ai-remote 0.5.0 → 0.6.0

package/dist/cli-chunk-WWORJ2NE.mjs

@@ -0,0 +1,72 @@
+// src/cli/known-hosts.ts
+import { chmodSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+function configDir() {
+  const base = process.env.XDG_CONFIG_HOME || join(homedir(), ".config");
+  return join(base, "ai-remote");
+}
+var storePath = () => join(configDir(), "known_hosts.json");
+function read() {
+  try {
+    const parsed = JSON.parse(readFileSync(storePath(), "utf8"));
+    return parsed && typeof parsed === "object" ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+function write(store) {
+  mkdirSync(configDir(), { recursive: true, mode: 448 });
+  writeFileSync(storePath(), `${JSON.stringify(store, null, 2)}
+`, { mode: 384 });
+  chmodSync(storePath(), 384);
+}
+var hostAddress = (host, port) => `${host}:${port}`;
+function checkHostKey(address, info, { insecure = false } = {}) {
+  const store = read();
+  const known = store[address];
+  if (known && known.fingerprint === info.fingerprint) {
+    return { accepted: true, status: "known", message: "" };
+  }
+  if (known && !insecure) {
+    return {
+      accepted: false,
+      status: "changed",
+      message: [
+        `The host key for ${address} has changed.`,
+        `  expected: ${known.fingerprint}`,
+        `  received: ${info.fingerprint} (${info.keyType})`,
+        "Someone may be intercepting this connection. If the machine was genuinely",
+        `rebuilt, run \`ai-remote forget-host ${address}\` and connect again.`
+      ].join("\n")
+    };
+  }
+  store[address] = {
+    fingerprint: info.fingerprint,
+    keyType: info.keyType,
+    firstSeen: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  write(store);
+  return {
+    accepted: true,
+    status: known ? "known" : "new",
+    message: known ? `Host key for ${address} replaced at your request: ${info.fingerprint}` : `Recorded host key for ${address}: ${info.fingerprint} (${info.keyType})`
+  };
+}
+function forgetHostKey(address) {
+  const store = read();
+  if (!(address in store)) return false;
+  delete store[address];
+  write(store);
+  return true;
+}
+function knownHosts() {
+  return Object.entries(read()).map(([address, entry]) => ({ address, ...entry })).toSorted((a, b) => a.address < b.address ? -1 : a.address > b.address ? 1 : 0);
+}
+
+export {
+  hostAddress,
+  checkHostKey,
+  forgetHostKey,
+  knownHosts
+};

package/dist/{cli-copy-BOF44DWQ.mjs → cli-copy-2HQU2E7D.mjs}

@@ -1,11 +1,15 @@
 import {
   SshSession,
   TcpTransport
-} from "./cli-chunk-S2TWL5LF.mjs";
+} from "./cli-chunk-UD2YES3P.mjs";
 import {
   SshReader,
   SshWriter
 } from "./cli-chunk-XT2FISR5.mjs";
+import {
+  checkHostKey,
+  hostAddress
+} from "./cli-chunk-WWORJ2NE.mjs";
 
 // src/cli/copy.ts
 import { open as openFile, mkdir, readdir, stat as statFile } from "node:fs/promises";
@@ -438,10 +442,19 @@ var SftpConnection = class {
       // and still redirectable on its own.
       log: (step, detail) => process.stderr.write(`[SSH] ${step} ${JSON.stringify(detail)}
 `),
-      // The same reasoning as the terminal's: the person running the command
-      // named the host, on their own network, and there is no known_hosts here
-      // to compare against yet.
-      verifyHost: async () => true,
+      // The same known_hosts file the terminal uses, on the same accept-new
+      // terms: a key that changed stops the copy rather than completing it.
+      verifyHost: (info) => {
+        const verdict = checkHostKey(
+          hostAddress(options.host, options.port),
+          info,
+          { insecure: options.insecureHostKey }
+        );
+        if (verdict.message) process.stderr.write(`${verdict.message}
+`);
+        if (!verdict.accepted) this.#error = verdict.message;
+        return verdict.accepted;
+      },
       openTransport: () => new TcpTransport(options.host, options.port)
     });
     this.sftp = new Sftp({ write: (bytes) => this.#session.write(bytes) });