weaver-work-cli 0.1.29 → 0.1.31

package/dist/chunks/chunk-LUSPKZKY.js

@@ -0,0 +1,53 @@
+import { createRequire as __esbuildCreateRequire } from 'node:module';
+const require = __esbuildCreateRequire(import.meta.url);
+
+// src/core/errors.ts
+var CliError = class extends Error {
+  exitCode;
+  constructor(message, exitCode = 1 /* GeneralError */) {
+    super(message);
+    this.name = "CliError";
+    this.exitCode = exitCode;
+  }
+};
+function isCliError(error) {
+  return error instanceof CliError;
+}
+function isStructuredError(error) {
+  return Boolean(
+    error && typeof error === "object" && "type" in error && "subtype" in error && "message" in error && typeof error.type === "string" && typeof error.subtype === "string" && typeof error.message === "string"
+  );
+}
+function toErrorEnvelope(error) {
+  if (isStructuredError(error)) {
+    return {
+      type: error.type,
+      subtype: error.subtype,
+      ...error.code === void 0 ? {} : { code: error.code },
+      message: error.message,
+      retryable: error.retryable ?? false,
+      ...error.stage ? { stage: error.stage } : {},
+      ...error.details === void 0 ? {} : { details: error.details }
+    };
+  }
+  if (isCliError(error)) {
+    return {
+      type: error.exitCode === 3 /* AuthError */ ? "authentication" : "cli",
+      subtype: error.exitCode === 2 /* UsageError */ ? "usage" : "error",
+      message: error.message,
+      retryable: false
+    };
+  }
+  return {
+    type: "internal",
+    subtype: "unexpected",
+    message: error instanceof Error ? error.message : String(error),
+    retryable: false
+  };
+}
+
+export {
+  CliError,
+  isCliError,
+  toErrorEnvelope
+};

package/dist/chunks/chunk-NIAJ5ZCG.js

@@ -0,0 +1,73 @@
+import { createRequire as __esbuildCreateRequire } from 'node:module';
+const require = __esbuildCreateRequire(import.meta.url);
+import {
+  esbValidationError
+} from "./chunk-GPMFD4RD.js";
+
+// src/shortcuts/esb/continuation.ts
+import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+import { existsSync } from "node:fs";
+import { chmod, mkdir, readFile, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { resolve } from "node:path";
+function stateRoot(ctx) {
+  const configured = ctx?.config?.path();
+  if (configured) return resolve(configured, "..");
+  return process.env.WEAVER_WORK_CLI_HOME || process.env.WORK_CLI_HOME || resolve(homedir(), ".weaver-work-cli");
+}
+async function loadKey(ctx) {
+  const keysDir = resolve(stateRoot(ctx), "keys");
+  const filename = resolve(keysDir, "esb-continuation.key");
+  await mkdir(keysDir, { recursive: true, mode: 448 });
+  if (existsSync(filename)) return readFile(filename);
+  const key = randomBytes(32);
+  try {
+    await writeFile(filename, key, { flag: "wx", mode: 384 });
+    if (process.platform !== "win32") await chmod(filename, 384).catch(() => void 0);
+    return key;
+  } catch {
+    return readFile(filename);
+  }
+}
+function encode(value) {
+  return Buffer.from(JSON.stringify(value)).toString("base64url");
+}
+function signature(payload, key) {
+  return createHmac("sha256", key).update(payload).digest("base64url");
+}
+function createEsbContinuationSigner(ctx) {
+  return {
+    async issue(payload, ttlMs = 10 * 6e4) {
+      const issuedAt = Date.now();
+      const body = encode({ ...payload, issuedAt, expiresAt: issuedAt + ttlMs });
+      const sig = signature(body, await loadKey(ctx));
+      return `${body}.${sig}`;
+    },
+    async verify(token, expectedOperation) {
+      if (typeof token !== "string" || !token.includes(".")) {
+        throw esbValidationError("continuation_invalid", "continuation \u65E0\u6548");
+      }
+      const [body, provided] = token.split(".");
+      const expected = signature(body, await loadKey(ctx));
+      const valid = provided.length === expected.length && timingSafeEqual(Buffer.from(provided), Buffer.from(expected));
+      if (!valid) throw esbValidationError("continuation_invalid", "continuation \u7B7E\u540D\u6821\u9A8C\u5931\u8D25");
+      let value;
+      try {
+        value = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
+      } catch {
+        throw esbValidationError("continuation_invalid", "continuation \u5185\u5BB9\u65E0\u6CD5\u89E3\u6790");
+      }
+      if (value.operation !== expectedOperation) {
+        throw esbValidationError("continuation_mismatch", "continuation \u4E0D\u5C5E\u4E8E\u5F53\u524D\u64CD\u4F5C");
+      }
+      if (!Number.isSafeInteger(value.expiresAt) || value.expiresAt < Date.now()) {
+        throw esbValidationError("continuation_expired", "continuation \u5DF2\u8FC7\u671F");
+      }
+      return value;
+    }
+  };
+}
+
+export {
+  createEsbContinuationSigner
+};