mdmaid-desk 0.1.0

package/dist/auth-state.js

@@ -0,0 +1,113 @@
+import { randomBytes } from "node:crypto";
+import { constants } from "node:fs";
+import { chmod, link, lstat, mkdir, open, unlink, } from "node:fs/promises";
+import { basename, dirname, join, resolve } from "node:path";
+import { syncDirectory } from "./fs-durability.js";
+const MAX_AUTH_TOKEN_BYTES = 128;
+const AUTH_TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/;
+export function authTokenPath(statePath) {
+    return join(dirname(resolve(statePath)), "auth-token");
+}
+export async function readOrCreateAuthToken(statePath) {
+    const destination = authTokenPath(statePath);
+    const existing = await readAuthToken(destination);
+    if (existing !== undefined) {
+        return existing;
+    }
+    const directory = dirname(destination);
+    await mkdir(directory, { recursive: true, mode: 0o700 });
+    await chmod(directory, 0o700);
+    const token = randomBytes(32).toString("base64url");
+    const temporary = join(directory, `.${basename(destination)}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`);
+    let temporaryExists = false;
+    try {
+        const handle = await open(temporary, constants.O_CREAT |
+            constants.O_EXCL |
+            constants.O_WRONLY |
+            constants.O_NOFOLLOW, 0o600);
+        temporaryExists = true;
+        try {
+            await handle.writeFile(`${token}\n`, "utf8");
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+        await chmod(temporary, 0o600);
+        try {
+            await link(temporary, destination);
+        }
+        catch (error) {
+            if (!isNodeError(error) || error.code !== "EEXIST") {
+                throw error;
+            }
+            const concurrent = await readAuthToken(destination);
+            if (concurrent === undefined) {
+                throw new Error("Authentication token disappeared during creation");
+            }
+            return concurrent;
+        }
+        await syncDirectory(directory);
+        return token;
+    }
+    finally {
+        if (temporaryExists) {
+            await unlinkIfPresent(temporary);
+        }
+    }
+}
+async function readAuthToken(path) {
+    let info;
+    try {
+        info = await lstat(path);
+    }
+    catch (error) {
+        if (isNodeError(error) && error.code === "ENOENT") {
+            return undefined;
+        }
+        throw error;
+    }
+    if (info.isSymbolicLink() || !info.isFile()) {
+        throw new Error("Auth token must be a regular, non-symlink file");
+    }
+    if ((info.mode & 0o077) !== 0) {
+        throw new Error("Auth token must have user-only permissions");
+    }
+    if (typeof process.getuid === "function" && info.uid !== process.getuid()) {
+        throw new Error("Auth token must be owned by the current user");
+    }
+    if (info.size === 0 || info.size > MAX_AUTH_TOKEN_BYTES) {
+        throw new Error("Invalid auth token");
+    }
+    const handle = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    let raw;
+    try {
+        const opened = await handle.stat();
+        if (opened.dev !== info.dev || opened.ino !== info.ino) {
+            throw new Error("Auth token changed while opening");
+        }
+        raw = await handle.readFile("utf8");
+    }
+    finally {
+        await handle.close();
+    }
+    const token = raw.endsWith("\n") ? raw.slice(0, -1) : raw;
+    if (!AUTH_TOKEN_PATTERN.test(token)) {
+        throw new Error("Invalid auth token");
+    }
+    return token;
+}
+async function unlinkIfPresent(path) {
+    try {
+        await unlink(path);
+    }
+    catch (error) {
+        if (!isNodeError(error) || error.code !== "ENOENT") {
+            throw error;
+        }
+    }
+}
+function isNodeError(error) {
+    return error instanceof Error && "code" in error;
+}
+//# sourceMappingURL=auth-state.js.map

package/dist/auth-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-state.js","sourceRoot":"","sources":["../src/auth-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EACL,KAAK,EACL,IAAI,EACJ,KAAK,EACL,KAAK,EACL,IAAI,EACJ,MAAM,GACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEjD,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB;IAEjB,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAE9B,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CACpB,SAAS,EACT,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CACjF,CAAC;IACF,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,SAAS,EACT,SAAS,CAAC,OAAO;YACf,SAAS,CAAC,MAAM;YAChB,SAAS,CAAC,QAAQ;YAClB,SAAS,CAAC,UAAU,EACtB,KAAK,CACN,CAAC;QACF,eAAe,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;YACpD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,oBAAoB,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1D,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}

package/dist/catalog.d.ts

@@ -0,0 +1,46 @@
+import { type Attention, type Document, type DocumentFilters, type DocumentKind, type Workspace } from "./domain.js";
+export type { Attention, Document, DocumentFilters, DocumentKind, ReadingStatus, Workspace, } from "./domain.js";
+export declare const CATALOG_SCHEMA_VERSION = 1;
+export interface CatalogOptions {
+    maxDocumentBytes?: number;
+    legacyStatePath?: string | false;
+}
+export interface AddWorkspaceInput {
+    id: string;
+    name: string;
+    root: string;
+    artifactRoots: string[];
+}
+export interface RegisterDocumentInput {
+    workspaceId: string;
+    taskId?: string;
+    producer?: string;
+    kind: DocumentKind;
+    title: string;
+    path: string;
+    attention: Attention;
+    tags?: string[];
+}
+export declare class Catalog {
+    #private;
+    private constructor();
+    static open(databasePath: string, options?: CatalogOptions): Promise<Catalog>;
+    close(): void;
+    listWorkspaces(): Workspace[];
+    listDocuments(filters?: DocumentFilters): Document[];
+    getDocument(id: string): Document | undefined;
+    readDocument(id: string): Promise<{
+        content: string;
+        document: Document;
+    }>;
+    addWorkspace(input: AddWorkspaceInput): Promise<Workspace>;
+    registerDocument(input: RegisterDocumentInput): Promise<Document>;
+    markDocumentOpened(id: string): Promise<Document>;
+    markDocumentRead(id: string): Promise<Document>;
+    markDocumentUnread(id: string): Promise<Document>;
+    setDocumentTags(id: string, tags: string[]): Promise<Document>;
+    archiveDocument(id: string): Promise<Document>;
+    restoreDocument(id: string): Promise<Document>;
+    markDocumentMissing(id: string): Promise<Document>;
+    markDocumentPresent(id: string): Promise<Document>;
+}