@karma42/agent 0.1.0-beta.11 → 0.1.0-beta.12

package/src/browser-pairing.mjs

@@ -1,140 +0,0 @@
-import { randomBytes, randomUUID, createHash } from 'node:crypto';
-import { constants, openSync, closeSync, writeFileSync, lstatSync, unlinkSync } from 'node:fs';
-import { join, isAbsolute } from 'node:path';
-import { projectIdentity } from './project-identity.mjs';
-import { assertStateOutsideWorkspace, canonicalPath, connectionDir, lstatExists, readPrivate, save, writePrivate } from './state.mjs';
-import { sessionHome, sessionId, validateSession } from './session.mjs';
-import { system } from './system.mjs';
-
-const TOKEN = /^[\w-]{43}$/;
-const hash = value => createHash('sha256').update(value).digest('hex');
-// Only locks created by this browser flow can be recovered automatically. Legacy/live bridge locks remain untouched.
-export function withBrowserLock(dir, action, processAlive = pid => { try { process.kill(pid, 0); return true; } catch (error) { if (error.code === 'ESRCH') return false; return true; } }) {
-  const path = join(dir, 'operation.lock'), guard = join(dir, 'browser-recovery.lock');
-  const create = () => {
-    const fd = openSync(path, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
-    try { writeFileSync(fd, JSON.stringify({ kind: 'karma42-browser-operation-1', pid: process.pid, nonce: randomUUID() })); }
-    finally { closeSync(fd); }
-    return lstatSync(path);
-  };
-  let owned;
-  try { owned = create(); }
-  catch (error) {
-    if (error.code !== 'EEXIST') throw error;
-    let guardFd;
-    try { guardFd = openSync(guard, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600); }
-    catch { throw new Error('Another browser setup operation is checking this connection. Retry shortly; no process was stopped.'); }
-    try {
-      writeFileSync(guardFd, `${process.pid}\n`);
-      const before = lstatSync(path), raw = readPrivate(path);
-      let holder;
-      try { holder = JSON.parse(raw); } catch {}
-      if (holder?.kind !== 'karma42-browser-operation-1' || !Number.isSafeInteger(holder.pid) || holder.pid <= 0 || typeof holder.nonce !== 'string' || processAlive(holder.pid)) {
-        throw new Error('Another operation holds this connection. Finish or cancel its setup, or disconnect its active MCP entry, before retrying. No process was stopped.');
-      }
-      // Guard serializes recovery attempts; reread inode/content before touching the confirmed-dead lock.
-      const current = lstatSync(path);
-      if (current.dev !== before.dev || current.ino !== before.ino || readPrivate(path) !== raw) throw new Error('The connection lock changed. Retry setup; no process was stopped.');
-      unlinkSync(path);
-      owned = create();
-    } finally { closeSync(guardFd); unlinkSync(guard); }
-  }
-  return Promise.resolve().then(action).finally(() => {
-    if (!lstatExists(path)) return;
-    const current = lstatSync(path);
-    if (current.dev === owned.dev && current.ino === owned.ino) unlinkSync(path);
-  });
-}
-const receiptPath = dir => join(dir, 'pending-browser.json');
-function validReceipt(receipt, id) {
-  if (receipt?.schema !== 'mcp-browser-pairing-1' || receipt.id !== id || id !== sessionId(receipt.service, receipt.agentId)
-    || !TOKEN.test(receipt.pollingSecret ?? '') || !TOKEN.test(receipt.candidateToken ?? '')
-    || !/^[\w-]{1,200}$/.test(receipt.agentId ?? '') || !/^[a-f0-9-]{36}$/.test(receipt.requestId ?? '')
-    || typeof receipt.clientName !== 'string' || !receipt.clientName.trim() || receipt.clientName.length > 100 || /[\x00-\x1f\x7f-\x9f]/.test(receipt.clientName)) throw new Error('Invalid private browser setup receipt. Review My agents.');
-  const plan = projectIdentity({ projectUrl: receipt.service, folder: receipt.folder });
-  if (plan.projectUrl !== receipt.service || canonicalPath(receipt.folder) !== receipt.folder) throw new Error('Browser setup workspace changed. Review My agents.');
-  return receipt;
-}
-export function browserApprovalUrl(receipt) {
-  const service = new URL(receipt.service);
-  const page = new URL('/viewer/', service.origin);
-  page.searchParams.set('project', service.pathname.split('/')[2]);
-  page.searchParams.set('view', 'agent-connect');
-  page.searchParams.set('request', receipt.requestId);
-  return page.href;
-}
-export function createBrowserOperations({ home = sessionHome(), io, sys = system } = {}) {
-  home = canonicalPath(home);
-  const showPending = receipt => io?.say?.('Browser approval is required. Complete it on Karma42, then check this same connection.');
-  const startBody = receipt => ({ requestId: receipt.requestId, agentId: receipt.agentId, clientName: receipt.clientName, folder: receipt.folder, pollingSecret: receipt.pollingSecret, candidateTokenHash: hash(receipt.candidateToken) });
-  async function start(dir, receipt) {
-    let result;
-    try { result = await sys.request(receipt.service, 'pairings/start', startBody(receipt)); }
-    catch { throw new Error(`Browser setup reply unavailable. Your private request is saved. Retry finish_project_agent_connection with connection ${receipt.id}; do not create another request or replace credentials.`); }
-    if (result?.requestId !== receipt.requestId || !['pending', 'approved', 'cancelled', 'expired'].includes(result.status)) throw new Error('Unexpected browser setup reply. The private request was preserved.');
-    receipt = { ...receipt, registered: true, expiresAt: result.expiresAt };
-    writePrivate(receiptPath(dir), receipt);
-    return receipt;
-  }
-  function saved(record) { return validateSession(record, record.id); }
-  return {
-    async connect(options) {
-      if (!/^[\w-]{1,200}$/.test(options['agent-id'] ?? '')) throw new Error('Browser setup requires the project-specific agent ID from the project instructions.');
-      if (typeof options.clientName !== 'string' || !options.clientName.trim() || options.clientName.length > 100 || /[\x00-\x1f\x7f-\x9f]/.test(options.clientName)) throw new Error('Use a valid MCP client name.');
-      if (typeof options.folder !== 'string' || !isAbsolute(options.folder)) throw new Error('Use the actual absolute working folder approved by your human.');
-      const folder = canonicalPath(options.folder);
-      assertStateOutsideWorkspace(home, folder);
-      const plan = projectIdentity({ projectUrl: options['project-url'], folder });
-      sys.verifyBundle();
-      const id = sessionId(plan.projectUrl, options['agent-id']), dir = connectionDir(home, id);
-      if (lstatExists(join(dir, 'connection.json'))) validateSession(readPrivate(join(dir, 'connection.json'), true), id);
-      return withBrowserLock(dir, async () => {
-        let receipt;
-        if (lstatExists(receiptPath(dir))) {
-          receipt = validReceipt(readPrivate(receiptPath(dir), true), id);
-          if (['cancelled', 'expired'].includes(receipt.status) || (receipt.status === 'saved' && options.reconnect)) receipt = null;
-          else {
-            if (receipt.folder !== folder) throw new Error('A browser setup or saved approval belongs to another workspace. Use an explicit reconnect after the completed setup, or finish/cancel its pending request first.');
-            if (receipt.status === 'saved') return saved(validateSession(readPrivate(join(dir, 'connection.json'), true), id));
-          }
-        }
-        if (!receipt) {
-          receipt = { schema: 'mcp-browser-pairing-1', id, service: plan.projectUrl, agentId: options['agent-id'], clientName: options.clientName, folder,
-            requestId: randomUUID(), candidateToken: randomBytes(32).toString('base64url'), pollingSecret: randomBytes(32).toString('base64url'), createdAt: sys.now(), status: 'pending', registered: false };
-          // Persist the candidate BEFORE contacting the server: lost start/approval replies never lose the credential.
-          writePrivate(receiptPath(dir), receipt);
-        }
-        if (!receipt.registered) receipt = await start(dir, receipt);
-        showPending(receipt); return { id, status: receipt.status, approvalUrl: browserApprovalUrl(receipt), requestCheck: hash(receipt.requestId + ':' + hash(receipt.candidateToken)).slice(0, 8).toUpperCase() };
-      });
-    },
-    async prepare(options) {
-      const id = options.connection, dir = connectionDir(home, id);
-      if (lstatExists(receiptPath(dir))) assertStateOutsideWorkspace(home, validReceipt(readPrivate(receiptPath(dir), true), id).folder);
-      return withBrowserLock(dir, async () => {
-        if (!lstatExists(receiptPath(dir))) throw new Error('No browser setup found. Use connect_project_agent from the project instructions.');
-        let receipt = validReceipt(readPrivate(receiptPath(dir), true), id);
-        if (receipt.status === 'saved') return saved(validateSession(readPrivate(join(dir, 'connection.json'), true), id));
-        if (!receipt.registered) receipt = await start(dir, receipt);
-        let result;
-        try { result = await sys.request(receipt.service, `pairings/${receipt.requestId}/poll`, {}, receipt.pollingSecret); }
-        catch { throw new Error(`Browser approval reply unavailable. Retry finish_project_agent_connection with connection ${id}; your private request and existing connection are preserved.`); }
-        if (!['pending', 'approved', 'cancelled', 'expired'].includes(result?.status)) throw new Error('Unexpected browser approval reply. Existing connection preserved.');
-        if (result.status === 'pending') { showPending(receipt); return { id, status: 'pending' }; }
-        if (result.status !== 'approved') {
-          writePrivate(receiptPath(dir), { ...receipt, status: result.status });
-          io.say(`Browser setup ${result.status}. Existing saved credentials were not changed. Ask your human before starting a fresh connection request.`);
-          return { id, status: result.status };
-        }
-        if (result.agentId !== receipt.agentId || !/^[\w-]{1,64}$/.test(result.agentName ?? '') || !Number.isFinite(result.approvedAt)) throw new Error('Approved identity differs from the requested agent. Existing connection preserved. Review My agents.');
-        assertStateOutsideWorkspace(home, receipt.folder);
-        const plan = projectIdentity({ projectUrl: receipt.service, repo: result.repoUrl, folder: receipt.folder });
-        const record = { schema: 'mcp-connection-1', id, service: receipt.service, agentId: receipt.agentId, agentName: result.agentName, repo: plan.repo, folder: plan.folder, createdAt: sys.now(), approvedAt: result.approvedAt };
-        writePrivate(join(dir, 'token'), receipt.candidateToken); save(dir, record);
-        // Keep the private receipt for restart/recovery; never exchange another credential on retry.
-        writePrivate(receiptPath(dir), { ...receipt, status: 'saved' });
-        return saved(record);
-      });
-    },
-  };
-}