sliftutils 1.7.131 → 1.7.133

package/security/signedFiles/dist/manifest.ts.cache

@@ -1,4 +1,4 @@
-"use strict"; var console = (function shimConsole() {             let baseConsole = globalThis.console;             if (typeof window !== "undefined")                 return baseConsole;             let name = __filename.replaceAll("\\", "/").split("/").pop();             let dirName = __dirname.replaceAll("\\", "/").split("/").pop();             let context = {                 __FILE__: __filename,                 __DIR__: __dirname,                 __NAME__: name,                 __DIRNAME__: dirName             };             let newConsole = {                 ...baseConsole             };             for (let shim of ["log", "info", "warn", "error"]) {                 newConsole[shim] = (...args) => {                     args.push(context);                     baseConsole[shim](...args);                 };             }             newConsole.__context = context;             return newConsole;         })(); "use strict";
+"use strict";
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule && mod.default) ? mod : { "default": mod };
 };
@@ -82,4 +82,4 @@ function formatManifest(manifest) {
 }
 exports.formatManifest = formatManifest;
 //# sourceMappingURL=data:application/json;base64,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
- /* _JS_SOURCE_HASH = "201e773734f1a3a4a276457669646f936d46b81026afab845e5b8161d1b4310d"; */
+ /* _JS_SOURCE_HASH = "e58787cb53d84ba9647f11c90c737f7303e120b8e02ca37cc9f38202fce1929d"; */

package/storage/backblaze.ts

@@ -562,6 +562,17 @@ export class ArchivesBackblaze implements IArchives {
         } catch (err: any) {
             if (retries <= 0) throw err;
 
+            // A file that does not exist is an answer, not a failure. It is the one error here that
+            // cannot become anything else by asking again, so it is thrown at once instead of being
+            // slept on twice - callers turn it into undefined, which is what they were asking.
+            if (
+                err.stack.includes(`"not_found"`)
+                || err.stack.includes(`file_not_found`)
+                || err.stack.includes(`"status": 404`)
+            ) {
+                throw err;
+            }
+
             // If it's a 503 and it's been a minute since we last reset, then Wait and reset.
             if (
                 (err.stack.includes(`"status": 503`)

package/bin/machineclient.js

@@ -1,9 +0,0 @@
-#!/usr/bin/env node
-"use strict";
-// Asks a server whether this machine is trusted.
-require("typenode");
-
-require("../security/machines/trustClient").main().catch(e => {
-    console.error(`${e}`);
-    process.exitCode = 1;
-}).finally(() => process.exit());

package/bin/machineserver.js

@@ -1,10 +0,0 @@
-#!/usr/bin/env node
-"use strict";
-// Answers whether the machine asking is trusted, from the address it is asking from.
-require("typenode");
-
-// No exit on success: this one is a server, and returning from main only means it is listening.
-require("../security/machines/trustServer").main().catch(e => {
-    console.error(`${e}`);
-    process.exit(1);
-});

package/security/machines/identity.ts

@@ -1,199 +0,0 @@
-import crypto from "crypto";
-import fs from "fs/promises";
-import os from "os";
-import path from "path";
-import { generateTestCA, getMachineId, identityStorageKey, IdentityStorageType, verifyMachineIdForPublicKey } from "../../misc/https/certs";
-import { runOverSSH, writeRemoteFile } from "../helpers/remoteSSH";
-
-// A machine's identity is the CA it generated for itself, kept in one file in the home directory
-// of whoever runs it. The name carries the domain it belongs to, so a machine can hold one per
-// domain, and the id itself is a hash of that CA's public key - which is why a machine cannot
-// claim to be another one without holding its key.
-const IDENTITY_PREFIX = "keystore_";
-const IDENTITY_SUFFIX = `_${identityStorageKey}.json`;
-// How stale a signed packet may be. Long enough for clock skew between two machines, short enough
-// that a captured packet is not worth replaying.
-export const PACKET_LIFETIME = 2 * 60 * 1000;
-
-export type Identity = {
-    machineId: string;
-    domain: string;
-    fullDomain: string;
-    fileName: string;
-};
-
-function identityFileName(domain: string) {
-    return `${IDENTITY_PREFIX}${domain}${IDENTITY_SUFFIX}`;
-}
-
-/** The domain out of an identity file's name, or "" if it is not one. */
-function domainOfFileName(fileName: string) {
-    if (!fileName.startsWith(IDENTITY_PREFIX) || !fileName.endsWith(IDENTITY_SUFFIX)) {
-        return "";
-    }
-    return fileName.slice(IDENTITY_PREFIX.length, -IDENTITY_SUFFIX.length);
-}
-
-function describeIdentity(config: { domain: string; stored: IdentityStorageType }) {
-    let { domain, stored } = config;
-    return {
-        machineId: getMachineId(stored.domain, domain),
-        domain,
-        fullDomain: stored.domain,
-        fileName: identityFileName(domain),
-    };
-}
-
-/** Every domain this machine holds an identity under. A machine has one identity per domain, and
-    they are different machine ids, so which one is meant is a real question rather than a detail. */
-export async function localDomains() {
-    let domains: string[] = [];
-    for (let name of (await fs.readdir(os.homedir()).catch(() => [] as string[])).sort()) {
-        let domain = domainOfFileName(name);
-        if (domain) {
-            domains.push(domain);
-        }
-    }
-    return domains;
-}
-
-/** This machine's identity under one domain. Undefined when it has none under that one.
-
-    The domain is required everywhere it appears. A machine has a different identity, and so a
-    different machine id, under every domain it runs under, so "this machine" on its own does not
-    name anything: answering under the wrong one means answering as a machine we are not. */
-export async function localIdentity(domain: string): Promise<Identity | undefined> {
-    if (!domain) {
-        throw new Error(`Expected a domain, was ${JSON.stringify(domain)}`);
-    }
-    let contents = await fs.readFile(path.join(os.homedir(), identityFileName(domain)), "utf8").catch(() => "");
-    if (!contents) {
-        return undefined;
-    }
-    return describeIdentity({ domain, stored: JSON.parse(contents) });
-}
-
-/** This machine's identity and its keys, for signing. */
-export async function localIdentityKeys(domain: string) {
-    let identity = await localIdentity(domain);
-    if (!identity) {
-        throw new Error(
-            `Expected an identity for ${domain} at ${path.join(os.homedir(), identityFileName(domain))},`
-            + ` there is none.\n`
-            + `This machine has: ${(await localDomains()).join(", ") || "no identities at all"}`
-        );
-    }
-    let stored: IdentityStorageType = JSON.parse(
-        await fs.readFile(path.join(os.homedir(), identity.fileName), "utf8")
-    );
-    return { identity, stored };
-}
-
-/** The identity of another machine under one domain, over ssh. Undefined when it has none under
-    that domain, whatever else it may have under others. */
-export async function remoteIdentity(host: string, domain: string): Promise<Identity | undefined> {
-    if (!domain) {
-        throw new Error(`Expected a domain, was ${JSON.stringify(domain)}`);
-    }
-    let home = (await runOverSSH({ host, script: `echo $HOME` })).stdout.trim();
-    if (!home) {
-        throw new Error(`Expected ${host} to report a home directory, it reported nothing`);
-    }
-    let contents = await runOverSSH({
-        host,
-        script: `cat ${home}/${identityFileName(domain)} 2>/dev/null || true`,
-    });
-    if (!contents.stdout.trim()) {
-        return undefined;
-    }
-    return describeIdentity({ domain, stored: JSON.parse(contents.stdout) });
-}
-
-/** Gives a machine an identity it does not have yet, by generating one here and writing it there.
-
-    The CA is self signed and never leaves that machine afterwards, so generating it here is only a
-    convenience: what matters is that the private key ends up in one place and the id is the hash
-    of its public half. */
-export async function createRemoteIdentity(config: { host: string; domain: string }) {
-    let { host, domain } = config;
-    let generated = generateTestCA(domain);
-    let stored: IdentityStorageType = {
-        domain: generated.domain,
-        certB64: generated.cert.toString("base64"),
-        keyB64: generated.key.toString("base64"),
-    };
-    let home = (await runOverSSH({ host, script: `echo $HOME` })).stdout.trim();
-    await writeRemoteFile({
-        host,
-        filePath: `${home}/${identityFileName(domain)}`,
-        contents: JSON.stringify(stored),
-        fileMode: "600",
-        // The home directory is already there, this is only what it is created with if it is not.
-        directoryMode: "700",
-    });
-    return describeIdentity({ domain, stored });
-}
-
-/** The raw ed25519 public key out of a certificate, which is what the machine id is a hash of. */
-function publicKeyBytes(certPEM: string) {
-    let spki = new crypto.X509Certificate(certPEM).publicKey.export({ type: "spki", format: "der" });
-    // An ed25519 SPKI is a fixed 12 byte header followed by the 32 byte key.
-    return spki.subarray(spki.length - 32);
-}
-
-export type TrustPacket = {
-    machineId: string;
-    certB64: string;
-    signedAt: number;
-    signatureB64: string;
-};
-
-/** Proves we hold the private key behind our machine id, right now. The signature covers the id
-    and the time, so the packet cannot be replayed later or reused for another id. */
-export async function signTrustPacket(domain: string): Promise<TrustPacket> {
-    let { identity, stored } = await localIdentityKeys(domain);
-    let signedAt = Date.now();
-    let signature = crypto.sign(
-        null,
-        Buffer.from(`${identity.machineId} ${signedAt}`),
-        crypto.createPrivateKey(Buffer.from(stored.keyB64, "base64").toString())
-    );
-    return {
-        machineId: identity.machineId,
-        certB64: stored.certB64,
-        signedAt,
-        signatureB64: signature.toString("base64"),
-    };
-}
-
-/** Whether a packet really came from the machine it names. Says why when it did not, because
-    "this is not that machine" and "this arrived too late" are different problems. */
-export function verifyTrustPacket(packet: TrustPacket) {
-    if (!packet || !packet.machineId || !packet.certB64 || !packet.signatureB64) {
-        return { valid: false, problem: "the packet is missing fields" };
-    }
-    if (Math.abs(Date.now() - packet.signedAt) > PACKET_LIFETIME) {
-        return { valid: false, problem: `it was signed ${Math.round((Date.now() - packet.signedAt) / 1000)}s ago` };
-    }
-    let certPEM = Buffer.from(packet.certB64, "base64").toString();
-    let publicKey: crypto.KeyObject;
-    try {
-        publicKey = new crypto.X509Certificate(certPEM).publicKey;
-    } catch (e) {
-        return { valid: false, problem: `its certificate could not be read, ${e}` };
-    }
-    // The id is a hash of the public key, so this is what stops a machine claiming another's id.
-    if (!verifyMachineIdForPublicKey({ machineId: packet.machineId, publicKey: publicKeyBytes(certPEM) })) {
-        return { valid: false, problem: "the machine id does not belong to that certificate" };
-    }
-    let signed = crypto.verify(
-        null,
-        Buffer.from(`${packet.machineId} ${packet.signedAt}`),
-        publicKey,
-        Buffer.from(packet.signatureB64, "base64")
-    );
-    if (!signed) {
-        return { valid: false, problem: "the signature does not check out" };
-    }
-    return { valid: true, problem: "" };
-}

package/security/machines/trustClient.ts

@@ -1,51 +0,0 @@
-import { signTrustPacket } from "./identity";
-
-// The other half of the demonstration: asks a server whether it trusts this machine. The answer
-// depends on the address this machine reaches the server from, which is why the client cannot
-// work it out alone.
-const TRUST_PATH = "/trusted";
-const USAGE = `Usage: yarn machineclient <url> <domain>
-
-Asks that server whether this machine is trusted, proving which machine it is with a signed packet.
-The server decides using the address we reach it from, so the answer is about how we are talking to
-it, not only about who we are.
-
-The domain is required: this machine has a different identity under each one, and the answer is
-about the identity we sign with.`;
-
-export type TrustAnswer = {
-    trusted: boolean;
-    machineId?: string;
-    ip?: string;
-    reason?: string;
-};
-
-/** Asks one server whether it trusts this machine, as it is under this domain. */
-export async function askIfTrusted(config: { baseURL: string; domain: string }): Promise<TrustAnswer> {
-    let { baseURL, domain } = config;
-    let packet = await signTrustPacket(domain);
-    let url = `${baseURL.replace(/\/+$/, "")}${TRUST_PATH}`;
-    let response = await fetch(url, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify(packet),
-    });
-    return await response.json() as TrustAnswer;
-}
-
-export async function main() {
-    let [baseURL, domain] = process.argv.slice(2);
-    if (!baseURL || !domain) {
-        throw new Error(USAGE);
-    }
-    let answer = await askIfTrusted({ baseURL, domain });
-    console.log(`${answer.trusted && "TRUSTED" || "NOT TRUSTED"} by ${baseURL}`);
-    console.log(`  machine ${answer.machineId || "(not established)"}`);
-    console.log(`  seen coming from ${answer.ip || "(unknown)"}`);
-    if (answer.reason) {
-        console.log(`  ${answer.reason}`);
-    }
-    if (!answer.trusted) {
-        process.exitCode = 1;
-    }
-}

package/security/machines/trustServer.ts

@@ -1,87 +0,0 @@
-import http from "http";
-import { verifyTrustPacket } from "./identity";
-import { isMachineAccepted } from "./machines";
-
-// A demonstration of machine trust, and the smallest thing that exercises it end to end: a client
-// proves which machine it is, and this answers whether that machine is trusted from the address it
-// is actually talking from.
-//
-// Plain http on purpose. Nothing here is secret - the packet proves who the client is by signature
-// rather than by the channel, and the answer is a yes or no about a machine the caller already
-// knows the id of.
-const DEFAULT_PORT = 47812;
-const TRUST_PATH = "/trusted";
-const MAX_BODY_LENGTH = 64 * 1024;
-
-/** The address the client is actually talking from. Not read from anything the client sent,
-    because that is the one half of the pair it must not get to choose. */
-function addressOf(request: http.IncomingMessage) {
-    let address = request.socket.remoteAddress || "";
-    // Node reports IPv4 over a dual stack socket this way.
-    return address.replace(/^::ffff:/, "");
-}
-
-async function readBody(request: http.IncomingMessage) {
-    let chunks: Buffer[] = [];
-    let length = 0;
-    for await (let chunk of request) {
-        length += chunk.length;
-        if (length > MAX_BODY_LENGTH) {
-            throw new Error(`Expected at most ${MAX_BODY_LENGTH} bytes, was more`);
-        }
-        chunks.push(chunk);
-    }
-    return Buffer.concat(chunks).toString("utf8");
-}
-
-export function startTrustServer(config: { port: number }) {
-    let server = http.createServer((request, response) => {
-        let answer = async () => {
-            if (request.url !== TRUST_PATH) {
-                return { status: 404, body: { error: `POST a trust packet to ${TRUST_PATH}` } };
-            }
-            let packet = JSON.parse(await readBody(request));
-            let ip = addressOf(request);
-            let verified = verifyTrustPacket(packet);
-            if (!verified.valid) {
-                // Not a rejection of the machine, a packet that does not prove anything about one.
-                return { status: 400, body: { trusted: false, ip, reason: verified.problem } };
-            }
-            let verdict = await isMachineAccepted({ machineId: packet.machineId, ip });
-            return {
-                status: 200,
-                body: {
-                    trusted: verdict.accepted,
-                    machineId: packet.machineId,
-                    ip,
-                    // Whatever the check itself said. It is the only thing that knows which of the
-                    // ways to be refused this was.
-                    reason: verdict.reason,
-                },
-            };
-        };
-        answer().then(result => {
-            console.log(`${request.method} ${request.url} from ${addressOf(request)}: ${JSON.stringify(result.body)}`);
-            response.writeHead(result.status, { "Content-Type": "application/json" });
-            response.end(JSON.stringify(result.body, undefined, 4));
-        }).catch(e => {
-            console.log(`${request.method} ${request.url} from ${addressOf(request)} failed. ${e}`);
-            response.writeHead(500, { "Content-Type": "application/json" });
-            response.end(JSON.stringify({ trusted: false, error: `${e}` }, undefined, 4));
-        });
-    });
-    server.listen(config.port);
-    return server;
-}
-
-export async function main() {
-    let port = Number(process.argv[2] || DEFAULT_PORT);
-    if (!Number.isFinite(port)) {
-        throw new Error(`Usage: yarn machineserver [port]`);
-    }
-    startTrustServer({ port });
-    console.log(`Answering trust checks on http://0.0.0.0:${port}${TRUST_PATH}`);
-    console.log(`A client asks with: yarn machineclient http://<this machine>:${port}`);
-    // Left running. Nothing else to do here, the server is the program.
-    await new Promise(() => { });
-}