remoteclaw 0.1.0-next.db4f159 → 0.1.0-next.db8a792

package/dist/pairing-store-CdY7iRS0.js

@@ -1,459 +0,0 @@
-import { Kt as resolveOAuthDir, dn as resolveRequiredHomeDir, it as safeParseJson, qt as resolveStateDir } from "./entry.js";
-import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-7B167wIj.js";
-import { t as withFileLock$1 } from "./file-lock-C_KRlR7M.js";
-import os from "node:os";
-import path from "node:path";
-import fs from "node:fs";
-import crypto from "node:crypto";
-
-//#region src/channels/plugins/pairing.ts
-function listPairingChannels() {
-	return listChannelPlugins().filter((plugin) => plugin.pairing).map((plugin) => plugin.id);
-}
-function getPairingAdapter(channelId) {
-	return getChannelPlugin(channelId)?.pairing ?? null;
-}
-function requirePairingAdapter(channelId) {
-	const adapter = getPairingAdapter(channelId);
-	if (!adapter) throw new Error(`Channel ${channelId} does not support pairing`);
-	return adapter;
-}
-async function notifyPairingApproved(params) {
-	const adapter = params.pairingAdapter ?? requirePairingAdapter(params.channelId);
-	if (!adapter.notifyApproval) return;
-	await adapter.notifyApproval({
-		cfg: params.cfg,
-		id: params.id,
-		runtime: params.runtime
-	});
-}
-
-//#endregion
-//#region src/plugin-sdk/json-store.ts
-async function readJsonFileWithFallback(filePath, fallback) {
-	try {
-		const parsed = safeParseJson(await fs.promises.readFile(filePath, "utf-8"));
-		if (parsed == null) return {
-			value: fallback,
-			exists: true
-		};
-		return {
-			value: parsed,
-			exists: true
-		};
-	} catch (err) {
-		if (err.code === "ENOENT") return {
-			value: fallback,
-			exists: false
-		};
-		return {
-			value: fallback,
-			exists: false
-		};
-	}
-}
-async function writeJsonFileAtomically(filePath, value) {
-	const dir = path.dirname(filePath);
-	await fs.promises.mkdir(dir, {
-		recursive: true,
-		mode: 448
-	});
-	const tmp = path.join(dir, `${path.basename(filePath)}.${crypto.randomUUID()}.tmp`);
-	await fs.promises.writeFile(tmp, `${JSON.stringify(value, null, 2)}\n`, { encoding: "utf-8" });
-	await fs.promises.chmod(tmp, 384);
-	await fs.promises.rename(tmp, filePath);
-}
-
-//#endregion
-//#region src/pairing/pairing-store.ts
-const PAIRING_CODE_LENGTH = 8;
-const PAIRING_CODE_ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
-const PAIRING_PENDING_TTL_MS = 3600 * 1e3;
-const PAIRING_PENDING_MAX = 3;
-const PAIRING_STORE_LOCK_OPTIONS = {
-	retries: {
-		retries: 10,
-		factor: 2,
-		minTimeout: 100,
-		maxTimeout: 1e4,
-		randomize: true
-	},
-	stale: 3e4
-};
-function resolveCredentialsDir(env = process.env) {
-	return resolveOAuthDir(env, resolveStateDir(env, () => resolveRequiredHomeDir(env, os.homedir)));
-}
-/** Sanitize channel ID for use in filenames (prevent path traversal). */
-function safeChannelKey(channel) {
-	const raw = String(channel).trim().toLowerCase();
-	if (!raw) throw new Error("invalid pairing channel");
-	const safe = raw.replace(/[\\/:*?"<>|]/g, "_").replace(/\.\./g, "_");
-	if (!safe || safe === "_") throw new Error("invalid pairing channel");
-	return safe;
-}
-function resolvePairingPath(channel, env = process.env) {
-	return path.join(resolveCredentialsDir(env), `${safeChannelKey(channel)}-pairing.json`);
-}
-function safeAccountKey(accountId) {
-	const raw = String(accountId).trim().toLowerCase();
-	if (!raw) throw new Error("invalid pairing account id");
-	const safe = raw.replace(/[\\/:*?"<>|]/g, "_").replace(/\.\./g, "_");
-	if (!safe || safe === "_") throw new Error("invalid pairing account id");
-	return safe;
-}
-function resolveAllowFromPath(channel, env = process.env, accountId) {
-	const base = safeChannelKey(channel);
-	const normalizedAccountId = typeof accountId === "string" ? accountId.trim() : "";
-	if (!normalizedAccountId) return path.join(resolveCredentialsDir(env), `${base}-allowFrom.json`);
-	return path.join(resolveCredentialsDir(env), `${base}-${safeAccountKey(normalizedAccountId)}-allowFrom.json`);
-}
-async function readJsonFile(filePath, fallback) {
-	return await readJsonFileWithFallback(filePath, fallback);
-}
-async function writeJsonFile(filePath, value) {
-	await writeJsonFileAtomically(filePath, value);
-}
-async function readPairingRequests(filePath) {
-	const { value } = await readJsonFile(filePath, {
-		version: 1,
-		requests: []
-	});
-	return Array.isArray(value.requests) ? value.requests : [];
-}
-async function readPrunedPairingRequests(filePath) {
-	return pruneExpiredRequests(await readPairingRequests(filePath), Date.now());
-}
-async function ensureJsonFile(filePath, fallback) {
-	try {
-		await fs.promises.access(filePath);
-	} catch {
-		await writeJsonFile(filePath, fallback);
-	}
-}
-async function withFileLock(filePath, fallback, fn) {
-	await ensureJsonFile(filePath, fallback);
-	return await withFileLock$1(filePath, PAIRING_STORE_LOCK_OPTIONS, async () => {
-		return await fn();
-	});
-}
-function parseTimestamp(value) {
-	if (!value) return null;
-	const parsed = Date.parse(value);
-	if (!Number.isFinite(parsed)) return null;
-	return parsed;
-}
-function isExpired(entry, nowMs) {
-	const createdAt = parseTimestamp(entry.createdAt);
-	if (!createdAt) return true;
-	return nowMs - createdAt > PAIRING_PENDING_TTL_MS;
-}
-function pruneExpiredRequests(reqs, nowMs) {
-	const kept = [];
-	let removed = false;
-	for (const req of reqs) {
-		if (isExpired(req, nowMs)) {
-			removed = true;
-			continue;
-		}
-		kept.push(req);
-	}
-	return {
-		requests: kept,
-		removed
-	};
-}
-function resolveLastSeenAt(entry) {
-	return parseTimestamp(entry.lastSeenAt) ?? parseTimestamp(entry.createdAt) ?? 0;
-}
-function pruneExcessRequests(reqs, maxPending) {
-	if (maxPending <= 0 || reqs.length <= maxPending) return {
-		requests: reqs,
-		removed: false
-	};
-	return {
-		requests: reqs.slice().toSorted((a, b) => resolveLastSeenAt(a) - resolveLastSeenAt(b)).slice(-maxPending),
-		removed: true
-	};
-}
-function randomCode() {
-	let out = "";
-	for (let i = 0; i < PAIRING_CODE_LENGTH; i++) {
-		const idx = crypto.randomInt(0, 32);
-		out += PAIRING_CODE_ALPHABET[idx];
-	}
-	return out;
-}
-function generateUniqueCode(existing) {
-	for (let attempt = 0; attempt < 500; attempt += 1) {
-		const code = randomCode();
-		if (!existing.has(code)) return code;
-	}
-	throw new Error("failed to generate unique pairing code");
-}
-function normalizePairingAccountId(accountId) {
-	return accountId?.trim().toLowerCase() || "";
-}
-function requestMatchesAccountId(entry, normalizedAccountId) {
-	if (!normalizedAccountId) return true;
-	return String(entry.meta?.accountId ?? "").trim().toLowerCase() === normalizedAccountId;
-}
-function normalizeId(value) {
-	return String(value).trim();
-}
-function normalizeAllowEntry(channel, entry) {
-	const trimmed = entry.trim();
-	if (!trimmed) return "";
-	if (trimmed === "*") return "";
-	const adapter = getPairingAdapter(channel);
-	const normalized = adapter?.normalizeAllowEntry ? adapter.normalizeAllowEntry(trimmed) : trimmed;
-	return String(normalized).trim();
-}
-function normalizeAllowFromList(channel, store) {
-	return (Array.isArray(store.allowFrom) ? store.allowFrom : []).map((v) => normalizeAllowEntry(channel, String(v))).filter(Boolean);
-}
-function normalizeAllowFromInput(channel, entry) {
-	return normalizeAllowEntry(channel, normalizeId(entry));
-}
-function dedupePreserveOrder(entries) {
-	const seen = /* @__PURE__ */ new Set();
-	const out = [];
-	for (const entry of entries) {
-		const normalized = String(entry).trim();
-		if (!normalized || seen.has(normalized)) continue;
-		seen.add(normalized);
-		out.push(normalized);
-	}
-	return out;
-}
-async function readAllowFromStateForPath(channel, filePath) {
-	const { value } = await readJsonFile(filePath, {
-		version: 1,
-		allowFrom: []
-	});
-	return normalizeAllowFromList(channel, value);
-}
-function readAllowFromStateForPathSync(channel, filePath) {
-	try {
-		const raw = fs.readFileSync(filePath, "utf8");
-		return normalizeAllowFromList(channel, JSON.parse(raw));
-	} catch {
-		return [];
-	}
-}
-async function readAllowFromState(params) {
-	const { value } = await readJsonFile(params.filePath, {
-		version: 1,
-		allowFrom: []
-	});
-	return {
-		current: normalizeAllowFromList(params.channel, value),
-		normalized: normalizeAllowFromInput(params.channel, params.entry) || null
-	};
-}
-async function writeAllowFromState(filePath, allowFrom) {
-	await writeJsonFile(filePath, {
-		version: 1,
-		allowFrom
-	});
-}
-async function updateAllowFromStoreEntry(params) {
-	const env = params.env ?? process.env;
-	const filePath = resolveAllowFromPath(params.channel, env, params.accountId);
-	return await withFileLock(filePath, {
-		version: 1,
-		allowFrom: []
-	}, async () => {
-		const { current, normalized } = await readAllowFromState({
-			channel: params.channel,
-			entry: params.entry,
-			filePath
-		});
-		if (!normalized) return {
-			changed: false,
-			allowFrom: current
-		};
-		const next = params.apply(current, normalized);
-		if (!next) return {
-			changed: false,
-			allowFrom: current
-		};
-		await writeAllowFromState(filePath, next);
-		return {
-			changed: true,
-			allowFrom: next
-		};
-	});
-}
-async function readChannelAllowFromStore(channel, env = process.env, accountId) {
-	if (!(accountId?.trim().toLowerCase() ?? "")) return await readAllowFromStateForPath(channel, resolveAllowFromPath(channel, env));
-	const scopedEntries = await readAllowFromStateForPath(channel, resolveAllowFromPath(channel, env, accountId));
-	const legacyEntries = await readAllowFromStateForPath(channel, resolveAllowFromPath(channel, env));
-	return dedupePreserveOrder([...scopedEntries, ...legacyEntries]);
-}
-function readChannelAllowFromStoreSync(channel, env = process.env, accountId) {
-	if (!(accountId?.trim().toLowerCase() ?? "")) return readAllowFromStateForPathSync(channel, resolveAllowFromPath(channel, env));
-	const scopedEntries = readAllowFromStateForPathSync(channel, resolveAllowFromPath(channel, env, accountId));
-	const legacyEntries = readAllowFromStateForPathSync(channel, resolveAllowFromPath(channel, env));
-	return dedupePreserveOrder([...scopedEntries, ...legacyEntries]);
-}
-async function updateChannelAllowFromStore(params) {
-	return await updateAllowFromStoreEntry({
-		channel: params.channel,
-		entry: params.entry,
-		accountId: params.accountId,
-		env: params.env,
-		apply: params.apply
-	});
-}
-async function mutateChannelAllowFromStoreEntry(params, apply) {
-	return await updateChannelAllowFromStore({
-		...params,
-		apply
-	});
-}
-async function addChannelAllowFromStoreEntry(params) {
-	return await mutateChannelAllowFromStoreEntry(params, (current, normalized) => {
-		if (current.includes(normalized)) return null;
-		return [...current, normalized];
-	});
-}
-async function removeChannelAllowFromStoreEntry(params) {
-	return await mutateChannelAllowFromStoreEntry(params, (current, normalized) => {
-		const next = current.filter((entry) => entry !== normalized);
-		if (next.length === current.length) return null;
-		return next;
-	});
-}
-async function listChannelPairingRequests(channel, env = process.env, accountId) {
-	const filePath = resolvePairingPath(channel, env);
-	return await withFileLock(filePath, {
-		version: 1,
-		requests: []
-	}, async () => {
-		const { requests: prunedExpired, removed: expiredRemoved } = await readPrunedPairingRequests(filePath);
-		const { requests: pruned, removed: cappedRemoved } = pruneExcessRequests(prunedExpired, PAIRING_PENDING_MAX);
-		if (expiredRemoved || cappedRemoved) await writeJsonFile(filePath, {
-			version: 1,
-			requests: pruned
-		});
-		const normalizedAccountId = normalizePairingAccountId(accountId);
-		return (normalizedAccountId ? pruned.filter((entry) => requestMatchesAccountId(entry, normalizedAccountId)) : pruned).filter((r) => r && typeof r.id === "string" && typeof r.code === "string" && typeof r.createdAt === "string").slice().toSorted((a, b) => a.createdAt.localeCompare(b.createdAt));
-	});
-}
-async function upsertChannelPairingRequest(params) {
-	const env = params.env ?? process.env;
-	const filePath = resolvePairingPath(params.channel, env);
-	return await withFileLock(filePath, {
-		version: 1,
-		requests: []
-	}, async () => {
-		const now = (/* @__PURE__ */ new Date()).toISOString();
-		const nowMs = Date.now();
-		const id = normalizeId(params.id);
-		const normalizedAccountId = params.accountId?.trim();
-		const baseMeta = params.meta && typeof params.meta === "object" ? Object.fromEntries(Object.entries(params.meta).map(([k, v]) => [k, String(v ?? "").trim()]).filter(([_, v]) => Boolean(v))) : void 0;
-		const meta = normalizedAccountId ? {
-			...baseMeta,
-			accountId: normalizedAccountId
-		} : baseMeta;
-		let reqs = await readPairingRequests(filePath);
-		const { requests: prunedExpired, removed: expiredRemoved } = pruneExpiredRequests(reqs, nowMs);
-		reqs = prunedExpired;
-		const existingIdx = reqs.findIndex((r) => r.id === id);
-		const existingCodes = new Set(reqs.map((req) => String(req.code ?? "").trim().toUpperCase()));
-		if (existingIdx >= 0) {
-			const existing = reqs[existingIdx];
-			const code = (existing && typeof existing.code === "string" ? existing.code.trim() : "") || generateUniqueCode(existingCodes);
-			const next = {
-				id,
-				code,
-				createdAt: existing?.createdAt ?? now,
-				lastSeenAt: now,
-				meta: meta ?? existing?.meta
-			};
-			reqs[existingIdx] = next;
-			const { requests: capped } = pruneExcessRequests(reqs, PAIRING_PENDING_MAX);
-			await writeJsonFile(filePath, {
-				version: 1,
-				requests: capped
-			});
-			return {
-				code,
-				created: false
-			};
-		}
-		const { requests: capped, removed: cappedRemoved } = pruneExcessRequests(reqs, PAIRING_PENDING_MAX);
-		reqs = capped;
-		if (PAIRING_PENDING_MAX > 0 && reqs.length >= PAIRING_PENDING_MAX) {
-			if (expiredRemoved || cappedRemoved) await writeJsonFile(filePath, {
-				version: 1,
-				requests: reqs
-			});
-			return {
-				code: "",
-				created: false
-			};
-		}
-		const code = generateUniqueCode(existingCodes);
-		const next = {
-			id,
-			code,
-			createdAt: now,
-			lastSeenAt: now,
-			...meta ? { meta } : {}
-		};
-		await writeJsonFile(filePath, {
-			version: 1,
-			requests: [...reqs, next]
-		});
-		return {
-			code,
-			created: true
-		};
-	});
-}
-async function approveChannelPairingCode(params) {
-	const env = params.env ?? process.env;
-	const code = params.code.trim().toUpperCase();
-	if (!code) return null;
-	const filePath = resolvePairingPath(params.channel, env);
-	return await withFileLock(filePath, {
-		version: 1,
-		requests: []
-	}, async () => {
-		const { requests: pruned, removed } = await readPrunedPairingRequests(filePath);
-		const normalizedAccountId = normalizePairingAccountId(params.accountId);
-		const idx = pruned.findIndex((r) => {
-			if (String(r.code ?? "").toUpperCase() !== code) return false;
-			return requestMatchesAccountId(r, normalizedAccountId);
-		});
-		if (idx < 0) {
-			if (removed) await writeJsonFile(filePath, {
-				version: 1,
-				requests: pruned
-			});
-			return null;
-		}
-		const entry = pruned[idx];
-		if (!entry) return null;
-		pruned.splice(idx, 1);
-		await writeJsonFile(filePath, {
-			version: 1,
-			requests: pruned
-		});
-		const entryAccountId = String(entry.meta?.accountId ?? "").trim() || void 0;
-		await addChannelAllowFromStoreEntry({
-			channel: params.channel,
-			entry: entry.id,
-			accountId: params.accountId?.trim() || entryAccountId,
-			env
-		});
-		return {
-			id: entry.id,
-			entry
-		};
-	});
-}
-
-//#endregion
-export { readChannelAllowFromStoreSync as a, getPairingAdapter as c, readChannelAllowFromStore as i, listPairingChannels as l, approveChannelPairingCode as n, removeChannelAllowFromStoreEntry as o, listChannelPairingRequests as r, upsertChannelPairingRequest as s, addChannelAllowFromStoreEntry as t, notifyPairingApproved as u };