@ozyman42/ozy-cli 0.4.6-linux-x64.0 → 0.4.6

package/dist/modules/ssh-agent/session/passkey-prf-page.js

@@ -0,0 +1,204 @@
+import { Option } from "effect";
+import { FUTURE_TOOL_NAME } from "@/common/constants";
+import { CredentialId } from "@/modules/common/crypto/impl";
+import { PrfInput } from "./prf-flow";
+function escHtml(s) {
+    return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+}
+function nodeLabel(node) {
+    const dir = Option.getOrElse(() => '(cannot load dir)')(node.directory);
+    return `${node.command}  ${dir}`;
+}
+function findCommonPrefixLen(chains) {
+    if (chains.length <= 1)
+        return chains[0]?.length ?? 0;
+    let len = 0;
+    for (let i = 0;; i++) {
+        if (chains.some(c => i >= c.length))
+            break;
+        const first = chains[0][i];
+        if (chains.some(c => c[i].command !== first.command))
+            break;
+        len = i + 1;
+    }
+    return len;
+}
+function buildTreeNodes(chains, from) {
+    const groups = new Map();
+    for (const chain of chains) {
+        if (from >= chain.length)
+            continue;
+        const node = chain[from];
+        const key = `${node.command}|${Option.getOrElse(() => '')(node.directory)}`;
+        const existing = groups.get(key);
+        if (existing) {
+            existing.chains.push(chain);
+        }
+        else {
+            groups.set(key, { chains: [chain], node });
+        }
+    }
+    return Array.from(groups.values()).map(({ chains: groupChains, node }) => ({
+        label: nodeLabel(node),
+        children: buildTreeNodes(groupChains, from + 1),
+    }));
+}
+function renderTreeLines(nodes, prefix) {
+    const lines = [];
+    for (let i = 0; i < nodes.length; i++) {
+        const node = nodes[i];
+        const isLast = i === nodes.length - 1;
+        const connector = isLast ? '└── ' : '├── ';
+        const childPrefix = prefix + (isLast ? '    ' : '│   ');
+        lines.push(escHtml(prefix + connector + node.label));
+        lines.push(...renderTreeLines(node.children, childPrefix));
+    }
+    return lines;
+}
+function buildSignRequestTreeHtml(chains) {
+    if (chains.length === 0)
+        return '';
+    const commonPrefixLen = findCommonPrefixLen(chains);
+    const minLen = Math.min(...chains.map(c => c.length));
+    // Show at least 3 levels per branch; always include divergence point
+    const displayStart = Math.max(0, Math.min(commonPrefixLen, minLen - 3));
+    const rootNodes = buildTreeNodes(chains, displayStart);
+    const lines = [];
+    if (rootNodes.length === 1) {
+        lines.push(escHtml(rootNodes[0].label));
+        lines.push(...renderTreeLines(rootNodes[0].children, ''));
+    }
+    else {
+        lines.push(...renderTreeLines(rootNodes, ''));
+    }
+    return `<pre class="tree">${lines.join('\n')}</pre>`;
+}
+function getContextInfo(context) {
+    return PrfInput.$match(context, {
+        DerivePubkeyOnly: ({ credentialId: credOpt, pubkey }) => {
+            const credIdBase58 = Option.getOrNull(credOpt);
+            const credIdBase64 = credIdBase58 ? new CredentialId(credIdBase58).base64 : null;
+            const mode = credIdBase64 !== null ? 'credential'
+                : Option.isSome(pubkey) ? 'selectExisting'
+                    : 'createOrSelect';
+            const friendlyName = credIdBase58 ? new CredentialId(credIdBase58).humanReadableName : null;
+            const contextHtml = friendlyName && credIdBase58
+                ? `<p style="color:#666;font-size:.95rem">Setup — confirming ownership of <strong>${escHtml(friendlyName)}</strong> (${escHtml(credIdBase58)})</p>`
+                : '<p style="color:#666;font-size:.95rem">Setup — create or select a passkey for SSH signing</p>';
+            return { contextHtml, credentialId: credIdBase64, mode, friendlyName };
+        },
+        DerivePubkeyForRequests: ({ session }) => {
+            const chains = session.definition.expectedSignRequests.map(r => r.expectedCallerChain);
+            const friendlyName = new CredentialId(session.credentialId).humanReadableName;
+            const contextHtml = `<p style="color:#666;font-size:.95rem">Signing with <strong>${escHtml(friendlyName)}</strong> (${escHtml(session.credentialId)})</p>${buildSignRequestTreeHtml(chains)}`;
+            return {
+                contextHtml,
+                credentialId: new CredentialId(session.credentialId).base64,
+                mode: 'credential',
+                friendlyName,
+            };
+        },
+    });
+}
+function buttonsHtml(mode, friendlyName) {
+    if (mode === 'createOrSelect') {
+        return `<button class="btn" onclick="btnClick('create')">Create new passkey</button>` +
+            `<button class="btn" onclick="btnClick('selectExisting')">Sign with existing passkey</button>`;
+    }
+    const label = mode === 'credential' && friendlyName ? `Sign with ${friendlyName}`
+        : mode === 'selectExisting' ? 'Sign with existing passkey'
+            : 'Create new passkey';
+    return `<button class="btn" onclick="btnClick()">Authorize — ${label}</button>`;
+}
+export function useOrCreatePasskeyPage(input) {
+    const { agentKeyPair, challenge, context, transportKeyContext, username } = input;
+    const capitalizedName = FUTURE_TOOL_NAME.slice(0, 1).toLocaleUpperCase() + FUTURE_TOOL_NAME.slice(1);
+    const title = `${capitalizedName} SSH Auth`;
+    const { contextHtml, credentialId, mode, friendlyName } = getContextInfo(context);
+    const cfg = JSON.stringify({
+        agentPublicKey: agentKeyPair.base64Pubkey,
+        challenge,
+        credentialId,
+        mode,
+        username,
+    }).replace(/</g, "\\u003c");
+    return `<!DOCTYPE html>
+<html>
+<head><title>${title}</title><meta charset="utf-8">
+<style>
+body{font-family:system-ui,sans-serif;max-width:560px;margin:80px auto;padding:0 20px;text-align:center}
+h1{font-size:1.5rem}#st{font-size:1.1rem;margin-top:20px}.ok{color:#060}.err{color:#d00}
+.btn{margin:8px 4px;padding:10px 28px;font-size:1rem;cursor:pointer}.btn:disabled{cursor:default;opacity:.5}
+.tree{font-family:monospace;text-align:left;font-size:.85rem;background:#f5f5f5;padding:12px;border-radius:6px;overflow-x:auto;margin:16px 0}
+</style>
+</head>
+<body>
+<h1>${title}</h1>
+${contextHtml}
+<div id="trust-row" style="margin-bottom:16px;color:#aaa;font-size:.9rem"><label><input type="checkbox" id="trust" onchange="trustChanged()"> trust this device (cache SSH private key) for <input type="number" id="mins" value="15" min="1" disabled style="width:4rem;color:#aaa"> minutes</label></div>
+${buttonsHtml(mode, friendlyName)}
+<p id="st"></p>
+<script>
+const C=${cfg};
+function bu(b){return btoa(String.fromCharCode(...new Uint8Array(b))).replace(/\\+/g,'-').replace(/\\//g,'_').replace(/=+$/,'')}
+function fu(s){const b=atob(s.replace(/-/g,'+').replace(/_/g,'/'));const u=new Uint8Array(b.length);for(let i=0;i<b.length;i++)u[i]=b.charCodeAt(i);return u}
+function btnClick(m){document.querySelectorAll('.btn').forEach(b=>b.disabled=true);main(m);}
+function trustChanged(){const c=document.getElementById('trust').checked;const m=document.getElementById('mins');document.getElementById('trust-row').style.color=c?'':'#aaa';m.disabled=!c;m.style.color=c?'':'#aaa';}
+async function main(modeOverride){
+  const mode=modeOverride??C.mode;
+  const st=document.getElementById('st');
+  const fid=new URLSearchParams(location.search).get('id');
+  try{
+    const ch=fu(C.challenge);
+    const salt=new Uint8Array(32);new TextEncoder().encodeInto('${FUTURE_TOOL_NAME}-prf-v1',salt);
+    let cred;
+    if(mode==='credential'){
+      cred=await navigator.credentials.get({publicKey:{
+        challenge:ch,userVerification:'required',
+        allowCredentials:[{type:'public-key',id:fu(C.credentialId)}],
+        extensions:{prf:{eval:{first:salt}}}
+      }});
+    }else if(mode==='selectExisting'){
+      cred=await navigator.credentials.get({publicKey:{
+        challenge:ch,userVerification:'required',
+        extensions:{prf:{eval:{first:salt}}}
+      }});
+    }else{
+      cred=await navigator.credentials.create({publicKey:{
+        challenge:ch,rp:{name:'${FUTURE_TOOL_NAME} challenge'},
+        user:{id:crypto.getRandomValues(new Uint8Array(16)),name:C.username,displayName:C.username+' — ${capitalizedName} SSH Key'},
+        pubKeyCredParams:[{alg:-7,type:'public-key'}],
+        authenticatorSelection:{authenticatorAttachment:'platform',userVerification:'required',residentKey:'required'},
+        extensions:{prf:{eval:{first:salt}}}
+      }});
+    }
+    const prf=cred.getClientExtensionResults().prf?.results?.first;
+    if(!prf)throw Object.assign(new Error('PRF extension not returned — authenticator may not support PRF'),{noRetry:true});
+    const ap=await crypto.subtle.importKey('raw',fu(C.agentPublicKey),{name:'ECDH',namedCurve:'P-256'},false,[]);
+    const bkp=await crypto.subtle.generateKey({name:'ECDH',namedCurve:'P-256'},true,['deriveBits']);
+    const sh=await crypto.subtle.deriveBits({name:'ECDH',public:ap},bkp.privateKey,256);
+    const hk=await crypto.subtle.importKey('raw',sh,'HKDF',false,['deriveKey']);
+    const ak=await crypto.subtle.deriveKey(
+      {name:'HKDF',hash:'SHA-256',salt:new Uint8Array(32),info:new TextEncoder().encode('${transportKeyContext}')},
+      hk,{name:'AES-GCM',length:256},false,['encrypt']
+    );
+    const iv=crypto.getRandomValues(new Uint8Array(12));
+    const enc=await crypto.subtle.encrypt({name:'AES-GCM',iv},ak,prf);
+    const bp=await crypto.subtle.exportKey('raw',bkp.publicKey);
+    const cm=document.getElementById('trust').checked?Math.max(1,parseInt(document.getElementById('mins').value,10)||15):undefined;
+    const r=await fetch('/seed?id='+fid,{method:'POST',headers:{'Content-Type':'application/json'},
+      body:JSON.stringify({encryptedSeed:bu(enc),iv:bu(iv),browserPublicKey:bu(bp),credentialId:bu(cred.rawId),cacheMinutes:cm})});
+    if(!r.ok)throw new Error('Agent returned '+r.status);
+    const d=await r.json();
+    st.className='ok';st.textContent='Authorized as '+d.friendlyName+'. You can close this tab.';
+  }catch(e){
+    const cancelled=e&&(e.name==='NotAllowedError'||e.name==='AbortError');
+    await fetch('/error?id='+fid,{method:'POST',headers:{'Content-Type':'application/json'},
+      body:JSON.stringify({cancelled,message:e?.message??String(e)})}).catch(()=>{});
+    st.className='err';st.textContent=(cancelled?'Cancelled or passkey not found.':'Error: '+(e?.message??e))+' You can close this tab.';
+  }
+}
+</script>
+</body></html>`;
+}
+//# sourceMappingURL=passkey-prf-page.js.map

package/dist/modules/ssh-agent/session/passkey-prf-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey-prf-page.js","sourceRoot":"","sources":["../../../../../../../src/modules/ssh-agent/session/passkey-prf-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AActC,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,IAAe;IAChC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxE,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,GAAG,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA+C;IAC1E,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IACtD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,GAAI,CAAC,EAAE,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAAE,MAAM;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM;QAC7D,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,MAA+C,EAAE,IAAY;IACnF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmE,CAAC;IAC1F,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM;YAAE,SAAS;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACzE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC;QACtB,QAAQ,EAAE,cAAc,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC;KAChD,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,eAAe,CAAC,KAAiB,EAAE,MAAc;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3C,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAAC,MAA+C;IAC/E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,eAAe,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,qEAAqE;IACrE,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAExE,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,qBAAqB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;AACvD,CAAC;AAED,SAAS,cAAc,CAAC,OAAiB;IACvC,OAAO,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE;QAC9B,gBAAgB,EAAE,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;YACtD,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACjF,MAAM,IAAI,GAAS,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY;gBACrD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB;oBAC1C,CAAC,CAAC,gBAAgB,CAAC;YACrB,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5F,MAAM,WAAW,GAAG,YAAY,IAAI,YAAY;gBAC9C,CAAC,CAAC,kFAAkF,OAAO,CAAC,YAAY,CAAC,cAAc,OAAO,CAAC,YAAY,CAAC,OAAO;gBACnJ,CAAC,CAAC,+FAA+F,CAAC;YACpG,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACzE,CAAC;QACD,uBAAuB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YACvC,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YACvF,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,iBAAiB,CAAC;YAC9E,MAAM,WAAW,GAAG,+DAA+D,OAAO,CAAC,YAAY,CAAC,cAAc,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9L,OAAO;gBACL,WAAW;gBACX,YAAY,EAAE,IAAI,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM;gBAC3D,IAAI,EAAE,YAAoB;gBAC1B,YAAY;aACb,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,IAAU,EAAE,YAA2B;IAC1D,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,OAAO,8EAA8E;YAC9E,8FAA8F,CAAC;IACxG,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,KAAK,YAAY,IAAI,YAAY,CAAC,CAAC,CAAC,aAAa,YAAY,EAAE;QAC/E,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,4BAA4B;YAC1D,CAAC,CAAC,oBAAoB,CAAC;IACzB,OAAO,wDAAwD,KAAK,WAAW,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAkC;IACvE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAClF,MAAM,eAAe,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrG,MAAM,KAAK,GAAG,GAAG,eAAe,WAAW,CAAC;IAE5C,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAElF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QACzB,cAAc,EAAE,YAAY,CAAC,YAAY;QACzC,SAAS;QACT,YAAY;QACZ,IAAI;QACJ,QAAQ;KACT,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAE5B,OAAO;;eAEM,KAAK;;;;;;;;;MASd,KAAK;EACT,WAAW;;EAEX,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC;;;UAGvB,GAAG;;;;;;;;;;;kEAWqD,gBAAgB;;;;;;;;;;;;;;;iCAejD,gBAAgB;yGACwD,eAAe;;;;;;;;;;;;;2FAa7B,mBAAmB;;;;;;;;;;;;;;;;;;;;eAoB/F,CAAC;AAChB,CAAC"}

package/dist/modules/ssh-agent/session/prf-flow.js

@@ -0,0 +1,103 @@
+import { Effect, Option, pipe, Deferred, Scope, Data, Result } from "effect";
+import { effunct } from "effective-modules";
+import { SessionError } from "./interface";
+import { FUTURE_TOOL_NAME } from "@/common/constants";
+import { randomUUID } from "node:crypto";
+import { CredentialId } from "@/modules/common/crypto/impl";
+import { useOrCreatePasskeyPage } from "./passkey-prf-page";
+import { CommonModules, commonModules } from "@/modules/common";
+import { log } from "@/common/log";
+import { SSHKeyPair } from "@/modules/common/crypto/impl";
+export const PrfInput = Data.taggedEnum();
+const TRANSPORT_KEY_CONTEXT = `${FUTURE_TOOL_NAME}-transport-v1`;
+export function* prfFlow(input) {
+    const crypto = yield* commonModules.Crypto;
+    const osPlatform = yield* commonModules.OSPlatform;
+    const flowId = PrfInput.$match(input, {
+        DerivePubkeyOnly: () => randomUUID(),
+        DerivePubkeyForRequests: ({ session }) => session.id,
+    });
+    const agentKeyPair = yield* pipe(effunct(crypto.createECDHKey)(), Effect.catch(err => Effect.fail(SessionError.cases.InternalError.make({ reason: err }))));
+    const challenge = yield* crypto.getRandomChallenge();
+    const deferred = yield* Deferred.make();
+    const server = yield* Effect.acquireRelease(Effect.sync(() => Bun.serve({
+        port: 0,
+        async fetch(req) {
+            const url = new URL(req.url);
+            if (url.searchParams.get("id") !== flowId) {
+                return new Response("Forbidden", { status: 403 });
+            }
+            if (url.pathname === "/" && req.method === "GET") {
+                return new Response(useOrCreatePasskeyPage({
+                    agentKeyPair, challenge, context: input,
+                    transportKeyContext: TRANSPORT_KEY_CONTEXT,
+                    username: PrfInput.$match(input, {
+                        DerivePubkeyOnly: ({ username }) => username,
+                        DerivePubkeyForRequests: () => '',
+                    }),
+                }), { headers: { "Content-Type": "text/html; charset=utf-8" } });
+            }
+            if (url.pathname === "/seed" && req.method === "POST") {
+                try {
+                    const body = await req.json();
+                    Effect.runFork(Effect.gen(function* () {
+                        const innerResult = yield* Effect.result(Effect.gen(function* () {
+                            const decrypted = yield* crypto.decrypt({
+                                senderPubkey: body.browserPublicKey,
+                                receiverKey: agentKeyPair.keyPair,
+                                cipherText: body.encryptedSeed,
+                                iv: body.iv,
+                                hkdfInfo: TRANSPORT_KEY_CONTEXT
+                            });
+                            const completed = yield* Deferred.succeed(deferred, {
+                                seed: decrypted,
+                                credentialId: CredentialId.fromBase64(body.credentialId),
+                                cacheMinutes: body.cacheMinutes,
+                            });
+                            if (!completed) {
+                                yield* Effect.fail(SessionError.cases.InternalError.make({
+                                    reason: 'Detected multiple POSTs to seed endpoint'
+                                }));
+                            }
+                        }));
+                        if (Result.isFailure(innerResult)) {
+                            console.error('[/seed fork error]', innerResult.failure);
+                            yield* Deferred.fail(deferred, SessionError.cases.InternalError.make({
+                                reason: `Seed decryption failed: ${String(innerResult.failure)}`
+                            }));
+                        }
+                    }));
+                    return new Response(JSON.stringify({ ok: true, friendlyName: CredentialId.fromBase64(body.credentialId).humanReadableName }), {
+                        headers: { "Content-Type": "application/json" },
+                    });
+                }
+                catch (e) {
+                    console.error("[/seed handler error]", e);
+                    Effect.runFork(Deferred.fail(deferred, SessionError.cases.InternalError.make({
+                        reason: e.toString()
+                    })));
+                    return new Response(JSON.stringify({ error: String(e) }), {
+                        status: 500, headers: { "Content-Type": "application/json" },
+                    });
+                }
+            }
+            if (url.pathname === "/error" && req.method === "POST") {
+                const body = await req.json();
+                const error = body.cancelled
+                    ? SessionError.cases.WebAuthnCancelled.make({})
+                    : SessionError.cases.InternalError.make({ reason: body.message });
+                Effect.runFork(Deferred.fail(deferred, error));
+                return new Response(JSON.stringify({ ok: true }), {
+                    headers: { "Content-Type": "application/json" },
+                });
+            }
+            return new Response("Not found", { status: 404 });
+        },
+    })), (server) => Effect.sync(() => server.stop()));
+    log(`Opening browser for WebAuthn PRF on port ${server.port}`);
+    yield* osPlatform.openBrowserWindow(`http://localhost:${server.port}/?id=${flowId}`);
+    const { seed, credentialId, cacheMinutes } = yield* Deferred.await(deferred);
+    const keyPair = yield* pipe(SSHKeyPair.fromSeed(seed, `${FUTURE_TOOL_NAME}-key-v1`), Effect.mapError(reason => SessionError.cases.InternalError.make({ reason })));
+    return { keyPair, credentialId, cacheMinutes };
+}
+//# sourceMappingURL=prf-flow.js.map

package/dist/modules/ssh-agent/session/prf-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prf-flow.js","sourceRoot":"","sources":["../../../../../../../src/modules/ssh-agent/session/prf-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAkB,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAyB1D,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAY,CAAC;AAEpD,MAAM,qBAAqB,GAAG,GAAG,gBAAgB,eAAe,CAAC;AAEjE,MAAM,SAAS,CAAC,CAAC,OAAO,CAAC,KAAe;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;IAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC;IAEnD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE;QACpC,gBAAgB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QACpC,uBAAuB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE;KACrD,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,IAAI,CAC9B,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CACzF,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;IACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAA+B,CAAC;IAErE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,CACzC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CACf,GAAG,CAAC,KAAK,CAAC;QACR,IAAI,EAAE,CAAC;QACP,KAAK,CAAC,KAAK,CAAC,GAAG;YACb,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC1C,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACjD,OAAO,IAAI,QAAQ,CACjB,sBAAsB,CAAC;oBACrB,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK;oBACvC,mBAAmB,EAAE,qBAAqB;oBAC1C,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE;wBAC/B,gBAAgB,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ;wBAC5C,uBAAuB,EAAE,GAAG,EAAE,CAAC,EAAE;qBAClC,CAAC;iBACH,CAAC,EACF,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,EAAE,CAC5D,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtD,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAI1B,CAAC;oBACF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;wBACjC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;4BAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;gCACtC,YAAY,EAAE,IAAI,CAAC,gBAAgB;gCACnC,WAAW,EAAE,YAAY,CAAC,OAAO;gCACjC,UAAU,EAAE,IAAI,CAAC,aAAa;gCAC9B,EAAE,EAAE,IAAI,CAAC,EAAE;gCACX,QAAQ,EAAE,qBAAqB;6BAChC,CAAC,CAAC;4BACH,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE;gCAClD,IAAI,EAAE,SAAS;gCACf,YAAY,EAAE,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;gCACxD,YAAY,EAAE,IAAI,CAAC,YAAY;6BAChC,CAAC,CAAC;4BACH,IAAI,CAAC,SAAS,EAAE,CAAC;gCACf,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC;oCACvD,MAAM,EAAE,0CAA0C;iCACnD,CAAC,CAAC,CAAC;4BACN,CAAC;wBACH,CAAC,CAAC,CAAC,CAAC;wBACJ,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;4BAClC,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;4BACzD,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC;gCACnE,MAAM,EAAE,2BAA2B,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE;6BACjE,CAAC,CAAC,CAAC;wBACN,CAAC;oBACH,CAAC,CAAC,CAAC,CAAC;oBACJ,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,iBAAiB,EAAE,CAAC,EAAE;wBAC5H,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAChD,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;oBAC1C,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC;wBAC3E,MAAM,EAAG,CAAW,CAAC,QAAQ,EAAE;qBAChC,CAAC,CAAC,CAAC,CAAC;oBACL,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;wBACxD,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAC7D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACvD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6C,CAAC;gBACzE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS;oBAC1B,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/C,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;gBACpE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;oBAChD,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;KACF,CAAC,CACH,EACD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAC7C,CAAC;IAEF,GAAG,CAAC,4CAA4C,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/D,KAAK,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,oBAAoB,MAAM,CAAC,IAAI,QAAQ,MAAM,EAAE,CAAC,CAAC;IAErF,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE7E,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CACzB,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,gBAAgB,SAAS,CAAC,EACvD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAC7E,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;AACjD,CAAC"}

package/dist/modules/ssh-agent/ssh-agent/impl.js

@@ -0,0 +1,117 @@
+import { Effect, pipe, Result, Layer } from "effect";
+import { effunct, implementing } from "effective-modules";
+import { agentModules } from "@/modules/ssh-agent";
+import { commonModules } from "@/modules/common";
+import { SSHPubkey } from "@/modules/common/crypto/impl";
+import { log } from "@/common/log";
+import { renderCallerTree } from "@/common/render-caller-tree";
+import { AGENT_PID_FILE_PATH, AGENT_SOCK_FILE_PATH } from "@/common/constants";
+import { writeFileSync } from "node:fs";
+const SSH2_AGENT_FAILURE = 5;
+const SSH2_AGENT_REQUEST_IDENTITIES = 11;
+const SSH2_AGENT_IDENTITIES_ANSWER = 12;
+const SSH2_AGENT_SIGN_REQUEST = 13;
+const SSH2_AGENT_SIGN_RESPONSE = 14;
+const SSH2_AGENT_EXTENSION = 27;
+function u32(n) {
+    const b = Buffer.allocUnsafe(4);
+    b.writeUInt32BE(n, 0);
+    return b;
+}
+function sshString(s) {
+    return Buffer.concat([u32(s.length), s]);
+}
+function buildSignResponse(keyType, signature) {
+    const sigBlob = Buffer.concat([sshString(Buffer.from(keyType)), sshString(signature)]);
+    const body = Buffer.concat([Buffer.from([SSH2_AGENT_SIGN_RESPONSE]), sshString(sigBlob)]);
+    return Buffer.concat([u32(body.length), body]);
+}
+function failureResponse() {
+    const r = Buffer.alloc(5);
+    r.writeUInt32BE(1, 0);
+    r[4] = SSH2_AGENT_FAILURE;
+    return r;
+}
+const { KeyMapStore, OSPlatform } = commonModules;
+const { SSHAgent, Session } = agentModules;
+export class SSHAgentImpl extends implementing(SSHAgent).uses(Session, KeyMapStore, OSPlatform) {
+    log(...items) {
+        log(`[ssh-agent]`, ...items);
+    }
+    *start() {
+        const { OSPlatform: { startSocketServer } } = this.dependencies;
+        const { handleExtension, handleRequestIdentities, handleSignRequest, log } = this;
+        yield* startSocketServer(AGENT_SOCK_FILE_PATH, function* (data, callerChain) {
+            const msgType = data[4];
+            switch (msgType) {
+                case SSH2_AGENT_EXTENSION:
+                    log(`received extensions request`);
+                    return yield* handleExtension(data);
+                case SSH2_AGENT_REQUEST_IDENTITIES:
+                    log(`received request identities request`);
+                    return yield* handleRequestIdentities();
+                case SSH2_AGENT_SIGN_REQUEST:
+                    log(`received signature request`);
+                    return yield* handleSignRequest(data, callerChain);
+                default:
+                    log(`received unknown message type ${msgType}`);
+                    return failureResponse();
+            }
+        });
+        writeFileSync(AGENT_PID_FILE_PATH, process.pid.toString());
+        log(`listening on ${AGENT_SOCK_FILE_PATH}`);
+    }
+    *handleExtension(data) {
+        const nameLen = data.readUInt32BE(5);
+        const name = data.subarray(9, 9 + nameLen).toString("utf8");
+        this.log(`extension request for ${name}`);
+        // We don't support any extensions, so we fail this outright.
+        return yield* Effect.sync(() => failureResponse());
+    }
+    *handleRequestIdentities() {
+        const keyMapStore = this.dependencies.KeyMapStore;
+        const listResult = yield* pipe(effunct(keyMapStore.listPubkeys)(), Effect.result);
+        const pubkeys = Result.isSuccess(listResult) ? listResult.success : [];
+        if (Result.isFailure(listResult)) {
+            this.log(`Failure to retrieve keys ${listResult.failure}`);
+        }
+        this.log(`Total keys ${pubkeys.length}`);
+        if (pubkeys.length === 0) {
+            const body = Buffer.concat([Buffer.from([SSH2_AGENT_IDENTITIES_ANSWER]), u32(0)]);
+            return Buffer.concat([u32(body.length), body]);
+        }
+        const keyEntries = pubkeys.map(pubkey => {
+            return Buffer.concat([sshString(pubkey.wire), sshString(Buffer.alloc(0))]);
+        });
+        const body = Buffer.concat([
+            Buffer.from([SSH2_AGENT_IDENTITIES_ANSWER]),
+            u32(pubkeys.length),
+            ...keyEntries,
+        ]);
+        return Buffer.concat([u32(body.length), body]);
+    }
+    *handleSignRequest(data, callerChain) {
+        const session = this.dependencies.Session;
+        let offset = 5; // skip length(4) + type(1)
+        const keyBlobLen = data.readUInt32BE(offset);
+        offset += 4;
+        const pubkeyWire = Buffer.from(data.subarray(offset, offset + keyBlobLen));
+        offset += keyBlobLen;
+        const dataToSignLen = data.readUInt32BE(offset);
+        offset += 4;
+        const dataToSign = Buffer.from(data.subarray(offset, offset + dataToSignLen));
+        const pubkey = SSHPubkey.fromWire(pubkeyWire);
+        this.log(`Sign request for pubkey ${pubkey.authorizedKey}\n${renderCallerTree(callerChain.slice(-3))}`);
+        const signResult = yield* pipe(effunct(session.sign)({
+            data: dataToSign,
+            pubkey,
+            callerTree: callerChain
+        }), Effect.result);
+        return Result.isSuccess(signResult) ? buildSignResponse(pubkey.keyType, signResult.success) : failureResponse();
+    }
+    static ServiceLayer = Layer.effectDiscard(Effect.gen(function* () {
+        const sshAgent = yield* agentModules.SSHAgent;
+        yield* sshAgent.start();
+    })).pipe(Layer.provideMerge(this.Layer));
+}
+//# sourceMappingURL=impl.js.map

package/dist/modules/ssh-agent/ssh-agent/impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"impl.js","sourceRoot":"","sources":["../../../../../../../src/modules/ssh-agent/ssh-agent/impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAkB,MAAM,mBAAmB,CAAC;AAG1E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAExC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,6BAA6B,GAAG,EAAE,CAAC;AACzC,MAAM,4BAA4B,GAAG,EAAE,CAAC;AACxC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AACpC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,SAAS,GAAG,CAAC,CAAS;IACpB,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,SAAiB;IAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,wBAAwB,CAAC,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1F,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC;IAC1B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,aAAa,CAAC;AAClD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC;AAE3C,MAAM,OAAO,YAAa,SAAQ,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC;IAErF,GAAG,CAAC,GAAG,KAAY;QACzB,GAAG,CAAC,aAAa,EAAE,GAAG,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,CAAC,KAAK;QACJ,MAAM,EAAE,UAAU,EAAE,EAAE,iBAAiB,EAAE,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC;QAChE,MAAM,EAAE,eAAe,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAClF,KAAK,CAAC,CAAC,iBAAiB,CAAC,oBAAoB,EAAE,QAAQ,CAAC,EAAC,IAAI,EAAE,WAAW;YACxE,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACxB,QAAQ,OAAO,EAAE,CAAC;gBAChB,KAAK,oBAAoB;oBACvB,GAAG,CAAC,6BAA6B,CAAC,CAAC;oBACnC,OAAO,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBACtC,KAAK,6BAA6B;oBAChC,GAAG,CAAC,qCAAqC,CAAC,CAAC;oBAC3C,OAAO,KAAK,CAAC,CAAC,uBAAuB,EAAE,CAAC;gBAC1C,KAAK,uBAAuB;oBAC1B,GAAG,CAAC,4BAA4B,CAAC,CAAC;oBAClC,OAAO,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;gBACrD;oBACE,GAAG,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;oBAChD,OAAO,eAAe,EAAE,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC,CAAC;QACH,aAAa,CAAC,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,gBAAgB,oBAAoB,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,CAAC,eAAe,CAAC,IAAY;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;QAC1C,6DAA6D;QAC7D,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,CAAC,uBAAuB;QACtB,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;QAClD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,IAAI,CAC5B,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,EAClC,MAAM,CAAC,MAAM,CACd,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,4BAA4B,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,4BAA4B,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;YACtC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,CAAC,4BAA4B,CAAC,CAAC;YAC3C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YACnB,GAAG,UAAU;SACd,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,CAAC,iBAAiB,CAAC,IAAY,EAAE,WAA4B;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;QAC1C,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,2BAA2B;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,IAAI,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC;QAAC,MAAM,IAAI,UAAU,CAAC;QACjG,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,IAAI,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC;QAE9E,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAE9C,IAAI,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,aAAa,KAAK,gBAAgB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxG,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,IAAI,CAC5B,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpB,IAAI,EAAE,UAAU;YAChB,MAAM;YACN,UAAU,EAAE,WAAW;SACxB,CAAC,EACF,MAAM,CAAC,MAAM,CACd,CAAC;QACF,OAAO,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;IAClH,CAAC;IAEM,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC;QAC9C,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA"}

package/dist/modules/ssh-agent/ssh-agent/interface.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=interface.js.map

package/dist/modules/ssh-agent/ssh-agent/interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interface.js","sourceRoot":"","sources":["../../../../../../../src/modules/ssh-agent/ssh-agent/interface.ts"],"names":[],"mappings":""}