larkin 0.5.18 → 0.5.20

package/dist/dashboard/dashboard-lifecycle.mjs

@@ -3,6 +3,7 @@ import path from "node:path";
 import fs from "node:fs";
 import { acquireProcessLock, readProcessState, terminateOwnedProcess, waitForProcessExit, } from "../platform/process-state.mjs";
 import { processCommandToken } from "../app/internal-command.mjs";
+import { exactMode } from "../platform/secure-metadata.mjs";
 const PUBLISHED_RUNTIME_DIRS = ["dist", "assets"];
 const RUNTIME_EXTENSIONS = new Set([".cjs", ".mjs", ".js", ".css", ".json", ".node", ".svg", ".wasm"]);
 function publishedRuntimeFiles(root) {
@@ -30,6 +31,33 @@ function publishedRuntimeFiles(root) {
     return files.sort((a, b) => a.localeCompare(b, "en"));
 }
 /** Same semver can contain a different local build, so hash every published shell runtime byte. */
+/**
+ * The dashboard's CSRF capability, kept in an owned 0600 file so a page opened before a restart keeps working.
+ * A missing or unsafe file gets a new value; if it cannot be written, the value lasts for this process only.
+ */
+export function loadDashboardCapability(file) {
+    try {
+        const stat = fs.lstatSync(file);
+        const value = fs.readFileSync(file, "utf8").trim();
+        if (stat.isFile() && exactMode(stat, 0o600) && (typeof process.getuid !== "function" || stat.uid === process.getuid())
+            && /^[A-Za-z0-9_-]{43}$/.test(value))
+            return value;
+    }
+    catch { /* missing or unreadable: issue a new one */ }
+    const value = crypto.randomBytes(32).toString("base64url");
+    const temporary = `${file}.${process.pid}.tmp`;
+    try {
+        fs.writeFileSync(temporary, `${value}\n`, { mode: 0o600, flag: "wx" });
+        fs.renameSync(temporary, file);
+    }
+    catch {
+        try {
+            fs.unlinkSync(temporary);
+        }
+        catch { /* nothing was written */ }
+    }
+    return value;
+}
 export function dashboardBuildFingerprint(root) {
     const hash = crypto.createHash("sha256");
     for (const relative of publishedRuntimeFiles(root)) {