@myagentroam/marmgr 0.9.112

package/src/config.mjs

@@ -0,0 +1,150 @@
+import { lstat, readFile } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { createTranslator } from './i18n/index.mjs';
+
+export const CONFIG_KEYS = Object.freeze(['MAR_MGR_SERVER_URL', 'MAR_MGR_KEY']);
+
+export class MarmgrError extends Error {
+  constructor(message, options = {}) {
+    super(message, options);
+    this.name = 'MarmgrError';
+  }
+}
+
+export function defaultConfigPath({
+  env = process.env,
+  platform = process.platform,
+  homeDirectory = os.homedir()
+} = {}) {
+  const configuredHome =
+    nonEmptyString(env.HOME) ??
+    (platform === 'win32' ? nonEmptyString(env.USERPROFILE) : undefined) ??
+    homeDirectory;
+  return path.join(configuredHome, '.marmgr', 'default.env');
+}
+
+export async function loadConfig({
+  env = process.env,
+  envFile,
+  platform = process.platform,
+  homeDirectory = os.homedir(),
+  translate = createTranslator(env)
+} = {}) {
+  const configPath = envFile ?? defaultConfigPath({ env, platform, homeDirectory });
+  const values = await readConfigFile(configPath, { platform, translate });
+
+  const serverUrlValue = nonEmptyString(values.MAR_MGR_SERVER_URL);
+  if (serverUrlValue === undefined)
+    throw new MarmgrError(translate('errors.configServerUrlMissing'));
+
+  const keyValue = nonEmptyString(values.MAR_MGR_KEY);
+  if (keyValue === undefined) throw new MarmgrError(translate('errors.configKeyMissing'));
+  if (/[\u0000-\u001f\u007f]/u.test(keyValue))
+    throw new MarmgrError(translate('errors.configKeyInvalid'));
+
+  return Object.freeze({
+    serverUrl: validateServerUrl(serverUrlValue, translate),
+    key: keyValue
+  });
+}
+
+export function validateServerUrl(value, translate = createTranslator()) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new MarmgrError(translate('errors.serverUrlInvalid'));
+  }
+
+  const isLoopbackHttp =
+    url.protocol === 'http:' &&
+    (url.hostname === 'localhost' ||
+      url.hostname === '127.0.0.1' ||
+      url.hostname === '::1' ||
+      url.hostname === '[::1]');
+  if (url.protocol !== 'https:' && !isLoopbackHttp)
+    throw new MarmgrError(translate('errors.serverUrlTransport'));
+  if (url.username || url.password || url.search || url.hash || url.pathname !== '/')
+    throw new MarmgrError(translate('errors.serverUrlOrigin'));
+
+  return url.origin;
+}
+
+async function readConfigFile(filePath, { platform, translate }) {
+  let before;
+  try {
+    before = await lstat(filePath);
+  } catch (error) {
+    if (error?.code === 'ENOENT') throw new MarmgrError(translate('errors.envFileMissing'));
+    throw new MarmgrError(translate('errors.envFileRead'));
+  }
+  assertSecureConfigFile(before, platform, translate);
+
+  let content;
+  try {
+    content = await readFile(filePath, 'utf8');
+  } catch {
+    throw new MarmgrError(translate('errors.envFileRead'));
+  }
+
+  let after;
+  try {
+    after = await lstat(filePath);
+  } catch {
+    throw new MarmgrError(translate('errors.envFileRead'));
+  }
+  assertSecureConfigFile(after, platform, translate);
+  if (before.dev !== after.dev || before.ino !== after.ino)
+    throw new MarmgrError(translate('errors.envFileRead'));
+
+  const values = {};
+  for (const rawLine of content.replace(/^\uFEFF/u, '').split(/\r?\n/u)) {
+    const line = rawLine.trim();
+    if (line === '' || line.startsWith('#')) continue;
+
+    const match = /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/u.exec(line);
+    if (match === null) throw new MarmgrError(translate('errors.envFileEntry'));
+
+    const [, name, rawValue] = match;
+    if (!CONFIG_KEYS.includes(name)) throw new MarmgrError(translate('errors.envFileUnsupported'));
+    values[name] = parseEnvValue(rawValue, translate);
+  }
+  return values;
+}
+
+function parseEnvValue(rawValue, translate) {
+  const value = rawValue.trim();
+  if (value.startsWith('"') || value.startsWith("'")) {
+    const quote = value[0];
+    if (!value.endsWith(quote) || value.length < 2)
+      throw new MarmgrError(translate('errors.envFileQuoted'));
+    const body = value.slice(1, -1);
+    if (quote === "'") return body;
+    return body.replace(/\\(["\\nrt])/gu, (_match, escaped) => {
+      if (escaped === 'n') return '\n';
+      if (escaped === 'r') return '\r';
+      if (escaped === 't') return '\t';
+      return escaped;
+    });
+  }
+  return value;
+}
+
+function assertSecureConfigFile(stats, platform, translate) {
+  if (stats.isSymbolicLink()) throw new MarmgrError(translate('errors.envFileSymlink'));
+  if (!stats.isFile()) throw new MarmgrError(translate('errors.envFileType'));
+  if (platform === 'win32') return;
+
+  const permissions = stats.mode & 0o7777;
+  const ownerUid = typeof process.getuid === 'function' ? process.getuid() : undefined;
+  if (
+    (ownerUid !== undefined && stats.uid !== ownerUid) ||
+    (permissions !== 0o600 && permissions !== 0o400)
+  )
+    throw new MarmgrError(translate('errors.envFilePermissions'));
+}
+
+function nonEmptyString(value) {
+  return typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined;
+}