conductor

ids.js (3106B)

---

 // src/lib/ids.js - identifier and token generation
 //
 // Identifiers are generated by the application rather than by the database,
 // because lastInsertId is not portable across the three supported dialects
 // and because a conductor needs an id before it has written anything.
 
 import crypto from 'node:crypto';
 
 // Crockford base32 without the ambiguous letters I, L, O and U. Case
 // insensitive and safe to read aloud or paste into a URL.
 const ALPHABET = '0123456789abcdefghjkmnpqrstvwxyz';
 
 export function randomId(length = 24) {
   // Rejection free: 256 is not a multiple of 32, so mask to 5 bits.
   const bytes = crypto.randomBytes(length);
   let out = '';
   for (let i = 0; i < length; i += 1) out += ALPHABET[bytes[i] & 31];
   return out;
 }
 
 // Sortable by creation time, which keeps job listings stable without relying
 // on a clock skewed created_at. 8 chars of millisecond timestamp in base32
 // followed by 12 random chars.
 export function timeOrderedId(now = Date.now()) {
   let stamp = '';
   let remaining = now;
   for (let i = 0; i < 8; i += 1) {
     stamp = ALPHABET[remaining % 32] + stamp;
     remaining = Math.floor(remaining / 32);
   }
   return stamp + randomId(12);
 }
 
 export const newJobId = () => timeOrderedId();
 export const newProjectId = () => randomId(16);
 export const newArtifactId = () => randomId(24);
 export const newUserId = () => randomId(16);
 export const newWorkerTokenId = () => randomId(16);
 export const newWorkerAgentId = () => randomId(16);
 export const newRefreshTokenId = () => randomId(16);
 
 // Task ids carry no structure at all. A worker holding one cannot tell which
 // job or project it belongs to, which is the point: a worker is given a
 // context and a script, and has no business knowing what they are for.
 //
 // It also removes a class of nuisance. The previous form embedded the task
 // name, so an id could contain ':' ',' and '=', and every use had to escape
 // it for a URL, sanitize it for a container name and encode it for a storage
 // key. Time ordered so that tasks of one job still group naturally.
 export const newTaskId = () => timeOrderedId();
 
 // Worker and session tokens. The plaintext is shown once and only its hash
 // is stored, so a database leak does not yield usable credentials.
 export function newToken() {
   return crypto.randomBytes(32).toString('hex');
 }
 
 export function hashToken(token) {
   return crypto.createHash('sha256').update(String(token)).digest('hex');
 }
 
 // Compares two hex digests without leaking position through timing.
 export function safeEqualHex(a, b) {
   if (typeof a !== 'string' || typeof b !== 'string' || a.length !== b.length) return false;
   return crypto.timingSafeEqual(Buffer.from(a, 'hex'), Buffer.from(b, 'hex'));
 }
 
 // A project id derived from a human supplied name, for the common case where
 // an operator wants a readable slug rather than a random string.
 export function slugify(input, fallbackLength = 16) {
   const slug = String(input)
     .toLowerCase()
     .replace(/[^a-z0-9]+/g, '-')
     .replace(/^-+|-+$/g, '')
     .slice(0, 64);
   return slug || randomId(fallbackLength);
 }