workbite 0.1.19 → 0.1.21

package/lib/boot-provenance.js

@@ -1,54 +1,54 @@
-'use strict';
-const fs = require('node:fs/promises');
-const path = require('node:path');
-const { execFile } = require('node:child_process');
-// WMI LastBootUpTime is the OS boot time, not wall-clock minus uptime:
-// https://learn.microsoft.com/en-us/windows/win32/cimwin32prov/win32-operatingsystem
-// Use the framework WMI API directly, with no profile, PATH or module lookup.
-const SCRIPT = String.raw`$ErrorActionPreference='Stop'
-Add-Type -AssemblyName System.Management
-$q = [System.Management.ManagementObjectSearcher]::new('SELECT LastBootUpTime FROM Win32_OperatingSystem')
-try {
-  $rows = @($q.Get())
-  if ($rows.Count -ne 1) { throw 'ambiguous operating system' }
-  $r = $rows[0]
-  $t = [System.Management.ManagementDateTimeConverter]::ToDateTime([string]$r.LastBootUpTime).ToUniversalTime().Ticks
-  $key = [Microsoft.Win32.Registry]::LocalMachine.OpenSubKey('SOFTWARE\Microsoft\Cryptography')
-  try { $hostId = [string]$key.GetValue('MachineGuid') } finally { $key.Dispose() }
-  [Console]::Out.Write($hostId.ToLowerInvariant() + ':' + $t.ToString([Globalization.CultureInfo]::InvariantCulture))
-} finally { $q.Dispose() }`;
-function validBoot(value) {
-  return value && typeof value === 'object' && !Array.isArray(value) && Object.keys(value).length === 3
-    && value.host !== '0'.repeat(32) && value.id !== '00000000-0000-0000-0000-000000000000'
-    && typeof value.host === 'string' && /^[0-9a-f]{32}$/.test(value.host)
-    && typeof value.id === 'string'
-    && ((value.source === 'linux-boot-id' && /^[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}$/.test(value.id))
-      || (value.source === 'windows-wmi-boot-time' && /^[1-9][0-9]{17}$/.test(value.id)));
-}
-async function bootIdentity({ platform = process.platform, environment = process.env, execImpl = execFile,
-  readImpl = fs.readFile } = {}) {
-  let result;
-  try {
-    if (platform === 'linux') result = { source: 'linux-boot-id',
-      host: (await readImpl('/etc/machine-id', 'utf8')).trim(),
-      id: (await readImpl('/proc/sys/kernel/random/boot_id', 'utf8')).trim() };
-    else if (platform === 'win32') {
-      const root = environment.SystemRoot || environment.SYSTEMROOT || 'C:\\Windows';
-      if (!/^[A-Za-z]:\\[^\x00-\x1f"*?<>|]*$/.test(root)) return null;
-      const id = await new Promise(resolve => execImpl(path.win32.join(root, 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe'),
-        ['-NoLogo', '-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(SCRIPT, 'utf16le').toString('base64')],
-        { env: { SystemRoot: root }, shell: false, windowsHide: true, timeout: 5000, maxBuffer: 4096, encoding: 'utf8' },
-        (error, stdout) => resolve(error ? '' : String(stdout).trim())));
-      const [host, ticks, extra] = id.split(':');
-      if (extra !== undefined || !/^[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}$/.test(host || '')) return null;
-      result = { source: 'windows-wmi-boot-time', host: host.replace(/-/g, ''), id: ticks };
-    }
-  } catch { return null; }
-  return validBoot(result) ? result : null;
-}
-function previousBoot(saved, current) {
-  if (!validBoot(saved) || !validBoot(current) || saved.source !== current.source || saved.host !== current.host) return false;
-  if (saved.source === 'linux-boot-id') return saved.id !== current.id;
-  return BigInt(saved.id) < BigInt(current.id);
-}
-module.exports = { bootIdentity, validBoot, previousBoot };
+'use strict';
+const fs = require('node:fs/promises');
+const path = require('node:path');
+const { execFile } = require('node:child_process');
+// WMI LastBootUpTime is the OS boot time, not wall-clock minus uptime:
+// https://learn.microsoft.com/en-us/windows/win32/cimwin32prov/win32-operatingsystem
+// Use the framework WMI API directly, with no profile, PATH or module lookup.
+const SCRIPT = String.raw`$ErrorActionPreference='Stop'
+Add-Type -AssemblyName System.Management
+$q = [System.Management.ManagementObjectSearcher]::new('SELECT LastBootUpTime FROM Win32_OperatingSystem')
+try {
+  $rows = @($q.Get())
+  if ($rows.Count -ne 1) { throw 'ambiguous operating system' }
+  $r = $rows[0]
+  $t = [System.Management.ManagementDateTimeConverter]::ToDateTime([string]$r.LastBootUpTime).ToUniversalTime().Ticks
+  $key = [Microsoft.Win32.Registry]::LocalMachine.OpenSubKey('SOFTWARE\Microsoft\Cryptography')
+  try { $hostId = [string]$key.GetValue('MachineGuid') } finally { $key.Dispose() }
+  [Console]::Out.Write($hostId.ToLowerInvariant() + ':' + $t.ToString([Globalization.CultureInfo]::InvariantCulture))
+} finally { $q.Dispose() }`;
+function validBoot(value) {
+  return value && typeof value === 'object' && !Array.isArray(value) && Object.keys(value).length === 3
+    && value.host !== '0'.repeat(32) && value.id !== '00000000-0000-0000-0000-000000000000'
+    && typeof value.host === 'string' && /^[0-9a-f]{32}$/.test(value.host)
+    && typeof value.id === 'string'
+    && ((value.source === 'linux-boot-id' && /^[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}$/.test(value.id))
+      || (value.source === 'windows-wmi-boot-time' && /^[1-9][0-9]{17}$/.test(value.id)));
+}
+async function bootIdentity({ platform = process.platform, environment = process.env, execImpl = execFile,
+  readImpl = fs.readFile } = {}) {
+  let result;
+  try {
+    if (platform === 'linux') result = { source: 'linux-boot-id',
+      host: (await readImpl('/etc/machine-id', 'utf8')).trim(),
+      id: (await readImpl('/proc/sys/kernel/random/boot_id', 'utf8')).trim() };
+    else if (platform === 'win32') {
+      const root = environment.SystemRoot || environment.SYSTEMROOT || 'C:\\Windows';
+      if (!/^[A-Za-z]:\\[^\x00-\x1f"*?<>|]*$/.test(root)) return null;
+      const id = await new Promise(resolve => execImpl(path.win32.join(root, 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe'),
+        ['-NoLogo', '-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(SCRIPT, 'utf16le').toString('base64')],
+        { env: { SystemRoot: root }, shell: false, windowsHide: true, timeout: 5000, maxBuffer: 4096, encoding: 'utf8' },
+        (error, stdout) => resolve(error ? '' : String(stdout).trim())));
+      const [host, ticks, extra] = id.split(':');
+      if (extra !== undefined || !/^[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}$/.test(host || '')) return null;
+      result = { source: 'windows-wmi-boot-time', host: host.replace(/-/g, ''), id: ticks };
+    }
+  } catch { return null; }
+  return validBoot(result) ? result : null;
+}
+function previousBoot(saved, current) {
+  if (!validBoot(saved) || !validBoot(current) || saved.source !== current.source || saved.host !== current.host) return false;
+  if (saved.source === 'linux-boot-id') return saved.id !== current.id;
+  return BigInt(saved.id) < BigInt(current.id);
+}
+module.exports = { bootIdentity, validBoot, previousBoot };