switchroom 0.18.14 → 0.18.15

package/dist/auth-broker/index.js

@@ -18118,13 +18118,51 @@ import * as constants2 from "node:constants";
 import { createHash as createHash2 } from "node:crypto";
 import { dirname as dirname3, join as join8, resolve as resolve9 } from "node:path";
 
-// src/agents/compose.ts
-import { createHash } from "node:crypto";
-
 // src/agents/scaffold.ts
 import { join as join4, resolve as resolve5 } from "node:path";
 init_atomic();
 
+// src/agents/agent-uid.ts
+import { createHash } from "node:crypto";
+
+// src/broker-common/peercred-path.ts
+function matchSocketName(socketPath, patterns, maxNameLen) {
+  if (typeof socketPath !== "string" || socketPath.length === 0)
+    return null;
+  let name = null;
+  for (const re of patterns) {
+    const m = socketPath.match(re);
+    if (m && typeof m[1] === "string") {
+      name = m[1];
+      break;
+    }
+  }
+  if (name === null || name.length === 0)
+    return null;
+  if (maxNameLen !== undefined && name.length > maxNameLen)
+    return null;
+  return name;
+}
+
+// src/vault/broker/peercred.ts
+var RESERVED_AGENT_NAMES = new Set(["operator", "hostd"]);
+function isReservedAgentName(name) {
+  return RESERVED_AGENT_NAMES.has(name);
+}
+
+// src/agents/agent-uid.ts
+var AGENT_UID_MIN = 10001;
+var AGENT_UID_MAX = 10999;
+function allocateAgentUid(name) {
+  if (isReservedAgentName(name)) {
+    throw new Error(`agent name '${name}' is reserved by switchroom for another identity kind ` + `(see vault/broker/peercred.ts:RESERVED_AGENT_NAMES). Pick a different name.`);
+  }
+  const hash = createHash("sha256").update(name).digest();
+  const u32 = hash.readUInt32BE(0);
+  const range = AGENT_UID_MAX - AGENT_UID_MIN + 1;
+  return AGENT_UID_MIN + u32 % range;
+}
+
 // src/config/timezone.ts
 var CONTAINER_DEFAULT_UTC_ZONES = new Set([
   "UTC",
@@ -18268,31 +18306,6 @@ var SCRYPT_MAXMEM = 128 * 1024 * 1024;
 import { homedir as homedir3 } from "node:os";
 import { join as join3 } from "node:path";
 
-// src/broker-common/peercred-path.ts
-function matchSocketName(socketPath, patterns, maxNameLen) {
-  if (typeof socketPath !== "string" || socketPath.length === 0)
-    return null;
-  let name = null;
-  for (const re of patterns) {
-    const m = socketPath.match(re);
-    if (m && typeof m[1] === "string") {
-      name = m[1];
-      break;
-    }
-  }
-  if (name === null || name.length === 0)
-    return null;
-  if (maxNameLen !== undefined && name.length > maxNameLen)
-    return null;
-  return name;
-}
-
-// src/vault/broker/peercred.ts
-var RESERVED_AGENT_NAMES = new Set(["operator", "hostd"]);
-function isReservedAgentName(name) {
-  return RESERVED_AGENT_NAMES.has(name);
-}
-
 // src/vault/broker/protocol.ts
 var MAX_FRAME_BYTES = 64 * 1024;
 var AgentNameSchema = exports_external.string().min(1).max(64, "agent name max 64 chars").regex(/^[a-zA-Z0-9][a-zA-Z0-9_-]*$/, "agent name must be kebab-case ASCII (alnum + _- only, first char alnum)").refine((s) => !isReservedAgentName(s), {
@@ -18634,17 +18647,6 @@ var DOCKER_TELEGRAM_PLUGIN_PATH = "/opt/switchroom/telegram-plugin";
 var DOCKER_HOOKS_PATH = `${DOCKER_TELEGRAM_PLUGIN_PATH}/hooks`;
 
 // src/agents/compose.ts
-var AGENT_UID_MIN = 10001;
-var AGENT_UID_MAX = 10999;
-function allocateAgentUid(name) {
-  if (isReservedAgentName(name)) {
-    throw new Error(`agent name '${name}' is reserved by switchroom for another identity kind ` + `(see vault/broker/peercred.ts:RESERVED_AGENT_NAMES). Pick a different name.`);
-  }
-  const hash = createHash("sha256").update(name).digest();
-  const u32 = hash.readUInt32BE(0);
-  const range = AGENT_UID_MAX - AGENT_UID_MIN + 1;
-  return AGENT_UID_MIN + u32 % range;
-}
 var BIND_MOUNT_EXACT_SOURCE_DENY = new Set(["/var/run/docker.sock"]);
 
 // src/auth/quota.ts