@piecemaker-legal/piecemaker 1.1.1 → 2.0.1

package/server/piecemaker/anonymizer/hudsucker-fixture.cjs

@@ -0,0 +1,127 @@
+const { execFileSync, spawn } = require('node:child_process');
+const fs = require('node:fs');
+const net = require('node:net');
+const os = require('node:os');
+const path = require('node:path');
+
+const { startRewriterBridge } = require('./rewriter-bridge.cjs');
+const { createSqliteDictionaryLoader } = require('./sqlite-dictionary.cjs');
+
+function hudsuckerBinary() {
+  if (process.env.PIECEMAKER_HUDSUCKER_BIN) return process.env.PIECEMAKER_HUDSUCKER_BIN;
+  return path.join(__dirname, 'hudsucker-proxy', 'target', 'release', 'piecemaker-hudsucker');
+}
+
+function makeCertificateAuthority(directory) {
+  const cert = path.join(directory, 'ca.crt');
+  const key = path.join(directory, 'ca.key');
+  execFileSync('openssl', [
+    'req', '-x509', '-newkey', 'rsa:2048', '-nodes',
+    '-keyout', key, '-out', cert, '-days', '30',
+    '-subj', '/CN=PieceMaker Test CA',
+    '-addext', 'basicConstraints=critical,CA:true,pathlen:0',
+    '-addext', 'keyUsage=critical,keyCertSign,cRLSign',
+  ], { stdio: 'ignore' });
+  return { cert, key };
+}
+
+function freePort() {
+  return new Promise((resolve, reject) => {
+    const server = net.createServer();
+    server.once('error', reject);
+    server.listen(0, '127.0.0.1', () => {
+      const { port } = server.address();
+      server.close((error) => (error ? reject(error) : resolve(port)));
+    });
+  });
+}
+
+function waitForOutput(child, needle, timeoutMs) {
+  return new Promise((resolve, reject) => {
+    let buffer = '';
+    const timer = setTimeout(() => {
+      reject(new Error(`hudsucker n'a pas écouté : ${buffer}`));
+    }, timeoutMs);
+    const take = (chunk) => {
+      buffer += chunk.toString();
+      if (!buffer.includes(needle)) return;
+      clearTimeout(timer);
+      resolve(buffer);
+    };
+    child.stdout.on('data', take);
+    child.stderr.on('data', take);
+    child.once('exit', (code) => {
+      clearTimeout(timer);
+      reject(new Error(`hudsucker sorti (${code}) : ${buffer}`));
+    });
+  });
+}
+
+async function startHudsuckerSession({
+  databasePath,
+  upstreamPort,
+  harness = null,
+  hosts = ['api.anthropic.com', 'api.openai.com', 'chatgpt.com'],
+  directory = fs.mkdtempSync(path.join(os.tmpdir(), 'pm-hudsucker-')),
+} = {}) {
+  const binary = hudsuckerBinary();
+  if (!fs.existsSync(binary)) {
+    throw new Error(`binaire hudsucker absent : ${binary}`);
+  }
+  const ca = makeCertificateAuthority(directory);
+  const dictionary = createSqliteDictionaryLoader({ databasePath });
+  const bridge = await startRewriterBridge({ dictionary, harness });
+  const port = await freePort();
+  const upstreamMap = hosts.map((host) => `${host}=127.0.0.1:${upstreamPort}`).join(',');
+  const child = spawn(binary, [
+    '--listen', `127.0.0.1:${port}`,
+    '--rewriter', `http://127.0.0.1:${bridge.port}`,
+    '--ca-cert', ca.cert,
+    '--ca-key', ca.key,
+    '--hosts', hosts.join(','),
+    '--upstream-map', upstreamMap,
+  ], {
+    stdio: ['ignore', 'pipe', 'pipe'],
+    env: { ...process.env, HTTPS_PROXY: '', HTTP_PROXY: '', ALL_PROXY: '', http_proxy: '', https_proxy: '' },
+  });
+  try {
+    await waitForOutput(child, `listening 127.0.0.1:${port}`, 15000);
+  } catch (error) {
+    child.kill('SIGKILL');
+    await bridge.close();
+    dictionary.close();
+    throw error;
+  }
+  return {
+    origin: `http://127.0.0.1:${port}`,
+    caFile: ca.cert,
+    stats: bridge.stats,
+    async close() {
+      child.kill('SIGTERM');
+      await new Promise((resolve) => child.once('exit', resolve));
+      await bridge.close();
+      dictionary.close();
+    },
+  };
+}
+
+async function postThrough(origin, caFile, body, route = '/v1/messages', host = 'api.anthropic.com') {
+  const { ProxyAgent, fetch } = await import('undici');
+  const agent = new ProxyAgent({
+    uri: origin,
+    requestTls: { ca: fs.readFileSync(caFile) },
+  });
+  const response = await fetch(`https://${host}${route}`, {
+    method: 'POST',
+    headers: { 'content-type': 'application/json' },
+    body,
+    dispatcher: agent,
+  });
+  return response.text();
+}
+
+module.exports = {
+  hudsuckerBinary,
+  postThrough,
+  startHudsuckerSession,
+};