@terminai/a2a-server 0.21.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -0
- package/dist/.last_build +0 -0
- package/dist/a2a-server.mjs +415698 -0
- package/dist/index.d.ts +7 -0
- package/dist/index.js +8 -0
- package/dist/index.js.map +1 -0
- package/dist/src/agent/executor.d.ts +41 -0
- package/dist/src/agent/executor.js +408 -0
- package/dist/src/agent/executor.js.map +1 -0
- package/dist/src/agent/task.d.ts +67 -0
- package/dist/src/agent/task.js +799 -0
- package/dist/src/agent/task.js.map +1 -0
- package/dist/src/agent/task.test.d.ts +7 -0
- package/dist/src/agent/task.test.js +435 -0
- package/dist/src/agent/task.test.js.map +1 -0
- package/dist/src/agent/task.token.test.d.ts +7 -0
- package/dist/src/agent/task.token.test.js +53 -0
- package/dist/src/agent/task.token.test.js.map +1 -0
- package/dist/src/auth/llmAuthManager.d.ts +39 -0
- package/dist/src/auth/llmAuthManager.js +209 -0
- package/dist/src/auth/llmAuthManager.js.map +1 -0
- package/dist/src/auth/llmAuthManager.test.d.ts +7 -0
- package/dist/src/auth/llmAuthManager.test.js +92 -0
- package/dist/src/auth/llmAuthManager.test.js.map +1 -0
- package/dist/src/commands/command-registry.d.ts +16 -0
- package/dist/src/commands/command-registry.js +35 -0
- package/dist/src/commands/command-registry.js.map +1 -0
- package/dist/src/commands/command-registry.test.d.ts +7 -0
- package/dist/src/commands/command-registry.test.js +100 -0
- package/dist/src/commands/command-registry.test.js.map +1 -0
- package/dist/src/commands/extensions.d.ts +19 -0
- package/dist/src/commands/extensions.js +26 -0
- package/dist/src/commands/extensions.js.map +1 -0
- package/dist/src/commands/extensions.test.d.ts +7 -0
- package/dist/src/commands/extensions.test.js +70 -0
- package/dist/src/commands/extensions.test.js.map +1 -0
- package/dist/src/commands/init.d.ts +16 -0
- package/dist/src/commands/init.js +111 -0
- package/dist/src/commands/init.js.map +1 -0
- package/dist/src/commands/init.test.d.ts +7 -0
- package/dist/src/commands/init.test.js +146 -0
- package/dist/src/commands/init.test.js.map +1 -0
- package/dist/src/commands/restore.d.ts +21 -0
- package/dist/src/commands/restore.js +126 -0
- package/dist/src/commands/restore.js.map +1 -0
- package/dist/src/commands/restore.test.d.ts +7 -0
- package/dist/src/commands/restore.test.js +111 -0
- package/dist/src/commands/restore.test.js.map +1 -0
- package/dist/src/commands/types.d.ts +33 -0
- package/dist/src/commands/types.js +8 -0
- package/dist/src/commands/types.js.map +1 -0
- package/dist/src/config/config.d.ts +24 -0
- package/dist/src/config/config.js +140 -0
- package/dist/src/config/config.js.map +1 -0
- package/dist/src/config/extension.d.ts +12 -0
- package/dist/src/config/extension.js +105 -0
- package/dist/src/config/extension.js.map +1 -0
- package/dist/src/config/settings.d.ts +15 -0
- package/dist/src/config/settings.js +20 -0
- package/dist/src/config/settings.js.map +1 -0
- package/dist/src/config/settings.test.d.ts +7 -0
- package/dist/src/config/settings.test.js +170 -0
- package/dist/src/config/settings.test.js.map +1 -0
- package/dist/src/http/app.d.ts +17 -0
- package/dist/src/http/app.js +399 -0
- package/dist/src/http/app.js.map +1 -0
- package/dist/src/http/app.test.d.ts +7 -0
- package/dist/src/http/app.test.js +1048 -0
- package/dist/src/http/app.test.js.map +1 -0
- package/dist/src/http/auth.d.ts +21 -0
- package/dist/src/http/auth.js +55 -0
- package/dist/src/http/auth.js.map +1 -0
- package/dist/src/http/auth.test.d.ts +7 -0
- package/dist/src/http/auth.test.js +53 -0
- package/dist/src/http/auth.test.js.map +1 -0
- package/dist/src/http/authRoutes.test.d.ts +7 -0
- package/dist/src/http/authRoutes.test.js +169 -0
- package/dist/src/http/authRoutes.test.js.map +1 -0
- package/dist/src/http/cors.d.ts +8 -0
- package/dist/src/http/cors.js +96 -0
- package/dist/src/http/cors.js.map +1 -0
- package/dist/src/http/cors.test.d.ts +7 -0
- package/dist/src/http/cors.test.js +62 -0
- package/dist/src/http/cors.test.js.map +1 -0
- package/dist/src/http/deferredAuth.test.d.ts +7 -0
- package/dist/src/http/deferredAuth.test.js +45 -0
- package/dist/src/http/deferredAuth.test.js.map +1 -0
- package/dist/src/http/endpoints.test.d.ts +7 -0
- package/dist/src/http/endpoints.test.js +149 -0
- package/dist/src/http/endpoints.test.js.map +1 -0
- package/dist/src/http/llmAuthMiddleware.d.ts +9 -0
- package/dist/src/http/llmAuthMiddleware.js +37 -0
- package/dist/src/http/llmAuthMiddleware.js.map +1 -0
- package/dist/src/http/relay.d.ts +28 -0
- package/dist/src/http/relay.js +342 -0
- package/dist/src/http/relay.js.map +1 -0
- package/dist/src/http/relay.test.d.ts +7 -0
- package/dist/src/http/relay.test.js +149 -0
- package/dist/src/http/relay.test.js.map +1 -0
- package/dist/src/http/replay.d.ts +19 -0
- package/dist/src/http/replay.js +90 -0
- package/dist/src/http/replay.js.map +1 -0
- package/dist/src/http/replay.test.d.ts +7 -0
- package/dist/src/http/replay.test.js +78 -0
- package/dist/src/http/replay.test.js.map +1 -0
- package/dist/src/http/requestStorage.d.ts +11 -0
- package/dist/src/http/requestStorage.js +9 -0
- package/dist/src/http/requestStorage.js.map +1 -0
- package/dist/src/http/routes/auth.d.ts +9 -0
- package/dist/src/http/routes/auth.js +125 -0
- package/dist/src/http/routes/auth.js.map +1 -0
- package/dist/src/http/server.d.ts +8 -0
- package/dist/src/http/server.js +28 -0
- package/dist/src/http/server.js.map +1 -0
- package/dist/src/index.d.ts +10 -0
- package/dist/src/index.js +11 -0
- package/dist/src/index.js.map +1 -0
- package/dist/src/persistence/gcs.d.ts +25 -0
- package/dist/src/persistence/gcs.js +248 -0
- package/dist/src/persistence/gcs.js.map +1 -0
- package/dist/src/persistence/gcs.test.d.ts +7 -0
- package/dist/src/persistence/gcs.test.js +335 -0
- package/dist/src/persistence/gcs.test.js.map +1 -0
- package/dist/src/persistence/remoteAuthStore.d.ts +21 -0
- package/dist/src/persistence/remoteAuthStore.js +74 -0
- package/dist/src/persistence/remoteAuthStore.js.map +1 -0
- package/dist/src/types.d.ts +100 -0
- package/dist/src/types.js +49 -0
- package/dist/src/types.js.map +1 -0
- package/dist/src/utils/envAliases.d.ts +7 -0
- package/dist/src/utils/envAliases.js +9 -0
- package/dist/src/utils/envAliases.js.map +1 -0
- package/dist/src/utils/executor_utils.d.ts +8 -0
- package/dist/src/utils/executor_utils.js +42 -0
- package/dist/src/utils/executor_utils.js.map +1 -0
- package/dist/src/utils/logger.d.ts +9 -0
- package/dist/src/utils/logger.js +26 -0
- package/dist/src/utils/logger.js.map +1 -0
- package/dist/src/utils/redactSecrets.d.ts +16 -0
- package/dist/src/utils/redactSecrets.js +72 -0
- package/dist/src/utils/redactSecrets.js.map +1 -0
- package/dist/src/utils/redactSecrets.test.d.ts +7 -0
- package/dist/src/utils/redactSecrets.test.js +62 -0
- package/dist/src/utils/redactSecrets.test.js.map +1 -0
- package/dist/src/utils/testing_utils.d.ts +48 -0
- package/dist/src/utils/testing_utils.js +173 -0
- package/dist/src/utils/testing_utils.js.map +1 -0
- package/dist/tsconfig.tsbuildinfo +1 -0
- package/dist/web-client/app.js +526 -0
- package/dist/web-client/index.html +43 -0
- package/dist/web-client/package.json +10 -0
- package/dist/web-client/relay-client.js +330 -0
- package/dist/web-client/style.css +189 -0
- package/package.json +53 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"relay.js","sourceRoot":"","sources":["../../../src/http/relay.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAG5C,6BAA6B;AAC7B,MAAM,iBAAiB,GAAG;IACxB,EAAE,EAAE,CAAC;IACL,EAAE,EAAE,CAAC;CACG,CAAC;AAEX,4EAA4E;AAC5E,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,KAAK,MAAM,CAAC;AA2C5E,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;IAC3B,mCAAmC;IACnC,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEzC,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,YAAY,GAChB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,6BAA6B,CAAC;IACxE,MAAM,eAAe,GAAG,IAAI,CAAC,CAAC,sCAAsC;IACpE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,eAAe;IAE3F,MAAM,QAAQ,GAAG,GAAG,YAAY,YAAY,SAAS,QAAQ,kBAAkB,CAAC,SAAS,CAAC,UAAU,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;IAEnI,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,MAAM,CAAC;IAC3D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CACT,4FAA4F,CAC7F,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,iBAAiB;YACxB,aAAa,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACpC,mBAAmB,EAAE,eAAe;YACpC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CACH,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,IAAI,CACT,yBAAyB,WAAW,kCAAkC,CACvE,CAAC;IAEF,OAAO;QACL,SAAS;QACT,GAAG;QACH,QAAQ;QACR,iBAAiB,EAAE,CAAC;QACpB,eAAe;QACf,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,cAAqC;IAErC,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CACf,SAAiB,EACjB,GAAkB,EAClB,OAAc,EACd,KAAc;IAEd,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;QAC3B,OAAO,8BAA8B,SAAS,UAAU,KAAK,QAAQ,GAAG,EAAE,CAAC;IAC7E,CAAC;IACD,OAAO,8BAA8B,SAAS,QAAQ,GAAG,EAAE,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CACtB,QAAuB,EACvB,GAAW,EACX,SAAiB,EACjB,OAAc,EACd,KAAc;IAEd,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IACxC,IAAI,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC/C,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAChC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAqB,EACrB,QAAgB,EAChB,cAAqC;IAErC,+CAA+C;IAC/C,MAAM,SAAS,GAAoB;QACjC,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,CAAC;QACd,cAAc,EAAE,YAAY;QAC5B,eAAe,EAAE,CAAC,EAAE,iDAAiD;QACrE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,2BAA2B;KAC1E,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;QACb,KAAK,EAAE,uBAAuB;QAC9B,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5C,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAClC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CACH,CAAC;IACF,MAAM,EAAE,GAAG,IAAI,SAAS,CACtB,GAAG,QAAQ,sBAAsB,OAAO,CAAC,SAAS,EAAE,CACrD,CAAC;IAEF,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACjB,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,iBAAiB;YACxB,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CACH,CAAC;QACF,OAAO,CAAC,iBAAiB,GAAG,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,2DAA2D;YAC3D,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;wBACjC,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;4BACb,KAAK,EAAE,cAAc;4BACrB,MAAM,EAAE,IAAI,CAAC,MAAM;4BACnB,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;4BAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;yBACtB,CAAC,CACH,CAAC;wBACF,sDAAsD;oBACxD,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,4BAA4B;gBAC9B,CAAC;gBACD,OAAO;YACT,CAAC;YAED,oCAAoC;YACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACrC,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,gBAAgB,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAEjD,sFAAsF;YACtF,IAAI,QAAmC,CAAC;YACxC,IAAI,WAAW,GAAU,CAAC,CAAC;YAE3B,yCAAyC;YACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;YACrE,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAEpD,KAAK,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI;gBAC7B,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAU,EAAE;gBACnC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAU,EAAE;aACpC,EAAE,CAAC;gBACF,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CACtC,aAAa,EACb,OAAO,CAAC,GAAG,EACX,EAAE,CACH,CAAC;oBACF,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;oBAC1C,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;oBACzB,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAClD,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;oBACzD,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;oBAClD,WAAW,GAAG,OAAO,CAAC;oBACtB,MAAM;gBACR,CAAC;gBAAC,MAAM,CAAC;oBACP,eAAe;oBACf,SAAS;gBACX,CAAC;YACH,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,gBAAgB;oBACvB,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CACH,CAAC;gBACF,OAAO;YACT,CAAC;YAED,6BAA6B;YAC7B,IACE,QAAQ,CAAC,GAAG,KAAK,KAAK;gBACtB,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,aAAa,GAAG,CAAC,EAC5C,CAAC;gBACD,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,kBAAkB;oBACzB,MAAM,EACJ,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,aAAa,GAAG,CAAC;wBAC1C,CAAC,CAAC,cAAc;wBAChB,CAAC,CAAC,aAAa;oBACnB,QAAQ,EAAE,SAAS,CAAC,aAAa,GAAG,CAAC;oBACrC,GAAG,EAAE,QAAQ,CAAC,GAAG;oBACjB,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CACH,CAAC;gBACF,OAAO;YACT,CAAC;YACD,SAAS,CAAC,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC;YAEvC,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC9B,sBAAsB;gBACtB,MAAM,eAAe,GAAI,QAAQ,CAAC,OAAoC;qBACnE,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC;gBACpB,MAAM,iBAAiB,GAAG,iBAAiB;oBACzC,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,CAAC,EAAE,CAAC;oBAC9C,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;gBAE3B,MAAM,eAAe,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACnD,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC5B,CAAC;gBAEF,IAAI,CAAC,eAAe,EAAE,CAAC;oBACrB,6BAA6B;oBAC7B,MAAM,aAAa,GAAkB;wBACnC,CAAC,EAAE,WAAW;wBACd,IAAI,EAAE,OAAO;wBACb,GAAG,EAAE,KAAK;wBACV,GAAG,EAAE,EAAE,SAAS,CAAC,WAAW;wBAC5B,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;wBACd,OAAO,EAAE;4BACP,IAAI,EAAE,kBAAkB;4BACxB,OAAO,EACL,+DAA+D;yBAClE;qBACF,CAAC;oBACF,MAAM,YAAY,GAAG,eAAe,CAClC,aAAa,EACb,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,SAAS,EACjB,WAAW,EACX,SAAS,CAAC,KAAK,CAChB,CAAC;oBACF,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACtB,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBAED,SAAS,CAAC,eAAe,GAAG,eAAe,CAAC;gBAC5C,SAAS,CAAC,cAAc,GAAG,OAAO,CAAC;gBAEnC,MAAM,WAAW,GAAkB;oBACjC,CAAC,EAAE,eAAe;oBAClB,IAAI,EAAE,WAAW;oBACjB,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,EAAE,SAAS,CAAC,WAAW;oBAC5B,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;oBACd,KAAK,EAAE,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;oBAC1D,OAAO,EAAE;wBACP,eAAe;wBACf,eAAe,EAAE,OAAO,CAAC,eAAe;wBACxC,GAAG,CAAC,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC7D;iBACF,CAAC;gBACF,MAAM,UAAU,GAAG,eAAe,CAChC,WAAW,EACX,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,SAAS,EACjB,eAAe,EACf,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CACpD,CAAC;gBACF,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAEpB,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,oBAAoB;oBAC3B,eAAe,EAAE,eAAe;oBAChC,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CACH,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,SAAS,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;gBACzC,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,0BAA0B;oBACjC,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CACH,CAAC;gBACF,OAAO;YACT,CAAC;YAED,gDAAgD;YAChD,IACE,SAAS,CAAC,eAAe,KAAK,CAAC;gBAC/B,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,EAClC,CAAC;gBACD,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,gBAAgB;oBACvB,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CACH,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAI,QAAQ,CAAC,OAA4B,CAAC,IAAI,CAAC;gBACzD,MAAM,OAAO,GAAG,IAAI,KAAK,OAAO,CAAC,WAAW,CAAC;gBAE7C,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC;oBAChC,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,iBAAiB;wBACxB,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;wBAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;qBACtB,CAAC,CACH,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,iBAAiB;wBACxB,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;wBAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;qBACtB,CAAC,CACH,CAAC;gBACJ,CAAC;gBAED,qCAAqC;gBACrC,MAAM,kBAAkB,GAAkB;oBACxC,CAAC,EAAE,SAAS,CAAC,eAAe;oBAC5B,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO;oBACpC,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,EAAE,SAAS,CAAC,WAAW;oBAC5B,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;oBACd,KAAK,EAAE,SAAS,CAAC,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;oBACpE,OAAO,EAAE;wBACP,OAAO;wBACP,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,sBAAsB;qBAClE;iBACF,CAAC;gBACF,MAAM,iBAAiB,GAAG,eAAe,CACvC,kBAAkB,EAClB,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,SAAS,EACjB,SAAS,CAAC,eAAe,EACzB,SAAS,CAAC,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC9D,CAAC;gBACF,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;gBACxD,8DAA8D;gBAC9D,MAAM,MAAM,GAAG,MAAO,cAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAEtE,IAAI,QAAQ,CAAC;gBACb,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,UAAU,EAAE,CAAC;oBACjE,MAAM,SAAS,GAAG,EAAE,CAAC;oBACrB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;wBACjC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACxB,CAAC;oBACD,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC7C,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,MAAM,CAAC;gBACpB,CAAC;gBAED,mBAAmB;gBACnB,MAAM,YAAY,GAAkB;oBAClC,CAAC,EAAE,SAAS,CAAC,eAAe;oBAC5B,IAAI,EAAE,KAAK;oBACX,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,EAAE,SAAS,CAAC,WAAW;oBAC5B,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;oBACd,KAAK,EAAE,SAAS,CAAC,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;oBACpE,OAAO,EAAE,QAAQ;iBAClB,CAAC;gBACF,MAAM,eAAe,GAAG,eAAe,CACrC,YAAY,EACZ,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,SAAS,EACjB,SAAS,CAAC,eAAe,EACzB,SAAS,CAAC,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC9D,CAAC;gBACF,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,qBAAqB;gBAC5B,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC5C,KAAK,EAAG,CAAW,CAAC,OAAO;gBAC3B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACnB,MAAM,CAAC,KAAK,CACV,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,gBAAgB;YACvB,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5C,KAAK,EAAE,CAAC,CAAC,OAAO;YAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,iBAAiB,GAAG,CAAC,CAAC,EACjD,KAAK,CACN,CAAC;QACF,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,oBAAoB;YAC3B,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5C,UAAU,EAAE,KAAK;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CACH,CAAC;QACF,UAAU,CACR,GAAG,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,EAC3D,KAAK,CACN,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1,149 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @license
|
|
3
|
+
* Copyright 2025 Google LLC
|
|
4
|
+
* Portions Copyright 2025 TerminaI Authors
|
|
5
|
+
* SPDX-License-Identifier: Apache-2.0
|
|
6
|
+
*/
|
|
7
|
+
import { describe, it, expect, vi } from 'vitest';
|
|
8
|
+
import crypto from 'node:crypto';
|
|
9
|
+
import { v4 as uuidv4 } from 'uuid';
|
|
10
|
+
// Import the functions we're testing
|
|
11
|
+
import { createRelaySession } from './relay.js';
|
|
12
|
+
// Mock the logger to prevent console spam
|
|
13
|
+
vi.mock('../utils/logger.js', () => ({
|
|
14
|
+
logger: {
|
|
15
|
+
info: vi.fn(),
|
|
16
|
+
warn: vi.fn(),
|
|
17
|
+
error: vi.fn(),
|
|
18
|
+
},
|
|
19
|
+
}));
|
|
20
|
+
describe('Relay Session', () => {
|
|
21
|
+
it('creates a session with all required fields', () => {
|
|
22
|
+
const session = createRelaySession('wss://relay.example.com');
|
|
23
|
+
expect(session.sessionId).toBeDefined();
|
|
24
|
+
expect(session.sessionId).toMatch(/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i);
|
|
25
|
+
expect(session.key).toBeInstanceOf(Buffer);
|
|
26
|
+
expect(session.key.length).toBe(32); // 256 bits
|
|
27
|
+
expect(session.shareUrl).toContain('session=');
|
|
28
|
+
expect(session.shareUrl).toContain('key=');
|
|
29
|
+
expect(session.shareUrl).toContain('relay=');
|
|
30
|
+
expect(session.pairingRequired).toBe(true);
|
|
31
|
+
expect(session.pairingCode).toMatch(/^\d{6}$/);
|
|
32
|
+
expect(session.reconnectAttempts).toBe(0);
|
|
33
|
+
});
|
|
34
|
+
it('generates unique session IDs', () => {
|
|
35
|
+
const session1 = createRelaySession('wss://relay.example.com');
|
|
36
|
+
const session2 = createRelaySession('wss://relay.example.com');
|
|
37
|
+
expect(session1.sessionId).not.toBe(session2.sessionId);
|
|
38
|
+
expect(session1.pairingCode).not.toBe(session2.pairingCode);
|
|
39
|
+
});
|
|
40
|
+
});
|
|
41
|
+
describe('Anti-Replay Protection', () => {
|
|
42
|
+
it('validates sequence numbers increment correctly', () => {
|
|
43
|
+
let inboundMaxSeq = 0;
|
|
44
|
+
// Simulate receiving messages with correct sequence
|
|
45
|
+
const validateSeq = (seq) => {
|
|
46
|
+
if (seq !== inboundMaxSeq + 1) {
|
|
47
|
+
return false;
|
|
48
|
+
}
|
|
49
|
+
inboundMaxSeq = seq;
|
|
50
|
+
return true;
|
|
51
|
+
};
|
|
52
|
+
expect(validateSeq(1)).toBe(true);
|
|
53
|
+
expect(validateSeq(2)).toBe(true);
|
|
54
|
+
expect(validateSeq(3)).toBe(true);
|
|
55
|
+
// Replay attack - seq already used
|
|
56
|
+
expect(validateSeq(2)).toBe(false);
|
|
57
|
+
// Skip attack - seq too high
|
|
58
|
+
expect(validateSeq(5)).toBe(false);
|
|
59
|
+
// Correct next seq still works
|
|
60
|
+
expect(validateSeq(4)).toBe(true);
|
|
61
|
+
});
|
|
62
|
+
it('rejects replayed sequence numbers', () => {
|
|
63
|
+
const inboundMaxSeq = 5;
|
|
64
|
+
// Attacker replays an old message with seq=3
|
|
65
|
+
const replaySeq = 3;
|
|
66
|
+
expect(replaySeq).not.toBe(inboundMaxSeq + 1);
|
|
67
|
+
});
|
|
68
|
+
});
|
|
69
|
+
describe('Epoch Validation', () => {
|
|
70
|
+
it('validates epoch matches connection epoch', () => {
|
|
71
|
+
const connectionEpoch = crypto.randomBytes(8).toString('hex');
|
|
72
|
+
// Message with matching epoch
|
|
73
|
+
const validEnvelope = {
|
|
74
|
+
v: 2,
|
|
75
|
+
type: 'RPC',
|
|
76
|
+
dir: 'c2h',
|
|
77
|
+
seq: 1,
|
|
78
|
+
ts: Date.now(),
|
|
79
|
+
epoch: connectionEpoch,
|
|
80
|
+
payload: {},
|
|
81
|
+
};
|
|
82
|
+
expect(validEnvelope.epoch).toBe(connectionEpoch);
|
|
83
|
+
// Message with wrong epoch (e.g., from previous connection)
|
|
84
|
+
const oldEpoch = crypto.randomBytes(8).toString('hex');
|
|
85
|
+
const invalidEnvelope = {
|
|
86
|
+
...validEnvelope,
|
|
87
|
+
epoch: oldEpoch,
|
|
88
|
+
};
|
|
89
|
+
expect(invalidEnvelope.epoch).not.toBe(connectionEpoch);
|
|
90
|
+
});
|
|
91
|
+
it('generates unique epoch per connection', () => {
|
|
92
|
+
const epoch1 = crypto.randomBytes(8).toString('hex');
|
|
93
|
+
const epoch2 = crypto.randomBytes(8).toString('hex');
|
|
94
|
+
expect(epoch1).not.toBe(epoch2);
|
|
95
|
+
expect(epoch1.length).toBe(16); // 8 bytes = 16 hex chars
|
|
96
|
+
});
|
|
97
|
+
});
|
|
98
|
+
describe('AAD Construction', () => {
|
|
99
|
+
it('builds correct AAD for v1 protocol', () => {
|
|
100
|
+
const sessionId = uuidv4();
|
|
101
|
+
const dir = 'c2h';
|
|
102
|
+
const aad = `terminai-relay|v=1|session=${sessionId}|dir=${dir}`;
|
|
103
|
+
expect(aad).toContain('v=1');
|
|
104
|
+
expect(aad).toContain(`session=${sessionId}`);
|
|
105
|
+
expect(aad).toContain('dir=c2h');
|
|
106
|
+
expect(aad).not.toContain('epoch');
|
|
107
|
+
});
|
|
108
|
+
it('builds correct AAD for v2 protocol with epoch', () => {
|
|
109
|
+
const sessionId = uuidv4();
|
|
110
|
+
const epoch = crypto.randomBytes(8).toString('hex');
|
|
111
|
+
const dir = 'h2c';
|
|
112
|
+
const aad = `terminai-relay|v=2|session=${sessionId}|epoch=${epoch}|dir=${dir}`;
|
|
113
|
+
expect(aad).toContain('v=2');
|
|
114
|
+
expect(aad).toContain(`session=${sessionId}`);
|
|
115
|
+
expect(aad).toContain(`epoch=${epoch}`);
|
|
116
|
+
expect(aad).toContain('dir=h2c');
|
|
117
|
+
});
|
|
118
|
+
});
|
|
119
|
+
describe('Version Negotiation', () => {
|
|
120
|
+
it('selects v2 when both client and host support it', () => {
|
|
121
|
+
const hostSupported = [2]; // Host prefers v2 only
|
|
122
|
+
const clientOffered = [1, 2]; // Client offers both
|
|
123
|
+
const selectedVersion = hostSupported.find((v) => clientOffered.includes(v));
|
|
124
|
+
expect(selectedVersion).toBe(2);
|
|
125
|
+
});
|
|
126
|
+
it('rejects v1-only client when host requires v2', () => {
|
|
127
|
+
const hostSupported = [2]; // Host v2 only (no ALLOW_INSECURE_RELAY_V1)
|
|
128
|
+
const clientOffered = [1]; // Old client only supports v1
|
|
129
|
+
const selectedVersion = hostSupported.find((v) => clientOffered.includes(v));
|
|
130
|
+
expect(selectedVersion).toBeUndefined();
|
|
131
|
+
});
|
|
132
|
+
it('falls back to v1 when ALLOW_INSECURE_V1 is enabled', () => {
|
|
133
|
+
const hostSupported = [2, 1]; // Allow v1 fallback
|
|
134
|
+
const clientOffered = [1]; // Old client
|
|
135
|
+
const selectedVersion = hostSupported.find((v) => clientOffered.includes(v));
|
|
136
|
+
expect(selectedVersion).toBe(1);
|
|
137
|
+
});
|
|
138
|
+
});
|
|
139
|
+
describe('Pairing Code', () => {
|
|
140
|
+
it('generates 6-digit numeric codes', () => {
|
|
141
|
+
for (let i = 0; i < 100; i++) {
|
|
142
|
+
const code = Math.floor(100000 + Math.random() * 900000).toString();
|
|
143
|
+
expect(code).toMatch(/^\d{6}$/);
|
|
144
|
+
expect(parseInt(code, 10)).toBeGreaterThanOrEqual(100000);
|
|
145
|
+
expect(parseInt(code, 10)).toBeLessThan(1000000);
|
|
146
|
+
}
|
|
147
|
+
});
|
|
148
|
+
});
|
|
149
|
+
//# sourceMappingURL=relay.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"relay.test.js","sourceRoot":"","sources":["../../../src/http/relay.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,qCAAqC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,0CAA0C;AAC1C,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,MAAM,EAAE;QACN,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;QACb,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;QACb,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;KACf;CACF,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,OAAO,GAAG,kBAAkB,CAAC,yBAAyB,CAAC,CAAC;QAE9D,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,CAC/B,wEAAwE,CACzE,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW;QAChD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,yBAAyB,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,yBAAyB,CAAC,CAAC;QAE/D,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,oDAAoD;QACpD,MAAM,WAAW,GAAG,CAAC,GAAW,EAAW,EAAE;YAC3C,IAAI,GAAG,KAAK,aAAa,GAAG,CAAC,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC;YACf,CAAC;YACD,aAAa,GAAG,GAAG,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QAEF,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAElC,mCAAmC;QACnC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnC,6BAA6B;QAC7B,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnC,+BAA+B;QAC/B,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,aAAa,GAAG,CAAC,CAAC;QAExB,6CAA6C;QAC7C,MAAM,SAAS,GAAG,CAAC,CAAC;QACpB,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE9D,8BAA8B;QAC9B,MAAM,aAAa,GAAG;YACpB,CAAC,EAAE,CAAC;YACJ,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,KAAK;YACV,GAAG,EAAE,CAAC;YACN,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,EAAE;SACZ,CAAC;QAEF,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAElD,4DAA4D;QAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,eAAe,GAAG;YACtB,GAAG,aAAa;YAChB,KAAK,EAAE,QAAQ;SAChB,CAAC;QAEF,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAErD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,yBAAyB;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,KAAK,CAAC;QAElB,MAAM,GAAG,GAAG,8BAA8B,SAAS,QAAQ,GAAG,EAAE,CAAC;QAEjE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,WAAW,SAAS,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,KAAK,CAAC;QAElB,MAAM,GAAG,GAAG,8BAA8B,SAAS,UAAU,KAAK,QAAQ,GAAG,EAAE,CAAC;QAEhF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,WAAW,SAAS,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB;QAClD,MAAM,aAAa,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,qBAAqB;QAEnD,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/C,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC1B,CAAC;QAEF,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,4CAA4C;QACvE,MAAM,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,8BAA8B;QAEzD,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/C,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC1B,CAAC;QAEF,MAAM,CAAC,eAAe,CAAC,CAAC,aAAa,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,aAAa,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,oBAAoB;QAClD,MAAM,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa;QAExC,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/C,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC1B,CAAC;QAEF,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YACpE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;YAC1D,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @license
|
|
3
|
+
* Copyright 2025 Google LLC
|
|
4
|
+
* Portions Copyright 2025 TerminaI Authors
|
|
5
|
+
* SPDX-License-Identifier: Apache-2.0
|
|
6
|
+
*/
|
|
7
|
+
import type express from 'express';
|
|
8
|
+
export type ReplayOptions = {
|
|
9
|
+
ttlMs?: number;
|
|
10
|
+
maxEntries?: number;
|
|
11
|
+
};
|
|
12
|
+
export declare function computeBodyHash(body?: Buffer | string): string;
|
|
13
|
+
export declare function buildSignaturePayload(input: {
|
|
14
|
+
method: string;
|
|
15
|
+
path: string;
|
|
16
|
+
bodyHash: string;
|
|
17
|
+
nonce: string;
|
|
18
|
+
}): string;
|
|
19
|
+
export declare function createReplayProtection(options?: ReplayOptions): express.RequestHandler;
|
|
@@ -0,0 +1,90 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @license
|
|
3
|
+
* Copyright 2025 Google LLC
|
|
4
|
+
* Portions Copyright 2025 TerminaI Authors
|
|
5
|
+
* SPDX-License-Identifier: Apache-2.0
|
|
6
|
+
*/
|
|
7
|
+
import crypto from 'node:crypto';
|
|
8
|
+
const DEFAULT_NONCE_TTL_MS = 5 * 60 * 1000;
|
|
9
|
+
const DEFAULT_MAX_NONCES = 5000;
|
|
10
|
+
const METHODS_REQUIRING_SIGNATURE = new Set(['POST', 'PUT', 'PATCH', 'DELETE']);
|
|
11
|
+
export function computeBodyHash(body) {
|
|
12
|
+
const raw = body
|
|
13
|
+
? Buffer.isBuffer(body)
|
|
14
|
+
? body
|
|
15
|
+
: Buffer.from(body)
|
|
16
|
+
: Buffer.from('');
|
|
17
|
+
return crypto.createHash('sha256').update(raw).digest('hex');
|
|
18
|
+
}
|
|
19
|
+
export function buildSignaturePayload(input) {
|
|
20
|
+
return [
|
|
21
|
+
input.method.toUpperCase(),
|
|
22
|
+
input.path,
|
|
23
|
+
input.bodyHash,
|
|
24
|
+
input.nonce,
|
|
25
|
+
].join('\n');
|
|
26
|
+
}
|
|
27
|
+
function safeEqualHex(expected, actual) {
|
|
28
|
+
const expectedBuf = Buffer.from(expected, 'hex');
|
|
29
|
+
const actualBuf = Buffer.from(actual, 'hex');
|
|
30
|
+
if (expectedBuf.length !== actualBuf.length) {
|
|
31
|
+
return false;
|
|
32
|
+
}
|
|
33
|
+
return crypto.timingSafeEqual(expectedBuf, actualBuf);
|
|
34
|
+
}
|
|
35
|
+
export function createReplayProtection(options) {
|
|
36
|
+
const ttlMs = options?.ttlMs ?? DEFAULT_NONCE_TTL_MS;
|
|
37
|
+
const maxEntries = options?.maxEntries ?? DEFAULT_MAX_NONCES;
|
|
38
|
+
const nonceStore = new Map();
|
|
39
|
+
function prune(now) {
|
|
40
|
+
for (const [nonce, timestamp] of nonceStore) {
|
|
41
|
+
if (now - timestamp > ttlMs) {
|
|
42
|
+
nonceStore.delete(nonce);
|
|
43
|
+
}
|
|
44
|
+
}
|
|
45
|
+
while (nonceStore.size > maxEntries) {
|
|
46
|
+
const oldestKey = nonceStore.keys().next().value;
|
|
47
|
+
if (!oldestKey) {
|
|
48
|
+
break;
|
|
49
|
+
}
|
|
50
|
+
nonceStore.delete(oldestKey);
|
|
51
|
+
}
|
|
52
|
+
}
|
|
53
|
+
return (req, res, next) => {
|
|
54
|
+
if (!METHODS_REQUIRING_SIGNATURE.has(req.method)) {
|
|
55
|
+
return next();
|
|
56
|
+
}
|
|
57
|
+
const token = req.remoteAuthToken;
|
|
58
|
+
if (!token) {
|
|
59
|
+
return res.status(401).json({ error: 'Unauthorized' });
|
|
60
|
+
}
|
|
61
|
+
const nonce = req.header('x-gemini-nonce');
|
|
62
|
+
const signature = req.header('x-gemini-signature');
|
|
63
|
+
if (!nonce || !signature) {
|
|
64
|
+
return res.status(401).json({ error: 'Missing signature' });
|
|
65
|
+
}
|
|
66
|
+
const now = Date.now();
|
|
67
|
+
prune(now);
|
|
68
|
+
if (nonceStore.has(nonce)) {
|
|
69
|
+
return res.status(401).json({ error: 'Replay detected' });
|
|
70
|
+
}
|
|
71
|
+
const rawBody = req.rawBody;
|
|
72
|
+
const bodyHash = computeBodyHash(rawBody);
|
|
73
|
+
const payload = buildSignaturePayload({
|
|
74
|
+
method: req.method,
|
|
75
|
+
path: req.originalUrl,
|
|
76
|
+
bodyHash,
|
|
77
|
+
nonce,
|
|
78
|
+
});
|
|
79
|
+
const expectedSignature = crypto
|
|
80
|
+
.createHmac('sha256', token)
|
|
81
|
+
.update(payload)
|
|
82
|
+
.digest('hex');
|
|
83
|
+
if (!safeEqualHex(expectedSignature, signature)) {
|
|
84
|
+
return res.status(401).json({ error: 'Invalid signature' });
|
|
85
|
+
}
|
|
86
|
+
nonceStore.set(nonce, now);
|
|
87
|
+
return next();
|
|
88
|
+
};
|
|
89
|
+
}
|
|
90
|
+
//# sourceMappingURL=replay.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"replay.js","sourceRoot":"","sources":["../../../src/http/replay.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAOhF,MAAM,UAAU,eAAe,CAAC,IAAsB;IACpD,MAAM,GAAG,GAAG,IAAI;QACd,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YACrB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACrB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAKrC;IACC,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;QAC1B,KAAK,CAAC,IAAI;QACV,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,KAAK;KACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,MAAc;IACpD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAuB;IAEvB,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,oBAAoB,CAAC;IACrD,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,kBAAkB,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE7C,SAAS,KAAK,CAAC,GAAW;QACxB,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,UAAU,EAAE,CAAC;YAC5C,IAAI,GAAG,GAAG,SAAS,GAAG,KAAK,EAAE,CAAC;gBAC5B,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAC,IAAI,GAAG,UAAU,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YACjD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM;YACR,CAAC;YACD,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,KAAK,GAAI,GAA4B,CAAC,eAAe,CAAC;QAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,CAAC,GAAG,CAAC,CAAC;QAEX,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,OAAO,GAAI,GAA4B,CAAC,OAAO,CAAC;QACtD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,qBAAqB,CAAC;YACpC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,WAAW;YACrB,QAAQ;YACR,KAAK;SACN,CAAC,CAAC;QACH,MAAM,iBAAiB,GAAG,MAAM;aAC7B,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC;aAC3B,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjB,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,CAAC;YAChD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC3B,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,78 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @license
|
|
3
|
+
* Copyright 2025 Google LLC
|
|
4
|
+
* Portions Copyright 2025 TerminaI Authors
|
|
5
|
+
* SPDX-License-Identifier: Apache-2.0
|
|
6
|
+
*/
|
|
7
|
+
import { describe, it } from 'vitest';
|
|
8
|
+
import express from 'express';
|
|
9
|
+
import request from 'supertest';
|
|
10
|
+
import crypto from 'node:crypto';
|
|
11
|
+
import { createReplayProtection, buildSignaturePayload, computeBodyHash, } from './replay.js';
|
|
12
|
+
import { canListenOnLocalhost, listenOnLocalhost, closeServer, } from '../utils/testing_utils.js';
|
|
13
|
+
const CAN_LISTEN = await canListenOnLocalhost();
|
|
14
|
+
const describeIfListen = CAN_LISTEN ? describe : describe.skip;
|
|
15
|
+
const TOKEN = 'test-token';
|
|
16
|
+
function signRequest(method, path, body, nonce) {
|
|
17
|
+
const rawBody = body ? JSON.stringify(body) : '';
|
|
18
|
+
const bodyHash = computeBodyHash(rawBody);
|
|
19
|
+
const payload = buildSignaturePayload({ method, path, bodyHash, nonce });
|
|
20
|
+
return crypto.createHmac('sha256', TOKEN).update(payload).digest('hex');
|
|
21
|
+
}
|
|
22
|
+
describeIfListen('createReplayProtection', () => {
|
|
23
|
+
it('accepts valid signatures and rejects replays', async () => {
|
|
24
|
+
const app = express();
|
|
25
|
+
app.use(express.json({
|
|
26
|
+
verify: (req, _res, buf) => {
|
|
27
|
+
req.rawBody = buf;
|
|
28
|
+
},
|
|
29
|
+
}));
|
|
30
|
+
app.use((req, _res, next) => {
|
|
31
|
+
req.remoteAuthToken = TOKEN;
|
|
32
|
+
next();
|
|
33
|
+
});
|
|
34
|
+
app.use(createReplayProtection({ ttlMs: 5000, maxEntries: 10 }));
|
|
35
|
+
app.post('/test', (_req, res) => res.status(200).json({ ok: true }));
|
|
36
|
+
const server = await listenOnLocalhost(app);
|
|
37
|
+
const body = { message: 'hi' };
|
|
38
|
+
const nonce = 'nonce-1';
|
|
39
|
+
const signature = signRequest('POST', '/test', body, nonce);
|
|
40
|
+
await request(server)
|
|
41
|
+
.post('/test')
|
|
42
|
+
.set('X-Gemini-Nonce', nonce)
|
|
43
|
+
.set('X-Gemini-Signature', signature)
|
|
44
|
+
.send(body)
|
|
45
|
+
.expect(200);
|
|
46
|
+
await request(server)
|
|
47
|
+
.post('/test')
|
|
48
|
+
.set('X-Gemini-Nonce', nonce)
|
|
49
|
+
.set('X-Gemini-Signature', signature)
|
|
50
|
+
.send(body)
|
|
51
|
+
.expect(401);
|
|
52
|
+
await closeServer(server);
|
|
53
|
+
});
|
|
54
|
+
it('rejects invalid signatures', async () => {
|
|
55
|
+
const app = express();
|
|
56
|
+
app.use(express.json({
|
|
57
|
+
verify: (req, _res, buf) => {
|
|
58
|
+
req.rawBody = buf;
|
|
59
|
+
},
|
|
60
|
+
}));
|
|
61
|
+
app.use((req, _res, next) => {
|
|
62
|
+
req.remoteAuthToken = TOKEN;
|
|
63
|
+
next();
|
|
64
|
+
});
|
|
65
|
+
app.use(createReplayProtection({ ttlMs: 5000, maxEntries: 10 }));
|
|
66
|
+
app.post('/test', (_req, res) => res.status(200).json({ ok: true }));
|
|
67
|
+
const body = { message: 'hi' };
|
|
68
|
+
const server = await listenOnLocalhost(app);
|
|
69
|
+
await request(server)
|
|
70
|
+
.post('/test')
|
|
71
|
+
.set('X-Gemini-Nonce', 'nonce-2')
|
|
72
|
+
.set('X-Gemini-Signature', 'bad-signature')
|
|
73
|
+
.send(body)
|
|
74
|
+
.expect(401);
|
|
75
|
+
await closeServer(server);
|
|
76
|
+
});
|
|
77
|
+
});
|
|
78
|
+
//# sourceMappingURL=replay.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"replay.test.js","sourceRoot":"","sources":["../../../src/http/replay.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,WAAW,GACZ,MAAM,2BAA2B,CAAC;AAEnC,MAAM,UAAU,GAAG,MAAM,oBAAoB,EAAE,CAAC;AAChD,MAAM,gBAAgB,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;AAE/D,MAAM,KAAK,GAAG,YAAY,CAAC;AAE3B,SAAS,WAAW,CAClB,MAAc,EACd,IAAY,EACZ,IAAa,EACb,KAAa;IAEb,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,gBAAgB,CAAC,wBAAwB,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CACL,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;gBACxB,GAA4B,CAAC,OAAO,GAAG,GAAG,CAAC;YAC9C,CAAC;SACF,CAAC,CACH,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YACzB,GAA4B,CAAC,eAAe,GAAG,KAAK,CAAC;YACtD,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,SAAS,CAAC;QACxB,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE5D,MAAM,OAAO,CAAC,MAAM,CAAC;aAClB,IAAI,CAAC,OAAO,CAAC;aACb,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC;aAC5B,GAAG,CAAC,oBAAoB,EAAE,SAAS,CAAC;aACpC,IAAI,CAAC,IAAI,CAAC;aACV,MAAM,CAAC,GAAG,CAAC,CAAC;QAEf,MAAM,OAAO,CAAC,MAAM,CAAC;aAClB,IAAI,CAAC,OAAO,CAAC;aACb,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC;aAC5B,GAAG,CAAC,oBAAoB,EAAE,SAAS,CAAC;aACpC,IAAI,CAAC,IAAI,CAAC;aACV,MAAM,CAAC,GAAG,CAAC,CAAC;QACf,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CACL,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;gBACxB,GAA4B,CAAC,OAAO,GAAG,GAAG,CAAC;YAC9C,CAAC;SACF,CAAC,CACH,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YACzB,GAA4B,CAAC,eAAe,GAAG,KAAK,CAAC;YACtD,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAErE,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,OAAO,CAAC,MAAM,CAAC;aAClB,IAAI,CAAC,OAAO,CAAC;aACb,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC;aAChC,GAAG,CAAC,oBAAoB,EAAE,eAAe,CAAC;aAC1C,IAAI,CAAC,IAAI,CAAC;aACV,MAAM,CAAC,GAAG,CAAC,CAAC;QACf,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @license
|
|
3
|
+
* Copyright 2025 Google LLC
|
|
4
|
+
* Portions Copyright 2025 TerminaI Authors
|
|
5
|
+
* SPDX-License-Identifier: Apache-2.0
|
|
6
|
+
*/
|
|
7
|
+
import type express from 'express';
|
|
8
|
+
import { AsyncLocalStorage } from 'node:async_hooks';
|
|
9
|
+
export declare const requestStorage: AsyncLocalStorage<{
|
|
10
|
+
req: express.Request;
|
|
11
|
+
}>;
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @license
|
|
3
|
+
* Copyright 2025 Google LLC
|
|
4
|
+
* Portions Copyright 2025 TerminaI Authors
|
|
5
|
+
* SPDX-License-Identifier: Apache-2.0
|
|
6
|
+
*/
|
|
7
|
+
import { AsyncLocalStorage } from 'node:async_hooks';
|
|
8
|
+
export const requestStorage = new AsyncLocalStorage();
|
|
9
|
+
//# sourceMappingURL=requestStorage.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"requestStorage.js","sourceRoot":"","sources":["../../../src/http/requestStorage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,iBAAiB,EAA4B,CAAC"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @license
|
|
3
|
+
* Copyright 2025 Google LLC
|
|
4
|
+
* Portions Copyright 2025 TerminaI Authors
|
|
5
|
+
* SPDX-License-Identifier: Apache-2.0
|
|
6
|
+
*/
|
|
7
|
+
import { Router } from 'express';
|
|
8
|
+
import { LlmAuthManager } from '../../auth/llmAuthManager.js';
|
|
9
|
+
export declare function createAuthRouter(authManager: LlmAuthManager): Router;
|
|
@@ -0,0 +1,125 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @license
|
|
3
|
+
* Copyright 2025 Google LLC
|
|
4
|
+
* Portions Copyright 2025 TerminaI Authors
|
|
5
|
+
* SPDX-License-Identifier: Apache-2.0
|
|
6
|
+
*/
|
|
7
|
+
import { Router } from 'express';
|
|
8
|
+
import { AuthConflictError, LlmAuthManager, } from '../../auth/llmAuthManager.js';
|
|
9
|
+
import { logger } from '../../utils/logger.js';
|
|
10
|
+
export function createAuthRouter(authManager) {
|
|
11
|
+
const router = Router();
|
|
12
|
+
// Task 12: GET /auth/status
|
|
13
|
+
router.get('/status', (req, res) => {
|
|
14
|
+
void (async () => {
|
|
15
|
+
try {
|
|
16
|
+
const result = await authManager.getStatus();
|
|
17
|
+
res.json({
|
|
18
|
+
status: result.status,
|
|
19
|
+
authType: result.authType ?? null,
|
|
20
|
+
...(result.message ? { message: result.message } : {}),
|
|
21
|
+
...(result.errorCode ? { errorCode: result.errorCode } : {}),
|
|
22
|
+
});
|
|
23
|
+
}
|
|
24
|
+
catch (e) {
|
|
25
|
+
logger.error('[AuthRouter] Error getting status:', e);
|
|
26
|
+
res.status(500).json({ error: 'Failed to check auth status' });
|
|
27
|
+
}
|
|
28
|
+
})();
|
|
29
|
+
});
|
|
30
|
+
// Task 13: POST /gemini/api-key
|
|
31
|
+
router.post('/gemini/api-key', (req, res) => {
|
|
32
|
+
void (async () => {
|
|
33
|
+
const apiKey = req.body.apiKey;
|
|
34
|
+
if (typeof apiKey !== 'string' || apiKey.trim().length === 0) {
|
|
35
|
+
return res.status(400).json({ error: 'Invalid apiKey' });
|
|
36
|
+
}
|
|
37
|
+
try {
|
|
38
|
+
const status = await authManager.submitGeminiApiKey(apiKey);
|
|
39
|
+
return res.json({
|
|
40
|
+
status: status.status,
|
|
41
|
+
authType: status.authType ?? null,
|
|
42
|
+
...(status.message ? { message: status.message } : {}),
|
|
43
|
+
...(status.errorCode ? { errorCode: status.errorCode } : {}),
|
|
44
|
+
});
|
|
45
|
+
}
|
|
46
|
+
catch (e) {
|
|
47
|
+
logger.error('[AuthRouter] Error setting API key:', e);
|
|
48
|
+
return res.status(500).json({ error: 'Failed to set API key' });
|
|
49
|
+
}
|
|
50
|
+
})();
|
|
51
|
+
});
|
|
52
|
+
// Task 14: POST /gemini/oauth/start
|
|
53
|
+
router.post('/gemini/oauth/start', (req, res) => {
|
|
54
|
+
void (async () => {
|
|
55
|
+
try {
|
|
56
|
+
const { authUrl } = await authManager.startGeminiOAuth();
|
|
57
|
+
res.json({ authUrl });
|
|
58
|
+
}
|
|
59
|
+
catch (e) {
|
|
60
|
+
if (e instanceof AuthConflictError) {
|
|
61
|
+
res.status(409).json({ error: e.message });
|
|
62
|
+
return;
|
|
63
|
+
}
|
|
64
|
+
logger.error('[AuthRouter] Error starting OAuth:', e);
|
|
65
|
+
res.status(500).json({ error: 'Failed to start OAuth' });
|
|
66
|
+
}
|
|
67
|
+
})();
|
|
68
|
+
});
|
|
69
|
+
// Task 15: POST /gemini/oauth/cancel
|
|
70
|
+
router.post('/gemini/oauth/cancel', (req, res) => {
|
|
71
|
+
void (async () => {
|
|
72
|
+
try {
|
|
73
|
+
const status = await authManager.cancelGeminiOAuth();
|
|
74
|
+
res.json({
|
|
75
|
+
status: status.status,
|
|
76
|
+
authType: status.authType ?? null,
|
|
77
|
+
...(status.message ? { message: status.message } : {}),
|
|
78
|
+
...(status.errorCode ? { errorCode: status.errorCode } : {}),
|
|
79
|
+
});
|
|
80
|
+
}
|
|
81
|
+
catch (e) {
|
|
82
|
+
logger.error('[AuthRouter] Error cancelling OAuth:', e);
|
|
83
|
+
res.status(500).json({ error: 'Failed to cancel OAuth' });
|
|
84
|
+
}
|
|
85
|
+
})();
|
|
86
|
+
});
|
|
87
|
+
// Task 16: POST /gemini/vertex
|
|
88
|
+
router.post('/gemini/vertex', (req, res) => {
|
|
89
|
+
void (async () => {
|
|
90
|
+
try {
|
|
91
|
+
const status = await authManager.useGeminiVertex();
|
|
92
|
+
res.json({
|
|
93
|
+
status: status.status,
|
|
94
|
+
authType: status.authType ?? null,
|
|
95
|
+
...(status.message ? { message: status.message } : {}),
|
|
96
|
+
...(status.errorCode ? { errorCode: status.errorCode } : {}),
|
|
97
|
+
});
|
|
98
|
+
}
|
|
99
|
+
catch (e) {
|
|
100
|
+
logger.error('[AuthRouter] Error setting Vertex environment:', e);
|
|
101
|
+
res.status(500).json({ error: 'Failed to use Vertex AI' });
|
|
102
|
+
}
|
|
103
|
+
})();
|
|
104
|
+
});
|
|
105
|
+
// Task 30: POST /gemini/clear - Clear all Gemini auth state
|
|
106
|
+
router.post('/gemini/clear', (req, res) => {
|
|
107
|
+
void (async () => {
|
|
108
|
+
try {
|
|
109
|
+
const status = await authManager.clearGeminiAuth();
|
|
110
|
+
res.json({
|
|
111
|
+
status: status.status,
|
|
112
|
+
authType: status.authType ?? null,
|
|
113
|
+
...(status.message ? { message: status.message } : {}),
|
|
114
|
+
...(status.errorCode ? { errorCode: status.errorCode } : {}),
|
|
115
|
+
});
|
|
116
|
+
}
|
|
117
|
+
catch (e) {
|
|
118
|
+
logger.error('[AuthRouter] Error clearing Gemini auth:', e);
|
|
119
|
+
res.status(500).json({ error: 'Failed to clear authentication' });
|
|
120
|
+
}
|
|
121
|
+
})();
|
|
122
|
+
});
|
|
123
|
+
return router;
|
|
124
|
+
}
|
|
125
|
+
//# sourceMappingURL=auth.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../../src/http/routes/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,cAAc,GACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,MAAM,UAAU,gBAAgB,CAAC,WAA2B;IAC1D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,4BAA4B;IAC5B,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE,CAAC;gBAC7C,GAAG,CAAC,IAAI,CAAC;oBACP,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;oBACjC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7D,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,CAAC,CAAC,CAAC;gBACtD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,gCAAgC;IAChC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1C,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,MAAM,GAAI,GAAG,CAAC,IAA6B,CAAC,MAAM,CAAC;YACzD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBAC5D,OAAO,GAAG,CAAC,IAAI,CAAC;oBACd,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;oBACjC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7D,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;gBACvD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9C,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,WAAW,CAAC,gBAAgB,EAAE,CAAC;gBACzD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YACxB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,iBAAiB,EAAE,CAAC;oBACnC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC3C,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,CAAC,CAAC,CAAC;gBACtD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,iBAAiB,EAAE,CAAC;gBACrD,GAAG,CAAC,IAAI,CAAC;oBACP,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;oBACjC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7D,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;gBACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,+BAA+B;IAC/B,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACzC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,eAAe,EAAE,CAAC;gBACnD,GAAG,CAAC,IAAI,CAAC;oBACP,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;oBACjC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7D,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC;gBAClE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACxC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,eAAe,EAAE,CAAC;gBACnD,GAAG,CAAC,IAAI,CAAC;oBACP,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;oBACjC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7D,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;gBAC5D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
/**
|
|
3
|
+
* @license
|
|
4
|
+
* Copyright 2025 Google LLC
|
|
5
|
+
* Portions Copyright 2025 TerminaI Authors
|
|
6
|
+
* SPDX-License-Identifier: Apache-2.0
|
|
7
|
+
*/
|
|
8
|
+
import '../utils/envAliases.js';
|
|
9
|
+
import * as url from 'node:url';
|
|
10
|
+
import * as path from 'node:path';
|
|
11
|
+
import { logger } from '../utils/logger.js';
|
|
12
|
+
import { main } from './app.js';
|
|
13
|
+
// Check if the module is the main script being run
|
|
14
|
+
const isMainModule = path.basename(process.argv[1]) ===
|
|
15
|
+
path.basename(url.fileURLToPath(import.meta.url));
|
|
16
|
+
if (import.meta.url.startsWith('file:') &&
|
|
17
|
+
isMainModule &&
|
|
18
|
+
process.env['NODE_ENV'] !== 'test') {
|
|
19
|
+
process.on('uncaughtException', (error) => {
|
|
20
|
+
logger.error('Unhandled exception:', error);
|
|
21
|
+
process.exit(1);
|
|
22
|
+
});
|
|
23
|
+
main().catch((error) => {
|
|
24
|
+
logger.error('[CoreAgent] Unhandled error in main:', error);
|
|
25
|
+
process.exit(1);
|
|
26
|
+
});
|
|
27
|
+
}
|
|
28
|
+
//# sourceMappingURL=server.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/http/server.ts"],"names":[],"mappings":";AAEA;;;;;GAKG;AAEH,OAAO,wBAAwB,CAAC;AAChC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAEhC,mDAAmD;AACnD,MAAM,YAAY,GAChB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAEpD,IACE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;IACnC,YAAY;IACZ,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM,EAClC,CAAC;IACD,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;QACxC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACrB,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @license
|
|
3
|
+
* Copyright 2025 Google LLC
|
|
4
|
+
* Portions Copyright 2025 TerminaI Authors
|
|
5
|
+
* SPDX-License-Identifier: Apache-2.0
|
|
6
|
+
*/
|
|
7
|
+
export * from './agent/executor.js';
|
|
8
|
+
export * from './http/app.js';
|
|
9
|
+
export * from './persistence/remoteAuthStore.js';
|
|
10
|
+
export * from './types.js';
|