@ravefox/space 0.2.1 → 0.4.0

package/src/lib/daemon-store.js

@@ -1,119 +0,0 @@
-/**
- * Local daemon credential storage.
- *
- * A daemon is one machine-level supervisor, not an agent token file. Keep its
- * credential in its own 0700 directory and enforce 0600 on every write; the
- * bearer must never be printed or placed in the ordinary CLI config file.
- */
-
-import {
-  chmodSync,
-  existsSync,
-  mkdirSync,
-  readFileSync,
-  renameSync,
-  statSync,
-  unlinkSync,
-  writeFileSync,
-} from 'fs';
-import { homedir } from 'os';
-import { join } from 'path';
-
-const daemonDir = () => join(homedir(), '.commonly', 'daemon');
-export const daemonRecordPath = () => join(daemonDir(), 'machine.json');
-export const daemonStopPath = () => join(daemonDir(), 'stopped.json');
-
-// A terminal machine-key verdict survives launchd's one unavoidable restart.
-// It contains no bearer; registration clears it only after the new key is safe.
-export const loadDaemonStop = (record = { machineDbId: 'unregistered' }) => {
-  const path = daemonStopPath();
-  if (!existsSync(path)) return null;
-  const value = JSON.parse(readFileSync(path, 'utf8'));
-  return value.machineDbId === record.machineDbId ? value : null;
-};
-
-export const saveDaemonStop = (record, exitCode) => {
-  const dir = daemonDir();
-  if (!existsSync(dir)) mkdirSync(dir, { recursive: true, mode: 0o700 });
-  chmodSync(dir, 0o700);
-  const path = daemonStopPath();
-  const tmp = `${path}.${process.pid}.tmp`;
-  try {
-    writeFileSync(tmp, `${JSON.stringify({ machineDbId: record.machineDbId, exitCode })}\n`, { mode: 0o600, flag: 'wx' });
-    renameSync(tmp, path);
-  } catch (error) {
-    if (existsSync(tmp)) unlinkSync(tmp);
-    throw error;
-  }
-};
-
-export const clearDaemonStop = () => {
-  if (existsSync(daemonStopPath())) unlinkSync(daemonStopPath());
-};
-
-const validateRecord = (record) => {
-  if (!record
-    || typeof record.machineDbId !== 'string'
-    || typeof record.machineId !== 'string'
-    || typeof record.machineName !== 'string'
-    || typeof record.instanceUrl !== 'string'
-    || typeof record.daemonToken !== 'string'
-    || !record.daemonToken.startsWith('cm_daemon_')) {
-    throw new Error('Daemon credential file is invalid. Revoke the machine before registering again.');
-  }
-  return record;
-};
-
-export const loadDaemonRecord = ({ platform = process.platform } = {}) => {
-  const path = daemonRecordPath();
-  const dir = daemonDir();
-  if (!existsSync(path)) return null;
-  // D245: Windows has no POSIX mode bits. Node reports every file there as
-  // 0o666 (0o444 when read-only) whatever its ACL, so this check refused every
-  // registration on Windows. Access there is the ACL's job; the record sits in
-  // the user's profile, which only that user (and administrators) can read.
-  const posix = platform !== 'win32';
-  if (posix && (statSync(dir).mode & 0o077) !== 0) {
-    throw new Error(`Daemon credential directory permissions are insecure at ${dir}. Set them to 0700 before running the daemon.`);
-  }
-  if (posix && (statSync(path).mode & 0o077) !== 0) {
-    throw new Error(`Daemon credential file permissions are insecure at ${path}. Set them to 0600 before running the daemon.`);
-  }
-  try {
-    return validateRecord(JSON.parse(readFileSync(path, 'utf8')));
-  } catch (error) {
-    if (error instanceof Error && error.message.startsWith('Daemon credential file')) {
-      throw new Error(`${error.message} (${path})`);
-    }
-    throw new Error(`Daemon credential file is unreadable at ${path}. Revoke the machine before registering again.`);
-  }
-};
-
-export const saveDaemonRecord = (record) => {
-  const safeRecord = validateRecord(record);
-  const dir = daemonDir();
-  if (!existsSync(dir)) mkdirSync(dir, { recursive: true, mode: 0o700 });
-  chmodSync(dir, 0o700);
-
-  const path = daemonRecordPath();
-  const temporaryPath = `${path}.${process.pid}.tmp`;
-  try {
-    writeFileSync(temporaryPath, `${JSON.stringify(safeRecord, null, 2)}\n`, { mode: 0o600 });
-    chmodSync(temporaryPath, 0o600);
-    renameSync(temporaryPath, path);
-    chmodSync(path, 0o600);
-  } catch (error) {
-    if (existsSync(temporaryPath)) unlinkSync(temporaryPath);
-    throw error;
-  }
-};
-
-// Call this only after the owner has revoked the matching server-side machine.
-// Local deletion first would strand a live credential with no CLI path to
-// revoke it, which is exactly the failure this command exists to prevent.
-export const removeDaemonRecord = () => {
-  const path = daemonRecordPath();
-  if (!existsSync(path)) return false;
-  unlinkSync(path);
-  return true;
-};