wp-studio 1.8.1 → 1.8.2

package/dist/cli/{_events-BqUwL9Kk.mjs → _events-CA3tM4GV.mjs}

@@ -1,10 +1,10 @@
 import fs__default from "fs";
-import { L as LoggerError, c as Logger, y as socketEventSchema, S as SITE_EVENTS, f as SNAPSHOT_EVENTS, A as AUTH_EVENTS, r as readCliConfig, z as siteDetailsSchema } from "./certificate-manager-FOFTUHXy.mjs";
-import { h as isEmptyDir } from "./rewrite-wp-cli-post-content-BAJ-W0ra.mjs";
+import { L as LoggerError, c as Logger, y as socketEventSchema, S as SITE_EVENTS, f as SNAPSHOT_EVENTS, A as AUTH_EVENTS, r as readCliConfig, z as siteDetailsSchema } from "./certificate-manager-CNr2j_S-.mjs";
+import { e as isEmptyDir } from "./rewrite-wp-cli-post-content-Wfod7ZMk.mjs";
 import { s as sequential } from "./sequential-BQFuixXz.mjs";
-import { O as SITE_EVENTS_SOCKET_PATH, y as SiteCommandLoggerAction, D as connectToDaemon, Q as getDaemonBus, R as SITE_PROCESS_PREFIX, K as disconnectFromDaemon, T as removeSiteFromConfig, n as getSiteUrl, m as isSiteRunning } from "./index-DSF11Tac.mjs";
+import { Q as SITE_EVENTS_SOCKET_PATH, z as SiteCommandLoggerAction, E as connectToDaemon, R as getDaemonBus, T as SITE_PROCESS_PREFIX, L as disconnectFromDaemon, U as removeSiteFromConfig, n as getSiteUrl, m as isSiteRunning } from "./index-ByKye4Bc.mjs";
 import { __ } from "@wordpress/i18n";
-import { g as SocketServer } from "./process-manager-ipc-CBIoRMQx.mjs";
+import { g as SocketServer } from "./process-manager-ipc-BBMHcnj0.mjs";
 const logger = new Logger();
 function toSiteDetails(site) {
   return siteDetailsSchema.parse({

package/dist/cli/{appdata-DqQ7pZEM.mjs → appdata-TP18M7R7.mjs}

@@ -1,7 +1,7 @@
 import os from "os";
 import path__default from "path";
 import { __ } from "@wordpress/i18n";
-import { L as LoggerError } from "./certificate-manager-FOFTUHXy.mjs";
+import { L as LoggerError } from "./certificate-manager-CNr2j_S-.mjs";
 function getAppdataDirectory() {
   if (process.env.E2E && process.env.E2E_APP_DATA_PATH) {
     return path__default.join(process.env.E2E_APP_DATA_PATH, "Studio");

package/dist/cli/{certificate-manager-FOFTUHXy.mjs → certificate-manager-CNr2j_S-.mjs}

@@ -13,10 +13,11 @@ import { readFile, writeFile } from "atomically";
 import { Spinner } from "picospinner";
 import { execFile as execFile$1 } from "node:child_process";
 import crypto from "node:crypto";
-import fs from "node:fs";
+import fs, { mkdirSync, existsSync } from "node:fs";
 import path from "node:path";
 import { domainToASCII } from "node:url";
 import { promisify } from "node:util";
+import os$1 from "node:os";
 import sudo from "@vscode/sudo-prompt";
 import forge from "node-forge";
 function redirectPicospinnerToStderr() {
@@ -516,9 +517,9 @@ function requireLockfile() {
       var c = require$$1;
       wx = c.O_TRUNC | c.O_CREAT | c.O_WRONLY | c.O_EXCL;
     }
-    var os$1 = os;
+    var os$12 = os;
     exports$1.filetime = "ctime";
-    if (os$1.platform() == "win32") {
+    if (os$12.platform() == "win32") {
       exports$1.filetime = "mtime";
     }
     var debug;
@@ -906,6 +907,68 @@ async function updateCliConfigWithPartial(update) {
     await unlockCliConfig();
   }
 }
+const execFilePromise$1 = promisify(execFile$1);
+const LINUX_SYSTEM_CA_BUNDLE = "/etc/ssl/certs/ca-certificates.crt";
+const LINUX_TRUST_STORE_PATH = "/usr/local/share/ca-certificates/studio-ca.crt";
+const LINUX_NSS_NICKNAME = "WordPress Studio CA";
+async function isCATrustedOnLinux(caPath) {
+  try {
+    await execFilePromise$1("openssl", ["verify", "-CAfile", LINUX_SYSTEM_CA_BUNDLE, caPath]);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function isCAImportedInUserNssDbsLinux(homeDir = os$1.homedir()) {
+  for (const db of getLinuxNssDbCandidates(homeDir)) {
+    try {
+      await execFilePromise$1("certutil", ["-d", `sql:${db}`, "-L", "-n", LINUX_NSS_NICKNAME]);
+    } catch {
+      return false;
+    }
+  }
+  return true;
+}
+function buildLinuxTrustInstallCommand(caPath) {
+  return `install -m 0644 "${caPath}" "${LINUX_TRUST_STORE_PATH}" && update-ca-certificates`;
+}
+function getLinuxNssDbCandidates(homeDir = os$1.homedir()) {
+  const candidates = [path.join(homeDir, ".pki", "nssdb")];
+  const snapChromiumDataDir = path.join(homeDir, "snap", "chromium");
+  if (existsSync(snapChromiumDataDir)) {
+    candidates.push(path.join(snapChromiumDataDir, "current", ".pki", "nssdb"));
+  }
+  return candidates;
+}
+async function importCAIntoUserNssDbsLinux(caPath) {
+  for (const db of getLinuxNssDbCandidates()) {
+    try {
+      mkdirSync(db, { recursive: true });
+      await execFilePromise$1("certutil", [
+        "-d",
+        `sql:${db}`,
+        "-D",
+        "-n",
+        LINUX_NSS_NICKNAME
+      ]).catch(() => void 0);
+      await execFilePromise$1("certutil", [
+        "-d",
+        `sql:${db}`,
+        "-A",
+        "-t",
+        "C,,",
+        "-n",
+        LINUX_NSS_NICKNAME,
+        "-i",
+        caPath
+      ]);
+      console.log(`Imported Studio CA into NSS DB: ${db}`);
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      console.warn(`Could not import Studio CA into NSS DB ${db}: ${message}`);
+    }
+  }
+}
 const execFilePromise = promisify(execFile$1);
 function createNameConstraintsExtension(domains) {
   const asn1 = forge.asn1;
@@ -1023,6 +1086,8 @@ async function isRootCATrusted() {
     } catch (error) {
       return false;
     }
+  } else if (process.platform === "linux") {
+    return await isCATrustedOnLinux(CA_CERT_PATH) && await isCAImportedInUserNssDbsLinux();
   }
   return false;
 }
@@ -1049,6 +1114,25 @@ async function trustRootCA() {
           }
         );
       });
+    } else if (platform === "linux") {
+      if (!await isCATrustedOnLinux(CA_CERT_PATH)) {
+        await new Promise((resolve, reject) => {
+          sudo.exec(
+            buildLinuxTrustInstallCommand(CA_CERT_PATH),
+            { name: "WordPress Studio" },
+            (error) => {
+              if (error) {
+                console.error("Error adding certificate to system trust store:", error);
+                reject(error);
+              } else {
+                console.log("Root CA trusted in Linux system trust store");
+                resolve();
+              }
+            }
+          );
+        });
+      }
+      await importCAIntoUserNssDbsLinux(CA_CERT_PATH);
     } else {
       console.error("Unsupported platform for automatic certificate trust:", platform);
     }

package/dist/cli/{delete-DYMc-UPN.mjs → delete-C5ryUdly.mjs}

@@ -1,7 +1,7 @@
-import { l as listAiSessions, g as getAiSessionsRootDirectory, d as deleteAiSession } from "./paths-COkSp5Ak.mjs";
+import { l as listAiSessions, g as getAiSessionsRootDirectory, d as deleteAiSession } from "./paths-_AdJ6IVJ.mjs";
 import { __ } from "@wordpress/i18n";
-import { c as chooseSessionForAction } from "./helpers-ysd4ILYs.mjs";
-import { L as LoggerError, c as Logger } from "./certificate-manager-FOFTUHXy.mjs";
+import { c as chooseSessionForAction } from "./helpers-CydgKTE6.mjs";
+import { L as LoggerError, c as Logger } from "./certificate-manager-CNr2j_S-.mjs";
 const logger = new Logger();
 async function runCommand(sessionIdOrPrefix) {
   let resolvedSessionIdOrPrefix = sessionIdOrPrefix?.trim();

package/dist/cli/{helpers-ysd4ILYs.mjs → helpers-CydgKTE6.mjs}

@@ -1,7 +1,7 @@
 import { select } from "@inquirer/prompts";
 import { visibleWidth, truncateToWidth } from "@mariozechner/pi-tui";
-import { l as listAiSessions, g as getAiSessionsRootDirectory } from "./paths-COkSp5Ak.mjs";
-import { j as chalk } from "./index-DSF11Tac.mjs";
+import { l as listAiSessions, g as getAiSessionsRootDirectory } from "./paths-_AdJ6IVJ.mjs";
+import { j as chalk } from "./index-ByKye4Bc.mjs";
 import { __ } from "@wordpress/i18n";
 function formatSessionTimestamp(timestamp) {
   const parsed = Date.parse(timestamp);

package/dist/cli/{index-DZU_3nOB.mjs → index-BoStbQGq.mjs}

@@ -4,9 +4,9 @@ import path__default from "path";
 import { confirm } from "@inquirer/prompts";
 import { p as getAppConfigPath, e as getConfigDirectory, g as getServerFilesPath } from "./well-known-paths-kP8oHPED.mjs";
 import { __ } from "@wordpress/i18n";
-import { g as getAppdataDirectory } from "./appdata-DqQ7pZEM.mjs";
+import { g as getAppdataDirectory } from "./appdata-TP18M7R7.mjs";
 import fs from "node:fs";
-import { h as hideDirectoryOnWindows, x as isDirectoryHiddenOnWindows } from "./certificate-manager-FOFTUHXy.mjs";
+import { h as hideDirectoryOnWindows, x as isDirectoryHiddenOnWindows } from "./certificate-manager-CNr2j_S-.mjs";
 import os from "node:os";
 import path from "node:path";
 function isInstalledOnMacOs() {