@ozyman42/ozy-cli 0.4.5 → 0.4.6-darwin-arm64.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (202) hide show
  1. package/multi-call-binary +0 -0
  2. package/package.json +12 -55
  3. package/dist/commands/git/hosts.js +0 -18
  4. package/dist/commands/git/hosts.js.map +0 -1
  5. package/dist/commands/git/index.js +0 -8
  6. package/dist/commands/git/index.js.map +0 -1
  7. package/dist/commands/git/setup.js +0 -145
  8. package/dist/commands/git/setup.js.map +0 -1
  9. package/dist/commands/index.js +0 -13
  10. package/dist/commands/index.js.map +0 -1
  11. package/dist/commands/npm/index.js +0 -7
  12. package/dist/commands/npm/index.js.map +0 -1
  13. package/dist/commands/npm/setup/git-remote.js +0 -66
  14. package/dist/commands/npm/setup/git-remote.js.map +0 -1
  15. package/dist/commands/npm/setup/index.js +0 -168
  16. package/dist/commands/npm/setup/index.js.map +0 -1
  17. package/dist/commands/npm/setup/npm-auth.js +0 -62
  18. package/dist/commands/npm/setup/npm-auth.js.map +0 -1
  19. package/dist/commands/npm/setup/package-json-validate.js +0 -47
  20. package/dist/commands/npm/setup/package-json-validate.js.map +0 -1
  21. package/dist/commands/npm/setup/package-registry.js +0 -20
  22. package/dist/commands/npm/setup/package-registry.js.map +0 -1
  23. package/dist/commands/npm/setup/setup.test.js +0 -95
  24. package/dist/commands/npm/setup/setup.test.js.map +0 -1
  25. package/dist/commands/npm/setup/trusted-publishing.js +0 -84
  26. package/dist/commands/npm/setup/trusted-publishing.js.map +0 -1
  27. package/dist/commands/npm/setup/workflow.js +0 -19
  28. package/dist/commands/npm/setup/workflow.js.map +0 -1
  29. package/dist/commands/ssh/get-sk-credential.js +0 -104
  30. package/dist/commands/ssh/get-sk-credential.js.map +0 -1
  31. package/dist/commands/ssh/index.js +0 -7
  32. package/dist/commands/ssh/index.js.map +0 -1
  33. package/dist/commands/upgrade.js +0 -81
  34. package/dist/commands/upgrade.js.map +0 -1
  35. package/dist/common/command.js +0 -15
  36. package/dist/common/command.js.map +0 -1
  37. package/dist/common/constants.js +0 -24
  38. package/dist/common/constants.js.map +0 -1
  39. package/dist/common/effective-modules-extensions.js +0 -13
  40. package/dist/common/effective-modules-extensions.js.map +0 -1
  41. package/dist/common/log.js +0 -4
  42. package/dist/common/log.js.map +0 -1
  43. package/dist/common/render-caller-tree.js +0 -20
  44. package/dist/common/render-caller-tree.js.map +0 -1
  45. package/dist/entrypoints/ozy-signing-agent.js +0 -48
  46. package/dist/entrypoints/ozy-signing-agent.js.map +0 -1
  47. package/dist/entrypoints/ozy-ssh-keygen.js +0 -9
  48. package/dist/entrypoints/ozy-ssh-keygen.js.map +0 -1
  49. package/dist/entrypoints/ozy-virtual-security-key.js +0 -18
  50. package/dist/entrypoints/ozy-virtual-security-key.js.map +0 -1
  51. package/dist/entrypoints/ozy.js +0 -3
  52. package/dist/entrypoints/ozy.js.map +0 -1
  53. package/dist/index.js +0 -2
  54. package/dist/index.js.map +0 -1
  55. package/dist/internal/thing.js +0 -4
  56. package/dist/internal/thing.js.map +0 -1
  57. package/dist/modules/cli/agent-client/impl.js +0 -109
  58. package/dist/modules/cli/agent-client/impl.js.map +0 -1
  59. package/dist/modules/cli/agent-client/interface.js +0 -11
  60. package/dist/modules/cli/agent-client/interface.js.map +0 -1
  61. package/dist/modules/cli/git/impl.js +0 -124
  62. package/dist/modules/cli/git/impl.js.map +0 -1
  63. package/dist/modules/cli/git/interface.js +0 -3
  64. package/dist/modules/cli/git/interface.js.map +0 -1
  65. package/dist/modules/cli/git/submodule/fix.js +0 -257
  66. package/dist/modules/cli/git/submodule/fix.js.map +0 -1
  67. package/dist/modules/cli/git/submodule/git-state.js +0 -154
  68. package/dist/modules/cli/git/submodule/git-state.js.map +0 -1
  69. package/dist/modules/cli/git/submodule/gitmodules.js +0 -113
  70. package/dist/modules/cli/git/submodule/gitmodules.js.map +0 -1
  71. package/dist/modules/cli/git/submodule/printer.js +0 -232
  72. package/dist/modules/cli/git/submodule/printer.js.map +0 -1
  73. package/dist/modules/cli/git/submodule/resolve-git-dir.js +0 -16
  74. package/dist/modules/cli/git/submodule/resolve-git-dir.js.map +0 -1
  75. package/dist/modules/cli/github/impl.js +0 -137
  76. package/dist/modules/cli/github/impl.js.map +0 -1
  77. package/dist/modules/cli/github/interface.js +0 -2
  78. package/dist/modules/cli/github/interface.js.map +0 -1
  79. package/dist/modules/cli/index.js +0 -9
  80. package/dist/modules/cli/index.js.map +0 -1
  81. package/dist/modules/common/crypto/impl.js +0 -133
  82. package/dist/modules/common/crypto/impl.js.map +0 -1
  83. package/dist/modules/common/crypto/interface.js +0 -2
  84. package/dist/modules/common/crypto/interface.js.map +0 -1
  85. package/dist/modules/common/index.js +0 -10
  86. package/dist/modules/common/index.js.map +0 -1
  87. package/dist/modules/common/kep-map-store/impl.js +0 -42
  88. package/dist/modules/common/kep-map-store/impl.js.map +0 -1
  89. package/dist/modules/common/kep-map-store/interface.js +0 -2
  90. package/dist/modules/common/kep-map-store/interface.js.map +0 -1
  91. package/dist/modules/common/os-platform/caller-info.js +0 -132
  92. package/dist/modules/common/os-platform/caller-info.js.map +0 -1
  93. package/dist/modules/common/os-platform/impl.js +0 -87
  94. package/dist/modules/common/os-platform/impl.js.map +0 -1
  95. package/dist/modules/common/os-platform/interface.js +0 -2
  96. package/dist/modules/common/os-platform/interface.js.map +0 -1
  97. package/dist/modules/common/os-platform/virtual-hid/index.js +0 -12
  98. package/dist/modules/common/os-platform/virtual-hid/index.js.map +0 -1
  99. package/dist/modules/common/os-platform/virtual-hid/linux.js +0 -5
  100. package/dist/modules/common/os-platform/virtual-hid/linux.js.map +0 -1
  101. package/dist/modules/common/os-platform/virtual-hid/mac.js +0 -119
  102. package/dist/modules/common/os-platform/virtual-hid/mac.js.map +0 -1
  103. package/dist/modules/common/os-platform/virtual-hid/windows.js +0 -5
  104. package/dist/modules/common/os-platform/virtual-hid/windows.js.map +0 -1
  105. package/dist/modules/common/ssh-config/impl.js +0 -116
  106. package/dist/modules/common/ssh-config/impl.js.map +0 -1
  107. package/dist/modules/common/ssh-config/interface.js +0 -10
  108. package/dist/modules/common/ssh-config/interface.js.map +0 -1
  109. package/dist/modules/ssh-agent/index.js +0 -8
  110. package/dist/modules/ssh-agent/index.js.map +0 -1
  111. package/dist/modules/ssh-agent/session/impl.js +0 -265
  112. package/dist/modules/ssh-agent/session/impl.js.map +0 -1
  113. package/dist/modules/ssh-agent/session/interface-rpc.js +0 -20
  114. package/dist/modules/ssh-agent/session/interface-rpc.js.map +0 -1
  115. package/dist/modules/ssh-agent/session/interface.js +0 -32
  116. package/dist/modules/ssh-agent/session/interface.js.map +0 -1
  117. package/dist/modules/ssh-agent/session/passkey-prf-page.js +0 -204
  118. package/dist/modules/ssh-agent/session/passkey-prf-page.js.map +0 -1
  119. package/dist/modules/ssh-agent/session/prf-flow.js +0 -103
  120. package/dist/modules/ssh-agent/session/prf-flow.js.map +0 -1
  121. package/dist/modules/ssh-agent/ssh-agent/impl.js +0 -117
  122. package/dist/modules/ssh-agent/ssh-agent/impl.js.map +0 -1
  123. package/dist/modules/ssh-agent/ssh-agent/interface.js +0 -2
  124. package/dist/modules/ssh-agent/ssh-agent/interface.js.map +0 -1
  125. package/dist/scripts/build.js +0 -460
  126. package/dist/scripts/build.js.map +0 -1
  127. package/dist/scripts/check-npm-version.js +0 -8
  128. package/dist/scripts/check-npm-version.js.map +0 -1
  129. package/dist/scripts/kill-existing-agent.js +0 -21
  130. package/dist/scripts/kill-existing-agent.js.map +0 -1
  131. package/dist/scripts/publish.js +0 -46
  132. package/dist/scripts/publish.js.map +0 -1
  133. package/multi-call.js +0 -85
  134. package/src/commands/git/hosts.ts +0 -20
  135. package/src/commands/git/index.ts +0 -9
  136. package/src/commands/git/setup.ts +0 -182
  137. package/src/commands/index.ts +0 -15
  138. package/src/commands/npm/index.ts +0 -8
  139. package/src/commands/npm/setup/git-remote.ts +0 -78
  140. package/src/commands/npm/setup/index.ts +0 -189
  141. package/src/commands/npm/setup/npm-auth.ts +0 -58
  142. package/src/commands/npm/setup/package-json-validate.ts +0 -68
  143. package/src/commands/npm/setup/package-registry.ts +0 -24
  144. package/src/commands/npm/setup/publish-workflow.yml +0 -35
  145. package/src/commands/npm/setup/setup.test.ts +0 -117
  146. package/src/commands/npm/setup/trusted-publishing.ts +0 -106
  147. package/src/commands/npm/setup/workflow.ts +0 -20
  148. package/src/commands/ssh/get-sk-credential.ts +0 -110
  149. package/src/commands/ssh/index.ts +0 -8
  150. package/src/commands/upgrade.ts +0 -90
  151. package/src/common/command.ts +0 -16
  152. package/src/common/constants.ts +0 -24
  153. package/src/common/effective-modules-extensions.ts +0 -24
  154. package/src/common/log.ts +0 -3
  155. package/src/common/render-caller-tree.ts +0 -22
  156. package/src/entrypoints/ozy-signing-agent.ts +0 -48
  157. package/src/entrypoints/ozy-ssh-keygen.ts +0 -10
  158. package/src/entrypoints/ozy-virtual-security-key.ts +0 -21
  159. package/src/entrypoints/ozy.ts +0 -2
  160. package/src/index.ts +0 -1
  161. package/src/internal/thing.ts +0 -3
  162. package/src/modules/cli/agent-client/impl.ts +0 -152
  163. package/src/modules/cli/agent-client/interface.ts +0 -17
  164. package/src/modules/cli/git/impl.ts +0 -133
  165. package/src/modules/cli/git/interface.ts +0 -23
  166. package/src/modules/cli/git/submodule/fix.ts +0 -298
  167. package/src/modules/cli/git/submodule/git-state.ts +0 -217
  168. package/src/modules/cli/git/submodule/gitmodules.ts +0 -126
  169. package/src/modules/cli/git/submodule/printer.ts +0 -256
  170. package/src/modules/cli/git/submodule/resolve-git-dir.ts +0 -14
  171. package/src/modules/cli/github/impl.ts +0 -169
  172. package/src/modules/cli/github/interface.ts +0 -29
  173. package/src/modules/cli/index.ts +0 -16
  174. package/src/modules/common/crypto/impl.ts +0 -173
  175. package/src/modules/common/crypto/interface.ts +0 -20
  176. package/src/modules/common/index.ts +0 -19
  177. package/src/modules/common/kep-map-store/impl.ts +0 -47
  178. package/src/modules/common/kep-map-store/interface.ts +0 -9
  179. package/src/modules/common/os-platform/caller-info.ts +0 -152
  180. package/src/modules/common/os-platform/impl.ts +0 -86
  181. package/src/modules/common/os-platform/interface.ts +0 -16
  182. package/src/modules/common/os-platform/virtual-hid/index.ts +0 -12
  183. package/src/modules/common/os-platform/virtual-hid/linux.ts +0 -7
  184. package/src/modules/common/os-platform/virtual-hid/mac.ts +0 -150
  185. package/src/modules/common/os-platform/virtual-hid/windows.ts +0 -7
  186. package/src/modules/common/ssh-config/impl.ts +0 -130
  187. package/src/modules/common/ssh-config/interface.ts +0 -33
  188. package/src/modules/ssh-agent/index.ts +0 -13
  189. package/src/modules/ssh-agent/session/agent-notes.md +0 -210
  190. package/src/modules/ssh-agent/session/design.md +0 -2
  191. package/src/modules/ssh-agent/session/html-refactor.md +0 -23
  192. package/src/modules/ssh-agent/session/impl.ts +0 -328
  193. package/src/modules/ssh-agent/session/interface-rpc.ts +0 -24
  194. package/src/modules/ssh-agent/session/interface.ts +0 -62
  195. package/src/modules/ssh-agent/session/passkey-prf-page.ts +0 -224
  196. package/src/modules/ssh-agent/session/prf-flow.ts +0 -152
  197. package/src/modules/ssh-agent/ssh-agent/impl.ts +0 -136
  198. package/src/modules/ssh-agent/ssh-agent/interface.ts +0 -9
  199. package/src/scripts/build.ts +0 -543
  200. package/src/scripts/check-npm-version.ts +0 -7
  201. package/src/scripts/kill-existing-agent.ts +0 -22
  202. package/src/scripts/publish.ts +0 -47
@@ -1,8 +0,0 @@
1
- import { interfaces } from "effective-modules";
2
- export var AgentModules;
3
- (function (AgentModules) {
4
- AgentModules["SSHAgent"] = "SSHAgent";
5
- AgentModules["Session"] = "Session";
6
- })(AgentModules || (AgentModules = {}));
7
- export const agentModules = interfaces(AgentModules);
8
- //# sourceMappingURL=index.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/modules/ssh-agent/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAI/C,MAAM,CAAN,IAAY,YAGX;AAHD,WAAY,YAAY;IACtB,qCAAqB,CAAA;IACrB,mCAAmB,CAAA;AACrB,CAAC,EAHW,YAAY,KAAZ,YAAY,QAGvB;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,UAAU,CAGnC,YAAY,CAAC,CAAC"}
@@ -1,265 +0,0 @@
1
- import { Deferred, Effect, Option, pipe, Result, Layer } from "effect";
2
- import { effunct, implementing } from "effective-modules";
3
- import { SSHPubkey, CredentialId, SSHKeyPair } from "@/modules/common/crypto/impl";
4
- import { renderCallerTree } from "@/common/render-caller-tree";
5
- import { BunHttpServer } from "@effect/platform-bun";
6
- import { randomUUID } from "node:crypto";
7
- import { agentModules } from "@/modules/ssh-agent";
8
- import { commonModules } from "@/modules/common";
9
- import { SessionError, SetupOutput, StartSessionInput } from "./interface";
10
- import { AgentRpcGroup } from "./interface-rpc";
11
- import { prfFlow, PrfInput } from "./prf-flow";
12
- import { AGENT_PORT_FILE_PATH, CURRENT_VERSION, DEFAULT_SESSION_TIMEOUT_SECONDS } from "@/common/constants";
13
- import { HttpRouter, HttpServer } from "effect/unstable/http";
14
- import { RpcServer, RpcSerialization } from "effect/unstable/rpc";
15
- import { writeFileSync } from "node:fs";
16
- import { using } from "@/common/effective-modules-extensions";
17
- const { OSPlatform, Crypto, KeyMapStore } = commonModules;
18
- const { Session } = agentModules;
19
- const SIGN_REQUESTS_COLLECTION_TIMEOUT_SECONDS = 3;
20
- export class SessionImpl extends implementing(Session).uses(OSPlatform, Crypto, KeyMapStore) {
21
- activeSession = Option.none();
22
- keyCache = new Map();
23
- *abortSession(session, onlyCheckRequestsAccumulated) {
24
- if (session.completed)
25
- return;
26
- let timeout = session.definition.timeoutSeconds;
27
- if (onlyCheckRequestsAccumulated) {
28
- const expected = session.definition.expectedSignRequests.length;
29
- const actual = session.receivedSignRequests.length;
30
- if (expected === actual) {
31
- yield* Effect.log(`All sign requests were received for session ${session.id} within ${SIGN_REQUESTS_COLLECTION_TIMEOUT_SECONDS} seconds`);
32
- return;
33
- }
34
- else {
35
- yield* Effect.log(`After ${SIGN_REQUESTS_COLLECTION_TIMEOUT_SECONDS} seconds only ${actual}/${expected} sign requests were received for session ${session.id}. Aborting`);
36
- timeout = SIGN_REQUESTS_COLLECTION_TIMEOUT_SECONDS;
37
- }
38
- }
39
- else {
40
- yield* Effect.log(`Aborting session ${session.id} after ${timeout} seconds`);
41
- }
42
- if (Option.isSome(this.activeSession) && this.activeSession.value.id === session.id) {
43
- this.activeSession = Option.none();
44
- }
45
- // Fail all the sign requests.
46
- const error = SessionError.cases.SessionTimedOut.make({
47
- seconds: timeout
48
- });
49
- session.completed = true;
50
- for (let i = 0; i < session.definition.expectedSignRequests.length; ++i) {
51
- const maybeReceived = Option.fromNullishOr(session.receivedSignRequests[i]);
52
- if (Option.isNone(maybeReceived))
53
- continue;
54
- const { deferredResponse } = maybeReceived.value;
55
- yield* Deferred.fail(deferredResponse, error);
56
- }
57
- }
58
- *startSession({ expectedCommonAncestorPID, expectedSignRequests, timeoutSeconds, pubkey }) {
59
- if (Option.isSome(this.activeSession)) {
60
- const activeId = this.activeSession.value.id;
61
- yield* Effect.log(`Blocked attempt to start session while ongoing active session ${activeId}`);
62
- return yield* Effect.fail(SessionError.cases.InterruptingSession.make({ id: activeId }));
63
- }
64
- const maybeCredential = yield* pipe(effunct(this.dependencies.KeyMapStore.getCredentialByPubkey)(SSHPubkey.fromAuthorizedKey(pubkey)), Effect.catch(err => Effect.fail(SessionError.cases.InternalError.make({
65
- reason: `Failed to read from key map store: ${err}`
66
- }))));
67
- if (Option.isNone(maybeCredential)) {
68
- return yield* Effect.fail(SessionError.cases.PubkeyNotRegistered.make({
69
- pubkey
70
- }));
71
- }
72
- const id = randomUUID();
73
- const session = {
74
- definition: { expectedCommonAncestorPID, expectedSignRequests, timeoutSeconds, pubkey },
75
- receivedSignRequests: [],
76
- id,
77
- totalReceived: 0,
78
- pubkey,
79
- credentialId: maybeCredential.value,
80
- completed: false
81
- };
82
- this.activeSession = Option.some(session);
83
- const n = expectedSignRequests.length;
84
- yield* Effect.log(`Starting session ${id} for ${new CredentialId(maybeCredential.value).humanReadableName} (${maybeCredential.value}). Expecting ${n} sign request${n === 1 ? '' : 's'}`);
85
- // 2 timeouts.
86
- // - One for just collecting all requests in the session.
87
- Effect.runFork(pipe(effunct(this.abortSession)(session, true), Effect.delay(`${SIGN_REQUESTS_COLLECTION_TIMEOUT_SECONDS} seconds`)));
88
- // - Another which abandons the session if the actual prf flow hasn't happened yet
89
- Effect.runFork(pipe(effunct(this.abortSession)(session, false), Effect.delay(`${timeoutSeconds} seconds`)));
90
- }
91
- isSignRequestInSession(session, signRequest) {
92
- if (session.pubkey !== signRequest.pubkey.authorizedKey) {
93
- return Option.none();
94
- }
95
- const trustedParentPid = session.definition.expectedCommonAncestorPID;
96
- let foundTrustedParentPid = false;
97
- for (let i = 0; i < signRequest.callerTree.length; ++i) {
98
- if (signRequest.callerTree[i].pid === trustedParentPid) {
99
- foundTrustedParentPid = true;
100
- break;
101
- }
102
- }
103
- if (!foundTrustedParentPid) {
104
- return Option.none();
105
- }
106
- for (let i = 0; i < session.definition.expectedSignRequests.length; ++i) {
107
- const { expectedCallerChain } = session.definition.expectedSignRequests[i];
108
- let j = 0;
109
- for (; j < expectedCallerChain.length; ++j) {
110
- const expected = expectedCallerChain[j];
111
- const actual = signRequest.callerTree[j];
112
- if (actual.command !== expected.command ||
113
- Option.getOrNull(actual.directory) !== Option.getOrNull(expected.directory)) {
114
- break;
115
- }
116
- }
117
- if (j === expectedCallerChain.length) {
118
- // Found match
119
- return Option.some({ index: i });
120
- }
121
- }
122
- return Option.none();
123
- }
124
- *cacheKey(keyPair, credentialId, cacheMinutes) {
125
- const pubkey = keyPair.pubkey.authorizedKey;
126
- this.keyCache.set(pubkey, keyPair);
127
- Effect.runFork(pipe(Effect.sync(() => { this.keyCache.delete(pubkey); }), Effect.andThen(Effect.log(`Cache entry revoked for ${pubkey} (${credentialId.humanReadableName}) after ${cacheMinutes} minutes`)), Effect.delay(`${cacheMinutes} minutes`)));
128
- yield* Effect.log(`Cached key ${pubkey} (${credentialId.humanReadableName}) for ${cacheMinutes} minutes`);
129
- }
130
- *resolveAllSignRequests(session) {
131
- // By setting it to none here, we technically do allow parallel sessions, the
132
- // caveat is there's an expectation that all requests for a session are retrieved
133
- // in a short time frame. In the future we may have a backlog of non matching signing requests
134
- // and sessions
135
- this.activeSession = Option.none();
136
- const credential = new CredentialId(session.credentialId);
137
- const cachedKeyPair = this.keyCache.get(session.pubkey);
138
- let prfResult;
139
- if (cachedKeyPair) {
140
- yield* Effect.log(`Using cached key for session ${session.id}`);
141
- prfResult = Result.succeed({ keyPair: cachedKeyPair, credentialId: credential });
142
- }
143
- else {
144
- prfResult = yield* pipe(effunct(prfFlow)(PrfInput.DerivePubkeyForRequests({ session })), Effect.scoped, Effect.provide(this.context), Effect.result);
145
- if (Result.isSuccess(prfResult)) {
146
- const { keyPair } = prfResult.success;
147
- const derivedPubkey = keyPair.pubkey.authorizedKey;
148
- if (derivedPubkey !== session.pubkey) {
149
- yield* Effect.log(`PRF derived pubkey ${derivedPubkey} but session expects ${session.pubkey}`);
150
- prfResult = Result.fail(SessionError.cases.InternalError.make({
151
- reason: `PRF derived pubkey ${derivedPubkey} does not match session pubkey ${session.pubkey}`
152
- }));
153
- }
154
- else if (prfResult.success.cacheMinutes !== undefined) {
155
- yield* this.cacheKey(keyPair, credential, prfResult.success.cacheMinutes);
156
- }
157
- }
158
- }
159
- session.completed = true;
160
- if (Result.isFailure(prfResult)) {
161
- yield* Effect.log(`PRF flow failed for session ${session.id}: ${JSON.stringify(prfResult.failure)}`);
162
- }
163
- else {
164
- yield* Effect.log(`PRF flow succeeded for session ${session.id}`);
165
- }
166
- let totalSigned = 0;
167
- for (const req of session.receivedSignRequests) {
168
- if (Result.isSuccess(prfResult)) {
169
- const { keyPair } = prfResult.success;
170
- const sigResult = yield* Effect.result(Effect.try({
171
- try: () => keyPair.sign(req.signRequest.data),
172
- catch: (e) => SessionError.cases.InternalError.make({ reason: String(e) }),
173
- }));
174
- if (Result.isSuccess(sigResult)) {
175
- totalSigned++;
176
- yield* Effect.log(`(${totalSigned}/${session.receivedSignRequests.length}) Signed ${req.signRequest.data.length} bytes for session ${session.id}`);
177
- yield* Deferred.succeed(req.deferredResponse, sigResult.success);
178
- }
179
- else {
180
- yield* Effect.log(`Signing failed for session ${session.id}: ${JSON.stringify(sigResult.failure)}`);
181
- yield* Deferred.fail(req.deferredResponse, sigResult.failure);
182
- }
183
- }
184
- else {
185
- yield* Deferred.fail(req.deferredResponse, prfResult.failure);
186
- }
187
- }
188
- }
189
- *sign(signRequest) {
190
- const { pubkey, callerTree } = signRequest;
191
- // On the no active session case. We create one.
192
- if (Option.isNone(this.activeSession)) {
193
- yield* Effect.log(`Received sign request when no session exists. Chain:\n${renderCallerTree(callerTree.slice(-3))}`);
194
- yield* this.startSession({
195
- expectedCommonAncestorPID: callerTree[callerTree.length - 1].pid,
196
- expectedSignRequests: [{
197
- expectedCallerChain: callerTree
198
- }],
199
- timeoutSeconds: DEFAULT_SESSION_TIMEOUT_SECONDS,
200
- pubkey: pubkey.authorizedKey
201
- });
202
- }
203
- if (Option.isNone(this.activeSession)) {
204
- return yield* Effect.fail(SessionError.cases.InternalError.make({
205
- reason: "Invariant violation. Active session not set after calling startSession"
206
- }));
207
- }
208
- const session = this.activeSession.value;
209
- const maybeIndex = this.isSignRequestInSession(session, signRequest);
210
- if (Option.isNone(maybeIndex)) {
211
- // TODO: we could instead create a queue of backed-up sign requests and give
212
- // a very short window for each session to collect its requests.
213
- return yield* Effect.fail(SessionError.cases.InterruptingSession.make({
214
- id: session.id
215
- }));
216
- }
217
- const { index } = maybeIndex.value;
218
- const deferredResponse = yield* Deferred.make();
219
- session.receivedSignRequests[index] = {
220
- deferredResponse,
221
- signRequest
222
- };
223
- session.totalReceived++;
224
- const totalExpected = session.definition.expectedSignRequests.length;
225
- yield* Effect.log(`Got matching signature request. ${totalExpected - session.totalReceived} remaining`);
226
- if (session.totalReceived > totalExpected) {
227
- return yield* Effect.fail(SessionError.cases.InternalError.make({
228
- reason: `Only expected to get ${totalExpected} signature requests. Got ${session.totalReceived} instead`
229
- }));
230
- }
231
- if (session.totalReceived === totalExpected) {
232
- yield* Effect.log(`All ${totalExpected} expected signature requests received for session ${session.id}. Initiating passkey verification.`);
233
- yield* this.resolveAllSignRequests(session);
234
- }
235
- return yield* Deferred.await(deferredResponse);
236
- }
237
- *setup(input) {
238
- const { keyPair, credentialId: derivedCredentialId, cacheMinutes } = yield* pipe(effunct(prfFlow)(PrfInput.DerivePubkeyOnly({ pubkey: input.pubkey, credentialId: input.credentialId, username: input.username })), Effect.scoped, Effect.provide(this.context));
239
- const derivedPubkey = keyPair.pubkey.authorizedKey;
240
- if (Option.isSome(input.pubkey) && derivedPubkey !== input.pubkey.value) {
241
- return yield* Effect.fail(SessionError.cases.PubkeyMismatch.make({ expected: input.pubkey.value, derived: derivedPubkey }));
242
- }
243
- yield* Effect.log(`Derived key for ${derivedCredentialId.humanReadableName} (${derivedCredentialId.base58})`);
244
- yield* pipe(effunct(this.dependencies.KeyMapStore.addKey)(keyPair.pubkey, derivedCredentialId.base58), Effect.mapError(reason => SessionError.cases.InternalError.make({ reason })));
245
- if (cacheMinutes !== undefined) {
246
- yield* this.cacheKey(keyPair, derivedCredentialId, cacheMinutes);
247
- }
248
- return { pubkey: derivedPubkey, credentialId: derivedCredentialId.base58 };
249
- }
250
- static makeRpcLayer() {
251
- const writePortFile = Layer.effectDiscard(Effect.gen(function* () {
252
- const server = yield* HttpServer.HttpServer;
253
- if (server.address._tag !== "TcpAddress") {
254
- return Effect.die(`Invariant server address of ${JSON.stringify(server.address)}`);
255
- }
256
- writeFileSync(AGENT_PORT_FILE_PATH, server.address.port.toString());
257
- }));
258
- return pipe(RpcServer.layerHttp({ group: AgentRpcGroup, path: "/rpc", protocol: "http" }), Layer.provideMerge(AgentRpcGroup.toLayer({
259
- GetVersion: () => Effect.succeed({ version: CURRENT_VERSION }),
260
- StartSession: using(Session).startSession,
261
- Setup: using(Session).setup,
262
- })), HttpRouter.serve, Layer.provideMerge(writePortFile), Layer.provideMerge(BunHttpServer.layer({ port: 0 })), Layer.provideMerge(RpcSerialization.layerJson), Layer.provideMerge(this.Layer));
263
- }
264
- }
265
- //# sourceMappingURL=impl.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"impl.js","sourceRoot":"","sources":["../../../../../../../src/modules/ssh-agent/session/impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAkB,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAkC,WAAW,EAAE,iBAAiB,EAAkB,MAAM,aAAa,CAAC;AAC3H,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAkB,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAC;AAC5G,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,uCAAuC,CAAC;AAgB9D,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,aAAa,CAAC;AAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC;AAEjC,MAAM,wCAAwC,GAAG,CAAC,CAAC;AAEnD,MAAM,OAAO,WAAY,SAAQ,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC;IAClF,aAAa,GAAiC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5D,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEzC,CAAC,YAAY,CAAC,OAAsB,EAAE,4BAAqC;QACjF,IAAI,OAAO,CAAC,SAAS;YAAE,OAAO;QAC9B,IAAI,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,4BAA4B,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,MAAM,CAAC;YAChE,MAAM,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC;YACnD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,+CAA+C,OAAO,CAAC,EAAE,WAAW,wCAAwC,UAAU,CAAC,CAAC;gBAC1I,OAAO;YACT,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,wCAAwC,iBAAiB,MAAM,IAAI,QAAQ,4CAA4C,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;gBAC1K,OAAO,GAAG,wCAAwC,CAAC;YACrD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,EAAE,UAAU,OAAO,UAAU,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC;YACpF,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,CAAC;QACD,8BAA8B;QAC9B,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC;YACpD,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;QACH,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;YACxE,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;gBAAE,SAAS;YAC3C,MAAM,EAAE,gBAAgB,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC;YACjD,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,CAAC,YAAY,CAAC,EAAC,yBAAyB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,EAAoB;QACxG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,iEAAiE,QAAQ,EAAE,CAAC,CAAC;YAC/F,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,IAAI,CACjC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,EACjG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC;YACpE,MAAM,EAAE,sCAAsC,GAAG,EAAE;SACpD,CAAC,CAAC,CAAC,CACL,CAAA;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC;gBACpE,MAAM;aACP,CAAC,CAAC,CAAC;QACN,CAAC;QACD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,OAAO,GAAkB;YAC7B,UAAU,EAAE,EAAC,yBAAyB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,EAAC;YACrF,oBAAoB,EAAE,EAAE;YACxB,EAAE;YACF,aAAa,EAAE,CAAC;YAChB,MAAM;YACN,YAAY,EAAE,eAAe,CAAC,KAAK;YACnC,SAAS,EAAE,KAAK;SACjB,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,oBAAoB,CAAC,MAAM,CAAC;QACtC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,QAAQ,IAAI,YAAY,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,iBAAiB,KAAK,eAAe,CAAC,KAAK,gBAAgB,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1L,eAAe;QACf,yDAAyD;QACzD,MAAM,CAAC,OAAO,CAAC,IAAI,CACjB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,EACzC,MAAM,CAAC,KAAK,CAAC,GAAG,wCAAwC,UAAU,CAAC,CACpE,CAAC,CAAC;QACH,oFAAoF;QACpF,MAAM,CAAC,OAAO,CAAC,IAAI,CACjB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAC1C,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,UAAU,CAAC,CAC1C,CAAC,CAAC;IACL,CAAC;IAEO,sBAAsB,CAAC,OAAsB,EAAE,WAAsB;QAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACxD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC;QACtE,IAAI,qBAAqB,GAAG,KAAK,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;YACvD,IAAI,WAAW,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,GAAG,KAAK,gBAAgB,EAAE,CAAC;gBACxD,qBAAqB,GAAG,IAAI,CAAC;gBAC7B,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;YACxE,MAAM,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAE,CAAC;YAC5E,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,OAAO,CAAC,GAAG,mBAAmB,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;gBAC3C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,CAAC,CAAE,CAAC;gBACzC,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACzC,IACE,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;oBACnC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC3E,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,CAAC,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;gBACrC,cAAc;gBACd,OAAO,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,CAAC,EAAC,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAEO,CAAC,QAAQ,CAAC,OAAmB,EAAE,YAA0B,EAAE,YAAoB;QACrF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,IAAI,CACjB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EACpD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,2BAA2B,MAAM,KAAK,YAAY,CAAC,iBAAiB,WAAW,YAAY,UAAU,CAAC,CAAC,EACjI,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,UAAU,CAAC,CACxC,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,MAAM,KAAK,YAAY,CAAC,iBAAiB,SAAS,YAAY,UAAU,CAAC,CAAC;IAC5G,CAAC;IAEO,CAAC,sBAAsB,CAAC,OAAsB;QACpD,6EAA6E;QAC7E,iFAAiF;QACjF,8FAA8F;QAC9F,eAAe;QACf,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAE1D,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,SAAiD,CAAC;QACtD,IAAI,aAAa,EAAE,CAAC;YAClB,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,gCAAgC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAChE,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,KAAK,CAAC,CAAC,IAAI,CACrB,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAC,OAAO,EAAC,CAAC,CAAC,EAC7D,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAC5B,MAAM,CAAC,MAAM,CACd,CAAC;YACF,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC;gBACtC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;gBACnD,IAAI,aAAa,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;oBACrC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,aAAa,wBAAwB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC/F,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC;wBAC5D,MAAM,EAAE,sBAAsB,aAAa,kCAAkC,OAAO,CAAC,MAAM,EAAE;qBAC9F,CAAC,CAAC,CAAC;gBACN,CAAC;qBAAM,IAAI,SAAS,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACxD,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;QACzB,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,+BAA+B,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvG,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,kCAAkC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAC/C,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC;gBACtC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;oBAChD,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC;oBAC7C,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3E,CAAC,CAAC,CAAC;gBACJ,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChC,WAAW,EAAE,CAAC;oBACd,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,IAAI,OAAO,CAAC,oBAAoB,CAAC,MAAM,YAAY,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,sBAAsB,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnJ,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnE,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,8BAA8B,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACpG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;YAChE,CAAC;QAEH,CAAC;IACH,CAAC;IAED,CAAC,IAAI,CAAC,WAAsB;QAC1B,MAAM,EAAC,MAAM,EAAE,UAAU,EAAC,GAAG,WAAW,CAAC;QACzC,gDAAgD;QAChD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,yDAAyD,gBAAgB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrH,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;gBACvB,yBAAyB,EAAE,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG;gBAChE,oBAAoB,EAAE,CAAC;wBACrB,mBAAmB,EAAE,UAAU;qBAChC,CAAC;gBACF,cAAc,EAAE,+BAA+B;gBAC/C,MAAM,EAAE,MAAM,CAAC,aAAa;aAC7B,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC;gBAC9D,MAAM,EAAE,wEAAwE;aACjF,CAAC,CAAC,CAAC;QACN,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,4EAA4E;YAC5E,sEAAsE;YACtE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC;gBACpE,EAAE,EAAE,OAAO,CAAC,EAAE;aACf,CAAC,CAAC,CAAC;QACN,CAAC;QACD,MAAM,EAAC,KAAK,EAAC,GAAG,UAAU,CAAC,KAAK,CAAC;QACjC,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAwB,CAAC;QACtE,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG;YACpC,gBAAgB;YAChB,WAAW;SACZ,CAAA;QACD,OAAO,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,MAAM,CAAC;QACrE,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,mCAAmC,aAAa,GAAG,OAAO,CAAC,aAAa,YAAY,CAAC,CAAC;QACxG,IAAI,OAAO,CAAC,aAAa,GAAG,aAAa,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC;gBAC9D,MAAM,EAAE,wBAAwB,aAAa,4BAA4B,OAAO,CAAC,aAAa,UAAU;aACzG,CAAC,CAAC,CAAC;QACN,CAAC;QAED,IAAI,OAAO,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;YAC5C,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,aAAa,qDAAqD,OAAO,CAAC,EAAE,oCAAoC,CAAC,CAAC;YAC3I,KAAK,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACjD,CAAC;IAED,CAAC,KAAK,CAAC,KAAiB;QACtB,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAC9E,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,EACjI,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAC7B,CAAC;QAEF,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;QAEnD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,aAAa,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACxE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;QAC9H,CAAC;QAED,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,mBAAmB,CAAC,iBAAiB,KAAK,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC;QAE9G,KAAK,CAAC,CAAC,IAAI,CACT,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,EACzF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAC7E,CAAC;QAEF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,EAAE,YAAY,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAAC;IAC7E,CAAC;IAEM,MAAM,CAAC,YAAY;QACxB,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CACvC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;YAC5C,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACzC,OAAO,MAAM,CAAC,GAAG,CAAC,+BAA+B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,aAAa,CAAC,oBAAoB,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC,CACH,CAAC;QACF,OAAO,IAAI,CACT,SAAS,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAC7E,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC;YACvC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;YAC9D,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,YAAY;YACzC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK;SAC5B,CAAC,CAAC,EACH,UAAU,CAAC,KAAK,EAChB,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,EACjC,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,EACpD,KAAK,CAAC,YAAY,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAC9C,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAC/B,CAAC;IACJ,CAAC;CACF"}
@@ -1,20 +0,0 @@
1
- import { Schema } from "effect";
2
- import { Rpc, RpcGroup } from "effect/unstable/rpc";
3
- import { SessionError, SetupInput, SetupOutput, StartSessionInput } from "./interface";
4
- const GetVersionRpc = Rpc.make("GetVersion", {
5
- payload: {},
6
- success: Schema.Struct({ version: Schema.String }),
7
- error: Schema.Never,
8
- });
9
- const SetupRpc = Rpc.make("Setup", {
10
- payload: SetupInput,
11
- success: SetupOutput,
12
- error: SessionError,
13
- });
14
- const StartSessionRpc = Rpc.make("StartSession", {
15
- payload: StartSessionInput,
16
- success: Schema.Void,
17
- error: SessionError,
18
- });
19
- export const AgentRpcGroup = RpcGroup.make(GetVersionRpc, StartSessionRpc, SetupRpc);
20
- //# sourceMappingURL=interface-rpc.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"interface-rpc.js","sourceRoot":"","sources":["../../../../../../../src/modules/ssh-agent/session/interface-rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEvF,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE;IAC3C,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAClD,KAAK,EAAE,MAAM,CAAC,KAAK;CACpB,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE;IACjC,OAAO,EAAE,UAAU;IACnB,OAAO,EAAE,WAAW;IACpB,KAAK,EAAE,YAAY;CACpB,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE;IAC/C,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,MAAM,CAAC,IAAI;IACpB,KAAK,EAAE,YAAY;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC"}
@@ -1,32 +0,0 @@
1
- import { Schema } from "effect";
2
- export const SessionError = Schema.TaggedUnion({
3
- SessionTimedOut: { seconds: Schema.Number },
4
- WebAuthnCancelled: {},
5
- InternalError: { reason: Schema.String },
6
- PubkeyMismatch: { expected: Schema.String, derived: Schema.String },
7
- PubkeyNotRegistered: { pubkey: Schema.String },
8
- InterruptingSession: { id: Schema.String },
9
- UnexpectedSignRequest: {},
10
- });
11
- export const SetupInput = Schema.Struct({
12
- pubkey: Schema.OptionFromNullOr(Schema.String),
13
- credentialId: Schema.OptionFromNullOr(Schema.String),
14
- username: Schema.String,
15
- });
16
- export const SetupOutput = Schema.Struct({
17
- pubkey: Schema.String,
18
- credentialId: Schema.String
19
- });
20
- export const ExpectedSignRequest = Schema.Struct({
21
- expectedCallerChain: Schema.Array(Schema.Struct({
22
- command: Schema.String,
23
- directory: Schema.OptionFromNullOr(Schema.String)
24
- }))
25
- });
26
- export const StartSessionInput = Schema.Struct({
27
- expectedSignRequests: Schema.Array(ExpectedSignRequest),
28
- expectedCommonAncestorPID: Schema.Number,
29
- timeoutSeconds: Schema.Number,
30
- pubkey: Schema.String
31
- });
32
- //# sourceMappingURL=interface.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"interface.js","sourceRoot":"","sources":["../../../../../../../src/modules/ssh-agent/session/interface.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIhC,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC;IAC7C,eAAe,EAAE,EAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAC;IACzC,iBAAiB,EAAE,EAAE;IACrB,aAAa,EAAE,EAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;IACvC,cAAc,EAAE,EAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;IAClE,mBAAmB,EAAE,EAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAC;IAC5C,mBAAmB,EAAE,EAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAC;IACxC,qBAAqB,EAAE,EAAE;CAC1B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;IAC9C,YAAY,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;IACpD,QAAQ,EAAE,MAAM,CAAC,MAAM;CACxB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,YAAY,EAAE,MAAM,CAAC,MAAM;CAC5B,CAAC,CAAC;AASH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QAC9C,OAAO,EAAE,MAAM,CAAC,MAAM;QACtB,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;KAClD,CAAC,CAAC;CACJ,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7C,oBAAoB,EAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACvD,yBAAyB,EAAE,MAAM,CAAC,MAAM;IACxC,cAAc,EAAE,MAAM,CAAC,MAAM;IAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;CACtB,CAAC,CAAC"}
@@ -1,204 +0,0 @@
1
- import { Option } from "effect";
2
- import { FUTURE_TOOL_NAME } from "@/common/constants";
3
- import { CredentialId } from "@/modules/common/crypto/impl";
4
- import { PrfInput } from "./prf-flow";
5
- function escHtml(s) {
6
- return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
7
- }
8
- function nodeLabel(node) {
9
- const dir = Option.getOrElse(() => '(cannot load dir)')(node.directory);
10
- return `${node.command} ${dir}`;
11
- }
12
- function findCommonPrefixLen(chains) {
13
- if (chains.length <= 1)
14
- return chains[0]?.length ?? 0;
15
- let len = 0;
16
- for (let i = 0;; i++) {
17
- if (chains.some(c => i >= c.length))
18
- break;
19
- const first = chains[0][i];
20
- if (chains.some(c => c[i].command !== first.command))
21
- break;
22
- len = i + 1;
23
- }
24
- return len;
25
- }
26
- function buildTreeNodes(chains, from) {
27
- const groups = new Map();
28
- for (const chain of chains) {
29
- if (from >= chain.length)
30
- continue;
31
- const node = chain[from];
32
- const key = `${node.command}|${Option.getOrElse(() => '')(node.directory)}`;
33
- const existing = groups.get(key);
34
- if (existing) {
35
- existing.chains.push(chain);
36
- }
37
- else {
38
- groups.set(key, { chains: [chain], node });
39
- }
40
- }
41
- return Array.from(groups.values()).map(({ chains: groupChains, node }) => ({
42
- label: nodeLabel(node),
43
- children: buildTreeNodes(groupChains, from + 1),
44
- }));
45
- }
46
- function renderTreeLines(nodes, prefix) {
47
- const lines = [];
48
- for (let i = 0; i < nodes.length; i++) {
49
- const node = nodes[i];
50
- const isLast = i === nodes.length - 1;
51
- const connector = isLast ? '└── ' : '├── ';
52
- const childPrefix = prefix + (isLast ? ' ' : '│ ');
53
- lines.push(escHtml(prefix + connector + node.label));
54
- lines.push(...renderTreeLines(node.children, childPrefix));
55
- }
56
- return lines;
57
- }
58
- function buildSignRequestTreeHtml(chains) {
59
- if (chains.length === 0)
60
- return '';
61
- const commonPrefixLen = findCommonPrefixLen(chains);
62
- const minLen = Math.min(...chains.map(c => c.length));
63
- // Show at least 3 levels per branch; always include divergence point
64
- const displayStart = Math.max(0, Math.min(commonPrefixLen, minLen - 3));
65
- const rootNodes = buildTreeNodes(chains, displayStart);
66
- const lines = [];
67
- if (rootNodes.length === 1) {
68
- lines.push(escHtml(rootNodes[0].label));
69
- lines.push(...renderTreeLines(rootNodes[0].children, ''));
70
- }
71
- else {
72
- lines.push(...renderTreeLines(rootNodes, ''));
73
- }
74
- return `<pre class="tree">${lines.join('\n')}</pre>`;
75
- }
76
- function getContextInfo(context) {
77
- return PrfInput.$match(context, {
78
- DerivePubkeyOnly: ({ credentialId: credOpt, pubkey }) => {
79
- const credIdBase58 = Option.getOrNull(credOpt);
80
- const credIdBase64 = credIdBase58 ? new CredentialId(credIdBase58).base64 : null;
81
- const mode = credIdBase64 !== null ? 'credential'
82
- : Option.isSome(pubkey) ? 'selectExisting'
83
- : 'createOrSelect';
84
- const friendlyName = credIdBase58 ? new CredentialId(credIdBase58).humanReadableName : null;
85
- const contextHtml = friendlyName && credIdBase58
86
- ? `<p style="color:#666;font-size:.95rem">Setup — confirming ownership of <strong>${escHtml(friendlyName)}</strong> (${escHtml(credIdBase58)})</p>`
87
- : '<p style="color:#666;font-size:.95rem">Setup — create or select a passkey for SSH signing</p>';
88
- return { contextHtml, credentialId: credIdBase64, mode, friendlyName };
89
- },
90
- DerivePubkeyForRequests: ({ session }) => {
91
- const chains = session.definition.expectedSignRequests.map(r => r.expectedCallerChain);
92
- const friendlyName = new CredentialId(session.credentialId).humanReadableName;
93
- const contextHtml = `<p style="color:#666;font-size:.95rem">Signing with <strong>${escHtml(friendlyName)}</strong> (${escHtml(session.credentialId)})</p>${buildSignRequestTreeHtml(chains)}`;
94
- return {
95
- contextHtml,
96
- credentialId: new CredentialId(session.credentialId).base64,
97
- mode: 'credential',
98
- friendlyName,
99
- };
100
- },
101
- });
102
- }
103
- function buttonsHtml(mode, friendlyName) {
104
- if (mode === 'createOrSelect') {
105
- return `<button class="btn" onclick="btnClick('create')">Create new passkey</button>` +
106
- `<button class="btn" onclick="btnClick('selectExisting')">Sign with existing passkey</button>`;
107
- }
108
- const label = mode === 'credential' && friendlyName ? `Sign with ${friendlyName}`
109
- : mode === 'selectExisting' ? 'Sign with existing passkey'
110
- : 'Create new passkey';
111
- return `<button class="btn" onclick="btnClick()">Authorize — ${label}</button>`;
112
- }
113
- export function useOrCreatePasskeyPage(input) {
114
- const { agentKeyPair, challenge, context, transportKeyContext, username } = input;
115
- const capitalizedName = FUTURE_TOOL_NAME.slice(0, 1).toLocaleUpperCase() + FUTURE_TOOL_NAME.slice(1);
116
- const title = `${capitalizedName} SSH Auth`;
117
- const { contextHtml, credentialId, mode, friendlyName } = getContextInfo(context);
118
- const cfg = JSON.stringify({
119
- agentPublicKey: agentKeyPair.base64Pubkey,
120
- challenge,
121
- credentialId,
122
- mode,
123
- username,
124
- }).replace(/</g, "\\u003c");
125
- return `<!DOCTYPE html>
126
- <html>
127
- <head><title>${title}</title><meta charset="utf-8">
128
- <style>
129
- body{font-family:system-ui,sans-serif;max-width:560px;margin:80px auto;padding:0 20px;text-align:center}
130
- h1{font-size:1.5rem}#st{font-size:1.1rem;margin-top:20px}.ok{color:#060}.err{color:#d00}
131
- .btn{margin:8px 4px;padding:10px 28px;font-size:1rem;cursor:pointer}.btn:disabled{cursor:default;opacity:.5}
132
- .tree{font-family:monospace;text-align:left;font-size:.85rem;background:#f5f5f5;padding:12px;border-radius:6px;overflow-x:auto;margin:16px 0}
133
- </style>
134
- </head>
135
- <body>
136
- <h1>${title}</h1>
137
- ${contextHtml}
138
- <div id="trust-row" style="margin-bottom:16px;color:#aaa;font-size:.9rem"><label><input type="checkbox" id="trust" onchange="trustChanged()"> trust this device (cache SSH private key) for <input type="number" id="mins" value="15" min="1" disabled style="width:4rem;color:#aaa"> minutes</label></div>
139
- ${buttonsHtml(mode, friendlyName)}
140
- <p id="st"></p>
141
- <script>
142
- const C=${cfg};
143
- function bu(b){return btoa(String.fromCharCode(...new Uint8Array(b))).replace(/\\+/g,'-').replace(/\\//g,'_').replace(/=+$/,'')}
144
- function fu(s){const b=atob(s.replace(/-/g,'+').replace(/_/g,'/'));const u=new Uint8Array(b.length);for(let i=0;i<b.length;i++)u[i]=b.charCodeAt(i);return u}
145
- function btnClick(m){document.querySelectorAll('.btn').forEach(b=>b.disabled=true);main(m);}
146
- function trustChanged(){const c=document.getElementById('trust').checked;const m=document.getElementById('mins');document.getElementById('trust-row').style.color=c?'':'#aaa';m.disabled=!c;m.style.color=c?'':'#aaa';}
147
- async function main(modeOverride){
148
- const mode=modeOverride??C.mode;
149
- const st=document.getElementById('st');
150
- const fid=new URLSearchParams(location.search).get('id');
151
- try{
152
- const ch=fu(C.challenge);
153
- const salt=new Uint8Array(32);new TextEncoder().encodeInto('${FUTURE_TOOL_NAME}-prf-v1',salt);
154
- let cred;
155
- if(mode==='credential'){
156
- cred=await navigator.credentials.get({publicKey:{
157
- challenge:ch,userVerification:'required',
158
- allowCredentials:[{type:'public-key',id:fu(C.credentialId)}],
159
- extensions:{prf:{eval:{first:salt}}}
160
- }});
161
- }else if(mode==='selectExisting'){
162
- cred=await navigator.credentials.get({publicKey:{
163
- challenge:ch,userVerification:'required',
164
- extensions:{prf:{eval:{first:salt}}}
165
- }});
166
- }else{
167
- cred=await navigator.credentials.create({publicKey:{
168
- challenge:ch,rp:{name:'${FUTURE_TOOL_NAME} challenge'},
169
- user:{id:crypto.getRandomValues(new Uint8Array(16)),name:C.username,displayName:C.username+' — ${capitalizedName} SSH Key'},
170
- pubKeyCredParams:[{alg:-7,type:'public-key'}],
171
- authenticatorSelection:{authenticatorAttachment:'platform',userVerification:'required',residentKey:'required'},
172
- extensions:{prf:{eval:{first:salt}}}
173
- }});
174
- }
175
- const prf=cred.getClientExtensionResults().prf?.results?.first;
176
- if(!prf)throw Object.assign(new Error('PRF extension not returned — authenticator may not support PRF'),{noRetry:true});
177
- const ap=await crypto.subtle.importKey('raw',fu(C.agentPublicKey),{name:'ECDH',namedCurve:'P-256'},false,[]);
178
- const bkp=await crypto.subtle.generateKey({name:'ECDH',namedCurve:'P-256'},true,['deriveBits']);
179
- const sh=await crypto.subtle.deriveBits({name:'ECDH',public:ap},bkp.privateKey,256);
180
- const hk=await crypto.subtle.importKey('raw',sh,'HKDF',false,['deriveKey']);
181
- const ak=await crypto.subtle.deriveKey(
182
- {name:'HKDF',hash:'SHA-256',salt:new Uint8Array(32),info:new TextEncoder().encode('${transportKeyContext}')},
183
- hk,{name:'AES-GCM',length:256},false,['encrypt']
184
- );
185
- const iv=crypto.getRandomValues(new Uint8Array(12));
186
- const enc=await crypto.subtle.encrypt({name:'AES-GCM',iv},ak,prf);
187
- const bp=await crypto.subtle.exportKey('raw',bkp.publicKey);
188
- const cm=document.getElementById('trust').checked?Math.max(1,parseInt(document.getElementById('mins').value,10)||15):undefined;
189
- const r=await fetch('/seed?id='+fid,{method:'POST',headers:{'Content-Type':'application/json'},
190
- body:JSON.stringify({encryptedSeed:bu(enc),iv:bu(iv),browserPublicKey:bu(bp),credentialId:bu(cred.rawId),cacheMinutes:cm})});
191
- if(!r.ok)throw new Error('Agent returned '+r.status);
192
- const d=await r.json();
193
- st.className='ok';st.textContent='Authorized as '+d.friendlyName+'. You can close this tab.';
194
- }catch(e){
195
- const cancelled=e&&(e.name==='NotAllowedError'||e.name==='AbortError');
196
- await fetch('/error?id='+fid,{method:'POST',headers:{'Content-Type':'application/json'},
197
- body:JSON.stringify({cancelled,message:e?.message??String(e)})}).catch(()=>{});
198
- st.className='err';st.textContent=(cancelled?'Cancelled or passkey not found.':'Error: '+(e?.message??e))+' You can close this tab.';
199
- }
200
- }
201
- </script>
202
- </body></html>`;
203
- }
204
- //# sourceMappingURL=passkey-prf-page.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"passkey-prf-page.js","sourceRoot":"","sources":["../../../../../../../src/modules/ssh-agent/session/passkey-prf-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AActC,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,IAAe;IAChC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxE,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,GAAG,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA+C;IAC1E,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IACtD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,GAAI,CAAC,EAAE,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAAE,MAAM;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM;QAC7D,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,MAA+C,EAAE,IAAY;IACnF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmE,CAAC;IAC1F,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM;YAAE,SAAS;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACzE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC;QACtB,QAAQ,EAAE,cAAc,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC;KAChD,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,eAAe,CAAC,KAAiB,EAAE,MAAc;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3C,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAAC,MAA+C;IAC/E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,eAAe,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,qEAAqE;IACrE,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAExE,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,qBAAqB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;AACvD,CAAC;AAED,SAAS,cAAc,CAAC,OAAiB;IACvC,OAAO,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE;QAC9B,gBAAgB,EAAE,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;YACtD,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACjF,MAAM,IAAI,GAAS,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY;gBACrD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB;oBAC1C,CAAC,CAAC,gBAAgB,CAAC;YACrB,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5F,MAAM,WAAW,GAAG,YAAY,IAAI,YAAY;gBAC9C,CAAC,CAAC,kFAAkF,OAAO,CAAC,YAAY,CAAC,cAAc,OAAO,CAAC,YAAY,CAAC,OAAO;gBACnJ,CAAC,CAAC,+FAA+F,CAAC;YACpG,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACzE,CAAC;QACD,uBAAuB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YACvC,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YACvF,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,iBAAiB,CAAC;YAC9E,MAAM,WAAW,GAAG,+DAA+D,OAAO,CAAC,YAAY,CAAC,cAAc,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9L,OAAO;gBACL,WAAW;gBACX,YAAY,EAAE,IAAI,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM;gBAC3D,IAAI,EAAE,YAAoB;gBAC1B,YAAY;aACb,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,IAAU,EAAE,YAA2B;IAC1D,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,OAAO,8EAA8E;YAC9E,8FAA8F,CAAC;IACxG,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,KAAK,YAAY,IAAI,YAAY,CAAC,CAAC,CAAC,aAAa,YAAY,EAAE;QAC/E,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,4BAA4B;YAC1D,CAAC,CAAC,oBAAoB,CAAC;IACzB,OAAO,wDAAwD,KAAK,WAAW,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAkC;IACvE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAClF,MAAM,eAAe,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrG,MAAM,KAAK,GAAG,GAAG,eAAe,WAAW,CAAC;IAE5C,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAElF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QACzB,cAAc,EAAE,YAAY,CAAC,YAAY;QACzC,SAAS;QACT,YAAY;QACZ,IAAI;QACJ,QAAQ;KACT,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAE5B,OAAO;;eAEM,KAAK;;;;;;;;;MASd,KAAK;EACT,WAAW;;EAEX,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC;;;UAGvB,GAAG;;;;;;;;;;;kEAWqD,gBAAgB;;;;;;;;;;;;;;;iCAejD,gBAAgB;yGACwD,eAAe;;;;;;;;;;;;;2FAa7B,mBAAmB;;;;;;;;;;;;;;;;;;;;eAoB/F,CAAC;AAChB,CAAC"}