@gguf/claw
Version:
Multi-channel AI gateway with extensible messaging integrations
459 lines (455 loc) • 15.3 kB
JavaScript
import { Yt as resolveStateDir, pn as resolveRequiredHomeDir, qt as resolveOAuthDir, st as safeParseJson } from "./entry.js";
import { E as withFileLock$1 } from "./auth-profiles-DFa1zzNy.js";
import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-RqhjLCb6.js";
import os from "node:os";
import path from "node:path";
import fs from "node:fs";
import crypto from "node:crypto";
//#region src/channels/plugins/pairing.ts
function listPairingChannels() {
return listChannelPlugins().filter((plugin) => plugin.pairing).map((plugin) => plugin.id);
}
function getPairingAdapter(channelId) {
return getChannelPlugin(channelId)?.pairing ?? null;
}
function requirePairingAdapter(channelId) {
const adapter = getPairingAdapter(channelId);
if (!adapter) throw new Error(`Channel ${channelId} does not support pairing`);
return adapter;
}
async function notifyPairingApproved(params) {
const adapter = params.pairingAdapter ?? requirePairingAdapter(params.channelId);
if (!adapter.notifyApproval) return;
await adapter.notifyApproval({
cfg: params.cfg,
id: params.id,
runtime: params.runtime
});
}
//#endregion
//#region src/plugin-sdk/json-store.ts
async function readJsonFileWithFallback(filePath, fallback) {
try {
const parsed = safeParseJson(await fs.promises.readFile(filePath, "utf-8"));
if (parsed == null) return {
value: fallback,
exists: true
};
return {
value: parsed,
exists: true
};
} catch (err) {
if (err.code === "ENOENT") return {
value: fallback,
exists: false
};
return {
value: fallback,
exists: false
};
}
}
async function writeJsonFileAtomically(filePath, value) {
const dir = path.dirname(filePath);
await fs.promises.mkdir(dir, {
recursive: true,
mode: 448
});
const tmp = path.join(dir, `${path.basename(filePath)}.${crypto.randomUUID()}.tmp`);
await fs.promises.writeFile(tmp, `${JSON.stringify(value, null, 2)}\n`, { encoding: "utf-8" });
await fs.promises.chmod(tmp, 384);
await fs.promises.rename(tmp, filePath);
}
//#endregion
//#region src/pairing/pairing-store.ts
const PAIRING_CODE_LENGTH = 8;
const PAIRING_CODE_ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
const PAIRING_PENDING_TTL_MS = 3600 * 1e3;
const PAIRING_PENDING_MAX = 3;
const PAIRING_STORE_LOCK_OPTIONS = {
retries: {
retries: 10,
factor: 2,
minTimeout: 100,
maxTimeout: 1e4,
randomize: true
},
stale: 3e4
};
function resolveCredentialsDir(env = process.env) {
return resolveOAuthDir(env, resolveStateDir(env, () => resolveRequiredHomeDir(env, os.homedir)));
}
/** Sanitize channel ID for use in filenames (prevent path traversal). */
function safeChannelKey(channel) {
const raw = String(channel).trim().toLowerCase();
if (!raw) throw new Error("invalid pairing channel");
const safe = raw.replace(/[\\/:*?"<>|]/g, "_").replace(/\.\./g, "_");
if (!safe || safe === "_") throw new Error("invalid pairing channel");
return safe;
}
function resolvePairingPath(channel, env = process.env) {
return path.join(resolveCredentialsDir(env), `${safeChannelKey(channel)}-pairing.json`);
}
function safeAccountKey(accountId) {
const raw = String(accountId).trim().toLowerCase();
if (!raw) throw new Error("invalid pairing account id");
const safe = raw.replace(/[\\/:*?"<>|]/g, "_").replace(/\.\./g, "_");
if (!safe || safe === "_") throw new Error("invalid pairing account id");
return safe;
}
function resolveAllowFromPath(channel, env = process.env, accountId) {
const base = safeChannelKey(channel);
const normalizedAccountId = typeof accountId === "string" ? accountId.trim() : "";
if (!normalizedAccountId) return path.join(resolveCredentialsDir(env), `${base}-allowFrom.json`);
return path.join(resolveCredentialsDir(env), `${base}-${safeAccountKey(normalizedAccountId)}-allowFrom.json`);
}
async function readJsonFile(filePath, fallback) {
return await readJsonFileWithFallback(filePath, fallback);
}
async function writeJsonFile(filePath, value) {
await writeJsonFileAtomically(filePath, value);
}
async function readPairingRequests(filePath) {
const { value } = await readJsonFile(filePath, {
version: 1,
requests: []
});
return Array.isArray(value.requests) ? value.requests : [];
}
async function readPrunedPairingRequests(filePath) {
return pruneExpiredRequests(await readPairingRequests(filePath), Date.now());
}
async function ensureJsonFile(filePath, fallback) {
try {
await fs.promises.access(filePath);
} catch {
await writeJsonFile(filePath, fallback);
}
}
async function withFileLock(filePath, fallback, fn) {
await ensureJsonFile(filePath, fallback);
return await withFileLock$1(filePath, PAIRING_STORE_LOCK_OPTIONS, async () => {
return await fn();
});
}
function parseTimestamp(value) {
if (!value) return null;
const parsed = Date.parse(value);
if (!Number.isFinite(parsed)) return null;
return parsed;
}
function isExpired(entry, nowMs) {
const createdAt = parseTimestamp(entry.createdAt);
if (!createdAt) return true;
return nowMs - createdAt > PAIRING_PENDING_TTL_MS;
}
function pruneExpiredRequests(reqs, nowMs) {
const kept = [];
let removed = false;
for (const req of reqs) {
if (isExpired(req, nowMs)) {
removed = true;
continue;
}
kept.push(req);
}
return {
requests: kept,
removed
};
}
function resolveLastSeenAt(entry) {
return parseTimestamp(entry.lastSeenAt) ?? parseTimestamp(entry.createdAt) ?? 0;
}
function pruneExcessRequests(reqs, maxPending) {
if (maxPending <= 0 || reqs.length <= maxPending) return {
requests: reqs,
removed: false
};
return {
requests: reqs.slice().toSorted((a, b) => resolveLastSeenAt(a) - resolveLastSeenAt(b)).slice(-maxPending),
removed: true
};
}
function randomCode() {
let out = "";
for (let i = 0; i < PAIRING_CODE_LENGTH; i++) {
const idx = crypto.randomInt(0, 32);
out += PAIRING_CODE_ALPHABET[idx];
}
return out;
}
function generateUniqueCode(existing) {
for (let attempt = 0; attempt < 500; attempt += 1) {
const code = randomCode();
if (!existing.has(code)) return code;
}
throw new Error("failed to generate unique pairing code");
}
function normalizePairingAccountId(accountId) {
return accountId?.trim().toLowerCase() || "";
}
function requestMatchesAccountId(entry, normalizedAccountId) {
if (!normalizedAccountId) return true;
return String(entry.meta?.accountId ?? "").trim().toLowerCase() === normalizedAccountId;
}
function normalizeId(value) {
return String(value).trim();
}
function normalizeAllowEntry(channel, entry) {
const trimmed = entry.trim();
if (!trimmed) return "";
if (trimmed === "*") return "";
const adapter = getPairingAdapter(channel);
const normalized = adapter?.normalizeAllowEntry ? adapter.normalizeAllowEntry(trimmed) : trimmed;
return String(normalized).trim();
}
function normalizeAllowFromList(channel, store) {
return (Array.isArray(store.allowFrom) ? store.allowFrom : []).map((v) => normalizeAllowEntry(channel, String(v))).filter(Boolean);
}
function normalizeAllowFromInput(channel, entry) {
return normalizeAllowEntry(channel, normalizeId(entry));
}
function dedupePreserveOrder(entries) {
const seen = /* @__PURE__ */ new Set();
const out = [];
for (const entry of entries) {
const normalized = String(entry).trim();
if (!normalized || seen.has(normalized)) continue;
seen.add(normalized);
out.push(normalized);
}
return out;
}
async function readAllowFromStateForPath(channel, filePath) {
const { value } = await readJsonFile(filePath, {
version: 1,
allowFrom: []
});
return normalizeAllowFromList(channel, value);
}
function readAllowFromStateForPathSync(channel, filePath) {
try {
const raw = fs.readFileSync(filePath, "utf8");
return normalizeAllowFromList(channel, JSON.parse(raw));
} catch {
return [];
}
}
async function readAllowFromState(params) {
const { value } = await readJsonFile(params.filePath, {
version: 1,
allowFrom: []
});
return {
current: normalizeAllowFromList(params.channel, value),
normalized: normalizeAllowFromInput(params.channel, params.entry) || null
};
}
async function writeAllowFromState(filePath, allowFrom) {
await writeJsonFile(filePath, {
version: 1,
allowFrom
});
}
async function updateAllowFromStoreEntry(params) {
const env = params.env ?? process.env;
const filePath = resolveAllowFromPath(params.channel, env, params.accountId);
return await withFileLock(filePath, {
version: 1,
allowFrom: []
}, async () => {
const { current, normalized } = await readAllowFromState({
channel: params.channel,
entry: params.entry,
filePath
});
if (!normalized) return {
changed: false,
allowFrom: current
};
const next = params.apply(current, normalized);
if (!next) return {
changed: false,
allowFrom: current
};
await writeAllowFromState(filePath, next);
return {
changed: true,
allowFrom: next
};
});
}
async function readChannelAllowFromStore(channel, env = process.env, accountId) {
if (!(accountId?.trim().toLowerCase() ?? "")) return await readAllowFromStateForPath(channel, resolveAllowFromPath(channel, env));
const scopedEntries = await readAllowFromStateForPath(channel, resolveAllowFromPath(channel, env, accountId));
const legacyEntries = await readAllowFromStateForPath(channel, resolveAllowFromPath(channel, env));
return dedupePreserveOrder([...scopedEntries, ...legacyEntries]);
}
function readChannelAllowFromStoreSync(channel, env = process.env, accountId) {
if (!(accountId?.trim().toLowerCase() ?? "")) return readAllowFromStateForPathSync(channel, resolveAllowFromPath(channel, env));
const scopedEntries = readAllowFromStateForPathSync(channel, resolveAllowFromPath(channel, env, accountId));
const legacyEntries = readAllowFromStateForPathSync(channel, resolveAllowFromPath(channel, env));
return dedupePreserveOrder([...scopedEntries, ...legacyEntries]);
}
async function updateChannelAllowFromStore(params) {
return await updateAllowFromStoreEntry({
channel: params.channel,
entry: params.entry,
accountId: params.accountId,
env: params.env,
apply: params.apply
});
}
async function addChannelAllowFromStoreEntry(params) {
return await updateChannelAllowFromStore({
...params,
apply: (current, normalized) => {
if (current.includes(normalized)) return null;
return [...current, normalized];
}
});
}
async function removeChannelAllowFromStoreEntry(params) {
return await updateChannelAllowFromStore({
...params,
apply: (current, normalized) => {
const next = current.filter((entry) => entry !== normalized);
if (next.length === current.length) return null;
return next;
}
});
}
async function listChannelPairingRequests(channel, env = process.env, accountId) {
const filePath = resolvePairingPath(channel, env);
return await withFileLock(filePath, {
version: 1,
requests: []
}, async () => {
const { requests: prunedExpired, removed: expiredRemoved } = await readPrunedPairingRequests(filePath);
const { requests: pruned, removed: cappedRemoved } = pruneExcessRequests(prunedExpired, PAIRING_PENDING_MAX);
if (expiredRemoved || cappedRemoved) await writeJsonFile(filePath, {
version: 1,
requests: pruned
});
const normalizedAccountId = normalizePairingAccountId(accountId);
return (normalizedAccountId ? pruned.filter((entry) => requestMatchesAccountId(entry, normalizedAccountId)) : pruned).filter((r) => r && typeof r.id === "string" && typeof r.code === "string" && typeof r.createdAt === "string").slice().toSorted((a, b) => a.createdAt.localeCompare(b.createdAt));
});
}
async function upsertChannelPairingRequest(params) {
const env = params.env ?? process.env;
const filePath = resolvePairingPath(params.channel, env);
return await withFileLock(filePath, {
version: 1,
requests: []
}, async () => {
const now = (/* @__PURE__ */ new Date()).toISOString();
const nowMs = Date.now();
const id = normalizeId(params.id);
const normalizedAccountId = params.accountId?.trim();
const baseMeta = params.meta && typeof params.meta === "object" ? Object.fromEntries(Object.entries(params.meta).map(([k, v]) => [k, String(v ?? "").trim()]).filter(([_, v]) => Boolean(v))) : void 0;
const meta = normalizedAccountId ? {
...baseMeta,
accountId: normalizedAccountId
} : baseMeta;
let reqs = await readPairingRequests(filePath);
const { requests: prunedExpired, removed: expiredRemoved } = pruneExpiredRequests(reqs, nowMs);
reqs = prunedExpired;
const existingIdx = reqs.findIndex((r) => r.id === id);
const existingCodes = new Set(reqs.map((req) => String(req.code ?? "").trim().toUpperCase()));
if (existingIdx >= 0) {
const existing = reqs[existingIdx];
const code = (existing && typeof existing.code === "string" ? existing.code.trim() : "") || generateUniqueCode(existingCodes);
const next = {
id,
code,
createdAt: existing?.createdAt ?? now,
lastSeenAt: now,
meta: meta ?? existing?.meta
};
reqs[existingIdx] = next;
const { requests: capped } = pruneExcessRequests(reqs, PAIRING_PENDING_MAX);
await writeJsonFile(filePath, {
version: 1,
requests: capped
});
return {
code,
created: false
};
}
const { requests: capped, removed: cappedRemoved } = pruneExcessRequests(reqs, PAIRING_PENDING_MAX);
reqs = capped;
if (PAIRING_PENDING_MAX > 0 && reqs.length >= PAIRING_PENDING_MAX) {
if (expiredRemoved || cappedRemoved) await writeJsonFile(filePath, {
version: 1,
requests: reqs
});
return {
code: "",
created: false
};
}
const code = generateUniqueCode(existingCodes);
const next = {
id,
code,
createdAt: now,
lastSeenAt: now,
...meta ? { meta } : {}
};
await writeJsonFile(filePath, {
version: 1,
requests: [...reqs, next]
});
return {
code,
created: true
};
});
}
async function approveChannelPairingCode(params) {
const env = params.env ?? process.env;
const code = params.code.trim().toUpperCase();
if (!code) return null;
const filePath = resolvePairingPath(params.channel, env);
return await withFileLock(filePath, {
version: 1,
requests: []
}, async () => {
const { requests: pruned, removed } = await readPrunedPairingRequests(filePath);
const normalizedAccountId = normalizePairingAccountId(params.accountId);
const idx = pruned.findIndex((r) => {
if (String(r.code ?? "").toUpperCase() !== code) return false;
return requestMatchesAccountId(r, normalizedAccountId);
});
if (idx < 0) {
if (removed) await writeJsonFile(filePath, {
version: 1,
requests: pruned
});
return null;
}
const entry = pruned[idx];
if (!entry) return null;
pruned.splice(idx, 1);
await writeJsonFile(filePath, {
version: 1,
requests: pruned
});
const entryAccountId = String(entry.meta?.accountId ?? "").trim() || void 0;
await addChannelAllowFromStoreEntry({
channel: params.channel,
entry: entry.id,
accountId: params.accountId?.trim() || entryAccountId,
env
});
return {
id: entry.id,
entry
};
});
}
//#endregion
export { readChannelAllowFromStoreSync as a, getPairingAdapter as c, readChannelAllowFromStore as i, listPairingChannels as l, approveChannelPairingCode as n, removeChannelAllowFromStoreEntry as o, listChannelPairingRequests as r, upsertChannelPairingRequest as s, addChannelAllowFromStoreEntry as t, notifyPairingApproved as u };