@wacando/agent 2.1.0 → 2.2.0

package/packages/runtime/runtime.mjs

@@ -1,7 +1,9 @@
 import { OnboardingService } from '../onboarding/service.mjs';
-import { CredentialStore, SafeError } from '../onboarding/storage.mjs';
+import { join } from 'node:path';
+import { CredentialStore, digest, SafeError } from '../onboarding/storage.mjs';
 import { configuredOrigin, get, post } from '../onboarding/network.mjs';
 import { ConversationClient } from './conversations.mjs';
+import { FileTransfers, FileVault, uploadPin } from './files.mjs';
 import { claim, pairingErrors, redeem } from './pairing.mjs';
 
 const BUFFER_LIMIT = 200;
@@ -27,10 +29,16 @@ export function publicIdentity(agent, state) {
  * and stop on revocation.
  */
 export class AgentRuntime {
-  constructor({ host = 'cli', origin, store = new CredentialStore(), report, request, connect, onStanza } = {}) {
+  /**
+   * `files`: `{ uploadOrigin, quarantineDir }` (defaults: WACANDO_UPLOAD_ORIGIN
+   * or the API origin; WACANDO_QUARANTINE_DIR or a directory inside the
+   * protected runtime state) plus test hooks (`now`, `sleep`, `pollMs`, `fetch`).
+   */
+  constructor({ host = 'cli', origin, store = new CredentialStore(), report, request, connect, onStanza, files = {} } = {}) {
     if (!/^[a-z0-9][a-z0-9_-]{0,31}$/.test(host)) throw new SafeError('Invalid runtime host name.');
     this.host = host;
     this.originSetting = origin;
+    this.fileOptions = files;
     this.store = store;
     this.listeners = new Set();
     this.clients = new Map();
@@ -120,7 +128,8 @@ export class AgentRuntime {
     let client = this.clients.get(agent.agentId);
     if (client && client.session !== session) this.rebind(agent.agentId, session);
     if (!client) {
-      client = new ConversationClient({ runtime: this, agent, session });
+      const files = await this.fileTransfersFor(agent);
+      client = new ConversationClient({ runtime: this, agent, session, files });
       this.clients.set(agent.agentId, client);
       for (const stanza of this.buffered.get(agent.agentId) ?? []) client.handle(stanza);
       this.buffered.delete(agent.agentId);
@@ -191,6 +200,15 @@ export class AgentRuntime {
     return { paired: true, ...publicIdentity(agent) };
   }
 
+  /** File transfer state of one identity: private directories, pinned upload origin. */
+  async fileTransfersFor(agent) {
+    const { uploadOrigin, quarantineDir = process.env.WACANDO_QUARANTINE_DIR, ...hooks } = this.fileOptions;
+    const pin = uploadPin(agent.origin, uploadOrigin ?? process.env.WACANDO_UPLOAD_ORIGIN);
+    const base = join(await this.store.directory(agent.origin, this.host), `files-${digest(agent.agentId)}`);
+    const vault = new FileVault(base, quarantineDir ? join(quarantineDir, digest(`${agent.origin}\n${agent.agentId}`).slice(0, 32)) : undefined);
+    return client => new FileTransfers(client, { vault, pin, ...hooks });
+  }
+
   /** Subscribe to every stanza of every connected identity. Returns an unsubscribe function. */
   onStanza(listener) {
     this.listeners.add(listener);

package/packages/wacando/chunks/{chunk-GASYW3SG.mjs → chunk-53E7SSTF.mjs}

@@ -1,7 +1,7 @@
-// Embedded from lbframe/wacando@9f82881d4ee6cfd655727a08883877230917c955 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
+// Embedded from lbframe/wacando@618922ecaf2213da18949a8b27d343c8767b64c5 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
 import {
   XMPP_DOMAIN
-} from "./chunk-EIGFLZ2Y.mjs";
+} from "./chunk-PZDQXGA6.mjs";
 
 // packages/xmpp/src/muc.ts
 import xml from "@xmpp/xml";
@@ -408,6 +408,7 @@ function isItemNotFound(err) {
 }
 
 export {
+  defaultTimeoutMs,
   waitForStanza,
   MucJoinError,
   joinRoom,

package/packages/wacando/chunks/{chunk-OI3RF7TS.mjs → chunk-PHGOH4AU.mjs}

@@ -1,7 +1,7 @@
-// Embedded from lbframe/wacando@9f82881d4ee6cfd655727a08883877230917c955 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
+// Embedded from lbframe/wacando@618922ecaf2213da18949a8b27d343c8767b64c5 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
 import {
   DomainError
-} from "./chunk-EIGFLZ2Y.mjs";
+} from "./chunk-PZDQXGA6.mjs";
 
 // packages/omemo/src/ns.ts
 var NS_OMEMO = "eu.siacs.conversations.axolotl";

package/packages/wacando/chunks/chunk-PZDQXGA6.mjs

@@ -0,0 +1,74 @@
+// Embedded from lbframe/wacando@618922ecaf2213da18949a8b27d343c8767b64c5 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
+
+// packages/contracts/src/errors.ts
+var DomainError = class extends Error {
+  code;
+  constructor(code, message) {
+    super(message);
+    this.name = "DomainError";
+    this.code = code;
+  }
+};
+
+// packages/contracts/src/files.ts
+var ALLOWED_MEDIA_TYPES = [
+  "text/plain",
+  "text/markdown",
+  "application/pdf",
+  "application/zip",
+  "application/gzip"
+];
+var MAX_FILE_BYTES = 10 * 1024 * 1024;
+var MIN_FILE_BYTES = 16;
+var TEXT_HEAD_MIN_BYTES = 32;
+function startsWith(bytes, sig) {
+  return bytes.length >= sig.length && sig.every((b, i) => bytes[i] === b);
+}
+function isGzipHeader(bytes) {
+  if (bytes.length < 10 || !startsWith(bytes, [31, 139, 8])) return false;
+  const flg = bytes[3];
+  const xfl = bytes[8];
+  const os = bytes[9];
+  return (flg & 224) === 0 && [0, 2, 4].includes(xfl) && (os <= 13 || os === 255);
+}
+function isTextHead(bytes) {
+  const head = bytes.subarray(0, Math.min(bytes.length, 512));
+  if (head.length < TEXT_HEAD_MIN_BYTES) return false;
+  const cuts = head.length < bytes.length ? [0, 1, 2, 3] : [0];
+  for (const cut of cuts) {
+    let text;
+    try {
+      text = new TextDecoder("utf-8", { fatal: true }).decode(head.subarray(0, head.length - cut));
+    } catch {
+      continue;
+    }
+    return !/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/.test(text);
+  }
+  return false;
+}
+function looksLikePlaintext(bytes) {
+  return startsWith(bytes, [37, 80, 68, 70, 45]) || // %PDF-
+  startsWith(bytes, [80, 75, 3, 4]) || // zip local file header
+  startsWith(bytes, [80, 75, 5, 6]) || // empty zip
+  isGzipHeader(bytes) || isTextHead(bytes);
+}
+
+// packages/contracts/src/internal.ts
+function xmppDomain() {
+  const env = globalThis.process?.env;
+  return env?.XMPP_DOMAIN ?? "wacando.localhost";
+}
+var XMPP_DOMAIN = xmppDomain();
+var XMPP_MUC_DOMAIN = `conference.${XMPP_DOMAIN}`;
+
+// packages/contracts/src/message.ts
+var MAX_MESSAGE_PLAINTEXT_BYTES = 64 * 1024;
+
+export {
+  DomainError,
+  ALLOWED_MEDIA_TYPES,
+  MAX_FILE_BYTES,
+  MIN_FILE_BYTES,
+  looksLikePlaintext,
+  XMPP_DOMAIN
+};

package/packages/wacando/omemo-wire.mjs

@@ -1,4 +1,4 @@
-// Embedded from lbframe/wacando@9f82881d4ee6cfd655727a08883877230917c955 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
+// Embedded from lbframe/wacando@618922ecaf2213da18949a8b27d343c8767b64c5 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
 import {
   BODY_MARKER,
   GCM_IV_BYTES,
@@ -29,8 +29,8 @@ import {
   signerJid,
   signerRole,
   targetJid
-} from "./chunks/chunk-OI3RF7TS.mjs";
-import "./chunks/chunk-EIGFLZ2Y.mjs";
+} from "./chunks/chunk-PHGOH4AU.mjs";
+import "./chunks/chunk-PZDQXGA6.mjs";
 
 // packages/omemo/src/policy-wire.ts
 import xml from "@xmpp/xml";