lody 0.57.3 → 0.58.0

package/README.md

@@ -7,3 +7,9 @@ Orchestrate your coding agents, together:
 ```
 npx lody start
 ```
+
+Install the CLI package:
+
+```
+npm install -g lody@next
+```

package/dist/chunks/index-DekwrpNR.js

@@ -0,0 +1,449 @@
+import { v as validateBucketId, a as validateSpaceUuid, b as validateStreamPrefix, c as validateMailboxSegment, __tla as __tla_0 } from "../index.js";
+import "fs";
+import "path";
+import "os";
+import "crypto";
+import "child_process";
+import "util";
+import "url";
+import "module";
+import "tty";
+import "worker_threads";
+import "events";
+import "node:diagnostics_channel";
+import "node:events";
+import "diagnostics_channel";
+import "node:net";
+import "async_hooks";
+import "node:child_process";
+import "node:fs";
+import "node:os";
+import "node:path";
+import "node:util";
+import "node:readline";
+import "node:worker_threads";
+import "node:http";
+import "node:https";
+import "node:stream";
+import "node:zlib";
+import "node:tls";
+import "node:process";
+import "node:tty";
+import "stream";
+import "buffer";
+import "zlib";
+import "string_decoder";
+import "http";
+import "https";
+import "node:crypto";
+import "net";
+import "tls";
+import { __tla as __tla_1 } from "./loro_wasm_bg-BV-n7JyC.js";
+import "assert";
+import "fs/promises";
+import "better-sqlite3";
+import "perf_hooks";
+import "node:module";
+import "node:fs/promises";
+import "node:stream/promises";
+import "node:string_decoder";
+import "node:assert";
+import "node:buffer";
+import "node:async_hooks";
+import { __tla as __tla_2 } from "./share-link-U1EVLOdF.js";
+import { __tla as __tla_3 } from "../index.js";
+import { R, a, b, c, d, e, f, g, h, i, j, k, l, m, n, o, p, q, r, s, t, u, v, w, x, y, z, A, B, C, D, E } from "./share-link-U1EVLOdF.js";
+import { B as B2, C as C2, d as d2, D as D2, e as e2, f as f2, g as g2, h as h2, i as i2, j as j2, k as k2, l as l2, m as m2, n as n2, o as o2, p as p2, q as q2, r as r2, s as s2, t as t2, u as u2, w as w2, x as x2, y as y2, z as z2, A as A2, E as E2, F, G, H, I, J, K, L, M, N, O, P, Q, R as R2, S, T, U, V, W, X, Y, Z, _, $ } from "../index.js";
+let createRolePermissions, isLocalScopedTokenClaimsV1, isScopedOperationAllowed;
+let __tla = Promise.all([
+  (() => {
+    try {
+      return __tla_0;
+    } catch {
+    }
+  })(),
+  (() => {
+    try {
+      return __tla_1;
+    } catch {
+    }
+  })(),
+  (() => {
+    try {
+      return __tla_2;
+    } catch {
+    }
+  })(),
+  (() => {
+    try {
+      return __tla_3;
+    } catch {
+    }
+  })()
+]).then(async () => {
+  const LOCAL_SCOPED_RESOURCES = /* @__PURE__ */ new Set([
+    "meta",
+    "sys-session",
+    "sys-bootstrap-secret",
+    "doc:*",
+    "rpc:g2h",
+    "rpc:h2g:own",
+    "rpc:h2g:*",
+    "ephemeral:*",
+    "blob:*",
+    "snapshot:*"
+  ]);
+  const LOCAL_SCOPED_OPERATIONS = /* @__PURE__ */ new Set([
+    "create",
+    "read",
+    "append",
+    "delete",
+    "head",
+    "upload",
+    "download",
+    "upload_snapshot",
+    "read_snapshot"
+  ]);
+  isLocalScopedTokenClaimsV1 = function(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+    const claims = value;
+    if (claims.v !== 1 || claims.iss !== "loro-code-collab-test-gateway" || claims.aud !== "loro-code-collab-streams" || !isLocalScopedRole(claims.role) || typeof claims.bucketId !== "string" || typeof claims.spaceUuid !== "string" || typeof claims.streamPrefix !== "string" || typeof claims.peerId !== "string" || typeof claims.exp !== "number" || !Number.isSafeInteger(claims.exp) || claims.exp < 0 || !Array.isArray(claims.permissions)) {
+      return false;
+    }
+    if (claims.inviteId !== void 0 && typeof claims.inviteId !== "string") {
+      return false;
+    }
+    try {
+      validateBucketId(claims.bucketId);
+      validateSpaceUuid(claims.spaceUuid);
+      validateStreamPrefix(claims.streamPrefix);
+      validateMailboxSegment(claims.peerId, "peerId");
+    } catch {
+      return false;
+    }
+    return claims.permissions.every((permission) => {
+      if (!permission || typeof permission !== "object" || Array.isArray(permission)) {
+        return false;
+      }
+      const candidate = permission;
+      return typeof candidate.resource === "string" && LOCAL_SCOPED_RESOURCES.has(candidate.resource) && Array.isArray(candidate.ops) && candidate.ops.length > 0 && candidate.ops.every((operation) => typeof operation === "string" && LOCAL_SCOPED_OPERATIONS.has(operation));
+    });
+  };
+  isScopedOperationAllowed = function(claims, request) {
+    const now = request.nowSeconds ?? Math.floor(Date.now() / 1e3);
+    if (claims.v !== 1) return false;
+    if (claims.iss !== "loro-code-collab-test-gateway") return false;
+    if (claims.aud !== "loro-code-collab-streams") return false;
+    if (claims.bucketId !== request.bucketId) return false;
+    if (claims.spaceUuid !== request.spaceUuid) return false;
+    if (claims.exp <= now) return false;
+    if (request.resource === "rpc:h2g:own" && request.peerId !== claims.peerId) {
+      return false;
+    }
+    return claims.permissions.some((permission) => resourceAllows(permission.resource, request.resource) && permission.ops.includes(request.operation));
+  };
+  createRolePermissions = function(role) {
+    if (role === "host") {
+      return [
+        {
+          resource: "meta",
+          ops: [
+            "create",
+            "read",
+            "append",
+            "delete",
+            "head"
+          ]
+        },
+        {
+          resource: "sys-session",
+          ops: [
+            "create",
+            "read",
+            "append",
+            "delete",
+            "head"
+          ]
+        },
+        {
+          resource: "sys-bootstrap-secret",
+          ops: [
+            "create",
+            "read",
+            "append",
+            "delete",
+            "head"
+          ]
+        },
+        {
+          resource: "doc:*",
+          ops: [
+            "create",
+            "read",
+            "append",
+            "delete",
+            "head"
+          ]
+        },
+        {
+          resource: "rpc:g2h",
+          ops: [
+            "create",
+            "read",
+            "head"
+          ]
+        },
+        {
+          resource: "rpc:h2g:*",
+          ops: [
+            "create",
+            "append",
+            "delete",
+            "head"
+          ]
+        },
+        {
+          resource: "ephemeral:*",
+          ops: [
+            "read",
+            "append"
+          ]
+        },
+        {
+          resource: "blob:*",
+          ops: [
+            "upload",
+            "download",
+            "head"
+          ]
+        },
+        {
+          resource: "snapshot:*",
+          ops: [
+            "upload_snapshot",
+            "read_snapshot"
+          ]
+        }
+      ];
+    }
+    if (role === "write") {
+      return [
+        {
+          resource: "meta",
+          ops: [
+            "read",
+            "head"
+          ]
+        },
+        {
+          resource: "sys-session",
+          ops: [
+            "read",
+            "head"
+          ]
+        },
+        {
+          resource: "doc:*",
+          ops: [
+            "create",
+            "read",
+            "append",
+            "head"
+          ]
+        },
+        {
+          resource: "rpc:g2h",
+          ops: [
+            "append"
+          ]
+        },
+        {
+          resource: "rpc:h2g:own",
+          ops: [
+            "create",
+            "read",
+            "head"
+          ]
+        },
+        {
+          resource: "ephemeral:*",
+          ops: [
+            "read",
+            "append"
+          ]
+        },
+        {
+          resource: "blob:*",
+          ops: [
+            "download",
+            "head"
+          ]
+        },
+        {
+          resource: "snapshot:*",
+          ops: [
+            "read_snapshot"
+          ]
+        }
+      ];
+    }
+    return [
+      {
+        resource: "meta",
+        ops: [
+          "read",
+          "head"
+        ]
+      },
+      {
+        resource: "sys-session",
+        ops: [
+          "read",
+          "head"
+        ]
+      },
+      {
+        resource: "doc:*",
+        ops: [
+          "create",
+          "read",
+          "head"
+        ]
+      },
+      {
+        resource: "rpc:g2h",
+        ops: [
+          "append"
+        ]
+      },
+      {
+        resource: "rpc:h2g:own",
+        ops: [
+          "create",
+          "read",
+          "head"
+        ]
+      },
+      {
+        resource: "ephemeral:*",
+        ops: [
+          "read",
+          "append"
+        ]
+      },
+      {
+        resource: "blob:*",
+        ops: [
+          "download",
+          "head"
+        ]
+      },
+      {
+        resource: "snapshot:*",
+        ops: [
+          "read_snapshot"
+        ]
+      }
+    ];
+  };
+  function isLocalScopedRole(value) {
+    return value === "host" || value === "write" || value === "read";
+  }
+  function resourceAllows(granted, requested) {
+    if (granted === requested) return true;
+    if (granted === "rpc:h2g:*" && requested === "rpc:h2g:own") return true;
+    return false;
+  }
+});
+export {
+  B2 as BLOB_CODE_COLLAB_FEATURES_V1,
+  C2 as CORE_CODE_COLLAB_FEATURES_V1,
+  d2 as CodeSessionError,
+  D2 as DEFAULT_CODE_COLLAB_FEATURES_V1,
+  R as REQUIRED_CORE_CODE_COLLAB_FEATURES_V1,
+  __tla,
+  a as assertCompatibleSessionStateV1,
+  b as assertSessionNotExpiredV1,
+  c as assertShareLinkMatchesSessionStateV1,
+  e2 as base64urlDecode,
+  f2 as base64urlEncode,
+  d as buildBlobEnvelopeAadV1,
+  e as buildEphemeralEnvelopeAadV1,
+  g2 as buildHostPresenceSigningPayload,
+  h2 as buildRpcEnvelopeAadV1,
+  i2 as buildRpcSigningPayload,
+  j2 as buildStreamPrefix,
+  k2 as canonicalJson,
+  l2 as computeBlobDigest,
+  f as computeEphemeralStateKeyV1,
+  m2 as createCodeCollabNamespace,
+  g as createCursorStateV1,
+  h as createEncryptedEphemeralStateEnvelopeV1,
+  i as createHostPresenceV1,
+  n2 as createHostRpcCancelV1,
+  o2 as createHostRpcRequestV1,
+  j as createInitialSessionStateV1,
+  k as createKeyId,
+  l as createParticipantPresenceV1,
+  createRolePermissions,
+  p2 as createRpcCapabilityProof,
+  m as createSelectionStateV1,
+  n as createShareLinkSecretV1,
+  o as decryptBlobObjectV1,
+  q2 as decryptEnvelopeV1,
+  p as decryptEphemeralPayloadV1,
+  r2 as decryptHostRpcMessageV1,
+  s2 as deriveSessionKeyBytes,
+  q as encryptBlobObjectV1,
+  t2 as encryptEnvelopeV1,
+  r as encryptEphemeralPayloadV1,
+  u2 as encryptHostRpcMessageV1,
+  w2 as generateContentKey,
+  s as generateHostSessionSecretsV1,
+  x2 as generatePreferredSigningPrivateKey,
+  y2 as generateSigningPrivateKey,
+  z2 as importSigningPrivateKey,
+  A2 as importVerifierKey,
+  E2 as isCanonicalJsonValue,
+  isLocalScopedTokenClaimsV1,
+  isScopedOperationAllowed,
+  F as normalizeCanonicalJsonValue,
+  G as paramsHash,
+  t as parseCursorStateV1,
+  u as parseEncryptedBlobObjectV1,
+  v as parseHostPresenceV1,
+  H as parseHostRpcMessageV1,
+  w as parseParticipantPresenceV1,
+  x as parseSelectionStateV1,
+  y as parseShareLinkV1,
+  I as randomBytes,
+  J as requiredRpcCapabilityV1,
+  z as serializeEncryptedBlobObjectV1,
+  A as serializeShareLinkV1,
+  K as sha256Base64Url,
+  L as signBytes,
+  M as signCanonicalPayload,
+  N as signHostPresence,
+  O as timingSafeEqualBytes,
+  B as unwrapEncryptedEphemeralStateEnvelopeV1,
+  P as utf8Decode,
+  Q as utf8Encode,
+  R2 as validateBlobPathPrefix,
+  validateBucketId,
+  validateMailboxSegment,
+  S as validateSerializedSigningPrivateKey,
+  T as validateSerializedVerifierKey,
+  C as validateShareLinkSecretV1,
+  D as validateShareServerUrl,
+  validateSpaceUuid,
+  U as validateStreamId,
+  validateStreamPrefix,
+  V as verifierFromPrivateKey,
+  W as verifyBytes,
+  X as verifyCanonicalPayload,
+  Y as verifyHostPresence,
+  E as verifyHostPresenceV1,
+  Z as verifyHostRpcCancelV1,
+  _ as verifyHostRpcRequestV1,
+  $ as verifyRpcCapabilityProof
+};