xaq-cli 0.0.0 → 0.1.0-nightly.71

package/dist/send-Dk-t8ia-.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send-Dk-t8ia-.js","names":[],"sources":["../server/webhooks/send.ts"],"sourcesContent":["import { createHmac, randomBytes } from \"node:crypto\";\nimport http from \"node:http\";\nimport https from \"node:https\";\nimport type { LookupFunction } from \"node:net\";\nimport type { ResolvedTarget } from \"./ssrf.ts\";\n\n/** Standard Webhooks secret: \"whsec_\" + base64 of 24 random bytes. */\nexport const newSecret = (): string => `whsec_${randomBytes(24).toString(\"base64\")}`;\n/** \"whsec_\" plus 4 characters: enough to tell secrets apart, too little to help guess one. */\nexport const secretPrefix = (secret: string): string => secret.slice(0, 10);\n\n/**\n * Standard Webhooks signature (https://www.standardwebhooks.com): base64 HMAC-SHA256 over\n * \"{id}.{timestamp}.{body}\", keyed with the base64-decoded part of the secret after \"whsec_\".\n */\nexport function sign(secret: string, id: string, timestamp: number, body: string): string {\n  const key = Buffer.from(secret.startsWith(\"whsec_\") ? secret.slice(6) : secret, \"base64\");\n  return `v1,${createHmac(\"sha256\", key).update(`${id}.${timestamp}.${body}`).digest(\"base64\")}`;\n}\n\nexport interface SendResult {\n  statusCode: number | null;\n  /** First 500 characters of the response body. */\n  response: string | null;\n  error: string | null;\n  durationMs: number;\n}\n\nconst MAX_RESPONSE_BYTES = 64 * 1024;\nconst RESPONSE_CHARS = 500;\n\n/**\n * POSTs the body to `url`, connecting only to the pre-validated `target` address (TLS still\n * verifies the URL's hostname). Never follows redirects and never throws.\n */\nexport function postPinned(\n  url: URL,\n  target: ResolvedTarget,\n  headers: Record<string, string>,\n  body: string,\n  opts: { timeoutMs: number; signal?: AbortSignal },\n): Promise<SendResult> {\n  const started = performance.now();\n  const lookup: LookupFunction = (_hostname, options, cb) => {\n    if (options.all) cb(null, [{ address: target.address, family: target.family }]);\n    else cb(null, target.address, target.family);\n  };\n  const signal = opts.signal ? AbortSignal.any([opts.signal, AbortSignal.timeout(opts.timeoutMs)]) : AbortSignal.timeout(opts.timeoutMs);\n  const mod = url.protocol === \"https:\" ? https : http;\n\n  return new Promise<SendResult>((resolve) => {\n    let settled = false;\n    const done = (r: Omit<SendResult, \"durationMs\">) => {\n      if (settled) return;\n      settled = true;\n      resolve({ ...r, durationMs: Math.round(performance.now() - started) });\n    };\n    const req = mod.request(\n      url,\n      {\n        method: \"POST\",\n        headers: { ...headers, \"content-length\": String(Buffer.byteLength(body)) },\n        lookup,\n        signal,\n        agent: false,\n      },\n      (res) => {\n        const chunks: Buffer[] = [];\n        let size = 0;\n        res.on(\"data\", (chunk: Buffer) => {\n          if (size < MAX_RESPONSE_BYTES) chunks.push(chunk);\n          size += chunk.length;\n        });\n        res.on(\"error\", (err) => done({ statusCode: res.statusCode ?? null, response: null, error: describe(err, opts.timeoutMs) }));\n        res.on(\"close\", () => {\n          if (!res.complete) done({ statusCode: res.statusCode ?? null, response: null, error: signal.aborted ? describe(signal.reason as Error, opts.timeoutMs) : \"Response was cut off\" });\n        });\n        res.on(\"end\", () => {\n          const status = res.statusCode ?? 0;\n          const text = Buffer.concat(chunks).toString(\"utf8\").slice(0, RESPONSE_CHARS);\n          let error: string | null = null;\n          if (status >= 300 && status < 400) {\n            const location = res.headers.location;\n            error = `Receiver redirected (${status}${location ? ` to ${location}` : \"\"}); redirects are not followed, point the webhook at the final URL`;\n          } else if (status < 200 || status >= 300) {\n            error = `Receiver responded ${status}${res.statusMessage ? ` ${res.statusMessage}` : \"\"}`;\n          }\n          done({ statusCode: status, response: text || null, error });\n        });\n      },\n    );\n    req.on(\"error\", (err) => done({ statusCode: null, response: null, error: describe(err, opts.timeoutMs) }));\n    req.end(body);\n  });\n}\n\nfunction describe(err: Error, timeoutMs: number): string {\n  const code = (err as NodeJS.ErrnoException).code;\n  const cause = (err as { cause?: unknown }).cause;\n  if (err.name === \"AbortError\" && cause instanceof Error && cause.name === \"TimeoutError\") return `Timed out after ${timeoutMs / 1000} s`;\n  if (err.name === \"TimeoutError\") return `Timed out after ${timeoutMs / 1000} s`;\n  if (code === \"ECONNREFUSED\") return \"Connection refused\";\n  if (code === \"ECONNRESET\") return \"Connection reset by the receiver\";\n  return code ? `${err.message} (${code})` : err.message;\n}\n"],"mappings":";;;;;;AAOA,MAAa,kBAA0B,SAAS,YAAY,EAAE,CAAC,CAAC,SAAS,QAAQ;;AAEjF,MAAa,gBAAgB,WAA2B,OAAO,MAAM,GAAG,EAAE;;;;;AAM1E,SAAgB,KAAK,QAAgB,IAAY,WAAmB,MAAsB;CACxF,MAAM,MAAM,OAAO,KAAK,OAAO,WAAW,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,QAAQ,QAAQ;CACxF,OAAO,MAAM,WAAW,UAAU,GAAG,CAAC,CAAC,OAAO,GAAG,GAAG,GAAG,UAAU,GAAG,MAAM,CAAC,CAAC,OAAO,QAAQ;AAC7F;AAUA,MAAM,qBAAqB;AAC3B,MAAM,iBAAiB;;;;;AAMvB,SAAgB,WACd,KACA,QACA,SACA,MACA,MACqB;CACrB,MAAM,UAAU,YAAY,IAAI;CAChC,MAAM,UAA0B,WAAW,SAAS,OAAO;EACzD,IAAI,QAAQ,KAAK,GAAG,MAAM,CAAC;GAAE,SAAS,OAAO;GAAS,QAAQ,OAAO;EAAO,CAAC,CAAC;OACzE,GAAG,MAAM,OAAO,SAAS,OAAO,MAAM;CAC7C;CACA,MAAM,SAAS,KAAK,SAAS,YAAY,IAAI,CAAC,KAAK,QAAQ,YAAY,QAAQ,KAAK,SAAS,CAAC,CAAC,IAAI,YAAY,QAAQ,KAAK,SAAS;CACrI,MAAM,MAAM,IAAI,aAAa,WAAW,QAAQ;CAEhD,OAAO,IAAI,SAAqB,YAAY;EAC1C,IAAI,UAAU;EACd,MAAM,QAAQ,MAAsC;GAClD,IAAI,SAAS;GACb,UAAU;GACV,QAAQ;IAAE,GAAG;IAAG,YAAY,KAAK,MAAM,YAAY,IAAI,IAAI,OAAO;GAAE,CAAC;EACvE;EACA,MAAM,MAAM,IAAI,QACd,KACA;GACE,QAAQ;GACR,SAAS;IAAE,GAAG;IAAS,kBAAkB,OAAO,OAAO,WAAW,IAAI,CAAC;GAAE;GACzE;GACA;GACA,OAAO;EACT,IACC,QAAQ;GACP,MAAM,SAAmB,CAAC;GAC1B,IAAI,OAAO;GACX,IAAI,GAAG,SAAS,UAAkB;IAChC,IAAI,OAAO,oBAAoB,OAAO,KAAK,KAAK;IAChD,QAAQ,MAAM;GAChB,CAAC;GACD,IAAI,GAAG,UAAU,QAAQ,KAAK;IAAE,YAAY,IAAI,cAAc;IAAM,UAAU;IAAM,OAAO,SAAS,KAAK,KAAK,SAAS;GAAE,CAAC,CAAC;GAC3H,IAAI,GAAG,eAAe;IACpB,IAAI,CAAC,IAAI,UAAU,KAAK;KAAE,YAAY,IAAI,cAAc;KAAM,UAAU;KAAM,OAAO,OAAO,UAAU,SAAS,OAAO,QAAiB,KAAK,SAAS,IAAI;IAAuB,CAAC;GACnL,CAAC;GACD,IAAI,GAAG,aAAa;IAClB,MAAM,SAAS,IAAI,cAAc;IACjC,MAAM,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,MAAM,GAAG,cAAc;IAC3E,IAAI,QAAuB;IAC3B,IAAI,UAAU,OAAO,SAAS,KAAK;KACjC,MAAM,WAAW,IAAI,QAAQ;KAC7B,QAAQ,wBAAwB,SAAS,WAAW,OAAO,aAAa,GAAG;IAC7E,OAAO,IAAI,SAAS,OAAO,UAAU,KACnC,QAAQ,sBAAsB,SAAS,IAAI,gBAAgB,IAAI,IAAI,kBAAkB;IAEvF,KAAK;KAAE,YAAY;KAAQ,UAAU,QAAQ;KAAM;IAAM,CAAC;GAC5D,CAAC;EACH,CACF;EACA,IAAI,GAAG,UAAU,QAAQ,KAAK;GAAE,YAAY;GAAM,UAAU;GAAM,OAAO,SAAS,KAAK,KAAK,SAAS;EAAE,CAAC,CAAC;EACzG,IAAI,IAAI,IAAI;CACd,CAAC;AACH;AAEA,SAAS,SAAS,KAAY,WAA2B;CACvD,MAAM,OAAQ,IAA8B;CAC5C,MAAM,QAAS,IAA4B;CAC3C,IAAI,IAAI,SAAS,gBAAgB,iBAAiB,SAAS,MAAM,SAAS,gBAAgB,OAAO,mBAAmB,YAAY,IAAK;CACrI,IAAI,IAAI,SAAS,gBAAgB,OAAO,mBAAmB,YAAY,IAAK;CAC5E,IAAI,SAAS,gBAAgB,OAAO;CACpC,IAAI,SAAS,cAAc,OAAO;CAClC,OAAO,OAAO,GAAG,IAAI,QAAQ,IAAI,KAAK,KAAK,IAAI;AACjD"}