONTROL_REQUEST_TYPE,
+        workspace: expectString(request.workspace, "pair control request workspace"),
+        ...(allowTools === undefined ? {} : { allowTools }),
+        ...(labelHint === undefined ? {} : { labelHint }),
+        ...(relayMode === undefined ? {} : { relayMode }),
+        ...(ttlMs === undefined ? {} : { ttlMs }),
+        ...(unsafeApproval === undefined ? {} : { unsafeApproval }),
+    };
+}
+export function parseIrohRemoteRevokeControlRequest(value) {
+    return parseIrohRemoteRevokeControlRequestRecord(expectRecord(value, "Iroh remote revoke control request"));
+}
+function parseIrohRemoteRevokeControlRequestRecord(request) {
+    const type = expectString(request.type, "revoke control request type");
+    if (type !== IROH_REMOTE_REVOKE_CONTROL_REQUEST_TYPE) {
+        throw new Error(`Unsupported Iroh remote revoke control request type: ${type}`);
+    }
+    return {
+        type: IROH_REMOTE_REVOKE_CONTROL_REQUEST_TYPE,
+        nodeId: expectString(request.nodeId, "revoke control request nodeId"),
+    };
+}
+export function parseIrohRemotePairControlResponse(value) {
+    const response = expectRecord(value, "Iroh remote pair control response");
+    const type = expectString(response.type, "pair control response type");
+    if (type !== IROH_REMOTE_PAIR_CONTROL_RESPONSE_TYPE) {
+        throw new Error(`Unsupported Iroh remote control response type: ${type}`);
+    }
+    const success = expectBoolean(response.success, "pair control response success");
+    if (!success) {
+        return {
+            type: IROH_REMOTE_PAIR_CONTROL_RESPONSE_TYPE,
+            success: false,
+            error: expectString(response.error, "pair control response error"),
+        };
+    }
+    const expiresAt = expectPositiveNumber(response.expiresAt, "pair control response expiresAt");
+    return {
+        type: IROH_REMOTE_PAIR_CONTROL_RESPONSE_TYPE,
+        success: true,
+        expiresAt,
+        ticket: expectString(response.ticket, "pair control response ticket"),
+    };
+}
+export function parseIrohRemoteRevokeControlResponse(value) {
+    const response = expectRecord(value, "Iroh remote revoke control response");
+    const type = expectString(response.type, "revoke control response type");
+    if (type !== IROH_REMOTE_REVOKE_CONTROL_RESPONSE_TYPE) {
+        throw new Error(`Unsupported Iroh remote revoke control response type: ${type}`);
+    }
+    const success = expectBoolean(response.success, "revoke control response success");
+    if (!success) {
+        return {
+            type: IROH_REMOTE_REVOKE_CONTROL_RESPONSE_TYPE,
+            success: false,
+            error: expectString(response.error, "revoke control response error"),
+        };
+    }
+    return {
+        type: IROH_REMOTE_REVOKE_CONTROL_RESPONSE_TYPE,
+        success: true,
+        closed: expectBoolean(response.closed, "revoke control response closed"),
+        closedCount: expectNonNegativeNumber(response.closedCount, "revoke control response closedCount"),
+    };
+}
+export async function requestIrohRemotePairingTicket(options) {
+    return await requestIrohRemoteControl(options, parseIrohRemotePairControlResponse);
+}
+export async function requestIrohRemoteActiveRevocation(options) {
+    return await requestIrohRemoteControl(options, parseIrohRemoteRevokeControlResponse);
+}
+async function requestIrohRemoteControl(options, parseResponse) {
+    const controlPath = getIrohRemoteControlPath(options.statePath);
+    const timeoutMs = options.timeoutMs ?? DEFAULT_IROH_REMOTE_CONTROL_TIMEOUT_MS;
+    const socket = connect(controlPath);
+    socket.setEncoding("utf8");
+    return await new Promise((resolve, reject) => {
+        let buffer = "";
+        let settled = false;
+        const timeout = setTimeout(() => {
+            finish(undefined, new Error("Timed out waiting for a running Iroh remote host control response"));
+        }, timeoutMs);
+        const finish = (response, error) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timeout);
+            socket.destroy();
+            if (error) {
+                reject(error);
+                return;
+            }
+            if (!response) {
+                reject(new Error("Iroh remote host control channel closed without a response"));
+                return;
+            }
+            resolve(response);
+        };
+        socket.once("connect", () => {
+            socket.write(`${JSON.stringify(options.request)}\n`);
+        });
+        socket.on("data", (chunk) => {
+            buffer += chunk;
+            const newlineIndex = buffer.indexOf("\n");
+            if (newlineIndex === -1)
+                return;
+            try {
+                finish(parseResponse(JSON.parse(buffer.slice(0, newlineIndex))));
+            }
+            catch (error) {
+                finish(undefined, error instanceof Error ? error : new Error(String(error)));
+            }
+        });
+        socket.once("error", (error) => {
+            finish(undefined, new Error(`No running Iroh remote host control channel is available (${error.message})`));
+        });
+        socket.once("end", () => finish());
+    });
+}
+function expectRecord(value, description) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new Error(`${description} must be an object`);
+    }
+    return value;
+}
+function expectString(value, description) {
+    if (typeof value !== "string" || value.length === 0) {
+        throw new Error(`${description} must be a non-empty string`);
+    }
+    return value;
+}
+function expectOptionalString(value, description) {
+    if (value === undefined)
+        return undefined;
+    return expectString(value, description);
+}
+function expectBoolean(value, description) {
+    if (typeof value !== "boolean") {
+        throw new Error(`${description} must be a boolean`);
+    }
+    return value;
+}
+function expectPositiveNumber(value, description) {
+    if (typeof value !== "number" || !Number.isFinite(value) || value <= 0) {
+        throw new Error(`${description} must be a positive number`);
+    }
+    return value;
+}
+function expectNonNegativeNumber(value, description) {
+    if (typeof value !== "number" || !Number.isFinite(value) || value < 0) {
+        throw new Error(`${description} must be a non-negative number`);
+    }
+    return value;
+}
+function expectOptionalPositiveNumber(value, description) {
+    if (value === undefined)
+        return undefined;
+    return expectPositiveNumber(value, description);
+}
+function expectOptionalRelayMode(value, description) {
+    if (value === undefined)
+        return undefined;
+    if (!isIrohRemoteRelayMode(value)) {
+        throw new Error(`${description} must be disabled, development, or production`);
+    }
+    return value;
+}
+function expectOptionalUnsafeApproval(value, description) {
+    if (value === undefined)
+        return undefined;
+    if (value !== "tty_confirmation" && value !== "yes_flag") {
+        throw new Error(`${description} must be tty_confirmation or yes_flag`);
+    }
+    return value;
+}
+//# sourceMappingURL=control.js.map

package/dist/core/remote/iroh/control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control.js","sourceRoot":"","sources":["../../../../src/core/remote/iroh/control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAe,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAA4B,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAEhF,MAAM,CAAC,MAAM,qCAAqC,GAAG,wBAAwB,CAAC;AAC9E,MAAM,CAAC,MAAM,sCAAsC,GAAG,yBAAyB,CAAC;AAChF,MAAM,CAAC,MAAM,uCAAuC,GAAG,0BAA0B,CAAC;AAClF,MAAM,CAAC,MAAM,wCAAwC,GAAG,2BAA2B,CAAC;AACpF,MAAM,CAAC,MAAM,sCAAsC,GAAG,KAAK,CAAC;AAE5D,MAAM,iDAAiD,GAAG,EAAE,CAAC;AAC7D,MAAM,iDAAiD,GAAG,GAAG,CAAC;AAC9D,MAAM,4BAA4B,GAAG,kBAAkB,CAAC;AACxD,MAAM,uCAAuC,GAAG,GAAG,CAAC;AA6DpD,MAAM,UAAU,wBAAwB,CAAC,SAAiB,EAAU;IACnE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,iCAAiC,IAAI,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,4BAA4B,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,uCAAuC,EAAE,CAAC;QACvF,OAAO,WAAW,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,EAAE,4BAA4B,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;AAAA,CACxE;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,WAAmB,EAAiB;IAC1F,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO;IACR,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,cAAc,CAAC,KAAK,4BAA4B,EAAE,CAAC;QAC/D,MAAM,yCAAyC,CAAC,cAAc,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,yCAAyC,CAAC,UAAU,CAAC,CAAC;AAAA,CAC5D;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,MAAc,EACd,WAAmB,EACnB,OAAO,GAAyC,EAAE,EAClC;IAChB,MAAM,gCAAgC,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,iDAAiD,CAAC;IAC7G,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,iDAAiD,CAAC;IAC3G,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC;YACJ,MAAM,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACxC,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;gBACxG,MAAM,KAAK,CAAC;YACb,CAAC;YACD,IAAI,MAAM,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChD,IAAI,OAAO,GAAG,mBAAmB,EAAE,CAAC;oBACnC,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;oBAChC,SAAS;gBACV,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,2EAA2E,WAAW,EAAE,CAAC,CAAC;YAC3G,CAAC;YACD,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;IACF,CAAC;AAAA,CACD;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,WAAmB,EAAiB;IACzE,OAAO,IAAI,OAAO,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QAAA,CACzC,CAAC;QACF,MAAM,WAAW,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC;YACrC,OAAO,EAAE,CAAC;YACV,YAAY,CAAC,KAAK,CAAC,CAAC;QAAA,CACpB,CAAC;QACF,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;YACV,aAAa,EAAE,CAAC;QAAA,CAChB,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QAC1C,IAAI,CAAC;YACJ,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,CAAC;YACV,YAAY,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzE,CAAC;IAAA,CACD,CAAC,CAAC;AAAA,CACH;AAED,SAAS,uBAAuB,CAAC,WAAmB,EAAoB;IACvE,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,UAAmB,EAAE,EAAE,CAAC;YACvC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,cAAc,CAAC,UAAU,CAAC,CAAC;QAAA,CAC3B,CAAC;QACF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAAA,CAC1C,CAAC,CAAC;AAAA,CACH;AAED,SAAS,KAAK,CAAC,EAAU,EAAiB;IACzC,OAAO,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC;QACpC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAAA,CAC7B,CAAC,CAAC;AAAA,CACH;AAED,SAAS,eAAe,CAAC,KAAY,EAAE,IAAY,EAAW;IAC7D,OAAO,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;AAAA,CAC9C;AAED,KAAK,UAAU,yCAAyC,CAAC,IAAY,EAAiB;IACrF,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,0DAA0D,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IACtC,IAAI,UAAU,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,gEAAgE,IAAI,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QACvC,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;AAAA,CACD;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAc,EAA4B;IACvF,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;IAChE,IAAI,IAAI,KAAK,qCAAqC,EAAE,CAAC;QACpD,OAAO,uCAAuC,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,IAAI,KAAK,uCAAuC,EAAE,CAAC;QACtD,OAAO,yCAAyC,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,EAAE,CAAC,CAAC;AAAA,CACzE;AAED,MAAM,UAAU,iCAAiC,CAAC,KAAc,EAAgC;IAC/F,OAAO,uCAAuC,CAAC,YAAY,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC,CAAC;AAAA,CACxG;AAED,SAAS,uCAAuC,CAAC,OAAgC,EAAgC;IAChH,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;IACrE,IAAI,IAAI,KAAK,qCAAqC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,sDAAsD,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;IAC/F,MAAM,cAAc,GAAG,4BAA4B,CAAC,OAAO,CAAC,cAAc,EAAE,qCAAqC,CAAC,CAAC;IACnH,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,EAAE,iCAAiC,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,4BAA4B,CAAC,OAAO,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;IACxF,OAAO;QACN,IAAI,EAAE,qCAAqC;QAC3C,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,gCAAgC,CAAC;QAC5E,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;QACnD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;KAC3D,CAAC;AAAA,CACF;AAED,MAAM,UAAU,mCAAmC,CAAC,KAAc,EAAkC;IACnG,OAAO,yCAAyC,CAAC,YAAY,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC,CAAC;AAAA,CAC5G;AAED,SAAS,yCAAyC,CAAC,OAAgC,EAAkC;IACpH,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;IACvE,IAAI,IAAI,KAAK,uCAAuC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,wDAAwD,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO;QACN,IAAI,EAAE,uCAAuC;QAC7C,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,+BAA+B,CAAC;KACrE,CAAC;AAAA,CACF;AAED,MAAM,UAAU,kCAAkC,CAAC,KAAc,EAAiC;IACjG,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;IACvE,IAAI,IAAI,KAAK,sCAAsC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;IACjF,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO;YACN,IAAI,EAAE,sCAAsC;YAC5C,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAC;SAClE,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC;IAC9F,OAAO;QACN,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,IAAI;QACb,SAAS;QACT,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;KACrE,CAAC;AAAA,CACF;AAED,MAAM,UAAU,oCAAoC,CAAC,KAAc,EAAmC;IACrG,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,qCAAqC,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAC;IACzE,IAAI,IAAI,KAAK,wCAAwC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,yDAAyD,IAAI,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;IACnF,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO;YACN,IAAI,EAAE,wCAAwC;YAC9C,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;SACpE,CAAC;IACH,CAAC;IACD,OAAO;QACN,IAAI,EAAE,wCAAwC;QAC9C,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,gCAAgC,CAAC;QACxE,WAAW,EAAE,uBAAuB,CAAC,QAAQ,CAAC,WAAW,EAAE,qCAAqC,CAAC;KACjG,CAAC;AAAA,CACF;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,OAA2C,EACF;IACzC,OAAO,MAAM,wBAAwB,CAAC,OAAO,EAAE,kCAAkC,CAAC,CAAC;AAAA,CACnF;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACtD,OAA6C,EACF;IAC3C,OAAO,MAAM,wBAAwB,CAAC,OAAO,EAAE,oCAAoC,CAAC,CAAC;AAAA,CACrF;AAED,KAAK,UAAU,wBAAwB,CACtC,OAAiE,EACjE,aAA2C,EACvB;IACpB,MAAM,WAAW,GAAG,wBAAwB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,sCAAsC,CAAC;IAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE3B,OAAO,MAAM,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;QACvD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YAChC,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC,CAAC;QAAA,CAClG,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,MAAM,GAAG,CAAC,QAAmB,EAAE,KAAa,EAAE,EAAE,CAAC;YACtD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACR,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC,CAAC;gBAChF,OAAO;YACR,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,CAAC;QAAA,CAClB,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAAA,CACrD,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC;YAChB,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,YAAY,KAAK,CAAC,CAAC;gBAAE,OAAO;YAChC,IAAI,CAAC;gBACJ,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9E,CAAC;QAAA,CACD,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;YAC/B,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,6DAA6D,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAAA,CAC5G,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IAAA,CACnC,CAAC,CAAC;AAAA,CACH;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,WAAmB,EAA2B;IACnF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,oBAAoB,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAgC,CAAC;AAAA,CACxC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,WAAmB,EAAU;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,6BAA6B,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,WAAmB,EAAsB;IACtF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AAAA,CACxC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,WAAmB,EAAW;IACpE,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,oBAAoB,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,WAAmB,EAAU;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,4BAA4B,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,WAAmB,EAAU;IAC7E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,gCAAgC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,4BAA4B,CAAC,KAAc,EAAE,WAAmB,EAAsB;IAC9F,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AAAA,CAChD;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,WAAmB,EAAmC;IACtG,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,+CAA+C,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,4BAA4B,CAAC,KAAc,EAAE,WAAmB,EAAwC;IAChH,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,uCAAuC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { chmod, lstat, mkdir, rm } from \"node:fs/promises\";\nimport { connect, type Server } from \"node:net\";\nimport { tmpdir } from \"node:os\";\nimport { basename, dirname, join } from \"node:path\";\nimport { type IrohRemoteRelayMode, isIrohRemoteRelayMode } from \"./protocol.ts\";\n\nexport const IROH_REMOTE_PAIR_CONTROL_REQUEST_TYPE = \"volt_iroh_pair_request\";\nexport const IROH_REMOTE_PAIR_CONTROL_RESPONSE_TYPE = \"volt_iroh_pair_response\";\nexport const IROH_REMOTE_REVOKE_CONTROL_REQUEST_TYPE = \"volt_iroh_revoke_request\";\nexport const IROH_REMOTE_REVOKE_CONTROL_RESPONSE_TYPE = \"volt_iroh_revoke_response\";\nexport const DEFAULT_IROH_REMOTE_CONTROL_TIMEOUT_MS = 5_000;\n\nconst DEFAULT_IROH_REMOTE_CONTROL_ACTIVE_RETRY_ATTEMPTS = 10;\nconst DEFAULT_IROH_REMOTE_CONTROL_ACTIVE_RETRY_DELAY_MS = 250;\nconst IROH_REMOTE_CONTROL_ROOT_DIR = \"volt-iroh-remote\";\nconst IROH_REMOTE_UNIX_CONTROL_PATH_MAX_BYTES = 100;\n\nexport type IrohRemoteUnsafeApproval = \"tty_confirmation\" | \"yes_flag\";\n\nexport interface IrohRemotePairControlRequest {\n\ttype: typeof IROH_REMOTE_PAIR_CONTROL_REQUEST_TYPE;\n\tallowTools?: string;\n\tlabelHint?: string;\n\trelayMode?: IrohRemoteRelayMode;\n\tttlMs?: number;\n\tunsafeApproval?: IrohRemoteUnsafeApproval;\n\tworkspace: string;\n}\n\nexport interface IrohRemoteRevokeControlRequest {\n\ttype: typeof IROH_REMOTE_REVOKE_CONTROL_REQUEST_TYPE;\n\tnodeId: string;\n}\n\nexport type IrohRemoteControlRequest = IrohRemotePairControlRequest | IrohRemoteRevokeControlRequest;\n\nexport type IrohRemotePairControlResponse =\n\t| {\n\t\t\ttype: typeof IROH_REMOTE_PAIR_CONTROL_RESPONSE_TYPE;\n\t\t\tsuccess: true;\n\t\t\texpiresAt: number;\n\t\t\tticket: string;\n\t  }\n\t| {\n\t\t\ttype: typeof IROH_REMOTE_PAIR_CONTROL_RESPONSE_TYPE;\n\t\t\tsuccess: false;\n\t\t\terror: string;\n\t  };\n\nexport type IrohRemoteRevokeControlResponse =\n\t| {\n\t\t\ttype: typeof IROH_REMOTE_REVOKE_CONTROL_RESPONSE_TYPE;\n\t\t\tsuccess: true;\n\t\t\tclosed: boolean;\n\t\t\tclosedCount: number;\n\t  }\n\t| {\n\t\t\ttype: typeof IROH_REMOTE_REVOKE_CONTROL_RESPONSE_TYPE;\n\t\t\tsuccess: false;\n\t\t\terror: string;\n\t  };\n\nexport interface IrohRemoteControlClientOptions<Request extends IrohRemoteControlRequest> {\n\trequest: Request;\n\tstatePath: string;\n\ttimeoutMs?: number;\n}\n\nexport interface IrohRemoteControlServerListenOptions {\n\tactiveRetryAttempts?: number;\n\tactiveRetryDelayMs?: number;\n}\n\nexport type IrohRemotePairControlClientOptions = IrohRemoteControlClientOptions<IrohRemotePairControlRequest>;\nexport type IrohRemoteRevokeControlClientOptions = IrohRemoteControlClientOptions<IrohRemoteRevokeControlRequest>;\n\nexport function getIrohRemoteControlPath(statePath: string): string {\n\tconst hash = createHash(\"sha256\").update(statePath).digest(\"hex\").slice(0, 32);\n\tif (process.platform === \"win32\") {\n\t\treturn `\\\\\\\\.\\\\pipe\\\\volt-iroh-remote-${hash}`;\n\t}\n\tconst defaultPath = join(tmpdir(), IROH_REMOTE_CONTROL_ROOT_DIR, hash, \"control.sock\");\n\tif (Buffer.byteLength(defaultPath, \"utf8\") <= IROH_REMOTE_UNIX_CONTROL_PATH_MAX_BYTES) {\n\t\treturn defaultPath;\n\t}\n\treturn join(\"/tmp\", IROH_REMOTE_CONTROL_ROOT_DIR, hash, \"control.sock\");\n}\n\nexport async function ensureIrohRemoteControlDirectory(controlPath: string): Promise<void> {\n\tif (process.platform === \"win32\") {\n\t\treturn;\n\t}\n\tconst controlDir = dirname(controlPath);\n\tconst controlRootDir = dirname(controlDir);\n\tif (basename(controlRootDir) === IROH_REMOTE_CONTROL_ROOT_DIR) {\n\t\tawait ensureOwnerOnlyIrohRemoteControlDirectory(controlRootDir);\n\t}\n\tawait ensureOwnerOnlyIrohRemoteControlDirectory(controlDir);\n}\n\nexport async function listenIrohRemoteControlServer(\n\tserver: Server,\n\tcontrolPath: string,\n\toptions: IrohRemoteControlServerListenOptions = {},\n): Promise<void> {\n\tawait ensureIrohRemoteControlDirectory(controlPath);\n\tconst activeRetryAttempts = options.activeRetryAttempts ?? DEFAULT_IROH_REMOTE_CONTROL_ACTIVE_RETRY_ATTEMPTS;\n\tconst activeRetryDelayMs = options.activeRetryDelayMs ?? DEFAULT_IROH_REMOTE_CONTROL_ACTIVE_RETRY_DELAY_MS;\n\tfor (let attempt = 0; ; attempt += 1) {\n\t\ttry {\n\t\t\tawait listenServer(server, controlPath);\n\t\t\treturn;\n\t\t} catch (error) {\n\t\t\tif (process.platform === \"win32\" || !(error instanceof Error) || !isNodeErrorCode(error, \"EADDRINUSE\")) {\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t\tif (await canConnectToControlPath(controlPath)) {\n\t\t\t\tif (attempt < activeRetryAttempts) {\n\t\t\t\t\tawait delay(activeRetryDelayMs);\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tthrow new Error(`Iroh remote host control channel is already active for this state path: ${controlPath}`);\n\t\t\t}\n\t\t\tawait rm(controlPath, { force: true });\n\t\t}\n\t}\n}\n\nfunction listenServer(server: Server, controlPath: string): Promise<void> {\n\treturn new Promise((resolveListen, rejectListen) => {\n\t\tconst cleanup = () => {\n\t\t\tserver.off(\"error\", handleError);\n\t\t\tserver.off(\"listening\", handleListening);\n\t\t};\n\t\tconst handleError = (error: Error) => {\n\t\t\tcleanup();\n\t\t\trejectListen(error);\n\t\t};\n\t\tconst handleListening = () => {\n\t\t\tcleanup();\n\t\t\tresolveListen();\n\t\t};\n\t\tserver.once(\"error\", handleError);\n\t\tserver.once(\"listening\", handleListening);\n\t\ttry {\n\t\t\tserver.listen(controlPath);\n\t\t} catch (error) {\n\t\t\tcleanup();\n\t\t\trejectListen(error instanceof Error ? error : new Error(String(error)));\n\t\t}\n\t});\n}\n\nfunction canConnectToControlPath(controlPath: string): Promise<boolean> {\n\treturn new Promise((resolveConnect) => {\n\t\tconst socket = connect(controlPath);\n\t\tlet settled = false;\n\t\tconst finish = (canConnect: boolean) => {\n\t\t\tif (settled) return;\n\t\t\tsettled = true;\n\t\t\tclearTimeout(timeout);\n\t\t\tsocket.destroy();\n\t\t\tresolveConnect(canConnect);\n\t\t};\n\t\tconst timeout = setTimeout(() => finish(false), 250);\n\t\tsocket.once(\"connect\", () => finish(true));\n\t\tsocket.once(\"error\", () => finish(false));\n\t});\n}\n\nfunction delay(ms: number): Promise<void> {\n\treturn new Promise((resolveDelay) => {\n\t\tsetTimeout(resolveDelay, ms);\n\t});\n}\n\nfunction isNodeErrorCode(error: Error, code: string): boolean {\n\treturn \"code\" in error && error.code === code;\n}\n\nasync function ensureOwnerOnlyIrohRemoteControlDirectory(path: string): Promise<void> {\n\tawait mkdir(path, { recursive: true, mode: 0o700 });\n\tconst pathStat = await lstat(path);\n\tif (!pathStat.isDirectory() || pathStat.isSymbolicLink()) {\n\t\tthrow new Error(`Iroh remote host control directory is not a directory: ${path}`);\n\t}\n\tconst currentUid = process.getuid?.();\n\tif (currentUid !== undefined && pathStat.uid !== currentUid) {\n\t\tthrow new Error(`Iroh remote host control directory is owned by another user: ${path}`);\n\t}\n\tif ((pathStat.mode & 0o777) !== 0o700) {\n\t\tawait chmod(path, 0o700);\n\t}\n}\n\nexport function parseIrohRemoteControlRequest(value: unknown): IrohRemoteControlRequest {\n\tconst request = expectRecord(value, \"Iroh remote control request\");\n\tconst type = expectString(request.type, \"control request type\");\n\tif (type === IROH_REMOTE_PAIR_CONTROL_REQUEST_TYPE) {\n\t\treturn parseIrohRemotePairControlRequestRecord(request);\n\t}\n\tif (type === IROH_REMOTE_REVOKE_CONTROL_REQUEST_TYPE) {\n\t\treturn parseIrohRemoteRevokeControlRequestRecord(request);\n\t}\n\tthrow new Error(`Unsupported Iroh remote control request type: ${type}`);\n}\n\nexport function parseIrohRemotePairControlRequest(value: unknown): IrohRemotePairControlRequest {\n\treturn parseIrohRemotePairControlRequestRecord(expectRecord(value, \"Iroh remote pair control request\"));\n}\n\nfunction parseIrohRemotePairControlRequestRecord(request: Record<string, unknown>): IrohRemotePairControlRequest {\n\tconst type = expectString(request.type, \"pair control request type\");\n\tif (type !== IROH_REMOTE_PAIR_CONTROL_REQUEST_TYPE) {\n\t\tthrow new Error(`Unsupported Iroh remote pair control request type: ${type}`);\n\t}\n\tconst relayMode = expectOptionalRelayMode(request.relayMode, \"pair control request relayMode\");\n\tconst unsafeApproval = expectOptionalUnsafeApproval(request.unsafeApproval, \"pair control request unsafeApproval\");\n\tconst allowTools = expectOptionalString(request.allowTools, \"pair control request allowTools\");\n\tconst labelHint = expectOptionalString(request.labelHint, \"pair control request labelHint\");\n\tconst ttlMs = expectOptionalPositiveNumber(request.ttlMs, \"pair control request ttlMs\");\n\treturn {\n\t\ttype: IROH_REMOTE_PAIR_CONTROL_REQUEST_TYPE,\n\t\tworkspace: expectString(request.workspace, \"pair control request workspace\"),\n\t\t...(allowTools === undefined ? {} : { allowTools }),\n\t\t...(labelHint === undefined ? {} : { labelHint }),\n\t\t...(relayMode === undefined ? {} : { relayMode }),\n\t\t...(ttlMs === undefined ? {} : { ttlMs }),\n\t\t...(unsafeApproval === undefined ? {} : { unsafeApproval }),\n\t};\n}\n\nexport function parseIrohRemoteRevokeControlRequest(value: unknown): IrohRemoteRevokeControlRequest {\n\treturn parseIrohRemoteRevokeControlRequestRecord(expectRecord(value, \"Iroh remote revoke control request\"));\n}\n\nfunction parseIrohRemoteRevokeControlRequestRecord(request: Record<string, unknown>): IrohRemoteRevokeControlRequest {\n\tconst type = expectString(request.type, \"revoke control request type\");\n\tif (type !== IROH_REMOTE_REVOKE_CONTROL_REQUEST_TYPE) {\n\t\tthrow new Error(`Unsupported Iroh remote revoke control request type: ${type}`);\n\t}\n\treturn {\n\t\ttype: IROH_REMOTE_REVOKE_CONTROL_REQUEST_TYPE,\n\t\tnodeId: expectString(request.nodeId, \"revoke control request nodeId\"),\n\t};\n}\n\nexport function parseIrohRemotePairControlResponse(value: unknown): IrohRemotePairControlResponse {\n\tconst response = expectRecord(value, \"Iroh remote pair control response\");\n\tconst type = expectString(response.type, \"pair control response type\");\n\tif (type !== IROH_REMOTE_PAIR_CONTROL_RESPONSE_TYPE) {\n\t\tthrow new Error(`Unsupported Iroh remote control response type: ${type}`);\n\t}\n\tconst success = expectBoolean(response.success, \"pair control response success\");\n\tif (!success) {\n\t\treturn {\n\t\t\ttype: IROH_REMOTE_PAIR_CONTROL_RESPONSE_TYPE,\n\t\t\tsuccess: false,\n\t\t\terror: expectString(response.error, \"pair control response error\"),\n\t\t};\n\t}\n\tconst expiresAt = expectPositiveNumber(response.expiresAt, \"pair control response expiresAt\");\n\treturn {\n\t\ttype: IROH_REMOTE_PAIR_CONTROL_RESPONSE_TYPE,\n\t\tsuccess: true,\n\t\texpiresAt,\n\t\tticket: expectString(response.ticket, \"pair control response ticket\"),\n\t};\n}\n\nexport function parseIrohRemoteRevokeControlResponse(value: unknown): IrohRemoteRevokeControlResponse {\n\tconst response = expectRecord(value, \"Iroh remote revoke control response\");\n\tconst type = expectString(response.type, \"revoke control response type\");\n\tif (type !== IROH_REMOTE_REVOKE_CONTROL_RESPONSE_TYPE) {\n\t\tthrow new Error(`Unsupported Iroh remote revoke control response type: ${type}`);\n\t}\n\tconst success = expectBoolean(response.success, \"revoke control response success\");\n\tif (!success) {\n\t\treturn {\n\t\t\ttype: IROH_REMOTE_REVOKE_CONTROL_RESPONSE_TYPE,\n\t\t\tsuccess: false,\n\t\t\terror: expectString(response.error, \"revoke control response error\"),\n\t\t};\n\t}\n\treturn {\n\t\ttype: IROH_REMOTE_REVOKE_CONTROL_RESPONSE_TYPE,\n\t\tsuccess: true,\n\t\tclosed: expectBoolean(response.closed, \"revoke control response closed\"),\n\t\tclosedCount: expectNonNegativeNumber(response.closedCount, \"revoke control response closedCount\"),\n\t};\n}\n\nexport async function requestIrohRemotePairingTicket(\n\toptions: IrohRemotePairControlClientOptions,\n): Promise<IrohRemotePairControlResponse> {\n\treturn await requestIrohRemoteControl(options, parseIrohRemotePairControlResponse);\n}\n\nexport async function requestIrohRemoteActiveRevocation(\n\toptions: IrohRemoteRevokeControlClientOptions,\n): Promise<IrohRemoteRevokeControlResponse> {\n\treturn await requestIrohRemoteControl(options, parseIrohRemoteRevokeControlResponse);\n}\n\nasync function requestIrohRemoteControl<Response>(\n\toptions: IrohRemoteControlClientOptions<IrohRemoteControlRequest>,\n\tparseResponse: (value: unknown) => Response,\n): Promise<Response> {\n\tconst controlPath = getIrohRemoteControlPath(options.statePath);\n\tconst timeoutMs = options.timeoutMs ?? DEFAULT_IROH_REMOTE_CONTROL_TIMEOUT_MS;\n\tconst socket = connect(controlPath);\n\tsocket.setEncoding(\"utf8\");\n\n\treturn await new Promise<Response>((resolve, reject) => {\n\t\tlet buffer = \"\";\n\t\tlet settled = false;\n\t\tconst timeout = setTimeout(() => {\n\t\t\tfinish(undefined, new Error(\"Timed out waiting for a running Iroh remote host control response\"));\n\t\t}, timeoutMs);\n\n\t\tconst finish = (response?: Response, error?: Error) => {\n\t\t\tif (settled) return;\n\t\t\tsettled = true;\n\t\t\tclearTimeout(timeout);\n\t\t\tsocket.destroy();\n\t\t\tif (error) {\n\t\t\t\treject(error);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (!response) {\n\t\t\t\treject(new Error(\"Iroh remote host control channel closed without a response\"));\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tresolve(response);\n\t\t};\n\n\t\tsocket.once(\"connect\", () => {\n\t\t\tsocket.write(`${JSON.stringify(options.request)}\\n`);\n\t\t});\n\t\tsocket.on(\"data\", (chunk: string) => {\n\t\t\tbuffer += chunk;\n\t\t\tconst newlineIndex = buffer.indexOf(\"\\n\");\n\t\t\tif (newlineIndex === -1) return;\n\t\t\ttry {\n\t\t\t\tfinish(parseResponse(JSON.parse(buffer.slice(0, newlineIndex))));\n\t\t\t} catch (error) {\n\t\t\t\tfinish(undefined, error instanceof Error ? error : new Error(String(error)));\n\t\t\t}\n\t\t});\n\t\tsocket.once(\"error\", (error) => {\n\t\t\tfinish(undefined, new Error(`No running Iroh remote host control channel is available (${error.message})`));\n\t\t});\n\t\tsocket.once(\"end\", () => finish());\n\t});\n}\n\nfunction expectRecord(value: unknown, description: string): Record<string, unknown> {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n\t\tthrow new Error(`${description} must be an object`);\n\t}\n\treturn value as Record<string, unknown>;\n}\n\nfunction expectString(value: unknown, description: string): string {\n\tif (typeof value !== \"string\" || value.length === 0) {\n\t\tthrow new Error(`${description} must be a non-empty string`);\n\t}\n\treturn value;\n}\n\nfunction expectOptionalString(value: unknown, description: string): string | undefined {\n\tif (value === undefined) return undefined;\n\treturn expectString(value, description);\n}\n\nfunction expectBoolean(value: unknown, description: string): boolean {\n\tif (typeof value !== \"boolean\") {\n\t\tthrow new Error(`${description} must be a boolean`);\n\t}\n\treturn value;\n}\n\nfunction expectPositiveNumber(value: unknown, description: string): number {\n\tif (typeof value !== \"number\" || !Number.isFinite(value) || value <= 0) {\n\t\tthrow new Error(`${description} must be a positive number`);\n\t}\n\treturn value;\n}\n\nfunction expectNonNegativeNumber(value: unknown, description: string): number {\n\tif (typeof value !== \"number\" || !Number.isFinite(value) || value < 0) {\n\t\tthrow new Error(`${description} must be a non-negative number`);\n\t}\n\treturn value;\n}\n\nfunction expectOptionalPositiveNumber(value: unknown, description: string): number | undefined {\n\tif (value === undefined) return undefined;\n\treturn expectPositiveNumber(value, description);\n}\n\nfunction expectOptionalRelayMode(value: unknown, description: string): IrohRemoteRelayMode | undefined {\n\tif (value === undefined) return undefined;\n\tif (!isIrohRemoteRelayMode(value)) {\n\t\tthrow new Error(`${description} must be disabled, development, or production`);\n\t}\n\treturn value;\n}\n\nfunction expectOptionalUnsafeApproval(value: unknown, description: string): IrohRemoteUnsafeApproval | undefined {\n\tif (value === undefined) return undefined;\n\tif (value !== \"tty_confirmation\" && value !== \"yes_flag\") {\n\t\tthrow new Error(`${description} must be tty_confirmation or yes_flag`);\n\t}\n\treturn value;\n}\n"]}

package/dist/core/remote/iroh/device-log-rpc.d.ts

@@ -0,0 +1,22 @@
+import { type IrohRemoteRpcErrorResponse } from "./rpc-command-filter.ts";
+export declare const IROH_REMOTE_UPLOAD_DEVICE_LOGS_RPC_TYPE = "upload_device_logs";
+export declare const IROH_REMOTE_DEVICE_LOGS_DIR_SEGMENTS: readonly [".volt", "device-logs"];
+export declare const DEFAULT_IROH_REMOTE_DEVICE_LOG_MAX_CONTENT_BYTES: number;
+export interface IrohRemoteDeviceLogUploadRpcData {
+    path: string;
+    byteCount: number;
+}
+export type IrohRemoteDeviceLogUploadRpcResponse = {
+    id?: string;
+    type: "response";
+    command: typeof IROH_REMOTE_UPLOAD_DEVICE_LOGS_RPC_TYPE;
+    success: true;
+    data: IrohRemoteDeviceLogUploadRpcData;
+} | IrohRemoteRpcErrorResponse;
+export interface HandleIrohRemoteDeviceLogUploadRpcCommandOptions {
+    workspacePath: string;
+    maxContentBytes?: number;
+    now?: () => Date;
+}
+export declare function handleIrohRemoteDeviceLogUploadRpcCommand(command: Record<string, unknown>, options: HandleIrohRemoteDeviceLogUploadRpcCommandOptions): Promise<IrohRemoteDeviceLogUploadRpcResponse>;
+//# sourceMappingURL=device-log-rpc.d.ts.map

package/dist/core/remote/iroh/device-log-rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-log-rpc.d.ts","sourceRoot":"","sources":["../../../../src/core/remote/iroh/device-log-rpc.ts"],"names":[],"mappings":"AAKA,OAAO,EAAoC,KAAK,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAE5G,eAAO,MAAM,uCAAuC,uBAAuB,CAAC;AAE5E,eAAO,MAAM,oCAAoC,mCAAoC,CAAC;AAEtF,eAAO,MAAM,gDAAgD,QAAkB,CAAC;AAMhF,MAAM,WAAW,gCAAgC;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,oCAAoC,GAC7C;IACA,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,OAAO,uCAAuC,CAAC;IACxD,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,gCAAgC,CAAC;CACtC,GACD,0BAA0B,CAAC;AAE9B,MAAM,WAAW,gDAAgD;IAChE,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CACjB;AAED,wBAAsB,yCAAyC,CAC9D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,OAAO,EAAE,gDAAgD,GACvD,OAAO,CAAC,oCAAoC,CAAC,CAgC/C","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport type { Stats } from \"node:fs\";\nimport { chmod, lstat, mkdir, realpath } from \"node:fs/promises\";\nimport { isAbsolute, join, relative, sep } from \"node:path\";\nimport { writeDurableAtomicFile } from \"../../../utils/durable-atomic-write.ts\";\nimport { createIrohRemoteRpcErrorResponse, type IrohRemoteRpcErrorResponse } from \"./rpc-command-filter.ts\";\n\nexport const IROH_REMOTE_UPLOAD_DEVICE_LOGS_RPC_TYPE = \"upload_device_logs\";\n\nexport const IROH_REMOTE_DEVICE_LOGS_DIR_SEGMENTS = [\".volt\", \"device-logs\"] as const;\n\nexport const DEFAULT_IROH_REMOTE_DEVICE_LOG_MAX_CONTENT_BYTES = 4 * 1024 * 1024;\n\nconst DEVICE_LOG_FILE_NAME_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;\nconst DEVICE_LOG_DIRECTORY_MODE = 0o700;\nconst DEVICE_LOG_FILE_MODE = 0o600;\n\nexport interface IrohRemoteDeviceLogUploadRpcData {\n\tpath: string;\n\tbyteCount: number;\n}\n\nexport type IrohRemoteDeviceLogUploadRpcResponse =\n\t| {\n\t\t\tid?: string;\n\t\t\ttype: \"response\";\n\t\t\tcommand: typeof IROH_REMOTE_UPLOAD_DEVICE_LOGS_RPC_TYPE;\n\t\t\tsuccess: true;\n\t\t\tdata: IrohRemoteDeviceLogUploadRpcData;\n\t  }\n\t| IrohRemoteRpcErrorResponse;\n\nexport interface HandleIrohRemoteDeviceLogUploadRpcCommandOptions {\n\tworkspacePath: string;\n\tmaxContentBytes?: number;\n\tnow?: () => Date;\n}\n\nexport async function handleIrohRemoteDeviceLogUploadRpcCommand(\n\tcommand: Record<string, unknown>,\n\toptions: HandleIrohRemoteDeviceLogUploadRpcCommandOptions,\n): Promise<IrohRemoteDeviceLogUploadRpcResponse> {\n\tconst id = typeof command.id === \"string\" ? command.id : undefined;\n\tconst request = parseIrohRemoteDeviceLogUploadCommand(command, options);\n\tif (!request.ok) {\n\t\treturn createIrohRemoteRpcErrorResponse(id, IROH_REMOTE_UPLOAD_DEVICE_LOGS_RPC_TYPE, request.error);\n\t}\n\n\ttry {\n\t\tconst directory = await resolveSafeDeviceLogDirectory(options.workspacePath);\n\t\tconst targetPath = join(directory, request.fileName);\n\t\tawait writeDurableAtomicFile(targetPath, request.content, {\n\t\t\tdirectoryMode: DEVICE_LOG_DIRECTORY_MODE,\n\t\t\tfileMode: DEVICE_LOG_FILE_MODE,\n\t\t});\n\t} catch (error: unknown) {\n\t\treturn createIrohRemoteRpcErrorResponse(\n\t\t\tid,\n\t\t\tIROH_REMOTE_UPLOAD_DEVICE_LOGS_RPC_TYPE,\n\t\t\t`Failed to write device log: ${error instanceof Error ? error.message : String(error)}`,\n\t\t);\n\t}\n\n\treturn {\n\t\tid,\n\t\ttype: \"response\",\n\t\tcommand: IROH_REMOTE_UPLOAD_DEVICE_LOGS_RPC_TYPE,\n\t\tsuccess: true,\n\t\tdata: {\n\t\t\tpath: [...IROH_REMOTE_DEVICE_LOGS_DIR_SEGMENTS, request.fileName].join(\"/\"),\n\t\t\tbyteCount: request.byteCount,\n\t\t},\n\t};\n}\n\nasync function resolveSafeDeviceLogDirectory(workspacePath: string): Promise<string> {\n\tconst workspaceRoot = await realpath(workspacePath);\n\tawait assertRealDirectory(workspaceRoot, \"workspace\");\n\n\tlet parent = workspaceRoot;\n\tconst verifiedComponents: Array<{ canonicalPath: string; label: string; parentPath: string; path: string }> = [];\n\tfor (const segment of IROH_REMOTE_DEVICE_LOGS_DIR_SEGMENTS) {\n\t\tconst candidate = join(parent, segment);\n\t\tawait ensureRealDirectory(candidate, segment);\n\t\tconst canonicalCandidate = await realpath(candidate);\n\n\t\t// Recheck after realpath so swapping an existing directory for a symlink\n\t\t// during validation is caught before any client content is written.\n\t\tawait assertRealDirectory(candidate, segment);\n\t\tif (canonicalCandidate === parent || !isPathInside(parent, canonicalCandidate)) {\n\t\t\tthrow new Error(`${segment} directory escapes its verified parent`);\n\t\t}\n\t\tverifiedComponents.push({\n\t\t\tcanonicalPath: canonicalCandidate,\n\t\t\tlabel: segment,\n\t\t\tparentPath: parent,\n\t\t\tpath: candidate,\n\t\t});\n\t\tparent = canonicalCandidate;\n\t}\n\n\tif (!isPathInside(workspaceRoot, parent)) {\n\t\tthrow new Error(\"device log directory escapes the workspace\");\n\t}\n\t// Node does not expose portable openat/renameat APIs tied to a verified\n\t// directory fd. Rechecking each component immediately before the atomic\n\t// write rejects stable swaps and narrows the residual same-user race window.\n\tfor (const component of verifiedComponents) {\n\t\tawait hardenRealDirectory(component.path, component.label);\n\t\tconst currentCanonicalPath = await realpath(component.path);\n\t\tif (\n\t\t\tcurrentCanonicalPath !== component.canonicalPath ||\n\t\t\tcurrentCanonicalPath === component.parentPath ||\n\t\t\t!isPathInside(component.parentPath, currentCanonicalPath)\n\t\t) {\n\t\t\tthrow new Error(`${component.label} directory changed during validation`);\n\t\t}\n\t}\n\treturn parent;\n}\n\nasync function hardenRealDirectory(path: string, label: string): Promise<void> {\n\tawait assertRealDirectory(path, label);\n\tawait chmod(path, DEVICE_LOG_DIRECTORY_MODE);\n\tconst info = await assertRealDirectory(path, label);\n\tif (process.platform !== \"win32\" && (info.mode & 0o777) !== DEVICE_LOG_DIRECTORY_MODE) {\n\t\tthrow new Error(`${label} directory must use owner-only permissions`);\n\t}\n}\n\nasync function ensureRealDirectory(path: string, label: string): Promise<void> {\n\ttry {\n\t\tawait assertRealDirectory(path, label);\n\t\treturn;\n\t} catch (error) {\n\t\tif (!isErrnoException(error, \"ENOENT\")) {\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\ttry {\n\t\tawait mkdir(path, { mode: DEVICE_LOG_DIRECTORY_MODE });\n\t} catch (error) {\n\t\t// Another upload may have created the directory after our lstat. Validate\n\t\t// the winning entry below; anything other than that race is a real failure.\n\t\tif (!isErrnoException(error, \"EEXIST\")) {\n\t\t\tthrow error;\n\t\t}\n\t}\n\tawait assertRealDirectory(path, label);\n}\n\nasync function assertRealDirectory(path: string, label: string): Promise<Stats> {\n\tconst info = await lstat(path);\n\tif (info.isSymbolicLink()) {\n\t\tthrow new Error(`${label} directory must not be a symbolic link`);\n\t}\n\tif (!info.isDirectory()) {\n\t\tthrow new Error(`${label} path must be a directory`);\n\t}\n\treturn info;\n}\n\nfunction isPathInside(root: string, candidate: string): boolean {\n\tconst relativePath = relative(root, candidate);\n\treturn (\n\t\trelativePath === \"\" ||\n\t\t(relativePath !== \"..\" && !relativePath.startsWith(`..${sep}`) && !isAbsolute(relativePath))\n\t);\n}\n\nfunction isErrnoException(error: unknown, code: string): error is NodeJS.ErrnoException {\n\treturn error instanceof Error && \"code\" in error && (error as NodeJS.ErrnoException).code === code;\n}\n\nfunction parseIrohRemoteDeviceLogUploadCommand(\n\tcommand: Record<string, unknown>,\n\toptions: HandleIrohRemoteDeviceLogUploadRpcCommandOptions,\n): { ok: true; fileName: string; content: string; byteCount: number } | { ok: false; error: string } {\n\tif (typeof command.content !== \"string\" || command.content.length === 0) {\n\t\treturn { ok: false, error: 'Invalid RPC command payload: \"content\" must be a non-empty string' };\n\t}\n\tconst byteCount = Buffer.byteLength(command.content, \"utf8\");\n\tconst maxContentBytes = options.maxContentBytes ?? DEFAULT_IROH_REMOTE_DEVICE_LOG_MAX_CONTENT_BYTES;\n\tif (byteCount > maxContentBytes) {\n\t\treturn { ok: false, error: `Device log content exceeds maximum size of ${maxContentBytes} bytes` };\n\t}\n\tif (command.fileName === undefined) {\n\t\tconst timestamp = (options.now?.() ?? new Date())\n\t\t\t.toISOString()\n\t\t\t.replaceAll(\":\", \"-\")\n\t\t\t.replace(/\\.\\d+Z$/, \"Z\");\n\t\treturn { ok: true, fileName: `device-${timestamp}.log`, content: command.content, byteCount };\n\t}\n\tif (typeof command.fileName !== \"string\" || !DEVICE_LOG_FILE_NAME_PATTERN.test(command.fileName)) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\terror: 'Invalid RPC command payload: \"fileName\" must contain only letters, digits, \".\", \"_\", or \"-\" and must not start with \".\"',\n\t\t};\n\t}\n\treturn { ok: true, fileName: command.fileName, content: command.content, byteCount };\n}\n"]}

package/dist/core/remote/iroh/device-log-rpc.js

@@ -0,0 +1,152 @@
+import { Buffer } from "node:buffer";
+import { chmod, lstat, mkdir, realpath } from "node:fs/promises";
+import { isAbsolute, join, relative, sep } from "node:path";
+import { writeDurableAtomicFile } from "../../../utils/durable-atomic-write.js";
+import { createIrohRemoteRpcErrorResponse } from "./rpc-command-filter.js";
+export const IROH_REMOTE_UPLOAD_DEVICE_LOGS_RPC_TYPE = "upload_device_logs";
+export const IROH_REMOTE_DEVICE_LOGS_DIR_SEGMENTS = [".volt", "device-logs"];
+export const DEFAULT_IROH_REMOTE_DEVICE_LOG_MAX_CONTENT_BYTES = 4 * 1024 * 1024;
+const DEVICE_LOG_FILE_NAME_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+const DEVICE_LOG_DIRECTORY_MODE = 0o700;
+const DEVICE_LOG_FILE_MODE = 0o600;
+export async function handleIrohRemoteDeviceLogUploadRpcCommand(command, options) {
+    const id = typeof command.id === "string" ? command.id : undefined;
+    const request = parseIrohRemoteDeviceLogUploadCommand(command, options);
+    if (!request.ok) {
+        return createIrohRemoteRpcErrorResponse(id, IROH_REMOTE_UPLOAD_DEVICE_LOGS_RPC_TYPE, request.error);
+    }
+    try {
+        const directory = await resolveSafeDeviceLogDirectory(options.workspacePath);
+        const targetPath = join(directory, request.fileName);
+        await writeDurableAtomicFile(targetPath, request.content, {
+            directoryMode: DEVICE_LOG_DIRECTORY_MODE,
+            fileMode: DEVICE_LOG_FILE_MODE,
+        });
+    }
+    catch (error) {
+        return createIrohRemoteRpcErrorResponse(id, IROH_REMOTE_UPLOAD_DEVICE_LOGS_RPC_TYPE, `Failed to write device log: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    return {
+        id,
+        type: "response",
+        command: IROH_REMOTE_UPLOAD_DEVICE_LOGS_RPC_TYPE,
+        success: true,
+        data: {
+            path: [...IROH_REMOTE_DEVICE_LOGS_DIR_SEGMENTS, request.fileName].join("/"),
+            byteCount: request.byteCount,
+        },
+    };
+}
+async function resolveSafeDeviceLogDirectory(workspacePath) {
+    const workspaceRoot = await realpath(workspacePath);
+    await assertRealDirectory(workspaceRoot, "workspace");
+    let parent = workspaceRoot;
+    const verifiedComponents = [];
+    for (const segment of IROH_REMOTE_DEVICE_LOGS_DIR_SEGMENTS) {
+        const candidate = join(parent, segment);
+        await ensureRealDirectory(candidate, segment);
+        const canonicalCandidate = await realpath(candidate);
+        // Recheck after realpath so swapping an existing directory for a symlink
+        // during validation is caught before any client content is written.
+        await assertRealDirectory(candidate, segment);
+        if (canonicalCandidate === parent || !isPathInside(parent, canonicalCandidate)) {
+            throw new Error(`${segment} directory escapes its verified parent`);
+        }
+        verifiedComponents.push({
+            canonicalPath: canonicalCandidate,
+            label: segment,
+            parentPath: parent,
+            path: candidate,
+        });
+        parent = canonicalCandidate;
+    }
+    if (!isPathInside(workspaceRoot, parent)) {
+        throw new Error("device log directory escapes the workspace");
+    }
+    // Node does not expose portable openat/renameat APIs tied to a verified
+    // directory fd. Rechecking each component immediately before the atomic
+    // write rejects stable swaps and narrows the residual same-user race window.
+    for (const component of verifiedComponents) {
+        await hardenRealDirectory(component.path, component.label);
+        const currentCanonicalPath = await realpath(component.path);
+        if (currentCanonicalPath !== component.canonicalPath ||
+            currentCanonicalPath === component.parentPath ||
+            !isPathInside(component.parentPath, currentCanonicalPath)) {
+            throw new Error(`${component.label} directory changed during validation`);
+        }
+    }
+    return parent;
+}
+async function hardenRealDirectory(path, label) {
+    await assertRealDirectory(path, label);
+    await chmod(path, DEVICE_LOG_DIRECTORY_MODE);
+    const info = await assertRealDirectory(path, label);
+    if (process.platform !== "win32" && (info.mode & 0o777) !== DEVICE_LOG_DIRECTORY_MODE) {
+        throw new Error(`${label} directory must use owner-only permissions`);
+    }
+}
+async function ensureRealDirectory(path, label) {
+    try {
+        await assertRealDirectory(path, label);
+        return;
+    }
+    catch (error) {
+        if (!isErrnoException(error, "ENOENT")) {
+            throw error;
+        }
+    }
+    try {
+        await mkdir(path, { mode: DEVICE_LOG_DIRECTORY_MODE });
+    }
+    catch (error) {
+        // Another upload may have created the directory after our lstat. Validate
+        // the winning entry below; anything other than that race is a real failure.
+        if (!isErrnoException(error, "EEXIST")) {
+            throw error;
+        }
+    }
+    await assertRealDirectory(path, label);
+}
+async function assertRealDirectory(path, label) {
+    const info = await lstat(path);
+    if (info.isSymbolicLink()) {
+        throw new Error(`${label} directory must not be a symbolic link`);
+    }
+    if (!info.isDirectory()) {
+        throw new Error(`${label} path must be a directory`);
+    }
+    return info;
+}
+function isPathInside(root, candidate) {
+    const relativePath = relative(root, candidate);
+    return (relativePath === "" ||
+        (relativePath !== ".." && !relativePath.startsWith(`..${sep}`) && !isAbsolute(relativePath)));
+}
+function isErrnoException(error, code) {
+    return error instanceof Error && "code" in error && error.code === code;
+}
+function parseIrohRemoteDeviceLogUploadCommand(command, options) {
+    if (typeof command.content !== "string" || command.content.length === 0) {
+        return { ok: false, error: 'Invalid RPC command payload: "content" must be a non-empty string' };
+    }
+    const byteCount = Buffer.byteLength(command.content, "utf8");
+    const maxContentBytes = options.maxContentBytes ?? DEFAULT_IROH_REMOTE_DEVICE_LOG_MAX_CONTENT_BYTES;
+    if (byteCount > maxContentBytes) {
+        return { ok: false, error: `Device log content exceeds maximum size of ${maxContentBytes} bytes` };
+    }
+    if (command.fileName === undefined) {
+        const timestamp = (options.now?.() ?? new Date())
+            .toISOString()
+            .replaceAll(":", "-")
+            .replace(/\.\d+Z$/, "Z");
+        return { ok: true, fileName: `device-${timestamp}.log`, content: command.content, byteCount };
+    }
+    if (typeof command.fileName !== "string" || !DEVICE_LOG_FILE_NAME_PATTERN.test(command.fileName)) {
+        return {
+            ok: false,
+            error: 'Invalid RPC command payload: "fileName" must contain only letters, digits, ".", "_", or "-" and must not start with "."',
+        };
+    }
+    return { ok: true, fileName: command.fileName, content: command.content, byteCount };
+}
+//# sourceMappingURL=device-log-rpc.js.map

package/dist/core/remote/iroh/device-log-rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-log-rpc.js","sourceRoot":"","sources":["../../../../src/core/remote/iroh/device-log-rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,gCAAgC,EAAmC,MAAM,yBAAyB,CAAC;AAE5G,MAAM,CAAC,MAAM,uCAAuC,GAAG,oBAAoB,CAAC;AAE5E,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAU,CAAC;AAEtF,MAAM,CAAC,MAAM,gDAAgD,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEhF,MAAM,4BAA4B,GAAG,oCAAoC,CAAC;AAC1E,MAAM,yBAAyB,GAAG,KAAK,CAAC;AACxC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAuBnC,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC9D,OAAgC,EAChC,OAAyD,EACT;IAChD,MAAM,EAAE,GAAG,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,OAAO,GAAG,qCAAqC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,gCAAgC,CAAC,EAAE,EAAE,uCAAuC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACrG,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,sBAAsB,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE;YACzD,aAAa,EAAE,yBAAyB;YACxC,QAAQ,EAAE,oBAAoB;SAC9B,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACzB,OAAO,gCAAgC,CACtC,EAAE,EACF,uCAAuC,EACvC,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACvF,CAAC;IACH,CAAC;IAED,OAAO;QACN,EAAE;QACF,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,uCAAuC;QAChD,OAAO,EAAE,IAAI;QACb,IAAI,EAAE;YACL,IAAI,EAAE,CAAC,GAAG,oCAAoC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAC3E,SAAS,EAAE,OAAO,CAAC,SAAS;SAC5B;KACD,CAAC;AAAA,CACF;AAED,KAAK,UAAU,6BAA6B,CAAC,aAAqB,EAAmB;IACpF,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,mBAAmB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAEtD,IAAI,MAAM,GAAG,aAAa,CAAC;IAC3B,MAAM,kBAAkB,GAAsF,EAAE,CAAC;IACjH,KAAK,MAAM,OAAO,IAAI,oCAAoC,EAAE,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,kBAAkB,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QAErD,yEAAyE;QACzE,oEAAoE;QACpE,MAAM,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,kBAAkB,KAAK,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,wCAAwC,CAAC,CAAC;QACrE,CAAC;QACD,kBAAkB,CAAC,IAAI,CAAC;YACvB,aAAa,EAAE,kBAAkB;YACjC,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,MAAM;YAClB,IAAI,EAAE,SAAS;SACf,CAAC,CAAC;QACH,MAAM,GAAG,kBAAkB,CAAC;IAC7B,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC/D,CAAC;IACD,wEAAwE;IACxE,wEAAwE;IACxE,6EAA6E;IAC7E,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;QAC5C,MAAM,mBAAmB,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,oBAAoB,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5D,IACC,oBAAoB,KAAK,SAAS,CAAC,aAAa;YAChD,oBAAoB,KAAK,SAAS,CAAC,UAAU;YAC7C,CAAC,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,oBAAoB,CAAC,EACxD,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,CAAC,KAAK,sCAAsC,CAAC,CAAC;QAC3E,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa,EAAiB;IAC9E,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,KAAK,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,yBAAyB,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4CAA4C,CAAC,CAAC;IACvE,CAAC;AAAA,CACD;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa,EAAiB;IAC9E,IAAI,CAAC;QACJ,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,OAAO;IACR,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACxC,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,0EAA0E;QAC1E,4EAA4E;QAC5E,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACxC,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IACD,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAAA,CACvC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa,EAAkB;IAC/E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,SAAiB,EAAW;IAC/D,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/C,OAAO,CACN,YAAY,KAAK,EAAE;QACnB,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAC5F,CAAC;AAAA,CACF;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,IAAY,EAAkC;IACvF,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,IAAI,CAAC;AAAA,CACnG;AAED,SAAS,qCAAqC,CAC7C,OAAgC,EAChC,OAAyD,EAC2C;IACpG,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mEAAmE,EAAE,CAAC;IAClG,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,gDAAgD,CAAC;IACpG,IAAI,SAAS,GAAG,eAAe,EAAE,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8CAA8C,eAAe,QAAQ,EAAE,CAAC;IACpG,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;aAC/C,WAAW,EAAE;aACb,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;aACpB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,SAAS,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;IAC/F,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClG,OAAO;YACN,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,yHAAyH;SAChI,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;AAAA,CACrF","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport type { Stats } from \"node:fs\";\nimport { chmod, lstat, mkdir, realpath } from \"node:fs/promises\";\nimport { isAbsolute, join, relative, sep } from \"node:path\";\nimport { writeDurableAtomicFile } from \"../../../utils/durable-atomic-write.ts\";\nimport { createIrohRemoteRpcErrorResponse, type IrohRemoteRpcErrorResponse } from \"./rpc-command-filter.ts\";\n\nexport const IROH_REMOTE_UPLOAD_DEVICE_LOGS_RPC_TYPE = \"upload_device_logs\";\n\nexport const IROH_REMOTE_DEVICE_LOGS_DIR_SEGMENTS = [\".volt\", \"device-logs\"] as const;\n\nexport const DEFAULT_IROH_REMOTE_DEVICE_LOG_MAX_CONTENT_BYTES = 4 * 1024 * 1024;\n\nconst DEVICE_LOG_FILE_NAME_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;\nconst DEVICE_LOG_DIRECTORY_MODE = 0o700;\nconst DEVICE_LOG_FILE_MODE = 0o600;\n\nexport interface IrohRemoteDeviceLogUploadRpcData {\n\tpath: string;\n\tbyteCount: number;\n}\n\nexport type IrohRemoteDeviceLogUploadRpcResponse =\n\t| {\n\t\t\tid?: string;\n\t\t\ttype: \"response\";\n\t\t\tcommand: typeof IROH_REMOTE_UPLOAD_DEVICE_LOGS_RPC_TYPE;\n\t\t\tsuccess: true;\n\t\t\tdata: IrohRemoteDeviceLogUploadRpcData;\n\t  }\n\t| IrohRemoteRpcErrorResponse;\n\nexport interface HandleIrohRemoteDeviceLogUploadRpcCommandOptions {\n\tworkspacePath: string;\n\tmaxContentBytes?: number;\n\tnow?: () => Date;\n}\n\nexport async function handleIrohRemoteDeviceLogUploadRpcCommand(\n\tcommand: Record<string, unknown>,\n\toptions: HandleIrohRemoteDeviceLogUploadRpcCommandOptions,\n): Promise<IrohRemoteDeviceLogUploadRpcResponse> {\n\tconst id = typeof command.id === \"string\" ? command.id : undefined;\n\tconst request = parseIrohRemoteDeviceLogUploadCommand(command, options);\n\tif (!request.ok) {\n\t\treturn createIrohRemoteRpcErrorResponse(id, IROH_REMOTE_UPLOAD_DEVICE_LOGS_RPC_TYPE, request.error);\n\t}\n\n\ttry {\n\t\tconst directory = await resolveSafeDeviceLogDirectory(options.workspacePath);\n\t\tconst targetPath = join(directory, request.fileName);\n\t\tawait writeDurableAtomicFile(targetPath, request.content, {\n\t\t\tdirectoryMode: DEVICE_LOG_DIRECTORY_MODE,\n\t\t\tfileMode: DEVICE_LOG_FILE_MODE,\n\t\t});\n\t} catch (error: unknown) {\n\t\treturn createIrohRemoteRpcErrorResponse(\n\t\t\tid,\n\t\t\tIROH_REMOTE_UPLOAD_DEVICE_LOGS_RPC_TYPE,\n\t\t\t`Failed to write device log: ${error instanceof Error ? error.message : String(error)}`,\n\t\t);\n\t}\n\n\treturn {\n\t\tid,\n\t\ttype: \"response\",\n\t\tcommand: IROH_REMOTE_UPLOAD_DEVICE_LOGS_RPC_TYPE,\n\t\tsuccess: true,\n\t\tdata: {\n\t\t\tpath: [...IROH_REMOTE_DEVICE_LOGS_DIR_SEGMENTS, request.fileName].join(\"/\"),\n\t\t\tbyteCount: request.byteCount,\n\t\t},\n\t};\n}\n\nasync function resolveSafeDeviceLogDirectory(workspacePath: string): Promise<string> {\n\tconst workspaceRoot = await realpath(workspacePath);\n\tawait assertRealDirectory(workspaceRoot, \"workspace\");\n\n\tlet parent = workspaceRoot;\n\tconst verifiedComponents: Array<{ canonicalPath: string; label: string; parentPath: string; path: string }> = [];\n\tfor (const segment of IROH_REMOTE_DEVICE_LOGS_DIR_SEGMENTS) {\n\t\tconst candidate = join(parent, segment);\n\t\tawait ensureRealDirectory(candidate, segment);\n\t\tconst canonicalCandidate = await realpath(candidate);\n\n\t\t// Recheck after realpath so swapping an existing directory for a symlink\n\t\t// during validation is caught before any client content is written.\n\t\tawait assertRealDirectory(candidate, segment);\n\t\tif (canonicalCandidate === parent || !isPathInside(parent, canonicalCandidate)) {\n\t\t\tthrow new Error(`${segment} directory escapes its verified parent`);\n\t\t}\n\t\tverifiedComponents.push({\n\t\t\tcanonicalPath: canonicalCandidate,\n\t\t\tlabel: segment,\n\t\t\tparentPath: parent,\n\t\t\tpath: candidate,\n\t\t});\n\t\tparent = canonicalCandidate;\n\t}\n\n\tif (!isPathInside(workspaceRoot, parent)) {\n\t\tthrow new Error(\"device log directory escapes the workspace\");\n\t}\n\t// Node does not expose portable openat/renameat APIs tied to a verified\n\t// directory fd. Rechecking each component immediately before the atomic\n\t// write rejects stable swaps and narrows the residual same-user race window.\n\tfor (const component of verifiedComponents) {\n\t\tawait hardenRealDirectory(component.path, component.label);\n\t\tconst currentCanonicalPath = await realpath(component.path);\n\t\tif (\n\t\t\tcurrentCanonicalPath !== component.canonicalPath ||\n\t\t\tcurrentCanonicalPath === component.parentPath ||\n\t\t\t!isPathInside(component.parentPath, currentCanonicalPath)\n\t\t) {\n\t\t\tthrow new Error(`${component.label} directory changed during validation`);\n\t\t}\n\t}\n\treturn parent;\n}\n\nasync function hardenRealDirectory(path: string, label: string): Promise<void> {\n\tawait assertRealDirectory(path, label);\n\tawait chmod(path, DEVICE_LOG_DIRECTORY_MODE);\n\tconst info = await assertRealDirectory(path, label);\n\tif (process.platform !== \"win32\" && (info.mode & 0o777) !== DEVICE_LOG_DIRECTORY_MODE) {\n\t\tthrow new Error(`${label} directory must use owner-only permissions`);\n\t}\n}\n\nasync function ensureRealDirectory(path: string, label: string): Promise<void> {\n\ttry {\n\t\tawait assertRealDirectory(path, label);\n\t\treturn;\n\t} catch (error) {\n\t\tif (!isErrnoException(error, \"ENOENT\")) {\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\ttry {\n\t\tawait mkdir(path, { mode: DEVICE_LOG_DIRECTORY_MODE });\n\t} catch (error) {\n\t\t// Another upload may have created the directory after our lstat. Validate\n\t\t// the winning entry below; anything other than that race is a real failure.\n\t\tif (!isErrnoException(error, \"EEXIST\")) {\n\t\t\tthrow error;\n\t\t}\n\t}\n\tawait assertRealDirectory(path, label);\n}\n\nasync function assertRealDirectory(path: string, label: string): Promise<Stats> {\n\tconst info = await lstat(path);\n\tif (info.isSymbolicLink()) {\n\t\tthrow new Error(`${label} directory must not be a symbolic link`);\n\t}\n\tif (!info.isDirectory()) {\n\t\tthrow new Error(`${label} path must be a directory`);\n\t}\n\treturn info;\n}\n\nfunction isPathInside(root: string, candidate: string): boolean {\n\tconst relativePath = relative(root, candidate);\n\treturn (\n\t\trelativePath === \"\" ||\n\t\t(relativePath !== \"..\" && !relativePath.startsWith(`..${sep}`) && !isAbsolute(relativePath))\n\t);\n}\n\nfunction isErrnoException(error: unknown, code: string): error is NodeJS.ErrnoException {\n\treturn error instanceof Error && \"code\" in error && (error as NodeJS.ErrnoException).code === code;\n}\n\nfunction parseIrohRemoteDeviceLogUploadCommand(\n\tcommand: Record<string, unknown>,\n\toptions: HandleIrohRemoteDeviceLogUploadRpcCommandOptions,\n): { ok: true; fileName: string; content: string; byteCount: number } | { ok: false; error: string } {\n\tif (typeof command.content !== \"string\" || command.content.length === 0) {\n\t\treturn { ok: false, error: 'Invalid RPC command payload: \"content\" must be a non-empty string' };\n\t}\n\tconst byteCount = Buffer.byteLength(command.content, \"utf8\");\n\tconst maxContentBytes = options.maxContentBytes ?? DEFAULT_IROH_REMOTE_DEVICE_LOG_MAX_CONTENT_BYTES;\n\tif (byteCount > maxContentBytes) {\n\t\treturn { ok: false, error: `Device log content exceeds maximum size of ${maxContentBytes} bytes` };\n\t}\n\tif (command.fileName === undefined) {\n\t\tconst timestamp = (options.now?.() ?? new Date())\n\t\t\t.toISOString()\n\t\t\t.replaceAll(\":\", \"-\")\n\t\t\t.replace(/\\.\\d+Z$/, \"Z\");\n\t\treturn { ok: true, fileName: `device-${timestamp}.log`, content: command.content, byteCount };\n\t}\n\tif (typeof command.fileName !== \"string\" || !DEVICE_LOG_FILE_NAME_PATTERN.test(command.fileName)) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\terror: 'Invalid RPC command payload: \"fileName\" must contain only letters, digits, \".\", \"_\", or \"-\" and must not start with \".\"',\n\t\t};\n\t}\n\treturn { ok: true, fileName: command.fileName, content: command.content, byteCount };\n}\n"]}