@linkshell/host 0.4.60 → 0.4.62

package/dist/host/src/access.d.ts

@@ -0,0 +1,28 @@
+export declare function accessPath(home: string): string;
+/** Writes or removes the password file directly (the CLI, when no host is running). */
+export declare function writeAccessPassword(home: string, password: string | undefined): void;
+export type UnlockResult = {
+    ok: true;
+    token: string;
+    expiresAt: number;
+} | {
+    ok: false;
+    reason: "wrong" | "throttled" | "invalid_token";
+};
+/** The computer's optional access password. Remote connections must unlock before anything else. */
+export declare class AccessControl {
+    private readonly home;
+    private file;
+    private readonly failures;
+    constructor(home: string);
+    get enabled(): boolean;
+    set(password: string | undefined): void;
+    unlock(deviceId: string, input: {
+        password?: string;
+        token?: string;
+    }, now?: number): UnlockResult;
+    private matches;
+    private issue;
+    private verifyToken;
+    private sign;
+}

package/dist/host/src/access.js

@@ -0,0 +1,106 @@
+import { createHmac, randomBytes, scryptSync, timingSafeEqual } from "node:crypto";
+import { chmodSync, existsSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+/** scrypt cost: ~50 ms per guess here, on top of the per-device throttle. */
+const SCRYPT = { N: 16384, r: 8, p: 1, keylen: 32 };
+const TOKEN_TTL_MS = 7 * 24 * 60 * 60_000;
+const FAILURE_WINDOW_MS = 5 * 60_000;
+const MAX_FAILURES = 5;
+export function accessPath(home) {
+    return join(home, "access.json");
+}
+/** Writes or removes the password file directly (the CLI, when no host is running). */
+export function writeAccessPassword(home, password) {
+    const path = accessPath(home);
+    if (!password) {
+        rmSync(path, { force: true });
+        return;
+    }
+    const salt = randomBytes(16);
+    const file = {
+        salt: salt.toString("base64"),
+        hash: scryptSync(password, salt, SCRYPT.keylen, SCRYPT).toString("base64"),
+        secret: randomBytes(32).toString("base64"),
+    };
+    const temp = `${path}.${process.pid}.tmp`;
+    writeFileSync(temp, `${JSON.stringify(file)}\n`, { mode: 0o600 });
+    chmodSync(temp, 0o600);
+    renameSync(temp, path);
+}
+function readAccessFile(home) {
+    const path = accessPath(home);
+    if (!existsSync(path))
+        return undefined;
+    try {
+        const file = JSON.parse(readFileSync(path, "utf8"));
+        if (typeof file.salt === "string" && typeof file.hash === "string" && typeof file.secret === "string")
+            return file;
+    }
+    catch { /* handled below */ }
+    // A damaged file must not silently open the computer: keep it locked with no password that matches.
+    return { salt: "", hash: "", secret: randomBytes(32).toString("base64") };
+}
+/** The computer's optional access password. Remote connections must unlock before anything else. */
+export class AccessControl {
+    home;
+    file;
+    failures = new Map();
+    constructor(home) {
+        this.home = home;
+        this.file = readAccessFile(home);
+    }
+    get enabled() {
+        return this.file !== undefined;
+    }
+    set(password) {
+        writeAccessPassword(this.home, password);
+        this.file = readAccessFile(this.home);
+        this.failures.clear();
+    }
+    unlock(deviceId, input, now = Date.now()) {
+        const file = this.file;
+        if (!file)
+            return { ok: true, ...this.issue(deviceId, now) };
+        if (input.token !== undefined && input.password === undefined) {
+            return this.verifyToken(file, deviceId, input.token, now) ? { ok: true, ...this.issue(deviceId, now) } : { ok: false, reason: "invalid_token" };
+        }
+        const failure = this.failures.get(deviceId);
+        if (failure && now - failure.since < FAILURE_WINDOW_MS && failure.count >= MAX_FAILURES)
+            return { ok: false, reason: "throttled" };
+        if (this.matches(file, input.password ?? "")) {
+            this.failures.delete(deviceId);
+            return { ok: true, ...this.issue(deviceId, now) };
+        }
+        if (!failure || now - failure.since >= FAILURE_WINDOW_MS)
+            this.failures.set(deviceId, { since: now, count: 1 });
+        else
+            failure.count++;
+        return { ok: false, reason: "wrong" };
+    }
+    matches(file, password) {
+        if (!file.hash)
+            return false;
+        const expected = Buffer.from(file.hash, "base64");
+        const actual = scryptSync(password, Buffer.from(file.salt, "base64"), expected.length, SCRYPT);
+        return timingSafeEqual(actual, expected);
+    }
+    issue(deviceId, now) {
+        const expiresAt = now + TOKEN_TTL_MS;
+        if (!this.file)
+            return { token: "", expiresAt };
+        return { token: `${expiresAt}.${this.sign(this.file, deviceId, expiresAt)}`, expiresAt };
+    }
+    verifyToken(file, deviceId, token, now) {
+        const [expires, signature] = token.split(".");
+        const expiresAt = Number(expires);
+        if (!signature || !Number.isFinite(expiresAt) || expiresAt <= now)
+            return false;
+        const expected = Buffer.from(this.sign(file, deviceId, expiresAt));
+        const actual = Buffer.from(signature);
+        return actual.length === expected.length && timingSafeEqual(actual, expected);
+    }
+    sign(file, deviceId, expiresAt) {
+        return createHmac("sha256", Buffer.from(file.secret, "base64")).update(`linkshell-access:${deviceId}:${expiresAt}`).digest("base64url");
+    }
+}
+//# sourceMappingURL=access.js.map

package/dist/host/src/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../../src/access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,6EAA6E;AAC7E,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAW,CAAC;AAC7D,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAC1C,MAAM,iBAAiB,GAAG,CAAC,GAAG,MAAM,CAAC;AACrC,MAAM,YAAY,GAAG,CAAC,CAAC;AASvB,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AACnC,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,QAA4B;IAC5E,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAe;QACvB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC1E,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC3C,CAAC;IACF,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC1C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAwB,CAAC;QAC3E,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAkB,CAAC;IACnI,CAAC;IAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;IAC/B,oGAAoG;IACpG,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC5E,CAAC;AAID,oGAAoG;AACpG,MAAM,OAAO,aAAa;IAIK;IAHrB,IAAI,CAAyB;IACpB,QAAQ,GAAG,IAAI,GAAG,EAA4C,CAAC;IAEhF,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;QACvC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC;IACjC,CAAC;IAED,GAAG,CAAC,QAA4B;QAC9B,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,MAAM,CAAC,QAAgB,EAAE,KAA4C,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACrF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;QAC7D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAClJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,OAAO,IAAI,GAAG,GAAG,OAAO,CAAC,KAAK,GAAG,iBAAiB,IAAI,OAAO,CAAC,KAAK,IAAI,YAAY;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACnI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,OAAO,IAAI,GAAG,GAAG,OAAO,CAAC,KAAK,IAAI,iBAAiB;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;;YAC3G,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACxC,CAAC;IAEO,OAAO,CAAC,IAAgB,EAAE,QAAgB;QAChD,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/F,OAAO,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,QAAgB,EAAE,GAAW;QACzC,MAAM,SAAS,GAAG,GAAG,GAAG,YAAY,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,GAAG,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC;IAC3F,CAAC;IAEO,WAAW,CAAC,IAAgB,EAAE,QAAgB,EAAE,KAAa,EAAE,GAAW;QAChF,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,GAAG;YAAE,OAAO,KAAK,CAAC;QAChF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChF,CAAC;IAEO,IAAI,CAAC,IAAgB,EAAE,QAAgB,EAAE,SAAiB;QAChE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1I,CAAC;CACF"}

package/dist/host/src/drivers/acp/antigravity.js

@@ -348,7 +348,10 @@ export function cleanAntigravityAgentContent(content) {
 function extractModelSelectionFromContent(content) {
     if (!content)
         return undefined;
-    const regex = /changed setting `?Model Selection`? from .*? to ([^\r\n.<]+?)(?:\.(?:\s|$)|<\/USER_SETTINGS_CHANGE>|\r|\n|$)/gi;
+    // Names carry dots ("Claude Opus 5.5 (High)", "Gemini 3.8 Flash (Low)"): one ends at the sentence's
+    // full stop, a dot followed by a space or the line's end. Stopping at the first dot made the match
+    // skip ahead to "No need to comment…" and read that as the model.
+    const regex = /changed setting `?Model Selection`? from .+? to (.+?)(?:\.(?=\s|$)|<\/USER_SETTINGS_CHANGE>|$)/gim;
     let last;
     let match;
     while ((match = regex.exec(content)) !== null) {
@@ -1664,9 +1667,7 @@ export class AntigravityDriver extends AcpDriver {
             if (found)
                 return found;
         }
-        const fromDefault = matchByValueOrName(this.desktopDefaultModel);
-        if (fromDefault)
-            return fromDefault;
+        // The model the user last picked in the app comes before the server's default.
         const desktop = this.desktop();
         if (desktop && existsSync(join(desktop.dataDir, "antigravity_state.pbtxt"))) {
             try {
@@ -1680,6 +1681,9 @@ export class AntigravityDriver extends AcpDriver {
                 // ignore
             }
         }
+        const fromDefault = matchByValueOrName(this.desktopDefaultModel);
+        if (fromDefault)
+            return fromDefault;
         return models[0];
     }
     async resolvePlanModelEnum(conn, nativeId, explicitModel) {