@threadcrumbs/common 0.1.8 → 0.1.10

package/license/store.mjs

@@ -1,155 +1,192 @@
-import { randomBytes } from 'node:crypto'
-import fsp from 'node:fs/promises'
-import os from 'node:os'
-import path from 'node:path'
-import { LICENSE_PUBLIC_KEYS, verifyLicense } from './index.mjs'
-
-const FILE = 'license.json'
-const DEVICE = /^[A-Za-z0-9_-]{8,100}$/
-const SEEN_STEP = 3600
-const READ_TRIES = 5
-const RENAME_TRIES = 10
-const PAUSE_MS = 20
-const CLOUD_URL = 'https://threadcrumbs.io/api'
-const LOCAL_CLOUD_URL = 'http://localhost:8787/api'
-
-const pause = () => new Promise((resolve) => setTimeout(resolve, PAUSE_MS))
-const isDevice = (value) => typeof value === 'string' && DEVICE.test(value)
-const finite = (value) => (typeof value === 'number' && Number.isFinite(value) ? value : 0)
-
-export function threadcrumbsDataDir({ platform = process.platform, env = process.env, home = os.homedir() } = {}) {
-  if (env.THREADCRUMBS_DATA_DIR) return env.THREADCRUMBS_DATA_DIR
-  if (platform === 'win32') {
-    return path.win32.join(env.APPDATA || path.win32.join(home, 'AppData', 'Roaming'), 'Threadcrumbs')
-  }
-  if (platform === 'darwin') return path.posix.join(home, 'Library', 'Application Support', 'Threadcrumbs')
-  const xdg = env.XDG_DATA_HOME && path.posix.isAbsolute(env.XDG_DATA_HOME) ? env.XDG_DATA_HOME : ''
-  return path.posix.join(xdg || path.posix.join(home, '.local', 'share'), 'threadcrumbs')
-}
-
-export function trustedKeys({ env = process.env, development = false } = {}) {
-  const extra = development ? env.THREADCRUMBS_LICENSE_KEYS : ''
-  if (!extra) return { ...LICENSE_PUBLIC_KEYS }
-  let parsed
-  try {
-    parsed = JSON.parse(extra)
-  } catch {
-    throw new Error('THREADCRUMBS_LICENSE_KEYS must be JSON: { "<kid>": "<public key>" }')
-  }
-  if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed) || !Object.values(parsed).every((k) => typeof k === 'string')) {
-    throw new Error('THREADCRUMBS_LICENSE_KEYS must map each key ID to a public key')
-  }
-  return { ...LICENSE_PUBLIC_KEYS, ...parsed }
-}
-
-export function cloudUrl({ env = process.env, development = false } = {}) {
-  return (env.THREADCRUMBS_CLOUD_URL || (development ? LOCAL_CLOUD_URL : CLOUD_URL)).replace(/\/+$/, '')
-}
-
-async function check(token, keys, device) {
-  try {
-    return await verifyLicense(token, { keys, device })
-  } catch {
-    return { ok: false, reason: 'malformed' }
-  }
-}
-
-export function licenseStore({ dir = threadcrumbsDataDir(), keys = LICENSE_PUBLIC_KEYS, now = () => Date.now() / 1000 } = {}) {
-  const file = path.join(dir, FILE)
-
-  async function read() {
-    let text
-    try {
-      text = await fsp.readFile(file, 'utf8')
-    } catch (err) {
-      if (err.code === 'ENOENT') return null
-      throw err
-    }
-    try {
-      const data = JSON.parse(text)
-      return data && typeof data === 'object' && !Array.isArray(data) ? data : {}
-    } catch {
-      return {}
-    }
-  }
-
-  const serialize = (data) => `${JSON.stringify(data, null, 2)}\n`
-
-  async function replace(data) {
-    await fsp.mkdir(dir, { recursive: true })
-    const temp = `${file}.${process.pid}.${randomBytes(4).toString('hex')}.tmp`
-    try {
-      await fsp.writeFile(temp, serialize(data), { mode: 0o600 })
-      for (let attempt = 1; ; attempt++) {
-        try {
-          return await fsp.rename(temp, file)
-        } catch (err) {
-          if (attempt >= RENAME_TRIES || !['EPERM', 'EACCES', 'EBUSY'].includes(err.code)) throw err
-          await pause()
-        }
-      }
-    } catch (err) {
-      await fsp.rm(temp, { force: true })
-      throw err
-    }
-  }
-
-  async function device() {
-    for (let attempt = 0; attempt < READ_TRIES; attempt++) {
-      const data = await read()
-      if (isDevice(data?.device)) return data.device
-      if (data === null) {
-        await fsp.mkdir(dir, { recursive: true })
-        try {
-          await fsp.writeFile(file, serialize({ device: randomBytes(18).toString('base64url'), license: null, seen: 0 }), { flag: 'wx', mode: 0o600 })
-        } catch (err) {
-          if (err.code !== 'EEXIST') throw err
-        }
-        continue
-      }
-      await pause()
-    }
-    await replace({ device: randomBytes(18).toString('base64url'), license: null, seen: 0 })
-    const data = await read()
-    if (!isDevice(data?.device)) throw new Error(`Can't read or replace ${file}`)
-    return data.device
-  }
-
-  async function update(change) {
-    const data = (await read()) ?? {}
-    await replace({ ...data, ...change, device: data.device })
-  }
-
-  async function current() {
-    const clock = now()
-    if ((await read()) === null) return { device: null, token: null, license: null, at: clock }
-    const dev = await device()
-    const data = (await read()) ?? {}
-    const seen = finite(data.seen)
-    if (typeof data.license !== 'string') return { device: dev, token: null, license: null, at: Math.max(clock, seen) }
-    const checked = await check(data.license, keys, dev)
-    if (!checked.ok) return { device: dev, token: null, license: null, reason: checked.reason, at: Math.max(clock, seen) }
-    if (clock > seen + SEEN_STEP) await update({ seen: clock }).catch(() => {})
-    return { device: dev, token: data.license, license: checked.license, at: Math.max(clock, seen, checked.license.iat) }
-  }
-
-  async function save(token) {
-    const dev = await device()
-    const checked = await check(token, keys, dev)
-    if (!checked.ok) return checked
-    const data = (await read()) ?? {}
-    const stored = typeof data.license === 'string' ? await check(data.license, keys, dev) : null
-    if (stored?.ok && stored.license.iat > checked.license.iat) {
-      return { ok: true, license: stored.license, at: Math.max(now(), finite(data.seen), stored.license.iat) }
-    }
-    await update({ license: token, seen: checked.license.iat })
-    return { ok: true, license: checked.license, at: Math.max(now(), checked.license.iat) }
-  }
-
-  async function clear() {
-    await device()
-    await update({ license: null })
-  }
-
-  return { file, device, current, save, clear }
-}
+import { randomBytes } from 'node:crypto'
+import fsp from 'node:fs/promises'
+import os from 'node:os'
+import path from 'node:path'
+import { LICENSE_PUBLIC_KEYS, verifyLicense } from './index.mjs'
+
+const FILE = 'license.json'
+const DEVICE = /^[A-Za-z0-9_-]{8,100}$/
+const SEEN_STEP = 3600
+const READ_TRIES = 5
+const RENAME_TRIES = 10
+const PAUSE_MS = 20
+const CLOUD_URL = 'https://threadcrumbs.io/api'
+const LOCAL_CLOUD_URL = 'http://localhost:8787/api'
+const CLOUD_TIMEOUT_MS = 15000
+
+const pause = () => new Promise((resolve) => setTimeout(resolve, PAUSE_MS))
+const isDevice = (value) => typeof value === 'string' && DEVICE.test(value)
+const finite = (value) => (typeof value === 'number' && Number.isFinite(value) ? value : 0)
+
+export function threadcrumbsDataDir({ platform = process.platform, env = process.env, home = os.homedir() } = {}) {
+  if (env.THREADCRUMBS_DATA_DIR) return env.THREADCRUMBS_DATA_DIR
+  if (platform === 'win32') {
+    return path.win32.join(env.APPDATA || path.win32.join(home, 'AppData', 'Roaming'), 'Threadcrumbs')
+  }
+  if (platform === 'darwin') return path.posix.join(home, 'Library', 'Application Support', 'Threadcrumbs')
+  const xdg = env.XDG_DATA_HOME && path.posix.isAbsolute(env.XDG_DATA_HOME) ? env.XDG_DATA_HOME : ''
+  return path.posix.join(xdg || path.posix.join(home, '.local', 'share'), 'threadcrumbs')
+}
+
+export function trustedKeys({ env = process.env, development = false } = {}) {
+  const extra = development ? env.THREADCRUMBS_LICENSE_KEYS : ''
+  if (!extra) return { ...LICENSE_PUBLIC_KEYS }
+  let parsed
+  try {
+    parsed = JSON.parse(extra)
+  } catch {
+    throw new Error('THREADCRUMBS_LICENSE_KEYS must be JSON: { "<kid>": "<public key>" }')
+  }
+  if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed) || !Object.values(parsed).every((k) => typeof k === 'string')) {
+    throw new Error('THREADCRUMBS_LICENSE_KEYS must map each key ID to a public key')
+  }
+  return { ...LICENSE_PUBLIC_KEYS, ...parsed }
+}
+
+export function cloudUrl({ env = process.env, development = false } = {}) {
+  return (env.THREADCRUMBS_CLOUD_URL || (development ? LOCAL_CLOUD_URL : CLOUD_URL)).replace(/\/+$/, '')
+}
+
+const PORTAL_REFUSALS = {
+  not_activated: 'Enter your license key on this computer first.',
+  offline: "Couldn't reach the license service. Check your connection, then try again.",
+  unavailable: "The license service didn't answer as expected. Try again in a minute.",
+}
+
+const refusal = (error) => ({ error, why: PORTAL_REFUSALS[error] })
+
+function isHttps(url) {
+  try {
+    return new URL(url).protocol === 'https:'
+  } catch {
+    return false
+  }
+}
+
+export async function portalUrl({ license, device, fetch = globalThis.fetch, cloud = cloudUrl() } = {}) {
+  if (typeof license !== 'string' || !license || !isDevice(device)) return refusal('not_activated')
+  if (!cloud) return refusal('unavailable')
+  let response
+  try {
+    response = await fetch(`${cloud}/v1/portal`, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ license, device }),
+      signal: AbortSignal.timeout(CLOUD_TIMEOUT_MS),
+    })
+  } catch {
+    return refusal('offline')
+  }
+  const data = await response.json().catch(() => null)
+  if (response.ok && typeof data?.url === 'string' && isHttps(data.url)) return { url: data.url }
+  if (!response.ok && typeof data?.error === 'string' && typeof data.why === 'string' && data.why) return { error: data.error, why: data.why }
+  return refusal('unavailable')
+}
+
+async function check(token, keys, device) {
+  try {
+    return await verifyLicense(token, { keys, device })
+  } catch {
+    return { ok: false, reason: 'malformed' }
+  }
+}
+
+export function licenseStore({ dir = threadcrumbsDataDir(), keys = LICENSE_PUBLIC_KEYS, now = () => Date.now() / 1000 } = {}) {
+  const file = path.join(dir, FILE)
+
+  async function read() {
+    let text
+    try {
+      text = await fsp.readFile(file, 'utf8')
+    } catch (err) {
+      if (err.code === 'ENOENT') return null
+      throw err
+    }
+    try {
+      const data = JSON.parse(text)
+      return data && typeof data === 'object' && !Array.isArray(data) ? data : {}
+    } catch {
+      return {}
+    }
+  }
+
+  const serialize = (data) => `${JSON.stringify(data, null, 2)}\n`
+
+  async function replace(data) {
+    await fsp.mkdir(dir, { recursive: true })
+    const temp = `${file}.${process.pid}.${randomBytes(4).toString('hex')}.tmp`
+    try {
+      await fsp.writeFile(temp, serialize(data), { mode: 0o600 })
+      for (let attempt = 1; ; attempt++) {
+        try {
+          return await fsp.rename(temp, file)
+        } catch (err) {
+          if (attempt >= RENAME_TRIES || !['EPERM', 'EACCES', 'EBUSY'].includes(err.code)) throw err
+          await pause()
+        }
+      }
+    } catch (err) {
+      await fsp.rm(temp, { force: true })
+      throw err
+    }
+  }
+
+  async function device() {
+    for (let attempt = 0; attempt < READ_TRIES; attempt++) {
+      const data = await read()
+      if (isDevice(data?.device)) return data.device
+      if (data === null) {
+        await fsp.mkdir(dir, { recursive: true })
+        try {
+          await fsp.writeFile(file, serialize({ device: randomBytes(18).toString('base64url'), license: null, seen: 0 }), { flag: 'wx', mode: 0o600 })
+        } catch (err) {
+          if (err.code !== 'EEXIST') throw err
+        }
+        continue
+      }
+      await pause()
+    }
+    await replace({ device: randomBytes(18).toString('base64url'), license: null, seen: 0 })
+    const data = await read()
+    if (!isDevice(data?.device)) throw new Error(`Can't read or replace ${file}`)
+    return data.device
+  }
+
+  async function update(change) {
+    const data = (await read()) ?? {}
+    await replace({ ...data, ...change, device: data.device })
+  }
+
+  async function current() {
+    const clock = now()
+    if ((await read()) === null) return { device: null, token: null, license: null, at: clock }
+    const dev = await device()
+    const data = (await read()) ?? {}
+    const seen = finite(data.seen)
+    if (typeof data.license !== 'string') return { device: dev, token: null, license: null, at: Math.max(clock, seen) }
+    const checked = await check(data.license, keys, dev)
+    if (!checked.ok) return { device: dev, token: null, license: null, reason: checked.reason, at: Math.max(clock, seen) }
+    if (clock > seen + SEEN_STEP) await update({ seen: clock }).catch(() => {})
+    return { device: dev, token: data.license, license: checked.license, at: Math.max(clock, seen, checked.license.iat) }
+  }
+
+  async function save(token) {
+    const dev = await device()
+    const checked = await check(token, keys, dev)
+    if (!checked.ok) return checked
+    const data = (await read()) ?? {}
+    const stored = typeof data.license === 'string' ? await check(data.license, keys, dev) : null
+    if (stored?.ok && stored.license.iat > checked.license.iat) {
+      return { ok: true, license: stored.license, at: Math.max(now(), finite(data.seen), stored.license.iat) }
+    }
+    await update({ license: token, seen: checked.license.iat })
+    return { ok: true, license: checked.license, at: Math.max(now(), checked.license.iat) }
+  }
+
+  async function clear() {
+    await device()
+    await update({ license: null })
+  }
+
+  return { file, device, current, save, clear }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@threadcrumbs/common",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "type": "module",
   "description": "Code the Threadcrumbs apps share, starting with the readers for each coding-agent harness.",
   "license": "SEE LICENSE IN LICENSE.md",