@ozyman42/ozy-cli 0.4.8-linux-x64.0 → 0.4.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (207) hide show
  1. package/bin/ozy +191 -0
  2. package/bin/ozy-signing-agent +191 -0
  3. package/bin/ozy-ssh-keygen +191 -0
  4. package/bin/ozy-virtual-security-key +191 -0
  5. package/dist/commands/git/hosts.js +18 -0
  6. package/dist/commands/git/hosts.js.map +1 -0
  7. package/dist/commands/git/index.js +8 -0
  8. package/dist/commands/git/index.js.map +1 -0
  9. package/dist/commands/git/setup.js +145 -0
  10. package/dist/commands/git/setup.js.map +1 -0
  11. package/dist/commands/index.js +13 -0
  12. package/dist/commands/index.js.map +1 -0
  13. package/dist/commands/npm/index.js +7 -0
  14. package/dist/commands/npm/index.js.map +1 -0
  15. package/dist/commands/npm/setup/git-remote.js +66 -0
  16. package/dist/commands/npm/setup/git-remote.js.map +1 -0
  17. package/dist/commands/npm/setup/index.js +168 -0
  18. package/dist/commands/npm/setup/index.js.map +1 -0
  19. package/dist/commands/npm/setup/npm-auth.js +62 -0
  20. package/dist/commands/npm/setup/npm-auth.js.map +1 -0
  21. package/dist/commands/npm/setup/package-json-validate.js +47 -0
  22. package/dist/commands/npm/setup/package-json-validate.js.map +1 -0
  23. package/dist/commands/npm/setup/package-registry.js +20 -0
  24. package/dist/commands/npm/setup/package-registry.js.map +1 -0
  25. package/dist/commands/npm/setup/setup.test.js +95 -0
  26. package/dist/commands/npm/setup/setup.test.js.map +1 -0
  27. package/dist/commands/npm/setup/trusted-publishing.js +84 -0
  28. package/dist/commands/npm/setup/trusted-publishing.js.map +1 -0
  29. package/dist/commands/npm/setup/workflow.js +19 -0
  30. package/dist/commands/npm/setup/workflow.js.map +1 -0
  31. package/dist/commands/ssh/get-sk-credential.js +104 -0
  32. package/dist/commands/ssh/get-sk-credential.js.map +1 -0
  33. package/dist/commands/ssh/index.js +7 -0
  34. package/dist/commands/ssh/index.js.map +1 -0
  35. package/dist/commands/upgrade.js +199 -0
  36. package/dist/commands/upgrade.js.map +1 -0
  37. package/dist/common/command.js +15 -0
  38. package/dist/common/command.js.map +1 -0
  39. package/dist/common/constants.js +25 -0
  40. package/dist/common/constants.js.map +1 -0
  41. package/dist/common/effective-modules-extensions.js +13 -0
  42. package/dist/common/effective-modules-extensions.js.map +1 -0
  43. package/dist/common/log.js +4 -0
  44. package/dist/common/log.js.map +1 -0
  45. package/dist/common/render-caller-tree.js +20 -0
  46. package/dist/common/render-caller-tree.js.map +1 -0
  47. package/dist/entrypoints/ozy-signing-agent.js +48 -0
  48. package/dist/entrypoints/ozy-signing-agent.js.map +1 -0
  49. package/dist/entrypoints/ozy-ssh-keygen.js +9 -0
  50. package/dist/entrypoints/ozy-ssh-keygen.js.map +1 -0
  51. package/dist/entrypoints/ozy-virtual-security-key.js +18 -0
  52. package/dist/entrypoints/ozy-virtual-security-key.js.map +1 -0
  53. package/dist/entrypoints/ozy.js +3 -0
  54. package/dist/entrypoints/ozy.js.map +1 -0
  55. package/dist/index.js +2 -0
  56. package/dist/index.js.map +1 -0
  57. package/dist/internal/thing.js +4 -0
  58. package/dist/internal/thing.js.map +1 -0
  59. package/dist/modules/cli/agent-client/impl.js +109 -0
  60. package/dist/modules/cli/agent-client/impl.js.map +1 -0
  61. package/dist/modules/cli/agent-client/interface.js +11 -0
  62. package/dist/modules/cli/agent-client/interface.js.map +1 -0
  63. package/dist/modules/cli/git/impl.js +124 -0
  64. package/dist/modules/cli/git/impl.js.map +1 -0
  65. package/dist/modules/cli/git/interface.js +3 -0
  66. package/dist/modules/cli/git/interface.js.map +1 -0
  67. package/dist/modules/cli/git/submodule/fix.js +257 -0
  68. package/dist/modules/cli/git/submodule/fix.js.map +1 -0
  69. package/dist/modules/cli/git/submodule/git-state.js +154 -0
  70. package/dist/modules/cli/git/submodule/git-state.js.map +1 -0
  71. package/dist/modules/cli/git/submodule/gitmodules.js +113 -0
  72. package/dist/modules/cli/git/submodule/gitmodules.js.map +1 -0
  73. package/dist/modules/cli/git/submodule/printer.js +232 -0
  74. package/dist/modules/cli/git/submodule/printer.js.map +1 -0
  75. package/dist/modules/cli/git/submodule/resolve-git-dir.js +16 -0
  76. package/dist/modules/cli/git/submodule/resolve-git-dir.js.map +1 -0
  77. package/dist/modules/cli/github/impl.js +137 -0
  78. package/dist/modules/cli/github/impl.js.map +1 -0
  79. package/dist/modules/cli/github/interface.js +2 -0
  80. package/dist/modules/cli/github/interface.js.map +1 -0
  81. package/dist/modules/cli/index.js +9 -0
  82. package/dist/modules/cli/index.js.map +1 -0
  83. package/dist/modules/common/crypto/impl.js +133 -0
  84. package/dist/modules/common/crypto/impl.js.map +1 -0
  85. package/dist/modules/common/crypto/interface.js +2 -0
  86. package/dist/modules/common/crypto/interface.js.map +1 -0
  87. package/dist/modules/common/index.js +10 -0
  88. package/dist/modules/common/index.js.map +1 -0
  89. package/dist/modules/common/kep-map-store/impl.js +42 -0
  90. package/dist/modules/common/kep-map-store/impl.js.map +1 -0
  91. package/dist/modules/common/kep-map-store/interface.js +2 -0
  92. package/dist/modules/common/kep-map-store/interface.js.map +1 -0
  93. package/dist/modules/common/os-platform/caller-info.js +132 -0
  94. package/dist/modules/common/os-platform/caller-info.js.map +1 -0
  95. package/dist/modules/common/os-platform/impl.js +95 -0
  96. package/dist/modules/common/os-platform/impl.js.map +1 -0
  97. package/dist/modules/common/os-platform/interface.js +2 -0
  98. package/dist/modules/common/os-platform/interface.js.map +1 -0
  99. package/dist/modules/common/os-platform/virtual-hid/index.js +12 -0
  100. package/dist/modules/common/os-platform/virtual-hid/index.js.map +1 -0
  101. package/dist/modules/common/os-platform/virtual-hid/linux.js +5 -0
  102. package/dist/modules/common/os-platform/virtual-hid/linux.js.map +1 -0
  103. package/dist/modules/common/os-platform/virtual-hid/mac.js +119 -0
  104. package/dist/modules/common/os-platform/virtual-hid/mac.js.map +1 -0
  105. package/dist/modules/common/os-platform/virtual-hid/windows.js +5 -0
  106. package/dist/modules/common/os-platform/virtual-hid/windows.js.map +1 -0
  107. package/dist/modules/common/ssh-config/impl.js +116 -0
  108. package/dist/modules/common/ssh-config/impl.js.map +1 -0
  109. package/dist/modules/common/ssh-config/interface.js +10 -0
  110. package/dist/modules/common/ssh-config/interface.js.map +1 -0
  111. package/dist/modules/ssh-agent/index.js +8 -0
  112. package/dist/modules/ssh-agent/index.js.map +1 -0
  113. package/dist/modules/ssh-agent/session/impl.js +265 -0
  114. package/dist/modules/ssh-agent/session/impl.js.map +1 -0
  115. package/dist/modules/ssh-agent/session/interface-rpc.js +20 -0
  116. package/dist/modules/ssh-agent/session/interface-rpc.js.map +1 -0
  117. package/dist/modules/ssh-agent/session/interface.js +32 -0
  118. package/dist/modules/ssh-agent/session/interface.js.map +1 -0
  119. package/dist/modules/ssh-agent/session/passkey-prf-page.js +204 -0
  120. package/dist/modules/ssh-agent/session/passkey-prf-page.js.map +1 -0
  121. package/dist/modules/ssh-agent/session/prf-flow.js +103 -0
  122. package/dist/modules/ssh-agent/session/prf-flow.js.map +1 -0
  123. package/dist/modules/ssh-agent/ssh-agent/impl.js +117 -0
  124. package/dist/modules/ssh-agent/ssh-agent/impl.js.map +1 -0
  125. package/dist/modules/ssh-agent/ssh-agent/interface.js +2 -0
  126. package/dist/modules/ssh-agent/ssh-agent/interface.js.map +1 -0
  127. package/dist/scripts/build.js +410 -0
  128. package/dist/scripts/build.js.map +1 -0
  129. package/dist/scripts/check-npm-version.js +8 -0
  130. package/dist/scripts/check-npm-version.js.map +1 -0
  131. package/dist/scripts/kill-existing-agent.js +21 -0
  132. package/dist/scripts/kill-existing-agent.js.map +1 -0
  133. package/dist/scripts/publish.js +46 -0
  134. package/dist/scripts/publish.js.map +1 -0
  135. package/package.json +52 -11
  136. package/src/commands/git/hosts.ts +20 -0
  137. package/src/commands/git/index.ts +9 -0
  138. package/src/commands/git/setup.ts +182 -0
  139. package/src/commands/index.ts +15 -0
  140. package/src/commands/npm/index.ts +8 -0
  141. package/src/commands/npm/setup/git-remote.ts +78 -0
  142. package/src/commands/npm/setup/index.ts +189 -0
  143. package/src/commands/npm/setup/npm-auth.ts +58 -0
  144. package/src/commands/npm/setup/package-json-validate.ts +68 -0
  145. package/src/commands/npm/setup/package-registry.ts +24 -0
  146. package/src/commands/npm/setup/publish-workflow.yml +35 -0
  147. package/src/commands/npm/setup/setup.test.ts +117 -0
  148. package/src/commands/npm/setup/trusted-publishing.ts +106 -0
  149. package/src/commands/npm/setup/workflow.ts +20 -0
  150. package/src/commands/ssh/get-sk-credential.ts +110 -0
  151. package/src/commands/ssh/index.ts +8 -0
  152. package/src/commands/upgrade.ts +220 -0
  153. package/src/common/command.ts +16 -0
  154. package/src/common/constants.ts +26 -0
  155. package/src/common/effective-modules-extensions.ts +24 -0
  156. package/src/common/log.ts +3 -0
  157. package/src/common/render-caller-tree.ts +22 -0
  158. package/src/entrypoints/ozy-signing-agent.ts +48 -0
  159. package/src/entrypoints/ozy-ssh-keygen.ts +10 -0
  160. package/src/entrypoints/ozy-virtual-security-key.ts +21 -0
  161. package/src/entrypoints/ozy.ts +2 -0
  162. package/src/index.ts +1 -0
  163. package/src/internal/thing.ts +3 -0
  164. package/src/modules/cli/agent-client/impl.ts +152 -0
  165. package/src/modules/cli/agent-client/interface.ts +17 -0
  166. package/src/modules/cli/git/impl.ts +133 -0
  167. package/src/modules/cli/git/interface.ts +23 -0
  168. package/src/modules/cli/git/submodule/fix.ts +298 -0
  169. package/src/modules/cli/git/submodule/git-state.ts +217 -0
  170. package/src/modules/cli/git/submodule/gitmodules.ts +126 -0
  171. package/src/modules/cli/git/submodule/printer.ts +256 -0
  172. package/src/modules/cli/git/submodule/resolve-git-dir.ts +14 -0
  173. package/src/modules/cli/github/impl.ts +169 -0
  174. package/src/modules/cli/github/interface.ts +29 -0
  175. package/src/modules/cli/index.ts +16 -0
  176. package/src/modules/common/crypto/impl.ts +173 -0
  177. package/src/modules/common/crypto/interface.ts +20 -0
  178. package/src/modules/common/index.ts +19 -0
  179. package/src/modules/common/kep-map-store/impl.ts +47 -0
  180. package/src/modules/common/kep-map-store/interface.ts +9 -0
  181. package/src/modules/common/os-platform/caller-info.ts +152 -0
  182. package/src/modules/common/os-platform/impl.ts +91 -0
  183. package/src/modules/common/os-platform/interface.ts +16 -0
  184. package/src/modules/common/os-platform/virtual-hid/index.ts +12 -0
  185. package/src/modules/common/os-platform/virtual-hid/linux.ts +7 -0
  186. package/src/modules/common/os-platform/virtual-hid/mac.ts +150 -0
  187. package/src/modules/common/os-platform/virtual-hid/windows.ts +7 -0
  188. package/src/modules/common/ssh-config/impl.ts +130 -0
  189. package/src/modules/common/ssh-config/interface.ts +33 -0
  190. package/src/modules/ssh-agent/index.ts +13 -0
  191. package/src/modules/ssh-agent/session/agent-notes.md +210 -0
  192. package/src/modules/ssh-agent/session/design.md +2 -0
  193. package/src/modules/ssh-agent/session/html-refactor.md +23 -0
  194. package/src/modules/ssh-agent/session/impl.ts +328 -0
  195. package/src/modules/ssh-agent/session/interface-rpc.ts +24 -0
  196. package/src/modules/ssh-agent/session/interface.ts +62 -0
  197. package/src/modules/ssh-agent/session/passkey-prf-page.ts +224 -0
  198. package/src/modules/ssh-agent/session/prf-flow.ts +152 -0
  199. package/src/modules/ssh-agent/ssh-agent/impl.ts +136 -0
  200. package/src/modules/ssh-agent/ssh-agent/interface.ts +9 -0
  201. package/src/scripts/build.ts +504 -0
  202. package/src/scripts/check-npm-version.ts +7 -0
  203. package/src/scripts/command-launcher.js.ejs +168 -0
  204. package/src/scripts/kill-existing-agent.ts +22 -0
  205. package/src/scripts/publish.ts +47 -0
  206. package/src/scripts/windows-bin-shims.md +1104 -0
  207. package/multi-call-binary +0 -0
package/dist/modules/cli/github/impl.js ADDED
@@ -0,0 +1,137 @@
1
+ import { Deferred, Effect, Schema } from "effect";
2
+ import { implementing } from "effective-modules";
3
+ import { cliModules } from "@/modules/cli";
4
+ import { commonModules } from "@/modules/common";
5
+ import { log } from "@/common/log";
6
+ const API_BASE = 'https://api.github.com';
7
+ const API_VERSION = '2022-11-28';
8
+ const OAUTH_SUCCESS_HTML = `<!DOCTYPE html>
9
+ <html><head><title>Authorization successful</title></head>
10
+ <body><h1>Authorization successful</h1>
11
+ <p>You can close this tab and return to the terminal.</p>
12
+ </body></html>`;
13
+ const GitHubUserSchema = Schema.Struct({
14
+ login: Schema.String,
15
+ name: Schema.String,
16
+ id: Schema.Int
17
+ });
18
+ const GitHubEmailSchema = Schema.Struct({
19
+ email: Schema.String,
20
+ primary: Schema.Boolean,
21
+ verified: Schema.Boolean,
22
+ });
23
+ const GitHubSshSigningKeySchema = Schema.Struct({
24
+ id: Schema.Int,
25
+ title: Schema.String,
26
+ key: Schema.String,
27
+ });
28
+ const GitHubAuthnKeySchema = Schema.Struct({
29
+ id: Schema.Int,
30
+ title: Schema.String,
31
+ key: Schema.String,
32
+ });
33
+ export class GitHubImpl extends implementing(cliModules.GitHub).uses(commonModules.OSPlatform) {
34
+ api(token, method, path, schema, body, debug) {
35
+ return Effect.tryPromise({
36
+ try: async () => {
37
+ const res = await fetch(`${API_BASE}${path}`, {
38
+ method,
39
+ headers: {
40
+ 'Authorization': `Bearer ${token}`,
41
+ 'Accept': 'application/vnd.github+json',
42
+ 'X-GitHub-Api-Version': API_VERSION,
43
+ ...(body ? { 'Content-Type': 'application/json' } : {}),
44
+ },
45
+ ...(body ? { body: JSON.stringify(body) } : {}),
46
+ });
47
+ const rawData = await res.json();
48
+ if (debug)
49
+ log(`[debug] ${method} ${path} (${res.status}):\n${JSON.stringify(rawData, null, 2)}`);
50
+ return { status: res.status, rawData };
51
+ },
52
+ catch: (e) => `GitHub API request failed: ${e instanceof Error ? e.message : String(e)}`,
53
+ }).pipe(Effect.flatMap(({ status, rawData }) => Schema.decodeUnknownEffect(schema)(rawData).pipe(Effect.map(data => ({ status, data })), Effect.mapError(parseError => status < 200 || status >= 300
54
+ ? `${method} ${path} returned HTTP ${status}`
55
+ : `Failed to parse ${method} ${path} response: ${String(parseError)}`))));
56
+ }
57
+ *authorize(clientId, clientSecret, scopes) {
58
+ const osPlatform = this.dependencies.OSPlatform;
59
+ return yield* Effect.scoped(Effect.gen(function* () {
60
+ const state = crypto.randomUUID();
61
+ const deferred = yield* Deferred.make();
62
+ const server = yield* Effect.acquireRelease(Effect.sync(() => Bun.serve({
63
+ port: 0,
64
+ async fetch(req) {
65
+ const url = new URL(req.url);
66
+ if (url.pathname === '/callback') {
67
+ const code = url.searchParams.get('code');
68
+ const returnedState = url.searchParams.get('state');
69
+ if (returnedState !== state) {
70
+ Effect.runFork(Deferred.fail(deferred, 'State mismatch — possible CSRF attack'));
71
+ return new Response('State mismatch', { status: 400 });
72
+ }
73
+ if (!code) {
74
+ Effect.runFork(Deferred.fail(deferred, 'Missing authorization code in callback'));
75
+ return new Response('Missing code', { status: 400 });
76
+ }
77
+ Effect.runFork(Deferred.succeed(deferred, code));
78
+ return new Response(OAUTH_SUCCESS_HTML, { headers: { 'Content-Type': 'text/html' } });
79
+ }
80
+ return new Response('Not found', { status: 404 });
81
+ },
82
+ })), (server) => Effect.sync(() => server.stop()));
83
+ const redirectUri = `http://localhost:${server.port}/callback`;
84
+ const authUrl = new URL('https://github.com/login/oauth/authorize');
85
+ authUrl.searchParams.set('client_id', clientId);
86
+ authUrl.searchParams.set('scope', scopes);
87
+ authUrl.searchParams.set('state', state);
88
+ authUrl.searchParams.set('redirect_uri', redirectUri);
89
+ authUrl.searchParams.set('prompt', 'select_account');
90
+ log('Opening browser for GitHub authorization...');
91
+ yield* osPlatform.openBrowserWindow(authUrl.toString());
92
+ const code = yield* Deferred.await(deferred);
93
+ const tokenRes = yield* Effect.tryPromise({
94
+ try: () => fetch('https://github.com/login/oauth/access_token', {
95
+ method: 'POST',
96
+ headers: { 'Accept': 'application/json', 'Content-Type': 'application/json' },
97
+ body: JSON.stringify({ client_id: clientId, client_secret: clientSecret, code, redirect_uri: redirectUri }),
98
+ }),
99
+ catch: () => 'Token exchange request failed',
100
+ });
101
+ const tokenData = yield* Effect.tryPromise({
102
+ try: () => tokenRes.json(),
103
+ catch: () => 'Failed to parse token exchange response',
104
+ });
105
+ if (!tokenData.access_token)
106
+ return yield* Effect.fail(tokenData.error_description ?? tokenData.error ?? 'Token exchange failed');
107
+ return tokenData.access_token;
108
+ }));
109
+ }
110
+ *getUser(token) {
111
+ const { data: { login, name, id } } = yield* this.api(token, 'GET', '/user', GitHubUserSchema);
112
+ const { data: emails } = yield* this.api(token, 'GET', '/user/emails', Schema.Array(GitHubEmailSchema));
113
+ const primaryEmail = emails.find(e => e.primary);
114
+ if (!primaryEmail)
115
+ return yield* Effect.fail(`No primary email found on GitHub account — add one at github.com/settings/emails`);
116
+ return { login, name, email: primaryEmail.email, id };
117
+ }
118
+ *getSigningKeys(token) {
119
+ const { data } = yield* this.api(token, 'GET', '/user/ssh_signing_keys', Schema.Array(GitHubSshSigningKeySchema));
120
+ return data;
121
+ }
122
+ *addSigningKey(token, title, key) {
123
+ const { status } = yield* this.api(token, 'POST', '/user/ssh_signing_keys', Schema.Unknown, { title, key });
124
+ if (status !== 201)
125
+ yield* Effect.fail(`POST /user/ssh_signing_keys returned HTTP ${status}`);
126
+ }
127
+ *getAuthnKeys(token) {
128
+ const { data } = yield* this.api(token, 'GET', `/user/keys`, Schema.Array(GitHubAuthnKeySchema));
129
+ return data;
130
+ }
131
+ *addAuthnKey(token, title, key) {
132
+ const { status } = yield* this.api(token, 'POST', `/user/keys`, Schema.Unknown, { title, key });
133
+ if (status !== 201)
134
+ yield* Effect.fail(`POST /user/keys returned HTTP ${status}`);
135
+ }
136
+ }
137
+ //# sourceMappingURL=impl.js.map
package/dist/modules/cli/github/impl.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"impl.js","sourceRoot":"","sources":["../../../../../../../src/modules/cli/github/impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,YAAY,EAAkB,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGnC,MAAM,QAAQ,GAAG,wBAAwB,CAAC;AAC1C,MAAM,WAAW,GAAG,YAAY,CAAC;AAEjC,MAAM,kBAAkB,GAAG;;;;eAIZ,CAAC;AAEhB,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC,MAAM;IACpB,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,EAAE,EAAE,MAAM,CAAC,GAAG;CACf,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC,MAAM;IACpB,OAAO,EAAE,MAAM,CAAC,OAAO;IACvB,QAAQ,EAAE,MAAM,CAAC,OAAO;CACzB,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,MAAM,CAAC,GAAG;IACd,KAAK,EAAE,MAAM,CAAC,MAAM;IACpB,GAAG,EAAE,MAAM,CAAC,MAAM;CACnB,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,MAAM,CAAC,GAAG;IACd,KAAK,EAAE,MAAM,CAAC,MAAM;IACpB,GAAG,EAAE,MAAM,CAAC,MAAM;CACnB,CAAC,CAAC;AAEH,MAAM,OAAO,UAAW,SAAQ,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;IACpF,GAAG,CAAI,KAAa,EAAE,MAAc,EAAE,IAAY,EAAE,MAAwB,EAAE,IAAc,EAAE,KAAe;QACnH,OAAO,MAAM,CAAC,UAAU,CAAC;YACvB,GAAG,EAAE,KAAK,IAAI,EAAE;gBACd,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,GAAG,IAAI,EAAE,EAAE;oBAC5C,MAAM;oBACN,OAAO,EAAE;wBACP,eAAe,EAAE,UAAU,KAAK,EAAE;wBAClC,QAAQ,EAAE,6BAA6B;wBACvC,sBAAsB,EAAE,WAAW;wBACnC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACxD;oBACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChD,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjC,IAAI,KAAK;oBAAE,GAAG,CAAC,WAAW,MAAM,IAAI,IAAI,KAAK,GAAG,CAAC,MAAM,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBAClG,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACzC,CAAC;YACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,8BAA8B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SACzF,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CACpC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAsC,CAAC,IAAI,CACpF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EACtC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAC3B,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG;YAC3B,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,kBAAkB,MAAM,EAAE;YAC7C,CAAC,CAAC,mBAAmB,MAAM,IAAI,IAAI,cAAc,MAAM,CAAC,UAAU,CAAC,EAAE,CACxE,CACF,CACF,CACF,CAAC;IACJ,CAAC;IAED,CAAC,SAAS,CAAC,QAAgB,EAAE,YAAoB,EAAE,MAAc;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;QAChD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAkB,CAAC;YAExD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,CACzC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;gBAC1B,IAAI,EAAE,CAAC;gBACP,KAAK,CAAC,KAAK,CAAC,GAAG;oBACb,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC7B,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;wBACjC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;wBAC1C,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;wBACpD,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;4BAC5B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,uCAAuC,CAAC,CAAC,CAAC;4BACjF,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;wBACzD,CAAC;wBACD,IAAI,CAAC,IAAI,EAAE,CAAC;4BACV,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,wCAAwC,CAAC,CAAC,CAAC;4BAClF,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;wBACvD,CAAC;wBACD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;wBACjD,OAAO,IAAI,QAAQ,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;oBACxF,CAAC;oBACD,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC,EACH,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAC7C,CAAC;YAEF,MAAM,WAAW,GAAG,oBAAoB,MAAM,CAAC,IAAI,WAAW,CAAC;YAC/D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACpE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAChD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1C,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACzC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YACtD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAErD,GAAG,CAAC,6CAA6C,CAAC,CAAC;YACnD,KAAK,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAExD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAE7C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBACxC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,6CAA6C,EAAE;oBAC9D,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC7E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;iBAC5G,CAAC;gBACF,KAAK,EAAE,GAAG,EAAE,CAAC,+BAA+B;aAC7C,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBACzC,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAoF;gBAC5G,KAAK,EAAE,GAAG,EAAE,CAAC,yCAAyC;aACvD,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,CAAC,YAAY;gBACzB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB,IAAI,SAAS,CAAC,KAAK,IAAI,uBAAuB,CAAC,CAAC;YAEvG,OAAO,SAAS,CAAC,YAAY,CAAC;QAChC,CAAC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,CAAC,OAAO,CAAC,KAAa;QACpB,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC/F,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACxG,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,YAAY;YACf,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;QAChH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC;IACxD,CAAC;IAED,CAAC,cAAc,CAAC,KAAa;QAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAClH,OAAO,IAA6B,CAAC;IACvC,CAAC;IAED,CAAC,aAAa,CAAC,KAAa,EAAE,KAAa,EAAE,GAAW;QACtD,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5G,IAAI,MAAM,KAAK,GAAG;YAChB,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,CAAC,YAAY,CAAC,KAAa;QACzB,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACjG,OAAO,IAAI,CAAC;IACd,CAAC;IAED,CAAC,WAAW,CAAC,KAAa,EAAE,KAAa,EAAE,GAAW;QACpD,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAChG,IAAI,MAAM,KAAK,GAAG;YAChB,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;CACF"}
package/dist/modules/cli/github/interface.js ADDED
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=interface.js.map
package/dist/modules/cli/github/interface.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"interface.js","sourceRoot":"","sources":["../../../../../../../src/modules/cli/github/interface.ts"],"names":[],"mappings":""}
package/dist/modules/cli/index.js ADDED
@@ -0,0 +1,9 @@
1
+ import { interfaces } from "effective-modules";
2
+ export var CLIModules;
3
+ (function (CLIModules) {
4
+ CLIModules["Git"] = "Git";
5
+ CLIModules["GitHub"] = "GitHub";
6
+ CLIModules["AgentClient"] = "AgentClient";
7
+ })(CLIModules || (CLIModules = {}));
8
+ export const cliModules = interfaces(CLIModules);
9
+ //# sourceMappingURL=index.js.map
package/dist/modules/cli/index.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/modules/cli/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAK/C,MAAM,CAAN,IAAY,UAIX;AAJD,WAAY,UAAU;IACpB,yBAAW,CAAA;IACX,+BAAiB,CAAA;IACjB,yCAA2B,CAAA;AAC7B,CAAC,EAJW,UAAU,KAAV,UAAU,QAIrB;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,UAAU,CAIjC,UAAU,CAAC,CAAC"}
package/dist/modules/common/crypto/impl.js ADDED
@@ -0,0 +1,133 @@
1
+ import { Effect, pipe } from "effect";
2
+ import { implementing } from "effective-modules";
3
+ import { commonModules } from "@/modules/common";
4
+ import bs58 from "bs58";
5
+ import friendlyWords from "friendly-words";
6
+ import { sign as cryptoSign, createPrivateKey, createPublicKey } from "node:crypto";
7
+ import { FUTURE_TOOL_NAME } from "@/common/constants";
8
+ function toBase64url(bytes) {
9
+ return Buffer.from(bytes).toString("base64url");
10
+ }
11
+ function fromBase64url(str) {
12
+ return new Uint8Array(Buffer.from(str, "base64url"));
13
+ }
14
+ function u32(n) {
15
+ const b = Buffer.allocUnsafe(4);
16
+ b.writeUInt32BE(n, 0);
17
+ return b;
18
+ }
19
+ function sshString(s) {
20
+ return Buffer.concat([u32(s.length), s]);
21
+ }
22
+ // PKCS#8 DER header for Ed25519
23
+ const PKCS8_ED25519_HEADER = Buffer.from("302e020100300506032b657004220420", "hex");
24
+ export class CredentialId {
25
+ base58;
26
+ base64;
27
+ raw;
28
+ humanReadableName;
29
+ static fromBase64(base64) {
30
+ const base58 = bs58.encode(fromBase64url(base64));
31
+ return new this(base58);
32
+ }
33
+ constructor(base58) {
34
+ this.base58 = base58;
35
+ this.raw = bs58.decode(base58);
36
+ this.base64 = toBase64url(this.raw);
37
+ // Extract three non-overlapping bit windows: 11 + 11 + 12 = 34 bits from bytes 0-4
38
+ const b = this.raw;
39
+ const adj1Idx = ((b[0] << 3) | (b[1] >> 5)) % friendlyWords.predicates.length;
40
+ const adj2Idx = (((b[1] & 0x1F) << 6) | (b[2] >> 2)) % friendlyWords.predicates.length;
41
+ const nounIdx = (((b[2] & 0x3) << 10) | (b[3] << 2) | (b[4] >> 6)) % friendlyWords.objects.length;
42
+ this.humanReadableName = [
43
+ FUTURE_TOOL_NAME,
44
+ friendlyWords.predicates[adj1Idx],
45
+ friendlyWords.predicates[adj2Idx],
46
+ friendlyWords.objects[nounIdx]
47
+ ].join("-");
48
+ }
49
+ }
50
+ export class SSHPubkey {
51
+ wire;
52
+ keyType;
53
+ authorizedKey;
54
+ constructor(wire) {
55
+ this.wire = wire;
56
+ const len = wire.readUInt32BE(0);
57
+ this.keyType = wire.subarray(4, 4 + len).toString("utf8");
58
+ this.authorizedKey = `${this.keyType} ${wire.toString("base64")}`;
59
+ }
60
+ static fromWire(wire) {
61
+ return new SSHPubkey(wire);
62
+ }
63
+ static fromAuthorizedKey(s) {
64
+ return new SSHPubkey(Buffer.from(s.split(" ")[1], "base64"));
65
+ }
66
+ }
67
+ export class SSHKeyPair {
68
+ pubkey;
69
+ pemPrivateKey;
70
+ constructor(pubkey, pemPrivateKey) {
71
+ this.pubkey = pubkey;
72
+ this.pemPrivateKey = pemPrivateKey;
73
+ }
74
+ sign(data) {
75
+ return cryptoSign(null, data, createPrivateKey(this.pemPrivateKey));
76
+ }
77
+ static fromSeed(seed, context) {
78
+ return Effect.tryPromise({
79
+ try: async () => {
80
+ const hkdfKey = await crypto.subtle.importKey("raw", seed, "HKDF", false, ["deriveBits"]);
81
+ const bits = await crypto.subtle.deriveBits({ name: "HKDF", hash: "SHA-256", salt: new Uint8Array(32), info: new TextEncoder().encode(context) }, hkdfKey, 256);
82
+ return SSHKeyPair.build(new Uint8Array(bits));
83
+ },
84
+ catch: (e) => String(e),
85
+ });
86
+ }
87
+ static build(seed) {
88
+ const der = Buffer.concat([PKCS8_ED25519_HEADER, Buffer.from(seed)]);
89
+ const priv = createPrivateKey({ key: der, format: "der", type: "pkcs8" });
90
+ const spki = createPublicKey(priv).export({ type: "spki", format: "der" });
91
+ const pubBytes = Buffer.from(spki.subarray(-32));
92
+ const keyTypeBuf = Buffer.from("ssh-ed25519");
93
+ const wire = Buffer.concat([sshString(keyTypeBuf), sshString(pubBytes)]);
94
+ const pemPrivateKey = priv.export({ type: "pkcs8", format: "pem" });
95
+ return new SSHKeyPair(SSHPubkey.fromWire(wire), pemPrivateKey);
96
+ }
97
+ }
98
+ const { Crypto } = commonModules;
99
+ export class CryptoImpl extends implementing(Crypto) {
100
+ *getRandomChallenge() {
101
+ return toBase64url(crypto.getRandomValues(new Uint8Array(16)));
102
+ }
103
+ *createECDHKey() {
104
+ const keyPair = yield* Effect.tryPromise({
105
+ try: () => crypto.subtle.generateKey({ name: "ECDH", namedCurve: "P-256" }, true, ["deriveBits"]),
106
+ catch: (e) => e.toString(),
107
+ });
108
+ const agentPubKeyRaw = yield* Effect.tryPromise({
109
+ try: () => crypto.subtle.exportKey("raw", keyPair.publicKey),
110
+ catch: (e) => e.toString(),
111
+ });
112
+ const pubkey = toBase64url(new Uint8Array(agentPubKeyRaw));
113
+ return {
114
+ base64Pubkey: pubkey,
115
+ keyPair,
116
+ };
117
+ }
118
+ *decrypt({ cipherText, iv, hkdfInfo, receiverKey, senderPubkey }) {
119
+ return yield* pipe(Effect.tryPromise(async () => {
120
+ const browserPubKey = await crypto.subtle.importKey("raw", fromBase64url(senderPubkey), { name: "ECDH", namedCurve: "P-256" }, false, []);
121
+ const sharedBits = await crypto.subtle.deriveBits({ name: "ECDH", public: browserPubKey }, receiverKey.privateKey, 256);
122
+ const hkdfKey = await crypto.subtle.importKey("raw", sharedBits, "HKDF", false, ["deriveKey"]);
123
+ const aesKey = await crypto.subtle.deriveKey({
124
+ name: "HKDF", hash: "SHA-256",
125
+ salt: new Uint8Array(32),
126
+ info: new TextEncoder().encode(hkdfInfo),
127
+ }, hkdfKey, { name: "AES-GCM", length: 256 }, false, ["decrypt"]);
128
+ const decrypted = await crypto.subtle.decrypt({ name: "AES-GCM", iv: fromBase64url(iv) }, aesKey, fromBase64url(cipherText));
129
+ return new Uint8Array(decrypted);
130
+ }), Effect.catchTag("UnknownError", err => Effect.fail(err.message)));
131
+ }
132
+ }
133
+ //# sourceMappingURL=impl.js.map
package/dist/modules/common/crypto/impl.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"impl.js","sourceRoot":"","sources":["../../../../../../../src/modules/common/crypto/impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,YAAY,EAAkB,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,aAAa,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,IAAI,IAAI,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,SAAS,WAAW,CAAC,KAAiB;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,GAAG,CAAC,CAAS;IACpB,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,gCAAgC;AAChC,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;AAEpF,MAAM,OAAO,YAAY;IAQY;IAPnB,MAAM,CAAS;IACf,GAAG,CAAa;IAChB,iBAAiB,CAAS;IACnC,MAAM,CAAC,UAAU,CAAC,MAAc;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IACD,YAAmC,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;QAC/C,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,mFAAmF;QACnF,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;QACnB,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC;QAChF,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC;QACzF,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC;QACrG,IAAI,CAAC,iBAAiB,GAAG;YACvB,gBAAgB;YAChB,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;YACjC,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;YACjC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC;SAC/B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;CACF;AAED,MAAM,OAAO,SAAS;IACX,IAAI,CAAS;IACb,OAAO,CAAS;IAChB,aAAa,CAAS;IAE/B,YAAoB,IAAY;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,IAAY;QAC1B,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,CAAS;QAChC,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChE,CAAC;CACF;AAED,MAAM,OAAO,UAAU;IACZ,MAAM,CAAY;IACV,aAAa,CAAS;IAEvC,YAAoB,MAAiB,EAAE,aAAqB;QAC1D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,IAAY;QACf,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,IAAgB,EAAE,OAAe;QAC/C,OAAO,MAAM,CAAC,UAAU,CAAC;YACvB,GAAG,EAAE,KAAK,IAAI,EAAE;gBACd,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC1F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CACzC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAS,EAC3G,OAAO,EACP,GAAG,CACJ,CAAC;gBACF,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAChD,CAAC;YACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;SACxB,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,IAAgB;QACnC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;QACrF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAEjD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAEzE,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;QAE9E,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,CAAC;IACjE,CAAC;CACF;AAED,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC;AAEjC,MAAM,OAAO,UAAW,SAAQ,YAAY,CAAC,MAAM,CAAC;IAElD,CAAC,kBAAkB;QACjB,OAAO,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,CAAC,aAAa;QACZ,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YACvC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC;YACjG,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAE,CAAW,CAAC,QAAQ,EAAE;SACtC,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YAC9C,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC;YAC5D,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAE,CAAW,CAAC,QAAQ,EAAE;SACtC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;QAC3D,OAAO;YACL,YAAY,EAAE,MAAM;YACpB,OAAO;SACR,CAAA;IACH,CAAC;IAED,CAAC,OAAO,CAAC,EAAC,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAe;QAC1E,OAAO,KAAK,CAAC,CAAC,IAAI,CAChB,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAC3B,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACjD,KAAK,EAAE,aAAa,CAAC,YAAY,CAAC,EAClC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,CACjD,CAAC;YACF,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC/C,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,WAAW,CAAC,UAAU,EAAE,GAAG,CACrE,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YAC/F,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC1C;gBACE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS;gBAC7B,IAAI,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;gBACxB,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;aACzC,EACD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAC9D,CAAC;YACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC,EAAE,EAC1C,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,CAClC,CAAC;YACF,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC,CAAC,EACF,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CACjE,CAAC;IACJ,CAAC;CAEF"}
package/dist/modules/common/crypto/interface.js ADDED
@@ -0,0 +1,2 @@
1
+ import {} from "effective-modules";
2
+ //# sourceMappingURL=interface.js.map
package/dist/modules/common/crypto/interface.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"interface.js","sourceRoot":"","sources":["../../../../../../../src/modules/common/crypto/interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,MAAM,mBAAmB,CAAC"}
package/dist/modules/common/index.js ADDED
@@ -0,0 +1,10 @@
1
+ import { interfaces } from "effective-modules";
2
+ export var CommonModules;
3
+ (function (CommonModules) {
4
+ CommonModules["OSPlatform"] = "OSPlatform";
5
+ CommonModules["KeyMapStore"] = "KeyMapStore";
6
+ CommonModules["Crypto"] = "Crypto";
7
+ CommonModules["SSHConfig"] = "SSHConfig";
8
+ })(CommonModules || (CommonModules = {}));
9
+ export const commonModules = interfaces(CommonModules);
10
+ //# sourceMappingURL=index.js.map
package/dist/modules/common/index.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/modules/common/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAM/C,MAAM,CAAN,IAAY,aAKX;AALD,WAAY,aAAa;IACvB,0CAAyB,CAAA;IACzB,4CAA2B,CAAA;IAC3B,kCAAiB,CAAA;IACjB,wCAAuB,CAAA;AACzB,CAAC,EALW,aAAa,KAAb,aAAa,QAKxB;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAKpC,aAAa,CAAC,CAAC"}
package/dist/modules/common/kep-map-store/impl.js ADDED
@@ -0,0 +1,42 @@
1
+ import { Effect, Option, pipe } from "effect";
2
+ import { effunct, implementing } from "effective-modules";
3
+ import { commonModules } from "..";
4
+ import {} from "./interface";
5
+ import { SSHPubkey, CredentialId } from "@/modules/common/crypto/impl";
6
+ import { CRED_ID_COMMENT_PREFIX, FUTURE_TOOL_NAME } from "@/common/constants";
7
+ export class KeyMapStoreImpl extends implementing(commonModules.KeyMapStore).uses(commonModules.SSHConfig) {
8
+ *listToolPubkeyFiles() {
9
+ const files = yield* effunct(this.dependencies.SSHConfig.listPubkeyFiles)();
10
+ return files.filter(f => f.name.startsWith(`${FUTURE_TOOL_NAME}-`));
11
+ }
12
+ *listPubkeys() {
13
+ const files = yield* effunct(this.listToolPubkeyFiles)();
14
+ return files.map(({ content }) => {
15
+ const pubkeyAuth = content.split(' ').slice(0, 2).join(' ');
16
+ return SSHPubkey.fromAuthorizedKey(pubkeyAuth);
17
+ });
18
+ }
19
+ *getCredentialByPubkey(pubkey) {
20
+ const files = yield* effunct(this.listToolPubkeyFiles)();
21
+ const match = files.find(({ content }) => {
22
+ const pubkeyAuth = content.split(' ').slice(0, 2).join(' ');
23
+ return pubkeyAuth === pubkey.authorizedKey;
24
+ });
25
+ if (!match)
26
+ return Option.none();
27
+ const parts = match.content.split(' ');
28
+ const comment = parts[2];
29
+ if (!comment || !comment.startsWith(CRED_ID_COMMENT_PREFIX))
30
+ return yield* Effect.fail(`InvalidPubkeyFileError: file for pubkey ${pubkey.authorizedKey} has no valid credentialId comment`);
31
+ return Option.some(comment.slice(CRED_ID_COMMENT_PREFIX.length));
32
+ }
33
+ *addKey(pubkey, credentialId) {
34
+ const name = new CredentialId(credentialId).humanReadableName;
35
+ yield* pipe(effunct(this.dependencies.SSHConfig.writePubkey)({
36
+ name,
37
+ comment: Option.some(`${CRED_ID_COMMENT_PREFIX}${credentialId}`),
38
+ pubkey,
39
+ }), Effect.asVoid);
40
+ }
41
+ }
42
+ //# sourceMappingURL=impl.js.map
package/dist/modules/common/kep-map-store/impl.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"impl.js","sourceRoot":"","sources":["../../../../../../../src/modules/common/kep-map-store/impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,YAAY,EAAkB,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACnC,OAAO,EAAqB,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE9E,MAAM,OAAO,eAAgB,SAAQ,YAAY,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IAChG,CAAC,mBAAmB;QAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,CAAC;QAC5E,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,gBAAgB,GAAG,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,CAAC,WAAW;QACV,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5D,OAAO,SAAS,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,CAAC,qBAAqB,CAAC,MAAiB;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YACvC,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5D,OAAO,UAAU,KAAK,MAAM,CAAC,aAAa,CAAC;QAC7C,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC;YACzD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,MAAM,CAAC,aAAa,oCAAoC,CAAC,CAAC;QACjI,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,CAAC,MAAM,CAAC,MAAiB,EAAE,YAAoB;QAC7C,MAAM,IAAI,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC,iBAAiB,CAAC;QAC9D,KAAK,CAAC,CAAC,IAAI,CACT,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAC/C,IAAI;YACJ,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,sBAAsB,GAAG,YAAY,EAAE,CAAC;YAChE,MAAM;SACP,CAAC,EACF,MAAM,CAAC,MAAM,CACd,CAAC;IACJ,CAAC;CACF"}
package/dist/modules/common/kep-map-store/interface.js ADDED
@@ -0,0 +1,2 @@
1
+ import { Option } from "effect";
2
+ //# sourceMappingURL=interface.js.map
package/dist/modules/common/kep-map-store/interface.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"interface.js","sourceRoot":"","sources":["../../../../../../../src/modules/common/kep-map-store/interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC"}
package/dist/modules/common/os-platform/caller-info.js ADDED
@@ -0,0 +1,132 @@
1
+ import { dlopen, FFIType } from "bun:ffi";
2
+ import { execSync } from "node:child_process";
3
+ import { readFileSync, readlinkSync } from "node:fs";
4
+ import { Option } from "effect";
5
+ const isMacOS = process.platform === 'darwin';
6
+ // ---- FFI: getsockopt ----
7
+ const SOL_LOCAL = 0; // macOS: SOL_LOCAL (sys/un.h)
8
+ const LOCAL_PEERPID = 2; // macOS: LOCAL_PEERPID (sys/un.h)
9
+ const SOL_SOCKET_LINUX = 1; // Linux: SOL_SOCKET
10
+ const SO_PEERCRED_LINUX = 17; // Linux: SO_PEERCRED
11
+ let _getsockopt;
12
+ function getsockoptSymbol() {
13
+ if (!_getsockopt) {
14
+ const libName = isMacOS ? 'libSystem.B.dylib' : 'libc.so.6';
15
+ const lib = dlopen(libName, {
16
+ getsockopt: {
17
+ args: [FFIType.int, FFIType.int, FFIType.int, FFIType.ptr, FFIType.ptr],
18
+ returns: FFIType.int,
19
+ },
20
+ });
21
+ _getsockopt = lib.symbols['getsockopt'];
22
+ }
23
+ return _getsockopt;
24
+ }
25
+ function getPeerPidFromFd(fd) {
26
+ const getsockopt = getsockoptSymbol();
27
+ if (isMacOS) {
28
+ const pidBuf = new Uint8Array(4);
29
+ const lenBuf = new Uint32Array([4]);
30
+ const ret = getsockopt(fd, SOL_LOCAL, LOCAL_PEERPID, pidBuf, lenBuf);
31
+ if (ret !== 0)
32
+ throw new Error(`getsockopt(LOCAL_PEERPID) failed with ret=${ret}`);
33
+ return new DataView(pidBuf.buffer).getInt32(0, true);
34
+ }
35
+ else {
36
+ // Linux: struct ucred { pid_t pid; uid_t uid; gid_t gid; } = 12 bytes
37
+ const credBuf = new Uint8Array(12);
38
+ const lenBuf = new Uint32Array([12]);
39
+ const ret = getsockopt(fd, SOL_SOCKET_LINUX, SO_PEERCRED_LINUX, credBuf, lenBuf);
40
+ if (ret !== 0)
41
+ throw new Error(`getsockopt(SO_PEERCRED) failed with ret=${ret}`);
42
+ return new DataView(credBuf.buffer).getInt32(0, true);
43
+ }
44
+ }
45
+ function getProcessInfoMacOS(pid) {
46
+ let psOut;
47
+ try {
48
+ psOut = execSync(`ps -p ${pid} -o ppid= -o args=`, { encoding: 'utf-8' }).trim();
49
+ }
50
+ catch {
51
+ throw new Error(`PID ${pid} exited before caller info could be read`);
52
+ }
53
+ const firstSpace = psOut.indexOf(' ');
54
+ if (firstSpace < 0)
55
+ throw new Error(`Unexpected ps output for PID ${pid}: "${psOut}"`);
56
+ const ppid = parseInt(psOut.slice(0, firstSpace).trim(), 10);
57
+ const command = psOut.slice(firstSpace + 1).trim();
58
+ // lsof exits non-zero on macOS when it hits permission errors on other fds even if it
59
+ // successfully located the cwd entry, so we check output regardless of exit code.
60
+ const lsofResult = Bun.spawnSync(['lsof', '-a', '-p', String(pid), '-d', 'cwd', '-Fn']);
61
+ const lsofOut = lsofResult.stdout.toString().trim();
62
+ const cwdLine = lsofOut.split('\n').find(l => l.startsWith('n'));
63
+ const cwd = cwdLine ? Option.some(cwdLine.slice(1)) : Option.none();
64
+ return { ppid, command, cwd };
65
+ }
66
+ function getProcessInfoLinux(pid) {
67
+ const rawCmdline = readFileSync(`/proc/${pid}/cmdline`);
68
+ const command = rawCmdline.toString().replace(/\0+$/, '').split('\0').join(' ');
69
+ if (!command)
70
+ throw new Error(`Empty cmdline for PID ${pid}`);
71
+ let cwd;
72
+ try {
73
+ cwd = Option.some(readlinkSync(`/proc/${pid}/cwd`));
74
+ }
75
+ catch {
76
+ cwd = Option.none();
77
+ }
78
+ const status = readFileSync(`/proc/${pid}/status`, 'utf-8');
79
+ const ppidMatch = status.match(/^PPid:\s+(\d+)/m);
80
+ if (!ppidMatch)
81
+ throw new Error(`No PPid in /proc/${pid}/status`);
82
+ const ppid = parseInt(ppidMatch[1], 10);
83
+ return { ppid, command, cwd };
84
+ }
85
+ function getProcessInfoWindows(pid) {
86
+ const infoOut = execSync(`powershell -NoProfile -Command "` +
87
+ `$p = Get-WmiObject Win32_Process -Filter 'ProcessId=${pid}'; ` +
88
+ `if ($p) { Write-Output \\\"$($p.ParentProcessId)|$($p.CommandLine)\\\" }"`, { encoding: 'utf-8' }).trim();
89
+ if (!infoOut)
90
+ throw new Error(`WMI returned no result for PID ${pid}`);
91
+ const pipeIdx = infoOut.indexOf('|');
92
+ if (pipeIdx < 0)
93
+ throw new Error(`Unexpected WMI output for PID ${pid}: "${infoOut}"`);
94
+ const ppid = parseInt(infoOut.slice(0, pipeIdx), 10);
95
+ const command = infoOut.slice(pipeIdx + 1);
96
+ return { ppid, command, cwd: Option.none() };
97
+ }
98
+ // ---- Chain walking ----
99
+ function walkChain(initialPid, getInfo) {
100
+ const chain = [];
101
+ let pid = initialPid;
102
+ const visited = new Set();
103
+ let isFirst = true;
104
+ while (pid > 0 && !visited.has(pid)) {
105
+ visited.add(pid);
106
+ let info;
107
+ try {
108
+ info = getInfo(pid);
109
+ }
110
+ catch (e) {
111
+ if (isFirst)
112
+ throw e;
113
+ break;
114
+ }
115
+ chain.push({ pid, command: info.command, directory: info.cwd });
116
+ pid = info.ppid;
117
+ isFirst = false;
118
+ }
119
+ // Reverse so chain[0] = oldest ancestor, chain[N-1] = direct caller.
120
+ // This matches the display logic in passkey-prf-page.ts which skips the common
121
+ // ancestor prefix to show the relevant tail (git, ssh, etc.).
122
+ return chain.reverse();
123
+ }
124
+ // ---- Public API ----
125
+ export function resolveCallerChainUnix(fd) {
126
+ const pid = getPeerPidFromFd(fd);
127
+ return walkChain(pid, isMacOS ? getProcessInfoMacOS : getProcessInfoLinux);
128
+ }
129
+ export function resolveCallerChainWindows(remotePid) {
130
+ return walkChain(remotePid, getProcessInfoWindows);
131
+ }
132
+ //# sourceMappingURL=caller-info.js.map
package/dist/modules/common/os-platform/caller-info.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"caller-info.js","sourceRoot":"","sources":["../../../../../../../src/modules/common/os-platform/caller-info.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGhC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;AAE9C,4BAA4B;AAE5B,MAAM,SAAS,GAAG,CAAC,CAAC,CAAW,8BAA8B;AAC7D,MAAM,aAAa,GAAG,CAAC,CAAC,CAAO,kCAAkC;AACjE,MAAM,gBAAgB,GAAG,CAAC,CAAC,CAAI,oBAAoB;AACnD,MAAM,iBAAiB,GAAG,EAAE,CAAC,CAAE,qBAAqB;AAGpD,IAAI,WAAqC,CAAC;AAE1C,SAAS,gBAAgB;IACvB,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC;QAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,EAAE;YAC1B,UAAU,EAAE;gBACV,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;gBACvE,OAAO,EAAE,OAAO,CAAC,GAAG;aACrB;SACF,CAAC,CAAC;QACH,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAA4B,CAAC;IACrE,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,gBAAgB,CAAC,EAAU;IAClC,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IACtC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,GAAG,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,GAAG,EAAE,CAAC,CAAC;QACnF,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,sEAAsE;QACtE,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACjF,IAAI,GAAG,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,GAAG,EAAE,CAAC,CAAC;QACjF,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAUD,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,QAAQ,CAAC,SAAS,GAAG,oBAAoB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,OAAO,GAAG,0CAA0C,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,UAAU,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEnD,sFAAsF;IACtF,kFAAkF;IAClF,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAEpE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,GAAG,UAAU,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChF,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;IAE9D,IAAI,GAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,GAAG,SAAS,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAExC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,OAAO,GAAG,QAAQ,CACtB,kCAAkC;QAClC,uDAAuD,GAAG,KAAK;QAC/D,2EAA2E,EAC3E,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtB,CAAC,IAAI,EAAE,CAAC;IACT,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,OAAO,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,MAAM,OAAO,GAAG,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAE3C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED,0BAA0B;AAE1B,SAAS,SAAS,CAAC,UAAkB,EAAE,OAAqC;IAC1E,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,IAAI,GAAG,GAAG,UAAU,CAAC;IACrB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,IAAiB,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,OAAO;gBAAE,MAAM,CAAC,CAAC;YACrB,MAAM;QACR,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAChE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;QAChB,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,qEAAqE;IACrE,+EAA+E;IAC/E,8DAA8D;IAC9D,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;AACzB,CAAC;AAED,uBAAuB;AAEvB,MAAM,UAAU,sBAAsB,CAAC,EAAU;IAC/C,MAAM,GAAG,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACjC,OAAO,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,SAAiB;IACzD,OAAO,SAAS,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;AACrD,CAAC"}
package/dist/modules/common/os-platform/impl.js ADDED
@@ -0,0 +1,95 @@
1
+ import { Effect } from "effect";
2
+ import { writeFileSync, existsSync, unlinkSync } from "node:fs";
3
+ import * as net from "node:net";
4
+ import { effunct, implementing } from "effective-modules";
5
+ import { resolveCallerChainUnix, resolveCallerChainWindows } from "./caller-info";
6
+ import { commonModules } from "@/modules/common";
7
+ import { registerVirtualHID } from "./virtual-hid";
8
+ import { log } from "@/common/log";
9
+ const isWindows = process.platform === 'win32';
10
+ function openBrowserCommand(url) {
11
+ if (process.platform === 'darwin')
12
+ return ['open', url];
13
+ if (process.platform === 'linux')
14
+ return ['xdg-open', url];
15
+ // `start` is a cmd.exe builtin. The empty string is the window title slot.
16
+ if (isWindows)
17
+ ['cmd.exe', '/c', 'start', '', url];
18
+ // TODO: use exhaustive matching
19
+ throw new Error("Unknown platform");
20
+ }
21
+ function openBrowserWindow(url) {
22
+ return Effect.sync(() => { Bun.spawnSync(openBrowserCommand(url)); });
23
+ }
24
+ function writeRestrictedFile(path, content) {
25
+ return Effect.try({
26
+ try: () => {
27
+ if (isWindows) {
28
+ writeFileSync(path, content);
29
+ const result = Bun.spawnSync(['icacls', path, '/inheritance:r', '/grant:r', `${process.env['USERNAME']}:(R,W)`]);
30
+ if (result.exitCode !== 0)
31
+ throw new Error(`icacls failed with exit code ${result.exitCode}`);
32
+ }
33
+ else {
34
+ writeFileSync(path, content, { mode: 0o600 });
35
+ }
36
+ },
37
+ catch: (e) => `Failed to write restricted file ${path}: ${e instanceof Error ? e.message : String(e)}`,
38
+ });
39
+ }
40
+ function makeConnectionHandler(onData, resolveChain) {
41
+ return (socket) => {
42
+ let callerChain;
43
+ try {
44
+ callerChain = resolveChain(socket);
45
+ }
46
+ catch (e) {
47
+ log(`[socket-server] ERROR: Failed to get caller info — closing connection. Reason: ${e instanceof Error ? e.message : String(e)}`);
48
+ socket.destroy();
49
+ return;
50
+ }
51
+ socket.on('data', async (data) => {
52
+ try {
53
+ socket.write(await Effect.runPromise(effunct(onData)(data, callerChain)));
54
+ }
55
+ catch (e) {
56
+ log(`[socket-server] ERROR in onData: ${e instanceof Error ? e.message : String(e)}`);
57
+ socket.destroy();
58
+ }
59
+ });
60
+ };
61
+ }
62
+ export class OSPlatformImpl extends implementing(commonModules.OSPlatform) {
63
+ openBrowserWindow(url) { return openBrowserWindow(url); }
64
+ writeRestrictedFile(path, content) { return writeRestrictedFile(path, content); }
65
+ *startSocketServer(socketPath, onData) {
66
+ return yield* Effect.try({
67
+ try: () => {
68
+ if (existsSync(socketPath))
69
+ unlinkSync(socketPath);
70
+ if (isWindows) {
71
+ const pipePath = `\\\\.\\pipe\\${socketPath.replace(/[/\\:]/g, '-')}`;
72
+ const server = net.createServer(makeConnectionHandler(onData, (socket) => {
73
+ const remotePid = socket._handle?.remotePid;
74
+ if (remotePid == null)
75
+ throw new Error('socket._handle.remotePid unavailable on this Windows/Bun version');
76
+ return resolveCallerChainWindows(remotePid);
77
+ }));
78
+ server.listen(pipePath);
79
+ }
80
+ else {
81
+ const server = net.createServer(makeConnectionHandler(onData, (socket) => {
82
+ const fd = socket._handle?.fd;
83
+ if (fd == null)
84
+ throw new Error('socket._handle.fd unavailable — cannot resolve peer PID');
85
+ return resolveCallerChainUnix(fd);
86
+ }));
87
+ server.listen(socketPath);
88
+ }
89
+ },
90
+ catch: (e) => `Failed to start socket server at ${socketPath}: ${e instanceof Error ? e.message : String(e)}`,
91
+ });
92
+ }
93
+ registerVirtualHID(onMessage) { return registerVirtualHID(onMessage); }
94
+ }
95
+ //# sourceMappingURL=impl.js.map