toor
1e9ea89d86
Import the client, server, skills, tests, and build scripts as the starting point for the rebuild, then trim the surfaces this project does not ship: Electron desktop packaging, the marketing website, and the ESP32 firmware tree. CI keeps the web build, e2e, lockfile, release, and Docker workflows. Rename the package and CLI entry points to hermes-ui, drop the prepare hook so npm ci no longer triggers a build, and drop the removed tsconfig and nodemon references. Rewrite AGENTS.md, ARCHITECTURE.md, DEVELOPMENT.md, and the READMEs so the documented package map and hard rules match this repository. reference_code/ is ignored: it is a read-only snapshot, not an input to the build.
116 lines
3.5 KiB
TypeScript
116 lines
3.5 KiB
TypeScript
import { arch, hostname, platform, release, type } from 'os'
|
|
import { generateKeyPairSync, sign } from 'crypto'
|
|
import { mkdtempSync, rmSync } from 'fs'
|
|
import { tmpdir } from 'os'
|
|
import { join } from 'path'
|
|
import { afterEach, describe, expect, it, vi } from 'vitest'
|
|
|
|
async function loadSystemInfoWithInjectedVersion(version?: string) {
|
|
vi.resetModules()
|
|
const appHome = mkdtempSync(join(tmpdir(), 'hermes-system-info-test-'))
|
|
if (version === undefined) {
|
|
delete (globalThis as any).__APP_VERSION__
|
|
} else {
|
|
;(globalThis as any).__APP_VERSION__ = version
|
|
}
|
|
|
|
vi.doMock('../../packages/server/src/services/hermes/hermes-cli', () => ({
|
|
getVersion: vi.fn().mockResolvedValue('Hermes Agent v0.15.2\n'),
|
|
}))
|
|
|
|
vi.doMock('../../packages/server/src/config', () => ({
|
|
config: {
|
|
appHome,
|
|
port: 8648,
|
|
host: '0.0.0.0',
|
|
uploadDir: join(appHome, 'upload'),
|
|
dataDir: join(appHome, 'data'),
|
|
corsOrigins: '',
|
|
},
|
|
}))
|
|
|
|
const mod = await import('../../packages/server/src/services/system-info')
|
|
return { ...mod, appHome }
|
|
}
|
|
|
|
describe('public system info', () => {
|
|
afterEach(() => {
|
|
vi.restoreAllMocks()
|
|
vi.resetModules()
|
|
;(globalThis as any).__APP_VERSION__ = 'test'
|
|
})
|
|
|
|
it('returns host, os, Hermes Agent, and Web UI versions', async () => {
|
|
const { getPublicSystemInfo, appHome } = await loadSystemInfoWithInjectedVersion('9.9.9-test')
|
|
|
|
try {
|
|
await expect(getPublicSystemInfo()).resolves.toMatchObject({
|
|
device_id: expect.any(String),
|
|
device_public_key: expect.stringContaining('PUBLIC KEY'),
|
|
computer_name: hostname(),
|
|
os: {
|
|
type: type(),
|
|
platform: platform(),
|
|
release: release(),
|
|
arch: arch(),
|
|
},
|
|
hermes_agent_version: 'v0.15.2',
|
|
hermes_web_ui_version: '9.9.9-test',
|
|
})
|
|
} finally {
|
|
rmSync(appHome, { recursive: true, force: true })
|
|
}
|
|
})
|
|
|
|
it('rejects signatures where the public key does not match the device id', async () => {
|
|
const {
|
|
appHome,
|
|
createDeviceSigningPayload,
|
|
deviceIdFromPublicKey,
|
|
verifyDeviceSignature,
|
|
} = await loadSystemInfoWithInjectedVersion('9.9.9-test')
|
|
try {
|
|
const first = generateKeyPairSync('ed25519', {
|
|
publicKeyEncoding: { type: 'spki', format: 'pem' },
|
|
privateKeyEncoding: { type: 'pkcs8', format: 'pem' },
|
|
})
|
|
const second = generateKeyPairSync('ed25519', {
|
|
publicKeyEncoding: { type: 'spki', format: 'pem' },
|
|
privateKeyEncoding: { type: 'pkcs8', format: 'pem' },
|
|
})
|
|
const timestamp = Date.now()
|
|
const nonce = 'nonce-1'
|
|
const deviceId = deviceIdFromPublicKey(first.publicKey)
|
|
const signature = sign(null, Buffer.from(createDeviceSigningPayload({
|
|
device_id: deviceId,
|
|
nonce,
|
|
timestamp,
|
|
})), first.privateKey).toString('base64url')
|
|
|
|
expect(verifyDeviceSignature({
|
|
device_id: deviceId,
|
|
device_public_key: first.publicKey,
|
|
nonce,
|
|
timestamp,
|
|
signature,
|
|
})).toBe(true)
|
|
expect(verifyDeviceSignature({
|
|
device_id: deviceId,
|
|
device_public_key: second.publicKey,
|
|
nonce,
|
|
timestamp,
|
|
signature,
|
|
})).toBe(false)
|
|
expect(verifyDeviceSignature({
|
|
device_id: deviceId,
|
|
device_public_key: first.publicKey.trim(),
|
|
nonce,
|
|
timestamp,
|
|
signature,
|
|
})).toBe(false)
|
|
} finally {
|
|
rmSync(appHome, { recursive: true, force: true })
|
|
}
|
|
})
|
|
})
|