@wacando/agent 2.1.0 → 2.3.0

package/packages/runtime/pairing.mjs

@@ -1,6 +1,6 @@
 import { createPrivateKey, createPublicKey, generateKeyPairSync, randomBytes, sign } from 'node:crypto';
 import { hostname } from 'node:os';
-import { ApiError, post } from '../onboarding/network.mjs';
+import { ApiError, apiNotFound, post } from '../onboarding/network.mjs';
 import { SafeError } from '../onboarding/storage.mjs';
 
 // Universal pairing (lbframe/wacando docs/ENROLLMENT_PAIRING_API.md, #36/#60).
@@ -71,6 +71,10 @@ export async function redeem({ origin, code, host, label, mode, saveKey, request
       proof: proof(key.privateKeyPem, redeemMessage(code, key.publicKey, clientNonce, issuedAt)),
     });
   } catch (error) {
+    // Not the Wacando API (e.g. the web site answering an HTML 404): a wrong
+    // origin, never a code refusal. Every real API refusal keeps one message,
+    // so the answer reveals nothing about a code.
+    if (error instanceof ApiError && error.unknownRoute) throw new SafeError(apiNotFound(origin));
     if (error instanceof ApiError && [400, 401, 403, 404].includes(error.status)) throw new SafeError(pairingErrors.refused);
     if (error instanceof ApiError && error.status === 429) throw new SafeError('Too many pairing attempts. Wait and retry with the same code.');
     throw error;
@@ -100,6 +104,7 @@ export async function claim({ pending, request = post, sleep, now = Date.now, de
       return data;
     } catch (error) {
       if (!(error instanceof ApiError)) throw error;
+      if (error.unknownRoute) throw new SafeError(apiNotFound(pending.origin));
       if (error.status === 429) wait = Math.max(POLL_INTERVAL_MS, (error.retryAfter ?? 5) * 1000);
       else if (error.status !== 401) throw new SafeError(`Pairing service error (HTTP ${error.status}). Retry with the same command.`);
     }

package/packages/runtime/runtime.mjs

@@ -1,7 +1,9 @@
 import { OnboardingService } from '../onboarding/service.mjs';
-import { CredentialStore, SafeError } from '../onboarding/storage.mjs';
-import { configuredOrigin, get, post } from '../onboarding/network.mjs';
+import { join } from 'node:path';
+import { CredentialStore, digest, SafeError } from '../onboarding/storage.mjs';
+import { configuredOrigin, get, legacyOrigins, post } from '../onboarding/network.mjs';
 import { ConversationClient } from './conversations.mjs';
+import { FileTransfers, FileVault, uploadPin } from './files.mjs';
 import { claim, pairingErrors, redeem } from './pairing.mjs';
 
 const BUFFER_LIMIT = 200;
@@ -27,10 +29,16 @@ export function publicIdentity(agent, state) {
  * and stop on revocation.
  */
 export class AgentRuntime {
-  constructor({ host = 'cli', origin, store = new CredentialStore(), report, request, connect, onStanza } = {}) {
+  /**
+   * `files`: `{ uploadOrigin, quarantineDir }` (defaults: WACANDO_UPLOAD_ORIGIN
+   * or the API origin; WACANDO_QUARANTINE_DIR or a directory inside the
+   * protected runtime state) plus test hooks (`now`, `sleep`, `pollMs`, `fetch`).
+   */
+  constructor({ host = 'cli', origin, store = new CredentialStore(), report, request, connect, onStanza, files = {} } = {}) {
     if (!/^[a-z0-9][a-z0-9_-]{0,31}$/.test(host)) throw new SafeError('Invalid runtime host name.');
     this.host = host;
     this.originSetting = origin;
+    this.fileOptions = files;
     this.store = store;
     this.listeners = new Set();
     this.clients = new Map();
@@ -47,16 +55,34 @@ export class AgentRuntime {
   /** Configured service origin (validated on use, like the onboarding tools). */
   get origin() { return configuredOrigin(this.originSetting); }
 
+  /**
+   * Saved identity records for this origin and host. For the production API
+   * this includes identities saved under the former default origin (the web
+   * app, up to 2.2.0): they are used in place, under their saved origin, so
+   * their OMEMO device, file state and locks stay exactly where they are and
+   * an older runtime still finds them. Nothing is rewritten or moved.
+   */
+  async savedAgents() {
+    const agents = [];
+    const seen = new Set();
+    for (const origin of legacyOrigins(this.origin)) {
+      for (const agent of await this.store.list(origin, this.host, 'agent')) {
+        if (agent.origin !== origin || seen.has(agent.agentId)) continue;
+        seen.add(agent.agentId);
+        agents.push(agent);
+      }
+    }
+    return agents;
+  }
+
   /** Saved identities for this origin and host (public fields only). */
   async identities() {
-    const agents = await this.store.list(this.origin, this.host, 'agent');
-    return agents.filter(agent => agent.origin === this.origin)
-      .map(agent => publicIdentity(agent, this.service.states.get(agent.agentId)));
+    return (await this.savedAgents()).map(agent => publicIdentity(agent, this.service.states.get(agent.agentId)));
   }
 
   /** Resolve a saved identity by agent ID or handle; a single identity is the default. */
   async resolve(selector) {
-    const agents = (await this.store.list(this.origin, this.host, 'agent')).filter(agent => agent.origin === this.origin);
+    const agents = await this.savedAgents();
     const matches = selector === undefined ? agents
       : agents.filter(agent => agent.agentId === selector || (handlePattern.test(selector) && agent.handle === selector));
     if (matches.length === 0) throw new SafeError('No saved identity matches. Pair this runtime first (wacando-agent pair <code>).');
@@ -120,7 +146,8 @@ export class AgentRuntime {
     let client = this.clients.get(agent.agentId);
     if (client && client.session !== session) this.rebind(agent.agentId, session);
     if (!client) {
-      client = new ConversationClient({ runtime: this, agent, session });
+      const files = await this.fileTransfersFor(agent);
+      client = new ConversationClient({ runtime: this, agent, session, files });
       this.clients.set(agent.agentId, client);
       for (const stanza of this.buffered.get(agent.agentId) ?? []) client.handle(stanza);
       this.buffered.delete(agent.agentId);
@@ -191,6 +218,15 @@ export class AgentRuntime {
     return { paired: true, ...publicIdentity(agent) };
   }
 
+  /** File transfer state of one identity: private directories, pinned upload origin. */
+  async fileTransfersFor(agent) {
+    const { uploadOrigin, quarantineDir = process.env.WACANDO_QUARANTINE_DIR, ...hooks } = this.fileOptions;
+    const pin = uploadPin(agent.origin, uploadOrigin ?? process.env.WACANDO_UPLOAD_ORIGIN);
+    const base = join(await this.store.directory(agent.origin, this.host), `files-${digest(agent.agentId)}`);
+    const vault = new FileVault(base, quarantineDir ? join(quarantineDir, digest(`${agent.origin}\n${agent.agentId}`).slice(0, 32)) : undefined);
+    return client => new FileTransfers(client, { vault, pin, ...hooks });
+  }
+
   /** Subscribe to every stanza of every connected identity. Returns an unsubscribe function. */
   onStanza(listener) {
     this.listeners.add(listener);

package/packages/wacando/chunks/{chunk-GASYW3SG.mjs → chunk-53E7SSTF.mjs}

@@ -1,7 +1,7 @@
-// Embedded from lbframe/wacando@9f82881d4ee6cfd655727a08883877230917c955 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
+// Embedded from lbframe/wacando@618922ecaf2213da18949a8b27d343c8767b64c5 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
 import {
   XMPP_DOMAIN
-} from "./chunk-EIGFLZ2Y.mjs";
+} from "./chunk-PZDQXGA6.mjs";
 
 // packages/xmpp/src/muc.ts
 import xml from "@xmpp/xml";
@@ -408,6 +408,7 @@ function isItemNotFound(err) {
 }
 
 export {
+  defaultTimeoutMs,
   waitForStanza,
   MucJoinError,
   joinRoom,

package/packages/wacando/chunks/{chunk-OI3RF7TS.mjs → chunk-PHGOH4AU.mjs}

@@ -1,7 +1,7 @@
-// Embedded from lbframe/wacando@9f82881d4ee6cfd655727a08883877230917c955 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
+// Embedded from lbframe/wacando@618922ecaf2213da18949a8b27d343c8767b64c5 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
 import {
   DomainError
-} from "./chunk-EIGFLZ2Y.mjs";
+} from "./chunk-PZDQXGA6.mjs";
 
 // packages/omemo/src/ns.ts
 var NS_OMEMO = "eu.siacs.conversations.axolotl";

package/packages/wacando/chunks/chunk-PZDQXGA6.mjs

@@ -0,0 +1,74 @@
+// Embedded from lbframe/wacando@618922ecaf2213da18949a8b27d343c8767b64c5 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
+
+// packages/contracts/src/errors.ts
+var DomainError = class extends Error {
+  code;
+  constructor(code, message) {
+    super(message);
+    this.name = "DomainError";
+    this.code = code;
+  }
+};
+
+// packages/contracts/src/files.ts
+var ALLOWED_MEDIA_TYPES = [
+  "text/plain",
+  "text/markdown",
+  "application/pdf",
+  "application/zip",
+  "application/gzip"
+];
+var MAX_FILE_BYTES = 10 * 1024 * 1024;
+var MIN_FILE_BYTES = 16;
+var TEXT_HEAD_MIN_BYTES = 32;
+function startsWith(bytes, sig) {
+  return bytes.length >= sig.length && sig.every((b, i) => bytes[i] === b);
+}
+function isGzipHeader(bytes) {
+  if (bytes.length < 10 || !startsWith(bytes, [31, 139, 8])) return false;
+  const flg = bytes[3];
+  const xfl = bytes[8];
+  const os = bytes[9];
+  return (flg & 224) === 0 && [0, 2, 4].includes(xfl) && (os <= 13 || os === 255);
+}
+function isTextHead(bytes) {
+  const head = bytes.subarray(0, Math.min(bytes.length, 512));
+  if (head.length < TEXT_HEAD_MIN_BYTES) return false;
+  const cuts = head.length < bytes.length ? [0, 1, 2, 3] : [0];
+  for (const cut of cuts) {
+    let text;
+    try {
+      text = new TextDecoder("utf-8", { fatal: true }).decode(head.subarray(0, head.length - cut));
+    } catch {
+      continue;
+    }
+    return !/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/.test(text);
+  }
+  return false;
+}
+function looksLikePlaintext(bytes) {
+  return startsWith(bytes, [37, 80, 68, 70, 45]) || // %PDF-
+  startsWith(bytes, [80, 75, 3, 4]) || // zip local file header
+  startsWith(bytes, [80, 75, 5, 6]) || // empty zip
+  isGzipHeader(bytes) || isTextHead(bytes);
+}
+
+// packages/contracts/src/internal.ts
+function xmppDomain() {
+  const env = globalThis.process?.env;
+  return env?.XMPP_DOMAIN ?? "wacando.localhost";
+}
+var XMPP_DOMAIN = xmppDomain();
+var XMPP_MUC_DOMAIN = `conference.${XMPP_DOMAIN}`;
+
+// packages/contracts/src/message.ts
+var MAX_MESSAGE_PLAINTEXT_BYTES = 64 * 1024;
+
+export {
+  DomainError,
+  ALLOWED_MEDIA_TYPES,
+  MAX_FILE_BYTES,
+  MIN_FILE_BYTES,
+  looksLikePlaintext,
+  XMPP_DOMAIN
+};

package/packages/wacando/omemo-wire.mjs

@@ -1,4 +1,4 @@
-// Embedded from lbframe/wacando@9f82881d4ee6cfd655727a08883877230917c955 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
+// Embedded from lbframe/wacando@618922ecaf2213da18949a8b27d343c8767b64c5 by scripts/embed-wacando.mjs. Do not edit; see provenance.json.
 import {
   BODY_MARKER,
   GCM_IV_BYTES,
@@ -29,8 +29,8 @@ import {
   signerJid,
   signerRole,
   targetJid
-} from "./chunks/chunk-OI3RF7TS.mjs";
-import "./chunks/chunk-EIGFLZ2Y.mjs";
+} from "./chunks/chunk-PHGOH4AU.mjs";
+import "./chunks/chunk-PZDQXGA6.mjs";
 
 // packages/omemo/src/policy-wire.ts
 import xml from "@xmpp/xml";