herdr-remote 0.2.17 → 0.2.19

package/src/pasted-files.js

@@ -1,176 +0,0 @@
-'use strict';
-
-/**
- * Secure file storage and validation for pasted clipboard images.
- *
- * Security requirements:
- * 1. Pinned directory: writes strictly to path.join(stateDir(), 'pasted') (directory mode 0o700).
- * 2. Unpredictable filename: generated via crypto.randomUUID(), never using client-provided strings.
- * 3. Whitelisted extension: derived exclusively from verified MIME type.
- * 4. Host-side size check: re-validated to enforce <= 3 MB independently of relay checks.
- * 5. Magic bytes sniffing: inspects raw binary headers (PNG, JPEG, GIF, WebP) to prevent file-type spoofing.
- * 6. File mode: files are created with mode 0o600.
- * 7. Automatic pruning: caps at 20 files and 50 MB (oldest deleted first), removes >24h stale files at startup.
- */
-
-const crypto = require('node:crypto');
-const fs = require('node:fs');
-const path = require('node:path');
-const { stateDir } = require('./config');
-const { ensureDir } = require('./state');
-
-const MAX_PASTE_BYTES = 3 * 1024 * 1024; // 3 MB raw payload
-const MAX_SAVED_FILES = 20;
-const MAX_TOTAL_BYTES = 50 * 1024 * 1024; // 50 MB
-const MAX_AGE_MS = 24 * 60 * 60 * 1000; // 24 hours
-
-const MIME_CONFIG = {
-  'image/png': {
-    ext: '.png',
-    check: (buf) =>
-      buf.length >= 8 &&
-      buf[0] === 0x89 &&
-      buf[1] === 0x50 &&
-      buf[2] === 0x4e &&
-      buf[3] === 0x47,
-  },
-  'image/jpeg': {
-    ext: '.jpg',
-    check: (buf) =>
-      buf.length >= 3 &&
-      buf[0] === 0xff &&
-      buf[1] === 0xd8 &&
-      buf[2] === 0xff,
-  },
-  'image/webp': {
-    ext: '.webp',
-    check: (buf) =>
-      buf.length >= 12 &&
-      buf[0] === 0x52 &&
-      buf[1] === 0x49 &&
-      buf[2] === 0x46 &&
-      buf[3] === 0x46 && // 'RIFF'
-      buf[8] === 0x57 &&
-      buf[9] === 0x45 &&
-      buf[10] === 0x42 &&
-      buf[11] === 0x50, // 'WEBP'
-  },
-  'image/gif': {
-    ext: '.gif',
-    check: (buf) =>
-      buf.length >= 6 &&
-      buf[0] === 0x47 &&
-      buf[1] === 0x49 &&
-      buf[2] === 0x46 &&
-      buf[3] === 0x38, // 'GIF8'
-  },
-};
-
-function getPastedDir() {
-  const dir = path.join(stateDir(), 'pasted');
-  ensureDir(dir);
-  return dir;
-}
-
-/**
- * Prunes the pasted directory:
- * - Removes files older than maxAgeMs (default 24 hours).
- * - Caps total file count (default 20) and total disk footprint (default 50 MB),
- *   deleting oldest files first.
- */
-function cleanPastedDir({
-  dir = getPastedDir(),
-  maxFiles = MAX_SAVED_FILES,
-  maxBytes = MAX_TOTAL_BYTES,
-  maxAgeMs = MAX_AGE_MS,
-  now = Date.now(),
-} = {}) {
-  let entries;
-  try {
-    entries = fs.readdirSync(dir, { withFileTypes: true });
-  } catch {
-    return;
-  }
-
-  const fileInfos = [];
-
-  for (const entry of entries) {
-    if (!entry.isFile()) continue;
-    const fullPath = path.join(dir, entry.name);
-    try {
-      const stat = fs.statSync(fullPath);
-      if (now - stat.mtimeMs > maxAgeMs) {
-        try { fs.unlinkSync(fullPath); } catch {}
-        continue;
-      }
-      fileInfos.push({ path: fullPath, size: stat.size, mtimeMs: stat.mtimeMs });
-    } catch {}
-  }
-
-  // Sort oldest first
-  fileInfos.sort((a, b) => a.mtimeMs - b.mtimeMs);
-
-  let totalSize = fileInfos.reduce((sum, f) => sum + f.size, 0);
-
-  while (fileInfos.length > maxFiles || totalSize > maxBytes) {
-    const oldest = fileInfos.shift();
-    if (!oldest) break;
-    try {
-      fs.unlinkSync(oldest.path);
-      totalSize -= oldest.size;
-    } catch {}
-  }
-}
-
-/**
- * Validates base64 data, checks payload limits, sniffs magic bytes against declared MIME,
- * writes to state storage with mode 0o600, and returns the absolute local path.
- */
-function savePastedFile({ mime, dataBase64, dir = getPastedDir() }) {
-  if (typeof mime !== 'string' || !Object.hasOwn(MIME_CONFIG, mime)) {
-    throw new Error(`unsupported MIME type: ${mime}`);
-  }
-  if (typeof dataBase64 !== 'string') {
-    throw new Error('missing or invalid dataBase64 payload');
-  }
-
-  const buf = Buffer.from(dataBase64, 'base64');
-  if (buf.length > MAX_PASTE_BYTES) {
-    throw new Error(`file size (${buf.length} bytes) exceeds maximum limit of 3 MB`);
-  }
-  if (buf.length === 0) {
-    throw new Error('file payload is empty');
-  }
-
-  const config = MIME_CONFIG[mime];
-  if (!config.check(buf)) {
-    throw new Error(`file magic bytes do not match declared MIME type ${mime}`);
-  }
-
-  // Prune before writing new file
-  cleanPastedDir({ dir });
-
-  const fileName = `${crypto.randomUUID()}${config.ext}`;
-  const filePath = path.join(dir, fileName);
-
-  fs.writeFileSync(filePath, buf, { mode: 0o600, flag: 'wx' });
-  try {
-    fs.chmodSync(filePath, 0o600);
-  } catch {}
-
-  // Prune again after writing to strictly observe count/size ceiling
-  cleanPastedDir({ dir });
-
-  return filePath;
-}
-
-module.exports = {
-  MAX_PASTE_BYTES,
-  MAX_SAVED_FILES,
-  MAX_TOTAL_BYTES,
-  MAX_AGE_MS,
-  MIME_CONFIG,
-  getPastedDir,
-  cleanPastedDir,
-  savePastedFile,
-};

package/src/pty-session.js

@@ -1,92 +0,0 @@
-'use strict';
-
-const os = require('node:os');
-const pty = require('node-pty');
-
-class PtySession {
-  static DEFAULT_COLS = 100;
-  static DEFAULT_ROWS = 30;
-  static MIN_DIMENSION = 2;
-  static MAX_DIMENSION = 500;
-
-  constructor({ command, args = [], cwd = os.homedir(), socketPath } = {}) {
-    if (typeof command !== 'string' || command.length === 0) throw new TypeError('command must be a non-empty string');
-    if (!Array.isArray(args) || !args.every((arg) => typeof arg === 'string')) throw new TypeError('args must be strings');
-    this.command = command;
-    this.args = args;
-    this.cwd = cwd;
-    this.socketPath = socketPath;
-    this.terminal = null;
-    this.startedAt = null;
-  }
-
-  static childEnv(socketPath) {
-    const env = { ...process.env };
-    for (const key of Object.keys(env)) {
-      if (key.startsWith('HERDR_')) delete env[key];
-    }
-    if (socketPath) env.HERDR_SOCKET_PATH = socketPath;
-    env.TERM = 'xterm-256color';
-    env.COLORTERM = 'truecolor';
-    return env;
-  }
-
-  static clampDimension(value, fallback) {
-    const numeric = Number(value);
-    if (!Number.isInteger(numeric)) return fallback;
-    return Math.min(PtySession.MAX_DIMENSION, Math.max(PtySession.MIN_DIMENSION, numeric));
-  }
-
-  start({ cols, rows, onData, onExit }) {
-    if (this.terminal) throw new Error('PTY session already started');
-    this.terminal = pty.spawn(this.command, this.args, {
-      name: 'xterm-256color',
-      cols: PtySession.clampDimension(cols, PtySession.DEFAULT_COLS),
-      rows: PtySession.clampDimension(rows, PtySession.DEFAULT_ROWS),
-      cwd: this.cwd,
-      env: PtySession.childEnv(this.socketPath),
-    });
-    this.startedAt = new Date().toISOString();
-    if (onData) this.terminal.onData(onData);
-    if (onExit) {
-      this.terminal.onExit((event) => {
-        this.terminal = null;
-        onExit(event);
-      });
-    }
-    return this;
-  }
-
-  write(data) {
-    if (!this.terminal) return;
-    this.terminal.write(Buffer.isBuffer(data) ? data.toString('utf8') : String(data));
-  }
-
-  resize(cols, rows) {
-    if (!this.terminal) return;
-    this.terminal.resize(
-      PtySession.clampDimension(cols, PtySession.DEFAULT_COLS),
-      PtySession.clampDimension(rows, PtySession.DEFAULT_ROWS),
-    );
-  }
-
-  info() {
-    return {
-      pid: this.terminal?.pid || null,
-      command: this.command,
-      cols: this.terminal?.cols || null,
-      rows: this.terminal?.rows || null,
-      cwd: this.cwd,
-      createdAt: this.startedAt,
-    };
-  }
-
-  kill() {
-    try {
-      this.terminal?.kill();
-    } catch {}
-    this.terminal = null;
-  }
-}
-
-module.exports = { PtySession };