dsh-multi-router 0.5.5 → 0.5.6

package/lib/{chunk-PQETKUGT.js → chunk-XKDXPB5T.js}

@@ -2,8 +2,11 @@ import {
   Checkins,
   jsonCredential,
   qoderPluginDataDir,
-  supportsCheckin
-} from "./chunk-EGLF4CWD.js";
+  readLimitedText,
+  refreshWorkBuddyCheckinCredential,
+  supportsCheckin,
+  workbuddyToken
+} from "./chunk-U2MU2M5C.js";
 import {
   discoverLocalAccounts,
   importAccount,
@@ -33,16 +36,16 @@ import {
 } from "./chunk-TEZ2FMEO.js";
 
 // src/manager.mjs
-import { createHash, randomBytes as randomBytes2, timingSafeEqual } from "node:crypto";
+import { createHash, randomBytes as randomBytes3, timingSafeEqual } from "node:crypto";
 
 // package.json
-var version = "0.5.5";
+var version = "0.5.6";
 
 // src/manager.mjs
-import { readFile as readFile2, mkdir as mkdir2, mkdtemp as mkdtemp2, rm as rm3 } from "node:fs/promises";
+import { readFile as readFile3, mkdir as mkdir2, mkdtemp as mkdtemp2, rm as rm3 } from "node:fs/promises";
 import { watch } from "node:fs";
 import { dirname as dirname3, join as join4, relative as relative2, resolve } from "node:path";
-import { withFileLock as withFileLock2 } from "@deepseek-ai/dsh-atomic-write";
+import { withFileLock as withFileLock3 } from "@deepseek-ai/dsh-atomic-write";
 
 // upstream/qoder/src/status-paths.ts
 var QODER_STATUS_PATH = "/plugins/dsh-qoder-connect/status";
@@ -680,6 +683,141 @@ var PluginUpdates = class {
   }
 };
 
+// src/workbuddy-login.mjs
+import { randomBytes as randomBytes2 } from "node:crypto";
+import { readFile as readFile2 } from "node:fs/promises";
+import { withFileLock as withFileLock2 } from "@deepseek-ai/dsh-atomic-write";
+var WorkBuddyLogin = class {
+  constructor(file, { fetchImpl = (...args) => fetch(...args), now = Date.now } = {}) {
+    this.file = file;
+    this.fetchImpl = fetchImpl;
+    this.now = now;
+    this.abort = new AbortController();
+    this.abort.signal.addEventListener("abort", () => this.finish(), { once: true });
+  }
+  async reserve(field, ms) {
+    await withFileLock2(this.file, async () => {
+      let state = {};
+      try {
+        state = JSON.parse(await readFile2(this.file, "utf8"));
+      } catch (e) {
+        if (e.code !== "ENOENT") throw Error("\u767B\u5F55\u51B7\u5374\u8BB0\u5F55\u4E0D\u53EF\u8BFB\uFF0C\u8BF7\u68C0\u67E5\u672C\u673A\u6587\u4EF6");
+      }
+      if (state.pausedUntil > this.now() || state[field] > this.now()) throw Error("\u8BF7\u6C42\u51B7\u5374\u4E2D\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\uFF1B\u5E73\u53F0\u9650\u5236\u8BF7\u5728\u5B98\u65B9\u5BA2\u6237\u7AEF\u5904\u7406");
+      state[field] = this.now() + ms;
+      await writePrivateJson(this.file, state);
+    });
+  }
+  async pause() {
+    this.pending = void 0;
+    await withFileLock2(this.file, async () => {
+      const state = JSON.parse(await readFile2(this.file, "utf8"));
+      state.pausedUntil = this.now() + 15 * 6e4;
+      await writePrivateJson(this.file, state);
+    });
+  }
+  async post(path, body) {
+    let response;
+    try {
+      response = await this.fetchImpl(`https://www.workbuddy.cn/v2/plugin/login/${path}`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json", Accept: "application/json", Origin: "https://www.workbuddy.cn", Referer: "https://www.workbuddy.cn/" },
+        body: JSON.stringify(body),
+        signal: AbortSignal.any([this.abort.signal, AbortSignal.timeout(3e4)]),
+        redirect: "error"
+      });
+    } catch {
+      throw Error("\u767B\u5F55\u8BF7\u6C42\u672A\u5B8C\u6210\uFF0C\u8BF7\u7A0D\u540E\u624B\u52A8\u91CD\u8BD5\uFF1B\u4E0D\u4F1A\u81EA\u52A8\u91CD\u53D1\u77ED\u4FE1");
+    }
+    if ([403, 429].includes(response.status)) {
+      await this.pause();
+      throw Error("\u5E73\u53F0\u9650\u5236\u6216\u9700\u8981\u9A8C\u8BC1\uFF0C\u5DF2\u6682\u505C\u767B\u5F55\u8BF7\u6C42\uFF0C\u8BF7\u4F7F\u7528\u5B98\u65B9\u5BA2\u6237\u7AEF");
+    }
+    if (!response.ok) throw Error("\u5B98\u65B9\u767B\u5F55\u670D\u52A1\u6682\u4E0D\u53EF\u7528\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5");
+    let result;
+    try {
+      result = JSON.parse(await readLimitedText(response, 256 * 1024, "Login"));
+    } catch {
+      throw Error("\u767B\u5F55\u54CD\u5E94\u65E0\u6CD5\u8BC6\u522B\uFF0C\u8BF7\u4F7F\u7528\u5B98\u65B9\u5BA2\u6237\u7AEF");
+    }
+    if (result?.code !== 0) {
+      if ([403, 429].includes(result?.code) || /频繁|图形验证码|滑块|安全验证|captcha|risk|too many|frequent|验证失败次数/i.test(result?.msg || "")) {
+        await this.pause();
+        throw Error("\u5E73\u53F0\u9650\u5236\u6216\u9700\u8981\u9A8C\u8BC1\uFF0C\u5DF2\u6682\u505C\u767B\u5F55\u8BF7\u6C42\uFF0C\u8BF7\u4F7F\u7528\u5B98\u65B9\u5BA2\u6237\u7AEF");
+      }
+      throw Error(path === "token" ? "\u767B\u5F55\u672A\u6210\u529F\uFF0C\u8BF7\u68C0\u67E5\u9A8C\u8BC1\u7801\u662F\u5426\u6B63\u786E\u3001\u8FC7\u671F\uFF1B\u4EC5\u652F\u6301\u5DF2\u6709\u8D26\u53F7" : "\u77ED\u4FE1\u672A\u53D1\u9001\u6210\u529F\uFF0C\u8BF7\u786E\u8BA4\u5DF2\u6709\u8D26\u53F7\u53CA\u624B\u673A\u53F7\uFF0C\u6216\u4F7F\u7528\u5B98\u65B9\u5BA2\u6237\u7AEF");
+    }
+    return result.data ?? {};
+  }
+  async send(phone) {
+    if (typeof phone !== "string" || !/^1[3-9]\d{9}$/.test(phone)) throw Error("\u8BF7\u8F93\u5165 11 \u4F4D\u4E2D\u56FD\u5927\u9646\u624B\u673A\u53F7");
+    if (this.flight) throw Error("\u767B\u5F55\u8BF7\u6C42\u6B63\u5728\u5904\u7406\u4E2D");
+    this.flight = (async () => {
+      await this.reserve("smsAt", 6e4);
+      this.pending = void 0;
+      const data = await this.post("send-sms", { phone });
+      const expires = Math.min(300, Math.max(1, Number(data.expires_in) || 300)) * 1e3;
+      this.pending = { phone, challenge: randomBytes2(24).toString("hex"), expiresAt: this.now() + expires, attempts: 0 };
+      clearTimeout(this.expiryTimer);
+      this.expiryTimer = setTimeout(() => this.finish(), expires);
+      this.expiryTimer.unref();
+      return { challenge: this.pending.challenge, expiresAt: this.pending.expiresAt, resendAt: this.now() + 6e4 };
+    })();
+    try {
+      return await this.flight;
+    } finally {
+      this.flight = void 0;
+    }
+  }
+  async complete(challenge, code, verify = true) {
+    if (typeof challenge !== "string" || !this.pending || challenge !== this.pending.challenge || this.pending.expiresAt <= this.now()) throw Error("\u672C\u6B21\u767B\u5F55\u5DF2\u8FC7\u671F\u6216\u63D2\u4EF6\u5DF2\u91CD\u542F\uFF0C\u8BF7\u91CD\u65B0\u83B7\u53D6\u9A8C\u8BC1\u7801");
+    if (this.flight) throw Error("\u767B\u5F55\u8BF7\u6C42\u6B63\u5728\u5904\u7406\u4E2D");
+    if (this.pending.document) return this.pending;
+    if (typeof code !== "string" || !/^\d{4,8}$/.test(code) || typeof verify !== "boolean") throw Error("\u8BF7\u8F93\u5165\u6536\u5230\u7684\u77ED\u4FE1\u9A8C\u8BC1\u7801");
+    if (this.pending.attempts >= 5) throw Error("\u672C\u6B21\u9A8C\u8BC1\u7801\u5C1D\u8BD5\u6B21\u6570\u5DF2\u8FBE\u4E0A\u9650\uFF0C\u8BF7\u7A0D\u540E\u91CD\u65B0\u83B7\u53D6");
+    this.flight = (async () => {
+      await this.reserve("loginAt", 5e3);
+      const pending = this.pending;
+      pending.attempts++;
+      const data = await this.post("token", { login_method: "phone", phone: pending.phone, sms_code: code });
+      const accessToken = data.accessToken || data.access_token, refreshToken = data.refreshToken || data.refresh_token;
+      let token;
+      try {
+        token = workbuddyToken(accessToken);
+      } catch {
+        throw Error("\u767B\u5F55\u8FD4\u56DE\u7684\u4EE4\u724C\u4E0D\u5C5E\u4E8E WorkBuddy \u4E2D\u56FD\u7248\uFF0C\u8BF7\u4F7F\u7528\u5B98\u65B9\u5BA2\u6237\u7AEF");
+      }
+      if (typeof refreshToken !== "string" || !refreshToken || !Number.isFinite(token.exp) || token.exp * 1e3 <= this.now()) throw Error("\u767B\u5F55\u54CD\u5E94\u7F3A\u5C11\u6709\u6548\u51ED\u8BC1\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55");
+      let credential = { accessToken, refreshToken, uid: token.sub, expiresAtMs: token.exp * 1e3, domain: "www.workbuddy.cn", source: "dsh" };
+      if (verify) {
+        try {
+          const rotated = await refreshWorkBuddyCheckinCredential(credential, { fetchImpl: this.fetchImpl, signal: AbortSignal.any([this.abort.signal, AbortSignal.timeout(3e4)]) });
+          credential = {
+            ...credential,
+            accessToken: rotated.accessToken,
+            refreshToken: rotated.refreshToken || credential.refreshToken,
+            expiresAtMs: Date.now() + rotated.expiresInSec * 1e3
+          };
+        } catch {
+          pending.warning = "\u767B\u5F55\u51ED\u8BC1\u5DF2\u4FDD\u5B58\uFF0C\u4F46\u5237\u65B0\u4EE4\u724C\u9A8C\u8BC1\u672A\u901A\u8FC7\uFF1B\u8BF7\u7A0D\u540E\u5728\u8D26\u53F7\u8BE6\u60C5\u68C0\u67E5\u767B\u5F55\u6709\u6548\u671F\u3002";
+        }
+      }
+      delete pending.phone;
+      pending.document = { version: 1, credential };
+      return pending;
+    })();
+    try {
+      return await this.flight;
+    } finally {
+      this.flight = void 0;
+    }
+  }
+  finish() {
+    clearTimeout(this.expiryTimer);
+    this.pending = void 0;
+  }
+};
+
 // src/manager.mjs
 var MANAGEMENT_PATH = "/.well-known/dsh-multi-router";
 var revisionOf = (raw) => createHash("sha256").update(JSON.stringify(raw)).digest("hex");
@@ -733,6 +871,7 @@ var Manager = class {
     this.telemetry = new Telemetry(join4(dirname3(file), "usage.json"));
     this.plugins = new PluginUpdates({ ...pluginAccess, stateFile: join4(dirname3(file), "plugin-updates.json") });
     this.checkins = new Checkins(join4(dirname3(file), "checkins.json"), this);
+    this.workbuddyLogin = new WorkBuddyLogin(join4(dirname3(file), "workbuddy-login.json"), { fetchImpl: pluginAccess.fetchImpl });
     this.setupFile = join4(dirname3(file), "initial-setup.json");
     router.telemetry = this.telemetry;
     router.monitor = (a) => this.monitorAccount(a);
@@ -740,9 +879,9 @@ var Manager = class {
     router.freeModels = (account) => this.freeModels(account);
   }
   async load() {
-    this.raw = JSON.parse(await readFile2(this.file, "utf8"));
+    this.raw = JSON.parse(await readFile3(this.file, "utf8"));
     try {
-      this.setup = JSON.parse(await readFile2(this.setupFile, "utf8"));
+      this.setup = JSON.parse(await readFile3(this.setupFile, "utf8"));
     } catch {
       this.setup = void 0;
     }
@@ -753,7 +892,7 @@ var Manager = class {
       this.plugins.rows = [];
     });
     try {
-      const saved = JSON.parse(await readFile2(this.catalogFile, "utf8"));
+      const saved = JSON.parse(await readFile3(this.catalogFile, "utf8"));
       for (const account of this.config.accounts) {
         const item = saved[account.id];
         if (item?.credentialFile === account.credentialFile && Array.isArray(item.models)) {
@@ -793,9 +932,9 @@ var Manager = class {
         ...discovered.status.map((s) => ({ ...s, checkedAt: Date.now() }))
       ];
       if (this.closed || !discovered.accounts.length) return;
-      await withFileLock2(this.file, async () => {
+      await withFileLock3(this.file, async () => {
         if (this.closed) return;
-        let raw = JSON.parse(await readFile2(this.file, "utf8"));
+        let raw = JSON.parse(await readFile3(this.file, "utf8"));
         let changed = false;
         const saved = /* @__PURE__ */ new Map();
         for (const item of discovered.accounts) {
@@ -879,9 +1018,9 @@ var Manager = class {
   }
   async finishInitialSetup() {
     if (this.setup?.completedAt) return;
-    await withFileLock2(this.setupFile, async () => {
+    await withFileLock3(this.setupFile, async () => {
       try {
-        this.setup = JSON.parse(await readFile2(this.setupFile, "utf8"));
+        this.setup = JSON.parse(await readFile3(this.setupFile, "utf8"));
       } catch {
       }
       if (this.setup?.completedAt) return;
@@ -1063,7 +1202,7 @@ var Manager = class {
         if (this.closed || !this.config.accounts.some((a) => a.id === account.id && a.credentialFile === account.credentialFile)) return;
         this.catalogs.set(account.id, { credentialFile: account.credentialFile, fetchedAt: Date.now(), pricingVersion: 1, models });
         this.catalogErrors.delete(account.id);
-        await withFileLock2(this.catalogFile, () => writePrivateJson(this.catalogFile, Object.fromEntries(this.catalogs)));
+        await withFileLock3(this.catalogFile, () => writePrivateJson(this.catalogFile, Object.fromEntries(this.catalogs)));
       } catch (error) {
         if (this.closed || !this.config.accounts.some((a) => a.id === account.id)) return;
         this.catalogErrors.set(account.id, { status: Number(error.status ?? error.failure?.status) || 502, code: "catalog_fetch_failed", at: Date.now() });
@@ -1116,6 +1255,63 @@ var Manager = class {
   }
   async action(input) {
     if (!input || typeof input !== "object" || Array.isArray(input)) bad("\u8BF7\u6C42\u683C\u5F0F\u65E0\u6548");
+    if (input.action === "workbuddy.sms") {
+      try {
+        const workbuddyLogin = await this.workbuddyLogin.send(input.phone);
+        return { ...this.state(), workbuddyLogin };
+      } catch (e) {
+        bad(e.message);
+      }
+    }
+    if (input.action === "workbuddy.login") {
+      if (input.revision !== revisionOf(JSON.parse(await readFile3(this.file, "utf8")))) throw new ManagementError(409, "\u914D\u7F6E\u5DF2\u66F4\u65B0\uFF0C\u8BF7\u5237\u65B0\u540E\u91CD\u65B0\u63D0\u4EA4\u767B\u5F55");
+      let login;
+      try {
+        login = await this.workbuddyLogin.complete(input.challenge, input.code, input.verify ?? true);
+      } catch (e) {
+        bad(e.message);
+      }
+      let existing;
+      for (const a of this.config.accounts.filter((a2) => a2.provider === "workbuddy")) {
+        try {
+          if ((await jsonCredential(a.credentialFile)).credential.uid === login.document.credential.uid) {
+            existing = a;
+            break;
+          }
+        } catch {
+        }
+      }
+      if (input.id && input.id !== existing?.id) bad("\u767B\u5F55\u8EAB\u4EFD\u4E0E\u6B63\u5728\u7F16\u8F91\u7684\u8D26\u53F7\u4E0D\u540C\uFF0C\u8BF7\u4ECE\u6DFB\u52A0\u8D26\u53F7\u5165\u53E3\u4FDD\u5B58");
+      const state = await this.action({
+        action: existing ? "account.credentials" : "account.add",
+        revision: input.revision,
+        id: existing?.id ?? `workbuddy_${randomBytes3(8).toString("hex")}`,
+        provider: "workbuddy",
+        name: input.name,
+        document: login.document
+      });
+      this.workbuddyLogin.finish();
+      return { ...state, loginResult: { warning: login.warning, saved: true } };
+    }
+    if (input.action === "checkins.verify") {
+      const account = this.config.accounts.find((a) => a.id === input.id && a.provider === "workbuddy");
+      if (!account) bad("\u8BF7\u9009\u62E9 WorkBuddy \u4E2D\u56FD\u7248\u8D26\u53F7");
+      if (this.checkins.flight || this.checkins.failed) bad("\u8BF7\u7B49\u5F85\u7B7E\u5230\u5B8C\u6210\uFF0C\u6216\u5148\u4FEE\u590D\u7B7E\u5230\u8BB0\u5F55");
+      try {
+        await this.workbuddyLogin.reserve("verifyAt", 3e4);
+      } catch (e) {
+        bad(e.message);
+      }
+      try {
+        const client = await this.router.client(account);
+        await client.checkin.validate(AbortSignal.timeout(3e4));
+        await this.checkins.credentialsUpdated(account.id);
+        await this.readLogin(account);
+      } catch {
+        bad("\u767B\u5F55\u9A8C\u8BC1\u672A\u901A\u8FC7\uFF1A\u8BF7\u5728\u8D26\u53F7\u4E0E\u767B\u5F55\u4E2D\u66F4\u65B0\u51ED\u8BC1\uFF1B\u4E0D\u4F1A\u81EA\u52A8\u91CD\u8BD5\u6216\u9886\u53D6");
+      }
+      return this.state();
+    }
     if (input.action === "checkins.run") {
       try {
         this.checkins.start(input.ids);
@@ -1141,14 +1337,14 @@ var Manager = class {
       return this.state();
     }
     if (input.action === "setup.dismiss") {
-      await withFileLock2(this.setupFile, async () => {
+      await withFileLock3(this.setupFile, async () => {
         this.setup = { ...this.setup, completedAt: this.setup?.completedAt ?? Date.now(), dismissed: true };
         await writePrivateJson(this.setupFile, this.setup);
       });
       return this.state();
     }
     if (input.action === "account.export") {
-      if (input.revision !== revisionOf(JSON.parse(await readFile2(this.file, "utf8")))) throw new ManagementError(409, "\u914D\u7F6E\u5DF2\u66F4\u65B0\uFF0C\u8BF7\u5237\u65B0\u540E\u63D0\u53D6\u51ED\u8BC1");
+      if (input.revision !== revisionOf(JSON.parse(await readFile3(this.file, "utf8")))) throw new ManagementError(409, "\u914D\u7F6E\u5DF2\u66F4\u65B0\uFF0C\u8BF7\u5237\u65B0\u540E\u63D0\u53D6\u51ED\u8BC1");
       const account = this.config.accounts.find((a) => a.id === input.id);
       if (!account) bad("\u8D26\u53F7\u4E0D\u5B58\u5728");
       let credential;
@@ -1170,7 +1366,7 @@ var Manager = class {
       } };
     }
     if (input.action === "config.export") {
-      if (input.revision !== revisionOf(JSON.parse(await readFile2(this.file, "utf8")))) throw new ManagementError(409, "\u914D\u7F6E\u5DF2\u66F4\u65B0\uFF0C\u8BF7\u5237\u65B0\u540E\u5BFC\u51FA");
+      if (input.revision !== revisionOf(JSON.parse(await readFile3(this.file, "utf8")))) throw new ManagementError(409, "\u914D\u7F6E\u5DF2\u66F4\u65B0\uFF0C\u8BF7\u5237\u65B0\u540E\u5BFC\u51FA");
       try {
         return { ...this.state(), exported: { filename: `dsh-multi-router-${input.includeCredentials ? "encrypted" : "settings"}-${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}.json`, document: await exportConfiguration(this, input) } };
       } catch (e) {
@@ -1206,7 +1402,7 @@ var Manager = class {
     }
     if (input.action === "account.capture") {
       if (!PROVIDERS.includes(input.provider)) bad("\u672A\u77E5\u4F9B\u5E94\u5546");
-      input = { ...input, action: "account.add", id: `${input.provider.replace("-", "_")}_${randomBytes2(4).toString("hex")}`, capture: true };
+      input = { ...input, action: "account.add", id: `${input.provider.replace("-", "_")}_${randomBytes3(4).toString("hex")}`, capture: true };
     }
     if (input.action === "refresh") {
       if (input.provider && !PROVIDERS.includes(input.provider)) bad("\u672A\u77E5\u4F9B\u5E94\u5546");
@@ -1217,8 +1413,8 @@ var Manager = class {
       await this.checkFreeModels(true);
       return this.state();
     }
-    return withFileLock2(this.file, async () => {
-      let raw = JSON.parse(await readFile2(this.file, "utf8"));
+    return withFileLock3(this.file, async () => {
+      let raw = JSON.parse(await readFile3(this.file, "utf8"));
       if (input.revision !== revisionOf(raw)) throw new ManagementError(409, "\u914D\u7F6E\u5DF2\u66F4\u65B0\uFF0C\u8BF7\u5237\u65B0\u540E\u518D\u4FDD\u5B58");
       raw.routes ??= structuredClone(this.config.routes);
       let staging;
@@ -1228,7 +1424,7 @@ var Manager = class {
           try {
             const prepared = await prepareMigration(this, raw, await decodeConfiguration(input), input.mode);
             staging = prepared.staging;
-            await writePrivateJson(`${this.file}.before-import-${Date.now()}-${randomBytes2(3).toString("hex")}.bak`, raw);
+            await writePrivateJson(`${this.file}.before-import-${Date.now()}-${randomBytes3(3).toString("hex")}.bak`, raw);
             raw = prepared.raw;
           } catch (e) {
             bad(e.message);
@@ -1367,7 +1563,7 @@ var Manager = class {
           } };
         } else if (input.action === "route.save") {
           if (input.id === void 0 || input.id === "") {
-            input.id = input.previousId || `route_${randomBytes2(8).toString("hex")}`;
+            input.id = input.previousId || `route_${randomBytes3(8).toString("hex")}`;
           }
           if (!/^[a-zA-Z0-9_.-]{1,128}$/.test(input.id ?? "")) bad("\u8DEF\u7531 ID \u4EC5\u652F\u6301\u5B57\u6BCD\u3001\u6570\u5B57\u3001\u70B9\u3001\u4E0B\u5212\u7EBF\u548C\u77ED\u6A2A\u7EBF");
           if (input.previousId && !Object.hasOwn(raw.routes, input.previousId)) bad("\u539F\u8DEF\u7531\u4E0D\u5B58\u5728\uFF0C\u8BF7\u5237\u65B0\u9875\u9762");
@@ -1444,8 +1640,8 @@ var Manager = class {
       if (filename && String(filename) !== this.file.split(/[\\/]/).pop()) return;
       clearTimeout(timer);
       timer = setTimeout(() => {
-        void withFileLock2(this.file, async () => {
-          const raw = JSON.parse(await readFile2(this.file, "utf8"));
+        void withFileLock3(this.file, async () => {
+          const raw = JSON.parse(await readFile3(this.file, "utf8"));
           if (this.closed || revisionOf(raw) === this.revision) return;
           const config = validateConfig(raw, this.file);
           this.raw = raw;
@@ -1463,7 +1659,7 @@ var Manager = class {
   }
 };
 function managementHandler(manager) {
-  const key = randomBytes2(32).toString("base64url");
+  const key = randomBytes3(32).toString("base64url");
   const json = (res, status, value) => {
     res.writeHead(status, { "Content-Type": "application/json", "Cache-Control": "no-store", "X-Content-Type-Options": "nosniff" });
     res.end(JSON.stringify(value));
@@ -1512,4 +1708,4 @@ export {
   Manager,
   managementHandler
 };
-//# sourceMappingURL=chunk-PQETKUGT.js.map
+//# sourceMappingURL=chunk-XKDXPB5T.js.map