lody 0.57.1-next.2 → 0.57.1-next.4

package/dist/chunks/index-CMmC_03V.js

@@ -0,0 +1,448 @@
+import { v as validateBucketId, a as validateSpaceUuid, b as validateStreamPrefix, c as validateMailboxSegment, __tla as __tla_0 } from "../index.js";
+import "fs";
+import "path";
+import "os";
+import "crypto";
+import "child_process";
+import "util";
+import "url";
+import "module";
+import "tty";
+import "worker_threads";
+import "events";
+import "node:diagnostics_channel";
+import "node:events";
+import "diagnostics_channel";
+import "node:net";
+import "async_hooks";
+import "node:child_process";
+import "node:fs";
+import "node:os";
+import "node:path";
+import "node:util";
+import "node:readline";
+import "node:worker_threads";
+import "node:http";
+import "node:https";
+import "node:stream";
+import "node:zlib";
+import "node:tls";
+import "node:process";
+import "node:tty";
+import "stream";
+import "buffer";
+import "zlib";
+import "string_decoder";
+import "http";
+import "https";
+import "node:crypto";
+import "net";
+import "tls";
+import { __tla as __tla_1 } from "./loro_wasm_bg-CZBelrAJ.js";
+import "assert";
+import "fs/promises";
+import "perf_hooks";
+import "node:module";
+import "node:fs/promises";
+import "node:stream/promises";
+import "node:string_decoder";
+import "node:assert";
+import "node:buffer";
+import "node:async_hooks";
+import { __tla as __tla_2 } from "../index.js";
+import { __tla as __tla_3 } from "./share-link-BxdX9Pcj.js";
+import { B, C, d, D, e, f, g, h, i, j, k, l, m, n, o, p, q, r, s, t, u, w, x, y, z, A, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, S, T, U, V, W, X, Y, Z, _, $, a0, a1, a2, a3, a4 } from "../index.js";
+import { R as R2, a, b, c, d as d2, e as e2, f as f2, g as g2, h as h2, i as i2, j as j2, k as k2, l as l2, m as m2, n as n2, o as o2, p as p2, q as q2, r as r2, s as s2, t as t2, u as u2, v, w as w2, x as x2, y as y2, z as z2 } from "./share-link-BxdX9Pcj.js";
+let createRolePermissions, isLocalScopedTokenClaimsV1, isScopedOperationAllowed;
+let __tla = Promise.all([
+  (() => {
+    try {
+      return __tla_0;
+    } catch {
+    }
+  })(),
+  (() => {
+    try {
+      return __tla_1;
+    } catch {
+    }
+  })(),
+  (() => {
+    try {
+      return __tla_2;
+    } catch {
+    }
+  })(),
+  (() => {
+    try {
+      return __tla_3;
+    } catch {
+    }
+  })()
+]).then(async () => {
+  const LOCAL_SCOPED_RESOURCES = /* @__PURE__ */ new Set([
+    "meta",
+    "sys-session",
+    "sys-bootstrap-secret",
+    "doc:*",
+    "rpc:g2h",
+    "rpc:h2g:own",
+    "rpc:h2g:*",
+    "ephemeral:*",
+    "blob:*",
+    "snapshot:*"
+  ]);
+  const LOCAL_SCOPED_OPERATIONS = /* @__PURE__ */ new Set([
+    "create",
+    "read",
+    "append",
+    "delete",
+    "head",
+    "upload",
+    "download",
+    "upload_snapshot",
+    "read_snapshot"
+  ]);
+  isLocalScopedTokenClaimsV1 = function(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+    const claims = value;
+    if (claims.v !== 1 || claims.iss !== "loro-code-collab-test-gateway" || claims.aud !== "loro-code-collab-streams" || !isLocalScopedRole(claims.role) || typeof claims.bucketId !== "string" || typeof claims.spaceUuid !== "string" || typeof claims.streamPrefix !== "string" || typeof claims.peerId !== "string" || typeof claims.exp !== "number" || !Number.isSafeInteger(claims.exp) || claims.exp < 0 || !Array.isArray(claims.permissions)) {
+      return false;
+    }
+    if (claims.inviteId !== void 0 && typeof claims.inviteId !== "string") {
+      return false;
+    }
+    try {
+      validateBucketId(claims.bucketId);
+      validateSpaceUuid(claims.spaceUuid);
+      validateStreamPrefix(claims.streamPrefix);
+      validateMailboxSegment(claims.peerId, "peerId");
+    } catch {
+      return false;
+    }
+    return claims.permissions.every((permission) => {
+      if (!permission || typeof permission !== "object" || Array.isArray(permission)) {
+        return false;
+      }
+      const candidate = permission;
+      return typeof candidate.resource === "string" && LOCAL_SCOPED_RESOURCES.has(candidate.resource) && Array.isArray(candidate.ops) && candidate.ops.length > 0 && candidate.ops.every((operation) => typeof operation === "string" && LOCAL_SCOPED_OPERATIONS.has(operation));
+    });
+  };
+  isScopedOperationAllowed = function(claims, request) {
+    const now = request.nowSeconds ?? Math.floor(Date.now() / 1e3);
+    if (claims.v !== 1) return false;
+    if (claims.iss !== "loro-code-collab-test-gateway") return false;
+    if (claims.aud !== "loro-code-collab-streams") return false;
+    if (claims.bucketId !== request.bucketId) return false;
+    if (claims.spaceUuid !== request.spaceUuid) return false;
+    if (claims.exp <= now) return false;
+    if (request.resource === "rpc:h2g:own" && request.peerId !== claims.peerId) {
+      return false;
+    }
+    return claims.permissions.some((permission) => resourceAllows(permission.resource, request.resource) && permission.ops.includes(request.operation));
+  };
+  createRolePermissions = function(role) {
+    if (role === "host") {
+      return [
+        {
+          resource: "meta",
+          ops: [
+            "create",
+            "read",
+            "append",
+            "delete",
+            "head"
+          ]
+        },
+        {
+          resource: "sys-session",
+          ops: [
+            "create",
+            "read",
+            "append",
+            "delete",
+            "head"
+          ]
+        },
+        {
+          resource: "sys-bootstrap-secret",
+          ops: [
+            "create",
+            "read",
+            "append",
+            "delete",
+            "head"
+          ]
+        },
+        {
+          resource: "doc:*",
+          ops: [
+            "create",
+            "read",
+            "append",
+            "delete",
+            "head"
+          ]
+        },
+        {
+          resource: "rpc:g2h",
+          ops: [
+            "create",
+            "read",
+            "head"
+          ]
+        },
+        {
+          resource: "rpc:h2g:*",
+          ops: [
+            "create",
+            "append",
+            "delete",
+            "head"
+          ]
+        },
+        {
+          resource: "ephemeral:*",
+          ops: [
+            "read",
+            "append"
+          ]
+        },
+        {
+          resource: "blob:*",
+          ops: [
+            "upload",
+            "download",
+            "head"
+          ]
+        },
+        {
+          resource: "snapshot:*",
+          ops: [
+            "upload_snapshot",
+            "read_snapshot"
+          ]
+        }
+      ];
+    }
+    if (role === "write") {
+      return [
+        {
+          resource: "meta",
+          ops: [
+            "read",
+            "head"
+          ]
+        },
+        {
+          resource: "sys-session",
+          ops: [
+            "read",
+            "head"
+          ]
+        },
+        {
+          resource: "doc:*",
+          ops: [
+            "create",
+            "read",
+            "append",
+            "head"
+          ]
+        },
+        {
+          resource: "rpc:g2h",
+          ops: [
+            "append"
+          ]
+        },
+        {
+          resource: "rpc:h2g:own",
+          ops: [
+            "create",
+            "read",
+            "head"
+          ]
+        },
+        {
+          resource: "ephemeral:*",
+          ops: [
+            "read",
+            "append"
+          ]
+        },
+        {
+          resource: "blob:*",
+          ops: [
+            "download",
+            "head"
+          ]
+        },
+        {
+          resource: "snapshot:*",
+          ops: [
+            "read_snapshot"
+          ]
+        }
+      ];
+    }
+    return [
+      {
+        resource: "meta",
+        ops: [
+          "read",
+          "head"
+        ]
+      },
+      {
+        resource: "sys-session",
+        ops: [
+          "read",
+          "head"
+        ]
+      },
+      {
+        resource: "doc:*",
+        ops: [
+          "create",
+          "read",
+          "head"
+        ]
+      },
+      {
+        resource: "rpc:g2h",
+        ops: [
+          "append"
+        ]
+      },
+      {
+        resource: "rpc:h2g:own",
+        ops: [
+          "create",
+          "read",
+          "head"
+        ]
+      },
+      {
+        resource: "ephemeral:*",
+        ops: [
+          "read",
+          "append"
+        ]
+      },
+      {
+        resource: "blob:*",
+        ops: [
+          "download",
+          "head"
+        ]
+      },
+      {
+        resource: "snapshot:*",
+        ops: [
+          "read_snapshot"
+        ]
+      }
+    ];
+  };
+  function isLocalScopedRole(value) {
+    return value === "host" || value === "write" || value === "read";
+  }
+  function resourceAllows(granted, requested) {
+    if (granted === requested) return true;
+    if (granted === "rpc:h2g:*" && requested === "rpc:h2g:own") return true;
+    return false;
+  }
+});
+export {
+  B as BLOB_CODE_COLLAB_FEATURES_V1,
+  C as CORE_CODE_COLLAB_FEATURES_V1,
+  d as CodeSessionError,
+  D as DEFAULT_CODE_COLLAB_FEATURES_V1,
+  R2 as REQUIRED_CORE_CODE_COLLAB_FEATURES_V1,
+  __tla,
+  a as assertCompatibleSessionStateV1,
+  b as assertSessionNotExpiredV1,
+  c as assertShareLinkMatchesSessionStateV1,
+  e as base64urlDecode,
+  f as base64urlEncode,
+  g as buildBlobEnvelopeAadV1,
+  d2 as buildEphemeralEnvelopeAadV1,
+  h as buildHostPresenceSigningPayload,
+  i as buildRpcEnvelopeAadV1,
+  j as buildRpcSigningPayload,
+  k as buildStreamPrefix,
+  l as canonicalJson,
+  m as computeBlobDigest,
+  e2 as computeEphemeralStateKeyV1,
+  n as createCodeCollabNamespace,
+  f2 as createCursorStateV1,
+  g2 as createEncryptedEphemeralStateEnvelopeV1,
+  h2 as createHostPresenceV1,
+  o as createHostRpcCancelV1,
+  p as createHostRpcRequestV1,
+  i2 as createInitialSessionStateV1,
+  j2 as createKeyId,
+  k2 as createParticipantPresenceV1,
+  createRolePermissions,
+  q as createRpcCapabilityProof,
+  l2 as createSelectionStateV1,
+  m2 as createShareLinkSecretV1,
+  r as decryptBlobObjectV1,
+  s as decryptEnvelopeV1,
+  n2 as decryptEphemeralPayloadV1,
+  t as decryptHostRpcMessageV1,
+  u as deriveSessionKeyBytes,
+  w as encryptBlobObjectV1,
+  x as encryptEnvelopeV1,
+  o2 as encryptEphemeralPayloadV1,
+  y as encryptHostRpcMessageV1,
+  z as generateContentKey,
+  p2 as generateHostSessionSecretsV1,
+  A as generatePreferredSigningPrivateKey,
+  E as generateSigningPrivateKey,
+  F as importSigningPrivateKey,
+  G as importVerifierKey,
+  H as isCanonicalJsonValue,
+  isLocalScopedTokenClaimsV1,
+  isScopedOperationAllowed,
+  I as normalizeCanonicalJsonValue,
+  J as paramsHash,
+  q2 as parseCursorStateV1,
+  K as parseEncryptedBlobObjectV1,
+  r2 as parseHostPresenceV1,
+  L as parseHostRpcMessageV1,
+  s2 as parseParticipantPresenceV1,
+  t2 as parseSelectionStateV1,
+  u2 as parseShareLinkV1,
+  M as randomBytes,
+  N as requiredRpcCapabilityV1,
+  O as serializeEncryptedBlobObjectV1,
+  v as serializeShareLinkV1,
+  P as sha256Base64Url,
+  Q as signBytes,
+  R as signCanonicalPayload,
+  S as signHostPresence,
+  T as timingSafeEqualBytes,
+  w2 as unwrapEncryptedEphemeralStateEnvelopeV1,
+  U as utf8Decode,
+  V as utf8Encode,
+  W as validateBlobPathPrefix,
+  validateBucketId,
+  validateMailboxSegment,
+  X as validateSerializedSigningPrivateKey,
+  Y as validateSerializedVerifierKey,
+  x2 as validateShareLinkSecretV1,
+  y2 as validateShareServerUrl,
+  validateSpaceUuid,
+  Z as validateStreamId,
+  validateStreamPrefix,
+  _ as verifierFromPrivateKey,
+  $ as verifyBytes,
+  a0 as verifyCanonicalPayload,
+  a1 as verifyHostPresence,
+  z2 as verifyHostPresenceV1,
+  a2 as verifyHostRpcCancelV1,
+  a3 as verifyHostRpcRequestV1,
+  a4 as verifyRpcCapabilityProof
+};