neozip-cli 0.80.0 → 0.95.0

package/dist/src/connection/legacy-profile-reader.js

@@ -0,0 +1,87 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LEGACY_MCP_PROFILE_DIR = void 0;
+exports.listLegacyProfiles = listLegacyProfiles;
+exports.getLegacyActiveProfileId = getLegacyActiveProfileId;
+exports.readLegacySecrets = readLegacySecrets;
+exports.hasLegacyMcpProfiles = hasLegacyMcpProfiles;
+const fs = __importStar(require("node:fs"));
+const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
+const profile_crypto_1 = require("../account/profile-crypto");
+exports.LEGACY_MCP_PROFILE_DIR = process.env.NEOZIP_MCP_PROFILE_DIR?.trim() ||
+    path.join(os.homedir(), ".neozip", "mcp");
+const PROFILES_PATH = () => path.join(exports.LEGACY_MCP_PROFILE_DIR, "profiles.json");
+const ACTIVE_PATH = () => path.join(exports.LEGACY_MCP_PROFILE_DIR, "active.json");
+const SECRETS_DIR = () => path.join(exports.LEGACY_MCP_PROFILE_DIR, "secrets");
+function readProfilesFile() {
+    if (!fs.existsSync(PROFILES_PATH())) {
+        return { version: 1, profiles: [] };
+    }
+    return JSON.parse(fs.readFileSync(PROFILES_PATH(), "utf8"));
+}
+function listLegacyProfiles() {
+    return readProfilesFile().profiles;
+}
+function getLegacyActiveProfileId() {
+    if (!fs.existsSync(ACTIVE_PATH()))
+        return null;
+    const active = JSON.parse(fs.readFileSync(ACTIVE_PATH(), "utf8"));
+    return active.profileId;
+}
+function readLegacySecrets(profileId) {
+    const sp = path.join(SECRETS_DIR(), `${profileId}.json.enc`);
+    if (!fs.existsSync(sp))
+        return null;
+    try {
+        return (0, profile_crypto_1.decryptJson)(fs.readFileSync(sp, "utf8"));
+    }
+    catch {
+        return null;
+    }
+}
+function hasLegacyMcpProfiles() {
+    if (!fs.existsSync(PROFILES_PATH()))
+        return false;
+    try {
+        const data = readProfilesFile();
+        return data.profiles.length > 0;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=legacy-profile-reader.js.map

package/dist/src/connection/magic-link.js

@@ -0,0 +1,142 @@
+"use strict";
+/**
+ * Parse user-pasted email verification input (aligned with neozip-desktop magicLinkToken.ts).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeMagicLinkTokenInput = normalizeMagicLinkTokenInput;
+exports.extractEmailCodePair = extractEmailCodePair;
+const DIGIT_CODE_REGEX = /^\d{4,10}$/;
+function safeDecodeURIComponent(s) {
+    try {
+        if (/%[0-9A-Fa-f]{2}/.test(s))
+            return decodeURIComponent(s);
+    }
+    catch {
+        /* keep */
+    }
+    return s;
+}
+function extractEmailCodeFromHttpUrl(s) {
+    try {
+        const u = new URL(s);
+        const email = u.searchParams.get("email");
+        const code = u.searchParams.get("code");
+        if (email || code) {
+            return {
+                email: email ? safeDecodeURIComponent(email).trim().toLowerCase() : undefined,
+                code: code ? safeDecodeURIComponent(code).replace(/\D/g, "") : undefined,
+            };
+        }
+        if (u.hash && u.hash.length > 2) {
+            const h = u.hash.startsWith("#") ? u.hash.slice(1) : u.hash;
+            const hp = new URLSearchParams(h);
+            const he = hp.get("email");
+            const hc = hp.get("code");
+            if (he || hc) {
+                return {
+                    email: he ? safeDecodeURIComponent(he).trim().toLowerCase() : undefined,
+                    code: hc ? safeDecodeURIComponent(hc).replace(/\D/g, "") : undefined,
+                };
+            }
+        }
+    }
+    catch {
+        return null;
+    }
+    return null;
+}
+function extractFromHttpUrl(s) {
+    try {
+        const u = new URL(s);
+        const fromQuery = u.searchParams.get("token") ??
+            u.searchParams.get("t") ??
+            u.searchParams.get("code") ??
+            u.searchParams.get("verifyToken") ??
+            u.searchParams.get("verification") ??
+            u.searchParams.get("key");
+        if (fromQuery)
+            return safeDecodeURIComponent(fromQuery);
+        const pathParts = u.pathname.split("/").filter(Boolean);
+        const lastSeg = pathParts[pathParts.length - 1];
+        if (lastSeg &&
+            lastSeg.split(".").length === 3 &&
+            lastSeg.split(".").every((x) => x.length > 0)) {
+            return lastSeg;
+        }
+        if (u.hash && u.hash.length > 2) {
+            const h = u.hash.startsWith("#") ? u.hash.slice(1) : u.hash;
+            const hp = new URLSearchParams(h);
+            const fromHash = hp.get("token") ?? hp.get("t") ?? hp.get("code") ?? hp.get("access_token");
+            if (fromHash)
+                return safeDecodeURIComponent(fromHash);
+        }
+    }
+    catch {
+        return null;
+    }
+    return null;
+}
+/** Extract opaque token for POST /auth/exchange-token. */
+function normalizeMagicLinkTokenInput(raw) {
+    let s = String(raw ?? "")
+        .trim()
+        .replace(/[\u00a0\u200b\uFEFF]/g, "")
+        .replace(/^["']|["']$/g, "");
+    if (!s)
+        return "";
+    if (/^https?:\/\//i.test(s)) {
+        s = s.replace(/[\n\r\t]+/g, "");
+    }
+    else {
+        s = s.replace(/\s/g, "");
+    }
+    if (/^https?:\/\//i.test(s)) {
+        const extracted = extractFromHttpUrl(s);
+        if (extracted)
+            return extracted;
+    }
+    const fromToken = s.match(/(?:^|[?&#])token=([^&\s#]+)/i);
+    if (fromToken?.[1]) {
+        return safeDecodeURIComponent(fromToken[1]);
+    }
+    const fromCode = s.match(/(?:^|[?&#])code=([^&\s#]+)/i);
+    if (fromCode?.[1] && !/^https?:\/\//i.test(s)) {
+        return safeDecodeURIComponent(fromCode[1]);
+    }
+    return safeDecodeURIComponent(s);
+}
+/** Extract { email, code } for POST /auth/verify-email-code. */
+function extractEmailCodePair(raw) {
+    let s = String(raw ?? "")
+        .trim()
+        .replace(/[\u00a0\u200b\uFEFF]/g, "")
+        .replace(/^["']|["']$/g, "");
+    if (!s)
+        return {};
+    const isUrl = /^https?:\/\//i.test(s);
+    if (isUrl) {
+        s = s.replace(/[\n\r\t]+/g, "");
+        const fromUrl = extractEmailCodeFromHttpUrl(s);
+        if (fromUrl)
+            return fromUrl;
+        return {};
+    }
+    const emailMatch = s.match(/(?:^|[?&#])email=([^&\s#]+)/i);
+    const codeMatch = s.match(/(?:^|[?&#])code=([^&\s#]+)/i);
+    if (emailMatch || codeMatch) {
+        return {
+            email: emailMatch
+                ? safeDecodeURIComponent(emailMatch[1]).trim().toLowerCase()
+                : undefined,
+            code: codeMatch
+                ? safeDecodeURIComponent(codeMatch[1]).replace(/\D/g, "")
+                : undefined,
+        };
+    }
+    const digitsOnly = s.replace(/[\s-]/g, "");
+    if (DIGIT_CODE_REGEX.test(digitsOnly)) {
+        return { code: digitsOnly };
+    }
+    return {};
+}
+//# sourceMappingURL=magic-link.js.map

package/dist/src/connection/migrate.js

@@ -0,0 +1,115 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.migrateFromWalletJson = exports.hasLegacyMcpProfiles = void 0;
+exports.migrateFromMcpProfileStore = migrateFromMcpProfileStore;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const crypto_1 = require("./crypto");
+const legacy_profile_reader_1 = require("./legacy-profile-reader");
+Object.defineProperty(exports, "hasLegacyMcpProfiles", { enumerable: true, get: function () { return legacy_profile_reader_1.hasLegacyMcpProfiles; } });
+const store_1 = require("./store");
+const wallet_json_migration_1 = require("./wallet-json-migration");
+Object.defineProperty(exports, "migrateFromWalletJson", { enumerable: true, get: function () { return wallet_json_migration_1.migrateFromWalletJson; } });
+function migrateFromMcpProfileStore() {
+    if ((0, store_1.listConnectionIds)().length > 0) {
+        return {
+            migrated: 0,
+            skipped: (0, legacy_profile_reader_1.listLegacyProfiles)().length,
+            connectionDir: (0, store_1.getConnectionDir)(),
+            activeConnectionId: (0, store_1.getActiveConnectionId)(),
+        };
+    }
+    const profiles = (0, legacy_profile_reader_1.listLegacyProfiles)();
+    if (profiles.length === 0) {
+        return {
+            migrated: 0,
+            skipped: 0,
+            connectionDir: (0, store_1.getConnectionDir)(),
+            activeConnectionId: null,
+        };
+    }
+    const activeLegacyId = (0, legacy_profile_reader_1.getLegacyActiveProfileId)();
+    let activeConnectionId = null;
+    let migrated = 0;
+    for (const profile of profiles) {
+        const secrets = (0, legacy_profile_reader_1.readLegacySecrets)(profile.id);
+        const conn = (0, store_1.createConnection)({
+            label: profile.label,
+            tokenServiceUrl: profile.tokenServiceUrl,
+        });
+        const legacyExtras = profile;
+        (0, store_1.updateConnection)(conn.id, {
+            email: profile.email,
+            emailVerified: profile.emailVerified,
+            emailVerifiedAt: legacyExtras.emailVerifiedAt ??
+                (profile.emailVerified ? profile.updatedAt : null),
+            evmAddress: profile.evmAddress,
+            walletId: profile.walletId,
+            linkId: profile.linkId,
+            identityKeyId: profile.identityKeyId,
+            x25519PublicKeySpkiB64: legacyExtras.x25519PublicKeySpkiB64 ?? null,
+            x25519Fingerprint: profile.x25519Fingerprint,
+            onboardingCompleteAt: profile.identityKeyId != null ? profile.updatedAt : null,
+        });
+        if (secrets) {
+            const sp = path.join((0, store_1.getConnectionDir)(), "connections", conn.id, "secrets.enc");
+            fs.writeFileSync(sp, (0, crypto_1.encryptSecrets)({
+                accessToken: secrets.accessToken,
+                accessTokenObtainedAt: secrets.accessTokenObtainedAt,
+                accessTokenExpiresAt: null,
+                evmPrivateKeyHex: secrets.evmPrivateKey?.replace(/^0x/i, "") ?? null,
+            }), { mode: 0o600 });
+        }
+        if (profile.id === activeLegacyId) {
+            (0, store_1.selectConnection)(conn.id);
+            activeConnectionId = conn.id;
+        }
+        else if (!activeConnectionId) {
+            activeConnectionId = conn.id;
+        }
+        migrated++;
+    }
+    if (activeLegacyId && activeConnectionId) {
+        (0, store_1.selectConnection)(activeConnectionId);
+    }
+    return {
+        migrated,
+        skipped: 0,
+        connectionDir: (0, store_1.getConnectionDir)(),
+        activeConnectionId: (0, store_1.getActiveConnectionId)(),
+    };
+}
+//# sourceMappingURL=migrate.js.map