token-goat 2.9.26 → 2.9.29

package/dist/token-goat-chunk-DPNLUJWB.mjs

@@ -0,0 +1,220 @@
+import { createRequire as __cjsRequire } from 'node:module';
+const require = __cjsRequire(import.meta.url);
+import {
+  configPath,
+  dataDir
+} from "./token-goat-chunk-MELOKFDJ.mjs";
+import {
+  init_define_import_meta_env
+} from "./token-goat-chunk-A37V4PBF.mjs";
+
+// src/hook_ipc.ts
+init_define_import_meta_env();
+import * as crypto from "node:crypto";
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+var PROTOCOL_VERSION = 1;
+var SERVER_SLOTS = 3;
+var MAX_FRAME_BYTES = 64 * 1024 * 1024;
+var KEY_BYTES = 32;
+function bundleDir() {
+  const dir = path.dirname(fileURLToPath(import.meta.url));
+  try {
+    return fs.realpathSync.native(dir);
+  } catch {
+    return dir;
+  }
+}
+function endpointId(dir) {
+  const fold = (p) => process.platform === "win32" ? p.toLowerCase() : p;
+  return crypto.createHash("sha256").update(`${fold(dir)}\0${fold(bundleDir())}`).digest("hex").slice(0, 16);
+}
+function endpointFor(slot, dir = dataDir()) {
+  const id = `${endpointId(dir)}-${slot}`;
+  if (process.platform === "win32") return String.raw`\\.\pipe\token-goat-hooks-` + id;
+  const inData = path.join(dir, `hooks-${id}.sock`);
+  if (Buffer.byteLength(inData) < 100) return inData;
+  const own = privateTempDir();
+  return own === void 0 ? inData : path.join(own, `${id}.sock`);
+}
+function privateTempDir() {
+  const uid = process.getuid?.();
+  if (uid === void 0) return void 0;
+  const own = path.join(os.tmpdir(), `token-goat-${uid}`);
+  try {
+    fs.mkdirSync(own, { mode: 448 });
+  } catch {
+  }
+  try {
+    const st = fs.lstatSync(own);
+    return st.isDirectory() && st.uid === uid && (st.mode & 63) === 0 ? own : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function serverKeyPath(dir = dataDir()) {
+  return path.join(dir, "hook-server.key");
+}
+function keyIsPrivate(st) {
+  if (process.platform === "win32") return true;
+  return (st.mode & 63) === 0 && (process.getuid === void 0 || st.uid === process.getuid());
+}
+function readServerKey(dir = dataDir()) {
+  try {
+    const p = serverKeyPath(dir);
+    if (!keyIsPrivate(fs.statSync(p))) return void 0;
+    const key = fs.readFileSync(p);
+    return key.length === KEY_BYTES ? key : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function ensureServerKey(dir = dataDir()) {
+  const p = serverKeyPath(dir);
+  for (let attempt = 0; attempt < 50; attempt++) {
+    const existing = readServerKey(dir);
+    if (existing !== void 0) return existing;
+    const fresh = crypto.randomBytes(KEY_BYTES);
+    try {
+      fs.mkdirSync(dir, { recursive: true });
+      fs.writeFileSync(p, fresh, { flag: "wx", mode: 384 });
+      return fresh;
+    } catch (e) {
+      if (e.code !== "EEXIST") throw e;
+      try {
+        const st = fs.statSync(p);
+        if (!keyIsPrivate(st) || st.size !== 0 && st.size !== KEY_BYTES || Date.now() - st.mtimeMs > 1e3) fs.rmSync(p, { force: true });
+      } catch {
+      }
+    }
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 10);
+  }
+  throw new Error(`could not establish ${p}`);
+}
+function nonce() {
+  return crypto.randomBytes(16).toString("hex");
+}
+function mac(key, ...parts) {
+  const h = crypto.createHmac("sha256", key);
+  for (const part of parts) h.update(`${Buffer.byteLength(part)}:`).update(part);
+  return h.digest("hex");
+}
+function macMatches(expected, actual) {
+  if (typeof actual !== "string" || actual.length !== expected.length) return false;
+  return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(actual));
+}
+function writeFrame(socket, message) {
+  socket.write(encodeFrame(message));
+}
+function encodeFrame(message) {
+  const body = Buffer.from(JSON.stringify(message), "utf8");
+  const header = Buffer.alloc(4);
+  header.writeUInt32BE(body.length, 0);
+  return Buffer.concat([header, body]);
+}
+function frameFits(frame) {
+  return frame.length - 4 <= MAX_FRAME_BYTES;
+}
+function readFrames(socket, onFrame, onError) {
+  let buffered = Buffer.alloc(0);
+  socket.on("data", (chunk) => {
+    buffered = buffered.length === 0 ? chunk : Buffer.concat([buffered, chunk]);
+    while (buffered.length >= 4) {
+      const len = buffered.readUInt32BE(0);
+      if (len > MAX_FRAME_BYTES) {
+        onError(new Error(`frame of ${len} bytes exceeds ${MAX_FRAME_BYTES}`));
+        socket.destroy();
+        return;
+      }
+      if (buffered.length < 4 + len) return;
+      const body = buffered.subarray(4, 4 + len);
+      buffered = buffered.subarray(4 + len);
+      let message;
+      try {
+        message = JSON.parse(body.toString("utf8"));
+      } catch (e) {
+        onError(e);
+        socket.destroy();
+        return;
+      }
+      if (message === null || typeof message !== "object" || Array.isArray(message)) {
+        onError(new Error("frame is not a JSON object"));
+        socket.destroy();
+        return;
+      }
+      onFrame(message);
+    }
+  });
+}
+function envSnapshot() {
+  const env = {};
+  for (const [k, v] of Object.entries(process.env)) if (v !== void 0) env[k] = v;
+  return env;
+}
+function markerPath(name, dir = dataDir()) {
+  return path.join(dir, `hook-server.${name}`);
+}
+function markerAgeMs(name, dir = dataDir()) {
+  try {
+    return Date.now() - fs.statSync(markerPath(name, dir)).mtimeMs;
+  } catch {
+    return Infinity;
+  }
+}
+function touchMarker(name, content = String(process.pid), dir = dataDir()) {
+  try {
+    fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(markerPath(name, dir), content);
+  } catch {
+  }
+}
+function configStamp() {
+  try {
+    return String(fs.statSync(configPath()).mtimeMs);
+  } catch {
+    return "absent";
+  }
+}
+function readMarker(name, dir = dataDir()) {
+  try {
+    return fs.readFileSync(markerPath(name, dir), "utf8");
+  } catch {
+    return void 0;
+  }
+}
+function removeMarker(name, dir = dataDir()) {
+  fs.rmSync(markerPath(name, dir), { force: true });
+}
+function bundleEntryFiles() {
+  const dir = bundleDir();
+  return ["token-goat.core.mjs", "token-goat-hook.mjs", "token-goat-hook-client.mjs", "token-goat-hook-client.cjs"].map((f) => path.join(dir, f));
+}
+function launcherPath() {
+  return path.join(bundleDir(), "token-goat.mjs");
+}
+
+export {
+  PROTOCOL_VERSION,
+  SERVER_SLOTS,
+  endpointFor,
+  serverKeyPath,
+  readServerKey,
+  ensureServerKey,
+  nonce,
+  mac,
+  macMatches,
+  writeFrame,
+  encodeFrame,
+  frameFits,
+  readFrames,
+  envSnapshot,
+  markerAgeMs,
+  touchMarker,
+  configStamp,
+  readMarker,
+  removeMarker,
+  bundleEntryFiles,
+  launcherPath
+};