crewly 1.20.303 → 1.20.304

package/dist/backend/backend/src/services/team-move/team-move-cloud.client.js

@@ -0,0 +1,217 @@
+/**
+ * Cloud client of the team move: the REST calls of the shared contract
+ * (`<cloud>/api/cloud/team-moves`). The machine authenticates with the same
+ * account token it uses for every other Cloud call; Cloud answers an instance
+ * only about moves of its own account and machine.
+ *
+ * @module services/team-move/team-move-cloud.client
+ */
+import { createWriteStream } from 'node:fs';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { Readable } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+import { TEAM_MOVE_CONSTANTS } from '../../constants.js';
+const C = TEAM_MOVE_CONSTANTS;
+/** An error answer from Cloud (or no answer at all). */
+export class TeamMoveCloudError extends Error {
+    status;
+    code;
+    constructor(message, status, code) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.name = 'TeamMoveCloudError';
+    }
+    /** Worth trying again: the network, a server error, rate limiting. */
+    get retryable() {
+        return this.status === 0 || this.status === 429 || this.status >= 500;
+    }
+}
+/** Client for the team-move endpoints. */
+export class TeamMoveCloudClient {
+    options;
+    fetchImpl;
+    sleep;
+    retryBaseMs;
+    constructor(options) {
+        this.options = options;
+        this.fetchImpl = options.fetchImpl ?? ((input, init) => fetch(input, init));
+        this.sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+        this.retryBaseMs = options.retryBaseMs ?? C.RETRY_BASE_MS;
+    }
+    /** Whether the machine is signed in to Cloud. */
+    isConnected() {
+        return !!this.options.session.getToken() && !!this.options.session.getCloudUrl();
+    }
+    url(suffix) {
+        const base = this.options.session.getCloudUrl();
+        if (!base)
+            throw new TeamMoveCloudError('Not signed in to Crewly Cloud', 401, 'not_logged_in');
+        return `${base.replace(/\/$/, '')}${C.CLOUD_PATH}${suffix}`;
+    }
+    /**
+     * One authenticated request with a token refresh on 401 and retries on
+     * network and 5xx errors.
+     */
+    async request(method, suffix, init = {}) {
+        const retries = init.retries ?? C.CHUNK_RETRIES;
+        let refreshed = false;
+        let lastError = new TeamMoveCloudError('request failed', 0);
+        for (let attempt = 0; attempt <= retries; attempt++) {
+            if (attempt > 0)
+                await this.sleep(this.retryBaseMs * 2 ** (attempt - 1));
+            const token = this.options.session.getToken();
+            if (!token)
+                throw new TeamMoveCloudError('Not signed in to Crewly Cloud', 401, 'not_logged_in');
+            const instanceId = await this.options.getInstanceId();
+            let response;
+            try {
+                response = await this.fetchImpl(this.url(suffix), {
+                    method,
+                    headers: {
+                        Authorization: `Bearer ${token}`,
+                        'X-Crewly-Instance-Id': instanceId,
+                        ...(init.json !== undefined ? { 'Content-Type': 'application/json' } : {}),
+                        ...(init.headers ?? {}),
+                    },
+                    body: init.json !== undefined ? JSON.stringify(init.json) : init.body,
+                    signal: AbortSignal.timeout(C.REQUEST_TIMEOUT_MS),
+                });
+            }
+            catch (error) {
+                lastError = new TeamMoveCloudError(`Cloud unreachable: ${error instanceof Error ? error.message : String(error)}`, 0);
+                continue;
+            }
+            if (response.status === 401 && !refreshed && this.options.session.tryRefreshToken) {
+                refreshed = true;
+                if (await this.options.session.tryRefreshToken().catch(() => false)) {
+                    attempt--; // the retry with the fresh token is free
+                    continue;
+                }
+            }
+            if (response.ok || response.status === 206)
+                return response;
+            lastError = await this.errorFrom(response);
+            if (!lastError.retryable)
+                throw lastError;
+        }
+        throw lastError;
+    }
+    async errorFrom(response) {
+        let message = `Cloud request failed (HTTP ${response.status})`;
+        if (response.status === 503)
+            message = 'Crewly Cloud has no storage for team moves yet (storage_unavailable); try again later';
+        let code;
+        try {
+            const body = (await response.json());
+            if (typeof body['error'] === 'string' && response.status !== 503)
+                message = body['error'];
+            if (typeof body['code'] === 'string')
+                code = body['code'];
+        }
+        catch {
+            /* non-JSON body */
+        }
+        return new TeamMoveCloudError(message, response.status, code);
+    }
+    /** Cloud wraps answers in `{success, data}`; accept both shapes. */
+    async data(response) {
+        const body = (await response.json().catch(() => ({})));
+        return (body['data'] !== undefined ? body['data'] : body);
+    }
+    /** The caller's moves, newest first. An instance sees what it has to do (`role`/`action`). */
+    async list() {
+        const instanceId = encodeURIComponent(await this.options.getInstanceId());
+        const data = await this.data(await this.request('GET', `?instanceId=${instanceId}`));
+        const list = Array.isArray(data) ? data : data?.['moves'];
+        return Array.isArray(list) ? list : [];
+    }
+    /** One move. */
+    async get(moveId) {
+        return this.data(await this.request('GET', `/${encodeURIComponent(moveId)}`));
+    }
+    /** Ask Cloud to start a move (the owner path, or an instance acting for the owner). */
+    async create(body) {
+        const data = await this.data(await this.request('POST', '', { json: body, retries: 1, headers: { 'X-Crewly-Acting-For': 'owner', 'X-Crewly-Acting-For-Role': 'owner' } }));
+        const moveId = typeof data['moveId'] === 'string' ? data['moveId'] : null;
+        if (!moveId)
+            throw new TeamMoveCloudError('Cloud did not return a move id', 502);
+        return { moveId };
+    }
+    /** Target: publish the per-move public key and preflight. */
+    async postTargetKey(moveId, body) {
+        await this.request('POST', `/${encodeURIComponent(moveId)}/target-key`, { json: body });
+    }
+    /** Source: announce the ciphertext. */
+    async packageInit(moveId, body) {
+        const data = await this.data(await this.request('POST', `/${encodeURIComponent(moveId)}/package/init`, { json: body }));
+        return {
+            uploadId: typeof data['uploadId'] === 'string' ? data['uploadId'] : '',
+            received: Array.isArray(data['received']) ? data['received'] : [],
+        };
+    }
+    /** Source: upload one ciphertext chunk (0-based). */
+    async putChunk(moveId, n, chunk) {
+        await this.request('PUT', `/${encodeURIComponent(moveId)}/package/chunks/${n}`, {
+            body: new Uint8Array(chunk),
+            headers: { 'Content-Type': 'application/octet-stream' },
+        });
+    }
+    /** Source: all chunks are up. */
+    async packageComplete(moveId) {
+        await this.request('POST', `/${encodeURIComponent(moveId)}/package/complete`, { json: {} });
+    }
+    /**
+     * Target: download the ciphertext, resuming a partial file with `Range`.
+     *
+     * @param moveId - Move id
+     * @param dest - File to write (kept between attempts)
+     * @param totalSize - Expected size from the package metadata
+     * @returns Final size
+     */
+    async downloadPackage(moveId, dest, totalSize) {
+        await fs.mkdir(path.dirname(dest), { recursive: true });
+        for (let pass = 0; pass < C.CHUNK_RETRIES + 1; pass++) {
+            const have = (await fs.stat(dest).catch(() => null))?.size ?? 0;
+            if (have === totalSize)
+                return have;
+            if (have > totalSize)
+                await fs.rm(dest, { force: true });
+            const from = have > totalSize ? 0 : have;
+            let response;
+            try {
+                response = await this.request('GET', `/${encodeURIComponent(moveId)}/package`, { headers: from > 0 ? { Range: `bytes=${from}-` } : {} });
+            }
+            catch (error) {
+                if (pass >= C.CHUNK_RETRIES || !(error instanceof TeamMoveCloudError && error.retryable))
+                    throw error;
+                continue;
+            }
+            if (!response.body)
+                throw new TeamMoveCloudError('Cloud sent an empty package', 502);
+            // 200 to a Range request means "the whole thing": start over.
+            const append = response.status === 206 && from > 0;
+            try {
+                await pipeline(Readable.fromWeb(response.body), createWriteStream(dest, { flags: append ? 'a' : 'w', mode: 0o600 }));
+            }
+            catch {
+                // A dropped connection leaves a partial file; the next pass continues from it.
+                await this.sleep(this.retryBaseMs);
+            }
+        }
+        const final = (await fs.stat(dest).catch(() => null))?.size ?? 0;
+        if (final !== totalSize)
+            throw new TeamMoveCloudError(`Package download incomplete (${final} of ${totalSize} bytes)`, 0);
+        return final;
+    }
+    /** Report a status. */
+    async postStatus(moveId, body) {
+        await this.request('POST', `/${encodeURIComponent(moveId)}/status`, { json: body });
+    }
+    /** Owner: roll the move back. */
+    async rollback(moveId) {
+        await this.request('POST', `/${encodeURIComponent(moveId)}/rollback`, { json: {}, retries: 1 });
+    }
+}
+//# sourceMappingURL=team-move-cloud.client.js.map

package/dist/backend/backend/src/services/team-move/team-move-cloud.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-move-cloud.client.js","sourceRoot":"","sources":["../../../../../../backend/src/services/team-move/team-move-cloud.client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGzD,MAAM,CAAC,GAAG,mBAAmB,CAAC;AAU9B,wDAAwD;AACxD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGhC;IACA;IAHX,YACE,OAAe,EACN,MAAc,EACd,IAAa;QAEtB,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAS;QAGtB,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;IAED,sEAAsE;IACtE,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC;IACxE,CAAC;CACF;AAgBD,0CAA0C;AAC1C,MAAM,OAAO,mBAAmB;IAKD;IAJZ,SAAS,CAAe;IACxB,KAAK,CAAgC;IACrC,WAAW,CAAS;IAErC,YAA6B,OAAmC;QAAnC,YAAO,GAAP,OAAO,CAA4B;QAC9D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,aAAa,CAAC;IAC5D,CAAC;IAED,iDAAiD;IACjD,WAAW;QACT,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IACnF,CAAC;IAEO,GAAG,CAAC,MAAc;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;QAC/F,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,GAAG,MAAM,EAAE,CAAC;IAC9D,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,MAAc,EAAE,OAA2G,EAAE;QACjK,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,aAAa,CAAC;QAChD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,SAAS,GAAuB,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAChF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;YACpD,IAAI,OAAO,GAAG,CAAC;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;YAChG,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACtD,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;oBAChD,MAAM;oBACN,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,KAAK,EAAE;wBAChC,sBAAsB,EAAE,UAAU;wBAClC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC1E,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;qBACxB;oBACD,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;oBACrE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;iBAClD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,IAAI,kBAAkB,CAAC,sBAAsB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBACtH,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;gBAClF,SAAS,GAAG,IAAI,CAAC;gBACjB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;oBACpE,OAAO,EAAE,CAAC,CAAC,yCAAyC;oBACpD,SAAS;gBACX,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,QAAQ,CAAC;YAC5D,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,CAAC,SAAS,CAAC,SAAS;gBAAE,MAAM,SAAS,CAAC;QAC5C,CAAC;QACD,MAAM,SAAS,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,QAAkB;QACxC,IAAI,OAAO,GAAG,8BAA8B,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC/D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,GAAG,uFAAuF,CAAC;QAC/H,IAAI,IAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAS,CAAC;YAC7C,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1F,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ;gBAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;QACD,OAAO,IAAI,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IAED,oEAAoE;IAC5D,KAAK,CAAC,IAAI,CAAI,QAAkB;QACtC,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAS,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAM,CAAC;IACjE,CAAC;IAED,8FAA8F;IAC9F,KAAK,CAAC,IAAI;QACR,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAU,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,eAAe,UAAU,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAoB,EAAE,CAAC,OAAO,CAAC,CAAC;QAC3E,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAuB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,CAAC;IAED,gBAAgB;IAChB,KAAK,CAAC,GAAG,CAAC,MAAc;QACtB,OAAO,IAAI,CAAC,IAAI,CAAe,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,MAAM,CAAC,IAA4E;QACvF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,0BAA0B,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACjL,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1E,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,kBAAkB,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;QACjF,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,IAAyD;QAC3F,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,kBAAkB,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,uCAAuC;IACvC,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,IAAsF;QACtH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,kBAAkB,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9H,OAAO;YACL,QAAQ,EAAE,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;YACtE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,UAAU,CAAc,CAAC,CAAC,CAAC,EAAE;SAChF,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,CAAS,EAAE,KAAa;QACrD,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,kBAAkB,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,EAAE;YAC9E,IAAI,EAAE,IAAI,UAAU,CAAC,KAAK,CAAmC;YAC7D,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;SACxD,CAAC,CAAC;IACL,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,eAAe,CAAC,MAAc;QAClC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,kBAAkB,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,IAAY,EAAE,SAAiB;QACnE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,aAAa,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;YACtD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;YAChE,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACpC,IAAI,IAAI,GAAG,SAAS;gBAAE,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACzC,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,kBAAkB,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3I,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,IAAI,IAAI,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,IAAI,KAAK,CAAC,SAAS,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACtG,SAAS;YACX,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,IAAI;gBAAE,MAAM,IAAI,kBAAkB,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YACrF,8DAA8D;YAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAA8C,CAAC,EAAE,iBAAiB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACjK,CAAC;YAAC,MAAM,CAAC;gBACP,+EAA+E;gBAC/E,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;QACjE,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,kBAAkB,CAAC,gCAAgC,KAAK,OAAO,SAAS,SAAS,EAAE,CAAC,CAAC,CAAC;QACzH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,uBAAuB;IACvB,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,IAAwE;QACvG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,kBAAkB,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,QAAQ,CAAC,MAAc;QAC3B,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;CACF"}

package/dist/backend/backend/src/services/team-move/team-move-crypto.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Team move crypto — end-to-end encryption of the package stream.
+ *
+ * Only the two machines can read a package; Crewly Cloud stores ciphertext.
+ *
+ *  - The TARGET makes an ephemeral X25519 key pair per move. The public key
+ *    goes to Cloud, the private key never leaves the target's
+ *    `~/.crewly/team-moves/<moveId>/`.
+ *  - The SOURCE makes an ephemeral X25519 key pair per package, derives a
+ *    shared secret with the target's public key and runs it through
+ *    HKDF-SHA256 (random 32-byte salt, `info` binds the move id) to get a
+ *    one-time AES-256 key.
+ *  - The stream is cut into frames of `frameBytes` plaintext. Each frame is
+ *    sealed with AES-256-GCM under its own nonce (frame counter). The
+ *    authenticated data of every frame is the header (which carries the move
+ *    id and the ephemeral public key), the frame counter and a "final" flag,
+ *    so a frame cannot be moved, dropped, repeated or cut off at the end, and
+ *    a package cannot be replayed into another move, without failing.
+ *
+ * Wire format:
+ *
+ *   header : "CTMV" | version u8 | frameBytes u32 | ephemeralPublicKey[32]
+ *            | salt[32] | moveIdLength u8 | moveId
+ *   frame* : length u32 (ciphertext incl. 16-byte tag) | ciphertext
+ *
+ * The one-time key makes counter nonces safe: a (key, nonce) pair is never
+ * used twice. Both transforms are streaming — memory stays at one frame.
+ *
+ * @module services/team-move/team-move-crypto
+ */
+import { Transform } from 'node:stream';
+/** An X25519 key pair for the target of a move. */
+export interface TargetKeyPair {
+    /** Base64 of the raw 32-byte public key — what Cloud receives. */
+    publicKey: string;
+    /** Base64 of the PKCS8 DER private key — kept on the target only. */
+    privateKey: string;
+}
+/** Thrown when a package cannot be decrypted or has been altered. */
+export declare class TeamMoveCryptoError extends Error {
+    constructor(message: string);
+}
+/**
+ * Make the target's ephemeral key pair for one move.
+ *
+ * @returns Base64 public (raw) and private (PKCS8) keys
+ */
+export declare function generateTargetKeyPair(): TargetKeyPair;
+/**
+ * Whether a string is a base64 raw X25519 public key (as Cloud validates it).
+ *
+ * @param value - Candidate
+ * @returns True for 32 bytes of base64
+ */
+export declare function isPublicKeyString(value: unknown): value is string;
+/** Options of {@link createEncryptStream}. */
+export interface EncryptStreamOptions {
+    /** Base64 raw X25519 public key of the target. */
+    recipientPublicKey: string;
+    /** Move id, bound into the key and the header. */
+    moveId: string;
+    /** Plaintext bytes per frame (default {@link TEAM_MOVE_CONSTANTS.CRYPTO_FRAME_BYTES}). */
+    frameBytes?: number;
+}
+/**
+ * Transform that encrypts a byte stream for the target of a move.
+ *
+ * @param options - Recipient key, move id, frame size
+ * @returns A Transform (plaintext in, package out)
+ * @throws TeamMoveCryptoError for an invalid recipient key or move id
+ */
+export declare function createEncryptStream(options: EncryptStreamOptions): Transform;
+/** Options of {@link createDecryptStream}. */
+export interface DecryptStreamOptions {
+    /** Base64 PKCS8 private key of the target. */
+    privateKey: string;
+    /** The move id this package must belong to. */
+    moveId: string;
+}
+/**
+ * Transform that decrypts a package on the target. Fails with
+ * {@link TeamMoveCryptoError} on any altered, truncated, reordered or
+ * foreign-move package.
+ *
+ * @param options - Target private key and expected move id
+ * @returns A Transform (package in, plaintext out)
+ */
+export declare function createDecryptStream(options: DecryptStreamOptions): Transform;
+/** A pass-through Transform that hashes and counts what flows through it. */
+export interface HashTap extends Transform {
+    /** Finish and return the hex SHA-256 (call after the stream ended). */
+    digest(): string;
+    /** Bytes seen so far. */
+    readonly bytes: number;
+}
+/**
+ * Pass-through stream computing SHA-256 and size of its data.
+ *
+ * @returns The tap
+ */
+export declare function createHashTap(): HashTap;
+//# sourceMappingURL=team-move-crypto.d.ts.map

package/dist/backend/backend/src/services/team-move/team-move-crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-move-crypto.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/team-move/team-move-crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAcH,OAAO,EAAE,SAAS,EAA0B,MAAM,aAAa,CAAC;AAoBhE,mDAAmD;AACnD,MAAM,WAAW,aAAa;IAC5B,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qEAAqE;AACrE,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,aAAa,CAMrD;AAwBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEjE;AA2CD,8CAA8C;AAC9C,MAAM,WAAW,oBAAoB;IACnC,kDAAkD;IAClD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,SAAS,CAqE5E;AAED,8CAA8C;AAC9C,MAAM,WAAW,oBAAoB;IACnC,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,SAAS,CA4F5E;AAED,6EAA6E;AAC7E,MAAM,WAAW,OAAQ,SAAQ,SAAS;IACxC,uEAAuE;IACvE,MAAM,IAAI,MAAM,CAAC;IACjB,yBAAyB;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAavC"}