@ozyman42/ozy-cli 0.4.8-windows-x64.0 → 0.4.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bin/ozy +191 -0
- package/bin/ozy-signing-agent +191 -0
- package/bin/ozy-ssh-keygen +191 -0
- package/bin/ozy-virtual-security-key +191 -0
- package/dist/commands/git/hosts.js +18 -0
- package/dist/commands/git/hosts.js.map +1 -0
- package/dist/commands/git/index.js +8 -0
- package/dist/commands/git/index.js.map +1 -0
- package/dist/commands/git/setup.js +145 -0
- package/dist/commands/git/setup.js.map +1 -0
- package/dist/commands/index.js +13 -0
- package/dist/commands/index.js.map +1 -0
- package/dist/commands/npm/index.js +7 -0
- package/dist/commands/npm/index.js.map +1 -0
- package/dist/commands/npm/setup/git-remote.js +66 -0
- package/dist/commands/npm/setup/git-remote.js.map +1 -0
- package/dist/commands/npm/setup/index.js +168 -0
- package/dist/commands/npm/setup/index.js.map +1 -0
- package/dist/commands/npm/setup/npm-auth.js +62 -0
- package/dist/commands/npm/setup/npm-auth.js.map +1 -0
- package/dist/commands/npm/setup/package-json-validate.js +47 -0
- package/dist/commands/npm/setup/package-json-validate.js.map +1 -0
- package/dist/commands/npm/setup/package-registry.js +20 -0
- package/dist/commands/npm/setup/package-registry.js.map +1 -0
- package/dist/commands/npm/setup/setup.test.js +95 -0
- package/dist/commands/npm/setup/setup.test.js.map +1 -0
- package/dist/commands/npm/setup/trusted-publishing.js +84 -0
- package/dist/commands/npm/setup/trusted-publishing.js.map +1 -0
- package/dist/commands/npm/setup/workflow.js +19 -0
- package/dist/commands/npm/setup/workflow.js.map +1 -0
- package/dist/commands/ssh/get-sk-credential.js +104 -0
- package/dist/commands/ssh/get-sk-credential.js.map +1 -0
- package/dist/commands/ssh/index.js +7 -0
- package/dist/commands/ssh/index.js.map +1 -0
- package/dist/commands/upgrade.js +199 -0
- package/dist/commands/upgrade.js.map +1 -0
- package/dist/common/command.js +15 -0
- package/dist/common/command.js.map +1 -0
- package/dist/common/constants.js +25 -0
- package/dist/common/constants.js.map +1 -0
- package/dist/common/effective-modules-extensions.js +13 -0
- package/dist/common/effective-modules-extensions.js.map +1 -0
- package/dist/common/log.js +4 -0
- package/dist/common/log.js.map +1 -0
- package/dist/common/render-caller-tree.js +20 -0
- package/dist/common/render-caller-tree.js.map +1 -0
- package/dist/entrypoints/ozy-signing-agent.js +48 -0
- package/dist/entrypoints/ozy-signing-agent.js.map +1 -0
- package/dist/entrypoints/ozy-ssh-keygen.js +9 -0
- package/dist/entrypoints/ozy-ssh-keygen.js.map +1 -0
- package/dist/entrypoints/ozy-virtual-security-key.js +18 -0
- package/dist/entrypoints/ozy-virtual-security-key.js.map +1 -0
- package/dist/entrypoints/ozy.js +3 -0
- package/dist/entrypoints/ozy.js.map +1 -0
- package/dist/index.js +2 -0
- package/dist/index.js.map +1 -0
- package/dist/internal/thing.js +4 -0
- package/dist/internal/thing.js.map +1 -0
- package/dist/modules/cli/agent-client/impl.js +109 -0
- package/dist/modules/cli/agent-client/impl.js.map +1 -0
- package/dist/modules/cli/agent-client/interface.js +11 -0
- package/dist/modules/cli/agent-client/interface.js.map +1 -0
- package/dist/modules/cli/git/impl.js +124 -0
- package/dist/modules/cli/git/impl.js.map +1 -0
- package/dist/modules/cli/git/interface.js +3 -0
- package/dist/modules/cli/git/interface.js.map +1 -0
- package/dist/modules/cli/git/submodule/fix.js +257 -0
- package/dist/modules/cli/git/submodule/fix.js.map +1 -0
- package/dist/modules/cli/git/submodule/git-state.js +154 -0
- package/dist/modules/cli/git/submodule/git-state.js.map +1 -0
- package/dist/modules/cli/git/submodule/gitmodules.js +113 -0
- package/dist/modules/cli/git/submodule/gitmodules.js.map +1 -0
- package/dist/modules/cli/git/submodule/printer.js +232 -0
- package/dist/modules/cli/git/submodule/printer.js.map +1 -0
- package/dist/modules/cli/git/submodule/resolve-git-dir.js +16 -0
- package/dist/modules/cli/git/submodule/resolve-git-dir.js.map +1 -0
- package/dist/modules/cli/github/impl.js +137 -0
- package/dist/modules/cli/github/impl.js.map +1 -0
- package/dist/modules/cli/github/interface.js +2 -0
- package/dist/modules/cli/github/interface.js.map +1 -0
- package/dist/modules/cli/index.js +9 -0
- package/dist/modules/cli/index.js.map +1 -0
- package/dist/modules/common/crypto/impl.js +133 -0
- package/dist/modules/common/crypto/impl.js.map +1 -0
- package/dist/modules/common/crypto/interface.js +2 -0
- package/dist/modules/common/crypto/interface.js.map +1 -0
- package/dist/modules/common/index.js +10 -0
- package/dist/modules/common/index.js.map +1 -0
- package/dist/modules/common/kep-map-store/impl.js +42 -0
- package/dist/modules/common/kep-map-store/impl.js.map +1 -0
- package/dist/modules/common/kep-map-store/interface.js +2 -0
- package/dist/modules/common/kep-map-store/interface.js.map +1 -0
- package/dist/modules/common/os-platform/caller-info.js +132 -0
- package/dist/modules/common/os-platform/caller-info.js.map +1 -0
- package/dist/modules/common/os-platform/impl.js +95 -0
- package/dist/modules/common/os-platform/impl.js.map +1 -0
- package/dist/modules/common/os-platform/interface.js +2 -0
- package/dist/modules/common/os-platform/interface.js.map +1 -0
- package/dist/modules/common/os-platform/virtual-hid/index.js +12 -0
- package/dist/modules/common/os-platform/virtual-hid/index.js.map +1 -0
- package/dist/modules/common/os-platform/virtual-hid/linux.js +5 -0
- package/dist/modules/common/os-platform/virtual-hid/linux.js.map +1 -0
- package/dist/modules/common/os-platform/virtual-hid/mac.js +119 -0
- package/dist/modules/common/os-platform/virtual-hid/mac.js.map +1 -0
- package/dist/modules/common/os-platform/virtual-hid/windows.js +5 -0
- package/dist/modules/common/os-platform/virtual-hid/windows.js.map +1 -0
- package/dist/modules/common/ssh-config/impl.js +116 -0
- package/dist/modules/common/ssh-config/impl.js.map +1 -0
- package/dist/modules/common/ssh-config/interface.js +10 -0
- package/dist/modules/common/ssh-config/interface.js.map +1 -0
- package/dist/modules/ssh-agent/index.js +8 -0
- package/dist/modules/ssh-agent/index.js.map +1 -0
- package/dist/modules/ssh-agent/session/impl.js +265 -0
- package/dist/modules/ssh-agent/session/impl.js.map +1 -0
- package/dist/modules/ssh-agent/session/interface-rpc.js +20 -0
- package/dist/modules/ssh-agent/session/interface-rpc.js.map +1 -0
- package/dist/modules/ssh-agent/session/interface.js +32 -0
- package/dist/modules/ssh-agent/session/interface.js.map +1 -0
- package/dist/modules/ssh-agent/session/passkey-prf-page.js +204 -0
- package/dist/modules/ssh-agent/session/passkey-prf-page.js.map +1 -0
- package/dist/modules/ssh-agent/session/prf-flow.js +103 -0
- package/dist/modules/ssh-agent/session/prf-flow.js.map +1 -0
- package/dist/modules/ssh-agent/ssh-agent/impl.js +117 -0
- package/dist/modules/ssh-agent/ssh-agent/impl.js.map +1 -0
- package/dist/modules/ssh-agent/ssh-agent/interface.js +2 -0
- package/dist/modules/ssh-agent/ssh-agent/interface.js.map +1 -0
- package/dist/scripts/build.js +410 -0
- package/dist/scripts/build.js.map +1 -0
- package/dist/scripts/check-npm-version.js +8 -0
- package/dist/scripts/check-npm-version.js.map +1 -0
- package/dist/scripts/kill-existing-agent.js +21 -0
- package/dist/scripts/kill-existing-agent.js.map +1 -0
- package/dist/scripts/publish.js +46 -0
- package/dist/scripts/publish.js.map +1 -0
- package/package.json +52 -11
- package/src/commands/git/hosts.ts +20 -0
- package/src/commands/git/index.ts +9 -0
- package/src/commands/git/setup.ts +182 -0
- package/src/commands/index.ts +15 -0
- package/src/commands/npm/index.ts +8 -0
- package/src/commands/npm/setup/git-remote.ts +78 -0
- package/src/commands/npm/setup/index.ts +189 -0
- package/src/commands/npm/setup/npm-auth.ts +58 -0
- package/src/commands/npm/setup/package-json-validate.ts +68 -0
- package/src/commands/npm/setup/package-registry.ts +24 -0
- package/src/commands/npm/setup/publish-workflow.yml +35 -0
- package/src/commands/npm/setup/setup.test.ts +117 -0
- package/src/commands/npm/setup/trusted-publishing.ts +106 -0
- package/src/commands/npm/setup/workflow.ts +20 -0
- package/src/commands/ssh/get-sk-credential.ts +110 -0
- package/src/commands/ssh/index.ts +8 -0
- package/src/commands/upgrade.ts +220 -0
- package/src/common/command.ts +16 -0
- package/src/common/constants.ts +26 -0
- package/src/common/effective-modules-extensions.ts +24 -0
- package/src/common/log.ts +3 -0
- package/src/common/render-caller-tree.ts +22 -0
- package/src/entrypoints/ozy-signing-agent.ts +48 -0
- package/src/entrypoints/ozy-ssh-keygen.ts +10 -0
- package/src/entrypoints/ozy-virtual-security-key.ts +21 -0
- package/src/entrypoints/ozy.ts +2 -0
- package/src/index.ts +1 -0
- package/src/internal/thing.ts +3 -0
- package/src/modules/cli/agent-client/impl.ts +152 -0
- package/src/modules/cli/agent-client/interface.ts +17 -0
- package/src/modules/cli/git/impl.ts +133 -0
- package/src/modules/cli/git/interface.ts +23 -0
- package/src/modules/cli/git/submodule/fix.ts +298 -0
- package/src/modules/cli/git/submodule/git-state.ts +217 -0
- package/src/modules/cli/git/submodule/gitmodules.ts +126 -0
- package/src/modules/cli/git/submodule/printer.ts +256 -0
- package/src/modules/cli/git/submodule/resolve-git-dir.ts +14 -0
- package/src/modules/cli/github/impl.ts +169 -0
- package/src/modules/cli/github/interface.ts +29 -0
- package/src/modules/cli/index.ts +16 -0
- package/src/modules/common/crypto/impl.ts +173 -0
- package/src/modules/common/crypto/interface.ts +20 -0
- package/src/modules/common/index.ts +19 -0
- package/src/modules/common/kep-map-store/impl.ts +47 -0
- package/src/modules/common/kep-map-store/interface.ts +9 -0
- package/src/modules/common/os-platform/caller-info.ts +152 -0
- package/src/modules/common/os-platform/impl.ts +91 -0
- package/src/modules/common/os-platform/interface.ts +16 -0
- package/src/modules/common/os-platform/virtual-hid/index.ts +12 -0
- package/src/modules/common/os-platform/virtual-hid/linux.ts +7 -0
- package/src/modules/common/os-platform/virtual-hid/mac.ts +150 -0
- package/src/modules/common/os-platform/virtual-hid/windows.ts +7 -0
- package/src/modules/common/ssh-config/impl.ts +130 -0
- package/src/modules/common/ssh-config/interface.ts +33 -0
- package/src/modules/ssh-agent/index.ts +13 -0
- package/src/modules/ssh-agent/session/agent-notes.md +210 -0
- package/src/modules/ssh-agent/session/design.md +2 -0
- package/src/modules/ssh-agent/session/html-refactor.md +23 -0
- package/src/modules/ssh-agent/session/impl.ts +328 -0
- package/src/modules/ssh-agent/session/interface-rpc.ts +24 -0
- package/src/modules/ssh-agent/session/interface.ts +62 -0
- package/src/modules/ssh-agent/session/passkey-prf-page.ts +224 -0
- package/src/modules/ssh-agent/session/prf-flow.ts +152 -0
- package/src/modules/ssh-agent/ssh-agent/impl.ts +136 -0
- package/src/modules/ssh-agent/ssh-agent/interface.ts +9 -0
- package/src/scripts/build.ts +504 -0
- package/src/scripts/check-npm-version.ts +7 -0
- package/src/scripts/command-launcher.js.ejs +168 -0
- package/src/scripts/kill-existing-agent.ts +22 -0
- package/src/scripts/publish.ts +47 -0
- package/src/scripts/windows-bin-shims.md +1104 -0
- package/multi-call-binary.exe +0 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"impl.js","sourceRoot":"","sources":["../../../../../../../src/modules/common/os-platform/impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAkB,MAAM,mBAAmB,CAAC;AAE1E,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAE/C,SAAS,kBAAkB,CAAC,GAAW;IACrC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC3D,2EAA2E;IAC3E,IAAI,SAAS;QAAE,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IACnD,gCAAgC;IAChC,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,OAAe;IACxD,OAAO,MAAM,CAAC,GAAG,CAAC;QAChB,GAAG,EAAE,GAAG,EAAE;YACR,IAAI,SAAS,EAAE,CAAC;gBACd,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACjH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;oBACvB,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACvE,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,mCAAmC,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;KACvG,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAyE,EAAE,YAAqD;IAC7J,OAAO,CAAC,MAAkB,EAAE,EAAE;QAC5B,IAAI,WAA4B,CAAC;QACjC,IAAI,CAAC;YACH,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,kFAAkF,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC/B,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;YAC5E,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,oCAAoC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtF,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,cAAe,SAAQ,YAAY,CAAC,aAAa,CAAC,UAAU,CAAC;IACxE,iBAAiB,CAAC,GAAW,IAAI,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjE,mBAAmB,CAAC,IAAY,EAAE,OAAe,IAAI,OAAO,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC,iBAAiB,CAAC,UAAkB,EAAE,MAAyE;QAC9G,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACvB,GAAG,EAAE,GAAG,EAAE;gBACR,IAAI,UAAU,CAAC,UAAU,CAAC;oBAAE,UAAU,CAAC,UAAU,CAAC,CAAC;gBACnD,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,QAAQ,GAAG,gBAAgB,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;oBACtE,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,qBAAqB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;wBACvE,MAAM,SAAS,GAAI,MAAc,CAAC,OAAO,EAAE,SAA+B,CAAC;wBAC3E,IAAI,SAAS,IAAI,IAAI;4BAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;wBAC3G,OAAO,yBAAyB,CAAC,SAAS,CAAC,CAAC;oBAC9C,CAAC,CAAC,CAAC,CAAC;oBACJ,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,qBAAqB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;wBACvE,MAAM,EAAE,GAAI,MAAc,CAAC,OAAO,EAAE,EAAwB,CAAC;wBAC7D,IAAI,EAAE,IAAI,IAAI;4BAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;wBAC3F,OAAO,sBAAsB,CAAC,EAAE,CAAC,CAAC;oBACpC,CAAC,CAAC,CAAC,CAAC;oBACJ,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,oCAAoC,UAAU,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SAC9G,CAAC,CAAC;IACL,CAAC;IACD,kBAAkB,CAAC,SAAkD,IAAI,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;CACjH"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"interface.js","sourceRoot":"","sources":["../../../../../../../src/modules/common/os-platform/interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC"}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import { Effect } from "effect";
|
|
2
|
+
import { registerVirtualHIDMac } from "./mac";
|
|
3
|
+
import { registerVirtualHIDLinux } from "./linux";
|
|
4
|
+
import { registerVirtualHIDWindows } from "./windows";
|
|
5
|
+
export function registerVirtualHID(onMessage) {
|
|
6
|
+
if (process.platform === 'darwin')
|
|
7
|
+
return registerVirtualHIDMac(onMessage);
|
|
8
|
+
if (process.platform === 'win32')
|
|
9
|
+
return registerVirtualHIDWindows(onMessage);
|
|
10
|
+
return registerVirtualHIDLinux(onMessage);
|
|
11
|
+
}
|
|
12
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../../src/modules/common/os-platform/virtual-hid/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,OAAO,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAEtD,MAAM,UAAU,kBAAkB,CAChC,SAAkD;IAElD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAC9E,OAAO,uBAAuB,CAAC,SAAS,CAAC,CAAC;AAC5C,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"linux.js","sourceRoot":"","sources":["../../../../../../../../src/modules/common/os-platform/virtual-hid/linux.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,MAAM,UAAU,uBAAuB,CACrC,UAAmD;IAEnD,OAAO,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;AACzE,CAAC"}
|
|
@@ -0,0 +1,119 @@
|
|
|
1
|
+
import { Effect, Option, pipe } from "effect";
|
|
2
|
+
import { JSCallback, dlopen, FFIType, ptr, toArrayBuffer } from "bun:ffi";
|
|
3
|
+
// FIDO Alliance usage page (0xF1D0), 64-byte in/out reports, no report IDs
|
|
4
|
+
const FIDO2_HID_DESCRIPTOR = new Uint8Array([
|
|
5
|
+
0x06, 0xD0, 0xF1, // Usage Page (FIDO Alliance 0xF1D0, little-endian)
|
|
6
|
+
0x09, 0x01, // Usage (U2F HID Authenticator Device)
|
|
7
|
+
0xA1, 0x01, // Collection (Application)
|
|
8
|
+
0x09, 0x20, // Usage (Input report data)
|
|
9
|
+
0x15, 0x00, // Logical Minimum (0)
|
|
10
|
+
0x26, 0xFF, 0x00, // Logical Maximum (255)
|
|
11
|
+
0x75, 0x08, // Report Size (8 bits)
|
|
12
|
+
0x95, 0x40, // Report Count (64)
|
|
13
|
+
0x81, 0x02, // Input (Data, Variable, Absolute)
|
|
14
|
+
0x09, 0x21, // Usage (Output report data)
|
|
15
|
+
0x15, 0x00, // Logical Minimum (0)
|
|
16
|
+
0x26, 0xFF, 0x00, // Logical Maximum (255)
|
|
17
|
+
0x75, 0x08, // Report Size (8 bits)
|
|
18
|
+
0x95, 0x40, // Report Count (64)
|
|
19
|
+
0x91, 0x02, // Output (Data, Variable, Absolute)
|
|
20
|
+
0xC0, // End Collection
|
|
21
|
+
]);
|
|
22
|
+
const kIOHIDReportTypeOutput = 1;
|
|
23
|
+
const kIOReturnSuccess = 0;
|
|
24
|
+
const kCFStringEncodingUTF8 = 0x08000100;
|
|
25
|
+
const kCFPropertyListImmutable = 0;
|
|
26
|
+
// Kept at module scope to prevent GC while the virtual device is running
|
|
27
|
+
let _vhidCallback = null;
|
|
28
|
+
_vhidCallback;
|
|
29
|
+
const fromPtr = (label, p) => pipe(Option.fromNullishOr(p), Effect.fromOption, Effect.mapError(() => `${label} returned NULL`));
|
|
30
|
+
// Build the device properties as an XML plist. CFPropertyListCreateWithData parses this
|
|
31
|
+
// into a fully-initialized CFDictionary (with correct hash/equal callbacks), avoiding
|
|
32
|
+
// the need to pass raw CFDictionaryKeyCallBacks structs via FFI.
|
|
33
|
+
function buildDevicePropertiesPlist() {
|
|
34
|
+
const descriptorB64 = Buffer.from(FIDO2_HID_DESCRIPTOR).toString('base64');
|
|
35
|
+
const xml = [
|
|
36
|
+
'<?xml version="1.0" encoding="UTF-8"?>',
|
|
37
|
+
'<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">',
|
|
38
|
+
'<plist version="1.0">',
|
|
39
|
+
'<dict>',
|
|
40
|
+
' <key>ReportDescriptor</key>',
|
|
41
|
+
` <data>${descriptorB64}</data>`,
|
|
42
|
+
' <key>VendorID</key>',
|
|
43
|
+
' <integer>4617</integer>', // 0x1209 - pid.codes open-source VID
|
|
44
|
+
' <key>ProductID</key>',
|
|
45
|
+
' <integer>1</integer>',
|
|
46
|
+
' <key>VersionNumber</key>',
|
|
47
|
+
' <integer>256</integer>', // 0x0100
|
|
48
|
+
' <key>Product</key>',
|
|
49
|
+
' <string>Ozy Virtual FIDO2 Key</string>',
|
|
50
|
+
'</dict>',
|
|
51
|
+
'</plist>',
|
|
52
|
+
].join('\n');
|
|
53
|
+
return new TextEncoder().encode(xml);
|
|
54
|
+
}
|
|
55
|
+
export function registerVirtualHIDMac(onMessage) {
|
|
56
|
+
return Effect.gen(function* () {
|
|
57
|
+
console.log('[vhid] loading frameworks');
|
|
58
|
+
const IOKit = yield* Effect.try({
|
|
59
|
+
try: () => dlopen('/System/Library/Frameworks/IOKit.framework/IOKit', {
|
|
60
|
+
IOHIDUserDeviceCreate: { args: [FFIType.ptr, FFIType.ptr], returns: FFIType.ptr },
|
|
61
|
+
IOHIDUserDeviceRegisterSetReportCallback: { args: [FFIType.ptr, FFIType.ptr, FFIType.ptr], returns: FFIType.void },
|
|
62
|
+
IOHIDUserDeviceScheduleWithRunLoop: { args: [FFIType.ptr, FFIType.ptr, FFIType.ptr], returns: FFIType.void },
|
|
63
|
+
IOHIDUserDeviceHandleReport: { args: [FFIType.ptr, FFIType.ptr, FFIType.i64], returns: FFIType.i32 },
|
|
64
|
+
}),
|
|
65
|
+
catch: (e) => `Failed to load IOKit: ${e}`,
|
|
66
|
+
});
|
|
67
|
+
const CF = yield* Effect.try({
|
|
68
|
+
try: () => dlopen('/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation', {
|
|
69
|
+
CFRunLoopGetCurrent: { args: [], returns: FFIType.ptr },
|
|
70
|
+
CFRunLoopRunInMode: { args: [FFIType.ptr, FFIType.f64, FFIType.bool], returns: FFIType.i32 },
|
|
71
|
+
CFStringCreateWithCString: { args: [FFIType.ptr, FFIType.ptr, FFIType.u32], returns: FFIType.ptr },
|
|
72
|
+
CFDataCreate: { args: [FFIType.ptr, FFIType.ptr, FFIType.i64], returns: FFIType.ptr },
|
|
73
|
+
CFPropertyListCreateWithData: { args: [FFIType.ptr, FFIType.ptr, FFIType.u64, FFIType.ptr, FFIType.ptr], returns: FFIType.ptr },
|
|
74
|
+
CFRelease: { args: [FFIType.ptr], returns: FFIType.void },
|
|
75
|
+
}),
|
|
76
|
+
catch: (e) => `Failed to load CoreFoundation: ${e}`,
|
|
77
|
+
});
|
|
78
|
+
console.log('[vhid] frameworks loaded');
|
|
79
|
+
const encoder = new TextEncoder();
|
|
80
|
+
const makeCFString = (s) =>
|
|
81
|
+
// TextEncoder gives a Uint8Array with its own ArrayBuffer (byteOffset=0, pool-safe)
|
|
82
|
+
fromPtr(`CFStringCreateWithCString("${s}")`, CF.symbols.CFStringCreateWithCString(null, ptr(encoder.encode(s + '\0')), kCFStringEncodingUTF8));
|
|
83
|
+
const makeCFData = (data) => fromPtr('CFDataCreate', CF.symbols.CFDataCreate(null, ptr(data), BigInt(data.length)));
|
|
84
|
+
console.log('[vhid] building device properties plist');
|
|
85
|
+
const plistBytes = buildDevicePropertiesPlist();
|
|
86
|
+
const plistData = yield* makeCFData(plistBytes);
|
|
87
|
+
const dict = yield* fromPtr('CFPropertyListCreateWithData', CF.symbols.CFPropertyListCreateWithData(null, plistData, BigInt(kCFPropertyListImmutable), null, null));
|
|
88
|
+
CF.symbols.CFRelease(plistData);
|
|
89
|
+
console.log('[vhid] device properties dict =', dict);
|
|
90
|
+
console.log('[vhid] creating IOHIDUserDevice');
|
|
91
|
+
const device = yield* fromPtr('IOHIDUserDeviceCreate', IOKit.symbols.IOHIDUserDeviceCreate(null, dict));
|
|
92
|
+
CF.symbols.CFRelease(dict);
|
|
93
|
+
console.log('[vhid] IOHIDUserDeviceCreate =', device);
|
|
94
|
+
const callback = yield* Effect.try({
|
|
95
|
+
try: () => new JSCallback((_refcon, _result, _sender, type, _reportID, report, reportLength) => {
|
|
96
|
+
if (type !== kIOHIDReportTypeOutput)
|
|
97
|
+
return kIOReturnSuccess;
|
|
98
|
+
const incoming = Buffer.from(toArrayBuffer(report, 0, reportLength));
|
|
99
|
+
console.log(`[vhid] received ${incoming.length} bytes: ${incoming.toString('hex')}`);
|
|
100
|
+
Effect.runPromise(onMessage(incoming)).then(response => {
|
|
101
|
+
const responseBuf = new Uint8Array(64);
|
|
102
|
+
response.copy(Buffer.from(responseBuf.buffer), 0, 0, Math.min(response.length, 64));
|
|
103
|
+
IOKit.symbols.IOHIDUserDeviceHandleReport(device, ptr(responseBuf), BigInt(responseBuf.length));
|
|
104
|
+
}).catch(() => { });
|
|
105
|
+
return kIOReturnSuccess;
|
|
106
|
+
}, { returns: 'i32', args: ['ptr', 'i32', 'ptr', 'i32', 'u32', 'ptr', 'i64'] }),
|
|
107
|
+
catch: (e) => `Failed to create JSCallback: ${e}`,
|
|
108
|
+
});
|
|
109
|
+
_vhidCallback = callback;
|
|
110
|
+
IOKit.symbols.IOHIDUserDeviceRegisterSetReportCallback(device, callback.ptr, null);
|
|
111
|
+
const runLoop = CF.symbols.CFRunLoopGetCurrent();
|
|
112
|
+
const runLoopMode = yield* makeCFString('kCFRunLoopDefaultMode');
|
|
113
|
+
IOKit.symbols.IOHIDUserDeviceScheduleWithRunLoop(device, runLoop, runLoopMode);
|
|
114
|
+
console.log('[vhid] virtual FIDO2 device active, pumping run loop');
|
|
115
|
+
// Pump CFRunLoop from Bun's libuv event loop without blocking
|
|
116
|
+
setInterval(() => CF.symbols.CFRunLoopRunInMode(runLoopMode, 0.0, false), 10);
|
|
117
|
+
});
|
|
118
|
+
}
|
|
119
|
+
//# sourceMappingURL=mac.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"mac.js","sourceRoot":"","sources":["../../../../../../../../src/modules/common/os-platform/virtual-hid/mac.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAG1E,2EAA2E;AAC3E,MAAM,oBAAoB,GAAG,IAAI,UAAU,CAAC;IAC1C,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,mDAAmD;IACrE,IAAI,EAAE,IAAI,EAAQ,uCAAuC;IACzD,IAAI,EAAE,IAAI,EAAQ,2BAA2B;IAC7C,IAAI,EAAE,IAAI,EAAQ,8BAA8B;IAChD,IAAI,EAAE,IAAI,EAAQ,wBAAwB;IAC1C,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,0BAA0B;IAC5C,IAAI,EAAE,IAAI,EAAQ,yBAAyB;IAC3C,IAAI,EAAE,IAAI,EAAQ,sBAAsB;IACxC,IAAI,EAAE,IAAI,EAAQ,qCAAqC;IACvD,IAAI,EAAE,IAAI,EAAQ,+BAA+B;IACjD,IAAI,EAAE,IAAI,EAAQ,wBAAwB;IAC1C,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,0BAA0B;IAC5C,IAAI,EAAE,IAAI,EAAQ,yBAAyB;IAC3C,IAAI,EAAE,IAAI,EAAQ,sBAAsB;IACxC,IAAI,EAAE,IAAI,EAAQ,sCAAsC;IACxD,IAAI,EAAc,iBAAiB;CACpC,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,qBAAqB,GAAG,UAAU,CAAC;AACzC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAEnC,yEAAyE;AACzE,IAAI,aAAa,GAAsB,IAAI,CAAC;AAC5C,aAAa,CAAC;AAEd,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,CAAiB,EAAkC,EAAE,CACnF,IAAI,CACF,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EACvB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAChD,CAAC;AAEJ,wFAAwF;AACxF,sFAAsF;AACtF,iEAAiE;AACjE,SAAS,0BAA0B;IACjC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG;QACV,wCAAwC;QACxC,wGAAwG;QACxG,uBAAuB;QACvB,QAAQ;QACR,+BAA+B;QAC/B,WAAW,aAAa,SAAS;QACjC,uBAAuB;QACvB,2BAA2B,EAAI,qCAAqC;QACpE,wBAAwB;QACxB,wBAAwB;QACxB,4BAA4B;QAC5B,0BAA0B,EAAK,SAAS;QACxC,sBAAsB;QACtB,0CAA0C;QAC1C,SAAS;QACT,UAAU;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,SAAkD;IAElD,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QAEzC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC9B,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,kDAAkD,EAAE;gBACpE,qBAAqB,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;gBACjF,wCAAwC,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;gBAClH,kCAAkC,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;gBAC5G,2BAA2B,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;aACrG,CAAC;YACF,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,EAAE;SAC3C,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC3B,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,oEAAoE,EAAE;gBACtF,mBAAmB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;gBACvD,kBAAkB,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;gBAC5F,yBAAyB,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClG,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;gBACrF,4BAA4B,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;gBAC/H,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;aAC1D,CAAC;YACF,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,kCAAkC,CAAC,EAAE;SACpD,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAExC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAElC,MAAM,YAAY,GAAG,CAAC,CAAS,EAAkC,EAAE;QACjE,oFAAoF;QACpF,OAAO,CAAC,8BAA8B,CAAC,IAAI,EACzC,EAAE,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAEtG,MAAM,UAAU,GAAG,CAAC,IAAgB,EAAkC,EAAE,CACtE,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAEzF,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,0BAA0B,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAEhD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,8BAA8B,EACxD,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1G,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAC;QAErD,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,uBAAuB,EAAE,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACxG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,MAAM,CAAC,CAAC;QAEtD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACjC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,UAAU,CACvB,CAAC,OAAe,EAAE,OAAe,EAAE,OAAe,EAAE,IAAY,EAAE,SAAiB,EAAE,MAAc,EAAE,YAAoB,EAAE,EAAE;gBAC3H,IAAI,IAAI,KAAK,sBAAsB;oBAAE,OAAO,gBAAgB,CAAC;gBAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,MAA4B,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;gBAC3F,OAAO,CAAC,GAAG,CAAC,mBAAmB,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACrF,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;oBACrD,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;oBACvC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;oBACpF,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;gBAClG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACnB,OAAO,gBAAgB,CAAC;YAC1B,CAAC,EACD,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAC5E;YACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,gCAAgC,CAAC,EAAE;SAClD,CAAC,CAAC;QACH,aAAa,GAAG,QAAQ,CAAC;QAEzB,KAAK,CAAC,OAAO,CAAC,wCAAwC,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAEnF,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;QACjD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC;QACjE,KAAK,CAAC,OAAO,CAAC,kCAAkC,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAE/E,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QACpE,8DAA8D;QAC9D,WAAW,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"windows.js","sourceRoot":"","sources":["../../../../../../../../src/modules/common/os-platform/virtual-hid/windows.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,MAAM,UAAU,yBAAyB,CACvC,UAAmD;IAEnD,OAAO,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;AAC3E,CAAC"}
|
|
@@ -0,0 +1,116 @@
|
|
|
1
|
+
import * as fs from "node:fs/promises";
|
|
2
|
+
import { join } from "node:path";
|
|
3
|
+
import { writeFileSync } from "node:fs";
|
|
4
|
+
import { Effect, Option, Schema } from "effect";
|
|
5
|
+
import SSHConfig, { LineType } from "ssh-config";
|
|
6
|
+
import expandTilde from "expand-tilde";
|
|
7
|
+
import { implementing } from "effective-modules";
|
|
8
|
+
import { commonModules } from "@/modules/common";
|
|
9
|
+
import { SSHConfigSection } from "./interface";
|
|
10
|
+
const SSH_CONFIG_PATH = "~/.ssh/config";
|
|
11
|
+
const SSH_DIR = "~/.ssh";
|
|
12
|
+
export class SSHConfigImpl extends implementing(commonModules.SSHConfig) {
|
|
13
|
+
*loadSSHConfigRaw() {
|
|
14
|
+
const configPath = expandTilde(SSH_CONFIG_PATH);
|
|
15
|
+
const exists = yield* Effect.promise(() => fs.exists(configPath));
|
|
16
|
+
const text = exists
|
|
17
|
+
? yield* Effect.tryPromise({
|
|
18
|
+
try: () => fs.readFile(configPath, "utf8"),
|
|
19
|
+
catch: (e) => `Failed to read ssh config at ${configPath}: ${e instanceof Error ? e.message : String(e)}`,
|
|
20
|
+
})
|
|
21
|
+
: "";
|
|
22
|
+
return yield* Effect.try({
|
|
23
|
+
try: () => SSHConfig.parse(text),
|
|
24
|
+
catch: (e) => `ParseError: unable to parse ssh config at ${configPath}\n${e instanceof Error ? e.message : String(e)}`,
|
|
25
|
+
});
|
|
26
|
+
}
|
|
27
|
+
*getSSHConfig() {
|
|
28
|
+
const configPath = expandTilde(SSH_CONFIG_PATH);
|
|
29
|
+
const exists = yield* Effect.promise(() => fs.exists(configPath));
|
|
30
|
+
if (!exists)
|
|
31
|
+
return yield* Effect.fail(`SSHConfigFileMissingError: No file found at ${configPath}`);
|
|
32
|
+
const parsed = yield* this.loadSSHConfigRaw();
|
|
33
|
+
const hosts = {};
|
|
34
|
+
for (const line of parsed) {
|
|
35
|
+
if (line.type === LineType.COMMENT)
|
|
36
|
+
continue;
|
|
37
|
+
const { param, value: host } = line;
|
|
38
|
+
if (param !== "Host")
|
|
39
|
+
return yield* Effect.fail(`EntryNotAHostKeyValuePairError: unexpected top-level entry '${param}=${JSON.stringify(host)}'`);
|
|
40
|
+
if (typeof host !== "string")
|
|
41
|
+
return yield* Effect.fail(`EntryNotAHostKeyValuePairError: Host value is not a string: ${JSON.stringify(host)}`);
|
|
42
|
+
if (!("config" in line))
|
|
43
|
+
return yield* Effect.fail(`EntryNotAHostKeyValuePairError: non-section Host entry '${host}'`);
|
|
44
|
+
if (host in hosts)
|
|
45
|
+
return yield* Effect.fail(`DuplicateHostError: duplicate Host '${host}' in ${configPath}`);
|
|
46
|
+
const kv = {};
|
|
47
|
+
for (const inner of line.config) {
|
|
48
|
+
if (inner.type === LineType.COMMENT)
|
|
49
|
+
continue;
|
|
50
|
+
if (typeof inner.value !== "string")
|
|
51
|
+
return yield* Effect.fail(`MalformedError: Host '${host}' key '${inner.param}' has non-string value`);
|
|
52
|
+
kv[inner.param] = inner.value;
|
|
53
|
+
}
|
|
54
|
+
const section = yield* Schema.decodeUnknownEffect(SSHConfigSection)(kv).pipe(Effect.mapError(e => `MalformedError: malformed section at Host '${host}': ${String(e)}`));
|
|
55
|
+
hosts[host] = section;
|
|
56
|
+
}
|
|
57
|
+
return hosts;
|
|
58
|
+
}
|
|
59
|
+
*writeHost({ section }) {
|
|
60
|
+
const configPath = expandTilde(SSH_CONFIG_PATH);
|
|
61
|
+
const cfg = yield* this.loadSSHConfigRaw();
|
|
62
|
+
const newEntries = Object.entries(section)
|
|
63
|
+
.filter(([, v]) => v !== undefined)
|
|
64
|
+
.map(([k, v]) => ({ type: LineType.DIRECTIVE, before: ' ', param: k, separator: ' ', value: v, after: '\n' }));
|
|
65
|
+
const existingIdx = cfg.findIndex((e) => e.param === "Host" && e.value === section.HostName);
|
|
66
|
+
if (existingIdx >= 0) {
|
|
67
|
+
cfg[existingIdx].config = newEntries;
|
|
68
|
+
}
|
|
69
|
+
else {
|
|
70
|
+
const record = { Host: section.HostName };
|
|
71
|
+
for (const [k, v] of Object.entries(section)) {
|
|
72
|
+
if (v !== undefined)
|
|
73
|
+
record[k] = v;
|
|
74
|
+
}
|
|
75
|
+
cfg.append(record);
|
|
76
|
+
}
|
|
77
|
+
yield* Effect.try({
|
|
78
|
+
try: () => writeFileSync(configPath, SSHConfig.stringify(cfg), { mode: 0o600 }),
|
|
79
|
+
catch: (e) => `Failed to write ssh config: ${e instanceof Error ? e.message : String(e)}`,
|
|
80
|
+
});
|
|
81
|
+
}
|
|
82
|
+
*listPubkeyFiles() {
|
|
83
|
+
const sshDir = expandTilde(SSH_DIR);
|
|
84
|
+
const entries = yield* Effect.tryPromise({
|
|
85
|
+
try: () => fs.readdir(sshDir),
|
|
86
|
+
catch: (e) => `Failed to read ${sshDir}: ${e instanceof Error ? e.message : String(e)}`,
|
|
87
|
+
});
|
|
88
|
+
const pubkeyFiles = entries.filter(f => f.endsWith('.pub'));
|
|
89
|
+
const results = [];
|
|
90
|
+
for (const file of pubkeyFiles) {
|
|
91
|
+
const content = yield* Effect.tryPromise({
|
|
92
|
+
try: () => fs.readFile(join(sshDir, file), 'utf8'),
|
|
93
|
+
catch: (e) => `Failed to read ${file}: ${e instanceof Error ? e.message : String(e)}`,
|
|
94
|
+
});
|
|
95
|
+
results.push({ name: file.slice(0, -'.pub'.length), content: content.trim() });
|
|
96
|
+
}
|
|
97
|
+
return results;
|
|
98
|
+
}
|
|
99
|
+
getPubkeyPath(name) {
|
|
100
|
+
return `${expandTilde(SSH_DIR)}/${name}.pub`;
|
|
101
|
+
}
|
|
102
|
+
*writePubkey({ name, comment, pubkey }) {
|
|
103
|
+
const sshDir = expandTilde(SSH_DIR);
|
|
104
|
+
const pubkeyPath = `${sshDir}/${name}.pub`;
|
|
105
|
+
const content = Option.match(comment, {
|
|
106
|
+
onNone: () => pubkey.authorizedKey,
|
|
107
|
+
onSome: (c) => `${pubkey.authorizedKey} ${c}`,
|
|
108
|
+
});
|
|
109
|
+
yield* Effect.try({
|
|
110
|
+
try: () => writeFileSync(pubkeyPath, content + "\n", { mode: 0o600 }),
|
|
111
|
+
catch: (e) => `Failed to write pubkey to ${pubkeyPath}: ${e instanceof Error ? e.message : String(e)}`,
|
|
112
|
+
});
|
|
113
|
+
return { pubkeyPath };
|
|
114
|
+
}
|
|
115
|
+
}
|
|
116
|
+
//# sourceMappingURL=impl.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"impl.js","sourceRoot":"","sources":["../../../../../../../src/modules/common/ssh-config/impl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,WAAW,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,YAAY,EAAkB,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,OAAO,EAAE,gBAAgB,EAAoF,MAAM,aAAa,CAAC;AAEjI,MAAM,eAAe,GAAG,eAAe,CAAC;AACxC,MAAM,OAAO,GAAG,QAAQ,CAAC;AAEzB,MAAM,OAAO,aAAc,SAAQ,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC;IAC9D,CAAC,gBAAgB;QACvB,MAAM,UAAU,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM;YACjB,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBACvB,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAC1C,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,gCAAgC,UAAU,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;aAC1G,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACvB,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;YAChC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,6CAA6C,UAAU,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SACvH,CAAC,CAAC;IACL,CAAC;IAED,CAAC,YAAY;QACX,MAAM,UAAU,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM;YACT,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,UAAU,EAAE,CAAC,CAAC;QAEzF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE9C,MAAM,KAAK,GAAmB,EAAE,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO;gBAAE,SAAS;YAC7C,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;YACpC,IAAI,KAAK,KAAK,MAAM;gBAClB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,+DAA+D,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7H,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAC1B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,+DAA+D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnH,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC;gBACrB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,IAAI,GAAG,CAAC,CAAC;YAChG,IAAI,IAAI,IAAI,KAAK;gBACf,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,IAAI,QAAQ,UAAU,EAAE,CAAC,CAAC;YAE7F,MAAM,EAAE,GAA2B,EAAE,CAAC;YACtC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO;oBAAE,SAAS;gBAC9C,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;oBACjC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,IAAI,UAAU,KAAK,CAAC,KAAK,wBAAwB,CAAC,CAAC;gBACxG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;YAChC,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAC1E,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,8CAA8C,IAAI,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAC1F,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;QACxB,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,CAAC,SAAS,CAAC,EAAE,OAAO,EAAkB;QACpC,MAAM,UAAU,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;aACvC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAW,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAE5H,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClG,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;YACpB,GAAG,CAAC,WAAW,CAAS,CAAC,MAAM,GAAG,UAAU,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAA2B,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YAClE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,KAAK,SAAS;oBAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACrC,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QAED,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAChB,GAAG,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAC/E,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SAC1F,CAAC,CAAC;IACL,CAAC;IAED,CAAC,eAAe;QACd,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YACvC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;YAC7B,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,MAAM,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SACxF,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAsC,EAAE,CAAC;QACtD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBACvC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC;gBAClD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;aACtF,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,aAAa,CAAC,IAAY;QACxB,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC;IAC/C,CAAC;IAED,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAoB;QACtD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,GAAG,MAAM,IAAI,IAAI,MAAM,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;YACpC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa;YAClC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,aAAa,IAAI,CAAC,EAAE;SAC9C,CAAC,CAAC;QAEH,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAChB,GAAG,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACrE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,6BAA6B,UAAU,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SACvG,CAAC,CAAC;QAEH,OAAO,EAAC,UAAU,EAAC,CAAC;IACtB,CAAC;CACF"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import { Schema } from "effect";
|
|
2
|
+
export const SSHConfigSection = Schema.Struct({
|
|
3
|
+
HostName: Schema.String,
|
|
4
|
+
User: Schema.String,
|
|
5
|
+
IdentityFile: Schema.optional(Schema.String),
|
|
6
|
+
AddKeysToAgent: Schema.optional(Schema.String),
|
|
7
|
+
IdentitiesOnly: Schema.optional(Schema.String),
|
|
8
|
+
IdentityAgent: Schema.optional(Schema.String),
|
|
9
|
+
});
|
|
10
|
+
//# sourceMappingURL=interface.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"interface.js","sourceRoot":"","sources":["../../../../../../../src/modules/common/ssh-config/interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAKhC,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,MAAM,CAAC,MAAM;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5C,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAC9C,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAC9C,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;CAC9C,CAAC,CAAC"}
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
import { interfaces } from "effective-modules";
|
|
2
|
+
export var AgentModules;
|
|
3
|
+
(function (AgentModules) {
|
|
4
|
+
AgentModules["SSHAgent"] = "SSHAgent";
|
|
5
|
+
AgentModules["Session"] = "Session";
|
|
6
|
+
})(AgentModules || (AgentModules = {}));
|
|
7
|
+
export const agentModules = interfaces(AgentModules);
|
|
8
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/modules/ssh-agent/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAI/C,MAAM,CAAN,IAAY,YAGX;AAHD,WAAY,YAAY;IACtB,qCAAqB,CAAA;IACrB,mCAAmB,CAAA;AACrB,CAAC,EAHW,YAAY,KAAZ,YAAY,QAGvB;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,UAAU,CAGnC,YAAY,CAAC,CAAC"}
|
|
@@ -0,0 +1,265 @@
|
|
|
1
|
+
import { Deferred, Effect, Option, pipe, Result, Layer } from "effect";
|
|
2
|
+
import { effunct, implementing } from "effective-modules";
|
|
3
|
+
import { SSHPubkey, CredentialId, SSHKeyPair } from "@/modules/common/crypto/impl";
|
|
4
|
+
import { renderCallerTree } from "@/common/render-caller-tree";
|
|
5
|
+
import { BunHttpServer } from "@effect/platform-bun";
|
|
6
|
+
import { randomUUID } from "node:crypto";
|
|
7
|
+
import { agentModules } from "@/modules/ssh-agent";
|
|
8
|
+
import { commonModules } from "@/modules/common";
|
|
9
|
+
import { SessionError, SetupOutput, StartSessionInput } from "./interface";
|
|
10
|
+
import { AgentRpcGroup } from "./interface-rpc";
|
|
11
|
+
import { prfFlow, PrfInput } from "./prf-flow";
|
|
12
|
+
import { AGENT_PORT_FILE_PATH, CURRENT_VERSION, DEFAULT_SESSION_TIMEOUT_SECONDS } from "@/common/constants";
|
|
13
|
+
import { HttpRouter, HttpServer } from "effect/unstable/http";
|
|
14
|
+
import { RpcServer, RpcSerialization } from "effect/unstable/rpc";
|
|
15
|
+
import { writeFileSync } from "node:fs";
|
|
16
|
+
import { using } from "@/common/effective-modules-extensions";
|
|
17
|
+
const { OSPlatform, Crypto, KeyMapStore } = commonModules;
|
|
18
|
+
const { Session } = agentModules;
|
|
19
|
+
const SIGN_REQUESTS_COLLECTION_TIMEOUT_SECONDS = 3;
|
|
20
|
+
export class SessionImpl extends implementing(Session).uses(OSPlatform, Crypto, KeyMapStore) {
|
|
21
|
+
activeSession = Option.none();
|
|
22
|
+
keyCache = new Map();
|
|
23
|
+
*abortSession(session, onlyCheckRequestsAccumulated) {
|
|
24
|
+
if (session.completed)
|
|
25
|
+
return;
|
|
26
|
+
let timeout = session.definition.timeoutSeconds;
|
|
27
|
+
if (onlyCheckRequestsAccumulated) {
|
|
28
|
+
const expected = session.definition.expectedSignRequests.length;
|
|
29
|
+
const actual = session.receivedSignRequests.length;
|
|
30
|
+
if (expected === actual) {
|
|
31
|
+
yield* Effect.log(`All sign requests were received for session ${session.id} within ${SIGN_REQUESTS_COLLECTION_TIMEOUT_SECONDS} seconds`);
|
|
32
|
+
return;
|
|
33
|
+
}
|
|
34
|
+
else {
|
|
35
|
+
yield* Effect.log(`After ${SIGN_REQUESTS_COLLECTION_TIMEOUT_SECONDS} seconds only ${actual}/${expected} sign requests were received for session ${session.id}. Aborting`);
|
|
36
|
+
timeout = SIGN_REQUESTS_COLLECTION_TIMEOUT_SECONDS;
|
|
37
|
+
}
|
|
38
|
+
}
|
|
39
|
+
else {
|
|
40
|
+
yield* Effect.log(`Aborting session ${session.id} after ${timeout} seconds`);
|
|
41
|
+
}
|
|
42
|
+
if (Option.isSome(this.activeSession) && this.activeSession.value.id === session.id) {
|
|
43
|
+
this.activeSession = Option.none();
|
|
44
|
+
}
|
|
45
|
+
// Fail all the sign requests.
|
|
46
|
+
const error = SessionError.cases.SessionTimedOut.make({
|
|
47
|
+
seconds: timeout
|
|
48
|
+
});
|
|
49
|
+
session.completed = true;
|
|
50
|
+
for (let i = 0; i < session.definition.expectedSignRequests.length; ++i) {
|
|
51
|
+
const maybeReceived = Option.fromNullishOr(session.receivedSignRequests[i]);
|
|
52
|
+
if (Option.isNone(maybeReceived))
|
|
53
|
+
continue;
|
|
54
|
+
const { deferredResponse } = maybeReceived.value;
|
|
55
|
+
yield* Deferred.fail(deferredResponse, error);
|
|
56
|
+
}
|
|
57
|
+
}
|
|
58
|
+
*startSession({ expectedCommonAncestorPID, expectedSignRequests, timeoutSeconds, pubkey }) {
|
|
59
|
+
if (Option.isSome(this.activeSession)) {
|
|
60
|
+
const activeId = this.activeSession.value.id;
|
|
61
|
+
yield* Effect.log(`Blocked attempt to start session while ongoing active session ${activeId}`);
|
|
62
|
+
return yield* Effect.fail(SessionError.cases.InterruptingSession.make({ id: activeId }));
|
|
63
|
+
}
|
|
64
|
+
const maybeCredential = yield* pipe(effunct(this.dependencies.KeyMapStore.getCredentialByPubkey)(SSHPubkey.fromAuthorizedKey(pubkey)), Effect.catch(err => Effect.fail(SessionError.cases.InternalError.make({
|
|
65
|
+
reason: `Failed to read from key map store: ${err}`
|
|
66
|
+
}))));
|
|
67
|
+
if (Option.isNone(maybeCredential)) {
|
|
68
|
+
return yield* Effect.fail(SessionError.cases.PubkeyNotRegistered.make({
|
|
69
|
+
pubkey
|
|
70
|
+
}));
|
|
71
|
+
}
|
|
72
|
+
const id = randomUUID();
|
|
73
|
+
const session = {
|
|
74
|
+
definition: { expectedCommonAncestorPID, expectedSignRequests, timeoutSeconds, pubkey },
|
|
75
|
+
receivedSignRequests: [],
|
|
76
|
+
id,
|
|
77
|
+
totalReceived: 0,
|
|
78
|
+
pubkey,
|
|
79
|
+
credentialId: maybeCredential.value,
|
|
80
|
+
completed: false
|
|
81
|
+
};
|
|
82
|
+
this.activeSession = Option.some(session);
|
|
83
|
+
const n = expectedSignRequests.length;
|
|
84
|
+
yield* Effect.log(`Starting session ${id} for ${new CredentialId(maybeCredential.value).humanReadableName} (${maybeCredential.value}). Expecting ${n} sign request${n === 1 ? '' : 's'}`);
|
|
85
|
+
// 2 timeouts.
|
|
86
|
+
// - One for just collecting all requests in the session.
|
|
87
|
+
Effect.runFork(pipe(effunct(this.abortSession)(session, true), Effect.delay(`${SIGN_REQUESTS_COLLECTION_TIMEOUT_SECONDS} seconds`)));
|
|
88
|
+
// - Another which abandons the session if the actual prf flow hasn't happened yet
|
|
89
|
+
Effect.runFork(pipe(effunct(this.abortSession)(session, false), Effect.delay(`${timeoutSeconds} seconds`)));
|
|
90
|
+
}
|
|
91
|
+
isSignRequestInSession(session, signRequest) {
|
|
92
|
+
if (session.pubkey !== signRequest.pubkey.authorizedKey) {
|
|
93
|
+
return Option.none();
|
|
94
|
+
}
|
|
95
|
+
const trustedParentPid = session.definition.expectedCommonAncestorPID;
|
|
96
|
+
let foundTrustedParentPid = false;
|
|
97
|
+
for (let i = 0; i < signRequest.callerTree.length; ++i) {
|
|
98
|
+
if (signRequest.callerTree[i].pid === trustedParentPid) {
|
|
99
|
+
foundTrustedParentPid = true;
|
|
100
|
+
break;
|
|
101
|
+
}
|
|
102
|
+
}
|
|
103
|
+
if (!foundTrustedParentPid) {
|
|
104
|
+
return Option.none();
|
|
105
|
+
}
|
|
106
|
+
for (let i = 0; i < session.definition.expectedSignRequests.length; ++i) {
|
|
107
|
+
const { expectedCallerChain } = session.definition.expectedSignRequests[i];
|
|
108
|
+
let j = 0;
|
|
109
|
+
for (; j < expectedCallerChain.length; ++j) {
|
|
110
|
+
const expected = expectedCallerChain[j];
|
|
111
|
+
const actual = signRequest.callerTree[j];
|
|
112
|
+
if (actual.command !== expected.command ||
|
|
113
|
+
Option.getOrNull(actual.directory) !== Option.getOrNull(expected.directory)) {
|
|
114
|
+
break;
|
|
115
|
+
}
|
|
116
|
+
}
|
|
117
|
+
if (j === expectedCallerChain.length) {
|
|
118
|
+
// Found match
|
|
119
|
+
return Option.some({ index: i });
|
|
120
|
+
}
|
|
121
|
+
}
|
|
122
|
+
return Option.none();
|
|
123
|
+
}
|
|
124
|
+
*cacheKey(keyPair, credentialId, cacheMinutes) {
|
|
125
|
+
const pubkey = keyPair.pubkey.authorizedKey;
|
|
126
|
+
this.keyCache.set(pubkey, keyPair);
|
|
127
|
+
Effect.runFork(pipe(Effect.sync(() => { this.keyCache.delete(pubkey); }), Effect.andThen(Effect.log(`Cache entry revoked for ${pubkey} (${credentialId.humanReadableName}) after ${cacheMinutes} minutes`)), Effect.delay(`${cacheMinutes} minutes`)));
|
|
128
|
+
yield* Effect.log(`Cached key ${pubkey} (${credentialId.humanReadableName}) for ${cacheMinutes} minutes`);
|
|
129
|
+
}
|
|
130
|
+
*resolveAllSignRequests(session) {
|
|
131
|
+
// By setting it to none here, we technically do allow parallel sessions, the
|
|
132
|
+
// caveat is there's an expectation that all requests for a session are retrieved
|
|
133
|
+
// in a short time frame. In the future we may have a backlog of non matching signing requests
|
|
134
|
+
// and sessions
|
|
135
|
+
this.activeSession = Option.none();
|
|
136
|
+
const credential = new CredentialId(session.credentialId);
|
|
137
|
+
const cachedKeyPair = this.keyCache.get(session.pubkey);
|
|
138
|
+
let prfResult;
|
|
139
|
+
if (cachedKeyPair) {
|
|
140
|
+
yield* Effect.log(`Using cached key for session ${session.id}`);
|
|
141
|
+
prfResult = Result.succeed({ keyPair: cachedKeyPair, credentialId: credential });
|
|
142
|
+
}
|
|
143
|
+
else {
|
|
144
|
+
prfResult = yield* pipe(effunct(prfFlow)(PrfInput.DerivePubkeyForRequests({ session })), Effect.scoped, Effect.provide(this.context), Effect.result);
|
|
145
|
+
if (Result.isSuccess(prfResult)) {
|
|
146
|
+
const { keyPair } = prfResult.success;
|
|
147
|
+
const derivedPubkey = keyPair.pubkey.authorizedKey;
|
|
148
|
+
if (derivedPubkey !== session.pubkey) {
|
|
149
|
+
yield* Effect.log(`PRF derived pubkey ${derivedPubkey} but session expects ${session.pubkey}`);
|
|
150
|
+
prfResult = Result.fail(SessionError.cases.InternalError.make({
|
|
151
|
+
reason: `PRF derived pubkey ${derivedPubkey} does not match session pubkey ${session.pubkey}`
|
|
152
|
+
}));
|
|
153
|
+
}
|
|
154
|
+
else if (prfResult.success.cacheMinutes !== undefined) {
|
|
155
|
+
yield* this.cacheKey(keyPair, credential, prfResult.success.cacheMinutes);
|
|
156
|
+
}
|
|
157
|
+
}
|
|
158
|
+
}
|
|
159
|
+
session.completed = true;
|
|
160
|
+
if (Result.isFailure(prfResult)) {
|
|
161
|
+
yield* Effect.log(`PRF flow failed for session ${session.id}: ${JSON.stringify(prfResult.failure)}`);
|
|
162
|
+
}
|
|
163
|
+
else {
|
|
164
|
+
yield* Effect.log(`PRF flow succeeded for session ${session.id}`);
|
|
165
|
+
}
|
|
166
|
+
let totalSigned = 0;
|
|
167
|
+
for (const req of session.receivedSignRequests) {
|
|
168
|
+
if (Result.isSuccess(prfResult)) {
|
|
169
|
+
const { keyPair } = prfResult.success;
|
|
170
|
+
const sigResult = yield* Effect.result(Effect.try({
|
|
171
|
+
try: () => keyPair.sign(req.signRequest.data),
|
|
172
|
+
catch: (e) => SessionError.cases.InternalError.make({ reason: String(e) }),
|
|
173
|
+
}));
|
|
174
|
+
if (Result.isSuccess(sigResult)) {
|
|
175
|
+
totalSigned++;
|
|
176
|
+
yield* Effect.log(`(${totalSigned}/${session.receivedSignRequests.length}) Signed ${req.signRequest.data.length} bytes for session ${session.id}`);
|
|
177
|
+
yield* Deferred.succeed(req.deferredResponse, sigResult.success);
|
|
178
|
+
}
|
|
179
|
+
else {
|
|
180
|
+
yield* Effect.log(`Signing failed for session ${session.id}: ${JSON.stringify(sigResult.failure)}`);
|
|
181
|
+
yield* Deferred.fail(req.deferredResponse, sigResult.failure);
|
|
182
|
+
}
|
|
183
|
+
}
|
|
184
|
+
else {
|
|
185
|
+
yield* Deferred.fail(req.deferredResponse, prfResult.failure);
|
|
186
|
+
}
|
|
187
|
+
}
|
|
188
|
+
}
|
|
189
|
+
*sign(signRequest) {
|
|
190
|
+
const { pubkey, callerTree } = signRequest;
|
|
191
|
+
// On the no active session case. We create one.
|
|
192
|
+
if (Option.isNone(this.activeSession)) {
|
|
193
|
+
yield* Effect.log(`Received sign request when no session exists. Chain:\n${renderCallerTree(callerTree.slice(-3))}`);
|
|
194
|
+
yield* this.startSession({
|
|
195
|
+
expectedCommonAncestorPID: callerTree[callerTree.length - 1].pid,
|
|
196
|
+
expectedSignRequests: [{
|
|
197
|
+
expectedCallerChain: callerTree
|
|
198
|
+
}],
|
|
199
|
+
timeoutSeconds: DEFAULT_SESSION_TIMEOUT_SECONDS,
|
|
200
|
+
pubkey: pubkey.authorizedKey
|
|
201
|
+
});
|
|
202
|
+
}
|
|
203
|
+
if (Option.isNone(this.activeSession)) {
|
|
204
|
+
return yield* Effect.fail(SessionError.cases.InternalError.make({
|
|
205
|
+
reason: "Invariant violation. Active session not set after calling startSession"
|
|
206
|
+
}));
|
|
207
|
+
}
|
|
208
|
+
const session = this.activeSession.value;
|
|
209
|
+
const maybeIndex = this.isSignRequestInSession(session, signRequest);
|
|
210
|
+
if (Option.isNone(maybeIndex)) {
|
|
211
|
+
// TODO: we could instead create a queue of backed-up sign requests and give
|
|
212
|
+
// a very short window for each session to collect its requests.
|
|
213
|
+
return yield* Effect.fail(SessionError.cases.InterruptingSession.make({
|
|
214
|
+
id: session.id
|
|
215
|
+
}));
|
|
216
|
+
}
|
|
217
|
+
const { index } = maybeIndex.value;
|
|
218
|
+
const deferredResponse = yield* Deferred.make();
|
|
219
|
+
session.receivedSignRequests[index] = {
|
|
220
|
+
deferredResponse,
|
|
221
|
+
signRequest
|
|
222
|
+
};
|
|
223
|
+
session.totalReceived++;
|
|
224
|
+
const totalExpected = session.definition.expectedSignRequests.length;
|
|
225
|
+
yield* Effect.log(`Got matching signature request. ${totalExpected - session.totalReceived} remaining`);
|
|
226
|
+
if (session.totalReceived > totalExpected) {
|
|
227
|
+
return yield* Effect.fail(SessionError.cases.InternalError.make({
|
|
228
|
+
reason: `Only expected to get ${totalExpected} signature requests. Got ${session.totalReceived} instead`
|
|
229
|
+
}));
|
|
230
|
+
}
|
|
231
|
+
if (session.totalReceived === totalExpected) {
|
|
232
|
+
yield* Effect.log(`All ${totalExpected} expected signature requests received for session ${session.id}. Initiating passkey verification.`);
|
|
233
|
+
yield* this.resolveAllSignRequests(session);
|
|
234
|
+
}
|
|
235
|
+
return yield* Deferred.await(deferredResponse);
|
|
236
|
+
}
|
|
237
|
+
*setup(input) {
|
|
238
|
+
const { keyPair, credentialId: derivedCredentialId, cacheMinutes } = yield* pipe(effunct(prfFlow)(PrfInput.DerivePubkeyOnly({ pubkey: input.pubkey, credentialId: input.credentialId, username: input.username })), Effect.scoped, Effect.provide(this.context));
|
|
239
|
+
const derivedPubkey = keyPair.pubkey.authorizedKey;
|
|
240
|
+
if (Option.isSome(input.pubkey) && derivedPubkey !== input.pubkey.value) {
|
|
241
|
+
return yield* Effect.fail(SessionError.cases.PubkeyMismatch.make({ expected: input.pubkey.value, derived: derivedPubkey }));
|
|
242
|
+
}
|
|
243
|
+
yield* Effect.log(`Derived key for ${derivedCredentialId.humanReadableName} (${derivedCredentialId.base58})`);
|
|
244
|
+
yield* pipe(effunct(this.dependencies.KeyMapStore.addKey)(keyPair.pubkey, derivedCredentialId.base58), Effect.mapError(reason => SessionError.cases.InternalError.make({ reason })));
|
|
245
|
+
if (cacheMinutes !== undefined) {
|
|
246
|
+
yield* this.cacheKey(keyPair, derivedCredentialId, cacheMinutes);
|
|
247
|
+
}
|
|
248
|
+
return { pubkey: derivedPubkey, credentialId: derivedCredentialId.base58 };
|
|
249
|
+
}
|
|
250
|
+
static makeRpcLayer() {
|
|
251
|
+
const writePortFile = Layer.effectDiscard(Effect.gen(function* () {
|
|
252
|
+
const server = yield* HttpServer.HttpServer;
|
|
253
|
+
if (server.address._tag !== "TcpAddress") {
|
|
254
|
+
return Effect.die(`Invariant server address of ${JSON.stringify(server.address)}`);
|
|
255
|
+
}
|
|
256
|
+
writeFileSync(AGENT_PORT_FILE_PATH, server.address.port.toString());
|
|
257
|
+
}));
|
|
258
|
+
return pipe(RpcServer.layerHttp({ group: AgentRpcGroup, path: "/rpc", protocol: "http" }), Layer.provideMerge(AgentRpcGroup.toLayer({
|
|
259
|
+
GetVersion: () => Effect.succeed({ version: CURRENT_VERSION }),
|
|
260
|
+
StartSession: using(Session).startSession,
|
|
261
|
+
Setup: using(Session).setup,
|
|
262
|
+
})), HttpRouter.serve, Layer.provideMerge(writePortFile), Layer.provideMerge(BunHttpServer.layer({ port: 0 })), Layer.provideMerge(RpcSerialization.layerJson), Layer.provideMerge(this.Layer));
|
|
263
|
+
}
|
|
264
|
+
}
|
|
265
|
+
//# sourceMappingURL=impl.js.map
|