@sendbird/cli 0.0.0-stage → 0.3.0-alpha.1

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,MAAM,CAAC,MAAM,OAAO,GAAW,IAAI,CAAC,KAAK,CACvC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAClE,CAAC,OAAO,CAAC"}

package/dist/windows.d.ts

@@ -0,0 +1,4 @@
+export declare function powershell(script: string, input: unknown): string;
+export declare function windowsCredential(op: "get" | "set" | "delete", directory: string, name: string, value?: string): string | undefined;
+/** Supply a user-only DACL at exclusive file creation, before any secret bytes exist. */
+export declare function windowsPrivateFile(path: string, content: string, identity?: boolean): string;

package/dist/windows.js

@@ -0,0 +1,136 @@
+/** Windows platform boundary. Secrets travel over stdin, never argv or files. */
+import { execFileSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import { join, resolve } from "node:path";
+export function powershell(script, input) {
+    const root = process.env.SystemRoot;
+    if (!root)
+        throw Error("Windows system directory is unavailable");
+    return execFileSync(join(root, "System32", "WindowsPowerShell", "v1.0", "powershell.exe"), [
+        "-NoLogo",
+        "-NoProfile",
+        "-NonInteractive",
+        "-EncodedCommand",
+        Buffer.from(`$ErrorActionPreference='Stop'; [Console]::InputEncoding=[Text.Encoding]::UTF8; [Console]::OutputEncoding=[Text.Encoding]::UTF8; $r=[Console]::In.ReadToEnd() | ConvertFrom-Json; ${script}`, "utf16le").toString("base64"),
+    ], {
+        // Do not inherit PowerShell 7/user modules into the system 5.1 host.
+        env: {
+            ...process.env,
+            PSModulePath: join(root, "System32", "WindowsPowerShell", "v1.0", "Modules"),
+        },
+        input: JSON.stringify(input),
+        encoding: "utf8",
+        timeout: 30_000,
+        maxBuffer: 1024 * 1024,
+        stdio: ["pipe", "pipe", "pipe"],
+        windowsHide: true,
+    }).trim();
+}
+// Credential Manager blobs have a small size limit. A generation's chunks are
+// committed by a final pointer write; an interrupted write preserves the old value.
+const credentialScript = `
+Add-Type -TypeDefinition @'
+using System;
+using System.Text;
+using System.Runtime.InteropServices;
+public static class SendbirdCredentials {
+ [StructLayout(LayoutKind.Sequential, CharSet=CharSet.Unicode)]
+ struct Cred { public uint Flags, Type; public string TargetName, Comment; public long LastWritten; public uint Size; public IntPtr Blob; public uint Persist, AttributeCount; public IntPtr Attributes; public string Alias, UserName; }
+ [DllImport("advapi32.dll", EntryPoint="CredReadW", CharSet=CharSet.Unicode, SetLastError=true)] static extern bool Read(string target,uint type,uint flags,out IntPtr value);
+ [DllImport("advapi32.dll", EntryPoint="CredWriteW", CharSet=CharSet.Unicode, SetLastError=true)] static extern bool Write(ref Cred value,uint flags);
+ [DllImport("advapi32.dll", EntryPoint="CredDeleteW", CharSet=CharSet.Unicode, SetLastError=true)] static extern bool Delete(string target,uint type,uint flags);
+ [DllImport("advapi32.dll", EntryPoint="CredEnumerateW", CharSet=CharSet.Unicode, SetLastError=true)] static extern bool Enumerate(string filter,uint flags,out uint count,out IntPtr values);
+ [DllImport("advapi32.dll")] static extern void CredFree(IntPtr value);
+ static byte[] Get(string target) {
+  IntPtr p; if(!Read(target,1,0,out p)) { if(Marshal.GetLastWin32Error()==1168)return null; throw new Exception("Credential read failed"); }
+  try { Cred c=(Cred)Marshal.PtrToStructure(p,typeof(Cred)); if(c.Size>2560)throw new Exception("Invalid credential size"); byte[] b=new byte[c.Size]; Marshal.Copy(c.Blob,b,0,b.Length); return b; } finally { CredFree(p); }
+ }
+ static void Put(string target,byte[] data) {
+  IntPtr p=Marshal.AllocHGlobal(data.Length);
+  try { Marshal.Copy(data,0,p,data.Length); Cred c=new Cred(); c.Type=1;c.TargetName=target;c.UserName="Sendbird CLI";c.Size=(uint)data.Length;c.Blob=p;c.Persist=2;
+   if(!Write(ref c,0))throw new Exception("Credential write failed");
+  } finally { for(int i=0;i<data.Length;i++)Marshal.WriteByte(p,i,0);Marshal.FreeHGlobal(p); }
+ }
+ static void Remove(string target) { if(!Delete(target,1,0)&&Marshal.GetLastWin32Error()!=1168)throw new Exception("Credential deletion failed"); }
+ static string Pointer(string target) { byte[] p=Get(target);return p==null?null:Encoding.ASCII.GetString(p); }
+ static string[] Parse(string p) { string[] a=p.Split(':');int n;Guid g;if(a.Length!=3||a[0]!="v1"||!Guid.TryParseExact(a[1],"N",out g)||!int.TryParse(a[2],out n)||n<1||n>64)throw new Exception("Invalid credential manifest");return a; }
+ // Transport discovery may read before acquiring the OAuth lock. If another
+ // process commits a generation during a read, retry the read, never the write.
+ public static string Load(string target) {
+  for(int attempt=0;attempt<3;attempt++) {
+   string p=Pointer(target);if(p==null)return null;string[] a=Parse(p);int n=int.Parse(a[2]);bool incomplete=false;
+   using(var stream=new System.IO.MemoryStream()) {
+    for(int i=0;i<n;i++) {byte[] b=Get(target+":"+a[1]+":"+i);if(b==null){incomplete=true;break;}stream.Write(b,0,b.Length);}
+    if(Pointer(target)!=p)continue;
+    if(incomplete)throw new Exception("Incomplete credential");
+    return new UTF8Encoding(false,true).GetString(stream.ToArray());
+   }
+  }
+  throw new Exception("Credential changed during read");
+ }
+ static void Cleanup(string target,string keep) {
+  uint count;IntPtr values;if(!Enumerate(target+":*",0,out count,out values)) { if(Marshal.GetLastWin32Error()==1168)return;throw new Exception("Credential enumeration failed"); }
+  try { for(int i=0;i<count;i++) { IntPtr p=Marshal.ReadIntPtr(values,i*IntPtr.Size);Cred c=(Cred)Marshal.PtrToStructure(p,typeof(Cred));if(c.TargetName.StartsWith(target+":",StringComparison.Ordinal)&& (keep==null||!c.TargetName.StartsWith(target+":"+keep+":",StringComparison.Ordinal)))Remove(c.TargetName); } } finally { CredFree(values); }
+ }
+ public static void Save(string target,string value) {
+  byte[] b=Encoding.UTF8.GetBytes(value);if(b.Length==0||b.Length>153600)throw new Exception("Credential too large");
+  string generation=Guid.NewGuid().ToString("N");int count=(b.Length+2399)/2400;
+  try { for(int i=0;i<count;i++){int length=Math.Min(2400,b.Length-i*2400);byte[] part=new byte[length];Array.Copy(b,i*2400,part,0,length);Put(target+":"+generation+":"+i,part);Array.Clear(part,0,part.Length);}Put(target,Encoding.ASCII.GetBytes("v1:"+generation+":"+count)); }
+  catch { for(int i=0;i<count;i++){try{Remove(target+":"+generation+":"+i);}catch{}}throw; }
+  finally {Array.Clear(b,0,b.Length);}
+  // Old generations are no longer reachable. Cleanup failure must not undo the committed value.
+  try {Cleanup(target,generation);}catch{}
+ }
+ public static void Erase(string target) {Remove(target);Cleanup(target,null);}
+}
+'@
+switch($r.op) {
+ 'get' { @{value=[SendbirdCredentials]::Load($r.target)} | ConvertTo-Json -Compress }
+ 'set' { [SendbirdCredentials]::Save($r.target,$r.value) }
+ 'delete' { [SendbirdCredentials]::Erase($r.target) }
+ default { throw 'Unsupported credential action' }
+}`;
+export function windowsCredential(op, directory, name, value) {
+    const target = "SendbirdCLI:" +
+        createHash("sha256")
+            .update(JSON.stringify([resolve(directory).toLowerCase(), name]))
+            .digest("hex");
+    const result = powershell(credentialScript, { op, target, value });
+    if (op !== "get")
+        return;
+    const parsed = JSON.parse(result);
+    if (parsed.value === null)
+        return;
+    if (typeof parsed.value !== "string")
+        throw Error("Invalid credential response");
+    return parsed.value;
+}
+/** Supply a user-only DACL at exclusive file creation, before any secret bytes exist. */
+export function windowsPrivateFile(path, content, identity = false) {
+    return powershell(`
+if($r.identity) {
+ Add-Type -TypeDefinition @'
+using System;
+using System.Runtime.InteropServices;
+using Microsoft.Win32.SafeHandles;
+public static class SendbirdPrivateFileIdentity {
+ [StructLayout(LayoutKind.Sequential)] struct Info { public uint Attributes; public System.Runtime.InteropServices.ComTypes.FILETIME Created, Accessed, Written; public uint Volume, SizeHigh, SizeLow, Links, IndexHigh, IndexLow; }
+ [DllImport("kernel32.dll", SetLastError=true)] static extern bool GetFileInformationByHandle(SafeFileHandle handle, out Info info);
+ public static string Read(SafeFileHandle handle) { Info info; if(!GetFileInformationByHandle(handle,out info))throw new Exception("File identity unavailable"); return info.Volume.ToString(System.Globalization.CultureInfo.InvariantCulture)+":"+(((ulong)info.IndexHigh<<32)|info.IndexLow).ToString(System.Globalization.CultureInfo.InvariantCulture); }
+}
+'@
+}
+$sid=[Security.Principal.WindowsIdentity]::GetCurrent().User
+$acl=[Security.AccessControl.FileSecurity]::new()
+$acl.SetOwner($sid); $acl.SetAccessRuleProtection($true,$false)
+$rule=[Security.AccessControl.FileSystemAccessRule]::new($sid,[Security.AccessControl.FileSystemRights]::FullControl,[Security.AccessControl.AccessControlType]::Allow)
+$acl.AddAccessRule($rule)
+# Supply the DACL atomically at CreateNew; a ReadWrite handle lacks WRITE_DAC.
+$stream=[IO.FileStream]::new($r.path,[IO.FileMode]::CreateNew,[Security.AccessControl.FileSystemRights]::FullControl,[IO.FileShare]::None,4096,[IO.FileOptions]::None,$acl)
+try {
+ $bytes=[Text.Encoding]::UTF8.GetBytes($r.content); $stream.Write($bytes,0,$bytes.Length); $stream.Flush($true)
+ if($r.identity) { [Console]::Write([SendbirdPrivateFileIdentity]::Read($stream.SafeFileHandle)) }
+} finally { $stream.Dispose() }
+`, { path: resolve(path), content, identity });
+}
+//# sourceMappingURL=windows.js.map

package/dist/windows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows.js","sourceRoot":"","sources":["../src/windows.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,KAAc;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAClE,OAAO,YAAY,CACjB,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,gBAAgB,CAAC,EACrE;QACE,SAAS;QACT,YAAY;QACZ,iBAAiB;QACjB,iBAAiB;QACjB,MAAM,CAAC,IAAI,CACT,oLAAoL,MAAM,EAAE,EAC5L,SAAS,CACV,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACrB,EACD;QACE,qEAAqE;QACrE,GAAG,EAAE;YACH,GAAG,OAAO,CAAC,GAAG;YACd,YAAY,EAAE,IAAI,CAChB,IAAI,EACJ,UAAU,EACV,mBAAmB,EACnB,MAAM,EACN,SAAS,CACV;SACF;QACD,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAC5B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,IAAI,GAAG,IAAI;QACtB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/B,WAAW,EAAE,IAAI;KAClB,CACF,CAAC,IAAI,EAAE,CAAC;AACX,CAAC;AAED,8EAA8E;AAC9E,oFAAoF;AACpF,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6DvB,CAAC;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAA4B,EAC5B,SAAiB,EACjB,IAAY,EACZ,KAAc;IAEd,MAAM,MAAM,GACV,cAAc;QACd,UAAU,CAAC,QAAQ,CAAC;aACjB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;aAChE,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,UAAU,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,IAAI,EAAE,KAAK,KAAK;QAAE,OAAO;IACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO;IAClC,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAClC,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,OAAe,EACf,QAAQ,GAAG,KAAK;IAEhB,OAAO,UAAU,CACf;;;;;;;;;;;;;;;;;;;;;;;;CAwBH,EACG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAC3C,CAAC;AACJ,CAAC"}

package/dist/workflows.d.ts

@@ -0,0 +1,228 @@
+export declare const workflows: ({
+    id: string;
+    title: string;
+    description: string;
+    requires: string[];
+    steps: ({
+        id: string;
+        argv: string[];
+        effect: string;
+        verify: string;
+        when?: undefined;
+        save_stdout_to?: undefined;
+    } | {
+        id: string;
+        argv: string[];
+        effect: string;
+        when: string;
+        save_stdout_to: string;
+        verify: string;
+    })[];
+    sdk_context?: undefined;
+} | {
+    id: string;
+    title: string;
+    description: string;
+    requires: string[];
+    sdk_context: {
+        when_profile_environment: string;
+        automatic: string;
+        optional_overrides: string[];
+        production: string;
+    };
+    steps: ({
+        id: string;
+        argv: string[];
+        effect: string;
+        verify: string;
+        when?: undefined;
+        terminal?: undefined;
+        capture?: undefined;
+    } | {
+        id: string;
+        argv: string[];
+        effect: string;
+        when: string;
+        terminal: string;
+        verify: string;
+        capture?: undefined;
+    } | {
+        id: string;
+        argv: string[];
+        effect: string;
+        terminal: string;
+        verify: string;
+        when?: undefined;
+        capture?: undefined;
+    } | {
+        id: string;
+        argv: string[];
+        effect: string;
+        terminal: string;
+        capture: {
+            MESSAGE_ID: string;
+        };
+        verify: string;
+        when?: undefined;
+    })[];
+} | {
+    id: string;
+    title: string;
+    description: string;
+    requires: string[];
+    steps: ({
+        id: string;
+        argv: string[];
+        effect: string;
+        verify: string;
+        when?: undefined;
+        capture?: undefined;
+    } | {
+        id: string;
+        argv: string[];
+        effect: string;
+        when: string;
+        capture: {
+            ORG_UID: string;
+            APP_ID?: undefined;
+            CHANNEL_URL?: undefined;
+        };
+        verify: string;
+    } | {
+        id: string;
+        argv: string[];
+        effect: string;
+        when: string;
+        capture: {
+            APP_ID: string;
+            ORG_UID?: undefined;
+            CHANNEL_URL?: undefined;
+        };
+        verify: string;
+    } | {
+        id: string;
+        argv: string[];
+        effect: string;
+        when: string;
+        verify: string;
+        capture?: undefined;
+    } | {
+        id: string;
+        argv: string[];
+        effect: string;
+        when: string;
+        capture: {
+            CHANNEL_URL: string;
+            ORG_UID?: undefined;
+            APP_ID?: undefined;
+        };
+        verify: string;
+    })[];
+    sdk_context?: undefined;
+} | {
+    id: string;
+    title: string;
+    description: string;
+    requires: string[];
+    steps: ({
+        id: string;
+        argv: string[];
+        effect: string;
+        verify: string;
+        when?: undefined;
+        capture?: undefined;
+    } | {
+        id: string;
+        argv: string[];
+        effect: string;
+        verify: string;
+        when: string;
+        capture: {
+            MESSAGE_ID: string;
+            POLL_ID?: undefined;
+            POLL_MESSAGE_ID?: undefined;
+            OPTION_ID?: undefined;
+        };
+    } | {
+        id: string;
+        argv: string[];
+        effect: string;
+        verify: string;
+        when: string;
+        capture: {
+            POLL_ID: string;
+            MESSAGE_ID?: undefined;
+            POLL_MESSAGE_ID?: undefined;
+            OPTION_ID?: undefined;
+        };
+    } | {
+        id: string;
+        argv: string[];
+        effect: string;
+        verify: string;
+        when: string;
+        capture: {
+            POLL_MESSAGE_ID: string;
+            MESSAGE_ID?: undefined;
+            POLL_ID?: undefined;
+            OPTION_ID?: undefined;
+        };
+    } | {
+        id: string;
+        argv: string[];
+        effect: string;
+        verify: string;
+        capture: {
+            OPTION_ID: string;
+            MESSAGE_ID?: undefined;
+            POLL_ID?: undefined;
+            POLL_MESSAGE_ID?: undefined;
+        };
+        when?: undefined;
+    } | {
+        id: string;
+        argv: string[];
+        effect: string;
+        verify: string;
+        when: string;
+        capture?: undefined;
+    })[];
+    sdk_context?: undefined;
+})[];
+export declare function workflowIndex(): {
+    workflows: ({
+        inspect: string[];
+        id: string;
+        title: string;
+        description: string;
+        requires: string[];
+        sdk_context?: undefined;
+    } | {
+        inspect: string[];
+        id: string;
+        title: string;
+        description: string;
+        requires: string[];
+        sdk_context: {
+            when_profile_environment: string;
+            automatic: string;
+            optional_overrides: string[];
+            production: string;
+        };
+    } | {
+        inspect: string[];
+        id: string;
+        title: string;
+        description: string;
+        requires: string[];
+        sdk_context?: undefined;
+    } | {
+        inspect: string[];
+        id: string;
+        title: string;
+        description: string;
+        requires: string[];
+        sdk_context?: undefined;
+    })[];
+    execution: string;
+};