cordisx 0.1.0-beta.21 → 0.1.0-beta.22

package/dist/src/launcher/model-catalog/managed-catalog-state.js

@@ -0,0 +1,130 @@
+import { createCipheriv, createDecipheriv, randomBytes, randomUUID } from 'node:crypto';
+import { constants } from 'node:fs';
+import { open, rename, rm } from 'node:fs/promises';
+import path from 'node:path';
+import { CatalogError, object } from './contracts.js';
+/** Encrypted profile state. Only the credential owner constructs this, under its exclusive lock. */
+export class ManagedCatalogState {
+    file;
+    backend;
+    service;
+    current;
+    raw;
+    initialized = false;
+    constructor(file, backend, service, current) {
+        this.file = file;
+        this.backend = backend;
+        this.service = service;
+        this.current = current;
+    }
+    async readRaw() {
+        try {
+            const handle = await open(this.file, constants.O_RDONLY | constants.O_NOFOLLOW);
+            try {
+                const stat = await handle.stat();
+                if (!stat.isFile() || stat.size > 24 * 1024 * 1024 || (stat.mode & 0o077) !== 0) {
+                    throw new CatalogError('source-invalid');
+                }
+                return await handle.readFile('utf8');
+            }
+            finally {
+                await handle.close();
+            }
+        }
+        catch (error) {
+            if (object(error)?.code === 'ENOENT')
+                return undefined;
+            throw error;
+        }
+    }
+    async key(create) {
+        if (await this.backend.status(this.service, 'catalog-state-key') === 'unset') {
+            if (!create)
+                throw new CatalogError('credential-unavailable');
+            await this.backend.upsert(this.service, 'catalog-state-key', randomBytes(32).toString('base64url'));
+        }
+        const key = Buffer.from(await this.backend.read(this.service, 'catalog-state-key'), 'base64url');
+        if (key.length !== 32)
+            throw new CatalogError('credential-unavailable');
+        return key;
+    }
+    async read() {
+        await this.current();
+        const raw = await this.readRaw();
+        this.raw = raw;
+        this.initialized = true;
+        if (raw === undefined)
+            return undefined;
+        try {
+            const data = object(JSON.parse(raw));
+            if (!data || data.version !== 1 || typeof data.iv !== 'string' || typeof data.tag !== 'string'
+                || typeof data.body !== 'string')
+                throw new Error('invalid');
+            const key = await this.key(false);
+            try {
+                const decipher = createDecipheriv('aes-256-gcm', key, Buffer.from(data.iv, 'base64'));
+                decipher.setAAD(Buffer.from(this.service));
+                decipher.setAuthTag(Buffer.from(data.tag, 'base64'));
+                const plain = Buffer.concat([decipher.update(Buffer.from(data.body, 'base64')), decipher.final()]);
+                await this.current();
+                return JSON.parse(plain.toString('utf8'));
+            }
+            finally {
+                key.fill(0);
+            }
+        }
+        catch {
+            throw new CatalogError('source-invalid');
+        }
+    }
+    async write(value, authorized) {
+        if (!this.initialized)
+            await this.read();
+        const plain = JSON.stringify(value);
+        if (Buffer.byteLength(plain) > 16 * 1024 * 1024)
+            throw new CatalogError('source-invalid');
+        await this.current();
+        if (!authorized())
+            throw new CatalogError('permission');
+        if (await this.readRaw() !== this.raw)
+            throw new CatalogError('source-invalid');
+        const key = await this.key(true);
+        let raw;
+        try {
+            const iv = randomBytes(12), cipher = createCipheriv('aes-256-gcm', key, iv);
+            cipher.setAAD(Buffer.from(this.service));
+            const body = Buffer.concat([cipher.update(plain, 'utf8'), cipher.final()]);
+            raw = JSON.stringify({
+                version: 1,
+                iv: iv.toString('base64'),
+                tag: cipher.getAuthTag().toString('base64'),
+                body: body.toString('base64'),
+            });
+        }
+        finally {
+            key.fill(0);
+        }
+        const temporary = path.join(path.dirname(this.file), `.state-${randomUUID()}`);
+        try {
+            const handle = await open(temporary, 'wx', 0o600);
+            try {
+                await handle.writeFile(raw);
+                await handle.sync();
+            }
+            finally {
+                await handle.close();
+            }
+            await this.current();
+            if (!authorized())
+                throw new CatalogError('permission');
+            if (await this.readRaw() !== this.raw)
+                throw new CatalogError('source-invalid');
+            await rename(temporary, this.file);
+            this.raw = raw;
+        }
+        finally {
+            await rm(temporary, { force: true });
+        }
+    }
+}
+//# sourceMappingURL=managed-catalog-state.js.map

package/dist/src/launcher/model-catalog/managed-catalog-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-catalog-state.js","sourceRoot":"","sources":["../../../../src/launcher/model-catalog/managed-catalog-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACvF,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAErD,oGAAoG;AACpG,MAAM,OAAO,mBAAmB;IAKX;IACA;IACA;IACA;IAPX,GAAG,CAAoB;IACvB,WAAW,GAAG,KAAK,CAAA;IAE3B,YACmB,IAAY,EACZ,OAAgC,EAChC,OAAe,EACf,OAA4B;QAH5B,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAAyB;QAChC,YAAO,GAAP,OAAO,CAAQ;QACf,YAAO,GAAP,OAAO,CAAqB;IAC5C,CAAC;IAEI,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;YAC/E,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;gBAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChF,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;gBAC1C,CAAC;gBACD,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YACtC,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;YACtB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAA;YACtD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,MAAe;QAC/B,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,KAAK,OAAO,EAAE,CAAC;YAC7E,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAA;YAC7D,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAA;QACrG,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,EAAE,WAAW,CAAC,CAAA;QAChG,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAA;QACvE,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QAChC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;QACd,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;QACvB,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACvC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;YACpC,IACE,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;mBACvF,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAChC,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAA;YAC5B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACjC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAA;gBACrF,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;gBAC1C,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAA;gBACpD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;gBAClG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;gBACpB,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;YAC3C,CAAC;oBAAS,CAAC;gBACT,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACb,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;QAC1C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAc,EAAE,UAAyB;QACnD,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QACnC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;QACzF,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACpB,IAAI,CAAC,UAAU,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,YAAY,CAAC,CAAA;QACvD,IAAI,MAAM,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;QAC/E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,GAAW,CAAA;QACf,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;YAC3E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;YACxC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YAC1E,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,CAAC;gBACV,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACzB,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC3C,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;aAC9B,CAAC,CAAA;QACJ,CAAC;gBAAS,CAAC;YACT,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACb,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,UAAU,UAAU,EAAE,EAAE,CAAC,CAAA;QAC9E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;YACjD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAC3B,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YACrB,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;YACtB,CAAC;YACD,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;YACpB,IAAI,CAAC,UAAU,EAAE;gBAAE,MAAM,IAAI,YAAY,CAAC,YAAY,CAAC,CAAA;YACvD,IAAI,MAAM,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;YAC/E,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;YAClC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;QAChB,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtC,CAAC;IACH,CAAC;CACF"}

package/dist/src/launcher/model-catalog/managed-provider-api.d.ts

@@ -0,0 +1,14 @@
+import type { ManagedProviderOwner } from './managed-provider-owner.js';
+/** Bind only to trusted Host management. Never mount on plugin RPC or a shared renderer global. */
+export declare function createManagedProviderApi(input: {
+    readonly owner: ManagedProviderOwner;
+    readonly generation: string;
+    readonly authorized: () => boolean;
+    readonly capture: (signal: AbortSignal) => Promise<string>;
+}): Readonly<{
+    read(request: unknown): readonly import("./managed-provider-schema.js").ManagedProviderView[];
+    save(request: unknown): Promise<import("./managed-provider-schema.js").ManagedProviderView>;
+    remove(request: unknown): Promise<void>;
+    dispose(): void;
+}>;
+//# sourceMappingURL=managed-provider-api.d.ts.map

package/dist/src/launcher/model-catalog/managed-provider-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-provider-api.d.ts","sourceRoot":"","sources":["../../../../src/launcher/model-catalog/managed-provider-api.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAEvE,mGAAmG;AACnG,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAA;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,OAAO,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CAC3D;kBASiB,OAAO;kBAKD,OAAO;oBA2BL,OAAO;;GAYhC"}

package/dist/src/launcher/model-catalog/managed-provider-api.js

@@ -0,0 +1,53 @@
+import { CatalogError, object } from './contracts.js';
+/** Bind only to trusted Host management. Never mount on plugin RPC or a shared renderer global. */
+export function createManagedProviderApi(input) {
+    let disposed = false;
+    const active = () => !disposed && input.authorized();
+    const check = (request) => {
+        const value = object(request);
+        if (!active() || !value || value.generation !== input.generation)
+            throw new CatalogError('permission');
+        return value;
+    };
+    return Object.freeze({
+        read(request) {
+            const value = check(request);
+            if (Object.keys(value).length !== 1)
+                throw new CatalogError('source-invalid');
+            return input.owner.snapshot();
+        },
+        async save(request) {
+            const value = check(request);
+            if (Object.keys(value).some(key => !['generation', 'id', 'expectedRevision', 'settings', 'replaceCredential'].includes(key))
+                || typeof value.replaceCredential !== 'boolean'
+                || value.id !== undefined && typeof value.id !== 'string'
+                || value.expectedRevision !== undefined && typeof value.expectedRevision !== 'string')
+                throw new CatalogError('source-invalid');
+            return input.owner.save({
+                ...(typeof value.id === 'string' ? { id: value.id } : {}),
+                ...(typeof value.expectedRevision === 'string' ? { expectedRevision: value.expectedRevision } : {}),
+                settings: value.settings,
+            }, value.replaceCredential
+                ? async (signal) => {
+                    if (!active())
+                        throw new CatalogError('permission');
+                    const secret = await input.capture(signal);
+                    if (!active())
+                        throw new CatalogError('permission');
+                    return secret;
+                }
+                : undefined, active);
+        },
+        async remove(request) {
+            const value = check(request);
+            if (Object.keys(value).some(key => !['generation', 'id', 'expectedRevision'].includes(key))
+                || typeof value.id !== 'string' || typeof value.expectedRevision !== 'string')
+                throw new CatalogError('source-invalid');
+            await input.owner.remove(value.id, value.expectedRevision, active);
+        },
+        dispose() {
+            disposed = true;
+        },
+    });
+}
+//# sourceMappingURL=managed-provider-api.js.map

package/dist/src/launcher/model-catalog/managed-provider-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-provider-api.js","sourceRoot":"","sources":["../../../../src/launcher/model-catalog/managed-provider-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAGrD,mGAAmG;AACnG,MAAM,UAAU,wBAAwB,CAAC,KAKxC;IACC,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,UAAU,EAAE,CAAA;IACpD,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAE,EAAE;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;QAC7B,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;YAAE,MAAM,IAAI,YAAY,CAAC,YAAY,CAAC,CAAA;QACtG,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,CAAC,OAAgB;YACnB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;YAC5B,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;YAC7E,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAA;QAC/B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAgB;YACzB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;YAC5B,IACE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC5B,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CACzF;mBACE,OAAO,KAAK,CAAC,iBAAiB,KAAK,SAAS;mBAC5C,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;mBACtD,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;gBACrF,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;YAC1C,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CACrB;gBACE,GAAG,CAAC,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,GAAG,CAAC,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnG,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,EACD,KAAK,CAAC,iBAAiB;gBACrB,CAAC,CAAC,KAAK,EAAC,MAAM,EAAC,EAAE;oBACf,IAAI,CAAC,MAAM,EAAE;wBAAE,MAAM,IAAI,YAAY,CAAC,YAAY,CAAC,CAAA;oBACnD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;oBAC1C,IAAI,CAAC,MAAM,EAAE;wBAAE,MAAM,IAAI,YAAY,CAAC,YAAY,CAAC,CAAA;oBACnD,OAAO,MAAM,CAAA;gBACf,CAAC;gBACD,CAAC,CAAC,SAAS,EACb,MAAM,CACP,CAAA;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,OAAgB;YAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;YAC5B,IACE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;mBACpF,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;gBAC7E,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;YAC1C,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;QACpE,CAAC;QACD,OAAO;YACL,QAAQ,GAAG,IAAI,CAAA;QACjB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/src/launcher/model-catalog/managed-provider-capture.d.ts

@@ -0,0 +1,4 @@
+export declare const MANAGED_PROVIDER_CAPTURE_SCRIPT = "\nfunction run() {\n  ObjC.import('Cocoa');\n  var app = $.NSApplication.sharedApplication;\n  app.setActivationPolicy(1);\n  var alert = $.NSAlert.alloc.init;\n  alert.messageText = 'CordisX Provider credential';\n  alert.informativeText = 'Enter the API key for this CordisX-managed connection.';\n  alert.addButtonWithTitle('Cancel');\n  alert.addButtonWithTitle('Save');\n  var field = $.NSSecureTextField.alloc.initWithFrame($.NSMakeRect(0, 0, 420, 24));\n  alert.accessoryView = field;\n  alert.window.initialFirstResponder = field;\n  app.activateIgnoringOtherApps(true);\n  return Number(alert.runModal) === 1001 ? JSON.stringify({key:ObjC.unwrap(field.stringValue)}) : '{}';\n}";
+/** Static native prompt; the key travels only over this child's private stdout pipe. */
+export declare function captureManagedProviderCredential(signal: AbortSignal): Promise<string>;
+//# sourceMappingURL=managed-provider-capture.d.ts.map

package/dist/src/launcher/model-catalog/managed-provider-capture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-provider-capture.d.ts","sourceRoot":"","sources":["../../../../src/launcher/model-catalog/managed-provider-capture.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,+BAA+B,mrBAe1C,CAAA;AAEF,wFAAwF;AACxF,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CA6CrF"}

package/dist/src/launcher/model-catalog/managed-provider-capture.js

@@ -0,0 +1,71 @@
+import { spawn } from 'node:child_process';
+import { CatalogError } from './contracts.js';
+export const MANAGED_PROVIDER_CAPTURE_SCRIPT = `
+function run() {
+  ObjC.import('Cocoa');
+  var app = $.NSApplication.sharedApplication;
+  app.setActivationPolicy(1);
+  var alert = $.NSAlert.alloc.init;
+  alert.messageText = 'CordisX Provider credential';
+  alert.informativeText = 'Enter the API key for this CordisX-managed connection.';
+  alert.addButtonWithTitle('Cancel');
+  alert.addButtonWithTitle('Save');
+  var field = $.NSSecureTextField.alloc.initWithFrame($.NSMakeRect(0, 0, 420, 24));
+  alert.accessoryView = field;
+  alert.window.initialFirstResponder = field;
+  app.activateIgnoringOtherApps(true);
+  return Number(alert.runModal) === 1001 ? JSON.stringify({key:ObjC.unwrap(field.stringValue)}) : '{}';
+}`;
+/** Static native prompt; the key travels only over this child's private stdout pipe. */
+export function captureManagedProviderCredential(signal) {
+    if (process.platform !== 'darwin' || signal.aborted)
+        return Promise.reject(new CatalogError('cancelled'));
+    return new Promise((resolve, reject) => {
+        const child = spawn('/usr/bin/osascript', ['-l', 'JavaScript', '-e', MANAGED_PROVIDER_CAPTURE_SCRIPT], {
+            stdio: ['ignore', 'pipe', 'ignore'],
+        });
+        let output = '', failed = false;
+        let kill;
+        const abort = () => {
+            failed = true;
+            child.kill('SIGTERM');
+            kill ??= setTimeout(() => child.kill('SIGKILL'), 1_000);
+            kill.unref?.();
+        };
+        const deadline = setTimeout(abort, 60_000);
+        signal.addEventListener('abort', abort, { once: true });
+        const cleanup = () => {
+            clearTimeout(deadline);
+            clearTimeout(kill);
+            signal.removeEventListener('abort', abort);
+        };
+        child.stdout.on('data', data => {
+            output += data.toString();
+            if (output.length > 16_384)
+                abort();
+        });
+        child.once('error', () => {
+            cleanup();
+            reject(new CatalogError('credential-unavailable'));
+        });
+        child.once('close', code => {
+            cleanup();
+            try {
+                if (failed || signal.aborted || code !== 0)
+                    throw new Error('cancelled');
+                const value = JSON.parse(output);
+                output = '';
+                if (typeof value.key !== 'string' || !value.key || value.key.length > 8192 || /\s/u.test(value.key)) {
+                    throw new Error('cancelled');
+                }
+                resolve(value.key);
+            }
+            catch {
+                reject(new CatalogError('cancelled'));
+            }
+        });
+        if (signal.aborted)
+            abort();
+    });
+}
+//# sourceMappingURL=managed-provider-capture.js.map

package/dist/src/launcher/model-catalog/managed-provider-capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-provider-capture.js","sourceRoot":"","sources":["../../../../src/launcher/model-catalog/managed-provider-capture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAE7C,MAAM,CAAC,MAAM,+BAA+B,GAAG;;;;;;;;;;;;;;;EAe7C,CAAA;AAEF,wFAAwF;AACxF,MAAM,UAAU,gCAAgC,CAAC,MAAmB;IAClE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,WAAW,CAAC,CAAC,CAAA;IACzG,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,oBAAoB,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,+BAA+B,CAAC,EAAE;YACrG,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAA;QACF,IAAI,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,KAAK,CAAA;QAC/B,IAAI,IAA+C,CAAA;QACnD,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,MAAM,GAAG,IAAI,CAAA;YACb,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACrB,IAAI,KAAK,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAA;YACvD,IAAI,CAAC,KAAK,EAAE,EAAE,CAAA;QAChB,CAAC,CAAA;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QAC1C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,QAAQ,CAAC,CAAA;YACtB,YAAY,CAAC,IAAI,CAAC,CAAA;YAClB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC5C,CAAC,CAAA;QACD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;YAC7B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAA;YACzB,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM;gBAAE,KAAK,EAAE,CAAA;QACrC,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,OAAO,EAAE,CAAA;YACT,MAAM,CAAC,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAC,CAAA;QACpD,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;YACzB,OAAO,EAAE,CAAA;YACT,IAAI,CAAC;gBACH,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAA;gBACxE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;gBAChC,MAAM,GAAG,EAAE,CAAA;gBACX,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;oBACpG,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAA;gBAC9B,CAAC;gBACD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,YAAY,CAAC,WAAW,CAAC,CAAC,CAAA;YACvC,CAAC;QACH,CAAC,CAAC,CAAA;QACF,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,EAAE,CAAA;IAC7B,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/src/launcher/model-catalog/managed-provider-owner.d.ts

@@ -0,0 +1,38 @@
+import { type LauncherKeychainBackend } from '../secret-store.js';
+import { type DiscoveryConnection } from './contracts.js';
+import { type DiscoveryFetch } from './request-capability.js';
+import type { NativeManagedGatewayConnectionSession } from '../managed-service-native-connection.js';
+import { type ManagedProviderView } from './managed-provider-schema.js';
+interface OwnerOptions {
+    readonly homeDir: string;
+    readonly profileId: string;
+    readonly keychain?: LauncherKeychainBackend;
+    readonly fetcher?: DiscoveryFetch;
+    readonly platform?: NodeJS.Platform;
+}
+/** Host composition only. Never register this object as a plugin context service or renderer global. */
+export declare class ManagedProviderOwner {
+    #private;
+    private constructor();
+    static open(options: OwnerOptions): Promise<ManagedProviderOwner>;
+    snapshot(): readonly ManagedProviderView[];
+    subscribe(listener: () => void): () => void;
+    /** Host-only encrypted configuration/cache/overlay state; never mount these methods on RPC. */
+    readCatalogState(): Promise<unknown>;
+    writeCatalogState(value: unknown, authorized: () => boolean): Promise<void>;
+    validateCurrent(): Promise<void>;
+    /** Only the native credential broker consumes this private session. Not an adapter capability. */
+    nativeConnection(id: string, admittedResponses?: () => boolean): Promise<NativeManagedGatewayConnectionSession>;
+    /** capture must be a trusted Host-private prompt, not a renderer/plugin secret field. */
+    save(input: {
+        readonly id?: string;
+        readonly expectedRevision?: string;
+        readonly settings: unknown;
+    }, capture?: (signal: AbortSignal) => Promise<string>, authorized?: () => boolean): Promise<ManagedProviderView>;
+    remove(id: string, expectedRevision: string, authorized?: () => boolean): Promise<void>;
+    /** At most one fixed operation. No plugin-supplied adapter, URL, headers or credential lookup. */
+    connection(id: string): DiscoveryConnection | undefined;
+    close(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=managed-provider-owner.d.ts.map

package/dist/src/launcher/model-catalog/managed-provider-owner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-provider-owner.d.ts","sourceRoot":"","sources":["../../../../src/launcher/model-catalog/managed-provider-owner.ts"],"names":[],"mappings":"AAGA,OAAO,EAA8B,KAAK,uBAAuB,EAAE,MAAM,oBAAoB,CAAA;AAC7F,OAAO,EAAgB,KAAK,mBAAmB,EAAiC,MAAM,gBAAgB,CAAA;AAEtG,OAAO,EAAoC,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAE/F,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAA;AACpG,OAAO,EAGL,KAAK,mBAAmB,EAIzB,MAAM,8BAA8B,CAAA;AAOrC,UAAU,YAAY;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,uBAAuB,CAAA;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;CACpC;AAED,wGAAwG;AACxG,qBAAa,oBAAoB;;IAgB/B,OAAO;WAeM,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAqCvE,QAAQ,IAAI,SAAS,mBAAmB,EAAE;IAK1C,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAO3C,+FAA+F;IAC/F,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC;IAGpC,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3E,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAIhC,kGAAkG;IAC5F,gBAAgB,CACpB,EAAE,EAAE,MAAM,EACV,iBAAiB,GAAE,MAAM,OAAqB,GAC7C,OAAO,CAAC,qCAAqC,CAAC;IA2BjD,yFAAyF;IACzF,IAAI,CACF,KAAK,EAAE;QAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,EAC/F,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,EAClD,UAAU,GAAE,MAAM,OAAoB,GACrC,OAAO,CAAC,mBAAmB,CAAC;IA6D/B,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,UAAU,GAAE,MAAM,OAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAcnG,kGAAkG;IAClG,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAsIvD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAYvB"}