godot-cli 0.20.1 → 0.21.0

package/dist/utils/machine-credentials.js

@@ -1,182 +0,0 @@
-import * as fs from 'fs';
-import * as os from 'os';
-import * as path from 'path';
-import { execFileSync } from 'child_process';
-/**
- * The shared **machine credential store** at `~/.ai-game-dev/` — a single per-machine home for the
- * ai-game.dev account credential (`credentials.json`). Engines, CLIs, and the local server all read
- * this store, so **sign-in happens once per machine** (design `06-engine-plugins.md` / D12).
- *
- * This is the TypeScript peer of the shared C# `MachineCredentialStore`
- * (`MCP-Plugin-dotnet/McpPlugin/src/AgentConfig/MachineCredentialStore.cs`). The on-disk contract is
- * matched byte-for-byte so a credential written by `godot-cli login` is read by the engine plugin
- * (which auto-adopts it on editor boot) and vice-versa:
- *
- * - **POSIX** — `credentials.json` is written plaintext with `0600` permissions inside a `0700`
- *   directory.
- * - **Windows** — the file content is **DPAPI-encrypted** with the current user's key
- *   (`CryptProtectData`, `CurrentUser` scope, no entropy) so the on-disk bytes are never plaintext.
- *   Node has no built-in DPAPI, so we interop via PowerShell's `System.Security.Cryptography.
- *   ProtectedData`, which is a managed wrapper over the very same `CryptProtectData`/
- *   `CryptUnprotectData` calls the C# store uses — the blobs are cross-readable.
- *
- * Credentials are NEVER written to a project file / VCS. The optional `--project` per-project override
- * (project-local `.godot-mcp/credentials.json`, gitignored) is handled by `credentials.ts`, not here.
- */
-/** Directory name under the user home that holds the store (matches C# `MachineCredentialStore.DirectoryName`). */
-export const MACHINE_STORE_DIR_NAME = '.ai-game-dev';
-/** File name of the secret credential document. */
-export const MACHINE_CREDENTIALS_FILE_NAME = 'credentials.json';
-/**
- * Optional env override for the store directory (advanced use / tests). When set, this exact
- * directory is used verbatim; otherwise the store lives at `~/.ai-game-dev`. The DEFAULT matches the
- * C# store so cross-tool interop holds — the override never changes the production path.
- */
-export const MACHINE_STORE_DIR_ENV = 'AI_GAME_DEV_CREDENTIALS_DIR';
-// Schema version of the persisted document (matches C# `MachineCredentials.Version`).
-const SCHEMA_VERSION = 1;
-/** Absolute path of the store directory (honoring the env override). */
-export function getMachineStoreDir(baseDirOverride) {
-    if (baseDirOverride)
-        return baseDirOverride;
-    const envDir = process.env[MACHINE_STORE_DIR_ENV];
-    if (envDir && envDir.trim().length > 0)
-        return envDir;
-    return path.join(os.homedir(), MACHINE_STORE_DIR_NAME);
-}
-/** Absolute path of the secret credential file. */
-export function getMachineCredentialsPath(baseDirOverride) {
-    return path.join(getMachineStoreDir(baseDirOverride), MACHINE_CREDENTIALS_FILE_NAME);
-}
-/** True when a credential file exists in the store. */
-export function machineCredentialsExist(baseDirOverride) {
-    return fs.existsSync(getMachineCredentialsPath(baseDirOverride));
-}
-/**
- * Read and (on Windows) decrypt the stored credentials, or `null` when none are present / empty.
- * Throws on a decryption failure or malformed JSON (a corrupt or foreign-user credential); callers on
- * a hot path should use {@link readMachineAccessToken}, which swallows those.
- */
-export function readMachineCredentials(baseDirOverride) {
-    const credentialsPath = getMachineCredentialsPath(baseDirOverride);
-    if (!fs.existsSync(credentialsPath)) {
-        return null;
-    }
-    const raw = fs.readFileSync(credentialsPath);
-    if (raw.length === 0) {
-        return null;
-    }
-    const plaintext = isWindows() ? unprotectDpapi(raw) : raw;
-    const json = plaintext.toString('utf8');
-    if (json.trim().length === 0) {
-        return null;
-    }
-    const parsed = JSON.parse(json);
-    return parsed;
-}
-/**
- * Encrypt (Windows) / restrict (POSIX) and write `credentials` to the store, creating the store
- * directory with owner-only permissions if needed.
- */
-export function writeMachineCredentials(credentials, baseDirOverride) {
-    const dir = getMachineStoreDir(baseDirOverride);
-    const credentialsPath = path.join(dir, MACHINE_CREDENTIALS_FILE_NAME);
-    ensureStoreDirectory(dir);
-    const json = serialize(credentials);
-    const plaintext = Buffer.from(json, 'utf8');
-    const bytes = isWindows() ? protectDpapi(plaintext) : plaintext;
-    fs.writeFileSync(credentialsPath, bytes, { mode: 0o600 });
-    setPosixPermissions(credentialsPath, 0o600);
-}
-/**
- * Convenience reader for the persisted access token. Swallows a missing / malformed / undecryptable
- * file (returns undefined) so a broken store can never crash a command; `login` re-authenticates and
- * overwrites it.
- */
-export function readMachineAccessToken(baseDirOverride) {
-    let credentials;
-    try {
-        credentials = readMachineCredentials(baseDirOverride);
-    }
-    catch {
-        return undefined;
-    }
-    const token = credentials?.accessToken;
-    return typeof token === 'string' && token.trim().length > 0 ? token : undefined;
-}
-/** Delete the stored credentials (sign-out). No-op when none exist. */
-export function deleteMachineCredentials(baseDirOverride) {
-    const credentialsPath = getMachineCredentialsPath(baseDirOverride);
-    if (fs.existsSync(credentialsPath)) {
-        fs.rmSync(credentialsPath, { force: true });
-    }
-}
-// ── Serialization ────────────────────────────────────────────────────────────────────────────────
-function serialize(credentials) {
-    // Mirror the C# store's camelCase + WhenWritingNull: always emit `version`, omit null/undefined
-    // optional fields. Indentation is cosmetic (the reader is whitespace-insensitive).
-    const doc = { version: credentials.version ?? SCHEMA_VERSION };
-    if (credentials.accessToken != null)
-        doc.accessToken = credentials.accessToken;
-    if (credentials.refreshToken != null)
-        doc.refreshToken = credentials.refreshToken;
-    if (credentials.expiresAt != null)
-        doc.expiresAt = credentials.expiresAt;
-    if (credentials.serverTarget != null)
-        doc.serverTarget = credentials.serverTarget;
-    if (credentials.subject != null)
-        doc.subject = credentials.subject;
-    return JSON.stringify(doc, null, 2) + '\n';
-}
-// ── Filesystem permissions ───────────────────────────────────────────────────────────────────────
-function ensureStoreDirectory(dir) {
-    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
-    setPosixPermissions(dir, 0o700);
-}
-function setPosixPermissions(target, mode) {
-    if (isWindows())
-        return; // chmod is a no-op on Windows; DPAPI provides at-rest protection there.
-    try {
-        fs.chmodSync(target, mode);
-    }
-    catch {
-        // Best-effort only — never fail persistence over a chmod (e.g. exotic filesystems).
-    }
-}
-// ── Windows DPAPI via PowerShell (System.Security.Cryptography.ProtectedData) ───────────────────────
-// ProtectedData.Protect/Unprotect wrap CryptProtectData/CryptUnprotectData with the SAME CurrentUser
-// scope + null entropy the C# MachineCredentialStore uses, so the on-disk blobs are cross-readable.
-function isWindows() {
-    return process.platform === 'win32';
-}
-const DPAPI_PROTECT_SCRIPT = "Add-Type -AssemblyName System.Security; " +
-    "$in = [Console]::In.ReadToEnd().Trim(); " +
-    "$bytes = [Convert]::FromBase64String($in); " +
-    "$prot = [System.Security.Cryptography.ProtectedData]::Protect($bytes, $null, 'CurrentUser'); " +
-    "[Console]::Out.Write([Convert]::ToBase64String($prot))";
-const DPAPI_UNPROTECT_SCRIPT = "Add-Type -AssemblyName System.Security; " +
-    "$in = [Console]::In.ReadToEnd().Trim(); " +
-    "$bytes = [Convert]::FromBase64String($in); " +
-    "$plain = [System.Security.Cryptography.ProtectedData]::Unprotect($bytes, $null, 'CurrentUser'); " +
-    "[Console]::Out.Write([Convert]::ToBase64String($plain))";
-function protectDpapi(plaintext) {
-    return runDpapi(DPAPI_PROTECT_SCRIPT, plaintext, 'encrypt');
-}
-function unprotectDpapi(cipher) {
-    return runDpapi(DPAPI_UNPROTECT_SCRIPT, cipher, 'decrypt');
-}
-function runDpapi(script, input, op) {
-    try {
-        const out = execFileSync('powershell', ['-NoProfile', '-NonInteractive', '-Command', script], {
-            input: input.toString('base64'),
-            encoding: 'utf8',
-            windowsHide: true,
-        });
-        return Buffer.from(out.trim(), 'base64');
-    }
-    catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        throw new Error(`Failed to ${op} the machine credential store via DPAPI: ${message}`);
-    }
-}
-//# sourceMappingURL=machine-credentials.js.map

package/dist/utils/machine-credentials.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"machine-credentials.js","sourceRoot":"","sources":["../../src/utils/machine-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,mHAAmH;AACnH,MAAM,CAAC,MAAM,sBAAsB,GAAG,cAAc,CAAC;AAErD,mDAAmD;AACnD,MAAM,CAAC,MAAM,6BAA6B,GAAG,kBAAkB,CAAC;AAEhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,6BAA6B,CAAC;AAEnE,sFAAsF;AACtF,MAAM,cAAc,GAAG,CAAC,CAAC;AAqBzB,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAAC,eAAwB;IACzD,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAClD,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACtD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,sBAAsB,CAAC,CAAC;AACzD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,yBAAyB,CAAC,eAAwB;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,6BAA6B,CAAC,CAAC;AACvF,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,uBAAuB,CAAC,eAAwB;IAC9D,OAAO,EAAE,CAAC,UAAU,CAAC,yBAAyB,CAAC,eAAe,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,eAAwB;IAC7D,MAAM,eAAe,GAAG,yBAAyB,CAAC,eAAe,CAAC,CAAC;IACnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;IAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1D,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC;IACtD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAA+B,EAAE,eAAwB;IAC/F,MAAM,GAAG,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;IAChD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IAEtE,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAE1B,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEhE,EAAE,CAAC,aAAa,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,mBAAmB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,eAAwB;IAC7D,IAAI,WAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,WAAW,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,EAAE,WAAW,CAAC;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAClF,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,wBAAwB,CAAC,eAAwB;IAC/D,MAAM,eAAe,GAAG,yBAAyB,CAAC,eAAe,CAAC,CAAC;IACnE,IAAI,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACnC,EAAE,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,oGAAoG;AAEpG,SAAS,SAAS,CAAC,WAA+B;IAChD,gGAAgG;IAChG,mFAAmF;IACnF,MAAM,GAAG,GAA4B,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IACxF,IAAI,WAAW,CAAC,WAAW,IAAI,IAAI;QAAE,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;IAC/E,IAAI,WAAW,CAAC,YAAY,IAAI,IAAI;QAAE,GAAG,CAAC,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC;IAClF,IAAI,WAAW,CAAC,SAAS,IAAI,IAAI;QAAE,GAAG,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC;IACzE,IAAI,WAAW,CAAC,YAAY,IAAI,IAAI;QAAE,GAAG,CAAC,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC;IAClF,IAAI,WAAW,CAAC,OAAO,IAAI,IAAI;QAAE,GAAG,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;IACnE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED,oGAAoG;AAEpG,SAAS,oBAAoB,CAAC,GAAW;IACvC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc,EAAE,IAAY;IACvD,IAAI,SAAS,EAAE;QAAE,OAAO,CAAC,wEAAwE;IACjG,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,oFAAoF;IACtF,CAAC;AACH,CAAC;AAED,uGAAuG;AACvG,qGAAqG;AACrG,oGAAoG;AAEpG,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AACtC,CAAC;AAED,MAAM,oBAAoB,GACxB,0CAA0C;IAC1C,0CAA0C;IAC1C,6CAA6C;IAC7C,+FAA+F;IAC/F,wDAAwD,CAAC;AAE3D,MAAM,sBAAsB,GAC1B,0CAA0C;IAC1C,0CAA0C;IAC1C,6CAA6C;IAC7C,kGAAkG;IAClG,yDAAyD,CAAC;AAE5D,SAAS,YAAY,CAAC,SAAiB;IACrC,OAAO,QAAQ,CAAC,oBAAoB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,QAAQ,CAAC,sBAAsB,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,KAAa,EAAE,EAAyB;IACxE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE;YAC5F,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC/B,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,4CAA4C,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC"}