@oneaddress/setup 1.1.0 → 1.1.3

package/dist/index.js

@@ -808,7 +808,7 @@ var L2 = () => {
 };
 
 // src/prompts.ts
-var import_node_crypto3 = require("crypto");
+var import_node_crypto4 = require("crypto");
 var import_node_fs4 = require("fs");
 var import_node_os2 = require("os");
 var import_node_path5 = require("path");
@@ -821,13 +821,11 @@ var CRM = "\x1B[38;2;245;238;216m";
 var FNT = "\x1B[38;2;130;100;45m";
 var DIM = "\x1B[38;2;70;58;35m";
 var MID = "\x1B[38;2;155;135;100m";
-var GRN = "\x1B[38;2;80;200;120m";
 var ab = (s) => `${B2}${AMB}${s}${R3}`;
 var wb = (s) => `${B2}${CRM}${s}${R3}`;
 var fn = (s) => `${FNT}${s}${R3}`;
 var dm = (s) => `${DIM}${s}${R3}`;
 var mi = (s) => `${MID}${s}${R3}`;
-var gn = (s) => `${GRN}${s}${R3}`;
 var _O = [" \u2588\u2588\u2588\u2588\u2588 ", "\u2588\u2588   \u2588\u2588", "\u2588\u2588   \u2588\u2588", "\u2588\u2588   \u2588\u2588", "\u2588\u2588   \u2588\u2588", "\u2588\u2588   \u2588\u2588", " \u2588\u2588\u2588\u2588\u2588 "];
 var _N = ["\u2588\u2588   \u2588\u2588", "\u2588\u2588\u2588  \u2588\u2588", "\u2588\u2588\u2588\u2588 \u2588\u2588", "\u2588\u2588\u2588\u2588\u2588\u2588\u2588", "\u2588\u2588 \u2588\u2588\u2588\u2588", "\u2588\u2588  \u2588\u2588\u2588", "\u2588\u2588   \u2588\u2588"];
 var _E = ["\u2588\u2588\u2588\u2588\u2588\u2588\u2588", "\u2588\u2588     ", "\u2588\u2588     ", "\u2588\u2588\u2588\u2588\u2588\u2588 ", "\u2588\u2588     ", "\u2588\u2588     ", "\u2588\u2588\u2588\u2588\u2588\u2588\u2588"];
@@ -853,7 +851,7 @@ function printHeader() {
   console.log(` ${SIDE}${" ".repeat(BAR_LEN)}${SIDE}`);
   const wizard = mi("Partner Setup Wizard");
   const version = fn("v2  \xB7  partners.oneaddress.io");
-  const tagLine = `  ${wizard}    ${version}    ${gn("\xB7io")}`;
+  const tagLine = `  ${wizard}    ${version}`;
   const padLen = BAR_LEN - 4 - stripAnsi(tagLine).length;
   console.log(` ${SIDE}  ${tagLine}${" ".repeat(Math.max(0, padLen))}  ${SIDE}`);
   console.log(` ${SIDE}${" ".repeat(BAR_LEN)}${SIDE}`);
@@ -2934,25 +2932,72 @@ async function registerInstall(installId, partnerId, webhookSecret, platform, we
 }
 
 // src/conformance.ts
-var import_node_child_process = require("child_process");
-function runConformance(webhookUrl, partnerId, webhookSecret) {
-  (0, import_node_child_process.spawnSync)(
-    "npx",
-    [
-      "@oneaddress/conformance",
-      "test",
-      webhookUrl,
-      "--partner-id",
-      partnerId,
-      "--secret",
-      webhookSecret
-    ],
-    { stdio: "inherit" }
-  );
+var import_node_crypto2 = require("crypto");
+async function runConformance(webhookUrl, _partnerId, webhookSecret) {
+  function sign(ts, body) {
+    return (0, import_node_crypto2.createHmac)("sha256", webhookSecret).update(`${ts}.${body}`).digest("hex");
+  }
+  const validBody = JSON.stringify({ event: "conformance.ping", test: true });
+  const now = String(Math.floor(Date.now() / 1e3));
+  const staleTs = String(Math.floor(Date.now() / 1e3) - 400);
+  const tests = [
+    {
+      name: "Replay attack rejected (stale timestamp)",
+      ts: staleTs,
+      sig: sign(staleTs, validBody),
+      expectOk: false
+    },
+    {
+      name: "Bad signature rejected",
+      ts: now,
+      sig: "deadbeef".repeat(8),
+      expectOk: false
+    },
+    {
+      name: "Valid signed request accepted",
+      ts: now,
+      sig: sign(now, validBody),
+      expectOk: true
+    }
+  ];
+  let passed = 0;
+  let failed = 0;
+  for (const t of tests) {
+    try {
+      const res = await fetch(webhookUrl, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "X-OneAddress-Timestamp": t.ts,
+          "X-OneAddress-Signature": t.sig,
+          "X-OneAddress-Dispatch": "0"
+        },
+        body: validBody,
+        signal: AbortSignal.timeout(8e3)
+      });
+      const gotOk = res.ok;
+      const pass = t.expectOk ? gotOk : !gotOk;
+      if (pass) {
+        v2.success(`  \u2713  ${t.name}  (${res.status})`);
+        passed++;
+      } else {
+        v2.warn(`  \u2717  ${t.name}  (${res.status} \u2014 expected ${t.expectOk ? "2xx" : "4xx"})`);
+        failed++;
+      }
+    } catch (err) {
+      v2.warn(`  \u2717  ${t.name}  (network error: ${err instanceof Error ? err.message : String(err)})`);
+      failed++;
+    }
+  }
+  if (failed === 0) {
+    v2.success(`Conformance passed ${passed}/${tests.length} \u2014 your endpoint is correctly secured.`);
+  } else {
+    v2.warn(`Conformance: ${passed}/${tests.length} passed. Check your WEBHOOK_SECRET and timestamp enforcement.`);
+  }
 }
 
 // src/install.ts
-var import_node_child_process2 = require("child_process");
+var import_node_child_process = require("child_process");
 var import_node_fs2 = require("fs");
 var import_node_path2 = require("path");
 var COMMANDS = {
@@ -2979,7 +3024,7 @@ function installDependencies(platform, outputDir) {
   }
   const cwd = spec.cwd ? (0, import_node_path2.join)(outputDir, spec.cwd) : outputDir;
   const manualCommand = `cd ${outputDir} && ${spec.cmd} ${spec.args.join(" ")}`;
-  const result = (0, import_node_child_process2.spawnSync)(spec.cmd, spec.args, {
+  const result = (0, import_node_child_process.spawnSync)(spec.cmd, spec.args, {
     cwd,
     stdio: "pipe",
     encoding: "utf8",
@@ -2996,7 +3041,7 @@ function installDependencies(platform, outputDir) {
 }
 
 // src/autostart.ts
-var import_node_child_process3 = require("child_process");
+var import_node_child_process2 = require("child_process");
 var import_node_path3 = require("path");
 var import_node_fs3 = require("fs");
 var COMMANDS2 = {
@@ -3012,7 +3057,14 @@ var serverOutput = "";
 function stopServer() {
   if (serverProcess) {
     try {
-      serverProcess.kill("SIGTERM");
+      if (process.platform === "win32" && serverProcess.pid) {
+        (0, import_node_child_process2.spawn)("taskkill", ["/F", "/T", "/PID", String(serverProcess.pid)], {
+          stdio: "ignore",
+          detached: true
+        });
+      } else {
+        serverProcess.kill("SIGTERM");
+      }
     } catch {
     }
     serverProcess = null;
@@ -3062,7 +3114,7 @@ async function startServer(platform, outputDir, port = 3001) {
   }
   serverOutput = "";
   const manualCommand = `cd ${outputDir} && ${spec.cmd} ${spec.args.join(" ")}`;
-  serverProcess = (0, import_node_child_process3.spawn)(spec.cmd, spec.args, {
+  serverProcess = (0, import_node_child_process2.spawn)(spec.cmd, spec.args, {
     cwd: outputDir,
     stdio: ["ignore", "pipe", "pipe"],
     detached: false,
@@ -3084,7 +3136,7 @@ async function startServer(platform, outputDir, port = 3001) {
 }
 
 // src/tunnel.ts
-var import_node_child_process4 = require("child_process");
+var import_node_child_process3 = require("child_process");
 var import_promises2 = require("fs/promises");
 var import_node_path4 = require("path");
 var import_node_os = __toESM(require("os"));
@@ -3120,7 +3172,7 @@ async function downloadCloudflared() {
 }
 async function resolveBinary() {
   try {
-    (0, import_node_child_process4.execSync)("cloudflared --version", { stdio: "pipe" });
+    (0, import_node_child_process3.execSync)("cloudflared --version", { stdio: "pipe" });
     return "cloudflared";
   } catch {
   }
@@ -3129,7 +3181,7 @@ async function resolveBinary() {
 async function startTunnel(port) {
   const binary = await resolveBinary();
   return new Promise((resolve2, reject) => {
-    tunnelProcess = (0, import_node_child_process4.spawn)(binary, ["tunnel", "--url", `http://localhost:${port}`], {
+    tunnelProcess = (0, import_node_child_process3.spawn)(binary, ["tunnel", "--url", `http://localhost:${port}`], {
       stdio: ["ignore", "pipe", "pipe"]
     });
     let resolved = false;
@@ -3168,13 +3220,13 @@ async function startTunnel(port) {
 }
 
 // src/register-url.ts
-var import_node_crypto2 = require("crypto");
+var import_node_crypto3 = require("crypto");
 var PORTAL_API = "https://partners.oneaddress.io/api/partner/webhook-url";
 async function registerWebhookUrl(partnerId, webhookSecret, webhookUrl) {
   try {
     const body = JSON.stringify({ webhook_url: webhookUrl });
     const ts = String(Math.floor(Date.now() / 1e3));
-    const sig = (0, import_node_crypto2.createHmac)("sha256", webhookSecret).update(`${ts}.${body}`).digest("hex");
+    const sig = (0, import_node_crypto3.createHmac)("sha256", webhookSecret).update(`${ts}.${body}`).digest("hex");
     const res = await fetch(PORTAL_API, {
       method: "PATCH",
       headers: {
@@ -3197,7 +3249,7 @@ var R4 = "\x1B[0m";
 var AMB2 = "\x1B[38;2;224;162;72m";
 var MID2 = "\x1B[38;2;155;135;100m";
 var DIM2 = "\x1B[38;2;70;58;35m";
-var GRN2 = "\x1B[38;2;80;200;120m";
+var GRN = "\x1B[38;2;80;200;120m";
 var CRM2 = "\x1B[1m\x1B[38;2;245;238;216m";
 var cleanupFns = [];
 function onCleanup(fn2) {
@@ -3274,7 +3326,7 @@ function normalisePrivateKey(raw) {
 }
 function validatePkcs8Pem(pem) {
   try {
-    (0, import_node_crypto3.createPrivateKey)({ key: pem, format: "pem", type: "pkcs8" });
+    (0, import_node_crypto4.createPrivateKey)({ key: pem, format: "pem", type: "pkcs8" });
     return void 0;
   } catch (err) {
     return `Key validation failed: ${err instanceof Error ? err.message : String(err)}`;
@@ -3378,7 +3430,7 @@ async function main() {
     process.exit(1);
   }
   const s2 = L2();
-  s2.start("Installing dependencies\u2026");
+  s2.start("Installing dependencies  (this can take 30\u201360 s)\u2026");
   const install = installDependencies(platform, outDir);
   if (install.ok) {
     s2.stop("Dependencies installed");
@@ -3454,7 +3506,7 @@ async function main() {
       );
     }
     registerInstall(
-      `OA-${(0, import_node_crypto3.randomUUID)()}`,
+      `OA-${(0, import_node_crypto4.randomUUID)()}`,
       pid,
       secret,
       platform,
@@ -3462,15 +3514,13 @@ async function main() {
     ).catch(() => {
     });
   }
-  if (webhookUrl && serverRunning) {
-    v2.info("\nRunning conformance checks \u2014 this may take up to 60 seconds\u2026\n");
-    runConformance(webhookUrl, pid, secret);
-  } else if (webhookUrl) {
-    v2.info("\nStart your server, then run the conformance check:");
-    v2.info(`  npx @oneaddress/conformance test ${webhookUrl}`);
-  } else {
-    v2.info("\nOnce your endpoint is live, run the conformance check:");
-    v2.info("  npx @oneaddress/conformance test <your-https-url>/webhook");
+  if (webhookUrl) {
+    v2.info("");
+    const s6 = L2();
+    s6.start("Running conformance checks\u2026");
+    await new Promise((r2) => setTimeout(r2, 200));
+    s6.stop("Conformance checks:");
+    await runConformance(webhookUrl, pid, secret);
   }
   const summary = [
     `Partner ID:   ${pid}`,
@@ -3490,7 +3540,7 @@ async function main() {
   if (serverRunning) {
     console.log("");
     console.log(`  ${DIM2}\u250C${"\u2500".repeat(56)}\u2510${R4}`);
-    console.log(`  ${DIM2}\u2502${R4}  ${GRN2}\u25C8${R4}  ${CRM2}Server live${R4} ${MID2}on http://localhost:3001/webhook${R4}  ${DIM2}\u2502${R4}`);
+    console.log(`  ${DIM2}\u2502${R4}  ${GRN}\u25C8${R4}  ${CRM2}Server live${R4} ${MID2}on http://localhost:3001/webhook${R4}  ${DIM2}\u2502${R4}`);
     console.log(`  ${DIM2}\u2502${R4}  ${AMB2}\u25C8${R4}  ${MID2}Edit ${CRM2}src/store.ts${R4} ${MID2}to wire your database${R4}          ${DIM2}\u2502${R4}`);
     console.log(`  ${DIM2}\u2502${R4}     ${MID2}Press Ctrl+C to stop the server and exit.${R4}  ${DIM2}      \u2502${R4}`);
     console.log(`  ${DIM2}\u2514${"\u2500".repeat(56)}\u2518${R4}`);

package/package.json

@@ -1,32 +1,32 @@
-{
-  "name": "@oneaddress/setup",
-  "version": "1.1.0",
-  "description": "Interactive setup wizard for OneAddress partner webhook integrations",
-  "bin": {
-    "oneaddress-setup": "dist/index.js",
-    "setup": "dist/index.js"
-  },
-  "files": [
-    "dist",
-    "README.md"
-  ],
-  "scripts": {
-    "build": "tsup",
-    "prepare": "tsup",
-    "type-check": "tsc --noEmit"
-  },
-  "license": "UNLICENSED",
-  "publishConfig": {
-    "access": "public"
-  },
-  "dependencies": {
-    "@clack/prompts": "^0.9.0"
-  },
-  "devDependencies": {
-    "tsup": "^8.0.0",
-    "typescript": "^5.0.0"
-  },
-  "engines": {
-    "node": ">=18"
-  }
-}
+{
+  "name": "@oneaddress/setup",
+  "version": "1.1.3",
+  "description": "Interactive setup wizard for OneAddress partner webhook integrations",
+  "main": "dist/index.js",
+  "bin": {
+    "oneaddress-setup": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "prepare": "tsup",
+    "type-check": "tsc --noEmit"
+  },
+  "license": "UNLICENSED",
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@clack/prompts": "^0.9.0"
+  },
+  "devDependencies": {
+    "tsup": "^8.0.0",
+    "typescript": "^5.0.0"
+  },
+  "engines": {
+    "node": ">=18"
+  }
+}