@ozyman42/ozy-cli 0.4.9-linux-x64.0 → 0.4.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (213) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +8 -0
  3. package/bin/ozy +209 -0
  4. package/bin/ozy-signing-agent +209 -0
  5. package/bin/ozy-ssh-keygen +209 -0
  6. package/bin/ozy-virtual-security-key +209 -0
  7. package/dist/commands/git/hosts.js +18 -0
  8. package/dist/commands/git/hosts.js.map +1 -0
  9. package/dist/commands/git/index.js +8 -0
  10. package/dist/commands/git/index.js.map +1 -0
  11. package/dist/commands/git/setup.js +145 -0
  12. package/dist/commands/git/setup.js.map +1 -0
  13. package/dist/commands/index.js +13 -0
  14. package/dist/commands/index.js.map +1 -0
  15. package/dist/commands/npm/index.js +7 -0
  16. package/dist/commands/npm/index.js.map +1 -0
  17. package/dist/commands/npm/setup/git-remote.js +66 -0
  18. package/dist/commands/npm/setup/git-remote.js.map +1 -0
  19. package/dist/commands/npm/setup/index.js +168 -0
  20. package/dist/commands/npm/setup/index.js.map +1 -0
  21. package/dist/commands/npm/setup/npm-auth.js +62 -0
  22. package/dist/commands/npm/setup/npm-auth.js.map +1 -0
  23. package/dist/commands/npm/setup/package-json-validate.js +47 -0
  24. package/dist/commands/npm/setup/package-json-validate.js.map +1 -0
  25. package/dist/commands/npm/setup/package-registry.js +20 -0
  26. package/dist/commands/npm/setup/package-registry.js.map +1 -0
  27. package/dist/commands/npm/setup/setup.test.js +95 -0
  28. package/dist/commands/npm/setup/setup.test.js.map +1 -0
  29. package/dist/commands/npm/setup/trusted-publishing.js +84 -0
  30. package/dist/commands/npm/setup/trusted-publishing.js.map +1 -0
  31. package/dist/commands/npm/setup/workflow.js +19 -0
  32. package/dist/commands/npm/setup/workflow.js.map +1 -0
  33. package/dist/commands/ssh/get-sk-credential.js +104 -0
  34. package/dist/commands/ssh/get-sk-credential.js.map +1 -0
  35. package/dist/commands/ssh/index.js +7 -0
  36. package/dist/commands/ssh/index.js.map +1 -0
  37. package/dist/commands/upgrade.js +236 -0
  38. package/dist/commands/upgrade.js.map +1 -0
  39. package/dist/common/command.js +15 -0
  40. package/dist/common/command.js.map +1 -0
  41. package/dist/common/constants.js +25 -0
  42. package/dist/common/constants.js.map +1 -0
  43. package/dist/common/effective-modules-extensions.js +13 -0
  44. package/dist/common/effective-modules-extensions.js.map +1 -0
  45. package/dist/common/log.js +4 -0
  46. package/dist/common/log.js.map +1 -0
  47. package/dist/common/render-caller-tree.js +20 -0
  48. package/dist/common/render-caller-tree.js.map +1 -0
  49. package/dist/entrypoints/ozy-signing-agent.js +48 -0
  50. package/dist/entrypoints/ozy-signing-agent.js.map +1 -0
  51. package/dist/entrypoints/ozy-ssh-keygen.js +9 -0
  52. package/dist/entrypoints/ozy-ssh-keygen.js.map +1 -0
  53. package/dist/entrypoints/ozy-virtual-security-key.js +18 -0
  54. package/dist/entrypoints/ozy-virtual-security-key.js.map +1 -0
  55. package/dist/entrypoints/ozy.js +3 -0
  56. package/dist/entrypoints/ozy.js.map +1 -0
  57. package/dist/index.js +2 -0
  58. package/dist/index.js.map +1 -0
  59. package/dist/internal/thing.js +4 -0
  60. package/dist/internal/thing.js.map +1 -0
  61. package/dist/modules/cli/agent-client/impl.js +109 -0
  62. package/dist/modules/cli/agent-client/impl.js.map +1 -0
  63. package/dist/modules/cli/agent-client/interface.js +11 -0
  64. package/dist/modules/cli/agent-client/interface.js.map +1 -0
  65. package/dist/modules/cli/git/impl.js +124 -0
  66. package/dist/modules/cli/git/impl.js.map +1 -0
  67. package/dist/modules/cli/git/interface.js +3 -0
  68. package/dist/modules/cli/git/interface.js.map +1 -0
  69. package/dist/modules/cli/git/submodule/fix.js +257 -0
  70. package/dist/modules/cli/git/submodule/fix.js.map +1 -0
  71. package/dist/modules/cli/git/submodule/git-state.js +154 -0
  72. package/dist/modules/cli/git/submodule/git-state.js.map +1 -0
  73. package/dist/modules/cli/git/submodule/gitmodules.js +113 -0
  74. package/dist/modules/cli/git/submodule/gitmodules.js.map +1 -0
  75. package/dist/modules/cli/git/submodule/printer.js +232 -0
  76. package/dist/modules/cli/git/submodule/printer.js.map +1 -0
  77. package/dist/modules/cli/git/submodule/resolve-git-dir.js +16 -0
  78. package/dist/modules/cli/git/submodule/resolve-git-dir.js.map +1 -0
  79. package/dist/modules/cli/github/impl.js +137 -0
  80. package/dist/modules/cli/github/impl.js.map +1 -0
  81. package/dist/modules/cli/github/interface.js +2 -0
  82. package/dist/modules/cli/github/interface.js.map +1 -0
  83. package/dist/modules/cli/index.js +9 -0
  84. package/dist/modules/cli/index.js.map +1 -0
  85. package/dist/modules/common/crypto/impl.js +133 -0
  86. package/dist/modules/common/crypto/impl.js.map +1 -0
  87. package/dist/modules/common/crypto/interface.js +2 -0
  88. package/dist/modules/common/crypto/interface.js.map +1 -0
  89. package/dist/modules/common/index.js +10 -0
  90. package/dist/modules/common/index.js.map +1 -0
  91. package/dist/modules/common/kep-map-store/impl.js +42 -0
  92. package/dist/modules/common/kep-map-store/impl.js.map +1 -0
  93. package/dist/modules/common/kep-map-store/interface.js +2 -0
  94. package/dist/modules/common/kep-map-store/interface.js.map +1 -0
  95. package/dist/modules/common/os-platform/caller-info.js +132 -0
  96. package/dist/modules/common/os-platform/caller-info.js.map +1 -0
  97. package/dist/modules/common/os-platform/impl.js +95 -0
  98. package/dist/modules/common/os-platform/impl.js.map +1 -0
  99. package/dist/modules/common/os-platform/interface.js +2 -0
  100. package/dist/modules/common/os-platform/interface.js.map +1 -0
  101. package/dist/modules/common/os-platform/virtual-hid/index.js +12 -0
  102. package/dist/modules/common/os-platform/virtual-hid/index.js.map +1 -0
  103. package/dist/modules/common/os-platform/virtual-hid/linux.js +5 -0
  104. package/dist/modules/common/os-platform/virtual-hid/linux.js.map +1 -0
  105. package/dist/modules/common/os-platform/virtual-hid/mac.js +119 -0
  106. package/dist/modules/common/os-platform/virtual-hid/mac.js.map +1 -0
  107. package/dist/modules/common/os-platform/virtual-hid/windows.js +5 -0
  108. package/dist/modules/common/os-platform/virtual-hid/windows.js.map +1 -0
  109. package/dist/modules/common/ssh-config/impl.js +116 -0
  110. package/dist/modules/common/ssh-config/impl.js.map +1 -0
  111. package/dist/modules/common/ssh-config/interface.js +10 -0
  112. package/dist/modules/common/ssh-config/interface.js.map +1 -0
  113. package/dist/modules/ssh-agent/index.js +8 -0
  114. package/dist/modules/ssh-agent/index.js.map +1 -0
  115. package/dist/modules/ssh-agent/session/impl.js +265 -0
  116. package/dist/modules/ssh-agent/session/impl.js.map +1 -0
  117. package/dist/modules/ssh-agent/session/interface-rpc.js +20 -0
  118. package/dist/modules/ssh-agent/session/interface-rpc.js.map +1 -0
  119. package/dist/modules/ssh-agent/session/interface.js +32 -0
  120. package/dist/modules/ssh-agent/session/interface.js.map +1 -0
  121. package/dist/modules/ssh-agent/session/passkey-prf-page.js +204 -0
  122. package/dist/modules/ssh-agent/session/passkey-prf-page.js.map +1 -0
  123. package/dist/modules/ssh-agent/session/prf-flow.js +103 -0
  124. package/dist/modules/ssh-agent/session/prf-flow.js.map +1 -0
  125. package/dist/modules/ssh-agent/ssh-agent/impl.js +117 -0
  126. package/dist/modules/ssh-agent/ssh-agent/impl.js.map +1 -0
  127. package/dist/modules/ssh-agent/ssh-agent/interface.js +2 -0
  128. package/dist/modules/ssh-agent/ssh-agent/interface.js.map +1 -0
  129. package/dist/scripts/build.js +444 -0
  130. package/dist/scripts/build.js.map +1 -0
  131. package/dist/scripts/check-npm-version.js +8 -0
  132. package/dist/scripts/check-npm-version.js.map +1 -0
  133. package/dist/scripts/constants.js +12 -0
  134. package/dist/scripts/constants.js.map +1 -0
  135. package/dist/scripts/kill-existing-agent.js +21 -0
  136. package/dist/scripts/kill-existing-agent.js.map +1 -0
  137. package/dist/scripts/publish.js +83 -0
  138. package/dist/scripts/publish.js.map +1 -0
  139. package/install.js +209 -0
  140. package/package.json +58 -11
  141. package/src/commands/git/hosts.ts +20 -0
  142. package/src/commands/git/index.ts +9 -0
  143. package/src/commands/git/setup.ts +182 -0
  144. package/src/commands/index.ts +15 -0
  145. package/src/commands/npm/index.ts +8 -0
  146. package/src/commands/npm/setup/git-remote.ts +78 -0
  147. package/src/commands/npm/setup/index.ts +189 -0
  148. package/src/commands/npm/setup/npm-auth.ts +58 -0
  149. package/src/commands/npm/setup/package-json-validate.ts +68 -0
  150. package/src/commands/npm/setup/package-registry.ts +24 -0
  151. package/src/commands/npm/setup/publish-workflow.yml +35 -0
  152. package/src/commands/npm/setup/setup.test.ts +117 -0
  153. package/src/commands/npm/setup/trusted-publishing.ts +106 -0
  154. package/src/commands/npm/setup/workflow.ts +20 -0
  155. package/src/commands/ssh/get-sk-credential.ts +110 -0
  156. package/src/commands/ssh/index.ts +8 -0
  157. package/src/commands/upgrade.ts +261 -0
  158. package/src/common/command.ts +16 -0
  159. package/src/common/constants.ts +26 -0
  160. package/src/common/effective-modules-extensions.ts +24 -0
  161. package/src/common/log.ts +3 -0
  162. package/src/common/render-caller-tree.ts +22 -0
  163. package/src/entrypoints/ozy-signing-agent.ts +48 -0
  164. package/src/entrypoints/ozy-ssh-keygen.ts +10 -0
  165. package/src/entrypoints/ozy-virtual-security-key.ts +21 -0
  166. package/src/entrypoints/ozy.ts +2 -0
  167. package/src/index.ts +1 -0
  168. package/src/internal/thing.ts +3 -0
  169. package/src/modules/cli/agent-client/impl.ts +152 -0
  170. package/src/modules/cli/agent-client/interface.ts +17 -0
  171. package/src/modules/cli/git/impl.ts +133 -0
  172. package/src/modules/cli/git/interface.ts +23 -0
  173. package/src/modules/cli/git/submodule/fix.ts +298 -0
  174. package/src/modules/cli/git/submodule/git-state.ts +217 -0
  175. package/src/modules/cli/git/submodule/gitmodules.ts +126 -0
  176. package/src/modules/cli/git/submodule/printer.ts +256 -0
  177. package/src/modules/cli/git/submodule/resolve-git-dir.ts +14 -0
  178. package/src/modules/cli/github/impl.ts +169 -0
  179. package/src/modules/cli/github/interface.ts +29 -0
  180. package/src/modules/cli/index.ts +16 -0
  181. package/src/modules/common/crypto/impl.ts +173 -0
  182. package/src/modules/common/crypto/interface.ts +20 -0
  183. package/src/modules/common/index.ts +19 -0
  184. package/src/modules/common/kep-map-store/impl.ts +47 -0
  185. package/src/modules/common/kep-map-store/interface.ts +9 -0
  186. package/src/modules/common/os-platform/caller-info.ts +152 -0
  187. package/src/modules/common/os-platform/impl.ts +91 -0
  188. package/src/modules/common/os-platform/interface.ts +16 -0
  189. package/src/modules/common/os-platform/virtual-hid/index.ts +12 -0
  190. package/src/modules/common/os-platform/virtual-hid/linux.ts +7 -0
  191. package/src/modules/common/os-platform/virtual-hid/mac.ts +150 -0
  192. package/src/modules/common/os-platform/virtual-hid/windows.ts +7 -0
  193. package/src/modules/common/ssh-config/impl.ts +130 -0
  194. package/src/modules/common/ssh-config/interface.ts +33 -0
  195. package/src/modules/ssh-agent/index.ts +13 -0
  196. package/src/modules/ssh-agent/session/agent-notes.md +210 -0
  197. package/src/modules/ssh-agent/session/design.md +2 -0
  198. package/src/modules/ssh-agent/session/html-refactor.md +23 -0
  199. package/src/modules/ssh-agent/session/impl.ts +328 -0
  200. package/src/modules/ssh-agent/session/interface-rpc.ts +24 -0
  201. package/src/modules/ssh-agent/session/interface.ts +62 -0
  202. package/src/modules/ssh-agent/session/passkey-prf-page.ts +224 -0
  203. package/src/modules/ssh-agent/session/prf-flow.ts +152 -0
  204. package/src/modules/ssh-agent/ssh-agent/impl.ts +136 -0
  205. package/src/modules/ssh-agent/ssh-agent/interface.ts +9 -0
  206. package/src/scripts/build.ts +559 -0
  207. package/src/scripts/check-npm-version.ts +7 -0
  208. package/src/scripts/command-launcher.js.ejs +186 -0
  209. package/src/scripts/constants.ts +11 -0
  210. package/src/scripts/kill-existing-agent.ts +22 -0
  211. package/src/scripts/publish.ts +89 -0
  212. package/src/scripts/windows-bin-shims.md +1104 -0
  213. package/multi-call-binary +0 -0
@@ -0,0 +1 @@
1
+ {"version":3,"file":"impl.js","sourceRoot":"","sources":["../../../../../../../src/modules/common/os-platform/impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAkB,MAAM,mBAAmB,CAAC;AAE1E,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAE/C,SAAS,kBAAkB,CAAC,GAAW;IACrC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC3D,2EAA2E;IAC3E,IAAI,SAAS;QAAE,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IACnD,gCAAgC;IAChC,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,OAAe;IACxD,OAAO,MAAM,CAAC,GAAG,CAAC;QAChB,GAAG,EAAE,GAAG,EAAE;YACR,IAAI,SAAS,EAAE,CAAC;gBACd,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACjH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;oBACvB,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACvE,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,mCAAmC,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;KACvG,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAyE,EAAE,YAAqD;IAC7J,OAAO,CAAC,MAAkB,EAAE,EAAE;QAC5B,IAAI,WAA4B,CAAC;QACjC,IAAI,CAAC;YACH,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,kFAAkF,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC/B,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;YAC5E,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,oCAAoC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtF,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,cAAe,SAAQ,YAAY,CAAC,aAAa,CAAC,UAAU,CAAC;IACxE,iBAAiB,CAAC,GAAW,IAAI,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjE,mBAAmB,CAAC,IAAY,EAAE,OAAe,IAAI,OAAO,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC,iBAAiB,CAAC,UAAkB,EAAE,MAAyE;QAC9G,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACvB,GAAG,EAAE,GAAG,EAAE;gBACR,IAAI,UAAU,CAAC,UAAU,CAAC;oBAAE,UAAU,CAAC,UAAU,CAAC,CAAC;gBACnD,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,QAAQ,GAAG,gBAAgB,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;oBACtE,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,qBAAqB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;wBACvE,MAAM,SAAS,GAAI,MAAc,CAAC,OAAO,EAAE,SAA+B,CAAC;wBAC3E,IAAI,SAAS,IAAI,IAAI;4BAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;wBAC3G,OAAO,yBAAyB,CAAC,SAAS,CAAC,CAAC;oBAC9C,CAAC,CAAC,CAAC,CAAC;oBACJ,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,qBAAqB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;wBACvE,MAAM,EAAE,GAAI,MAAc,CAAC,OAAO,EAAE,EAAwB,CAAC;wBAC7D,IAAI,EAAE,IAAI,IAAI;4BAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;wBAC3F,OAAO,sBAAsB,CAAC,EAAE,CAAC,CAAC;oBACpC,CAAC,CAAC,CAAC,CAAC;oBACJ,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,oCAAoC,UAAU,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SAC9G,CAAC,CAAC;IACL,CAAC;IACD,kBAAkB,CAAC,SAAkD,IAAI,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;CACjH"}
@@ -0,0 +1,2 @@
1
+ import { Effect } from "effect";
2
+ //# sourceMappingURL=interface.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"interface.js","sourceRoot":"","sources":["../../../../../../../src/modules/common/os-platform/interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC"}
@@ -0,0 +1,12 @@
1
+ import { Effect } from "effect";
2
+ import { registerVirtualHIDMac } from "./mac";
3
+ import { registerVirtualHIDLinux } from "./linux";
4
+ import { registerVirtualHIDWindows } from "./windows";
5
+ export function registerVirtualHID(onMessage) {
6
+ if (process.platform === 'darwin')
7
+ return registerVirtualHIDMac(onMessage);
8
+ if (process.platform === 'win32')
9
+ return registerVirtualHIDWindows(onMessage);
10
+ return registerVirtualHIDLinux(onMessage);
11
+ }
12
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../../src/modules/common/os-platform/virtual-hid/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,OAAO,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAEtD,MAAM,UAAU,kBAAkB,CAChC,SAAkD;IAElD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAC9E,OAAO,uBAAuB,CAAC,SAAS,CAAC,CAAC;AAC5C,CAAC"}
@@ -0,0 +1,5 @@
1
+ import { Effect } from "effect";
2
+ export function registerVirtualHIDLinux(_onMessage) {
3
+ return Effect.fail('registerVirtualHID is not yet supported on Linux');
4
+ }
5
+ //# sourceMappingURL=linux.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"linux.js","sourceRoot":"","sources":["../../../../../../../../src/modules/common/os-platform/virtual-hid/linux.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,MAAM,UAAU,uBAAuB,CACrC,UAAmD;IAEnD,OAAO,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;AACzE,CAAC"}
@@ -0,0 +1,119 @@
1
+ import { Effect, Option, pipe } from "effect";
2
+ import { JSCallback, dlopen, FFIType, ptr, toArrayBuffer } from "bun:ffi";
3
+ // FIDO Alliance usage page (0xF1D0), 64-byte in/out reports, no report IDs
4
+ const FIDO2_HID_DESCRIPTOR = new Uint8Array([
5
+ 0x06, 0xD0, 0xF1, // Usage Page (FIDO Alliance 0xF1D0, little-endian)
6
+ 0x09, 0x01, // Usage (U2F HID Authenticator Device)
7
+ 0xA1, 0x01, // Collection (Application)
8
+ 0x09, 0x20, // Usage (Input report data)
9
+ 0x15, 0x00, // Logical Minimum (0)
10
+ 0x26, 0xFF, 0x00, // Logical Maximum (255)
11
+ 0x75, 0x08, // Report Size (8 bits)
12
+ 0x95, 0x40, // Report Count (64)
13
+ 0x81, 0x02, // Input (Data, Variable, Absolute)
14
+ 0x09, 0x21, // Usage (Output report data)
15
+ 0x15, 0x00, // Logical Minimum (0)
16
+ 0x26, 0xFF, 0x00, // Logical Maximum (255)
17
+ 0x75, 0x08, // Report Size (8 bits)
18
+ 0x95, 0x40, // Report Count (64)
19
+ 0x91, 0x02, // Output (Data, Variable, Absolute)
20
+ 0xC0, // End Collection
21
+ ]);
22
+ const kIOHIDReportTypeOutput = 1;
23
+ const kIOReturnSuccess = 0;
24
+ const kCFStringEncodingUTF8 = 0x08000100;
25
+ const kCFPropertyListImmutable = 0;
26
+ // Kept at module scope to prevent GC while the virtual device is running
27
+ let _vhidCallback = null;
28
+ _vhidCallback;
29
+ const fromPtr = (label, p) => pipe(Option.fromNullishOr(p), Effect.fromOption, Effect.mapError(() => `${label} returned NULL`));
30
+ // Build the device properties as an XML plist. CFPropertyListCreateWithData parses this
31
+ // into a fully-initialized CFDictionary (with correct hash/equal callbacks), avoiding
32
+ // the need to pass raw CFDictionaryKeyCallBacks structs via FFI.
33
+ function buildDevicePropertiesPlist() {
34
+ const descriptorB64 = Buffer.from(FIDO2_HID_DESCRIPTOR).toString('base64');
35
+ const xml = [
36
+ '<?xml version="1.0" encoding="UTF-8"?>',
37
+ '<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">',
38
+ '<plist version="1.0">',
39
+ '<dict>',
40
+ ' <key>ReportDescriptor</key>',
41
+ ` <data>${descriptorB64}</data>`,
42
+ ' <key>VendorID</key>',
43
+ ' <integer>4617</integer>', // 0x1209 - pid.codes open-source VID
44
+ ' <key>ProductID</key>',
45
+ ' <integer>1</integer>',
46
+ ' <key>VersionNumber</key>',
47
+ ' <integer>256</integer>', // 0x0100
48
+ ' <key>Product</key>',
49
+ ' <string>Ozy Virtual FIDO2 Key</string>',
50
+ '</dict>',
51
+ '</plist>',
52
+ ].join('\n');
53
+ return new TextEncoder().encode(xml);
54
+ }
55
+ export function registerVirtualHIDMac(onMessage) {
56
+ return Effect.gen(function* () {
57
+ console.log('[vhid] loading frameworks');
58
+ const IOKit = yield* Effect.try({
59
+ try: () => dlopen('/System/Library/Frameworks/IOKit.framework/IOKit', {
60
+ IOHIDUserDeviceCreate: { args: [FFIType.ptr, FFIType.ptr], returns: FFIType.ptr },
61
+ IOHIDUserDeviceRegisterSetReportCallback: { args: [FFIType.ptr, FFIType.ptr, FFIType.ptr], returns: FFIType.void },
62
+ IOHIDUserDeviceScheduleWithRunLoop: { args: [FFIType.ptr, FFIType.ptr, FFIType.ptr], returns: FFIType.void },
63
+ IOHIDUserDeviceHandleReport: { args: [FFIType.ptr, FFIType.ptr, FFIType.i64], returns: FFIType.i32 },
64
+ }),
65
+ catch: (e) => `Failed to load IOKit: ${e}`,
66
+ });
67
+ const CF = yield* Effect.try({
68
+ try: () => dlopen('/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation', {
69
+ CFRunLoopGetCurrent: { args: [], returns: FFIType.ptr },
70
+ CFRunLoopRunInMode: { args: [FFIType.ptr, FFIType.f64, FFIType.bool], returns: FFIType.i32 },
71
+ CFStringCreateWithCString: { args: [FFIType.ptr, FFIType.ptr, FFIType.u32], returns: FFIType.ptr },
72
+ CFDataCreate: { args: [FFIType.ptr, FFIType.ptr, FFIType.i64], returns: FFIType.ptr },
73
+ CFPropertyListCreateWithData: { args: [FFIType.ptr, FFIType.ptr, FFIType.u64, FFIType.ptr, FFIType.ptr], returns: FFIType.ptr },
74
+ CFRelease: { args: [FFIType.ptr], returns: FFIType.void },
75
+ }),
76
+ catch: (e) => `Failed to load CoreFoundation: ${e}`,
77
+ });
78
+ console.log('[vhid] frameworks loaded');
79
+ const encoder = new TextEncoder();
80
+ const makeCFString = (s) =>
81
+ // TextEncoder gives a Uint8Array with its own ArrayBuffer (byteOffset=0, pool-safe)
82
+ fromPtr(`CFStringCreateWithCString("${s}")`, CF.symbols.CFStringCreateWithCString(null, ptr(encoder.encode(s + '\0')), kCFStringEncodingUTF8));
83
+ const makeCFData = (data) => fromPtr('CFDataCreate', CF.symbols.CFDataCreate(null, ptr(data), BigInt(data.length)));
84
+ console.log('[vhid] building device properties plist');
85
+ const plistBytes = buildDevicePropertiesPlist();
86
+ const plistData = yield* makeCFData(plistBytes);
87
+ const dict = yield* fromPtr('CFPropertyListCreateWithData', CF.symbols.CFPropertyListCreateWithData(null, plistData, BigInt(kCFPropertyListImmutable), null, null));
88
+ CF.symbols.CFRelease(plistData);
89
+ console.log('[vhid] device properties dict =', dict);
90
+ console.log('[vhid] creating IOHIDUserDevice');
91
+ const device = yield* fromPtr('IOHIDUserDeviceCreate', IOKit.symbols.IOHIDUserDeviceCreate(null, dict));
92
+ CF.symbols.CFRelease(dict);
93
+ console.log('[vhid] IOHIDUserDeviceCreate =', device);
94
+ const callback = yield* Effect.try({
95
+ try: () => new JSCallback((_refcon, _result, _sender, type, _reportID, report, reportLength) => {
96
+ if (type !== kIOHIDReportTypeOutput)
97
+ return kIOReturnSuccess;
98
+ const incoming = Buffer.from(toArrayBuffer(report, 0, reportLength));
99
+ console.log(`[vhid] received ${incoming.length} bytes: ${incoming.toString('hex')}`);
100
+ Effect.runPromise(onMessage(incoming)).then(response => {
101
+ const responseBuf = new Uint8Array(64);
102
+ response.copy(Buffer.from(responseBuf.buffer), 0, 0, Math.min(response.length, 64));
103
+ IOKit.symbols.IOHIDUserDeviceHandleReport(device, ptr(responseBuf), BigInt(responseBuf.length));
104
+ }).catch(() => { });
105
+ return kIOReturnSuccess;
106
+ }, { returns: 'i32', args: ['ptr', 'i32', 'ptr', 'i32', 'u32', 'ptr', 'i64'] }),
107
+ catch: (e) => `Failed to create JSCallback: ${e}`,
108
+ });
109
+ _vhidCallback = callback;
110
+ IOKit.symbols.IOHIDUserDeviceRegisterSetReportCallback(device, callback.ptr, null);
111
+ const runLoop = CF.symbols.CFRunLoopGetCurrent();
112
+ const runLoopMode = yield* makeCFString('kCFRunLoopDefaultMode');
113
+ IOKit.symbols.IOHIDUserDeviceScheduleWithRunLoop(device, runLoop, runLoopMode);
114
+ console.log('[vhid] virtual FIDO2 device active, pumping run loop');
115
+ // Pump CFRunLoop from Bun's libuv event loop without blocking
116
+ setInterval(() => CF.symbols.CFRunLoopRunInMode(runLoopMode, 0.0, false), 10);
117
+ });
118
+ }
119
+ //# sourceMappingURL=mac.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"mac.js","sourceRoot":"","sources":["../../../../../../../../src/modules/common/os-platform/virtual-hid/mac.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAG1E,2EAA2E;AAC3E,MAAM,oBAAoB,GAAG,IAAI,UAAU,CAAC;IAC1C,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,mDAAmD;IACrE,IAAI,EAAE,IAAI,EAAQ,uCAAuC;IACzD,IAAI,EAAE,IAAI,EAAQ,2BAA2B;IAC7C,IAAI,EAAE,IAAI,EAAQ,8BAA8B;IAChD,IAAI,EAAE,IAAI,EAAQ,wBAAwB;IAC1C,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,0BAA0B;IAC5C,IAAI,EAAE,IAAI,EAAQ,yBAAyB;IAC3C,IAAI,EAAE,IAAI,EAAQ,sBAAsB;IACxC,IAAI,EAAE,IAAI,EAAQ,qCAAqC;IACvD,IAAI,EAAE,IAAI,EAAQ,+BAA+B;IACjD,IAAI,EAAE,IAAI,EAAQ,wBAAwB;IAC1C,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,0BAA0B;IAC5C,IAAI,EAAE,IAAI,EAAQ,yBAAyB;IAC3C,IAAI,EAAE,IAAI,EAAQ,sBAAsB;IACxC,IAAI,EAAE,IAAI,EAAQ,sCAAsC;IACxD,IAAI,EAAc,iBAAiB;CACpC,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,qBAAqB,GAAG,UAAU,CAAC;AACzC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAEnC,yEAAyE;AACzE,IAAI,aAAa,GAAsB,IAAI,CAAC;AAC5C,aAAa,CAAC;AAEd,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,CAAiB,EAAkC,EAAE,CACnF,IAAI,CACF,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EACvB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAChD,CAAC;AAEJ,wFAAwF;AACxF,sFAAsF;AACtF,iEAAiE;AACjE,SAAS,0BAA0B;IACjC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG;QACV,wCAAwC;QACxC,wGAAwG;QACxG,uBAAuB;QACvB,QAAQ;QACR,+BAA+B;QAC/B,WAAW,aAAa,SAAS;QACjC,uBAAuB;QACvB,2BAA2B,EAAI,qCAAqC;QACpE,wBAAwB;QACxB,wBAAwB;QACxB,4BAA4B;QAC5B,0BAA0B,EAAK,SAAS;QACxC,sBAAsB;QACtB,0CAA0C;QAC1C,SAAS;QACT,UAAU;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,SAAkD;IAElD,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QAEzC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC9B,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,kDAAkD,EAAE;gBACpE,qBAAqB,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;gBACjF,wCAAwC,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;gBAClH,kCAAkC,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;gBAC5G,2BAA2B,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;aACrG,CAAC;YACF,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,EAAE;SAC3C,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC3B,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,oEAAoE,EAAE;gBACtF,mBAAmB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;gBACvD,kBAAkB,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;gBAC5F,yBAAyB,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClG,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;gBACrF,4BAA4B,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;gBAC/H,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;aAC1D,CAAC;YACF,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,kCAAkC,CAAC,EAAE;SACpD,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAExC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAElC,MAAM,YAAY,GAAG,CAAC,CAAS,EAAkC,EAAE;QACjE,oFAAoF;QACpF,OAAO,CAAC,8BAA8B,CAAC,IAAI,EACzC,EAAE,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAEtG,MAAM,UAAU,GAAG,CAAC,IAAgB,EAAkC,EAAE,CACtE,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAEzF,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,0BAA0B,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAEhD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,8BAA8B,EACxD,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1G,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAC;QAErD,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,uBAAuB,EAAE,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACxG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,MAAM,CAAC,CAAC;QAEtD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACjC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,UAAU,CACvB,CAAC,OAAe,EAAE,OAAe,EAAE,OAAe,EAAE,IAAY,EAAE,SAAiB,EAAE,MAAc,EAAE,YAAoB,EAAE,EAAE;gBAC3H,IAAI,IAAI,KAAK,sBAAsB;oBAAE,OAAO,gBAAgB,CAAC;gBAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,MAA4B,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;gBAC3F,OAAO,CAAC,GAAG,CAAC,mBAAmB,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACrF,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;oBACrD,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;oBACvC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;oBACpF,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;gBAClG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACnB,OAAO,gBAAgB,CAAC;YAC1B,CAAC,EACD,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAC5E;YACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,gCAAgC,CAAC,EAAE;SAClD,CAAC,CAAC;QACH,aAAa,GAAG,QAAQ,CAAC;QAEzB,KAAK,CAAC,OAAO,CAAC,wCAAwC,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAEnF,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;QACjD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC;QACjE,KAAK,CAAC,OAAO,CAAC,kCAAkC,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAE/E,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QACpE,8DAA8D;QAC9D,WAAW,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC"}
@@ -0,0 +1,5 @@
1
+ import { Effect } from "effect";
2
+ export function registerVirtualHIDWindows(_onMessage) {
3
+ return Effect.fail('registerVirtualHID is not yet supported on Windows');
4
+ }
5
+ //# sourceMappingURL=windows.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"windows.js","sourceRoot":"","sources":["../../../../../../../../src/modules/common/os-platform/virtual-hid/windows.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,MAAM,UAAU,yBAAyB,CACvC,UAAmD;IAEnD,OAAO,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;AAC3E,CAAC"}
@@ -0,0 +1,116 @@
1
+ import * as fs from "node:fs/promises";
2
+ import { join } from "node:path";
3
+ import { writeFileSync } from "node:fs";
4
+ import { Effect, Option, Schema } from "effect";
5
+ import SSHConfig, { LineType } from "ssh-config";
6
+ import expandTilde from "expand-tilde";
7
+ import { implementing } from "effective-modules";
8
+ import { commonModules } from "@/modules/common";
9
+ import { SSHConfigSection } from "./interface";
10
+ const SSH_CONFIG_PATH = "~/.ssh/config";
11
+ const SSH_DIR = "~/.ssh";
12
+ export class SSHConfigImpl extends implementing(commonModules.SSHConfig) {
13
+ *loadSSHConfigRaw() {
14
+ const configPath = expandTilde(SSH_CONFIG_PATH);
15
+ const exists = yield* Effect.promise(() => fs.exists(configPath));
16
+ const text = exists
17
+ ? yield* Effect.tryPromise({
18
+ try: () => fs.readFile(configPath, "utf8"),
19
+ catch: (e) => `Failed to read ssh config at ${configPath}: ${e instanceof Error ? e.message : String(e)}`,
20
+ })
21
+ : "";
22
+ return yield* Effect.try({
23
+ try: () => SSHConfig.parse(text),
24
+ catch: (e) => `ParseError: unable to parse ssh config at ${configPath}\n${e instanceof Error ? e.message : String(e)}`,
25
+ });
26
+ }
27
+ *getSSHConfig() {
28
+ const configPath = expandTilde(SSH_CONFIG_PATH);
29
+ const exists = yield* Effect.promise(() => fs.exists(configPath));
30
+ if (!exists)
31
+ return yield* Effect.fail(`SSHConfigFileMissingError: No file found at ${configPath}`);
32
+ const parsed = yield* this.loadSSHConfigRaw();
33
+ const hosts = {};
34
+ for (const line of parsed) {
35
+ if (line.type === LineType.COMMENT)
36
+ continue;
37
+ const { param, value: host } = line;
38
+ if (param !== "Host")
39
+ return yield* Effect.fail(`EntryNotAHostKeyValuePairError: unexpected top-level entry '${param}=${JSON.stringify(host)}'`);
40
+ if (typeof host !== "string")
41
+ return yield* Effect.fail(`EntryNotAHostKeyValuePairError: Host value is not a string: ${JSON.stringify(host)}`);
42
+ if (!("config" in line))
43
+ return yield* Effect.fail(`EntryNotAHostKeyValuePairError: non-section Host entry '${host}'`);
44
+ if (host in hosts)
45
+ return yield* Effect.fail(`DuplicateHostError: duplicate Host '${host}' in ${configPath}`);
46
+ const kv = {};
47
+ for (const inner of line.config) {
48
+ if (inner.type === LineType.COMMENT)
49
+ continue;
50
+ if (typeof inner.value !== "string")
51
+ return yield* Effect.fail(`MalformedError: Host '${host}' key '${inner.param}' has non-string value`);
52
+ kv[inner.param] = inner.value;
53
+ }
54
+ const section = yield* Schema.decodeUnknownEffect(SSHConfigSection)(kv).pipe(Effect.mapError(e => `MalformedError: malformed section at Host '${host}': ${String(e)}`));
55
+ hosts[host] = section;
56
+ }
57
+ return hosts;
58
+ }
59
+ *writeHost({ section }) {
60
+ const configPath = expandTilde(SSH_CONFIG_PATH);
61
+ const cfg = yield* this.loadSSHConfigRaw();
62
+ const newEntries = Object.entries(section)
63
+ .filter(([, v]) => v !== undefined)
64
+ .map(([k, v]) => ({ type: LineType.DIRECTIVE, before: ' ', param: k, separator: ' ', value: v, after: '\n' }));
65
+ const existingIdx = cfg.findIndex((e) => e.param === "Host" && e.value === section.HostName);
66
+ if (existingIdx >= 0) {
67
+ cfg[existingIdx].config = newEntries;
68
+ }
69
+ else {
70
+ const record = { Host: section.HostName };
71
+ for (const [k, v] of Object.entries(section)) {
72
+ if (v !== undefined)
73
+ record[k] = v;
74
+ }
75
+ cfg.append(record);
76
+ }
77
+ yield* Effect.try({
78
+ try: () => writeFileSync(configPath, SSHConfig.stringify(cfg), { mode: 0o600 }),
79
+ catch: (e) => `Failed to write ssh config: ${e instanceof Error ? e.message : String(e)}`,
80
+ });
81
+ }
82
+ *listPubkeyFiles() {
83
+ const sshDir = expandTilde(SSH_DIR);
84
+ const entries = yield* Effect.tryPromise({
85
+ try: () => fs.readdir(sshDir),
86
+ catch: (e) => `Failed to read ${sshDir}: ${e instanceof Error ? e.message : String(e)}`,
87
+ });
88
+ const pubkeyFiles = entries.filter(f => f.endsWith('.pub'));
89
+ const results = [];
90
+ for (const file of pubkeyFiles) {
91
+ const content = yield* Effect.tryPromise({
92
+ try: () => fs.readFile(join(sshDir, file), 'utf8'),
93
+ catch: (e) => `Failed to read ${file}: ${e instanceof Error ? e.message : String(e)}`,
94
+ });
95
+ results.push({ name: file.slice(0, -'.pub'.length), content: content.trim() });
96
+ }
97
+ return results;
98
+ }
99
+ getPubkeyPath(name) {
100
+ return `${expandTilde(SSH_DIR)}/${name}.pub`;
101
+ }
102
+ *writePubkey({ name, comment, pubkey }) {
103
+ const sshDir = expandTilde(SSH_DIR);
104
+ const pubkeyPath = `${sshDir}/${name}.pub`;
105
+ const content = Option.match(comment, {
106
+ onNone: () => pubkey.authorizedKey,
107
+ onSome: (c) => `${pubkey.authorizedKey} ${c}`,
108
+ });
109
+ yield* Effect.try({
110
+ try: () => writeFileSync(pubkeyPath, content + "\n", { mode: 0o600 }),
111
+ catch: (e) => `Failed to write pubkey to ${pubkeyPath}: ${e instanceof Error ? e.message : String(e)}`,
112
+ });
113
+ return { pubkeyPath };
114
+ }
115
+ }
116
+ //# sourceMappingURL=impl.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"impl.js","sourceRoot":"","sources":["../../../../../../../src/modules/common/ssh-config/impl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,WAAW,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,YAAY,EAAkB,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,OAAO,EAAE,gBAAgB,EAAoF,MAAM,aAAa,CAAC;AAEjI,MAAM,eAAe,GAAG,eAAe,CAAC;AACxC,MAAM,OAAO,GAAG,QAAQ,CAAC;AAEzB,MAAM,OAAO,aAAc,SAAQ,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC;IAC9D,CAAC,gBAAgB;QACvB,MAAM,UAAU,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM;YACjB,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBACvB,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAC1C,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,gCAAgC,UAAU,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;aAC1G,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACvB,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;YAChC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,6CAA6C,UAAU,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SACvH,CAAC,CAAC;IACL,CAAC;IAED,CAAC,YAAY;QACX,MAAM,UAAU,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM;YACT,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,UAAU,EAAE,CAAC,CAAC;QAEzF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE9C,MAAM,KAAK,GAAmB,EAAE,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO;gBAAE,SAAS;YAC7C,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;YACpC,IAAI,KAAK,KAAK,MAAM;gBAClB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,+DAA+D,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7H,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAC1B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,+DAA+D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnH,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC;gBACrB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,IAAI,GAAG,CAAC,CAAC;YAChG,IAAI,IAAI,IAAI,KAAK;gBACf,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,IAAI,QAAQ,UAAU,EAAE,CAAC,CAAC;YAE7F,MAAM,EAAE,GAA2B,EAAE,CAAC;YACtC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO;oBAAE,SAAS;gBAC9C,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;oBACjC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,IAAI,UAAU,KAAK,CAAC,KAAK,wBAAwB,CAAC,CAAC;gBACxG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;YAChC,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAC1E,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,8CAA8C,IAAI,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAC1F,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;QACxB,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,CAAC,SAAS,CAAC,EAAE,OAAO,EAAkB;QACpC,MAAM,UAAU,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;aACvC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAW,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAE5H,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClG,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;YACpB,GAAG,CAAC,WAAW,CAAS,CAAC,MAAM,GAAG,UAAU,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAA2B,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YAClE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,KAAK,SAAS;oBAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACrC,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QAED,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAChB,GAAG,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAC/E,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SAC1F,CAAC,CAAC;IACL,CAAC;IAED,CAAC,eAAe;QACd,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YACvC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;YAC7B,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,MAAM,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SACxF,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAsC,EAAE,CAAC;QACtD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBACvC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC;gBAClD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;aACtF,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,aAAa,CAAC,IAAY;QACxB,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC;IAC/C,CAAC;IAED,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAoB;QACtD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,GAAG,MAAM,IAAI,IAAI,MAAM,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;YACpC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa;YAClC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,aAAa,IAAI,CAAC,EAAE;SAC9C,CAAC,CAAC;QAEH,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAChB,GAAG,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACrE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,6BAA6B,UAAU,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SACvG,CAAC,CAAC;QAEH,OAAO,EAAC,UAAU,EAAC,CAAC;IACtB,CAAC;CACF"}
@@ -0,0 +1,10 @@
1
+ import { Schema } from "effect";
2
+ export const SSHConfigSection = Schema.Struct({
3
+ HostName: Schema.String,
4
+ User: Schema.String,
5
+ IdentityFile: Schema.optional(Schema.String),
6
+ AddKeysToAgent: Schema.optional(Schema.String),
7
+ IdentitiesOnly: Schema.optional(Schema.String),
8
+ IdentityAgent: Schema.optional(Schema.String),
9
+ });
10
+ //# sourceMappingURL=interface.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"interface.js","sourceRoot":"","sources":["../../../../../../../src/modules/common/ssh-config/interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAKhC,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,MAAM,CAAC,MAAM;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5C,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAC9C,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAC9C,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;CAC9C,CAAC,CAAC"}
@@ -0,0 +1,8 @@
1
+ import { interfaces } from "effective-modules";
2
+ export var AgentModules;
3
+ (function (AgentModules) {
4
+ AgentModules["SSHAgent"] = "SSHAgent";
5
+ AgentModules["Session"] = "Session";
6
+ })(AgentModules || (AgentModules = {}));
7
+ export const agentModules = interfaces(AgentModules);
8
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/modules/ssh-agent/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAI/C,MAAM,CAAN,IAAY,YAGX;AAHD,WAAY,YAAY;IACtB,qCAAqB,CAAA;IACrB,mCAAmB,CAAA;AACrB,CAAC,EAHW,YAAY,KAAZ,YAAY,QAGvB;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,UAAU,CAGnC,YAAY,CAAC,CAAC"}
@@ -0,0 +1,265 @@
1
+ import { Deferred, Effect, Option, pipe, Result, Layer } from "effect";
2
+ import { effunct, implementing } from "effective-modules";
3
+ import { SSHPubkey, CredentialId, SSHKeyPair } from "@/modules/common/crypto/impl";
4
+ import { renderCallerTree } from "@/common/render-caller-tree";
5
+ import { BunHttpServer } from "@effect/platform-bun";
6
+ import { randomUUID } from "node:crypto";
7
+ import { agentModules } from "@/modules/ssh-agent";
8
+ import { commonModules } from "@/modules/common";
9
+ import { SessionError, SetupOutput, StartSessionInput } from "./interface";
10
+ import { AgentRpcGroup } from "./interface-rpc";
11
+ import { prfFlow, PrfInput } from "./prf-flow";
12
+ import { AGENT_PORT_FILE_PATH, CURRENT_VERSION, DEFAULT_SESSION_TIMEOUT_SECONDS } from "@/common/constants";
13
+ import { HttpRouter, HttpServer } from "effect/unstable/http";
14
+ import { RpcServer, RpcSerialization } from "effect/unstable/rpc";
15
+ import { writeFileSync } from "node:fs";
16
+ import { using } from "@/common/effective-modules-extensions";
17
+ const { OSPlatform, Crypto, KeyMapStore } = commonModules;
18
+ const { Session } = agentModules;
19
+ const SIGN_REQUESTS_COLLECTION_TIMEOUT_SECONDS = 3;
20
+ export class SessionImpl extends implementing(Session).uses(OSPlatform, Crypto, KeyMapStore) {
21
+ activeSession = Option.none();
22
+ keyCache = new Map();
23
+ *abortSession(session, onlyCheckRequestsAccumulated) {
24
+ if (session.completed)
25
+ return;
26
+ let timeout = session.definition.timeoutSeconds;
27
+ if (onlyCheckRequestsAccumulated) {
28
+ const expected = session.definition.expectedSignRequests.length;
29
+ const actual = session.receivedSignRequests.length;
30
+ if (expected === actual) {
31
+ yield* Effect.log(`All sign requests were received for session ${session.id} within ${SIGN_REQUESTS_COLLECTION_TIMEOUT_SECONDS} seconds`);
32
+ return;
33
+ }
34
+ else {
35
+ yield* Effect.log(`After ${SIGN_REQUESTS_COLLECTION_TIMEOUT_SECONDS} seconds only ${actual}/${expected} sign requests were received for session ${session.id}. Aborting`);
36
+ timeout = SIGN_REQUESTS_COLLECTION_TIMEOUT_SECONDS;
37
+ }
38
+ }
39
+ else {
40
+ yield* Effect.log(`Aborting session ${session.id} after ${timeout} seconds`);
41
+ }
42
+ if (Option.isSome(this.activeSession) && this.activeSession.value.id === session.id) {
43
+ this.activeSession = Option.none();
44
+ }
45
+ // Fail all the sign requests.
46
+ const error = SessionError.cases.SessionTimedOut.make({
47
+ seconds: timeout
48
+ });
49
+ session.completed = true;
50
+ for (let i = 0; i < session.definition.expectedSignRequests.length; ++i) {
51
+ const maybeReceived = Option.fromNullishOr(session.receivedSignRequests[i]);
52
+ if (Option.isNone(maybeReceived))
53
+ continue;
54
+ const { deferredResponse } = maybeReceived.value;
55
+ yield* Deferred.fail(deferredResponse, error);
56
+ }
57
+ }
58
+ *startSession({ expectedCommonAncestorPID, expectedSignRequests, timeoutSeconds, pubkey }) {
59
+ if (Option.isSome(this.activeSession)) {
60
+ const activeId = this.activeSession.value.id;
61
+ yield* Effect.log(`Blocked attempt to start session while ongoing active session ${activeId}`);
62
+ return yield* Effect.fail(SessionError.cases.InterruptingSession.make({ id: activeId }));
63
+ }
64
+ const maybeCredential = yield* pipe(effunct(this.dependencies.KeyMapStore.getCredentialByPubkey)(SSHPubkey.fromAuthorizedKey(pubkey)), Effect.catch(err => Effect.fail(SessionError.cases.InternalError.make({
65
+ reason: `Failed to read from key map store: ${err}`
66
+ }))));
67
+ if (Option.isNone(maybeCredential)) {
68
+ return yield* Effect.fail(SessionError.cases.PubkeyNotRegistered.make({
69
+ pubkey
70
+ }));
71
+ }
72
+ const id = randomUUID();
73
+ const session = {
74
+ definition: { expectedCommonAncestorPID, expectedSignRequests, timeoutSeconds, pubkey },
75
+ receivedSignRequests: [],
76
+ id,
77
+ totalReceived: 0,
78
+ pubkey,
79
+ credentialId: maybeCredential.value,
80
+ completed: false
81
+ };
82
+ this.activeSession = Option.some(session);
83
+ const n = expectedSignRequests.length;
84
+ yield* Effect.log(`Starting session ${id} for ${new CredentialId(maybeCredential.value).humanReadableName} (${maybeCredential.value}). Expecting ${n} sign request${n === 1 ? '' : 's'}`);
85
+ // 2 timeouts.
86
+ // - One for just collecting all requests in the session.
87
+ Effect.runFork(pipe(effunct(this.abortSession)(session, true), Effect.delay(`${SIGN_REQUESTS_COLLECTION_TIMEOUT_SECONDS} seconds`)));
88
+ // - Another which abandons the session if the actual prf flow hasn't happened yet
89
+ Effect.runFork(pipe(effunct(this.abortSession)(session, false), Effect.delay(`${timeoutSeconds} seconds`)));
90
+ }
91
+ isSignRequestInSession(session, signRequest) {
92
+ if (session.pubkey !== signRequest.pubkey.authorizedKey) {
93
+ return Option.none();
94
+ }
95
+ const trustedParentPid = session.definition.expectedCommonAncestorPID;
96
+ let foundTrustedParentPid = false;
97
+ for (let i = 0; i < signRequest.callerTree.length; ++i) {
98
+ if (signRequest.callerTree[i].pid === trustedParentPid) {
99
+ foundTrustedParentPid = true;
100
+ break;
101
+ }
102
+ }
103
+ if (!foundTrustedParentPid) {
104
+ return Option.none();
105
+ }
106
+ for (let i = 0; i < session.definition.expectedSignRequests.length; ++i) {
107
+ const { expectedCallerChain } = session.definition.expectedSignRequests[i];
108
+ let j = 0;
109
+ for (; j < expectedCallerChain.length; ++j) {
110
+ const expected = expectedCallerChain[j];
111
+ const actual = signRequest.callerTree[j];
112
+ if (actual.command !== expected.command ||
113
+ Option.getOrNull(actual.directory) !== Option.getOrNull(expected.directory)) {
114
+ break;
115
+ }
116
+ }
117
+ if (j === expectedCallerChain.length) {
118
+ // Found match
119
+ return Option.some({ index: i });
120
+ }
121
+ }
122
+ return Option.none();
123
+ }
124
+ *cacheKey(keyPair, credentialId, cacheMinutes) {
125
+ const pubkey = keyPair.pubkey.authorizedKey;
126
+ this.keyCache.set(pubkey, keyPair);
127
+ Effect.runFork(pipe(Effect.sync(() => { this.keyCache.delete(pubkey); }), Effect.andThen(Effect.log(`Cache entry revoked for ${pubkey} (${credentialId.humanReadableName}) after ${cacheMinutes} minutes`)), Effect.delay(`${cacheMinutes} minutes`)));
128
+ yield* Effect.log(`Cached key ${pubkey} (${credentialId.humanReadableName}) for ${cacheMinutes} minutes`);
129
+ }
130
+ *resolveAllSignRequests(session) {
131
+ // By setting it to none here, we technically do allow parallel sessions, the
132
+ // caveat is there's an expectation that all requests for a session are retrieved
133
+ // in a short time frame. In the future we may have a backlog of non matching signing requests
134
+ // and sessions
135
+ this.activeSession = Option.none();
136
+ const credential = new CredentialId(session.credentialId);
137
+ const cachedKeyPair = this.keyCache.get(session.pubkey);
138
+ let prfResult;
139
+ if (cachedKeyPair) {
140
+ yield* Effect.log(`Using cached key for session ${session.id}`);
141
+ prfResult = Result.succeed({ keyPair: cachedKeyPair, credentialId: credential });
142
+ }
143
+ else {
144
+ prfResult = yield* pipe(effunct(prfFlow)(PrfInput.DerivePubkeyForRequests({ session })), Effect.scoped, Effect.provide(this.context), Effect.result);
145
+ if (Result.isSuccess(prfResult)) {
146
+ const { keyPair } = prfResult.success;
147
+ const derivedPubkey = keyPair.pubkey.authorizedKey;
148
+ if (derivedPubkey !== session.pubkey) {
149
+ yield* Effect.log(`PRF derived pubkey ${derivedPubkey} but session expects ${session.pubkey}`);
150
+ prfResult = Result.fail(SessionError.cases.InternalError.make({
151
+ reason: `PRF derived pubkey ${derivedPubkey} does not match session pubkey ${session.pubkey}`
152
+ }));
153
+ }
154
+ else if (prfResult.success.cacheMinutes !== undefined) {
155
+ yield* this.cacheKey(keyPair, credential, prfResult.success.cacheMinutes);
156
+ }
157
+ }
158
+ }
159
+ session.completed = true;
160
+ if (Result.isFailure(prfResult)) {
161
+ yield* Effect.log(`PRF flow failed for session ${session.id}: ${JSON.stringify(prfResult.failure)}`);
162
+ }
163
+ else {
164
+ yield* Effect.log(`PRF flow succeeded for session ${session.id}`);
165
+ }
166
+ let totalSigned = 0;
167
+ for (const req of session.receivedSignRequests) {
168
+ if (Result.isSuccess(prfResult)) {
169
+ const { keyPair } = prfResult.success;
170
+ const sigResult = yield* Effect.result(Effect.try({
171
+ try: () => keyPair.sign(req.signRequest.data),
172
+ catch: (e) => SessionError.cases.InternalError.make({ reason: String(e) }),
173
+ }));
174
+ if (Result.isSuccess(sigResult)) {
175
+ totalSigned++;
176
+ yield* Effect.log(`(${totalSigned}/${session.receivedSignRequests.length}) Signed ${req.signRequest.data.length} bytes for session ${session.id}`);
177
+ yield* Deferred.succeed(req.deferredResponse, sigResult.success);
178
+ }
179
+ else {
180
+ yield* Effect.log(`Signing failed for session ${session.id}: ${JSON.stringify(sigResult.failure)}`);
181
+ yield* Deferred.fail(req.deferredResponse, sigResult.failure);
182
+ }
183
+ }
184
+ else {
185
+ yield* Deferred.fail(req.deferredResponse, prfResult.failure);
186
+ }
187
+ }
188
+ }
189
+ *sign(signRequest) {
190
+ const { pubkey, callerTree } = signRequest;
191
+ // On the no active session case. We create one.
192
+ if (Option.isNone(this.activeSession)) {
193
+ yield* Effect.log(`Received sign request when no session exists. Chain:\n${renderCallerTree(callerTree.slice(-3))}`);
194
+ yield* this.startSession({
195
+ expectedCommonAncestorPID: callerTree[callerTree.length - 1].pid,
196
+ expectedSignRequests: [{
197
+ expectedCallerChain: callerTree
198
+ }],
199
+ timeoutSeconds: DEFAULT_SESSION_TIMEOUT_SECONDS,
200
+ pubkey: pubkey.authorizedKey
201
+ });
202
+ }
203
+ if (Option.isNone(this.activeSession)) {
204
+ return yield* Effect.fail(SessionError.cases.InternalError.make({
205
+ reason: "Invariant violation. Active session not set after calling startSession"
206
+ }));
207
+ }
208
+ const session = this.activeSession.value;
209
+ const maybeIndex = this.isSignRequestInSession(session, signRequest);
210
+ if (Option.isNone(maybeIndex)) {
211
+ // TODO: we could instead create a queue of backed-up sign requests and give
212
+ // a very short window for each session to collect its requests.
213
+ return yield* Effect.fail(SessionError.cases.InterruptingSession.make({
214
+ id: session.id
215
+ }));
216
+ }
217
+ const { index } = maybeIndex.value;
218
+ const deferredResponse = yield* Deferred.make();
219
+ session.receivedSignRequests[index] = {
220
+ deferredResponse,
221
+ signRequest
222
+ };
223
+ session.totalReceived++;
224
+ const totalExpected = session.definition.expectedSignRequests.length;
225
+ yield* Effect.log(`Got matching signature request. ${totalExpected - session.totalReceived} remaining`);
226
+ if (session.totalReceived > totalExpected) {
227
+ return yield* Effect.fail(SessionError.cases.InternalError.make({
228
+ reason: `Only expected to get ${totalExpected} signature requests. Got ${session.totalReceived} instead`
229
+ }));
230
+ }
231
+ if (session.totalReceived === totalExpected) {
232
+ yield* Effect.log(`All ${totalExpected} expected signature requests received for session ${session.id}. Initiating passkey verification.`);
233
+ yield* this.resolveAllSignRequests(session);
234
+ }
235
+ return yield* Deferred.await(deferredResponse);
236
+ }
237
+ *setup(input) {
238
+ const { keyPair, credentialId: derivedCredentialId, cacheMinutes } = yield* pipe(effunct(prfFlow)(PrfInput.DerivePubkeyOnly({ pubkey: input.pubkey, credentialId: input.credentialId, username: input.username })), Effect.scoped, Effect.provide(this.context));
239
+ const derivedPubkey = keyPair.pubkey.authorizedKey;
240
+ if (Option.isSome(input.pubkey) && derivedPubkey !== input.pubkey.value) {
241
+ return yield* Effect.fail(SessionError.cases.PubkeyMismatch.make({ expected: input.pubkey.value, derived: derivedPubkey }));
242
+ }
243
+ yield* Effect.log(`Derived key for ${derivedCredentialId.humanReadableName} (${derivedCredentialId.base58})`);
244
+ yield* pipe(effunct(this.dependencies.KeyMapStore.addKey)(keyPair.pubkey, derivedCredentialId.base58), Effect.mapError(reason => SessionError.cases.InternalError.make({ reason })));
245
+ if (cacheMinutes !== undefined) {
246
+ yield* this.cacheKey(keyPair, derivedCredentialId, cacheMinutes);
247
+ }
248
+ return { pubkey: derivedPubkey, credentialId: derivedCredentialId.base58 };
249
+ }
250
+ static makeRpcLayer() {
251
+ const writePortFile = Layer.effectDiscard(Effect.gen(function* () {
252
+ const server = yield* HttpServer.HttpServer;
253
+ if (server.address._tag !== "TcpAddress") {
254
+ return Effect.die(`Invariant server address of ${JSON.stringify(server.address)}`);
255
+ }
256
+ writeFileSync(AGENT_PORT_FILE_PATH, server.address.port.toString());
257
+ }));
258
+ return pipe(RpcServer.layerHttp({ group: AgentRpcGroup, path: "/rpc", protocol: "http" }), Layer.provideMerge(AgentRpcGroup.toLayer({
259
+ GetVersion: () => Effect.succeed({ version: CURRENT_VERSION }),
260
+ StartSession: using(Session).startSession,
261
+ Setup: using(Session).setup,
262
+ })), HttpRouter.serve, Layer.provideMerge(writePortFile), Layer.provideMerge(BunHttpServer.layer({ port: 0 })), Layer.provideMerge(RpcSerialization.layerJson), Layer.provideMerge(this.Layer));
263
+ }
264
+ }
265
+ //# sourceMappingURL=impl.js.map