@seqyuan/annovibe 0.8.144 → 0.8.145

package/.next/server/chunks/9557.js

@@ -1 +1 @@
-exports.id=9557,exports.ids=[9557],exports.modules={2072:(a,b,c)=>{"use strict";c.d(b,{Ak:()=>n,VZ:()=>j,Yb:()=>k,b5:()=>o,z3:()=>l});var d=c(69554),e=c(63620),f=c(19426),g=c(34013);let h=null;function i(){if(!h){let a=new d.Xf,b=new e.gZ;h=new f._k({crypto:a,base32:b})}return h}function j(){return i().generateSecret()}function k(a,b,c="AnnoVibe"){return i().toURI({secret:a,label:b,issuer:c})}async function l(a,b){try{return(await i().verify(b,{secret:a,epochTolerance:1})).valid}catch{return!1}}function m(a){return(0,g.Y8)(a,10)}function n(a,b){for(let c of b)if((0,g.Dm)(a,c))return c;return null}function o(){let a=[];for(let b=0;b<8;b++){let b=new Uint8Array(6);globalThis.crypto.getRandomValues(b);let c=Array.from(b,a=>a.toString(16).padStart(2,"0")).join("");a.push(`${c.slice(0,4)}-${c.slice(4,8)}-${c.slice(8,12)}`)}return{codes:a,hashes:a.map(m)}}},7496:(a,b,c)=>{"use strict";c.d(b,{SK:()=>f,US:()=>i,bw:()=>h,qM:()=>g});function d(){return process.env.ANNOVIBE_AUTH_SECRET??process.env.PIDEX_AUTH_SECRET??""}async function e(a,b){let c=new TextEncoder,d=await globalThis.crypto.subtle.importKey("raw",c.encode(a),{name:"HMAC",hash:"SHA-256"},!1,["sign"]);return Array.from(new Uint8Array(await globalThis.crypto.subtle.sign("HMAC",d,c.encode(b))),a=>a.toString(16).padStart(2,"0")).join("")}function f(a,b){if(a.length!==b.length)return!1;let c=0;for(let d=0;d<a.length;d++)c|=a.charCodeAt(d)^b.charCodeAt(d);return 0===c}async function g(a){let b,c=a||d();if(!c)throw Error("auth secret is not configured");let f=`${Date.now()}:${(b=new Uint8Array(16),globalThis.crypto.getRandomValues(b),Array.from(b,a=>a.toString(16).padStart(2,"0")).join(""))}`,g=await e(c,f);return`${f}:${g}`}async function h(a,b,c=Date.now()){try{let g=b||d();if(!g)return!1;let h=a.split(":"),i=h.pop(),j=h.join(":");if(!i||!j)return!1;let k=await e(g,j);if(!f(i,k))return!1;let l=Number.parseInt(j.split(":",1)[0]??"",10);if(!Number.isSafeInteger(l)||l<=0)return!1;let m=c-l;if(m>2592e6||m<-3e5)return!1;return!0}catch{return!1}}function i(a){return`annovibe-auth-${function(){if(process.env.PORT)return process.env.PORT;let a=process.argv;for(let b=0;b<a.length;b++)if(("-p"===a[b]||"--port"===a[b])&&b+1<a.length)return a[b+1];return"30141"}()}=${a}; HttpOnly; SameSite=Lax; Path=/; Max-Age=2592000`}},8102:(a,b,c)=>{"use strict";c.d(b,{$:()=>g});var d=c(55511),e=c(29021),f=c(33873);function g(a,b){let c=(0,f.dirname)(a),g=(0,f.join)(c,`.${(0,f.basename)(a)}-${(0,d.randomUUID)()}.tmp`),h=!1;try{(0,e.writeFileSync)(g,b,{encoding:"utf8",flag:"wx",mode:384,flush:!0}),(0,e.renameSync)(g,a)}catch(a){throw h=!0,a}finally{try{(0,e.unlinkSync)(g)}catch(a){if("ENOENT"!==a.code&&!h)throw a}}}},20424:(a,b,c)=>{"use strict";c.d(b,{BE:()=>p,I0:()=>z,JZ:()=>I,OJ:()=>D,US:()=>h.US,Vn:()=>F,WG:()=>y,du:()=>v,eh:()=>E,hx:()=>A,kR:()=>H,oB:()=>s,pg:()=>t,y2:()=>o,yL:()=>r,yn:()=>C,zb:()=>B});var d=c(29021),e=c(33873),f=c(21820),g=c(34013),h=c(7496),i=c(62814),j=c(8102);function k(){return process.env.PI_CODING_AGENT_DIR??(0,e.join)((0,f.homedir)(),".pi","agent")}function l(){return(0,e.join)(k(),"web-auth.json")}function m(){try{let a=l();if(!(0,d.existsSync)(a))return null;let b=(0,d.readFileSync)(a,"utf-8");return JSON.parse(b)}catch{return null}}function n(a){let b=k();(0,d.existsSync)(b)||(0,d.mkdirSync)(b,{recursive:!0,mode:448}),(0,j.$)(l(),JSON.stringify(a,null,2))}function o(){let a=m();return a?.enabled!==!1&&!!a?.passwordHash}function p(a){let b=m();return!!b?.passwordHash&&(0,g.Dm)(a,b.passwordHash)}function q(){let a=m();return a?.passwordHash??""}function r(){return(0,h.qM)(q())}function s(){let a=m();return a?.totp??null}function t(){let a=m();return a?.totp?.status==="enabled"}let u=/^(1|true|yes|on)$/i;function v(){return u.test(process.env.ANNOVIBE_TRUST_PROXY_HEADERS??"")}function w(a){var b,c;let d=(b=a.trim()).startsWith('"')&&b.endsWith('"')||b.startsWith("'")&&b.endsWith("'")?b.slice(1,-1):b;if(!d||"unknown"===d.toLowerCase())return null;if(d.startsWith("[")){let a=d.indexOf("]");a>0&&(d=d.slice(1,a))}else/^\d+\.\d+\.\d+\.\d+:\d+$/.test(d)&&(d=d.slice(0,d.lastIndexOf(":")));let e=d.indexOf("%");return e>=0&&(d=d.slice(0,e)),(c=d,/^\d+\.\d+\.\d+\.\d+$/.test(c)||c.includes(":"))?d:null}function x(a){let b=a.split(".");if(4!==b.length)return null;let c=0;for(let a of b){let b=parseInt(a,10);if(isNaN(b)||b<0||b>255)return null;c=c<<8|b}return c>>>0}function y(a){let b=m();if(!b?.totp||"enabled"!==b.totp.status)return!1;if("always"===b.totp.requireMode||!b.totp.requireMode)return!0;let c=b.totp.trustedNetworks??["127.0.0.0/8","::1","10.0.0.0/8","172.16.0.0/12","192.168.0.0/16"];return!function(a,b){if(!a)return!1;for(let c of b)if(function(a,b){if(b.includes(":")){let[c,d]=b.split("/");return 128===parseInt(d??"128",10)&&a===c}return function(a,b){let[c,d]=b.split("/"),e=parseInt(d??"32",10),f=x(a),g=x(c);if(null===f||null===g||e<0||e>32)return!1;let h=0===e?0:-1<<32-e;return(f&h)==(g&h)}(a,b)}(a,c))return!0;return!1}(function(a){if(!v())return null;let b=a.headers.get("forwarded");if(b){let a=b.split(",")[0]?.trim();if(a)for(let b of a.split(";")){let[a,c]=b.split("=",2);if(a?.trim().toLowerCase()==="for"&&c){let a=w(c);if(a)return a}}}let c=a.headers.get("x-forwarded-for");if(c){let a=w(c.split(",")[0]??"");if(a)return a}let d=a.headers.get("x-real-ip");if(d){let a=w(d);if(a)return a}return null}(a),c)}function z(){let a=m();return a?.totp?.status==="enabled"&&a.totp.secret?a.totp.secret:null}function A(a){var b;let c,d=s();b={secret:a,status:"pending",requireMode:d?.requireMode??"always",trustedNetworks:d?.trustedNetworks},(c=m()??{passwordHash:"",enabled:!0}).totp=b,n(c),(0,i.L)("totp_setup_started")}function B(a){let b=m();if(!b?.totp?.secret)throw Error("No pending TOTP setup");b.totp.status="enabled",b.totp.recoveryCodes=a,b.totp.requireMode||(b.totp.requireMode="always"),b.totp.trustedNetworks||(b.totp.trustedNetworks=["127.0.0.0/8","::1","10.0.0.0/8","172.16.0.0/12","192.168.0.0/16"]),n(b),(0,i.L)("totp_enabled")}function C(a){let b=m();b?.totp&&(b.totp.requireMode=a,n(b))}function D(a){let b=m();b?.totp&&(b.totp.trustedNetworks=a,n(b))}function E(){let a=m();a?.totp&&(delete a.totp,n(a),(0,i.L)("totp_disabled"))}function F(a){let b=m();b?.totp?.recoveryCodes&&(b.totp.recoveryCodes=b.totp.recoveryCodes.filter(b=>b!==a),n(b),(0,i.L)("recovery_code_used"))}let G=":annovibe-temp-token";async function H(){let a=q()+G,b=await (0,h.qM)(a);return`t:${b}`}async function I(a){if(!a.startsWith("t:"))return!1;let b=a.slice(2),c=q()+G;if(!await (0,h.bw)(b,c))return!1;try{let a=b.split(":");if(a.length<3)return!1;let c=parseInt(a[0],10);if(Date.now()-c>12e4)return!1}catch{return!1}return!0}},53571:(a,b,c)=>{"use strict";c.d(b,{Q:()=>f});var d=c(23211),e=c(74177);function f(a,b){let c=b.status??500,f=`[api] ${b.context} failed (${c}): ${(0,e.m)(a)}`;c>=500?console.error(f,a instanceof Error?a.stack??"":""):console.warn(f);let{error:g,detail:h}=(0,e.c)(a,{status:c,expose:b.expose,verbose:"1"===process.env.ANNOVIBE_VERBOSE_ERRORS});return d.NextResponse.json({error:g,...b.code?{code:b.code}:{},...h?{detail:h}:{},...b.extra},{status:c,...b.headers?{headers:b.headers}:{}})}},62814:(a,b,c)=>{"use strict";c.d(b,{L:()=>g});var d=c(29021),e=c(33873),f=c(21820);function g(a,b){try{let c=(0,e.join)(process.env.PI_CODING_AGENT_DIR??(0,e.join)((0,f.homedir)(),".pi","agent"),"auth-audit.jsonl"),g=(0,e.dirname)(c);(0,d.existsSync)(g)||(0,d.mkdirSync)(g,{recursive:!0});let h={ts:new Date().toISOString(),...b?{ip:b}:{},action:a};(0,d.appendFileSync)(c,JSON.stringify(h)+"\n")}catch{}}},74177:(a,b,c)=>{"use strict";c.d(b,{c:()=>f,m:()=>e});let d={400:"Request could not be processed",401:"Authentication required",403:"Request was rejected",404:"Not found",405:"Method not allowed",409:"Request conflicts with the current state",413:"Payload too large",415:"Unsupported media type",422:"Request could not be processed",429:"Too many requests"};function e(a){if(a instanceof Error)return a.message||a.name;if("string"==typeof a)return a;try{return JSON.stringify(a)??String(a)}catch{return String(a)}}function f(a,b){let c=e(a),f=d[b.status]??(b.status>=500?"Internal server error":"Request failed"),g=b.expose?c:f;return b.verbose&&c&&c!==g?{error:g,detail:c}:{error:g}}},78335:()=>{},96487:()=>{}};
+exports.id=9557,exports.ids=[9557],exports.modules={2072:(a,b,c)=>{"use strict";c.d(b,{Ak:()=>n,VZ:()=>j,Yb:()=>k,b5:()=>o,z3:()=>l});var d=c(69554),e=c(63620),f=c(19426),g=c(34013);let h=null;function i(){if(!h){let a=new d.Xf,b=new e.gZ;h=new f._k({crypto:a,base32:b})}return h}function j(){return i().generateSecret()}function k(a,b,c="AnnoVibe"){return i().toURI({secret:a,label:b,issuer:c})}async function l(a,b){try{return(await i().verify(b,{secret:a,epochTolerance:1})).valid}catch{return!1}}function m(a){return(0,g.Y8)(a,10)}function n(a,b){for(let c of b)if((0,g.Dm)(a,c))return c;return null}function o(){let a=[];for(let b=0;b<8;b++){let b=new Uint8Array(6);globalThis.crypto.getRandomValues(b);let c=Array.from(b,a=>a.toString(16).padStart(2,"0")).join("");a.push(`${c.slice(0,4)}-${c.slice(4,8)}-${c.slice(8,12)}`)}return{codes:a,hashes:a.map(m)}}},7496:(a,b,c)=>{"use strict";c.d(b,{SK:()=>f,US:()=>i,bw:()=>h,qM:()=>g});function d(){return process.env.ANNOVIBE_AUTH_SECRET??process.env.PIDEX_AUTH_SECRET??""}async function e(a,b){let c=new TextEncoder,d=await globalThis.crypto.subtle.importKey("raw",c.encode(a),{name:"HMAC",hash:"SHA-256"},!1,["sign"]);return Array.from(new Uint8Array(await globalThis.crypto.subtle.sign("HMAC",d,c.encode(b))),a=>a.toString(16).padStart(2,"0")).join("")}function f(a,b){if(a.length!==b.length)return!1;let c=0;for(let d=0;d<a.length;d++)c|=a.charCodeAt(d)^b.charCodeAt(d);return 0===c}async function g(a){let b,c=a||d();if(!c)throw Error("auth secret is not configured");let f=`${Date.now()}:${(b=new Uint8Array(16),globalThis.crypto.getRandomValues(b),Array.from(b,a=>a.toString(16).padStart(2,"0")).join(""))}`,g=await e(c,f);return`${f}:${g}`}async function h(a,b,c=Date.now()){try{let g=b||d();if(!g)return!1;let h=a.split(":"),i=h.pop(),j=h.join(":");if(!i||!j)return!1;let k=await e(g,j);if(!f(i,k))return!1;let l=Number.parseInt(j.split(":",1)[0]??"",10);if(!Number.isSafeInteger(l)||l<=0)return!1;let m=c-l;if(m>2592e6||m<-3e5)return!1;return!0}catch{return!1}}function i(a,b={}){let c=b.secure?"; Secure":"";return`annovibe-auth-${function(){if(process.env.PORT)return process.env.PORT;let a=process.argv;for(let b=0;b<a.length;b++)if(("-p"===a[b]||"--port"===a[b])&&b+1<a.length)return a[b+1];return"30141"}()}=${a}; HttpOnly; SameSite=Lax; Path=/; Max-Age=2592000${c}`}},8102:(a,b,c)=>{"use strict";c.d(b,{$:()=>g});var d=c(55511),e=c(29021),f=c(33873);function g(a,b){let c=(0,f.dirname)(a),g=(0,f.join)(c,`.${(0,f.basename)(a)}-${(0,d.randomUUID)()}.tmp`),h=!1;try{(0,e.writeFileSync)(g,b,{encoding:"utf8",flag:"wx",mode:384,flush:!0}),(0,e.renameSync)(g,a)}catch(a){throw h=!0,a}finally{try{(0,e.unlinkSync)(g)}catch(a){if("ENOENT"!==a.code&&!h)throw a}}}},20424:(a,b,c)=>{"use strict";c.d(b,{BE:()=>p,I0:()=>z,JZ:()=>I,OJ:()=>D,US:()=>h.US,Vn:()=>F,WG:()=>y,du:()=>v,eh:()=>E,hx:()=>A,kR:()=>H,oB:()=>s,pg:()=>t,y2:()=>o,yL:()=>r,yn:()=>C,zb:()=>B});var d=c(29021),e=c(33873),f=c(21820),g=c(34013),h=c(7496),i=c(62814),j=c(8102);function k(){return process.env.PI_CODING_AGENT_DIR??(0,e.join)((0,f.homedir)(),".pi","agent")}function l(){return(0,e.join)(k(),"web-auth.json")}function m(){try{let a=l();if(!(0,d.existsSync)(a))return null;let b=(0,d.readFileSync)(a,"utf-8");return JSON.parse(b)}catch{return null}}function n(a){let b=k();(0,d.existsSync)(b)||(0,d.mkdirSync)(b,{recursive:!0,mode:448}),(0,j.$)(l(),JSON.stringify(a,null,2))}function o(){let a=m();return a?.enabled!==!1&&!!a?.passwordHash}function p(a){let b=m();return!!b?.passwordHash&&(0,g.Dm)(a,b.passwordHash)}function q(){let a=m();return a?.passwordHash??""}function r(){return(0,h.qM)(q())}function s(){let a=m();return a?.totp??null}function t(){let a=m();return a?.totp?.status==="enabled"}let u=/^(1|true|yes|on)$/i;function v(){return u.test(process.env.ANNOVIBE_TRUST_PROXY_HEADERS??"")}function w(a){var b,c;let d=(b=a.trim()).startsWith('"')&&b.endsWith('"')||b.startsWith("'")&&b.endsWith("'")?b.slice(1,-1):b;if(!d||"unknown"===d.toLowerCase())return null;if(d.startsWith("[")){let a=d.indexOf("]");a>0&&(d=d.slice(1,a))}else/^\d+\.\d+\.\d+\.\d+:\d+$/.test(d)&&(d=d.slice(0,d.lastIndexOf(":")));let e=d.indexOf("%");return e>=0&&(d=d.slice(0,e)),(c=d,/^\d+\.\d+\.\d+\.\d+$/.test(c)||c.includes(":"))?d:null}function x(a){let b=a.split(".");if(4!==b.length)return null;let c=0;for(let a of b){let b=parseInt(a,10);if(isNaN(b)||b<0||b>255)return null;c=c<<8|b}return c>>>0}function y(a){let b=m();if(!b?.totp||"enabled"!==b.totp.status)return!1;if("always"===b.totp.requireMode||!b.totp.requireMode)return!0;let c=b.totp.trustedNetworks??["127.0.0.0/8","::1","10.0.0.0/8","172.16.0.0/12","192.168.0.0/16"];return!function(a,b){if(!a)return!1;for(let c of b)if(function(a,b){if(b.includes(":")){let[c,d]=b.split("/");return 128===parseInt(d??"128",10)&&a===c}return function(a,b){let[c,d]=b.split("/"),e=parseInt(d??"32",10),f=x(a),g=x(c);if(null===f||null===g||e<0||e>32)return!1;let h=0===e?0:-1<<32-e;return(f&h)==(g&h)}(a,b)}(a,c))return!0;return!1}(function(a){if(!v())return null;let b=a.headers.get("forwarded");if(b){let a=b.split(",")[0]?.trim();if(a)for(let b of a.split(";")){let[a,c]=b.split("=",2);if(a?.trim().toLowerCase()==="for"&&c){let a=w(c);if(a)return a}}}let c=a.headers.get("x-forwarded-for");if(c){let a=w(c.split(",")[0]??"");if(a)return a}let d=a.headers.get("x-real-ip");if(d){let a=w(d);if(a)return a}return null}(a),c)}function z(){let a=m();return a?.totp?.status==="enabled"&&a.totp.secret?a.totp.secret:null}function A(a){var b;let c,d=s();b={secret:a,status:"pending",requireMode:d?.requireMode??"always",trustedNetworks:d?.trustedNetworks},(c=m()??{passwordHash:"",enabled:!0}).totp=b,n(c),(0,i.L)("totp_setup_started")}function B(a){let b=m();if(!b?.totp?.secret)throw Error("No pending TOTP setup");b.totp.status="enabled",b.totp.recoveryCodes=a,b.totp.requireMode||(b.totp.requireMode="always"),b.totp.trustedNetworks||(b.totp.trustedNetworks=["127.0.0.0/8","::1","10.0.0.0/8","172.16.0.0/12","192.168.0.0/16"]),n(b),(0,i.L)("totp_enabled")}function C(a){let b=m();b?.totp&&(b.totp.requireMode=a,n(b))}function D(a){let b=m();b?.totp&&(b.totp.trustedNetworks=a,n(b))}function E(){let a=m();a?.totp&&(delete a.totp,n(a),(0,i.L)("totp_disabled"))}function F(a){let b=m();b?.totp?.recoveryCodes&&(b.totp.recoveryCodes=b.totp.recoveryCodes.filter(b=>b!==a),n(b),(0,i.L)("recovery_code_used"))}let G=":annovibe-temp-token";async function H(){let a=q()+G,b=await (0,h.qM)(a);return`t:${b}`}async function I(a){if(!a.startsWith("t:"))return!1;let b=a.slice(2),c=q()+G;if(!await (0,h.bw)(b,c))return!1;try{let a=b.split(":");if(a.length<3)return!1;let c=parseInt(a[0],10);if(Date.now()-c>12e4)return!1}catch{return!1}return!0}},53571:(a,b,c)=>{"use strict";c.d(b,{Q:()=>f});var d=c(23211),e=c(74177);function f(a,b){let c=b.status??500,f=`[api] ${b.context} failed (${c}): ${(0,e.m)(a)}`;c>=500?console.error(f,a instanceof Error?a.stack??"":""):console.warn(f);let{error:g,detail:h}=(0,e.c)(a,{status:c,expose:b.expose,verbose:"1"===process.env.ANNOVIBE_VERBOSE_ERRORS});return d.NextResponse.json({error:g,...b.code?{code:b.code}:{},...h?{detail:h}:{},...b.extra},{status:c,...b.headers?{headers:b.headers}:{}})}},62814:(a,b,c)=>{"use strict";c.d(b,{L:()=>g});var d=c(29021),e=c(33873),f=c(21820);function g(a,b){try{let c=(0,e.join)(process.env.PI_CODING_AGENT_DIR??(0,e.join)((0,f.homedir)(),".pi","agent"),"auth-audit.jsonl"),g=(0,e.dirname)(c);(0,d.existsSync)(g)||(0,d.mkdirSync)(g,{recursive:!0});let h={ts:new Date().toISOString(),...b?{ip:b}:{},action:a};(0,d.appendFileSync)(c,JSON.stringify(h)+"\n")}catch{}}},74177:(a,b,c)=>{"use strict";c.d(b,{c:()=>f,m:()=>e});let d={400:"Request could not be processed",401:"Authentication required",403:"Request was rejected",404:"Not found",405:"Method not allowed",409:"Request conflicts with the current state",413:"Payload too large",415:"Unsupported media type",422:"Request could not be processed",429:"Too many requests"};function e(a){if(a instanceof Error)return a.message||a.name;if("string"==typeof a)return a;try{return JSON.stringify(a)??String(a)}catch{return String(a)}}function f(a,b){let c=e(a),f=d[b.status]??(b.status>=500?"Internal server error":"Request failed"),g=b.expose?c:f;return b.verbose&&c&&c!==g?{error:g,detail:c}:{error:g}}},78335:()=>{},96487:()=>{}};

package/.next/server/middleware-build-manifest.js

@@ -1 +1 @@
-globalThis.__BUILD_MANIFEST={polyfillFiles:["static/chunks/polyfills-42372ed130431b0a.js"],devFiles:[],lowPriorityFiles:["static/7W2hkrr4fbH0AG06se4th/_buildManifest.js","static/7W2hkrr4fbH0AG06se4th/_ssgManifest.js"],rootMainFiles:["static/chunks/webpack-19f3f7824a602f3b.js","static/chunks/4bd1b696-8cd12253b448cc13.js","static/chunks/3794-fba3f76785a3c234.js","static/chunks/main-app-a8a207cb34d209aa.js"],rootMainFilesTree:{},pages:{"/_app":[]}};
+globalThis.__BUILD_MANIFEST={polyfillFiles:["static/chunks/polyfills-42372ed130431b0a.js"],devFiles:[],lowPriorityFiles:["static/Ag1v_S9DTKxBH3_0fOnfG/_buildManifest.js","static/Ag1v_S9DTKxBH3_0fOnfG/_ssgManifest.js"],rootMainFiles:["static/chunks/webpack-19f3f7824a602f3b.js","static/chunks/4bd1b696-8cd12253b448cc13.js","static/chunks/3794-fba3f76785a3c234.js","static/chunks/main-app-a8a207cb34d209aa.js"],rootMainFilesTree:{},pages:{"/_app":[]}};