@phigon/observer 8.1.0 → 8.3.0

package/dist/src/proxy.js

@@ -0,0 +1,209 @@
+import * as http from "node:http";
+import * as https from "node:https";
+/** The variable names, lowercase first: Node.js lets lowercase win. */
+const variables = {
+    https: ["https_proxy", "HTTPS_PROXY"],
+    http: ["http_proxy", "HTTP_PROXY"],
+    noProxy: ["no_proxy", "NO_PROXY"],
+};
+function variable(environment, names) {
+    for (const name of names) {
+        const value = environment[name]?.trim();
+        if (value)
+            return value;
+    }
+    if (process.platform === "win32") {
+        // Windows names are case-insensitive, but a copied environment is not.
+        const wanted = names[0].toLowerCase();
+        const found = Object.entries(environment).find(([key]) => key.toLowerCase() === wanted)?.[1]?.trim();
+        if (found)
+            return found;
+    }
+    return undefined;
+}
+function proxyURL(value, name) {
+    if (value === undefined)
+        return undefined;
+    let url;
+    try {
+        // A bare host:port is read the way Node.js and curl read it.
+        url = new URL(/^[a-z][a-z0-9+.-]*:\/\//iu.test(value) ? value : `http://${value}`);
+    }
+    catch {
+        // Never echo the value: it can hold the proxy's password.
+        throw new Error(`${name} is not a valid proxy address. Use a form such as http://proxy.example.com:8080.`);
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        throw new Error(`${name} must be an http:// or https:// proxy address.`);
+    }
+    return url;
+}
+/** Reads HTTPS_PROXY, HTTP_PROXY and NO_PROXY (either case) from `environment`. */
+export function proxySettings(environment) {
+    const httpsProxy = proxyURL(variable(environment, variables.https), "HTTPS_PROXY");
+    const httpProxy = proxyURL(variable(environment, variables.http), "HTTP_PROXY");
+    return Object.freeze({
+        ...(httpsProxy === undefined ? {} : { https: httpsProxy }),
+        ...(httpProxy === undefined ? {} : { http: httpProxy }),
+        noProxy: variable(environment, variables.noProxy) ?? "",
+    });
+}
+function noProxyEntries(value) {
+    return value.split(/[,\s]+/u).filter(Boolean).map((entry) => {
+        // An IPv6 address carries a port only in brackets: [::1]:8443.
+        const withPort = /^(\[[^\]]+\]|[^:]+):(\d+)$/u.exec(entry);
+        const host = (withPort?.[1] ?? entry).toLowerCase().replace(/^\[|\]$/gu, "");
+        return { host, port: withPort === null ? 0 : Number(withPort[2]) };
+    });
+}
+/**
+ * The proxy `target` goes through, or undefined to connect directly. It
+ * follows Node.js: an entry matches its host and every host under it
+ * (`example.com`, `.example.com` and `*.example.com` all cover
+ * `a.example.com`), `*` matches everything, and `host:port` only that port.
+ */
+export function proxyForUrl(target, settings) {
+    const proxy = target.protocol === "https:" ? settings.https ?? settings.http : settings.http;
+    if (proxy === undefined)
+        return undefined;
+    const host = target.hostname.toLowerCase().replace(/^\[|\]$/gu, "");
+    const port = Number(target.port || (target.protocol === "https:" ? 443 : 80));
+    for (const entry of noProxyEntries(settings.noProxy)) {
+        if (entry.host === "*")
+            return undefined;
+        if (entry.port !== 0 && entry.port !== port)
+            continue;
+        const suffix = entry.host.replace(/^\*?\./u, "");
+        if (host === suffix || host.endsWith(`.${suffix}`))
+            return undefined;
+    }
+    return proxy;
+}
+/**
+ * NO_PROXY in the form @grpc/grpc-js reads, which matches plain host name
+ * endings only: `*.example.com` and `.example.com` become `example.com`, and
+ * an entry for another port is left out because the stream cannot check
+ * ports.
+ */
+export function grpcNoProxy(noProxy, streamPort) {
+    return noProxyEntries(noProxy)
+        .filter((entry) => entry.host !== "*" && (entry.port === 0 || entry.port === streamPort))
+        .map((entry) => entry.host.replace(/^\*?\./u, ""))
+        .join(",");
+}
+/** Whether NO_PROXY turns the proxy off for every host, which grpc-js cannot express. */
+export function noProxyForAll(environment) {
+    const value = environment["no_grpc_proxy"] ?? variable(environment, variables.noProxy) ?? "";
+    return noProxyEntries(value).some((entry) => entry.host === "*");
+}
+/**
+ * Sends `fetch` (and `http`/`https` requests) through the proxy that
+ * `environment` names, and gives the telemetry stream the same proxy and
+ * NO_PROXY list. Does nothing when no proxy is set.
+ */
+export function useProxyFromEnvironment(environment, options = {}) {
+    const settings = proxySettings(environment);
+    const proxy = settings.https ?? settings.http;
+    if (proxy === undefined)
+        return Object.freeze({ restore: () => undefined });
+    const notices = [];
+    const setGlobal = "setGlobalProxyFromEnv" in options
+        ? options.setGlobalProxyFromEnv
+        : http.setGlobalProxyFromEnv;
+    let restoreFetch = () => undefined;
+    if (typeof setGlobal === "function") {
+        restoreFetch = setGlobal({
+            ...(settings.https === undefined ? {} : { HTTPS_PROXY: settings.https.href }),
+            ...(settings.http === undefined ? {} : { HTTP_PROXY: settings.http.href }),
+            ...(settings.noProxy === "" ? {} : { NO_PROXY: settings.noProxy }),
+        });
+    }
+    else if (!(options.startedWithEnvProxy ?? startedWithEnvProxy())) {
+        notices.push(`This computer sets a proxy, but Node.js ${options.nodeVersion ?? process.versions.node} uses it ` +
+            "only when NODE_USE_ENV_PROXY=1 is set before the observer starts. Set it, or update Node.js to 24.14 or newer.");
+    }
+    // @grpc/grpc-js reads grpc_proxy, then https_proxy and http_proxy, in
+    // lowercase only, and supports only http:// proxies.
+    const target = options.processEnvironment ?? process.env;
+    const saved = new Map();
+    const assign = (name, value) => {
+        if (target[name] !== undefined && target[name] !== "")
+            return;
+        saved.set(name, target[name]);
+        target[name] = value;
+    };
+    const streamProxy = settings.https ?? settings.http;
+    if (streamProxy !== undefined && streamProxy.protocol === "http:") {
+        assign("grpc_proxy", streamProxy.href);
+    }
+    else if (streamProxy !== undefined && target["grpc_proxy"] === undefined) {
+        notices.push("The telemetry stream can use only an http:// proxy address, so it connects directly. " +
+            "Set grpc_proxy to an http:// proxy if direct connections are blocked.");
+    }
+    if (settings.noProxy !== "") {
+        const port = Number(options.streamUrl?.port || 443);
+        const list = grpcNoProxy(settings.noProxy, port);
+        if (list !== "")
+            assign("no_grpc_proxy", list);
+    }
+    return Object.freeze({
+        restore: () => {
+            restoreFetch();
+            for (const [name, value] of saved) {
+                if (value === undefined)
+                    delete target[name];
+                else
+                    target[name] = value;
+            }
+            saved.clear();
+        },
+        ...(notices.length === 0 ? {} : { notice: notices.join(" ") }),
+    });
+}
+function startedWithEnvProxy() {
+    return process.env["NODE_USE_ENV_PROXY"] === "1" ||
+        process.execArgv.includes("--use-env-proxy");
+}
+/**
+ * Opens a CONNECT tunnel through `proxy` to `host:port`, for a raw TLS
+ * connection that `fetch` does not cover. Messages name the proxy by host
+ * only, never with its credentials.
+ */
+export async function connectThroughProxy(proxy, host, port, timeoutMs = 15_000) {
+    const authority = host.includes(":") ? `[${host}]:${port}` : `${host}:${port}`;
+    const credentials = proxy.username === ""
+        ? undefined
+        : Buffer.from(`${decodeURIComponent(proxy.username)}:${decodeURIComponent(proxy.password)}`).toString("base64");
+    const request = (proxy.protocol === "https:" ? https : http).request({
+        host: proxy.hostname.replace(/^\[|\]$/gu, ""),
+        port: Number(proxy.port || (proxy.protocol === "https:" ? 443 : 80)),
+        method: "CONNECT",
+        path: authority,
+        agent: false,
+        headers: {
+            host: authority,
+            ...(credentials === undefined ? {} : { "proxy-authorization": `Basic ${credentials}` }),
+        },
+    });
+    return await new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+            request.destroy();
+            reject(new Error(`The proxy ${proxy.host} did not answer in time.`));
+        }, timeoutMs);
+        request.once("connect", (response, socket) => {
+            clearTimeout(timer);
+            if (response.statusCode === 200) {
+                resolve(socket);
+                return;
+            }
+            socket.destroy();
+            reject(new Error(`The proxy ${proxy.host} refused to connect to ${authority} (HTTP ${response.statusCode}).`));
+        });
+        request.once("error", (error) => {
+            clearTimeout(timer);
+            reject(new Error(`Could not reach the proxy ${proxy.host}: ${error.message}`));
+        });
+        request.end();
+    });
+}
+//# sourceMappingURL=proxy.js.map

package/dist/src/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/proxy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAqBpC,uEAAuE;AACvE,MAAM,SAAS,GAAG;IAChB,KAAK,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC;IACrC,IAAI,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;IAClC,OAAO,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;CACzB,CAAC;AAEX,SAAS,QAAQ,CAAC,WAA8B,EAAE,KAAwB;IACxE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,uEAAuE;QACvE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACrG,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB,EAAE,IAAY;IACvD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,6DAA6D;QAC7D,GAAG,GAAG,IAAI,GAAG,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kFAAkF,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,gDAAgD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,WAA8B;IAC1D,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAC1D,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACvD,OAAO,EAAE,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE;KACxD,CAAC,CAAC;AACL,CAAC;AAID,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1D,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC7E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,MAAW,EAAE,QAAuB;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC7F,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9E,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACzC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;YAAE,SAAS;QACtD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,UAAkB;IAC7D,OAAO,cAAc,CAAC,OAAO,CAAC;SAC3B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;SACxF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;SACjD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAAC,WAA8B;IAC1D,MAAM,KAAK,GAAG,WAAW,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC7F,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AACnE,CAAC;AAuBD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,WAA8B,EAC9B,UAA6B,EAAE;IAE/B,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IAE5E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,uBAAuB,IAAI,OAAO;QAClD,CAAC,CAAC,OAAO,CAAC,qBAAqB;QAC/B,CAAC,CAAE,IAA8D,CAAC,qBAAqB,CAAC;IAC1F,IAAI,YAAY,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;IAC/C,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,YAAY,GAAG,SAAS,CAAC;YACvB,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7E,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1E,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;SACnE,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,CAAC,CAAC,OAAO,CAAC,mBAAmB,IAAI,mBAAmB,EAAE,CAAC,EAAE,CAAC;QACnE,OAAO,CAAC,IAAI,CACV,2CAA2C,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,WAAW;YAChG,gHAAgH,CACnH,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,qDAAqD;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC;IACzD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IACpD,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE;QAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO;QAC9D,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC;IACpD,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClE,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;SAAM,IAAI,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3E,OAAO,CAAC,IAAI,CACV,uFAAuF;YACrF,uEAAuE,CAC1E,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,IAAI,GAAG,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,GAAG,EAAE;YACZ,YAAY,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;gBAClC,IAAI,KAAK,KAAK,SAAS;oBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;;oBACxC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YAC5B,CAAC;YACD,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,GAAG;QAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAU,EACV,IAAY,EACZ,IAAY,EACZ,SAAS,GAAG,MAAM;IAElB,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IAC/E,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,KAAK,EAAE;QACvC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClH,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;QACnE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7C,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpE,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,SAAS,WAAW,EAAE,EAAE,CAAC;SACxF;KACF,CAAC,CAAC;IACH,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,0BAA0B,CAAC,CAAC,CAAC;QACvE,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YAC3C,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAChC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,0BAA0B,SAAS,UAAU,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;QACjH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC9B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/purge.d.ts

@@ -0,0 +1,17 @@
+export type PurgeResult = Readonly<{
+    /** Files and folders removed. */
+    removed: number;
+    /** Names left because the observer did not create them. */
+    leftBehind: readonly string[];
+    /** Whether the data directory itself was removed, being empty. */
+    directoryRemoved: boolean;
+}>;
+/**
+ * Removes every file the observer keeps in `dataDirectory`, then the
+ * directory when nothing else is in it. `keep` names files to leave for
+ * the caller to remove last, such as the lock it still holds.
+ */
+export declare function purgeDataDirectory(dataDirectory: string, keep?: readonly string[]): Promise<PurgeResult>;
+/** Removes the data directory when it is empty. */
+export declare function removeEmptyDataDirectory(dataDirectory: string): Promise<boolean>;
+//# sourceMappingURL=purge.d.ts.map

package/dist/src/purge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"purge.d.ts","sourceRoot":"","sources":["../../src/purge.ts"],"names":[],"mappings":"AA6CA,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC;IACjC,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,kEAAkE;IAClE,gBAAgB,EAAE,OAAO,CAAC;CAC3B,CAAC,CAAC;AAEH;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,MAAM,EACrB,IAAI,GAAE,SAAS,MAAM,EAAO,GAC3B,OAAO,CAAC,WAAW,CAAC,CAsBtB;AAED,mDAAmD;AACnD,wBAAsB,wBAAwB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOtF"}

package/dist/src/purge.js

@@ -0,0 +1,84 @@
+import { readdir, rm, rmdir } from "node:fs/promises";
+import { join } from "node:path";
+/**
+ * Everything the observer itself writes in its data directory. A purge
+ * removes only these, so a data directory set to a folder that also holds
+ * other files (a home folder, say) loses nothing else.
+ */
+const observerFiles = new Set([
+    "action-policy.json",
+    "activity-cursors.json",
+    "agent-action-receipts.json",
+    "collection-notice.json",
+    "custom-agents.json",
+    "historical-agent-identities.json",
+    "installation-id",
+    "machine-credential.json",
+    "observer.lock",
+    "server-ca.pem",
+    "service-settings.json",
+    "stream-state.json",
+    "telemetry-spool.jsonl",
+    "update-check.json",
+]);
+const observerDirectories = new Set([
+    "bridges",
+    "damaged-spools",
+    "history-sync",
+    "logs",
+    "machine-operation-receipts",
+    "process-operation-claims",
+    "retired-pairings",
+]);
+/** Temporary, corrupt and per-run files named after the ones above. */
+function observerFile(name) {
+    if (observerFiles.has(name))
+        return true;
+    for (const file of observerFiles) {
+        if (name.startsWith(`${file}.`) && /\.(tmp|corrupt)$/u.test(name))
+            return true;
+    }
+    return /^guardian-lease-[0-9a-f-]{36}\.json$/u.test(name) ||
+        /^service-task-[0-9a-f-]{36}\.xml$/u.test(name);
+}
+/**
+ * Removes every file the observer keeps in `dataDirectory`, then the
+ * directory when nothing else is in it. `keep` names files to leave for
+ * the caller to remove last, such as the lock it still holds.
+ */
+export async function purgeDataDirectory(dataDirectory, keep = []) {
+    let entries;
+    try {
+        entries = await readdir(dataDirectory);
+    }
+    catch (error) {
+        if (error.code === "ENOENT") {
+            return Object.freeze({ removed: 0, leftBehind: Object.freeze([]), directoryRemoved: true });
+        }
+        throw error;
+    }
+    let removed = 0;
+    const leftBehind = [];
+    for (const name of entries) {
+        if (keep.includes(name))
+            continue;
+        if (!observerFile(name) && !observerDirectories.has(name)) {
+            leftBehind.push(name);
+            continue;
+        }
+        await rm(join(dataDirectory, name), { recursive: true, force: true, maxRetries: 5, retryDelay: 100 });
+        removed++;
+    }
+    return Object.freeze({ removed, leftBehind: Object.freeze(leftBehind.sort()), directoryRemoved: false });
+}
+/** Removes the data directory when it is empty. */
+export async function removeEmptyDataDirectory(dataDirectory) {
+    try {
+        await rmdir(dataDirectory);
+        return true;
+    }
+    catch (error) {
+        return error.code === "ENOENT";
+    }
+}
+//# sourceMappingURL=purge.js.map

package/dist/src/purge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"purge.js","sourceRoot":"","sources":["../../src/purge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;GAIG;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,oBAAoB;IACpB,uBAAuB;IACvB,4BAA4B;IAC5B,wBAAwB;IACxB,oBAAoB;IACpB,kCAAkC;IAClC,iBAAiB;IACjB,yBAAyB;IACzB,eAAe;IACf,eAAe;IACf,uBAAuB;IACvB,mBAAmB;IACnB,uBAAuB;IACvB,mBAAmB;CACpB,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,SAAS;IACT,gBAAgB;IAChB,cAAc;IACd,MAAM;IACN,4BAA4B;IAC5B,0BAA0B;IAC1B,kBAAkB;CACnB,CAAC,CAAC;AAEH,uEAAuE;AACvE,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACjF,CAAC;IACD,OAAO,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC;QACvD,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpD,CAAC;AAWD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,OAA0B,EAAE;IAE5B,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QAClC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACtG,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3G,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,aAAqB;IAClE,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC;IAC5D,CAAC;AACH,CAAC"}

package/dist/src/remove-machine.d.ts

@@ -1,7 +1,11 @@
 import type { ObserverConfig } from "./config.js";
 import type { StoredMachineCredential } from "./credential-store.js";
 export type RemoveMachineResult = Readonly<{
-    status: "removed";
+    /**
+     * `already_removed`: an administrator had already removed this computer
+     * or revoked its key, so only the local cleanup was left to do.
+     */
+    status: "removed" | "already_removed";
     machineId: string;
     controlPlaneOrigin: string;
     credentialRemoved: true;

package/dist/src/remove-machine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remove-machine.d.ts","sourceRoot":"","sources":["../../src/remove-machine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAErE,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,IAAI,CAAC;CACzB,CAAC,CAAC;AAEH,wBAAsB,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC;IACpD,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,uBAAuB,CAAC;IACpC,eAAe,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA6DhC"}
+{"version":3,"file":"remove-machine.d.ts","sourceRoot":"","sources":["../../src/remove-machine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAErE,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC;;;OAGG;IACH,MAAM,EAAE,SAAS,GAAG,iBAAiB,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,IAAI,CAAC;CACzB,CAAC,CAAC;AAEH,wBAAsB,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC;IACpD,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,uBAAuB,CAAC;IACpC,eAAe,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAoEhC"}

package/dist/src/remove-machine.js

@@ -27,10 +27,18 @@ export async function removeMachine(options) {
         throw new Error(`Could not reach ${endpoint.origin}. The local credential was kept; ` +
             "check your connection and try again.");
     }
+    let alreadyRemoved = false;
     if (!response.ok) {
-        throw new Error(await removalFailureMessage(response));
+        const failure = await removalFailure(response);
+        // The server no longer accepts this key: an administrator already
+        // removed the computer or revoked the key. Nothing is left to
+        // unregister, and the key is useless, so finish the local cleanup.
+        if (response.status !== 401 || failure.code !== "invalid_credential") {
+            throw new Error(failure.message);
+        }
+        alreadyRemoved = true;
     }
-    if (response.status !== 204) {
+    else if (response.status !== 204) {
         throw new Error(`Control plane returned an unexpected machine-removal response ` +
             `(HTTP ${response.status}). The local credential was kept.`);
     }
@@ -44,34 +52,40 @@ export async function removeMachine(options) {
             "pairing again.");
     }
     return Object.freeze({
-        status: "removed",
+        status: alreadyRemoved ? "already_removed" : "removed",
         machineId: options.credential.machineId,
         controlPlaneOrigin: configuredOrigin,
         credentialRemoved: true,
     });
 }
-async function removalFailureMessage(response) {
+async function removalFailure(response) {
+    const fallback = `Machine removal failed with HTTP ${response.status}. ` +
+        "The local credential was kept.";
     try {
         const value = await response.json();
         if (typeof value === "object" &&
             value !== null &&
             "error" in value &&
             typeof value.error === "object" &&
-            value.error !== null &&
-            "message" in value.error &&
-            typeof value.error.message === "string") {
-            const message = value.error.message.trim();
-            if (message.length > 0 &&
-                Buffer.byteLength(message, "utf8") <= 512 &&
-                !/[\u0000-\u001f\u007f]/u.test(message)) {
-                return `${message} The local credential was kept.`;
+            value.error !== null) {
+            const error = value.error;
+            const code = "code" in error && typeof error.code === "string"
+                ? { code: error.code }
+                : {};
+            if ("message" in error && typeof error.message === "string") {
+                const message = error.message.trim();
+                if (message.length > 0 &&
+                    Buffer.byteLength(message, "utf8") <= 512 &&
+                    !/[\u0000-\u001f\u007f]/u.test(message)) {
+                    return { ...code, message: `${message} The local credential was kept.` };
+                }
             }
+            return { ...code, message: fallback };
         }
     }
     catch {
         // The status code is still useful and does not expose the credential.
     }
-    return `Machine removal failed with HTTP ${response.status}. ` +
-        "The local credential was kept.";
+    return { message: fallback };
 }
 //# sourceMappingURL=remove-machine.js.map

package/dist/src/remove-machine.js.map

@@ -1 +1 @@
-{"version":3,"file":"remove-machine.js","sourceRoot":"","sources":["../../src/remove-machine.ts"],"names":[],"mappings":"AAUA,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAKlC;IACA,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC;IAC/D,IAAI,OAAO,CAAC,UAAU,CAAC,kBAAkB,KAAK,gBAAgB,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CACb,iCAAiC,OAAO,CAAC,UAAU,CAAC,kBAAkB,IAAI;YACxE,sCAAsC,gBAAgB,gBAAgB;YACtE,iEAAiE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IACzC,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;YACjC,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE;gBACxD,MAAM,EAAE,kBAAkB;aAC3B;YACD,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,8CAA8C,QAAQ,CAAC,MAAM,IAAI;gBAC/D,2CAA2C,CAC9C,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mBAAmB,QAAQ,CAAC,MAAM,mCAAmC;YACnE,sCAAsC,CACzC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,gEAAgE;YAC9D,SAAS,QAAQ,CAAC,MAAM,mCAAmC,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,eAAe,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,WAAW,OAAO,CAAC,UAAU,CAAC,SAAS,oBAAoB;YACzD,GAAG,gBAAgB,gDAAgD;YACnE,gCAAgC,OAAO,CAAC,MAAM,CAAC,aAAa,UAAU;YACtE,gBAAgB,CACnB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS;QACvC,kBAAkB,EAAE,gBAAgB;QACpC,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,QAAkB;IACrD,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7C,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,OAAO,IAAI,KAAK;YAChB,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAC/B,KAAK,CAAC,KAAK,KAAK,IAAI;YACpB,SAAS,IAAI,KAAK,CAAC,KAAK;YACxB,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,EACvC,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC3C,IACE,OAAO,CAAC,MAAM,GAAG,CAAC;gBAClB,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,GAAG;gBACzC,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,EACvC,CAAC;gBACD,OAAO,GAAG,OAAO,iCAAiC,CAAC;YACrD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;IACD,OAAO,oCAAoC,QAAQ,CAAC,MAAM,IAAI;QAC5D,gCAAgC,CAAC;AACrC,CAAC"}
+{"version":3,"file":"remove-machine.js","sourceRoot":"","sources":["../../src/remove-machine.ts"],"names":[],"mappings":"AAcA,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAKlC;IACA,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC;IAC/D,IAAI,OAAO,CAAC,UAAU,CAAC,kBAAkB,KAAK,gBAAgB,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CACb,iCAAiC,OAAO,CAAC,UAAU,CAAC,kBAAkB,IAAI;YACxE,sCAAsC,gBAAgB,gBAAgB;YACtE,iEAAiE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IACzC,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;YACjC,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE;gBACxD,MAAM,EAAE,kBAAkB;aAC3B;YACD,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,8CAA8C,QAAQ,CAAC,MAAM,IAAI;gBAC/D,2CAA2C,CAC9C,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mBAAmB,QAAQ,CAAC,MAAM,mCAAmC;YACnE,sCAAsC,CACzC,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC/C,kEAAkE;QAClE,8DAA8D;QAC9D,mEAAmE;QACnE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;SAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,gEAAgE;YAC9D,SAAS,QAAQ,CAAC,MAAM,mCAAmC,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,eAAe,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,WAAW,OAAO,CAAC,UAAU,CAAC,SAAS,oBAAoB;YACzD,GAAG,gBAAgB,gDAAgD;YACnE,gCAAgC,OAAO,CAAC,MAAM,CAAC,aAAa,UAAU;YACtE,gBAAgB,CACnB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;QACtD,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS;QACvC,kBAAkB,EAAE,gBAAgB;QACpC,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,QAAkB;IAElB,MAAM,QAAQ,GAAG,oCAAoC,QAAQ,CAAC,MAAM,IAAI;QACtE,gCAAgC,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7C,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,OAAO,IAAI,KAAK;YAChB,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAC/B,KAAK,CAAC,KAAK,KAAK,IAAI,EACpB,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;gBACtB,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,SAAS,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrC,IACE,OAAO,CAAC,MAAM,GAAG,CAAC;oBAClB,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,GAAG;oBACzC,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,EACvC,CAAC;oBACD,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,iCAAiC,EAAE,CAAC;gBAC3E,CAAC;YACH,CAAC;YACD,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC"}

package/dist/src/server-authority.d.ts

@@ -0,0 +1,29 @@
+import * as tls from "node:tls";
+/**
+ * A company's own Phigon server (run by the Phigon app) signs its HTTPS
+ * certificate with an authority of its own. The pairing command carries
+ * that authority's SHA-256 fingerprint; pairing pins it here, and every
+ * later HTTPS and gRPC connection trusts it.
+ */
+export declare const SERVER_AUTHORITY_FILE = "server-ca.pem";
+export declare function serverAuthorityPath(dataDirectory: string): string;
+/** Reads `--server-ca-sha256`: 64 hex characters, with or without colons. */
+export declare function parseAuthorityFingerprint(value: string): string;
+/** Adds an authority to the ones this process trusts for HTTPS and gRPC. */
+export declare function trustAuthority(pem: string): void;
+/** Trusts the authority saved when this computer paired, and returns its file. */
+export declare function trustSavedAuthority(dataDirectory: string): string | undefined;
+export declare function forgetServerAuthority(dataDirectory: string): Promise<void>;
+type Connect = (options: tls.ConnectionOptions, listener: () => void) => tls.TLSSocket;
+/**
+ * Finds the certificate in the server's chain whose SHA-256 matches the
+ * pinned fingerprint, saves it and trusts it. Nothing is sent to the server
+ * on this connection; the requests that follow are verified normally,
+ * including the server's name, against the pinned authority. Behind a
+ * proxy (`options.proxy`), the chain is read through a CONNECT tunnel.
+ */
+export declare function pinServerAuthority(url: URL, fingerprint: string, dataDirectory: string, connect?: Connect, options?: Readonly<{
+    proxy?: URL | undefined;
+}>): Promise<string>;
+export {};
+//# sourceMappingURL=server-authority.d.ts.map

package/dist/src/server-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-authority.d.ts","sourceRoot":"","sources":["../../src/server-authority.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAGhC;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,kBAAkB,CAAC;AAIrD,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,6EAA6E;AAC7E,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM/D;AAED,4EAA4E;AAC5E,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAQhD;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK7E;AAED,wBAAsB,qBAAqB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhF;AAED,KAAK,OAAO,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,iBAAiB,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,GAAG,CAAC,SAAS,CAAC;AAEvF;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,GAAG,EACR,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,OAAqB,EAC9B,OAAO,GAAE,QAAQ,CAAC;IAAE,KAAK,CAAC,EAAE,GAAG,GAAG,SAAS,CAAA;CAAE,CAAM,GAClD,OAAO,CAAC,MAAM,CAAC,CAiBjB"}

package/dist/src/server-authority.js

@@ -0,0 +1,106 @@
+import { createHash, X509Certificate } from "node:crypto";
+import { existsSync, readFileSync } from "node:fs";
+import { rm, writeFile } from "node:fs/promises";
+import { isIP } from "node:net";
+import { join } from "node:path";
+import * as tls from "node:tls";
+import { connectThroughProxy } from "./proxy.js";
+/**
+ * A company's own Phigon server (run by the Phigon app) signs its HTTPS
+ * certificate with an authority of its own. The pairing command carries
+ * that authority's SHA-256 fingerprint; pairing pins it here, and every
+ * later HTTPS and gRPC connection trusts it.
+ */
+export const SERVER_AUTHORITY_FILE = "server-ca.pem";
+const FINGERPRINT = /^[0-9a-f]{64}$/u;
+export function serverAuthorityPath(dataDirectory) {
+    return join(dataDirectory, SERVER_AUTHORITY_FILE);
+}
+/** Reads `--server-ca-sha256`: 64 hex characters, with or without colons. */
+export function parseAuthorityFingerprint(value) {
+    const normalized = value.trim().toLowerCase().replace(/:/gu, "");
+    if (!FINGERPRINT.test(normalized)) {
+        throw new Error("--server-ca-sha256 must be the 64-character fingerprint from the Connect machine dialog.");
+    }
+    return normalized;
+}
+/** Adds an authority to the ones this process trusts for HTTPS and gRPC. */
+export function trustAuthority(pem) {
+    if (typeof tls.setDefaultCACertificates !== "function" || typeof tls.getCACertificates !== "function") {
+        throw new Error("Connecting to a company's own Phigon server needs Node.js 24.5 or newer. Update Node.js and try again.");
+    }
+    const current = tls.getCACertificates("default");
+    if (!current.some((certificate) => sameCertificate(certificate, pem))) {
+        tls.setDefaultCACertificates([...current, pem]);
+    }
+}
+/** Trusts the authority saved when this computer paired, and returns its file. */
+export function trustSavedAuthority(dataDirectory) {
+    const file = serverAuthorityPath(dataDirectory);
+    if (!existsSync(file))
+        return undefined;
+    trustAuthority(readFileSync(file, "utf8"));
+    return file;
+}
+export async function forgetServerAuthority(dataDirectory) {
+    await rm(serverAuthorityPath(dataDirectory), { force: true });
+}
+/**
+ * Finds the certificate in the server's chain whose SHA-256 matches the
+ * pinned fingerprint, saves it and trusts it. Nothing is sent to the server
+ * on this connection; the requests that follow are verified normally,
+ * including the server's name, against the pinned authority. Behind a
+ * proxy (`options.proxy`), the chain is read through a CONNECT tunnel.
+ */
+export async function pinServerAuthority(url, fingerprint, dataDirectory, connect = tls.connect, options = {}) {
+    if (url.protocol !== "https:") {
+        throw new Error("--server-ca-sha256 needs an https:// control plane URL.");
+    }
+    const tunnel = options.proxy === undefined
+        ? undefined
+        : await connectThroughProxy(options.proxy, url.hostname.replace(/^\[|\]$/gu, ""), Number(url.port || 443));
+    const chain = await peerChain(url, connect, tunnel);
+    const match = chain.find((raw) => createHash("sha256").update(raw).digest("hex") === fingerprint);
+    if (match === undefined) {
+        throw new Error("The server's certificate does not match the fingerprint in the pairing command. Check that this computer is on the right network and that you copied the whole command.");
+    }
+    const pem = new X509Certificate(match).toString();
+    trustAuthority(pem);
+    const file = serverAuthorityPath(dataDirectory);
+    await writeFile(file, pem, { mode: 0o600 });
+    return file;
+}
+function peerChain(url, connect, tunnel) {
+    const host = url.hostname.replace(/^\[|\]$/gu, "");
+    const port = Number(url.port || 443);
+    return new Promise((resolve, reject) => {
+        const socket = connect({
+            ...(tunnel === undefined ? { host, port } : { socket: tunnel }),
+            ...(isIP(host) ? {} : { servername: host }),
+            // Only to read the chain; the fingerprint decides what is trusted.
+            rejectUnauthorized: false,
+            timeout: 15_000,
+        }, () => {
+            const chain = [];
+            const seen = new Set();
+            let certificate = socket.getPeerCertificate(true);
+            while (certificate?.raw && !seen.has(certificate.fingerprint256)) {
+                seen.add(certificate.fingerprint256);
+                chain.push(certificate.raw);
+                certificate = certificate.issuerCertificate;
+            }
+            socket.end();
+            resolve(chain);
+        });
+        socket.once("error", (error) => reject(new Error(`Could not reach ${url.host}: ${error.message}`)));
+        socket.once("timeout", () => {
+            socket.destroy();
+            reject(new Error(`Connecting to ${url.host} timed out. Check that this computer can reach it on the network.`));
+        });
+    });
+}
+function sameCertificate(a, b) {
+    const strip = (pem) => pem.replace(/\s+/gu, "");
+    return strip(a) === strip(b);
+}
+//# sourceMappingURL=server-authority.js.map

package/dist/src/server-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-authority.js","sourceRoot":"","sources":["../../src/server-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAe,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAErD,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAEtC,MAAM,UAAU,mBAAmB,CAAC,aAAqB;IACvD,OAAO,IAAI,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;AACpD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAC;IAC9G,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,OAAO,GAAG,CAAC,wBAAwB,KAAK,UAAU,IAAI,OAAO,GAAG,CAAC,iBAAiB,KAAK,UAAU,EAAE,CAAC;QACtG,MAAM,IAAI,KAAK,CAAC,wGAAwG,CAAC,CAAC;IAC5H,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,wBAAwB,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,aAAqB;IACvD,MAAM,IAAI,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,cAAc,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,aAAqB;IAC/D,MAAM,EAAE,CAAC,mBAAmB,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC;AAID;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAQ,EACR,WAAmB,EACnB,aAAqB,EACrB,UAAmB,GAAG,CAAC,OAAO,EAC9B,UAAiD,EAAE;IAEnD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS;QACxC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,mBAAmB,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;IAC7G,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,CAAC;IAClG,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,yKAAyK,CAAC,CAAC;IAC7L,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClD,cAAc,CAAC,GAAG,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,GAAQ,EAAE,OAAgB,EAAE,MAA0B;IACvE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;IACrC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,OAAO,CAAC;YACrB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC/D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC3C,mEAAmE;YACnE,kBAAkB,EAAE,KAAK;YACzB,OAAO,EAAE,MAAM;SAChB,EAAE,GAAG,EAAE;YACN,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,IAAI,WAAW,GAA4C,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAC3F,OAAO,WAAW,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;gBACrC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBAC5B,WAAW,GAAG,WAAW,CAAC,iBAAiB,CAAC;YAC9C,CAAC;YACD,MAAM,CAAC,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACpG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC1B,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,IAAI,mEAAmE,CAAC,CAAC,CAAC;QAClH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC"}

package/dist/src/server-clock.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The server's idea of the time, estimated from the times it stamps on the
+ * stream (acknowledgements and policies). Remote commands carry an expiry in
+ * server time, so judging it by a computer clock that is a few minutes off
+ * would reject or extend every command.
+ *
+ * Each sample is the server's stamp minus the local time it arrived, which
+ * is the true offset less the one-way network delay: well under a second,
+ * against command windows of minutes. The estimate is the median of recent
+ * samples, so one odd stamp does not move it, and it is bounded so a broken
+ * stamp cannot move the clock arbitrarily far.
+ */
+export declare class ServerClock {
+    #private;
+    constructor(options?: Readonly<{
+        now?: () => number;
+        /** The largest correction applied; larger offsets are clamped to it. */
+        maxCorrectionMs?: number;
+        /** Skews at least this large are reported. */
+        largeSkewMs?: number;
+        onLargeSkew?: (offsetMs: number) => void;
+    }>);
+    /** Records a server timestamp that arrived just now. */
+    observe(serverTime: Date): void;
+    /** How far the server's clock is ahead of this computer's, as applied. */
+    offsetMs(): number;
+    /** The current time on the server's clock, in epoch milliseconds. */
+    now(): number;
+}
+/** A plain-English description of a clock skew, for status messages. */
+export declare function describeClockSkew(offsetMs: number): string;
+//# sourceMappingURL=server-clock.d.ts.map

package/dist/src/server-clock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-clock.d.ts","sourceRoot":"","sources":["../../src/server-clock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,qBAAa,WAAW;;gBAUV,OAAO,GAAE,QAAQ,CAAC;QAC5B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;QACnB,wEAAwE;QACxE,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,8CAA8C;QAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;KAC1C,CAAM;IAOP,wDAAwD;IACxD,OAAO,CAAC,UAAU,EAAE,IAAI,GAAG,IAAI;IAuB/B,0EAA0E;IAC1E,QAAQ,IAAI,MAAM;IAIlB,qEAAqE;IACrE,GAAG,IAAI,MAAM;CAGd;AAED,wEAAwE;AACxE,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAO1D"}