@henlii/pidance 0.2.31 → 0.2.33

package/.next/server/chunks/329.js

@@ -1 +1 @@
-exports.id=329,exports.ids=[329],exports.modules={7635:(a,b,c)=>{"use strict";c.d(b,{JF:()=>l,OW:()=>p,Um:()=>q,gl:()=>m,jT:()=>o,uy:()=>n});var d=c(716),e=c(89477),f=c.n(e),g=c(86697),h=c.n(g),i=c(62228);let j={existsSync:a=>f().existsSync(a),readFileSync:(a,b)=>f().readFileSync(a,b),writeFileSync:(a,b,c)=>f().writeFileSync(a,b,c),renameSync:(a,b)=>f().renameSync(a,b),mkdirSync:(a,b)=>{f().mkdirSync(a,b)}};function k(a){let b=a??process.env.PI_CODING_AGENT_DIR??h().join((0,i.homedir)(),".pi","agent");return h().join(b,"pidance-server.json")}function l(a,b){if(!a||!b||!b.salt||!b.hash)return!1;try{let c=Buffer.from(b.hash,"hex"),e=Buffer.from(b.salt,"hex");if(0===c.length||0===e.length)return!1;let f=(0,d.scryptSync)(a.normalize().trim(),e,c.length);return f.length===c.length&&(0,d.timingSafeEqual)(f,c)}catch{return!1}}function m(a){return!!a?.passwordHash}function n(a=k(),b=j){let c={passwordHash:null,remoteEnabled:!1,port:null};try{if(!b.existsSync(a))return c;let d=b.readFileSync(a,"utf8"),e=JSON.parse(d),f=e.passwordHash,g=f&&"object"==typeof f&&"string"==typeof f.salt&&"string"==typeof f.hash?{salt:f.salt,hash:f.hash}:null,h="number"==typeof e.port&&Number.isInteger(e.port)&&e.port>=1&&e.port<=65535?e.port:null;return{passwordHash:g,remoteEnabled:!0===e.remoteEnabled,port:h}}catch{return c}}function o(a,b=k(),c=j){c.mkdirSync(h().dirname(b),{recursive:!0});let d=`${b}.tmp-${process.pid}`;c.writeFileSync(d,JSON.stringify(a,null,2),{mode:384}),c.renameSync(d,b)}function p(a,b){return"string"==typeof a&&a.length>0||m(b)}function q(a,b,c){let e=a.passwordHash,f=!1,g="string"==typeof b.password&&b.password.length>0;if(g&&!0===b.clearPassword)return{error:"bad_request"};if(g){var h;let a,c;if(b.password.length<6)return{error:"password_too_short"};h=b.password,a=(0,d.randomBytes)(16),c=(0,d.scryptSync)(h.normalize().trim(),a,64),e={salt:a.toString("hex"),hash:c.toString("hex")},f=!0}else!0===b.clearPassword&&(e=null,f=null!==a.passwordHash);let i=b.remoteEnabled??a.remoteEnabled,j=a.port;if(void 0!==b.port)if(null===b.port)j=null;else{if(!("number"==typeof b.port&&Number.isInteger(b.port))||!(b.port>=1)||!(b.port<=65535))return{error:"port_invalid"};j=b.port}let k=p(c,{passwordHash:e,remoteEnabled:i,port:j});return i&&!k?{error:"remote_requires_password"}:{config:{passwordHash:e,remoteEnabled:i,port:j},changedPassword:f}}},24813:(a,b,c)=>{"use strict";c.d(b,{$k:()=>u,BE:()=>w,D6:()=>s,K6:()=>G,Lo:()=>t,NA:()=>p,Nq:()=>y,RH:()=>H,Rv:()=>j,TO:()=>K,YF:()=>A,Zw:()=>J,bS:()=>n,eI:()=>F,fV:()=>z,hx:()=>I,n2:()=>k,oQ:()=>v,uZ:()=>o,x7:()=>B});var d=c(716),e=c(89477),f=c.n(e),g=c(86697),h=c.n(g),i=c(62228);let j="pidance_ui_session";function k(a){return a?31536e7:432e5}function l(a){return("string"==typeof a?Buffer.from(a,"utf8"):a).toString("base64url")}function m(a){return l(JSON.stringify(a))}function n(a,b){if(!a)return null;for(let c of a.split(";")){let a=c.indexOf("=");if(a<=0||c.slice(0,a).trim()!==b)continue;let d=c.slice(a+1).trim();try{return decodeURIComponent(d)}catch{return d}}return null}function o(a){let{name:b,value:c,maxAgeSeconds:d,secure:e}=a,f=Math.max(0,Math.floor(d)),g=0===f?"Thu, 01 Jan 1970 00:00:00 GMT":new Date(Date.now()+1e3*f).toUTCString(),h=[`${b}=${c}`,"Path=/","HttpOnly","SameSite=Strict",`Max-Age=${f}`,`Expires=${g}`];return e&&h.push("Secure"),h.join("; ")}function p(a,b){if(b){let a=b.split(",")[0]?.trim().toLowerCase();if("https"===a)return!0;if("http"===a)return!1}try{return"https:"===new URL(a).protocol}catch{return!1}}function q(a){let b=a??process.env.PI_CODING_AGENT_DIR??h().join((0,i.homedir)(),".pi","agent");return h().join(b,"pidance-ui-jwt-secret")}let r={readFileSync:(a,b)=>f().readFileSync(a,b),writeFileSync:(a,b,c)=>f().writeFileSync(a,b,c),mkdirSync:(a,b)=>{f().mkdirSync(a,b)},existsSync:a=>f().existsSync(a)};function s(a=process.env,b=q(),c=r){let e=a.PIDANCE_UI_JWT_SECRET||a.OPENCODE_JWT_SECRET;if("string"==typeof e&&e.length>0)return e.trim();try{if(c.existsSync(b)){let a=c.readFileSync(b,"utf8").trim();if(a)return a}}catch{}let f=(0,d.randomBytes)(32).toString("hex");try{c.mkdirSync(h().dirname(b),{recursive:!0}),c.writeFileSync(b,f,{mode:384})}catch{}return f}function t(a=process.env,b=q(),c=r){if(a.PIDANCE_UI_JWT_SECRET||a.OPENCODE_JWT_SECRET)throw Error("Cannot rotate secret while PIDANCE_UI_JWT_SECRET/OPENCODE_JWT_SECRET is set");let e=(0,d.randomBytes)(32).toString("hex");return c.mkdirSync(h().dirname(b),{recursive:!0}),c.writeFileSync(b,e,{mode:384}),e}function u(a,b,c=Date.now(),e){let f=Math.floor(c/1e3),g=f+Math.max(1,Math.floor(b/1e3)),h=m({alg:"HS256",typ:"JWT"}),i=m({type:"ui-session",iat:f,exp:g,...e?{jti:e}:{}}),j=`${h}.${i}`,k=(0,d.createHmac)("sha256",a).update(j).digest();return`${j}.${l(k)}`}function v(a,b,c=Date.now()){let e;if(!a||!b)return{valid:!1,jti:null};let f=a.split(".");if(3!==f.length)return{valid:!1,jti:null};let[g,h,i]=f,j=`${g}.${h}`,k=(0,d.createHmac)("sha256",b).update(j).digest();try{e=Buffer.from(i,"base64url")}catch{return{valid:!1,jti:null}}if(e.length!==k.length||!(0,d.timingSafeEqual)(e,k))return{valid:!1,jti:null};try{let a=JSON.parse(Buffer.from(h,"base64url").toString("utf8"));if("ui-session"!==a.type||"number"!=typeof a.exp||1e3*a.exp<=c)return{valid:!1,jti:null};return{valid:!0,jti:"string"==typeof a.jti&&a.jti.length>0?a.jti:null}}catch{return{valid:!1,jti:null}}}function w(a,b){if(!a||!b)return!1;let c=(0,d.createHash)("sha256").update(a.normalize().trim(),"utf8").digest(),e=(0,d.createHash)("sha256").update(b.normalize().trim(),"utf8").digest();return c.length===e.length&&(0,d.timingSafeEqual)(c,e)}let x=new Map;function y(a,b=Date.now()){let c=x.get(a);if(!c)return{allowed:!0,remaining:10,retryAfterSeconds:0,limit:10};if(c.lockedUntil>b)return{allowed:!1,remaining:0,retryAfterSeconds:Math.ceil((c.lockedUntil-b)/1e3),limit:10};if(b-c.windowStart>3e5)return x.delete(a),{allowed:!0,remaining:10,retryAfterSeconds:0,limit:10};let d=Math.max(0,10-c.fails);return{allowed:d>0,remaining:d,retryAfterSeconds:0,limit:10}}function z(a,b=Date.now()){let c=x.get(a);(!c||b-c.windowStart>3e5)&&(c={fails:0,windowStart:b,lockedUntil:0}),c.fails+=1,c.fails>=10&&(c.lockedUntil=b+9e5),x.set(a,c)}function A(a){x.delete(a)}function B(a){let b=a["x-forwarded-for"];if("string"==typeof b&&b.trim())return b.split(",")[0].trim().replace(/^::ffff:/,"");let c=a["x-real-ip"];return"string"==typeof c&&c.trim()?c.trim().replace(/^::ffff:/,""):"unknown"}let C={existsSync:a=>f().existsSync(a),readFileSync:(a,b)=>f().readFileSync(a,b),writeFileSync:(a,b,c)=>f().writeFileSync(a,b,c),renameSync:(a,b)=>f().renameSync(a,b),mkdirSync:(a,b)=>{f().mkdirSync(a,b)}};function D(a){let b=a??process.env.PI_CODING_AGENT_DIR??h().join((0,i.homedir)(),".pi","agent");return h().join(b,"pidance-ui-sessions.json")}function E(a,b,c){c.mkdirSync(h().dirname(b),{recursive:!0});let d=`${b}.tmp-${process.pid}`;c.writeFileSync(d,JSON.stringify({devices:a},null,2),{mode:384}),c.renameSync(d,b)}function F(a=D(),b=C,c=Date.now()){try{if(!b.existsSync(a))return[];var d=b.readFileSync(a,"utf8");let e=JSON.parse(d);if(!e||!Array.isArray(e.devices))return[];let f=[];for(let a of e.devices)a&&"object"==typeof a&&"string"==typeof a.id&&"string"==typeof a.label&&"number"==typeof a.createdAt&&"number"==typeof a.expiresAt&&a.expiresAt>c&&f.push(a);return f}catch{return[]}}function G(a,b=D(),c=C,d=Date.now()){let e=F(b,c,d).filter(b=>b.id!==a.id);e.push(a),E(e,b,c)}function H(a,b=D(),c=C,d=Date.now()){E(F(b,c,d).filter(b=>b.id!==a),b,c)}function I(a=D(),b=C){E([],a,b)}function J(a){if(!a)return"Unknown device";let b=/Edg\/(\d+)/.exec(a)?.[1]??/Chrome\/(\d+)/.exec(a)?.[1]??/Firefox\/(\d+)/.exec(a)?.[1]??/Safari\/(\d+)/.exec(a)?.[1]?a.includes("Edg/")?"Edge":a.includes("Chrome/")?"Chrome":a.includes("Firefox/")?"Firefox":"Safari":"Browser",c=/Windows NT (\d+\.?\d*)/.exec(a)?"Windows":/Mac OS X/.test(a)?"macOS":/Android/.test(a)?"Android":/iPhone|iPad|iPod/.test(a)?"iOS":/Linux/.test(a)?"Linux":null,d=c?`${b} \xb7 ${c}`:b;return d.length>60?`${d.slice(0,57)}...`:d}function K(a,b,c=Date.now(),d,e){let f=n(a,j);if(!f)return!1;let{valid:g,jti:h}=v(f,b,c);return!!g&&(!h||function(a,b=D(),c=C,d=Date.now()){return!!a&&F(b,c,d).some(b=>b.id===a)}(h,d,e,c))}},78335:()=>{},78749:(a,b,c)=>{"use strict";c.d(b,{IM:()=>e,dK:()=>f}),c(55511),c(91645),c(24813);var d=c(7635);function e(a){let b=a.PIDANCE_PASSWORD&&a.PIDANCE_PASSWORD.length>0?a.PIDANCE_PASSWORD:a.PI_WEB_PASSWORD;return"string"==typeof b&&b.length>0?b:null}function f(a,b){return null!==e(a)||(0,d.gl)(b)}},96487:()=>{}};
+exports.id=329,exports.ids=[329],exports.modules={7635:(a,b,c)=>{"use strict";c.d(b,{JF:()=>l,OW:()=>p,Um:()=>q,gl:()=>m,jT:()=>o,uy:()=>n});var d=c(716),e=c(89477),f=c.n(e),g=c(86697),h=c.n(g),i=c(62228);let j={existsSync:a=>f().existsSync(a),readFileSync:(a,b)=>f().readFileSync(a,b),writeFileSync:(a,b,c)=>f().writeFileSync(a,b,c),renameSync:(a,b)=>f().renameSync(a,b),mkdirSync:(a,b)=>{f().mkdirSync(a,b)}};function k(a){let b=a??process.env.PI_CODING_AGENT_DIR??h().join((0,i.homedir)(),".pi","agent");return h().join(b,"pidance-server.json")}function l(a,b){if(!a||!b||!b.salt||!b.hash)return!1;try{let c=Buffer.from(b.hash,"hex"),e=Buffer.from(b.salt,"hex");if(0===c.length||0===e.length)return!1;let f=(0,d.scryptSync)(a.normalize().trim(),e,c.length);return f.length===c.length&&(0,d.timingSafeEqual)(f,c)}catch{return!1}}function m(a){return!!a?.passwordHash}function n(a=k(),b=j){let c={passwordHash:null,remoteEnabled:!1,port:null};try{if(!b.existsSync(a))return c;let d=b.readFileSync(a,"utf8"),e=JSON.parse(d),f=e.passwordHash,g=f&&"object"==typeof f&&"string"==typeof f.salt&&"string"==typeof f.hash?{salt:f.salt,hash:f.hash}:null,h="number"==typeof e.port&&Number.isInteger(e.port)&&e.port>=1&&e.port<=65535?e.port:null;return{passwordHash:g,remoteEnabled:!0===e.remoteEnabled,port:h}}catch{return c}}function o(a,b=k(),c=j){c.mkdirSync(h().dirname(b),{recursive:!0});let d=`${b}.tmp-${process.pid}`;c.writeFileSync(d,JSON.stringify(a,null,2),{mode:384}),c.renameSync(d,b)}function p(a,b){return"string"==typeof a&&a.length>0||m(b)}function q(a,b,c){let e=a.passwordHash,f=!1,g="string"==typeof b.password&&b.password.length>0;if(g&&!0===b.clearPassword)return{error:"bad_request"};if(g){var h;let a,c;if(b.password.length<6)return{error:"password_too_short"};h=b.password,a=(0,d.randomBytes)(16),c=(0,d.scryptSync)(h.normalize().trim(),a,64),e={salt:a.toString("hex"),hash:c.toString("hex")},f=!0}else!0===b.clearPassword&&(e=null,f=null!==a.passwordHash);let i=b.remoteEnabled??a.remoteEnabled,j=a.port;if(void 0!==b.port)if(null===b.port)j=null;else{if(!("number"==typeof b.port&&Number.isInteger(b.port))||!(b.port>=1)||!(b.port<=65535))return{error:"port_invalid"};j=b.port}let k=p(c,{passwordHash:e,remoteEnabled:i,port:j});return i&&!k?{error:"remote_requires_password"}:{config:{passwordHash:e,remoteEnabled:i,port:j},changedPassword:f}}},24813:(a,b,c)=>{"use strict";c.d(b,{$k:()=>w,BA:()=>k,BE:()=>y,D6:()=>u,K6:()=>I,Lo:()=>v,NA:()=>r,Nq:()=>A,RH:()=>K,Rv:()=>j,TO:()=>N,YF:()=>C,Zw:()=>M,aH:()=>l,bS:()=>p,eI:()=>H,fV:()=>B,hx:()=>L,in:()=>J,n2:()=>m,oQ:()=>x,uZ:()=>q,x7:()=>D});var d=c(716),e=c(89477),f=c.n(e),g=c(86697),h=c.n(g),i=c(62228);let j="pidance_ui_session",k="pidance_device_id",l=31536e7;function m(a){return a?l:432e5}function n(a){return("string"==typeof a?Buffer.from(a,"utf8"):a).toString("base64url")}function o(a){return n(JSON.stringify(a))}function p(a,b){if(!a)return null;for(let c of a.split(";")){let a=c.indexOf("=");if(a<=0||c.slice(0,a).trim()!==b)continue;let d=c.slice(a+1).trim();try{return decodeURIComponent(d)}catch{return d}}return null}function q(a){let{name:b,value:c,maxAgeSeconds:d,secure:e}=a,f=Math.max(0,Math.floor(d)),g=0===f?"Thu, 01 Jan 1970 00:00:00 GMT":new Date(Date.now()+1e3*f).toUTCString(),h=[`${b}=${c}`,"Path=/","HttpOnly","SameSite=Strict",`Max-Age=${f}`,`Expires=${g}`];return e&&h.push("Secure"),h.join("; ")}function r(a,b){if(b){let a=b.split(",")[0]?.trim().toLowerCase();if("https"===a)return!0;if("http"===a)return!1}try{return"https:"===new URL(a).protocol}catch{return!1}}function s(a){let b=a??process.env.PI_CODING_AGENT_DIR??h().join((0,i.homedir)(),".pi","agent");return h().join(b,"pidance-ui-jwt-secret")}let t={readFileSync:(a,b)=>f().readFileSync(a,b),writeFileSync:(a,b,c)=>f().writeFileSync(a,b,c),mkdirSync:(a,b)=>{f().mkdirSync(a,b)},existsSync:a=>f().existsSync(a)};function u(a=process.env,b=s(),c=t){let e=a.PIDANCE_UI_JWT_SECRET||a.OPENCODE_JWT_SECRET;if("string"==typeof e&&e.length>0)return e.trim();try{if(c.existsSync(b)){let a=c.readFileSync(b,"utf8").trim();if(a)return a}}catch{}let f=(0,d.randomBytes)(32).toString("hex");try{c.mkdirSync(h().dirname(b),{recursive:!0}),c.writeFileSync(b,f,{mode:384})}catch{}return f}function v(a=process.env,b=s(),c=t){if(a.PIDANCE_UI_JWT_SECRET||a.OPENCODE_JWT_SECRET)throw Error("Cannot rotate secret while PIDANCE_UI_JWT_SECRET/OPENCODE_JWT_SECRET is set");let e=(0,d.randomBytes)(32).toString("hex");return c.mkdirSync(h().dirname(b),{recursive:!0}),c.writeFileSync(b,e,{mode:384}),e}function w(a,b,c=Date.now(),e){let f=Math.floor(c/1e3),g=f+Math.max(1,Math.floor(b/1e3)),h=o({alg:"HS256",typ:"JWT"}),i=o({type:"ui-session",iat:f,exp:g,...e?{jti:e}:{}}),j=`${h}.${i}`,k=(0,d.createHmac)("sha256",a).update(j).digest();return`${j}.${n(k)}`}function x(a,b,c=Date.now()){let e;if(!a||!b)return{valid:!1,jti:null};let f=a.split(".");if(3!==f.length)return{valid:!1,jti:null};let[g,h,i]=f,j=`${g}.${h}`,k=(0,d.createHmac)("sha256",b).update(j).digest();try{e=Buffer.from(i,"base64url")}catch{return{valid:!1,jti:null}}if(e.length!==k.length||!(0,d.timingSafeEqual)(e,k))return{valid:!1,jti:null};try{let a=JSON.parse(Buffer.from(h,"base64url").toString("utf8"));if("ui-session"!==a.type||"number"!=typeof a.exp||1e3*a.exp<=c)return{valid:!1,jti:null};return{valid:!0,jti:"string"==typeof a.jti&&a.jti.length>0?a.jti:null}}catch{return{valid:!1,jti:null}}}function y(a,b){if(!a||!b)return!1;let c=(0,d.createHash)("sha256").update(a.normalize().trim(),"utf8").digest(),e=(0,d.createHash)("sha256").update(b.normalize().trim(),"utf8").digest();return c.length===e.length&&(0,d.timingSafeEqual)(c,e)}let z=new Map;function A(a,b=Date.now()){let c=z.get(a);if(!c)return{allowed:!0,remaining:10,retryAfterSeconds:0,limit:10};if(c.lockedUntil>b)return{allowed:!1,remaining:0,retryAfterSeconds:Math.ceil((c.lockedUntil-b)/1e3),limit:10};if(b-c.windowStart>3e5)return z.delete(a),{allowed:!0,remaining:10,retryAfterSeconds:0,limit:10};let d=Math.max(0,10-c.fails);return{allowed:d>0,remaining:d,retryAfterSeconds:0,limit:10}}function B(a,b=Date.now()){let c=z.get(a);(!c||b-c.windowStart>3e5)&&(c={fails:0,windowStart:b,lockedUntil:0}),c.fails+=1,c.fails>=10&&(c.lockedUntil=b+9e5),z.set(a,c)}function C(a){z.delete(a)}function D(a){let b=a["x-forwarded-for"];if("string"==typeof b&&b.trim())return b.split(",")[0].trim().replace(/^::ffff:/,"");let c=a["x-real-ip"];return"string"==typeof c&&c.trim()?c.trim().replace(/^::ffff:/,""):"unknown"}let E={existsSync:a=>f().existsSync(a),readFileSync:(a,b)=>f().readFileSync(a,b),writeFileSync:(a,b,c)=>f().writeFileSync(a,b,c),renameSync:(a,b)=>f().renameSync(a,b),mkdirSync:(a,b)=>{f().mkdirSync(a,b)}};function F(a){let b=a??process.env.PI_CODING_AGENT_DIR??h().join((0,i.homedir)(),".pi","agent");return h().join(b,"pidance-ui-sessions.json")}function G(a,b,c){c.mkdirSync(h().dirname(b),{recursive:!0});let d=`${b}.tmp-${process.pid}`;c.writeFileSync(d,JSON.stringify({devices:a},null,2),{mode:384}),c.renameSync(d,b)}function H(a=F(),b=E,c=Date.now()){try{if(!b.existsSync(a))return[];var d=b.readFileSync(a,"utf8");let e=JSON.parse(d);if(!e||!Array.isArray(e.devices))return[];let f=[];for(let a of e.devices)a&&"object"==typeof a&&"string"==typeof a.id&&"string"==typeof a.label&&"number"==typeof a.createdAt&&"number"==typeof a.expiresAt&&a.expiresAt>c&&f.push(a);return f}catch{return[]}}function I(a,b=F(),c=E,d=Date.now()){let e=H(b,c,d),f=e.findIndex(b=>b.id===a.id);f>=0?e[f]=a:e.push(a),G(e,b,c)}function J(a){let b=p(a,k);return"string"==typeof b&&/^[0-9a-f]{32}$/.test(b)?b:null}function K(a,b=F(),c=E,d=Date.now()){G(H(b,c,d).filter(b=>b.id!==a),b,c)}function L(a=F(),b=E){G([],a,b)}function M(a){if(!a)return"Unknown device";let b=/Edg\/(\d+)/.exec(a)?.[1]??/Chrome\/(\d+)/.exec(a)?.[1]??/Firefox\/(\d+)/.exec(a)?.[1]??/Safari\/(\d+)/.exec(a)?.[1]?a.includes("Edg/")?"Edge":a.includes("Chrome/")?"Chrome":a.includes("Firefox/")?"Firefox":"Safari":"Browser",c=/Windows NT (\d+\.?\d*)/.exec(a)?"Windows":/Mac OS X/.test(a)?"macOS":/Android/.test(a)?"Android":/iPhone|iPad|iPod/.test(a)?"iOS":/Linux/.test(a)?"Linux":null,d=c?`${b} \xb7 ${c}`:b;return d.length>60?`${d.slice(0,57)}...`:d}function N(a,b,c=Date.now(),d,e){let f=p(a,j);if(!f)return!1;let{valid:g,jti:h}=x(f,b,c);return!!g&&(!h||function(a,b=F(),c=E,d=Date.now()){return!!a&&H(b,c,d).some(b=>b.id===a)}(h,d,e,c))}},78335:()=>{},78749:(a,b,c)=>{"use strict";c.d(b,{IM:()=>e,dK:()=>f}),c(55511),c(91645),c(24813);var d=c(7635);function e(a){let b=a.PIDANCE_PASSWORD&&a.PIDANCE_PASSWORD.length>0?a.PIDANCE_PASSWORD:a.PI_WEB_PASSWORD;return"string"==typeof b&&b.length>0?b:null}function f(a,b){return null!==e(a)||(0,d.gl)(b)}},96487:()=>{}};