chore: checkpoint before Python removal

vendor/pageant/.cargo-checksum.json

@@ -0,0 +1 @@
+{"files":{".cargo_vcs_info.json":"ae1afa89a6852c77f34b18561c4a0b1f213ea12fd4271d2dfb411ea339d4fe6f","Cargo.toml":"e8b3bc20ea6cc8fae7c37272594aed82e8c0a45baaa32b8d844773a3309eb498","Cargo.toml.orig":"c59504ca26ecd59375beb7ad07be0744ecc6f4d8457842340e5662355a4742b0","src/lib.rs":"377e7991a2477d110ae25fde72f868d6b605220b93083f25a8236bebdf4249bd","src/pageant_impl.rs":"4f2972cd332b3e41b71071656d4ea0ba5909498d6853afb3d7e816d9e8c59faf"},"package":"032d6201d2fb765158455ae0d5a510c016bb6da7232e5040e39e9c8db12b0afc"}

vendor/pageant/.cargo_vcs_info.json

@@ -0,0 +1,7 @@
+{
+  "git": {
+    "sha1": "5bd4daf20a32ba13200b5ae7dfb5843e0a135df4",
+    "dirty": true
+  },
+  "path_in_vcs": "pageant"
+}

vendor/pageant/Cargo.toml

@@ -0,0 +1,64 @@
+# THIS FILE IS AUTOMATICALLY GENERATED BY CARGO
+#
+# When uploading crates to the registry Cargo will automatically
+# "normalize" Cargo.toml files for maximal compatibility
+# with all versions of Cargo and also rewrite `path` dependencies
+# to registry (e.g., crates.io) dependencies.
+#
+# If you are reading this file be aware that the original Cargo.toml
+# will likely look very different (and much more reasonable).
+# See Cargo.toml.orig for the original contents.
+
+[package]
+edition = "2018"
+rust-version = "1.65"
+name = "pageant"
+version = "0.0.1"
+authors = ["Eugene <inbox@null.page>"]
+build = false
+autobins = false
+autoexamples = false
+autotests = false
+autobenches = false
+description = "Pageant SSH agent transport client."
+documentation = "https://docs.rs/pageant"
+readme = false
+license = "Apache-2.0"
+repository = "https://github.com/warp-tech/russh"
+resolver = "2"
+
+[lib]
+name = "pageant"
+path = "src/lib.rs"
+
+[dependencies.bytes]
+version = "1.7"
+
+[dependencies.delegate]
+version = "0.13"
+
+[dependencies.futures]
+version = "0.3"
+
+[dependencies.rand]
+version = "0.8"
+
+[dependencies.thiserror]
+version = "1.0.30"
+
+[dependencies.tokio]
+version = "1.17.0"
+features = [
+    "io-util",
+    "rt",
+]
+
+[target."cfg(windows)".dependencies.windows]
+version = "0.58"
+features = [
+    "Win32_UI_WindowsAndMessaging",
+    "Win32_System_Memory",
+    "Win32_Security",
+    "Win32_System_Threading",
+    "Win32_System_DataExchange",
+]

vendor/pageant/src/lib.rs

@@ -0,0 +1,11 @@
+//! # Pageant SSH agent transport protocol implementation
+//!
+//! This crate provides a [PageantStream] type that implements [AsyncRead] and [AsyncWrite] traits and can be used to talk to a running Pageant instance.
+//!
+//! This crate only implements the transport, not the actual SSH agent protocol.
+
+#[cfg(windows)]
+mod pageant_impl;
+
+#[cfg(windows)]
+pub use pageant_impl::*;

vendor/pageant/src/pageant_impl.rs

@@ -0,0 +1,285 @@
+use std::io::IoSlice;
+use std::mem::size_of;
+use std::pin::Pin;
+use std::task::{Context, Poll};
+
+use bytes::BytesMut;
+use delegate::delegate;
+use thiserror::Error;
+use tokio::io::{AsyncRead, AsyncReadExt, AsyncWrite, AsyncWriteExt, DuplexStream, ReadBuf};
+use windows::core::HSTRING;
+use windows::Win32::Foundation::{CloseHandle, HANDLE, HWND, INVALID_HANDLE_VALUE, LPARAM, WPARAM};
+use windows::Win32::Security::{
+    GetTokenInformation, InitializeSecurityDescriptor, SetSecurityDescriptorOwner, TokenUser,
+    PSECURITY_DESCRIPTOR, SECURITY_ATTRIBUTES, SECURITY_DESCRIPTOR, TOKEN_QUERY, TOKEN_USER,
+};
+use windows::Win32::System::DataExchange::COPYDATASTRUCT;
+use windows::Win32::System::Memory::{
+    CreateFileMappingW, MapViewOfFile, UnmapViewOfFile, FILE_MAP_WRITE, MEMORY_MAPPED_VIEW_ADDRESS,
+    PAGE_READWRITE,
+};
+use windows::Win32::System::Threading::{GetCurrentProcess, OpenProcessToken};
+use windows::Win32::UI::WindowsAndMessaging::{FindWindowW, SendMessageA, WM_COPYDATA};
+
+#[derive(Error, Debug)]
+pub enum Error {
+    #[error("Pageant not found")]
+    NotFound,
+
+    #[error("Buffer overflow")]
+    Overflow,
+
+    #[error("No response from Pageant")]
+    NoResponse,
+
+    #[error(transparent)]
+    WindowsError(#[from] windows::core::Error),
+}
+
+impl Error {
+    fn from_win32() -> Self {
+        Self::WindowsError(windows::core::Error::from_win32())
+    }
+}
+
+/// Pageant transport stream. Implements [AsyncRead] and [AsyncWrite].
+///
+/// The stream has a unique cookie and requests made in the same stream are considered the same "session".
+pub struct PageantStream {
+    stream: DuplexStream,
+}
+
+impl PageantStream {
+    pub fn new() -> Self {
+        let (one, mut two) = tokio::io::duplex(_AGENT_MAX_MSGLEN * 100);
+
+        let cookie = rand::random::<u64>().to_string();
+        tokio::spawn(async move {
+            let mut buf = BytesMut::new();
+            while let Ok(n) = two.read_buf(&mut buf).await {
+                if n == 0 {
+                    break;
+                }
+                let msg = buf.split().freeze();
+                let response = query_pageant_direct(cookie.clone(), &msg).unwrap();
+                two.write_all(&response).await?
+            }
+            std::io::Result::Ok(())
+        });
+
+        Self { stream: one }
+    }
+}
+
+impl Default for PageantStream {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
+impl AsyncRead for PageantStream {
+    delegate! {
+        to Pin::new(&mut self.stream) {
+            fn poll_read(
+                mut self: Pin<&mut Self>,
+                cx: &mut Context<'_>,
+                buf: &mut ReadBuf<'_>,
+            ) -> Poll<Result<(), std::io::Error>>;
+
+        }
+    }
+}
+
+impl AsyncWrite for PageantStream {
+    delegate! {
+        to Pin::new(&mut self.stream) {
+            fn poll_write(
+                mut self: Pin<&mut Self>,
+                cx: &mut Context<'_>,
+                buf: &[u8],
+            ) -> Poll<Result<usize, std::io::Error>>;
+
+            fn poll_flush(mut self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<Result<(), std::io::Error>>;
+
+            fn poll_write_vectored(
+                mut self: Pin<&mut Self>,
+                cx: &mut Context<'_>,
+                bufs: &[IoSlice<'_>],
+            ) -> Poll<Result<usize, std::io::Error>>;
+
+            fn poll_shutdown(mut self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<Result<(), std::io::Error>>;
+        }
+
+        to Pin::new(&self.stream) {
+            fn is_write_vectored(&self) -> bool;
+        }
+    }
+}
+
+struct MemoryMap {
+    filemap: HANDLE,
+    view: MEMORY_MAPPED_VIEW_ADDRESS,
+    length: usize,
+    pos: usize,
+}
+
+impl MemoryMap {
+    fn new(
+        name: String,
+        length: usize,
+        security_attributes: Option<SECURITY_ATTRIBUTES>,
+    ) -> Result<Self, Error> {
+        let filemap = unsafe {
+            CreateFileMappingW(
+                INVALID_HANDLE_VALUE,
+                security_attributes.map(|sa| &sa as *const _),
+                PAGE_READWRITE,
+                0,
+                length as u32,
+                &HSTRING::from(name.clone()),
+            )
+        }?;
+        if filemap.is_invalid() {
+            return Err(Error::from_win32());
+        }
+        let view = unsafe { MapViewOfFile(filemap, FILE_MAP_WRITE, 0, 0, 0) };
+        Ok(Self {
+            filemap,
+            view,
+            length,
+            pos: 0,
+        })
+    }
+
+    fn seek(&mut self, pos: usize) {
+        self.pos = pos;
+    }
+
+    fn write(&mut self, data: &[u8]) -> Result<(), Error> {
+        if self.pos + data.len() > self.length {
+            return Err(Error::Overflow);
+        }
+
+        unsafe {
+            std::ptr::copy_nonoverlapping(
+                &data[0] as *const u8,
+                self.view.Value.add(self.pos) as *mut u8,
+                data.len(),
+            );
+        }
+        self.pos += data.len();
+        Ok(())
+    }
+
+    fn read(&mut self, n: usize) -> Vec<u8> {
+        let out = vec![0; n];
+        unsafe {
+            std::ptr::copy_nonoverlapping(
+                self.view.Value.add(self.pos) as *const u8,
+                out.as_ptr() as *mut u8,
+                n,
+            );
+        }
+        self.pos += n;
+        out
+    }
+}
+
+impl Drop for MemoryMap {
+    fn drop(&mut self) {
+        unsafe {
+            let _ = UnmapViewOfFile(self.view);
+            let _ = CloseHandle(self.filemap);
+        }
+    }
+}
+
+fn find_pageant_window() -> Result<HWND, Error> {
+    let w = unsafe { FindWindowW(&HSTRING::from("Pageant"), &HSTRING::from("Pageant")) }?;
+    if w.is_invalid() {
+        return Err(Error::NotFound);
+    }
+    Ok(w)
+}
+
+const _AGENT_COPYDATA_ID: u64 = 0x804E50BA;
+const _AGENT_MAX_MSGLEN: usize = 8192;
+
+pub fn is_pageant_running() -> bool {
+    find_pageant_window().is_ok()
+}
+
+/// Send a one-off query to Pageant and return a response.
+pub fn query_pageant_direct(cookie: String, msg: &[u8]) -> Result<Vec<u8>, Error> {
+    let hwnd = find_pageant_window()?;
+    let map_name = format!("PageantRequest{cookie}");
+
+    let user = unsafe {
+        let mut process_token = HANDLE::default();
+        OpenProcessToken(
+            GetCurrentProcess(),
+            TOKEN_QUERY,
+            &mut process_token as *mut _,
+        )?;
+
+        let mut info_size = 0;
+        let _ = GetTokenInformation(process_token, TokenUser, None, 0, &mut info_size);
+
+        let mut buffer = vec![0; info_size as usize];
+        GetTokenInformation(
+            process_token,
+            TokenUser,
+            Some(buffer.as_mut_ptr() as *mut _),
+            buffer.len() as u32,
+            &mut info_size,
+        )?;
+        let user: TOKEN_USER = *(buffer.as_ptr() as *const _);
+        let _ = CloseHandle(process_token);
+        user
+    };
+
+    let mut sd = SECURITY_DESCRIPTOR::default();
+    let sa = SECURITY_ATTRIBUTES {
+        lpSecurityDescriptor: &mut sd as *mut _ as *mut _,
+        bInheritHandle: true.into(),
+        ..Default::default()
+    };
+
+    let psd = PSECURITY_DESCRIPTOR(&mut sd as *mut _ as *mut _);
+
+    unsafe {
+        InitializeSecurityDescriptor(psd, 1)?;
+        SetSecurityDescriptorOwner(psd, user.User.Sid, false)?;
+    }
+
+    let mut map: MemoryMap = MemoryMap::new(map_name.clone(), _AGENT_MAX_MSGLEN, Some(sa))?;
+    map.write(msg)?;
+
+    let mut char_buffer = map_name.as_bytes().to_vec();
+    char_buffer.push(0);
+    let cds = COPYDATASTRUCT {
+        dwData: _AGENT_COPYDATA_ID as usize,
+        cbData: char_buffer.len() as u32,
+        lpData: char_buffer.as_ptr() as *mut _,
+    };
+
+    let response = unsafe {
+        SendMessageA(
+            hwnd,
+            WM_COPYDATA,
+            WPARAM(size_of::<COPYDATASTRUCT>()),
+            LPARAM(&cds as *const _ as isize),
+        )
+    };
+
+    if response.0 == 0 {
+        return Err(Error::NoResponse);
+    }
+
+    map.seek(0);
+    let mut buf = map.read(4);
+    let size = u32::from_be_bytes([buf[0], buf[1], buf[2], buf[3]]) as usize;
+    buf.extend(map.read(size));
+
+    Ok(buf)
+}

vendor/pageant/target/package/tmp-registry/index/pa/ge/pageant

@@ -0,0 +1 @@
+{"name":"pageant","vers":"0.0.1","deps":[{"name":"bytes","req":"^1.7","features":[],"optional":false,"default_features":true,"target":null,"kind":"normal","registry":"https://github.com/rust-lang/crates.io-index","package":null,"public":null,"artifact":null,"bindep_target":null,"lib":false},{"name":"delegate","req":"^0.13","features":[],"optional":false,"default_features":true,"target":null,"kind":"normal","registry":"https://github.com/rust-lang/crates.io-index","package":null,"public":null,"artifact":null,"bindep_target":null,"lib":false},{"name":"futures","req":"^0.3","features":[],"optional":false,"default_features":true,"target":null,"kind":"normal","registry":"https://github.com/rust-lang/crates.io-index","package":null,"public":null,"artifact":null,"bindep_target":null,"lib":false},{"name":"rand","req":"^0.8","features":[],"optional":false,"default_features":true,"target":null,"kind":"normal","registry":"https://github.com/rust-lang/crates.io-index","package":null,"public":null,"artifact":null,"bindep_target":null,"lib":false},{"name":"thiserror","req":"^1.0.30","features":[],"optional":false,"default_features":true,"target":null,"kind":"normal","registry":"https://github.com/rust-lang/crates.io-index","package":null,"public":null,"artifact":null,"bindep_target":null,"lib":false},{"name":"tokio","req":"^1.17.0","features":["io-util","rt"],"optional":false,"default_features":true,"target":null,"kind":"normal","registry":"https://github.com/rust-lang/crates.io-index","package":null,"public":null,"artifact":null,"bindep_target":null,"lib":false},{"name":"windows","req":"^0.58","features":["Win32_UI_WindowsAndMessaging","Win32_System_Memory","Win32_Security","Win32_System_Threading","Win32_System_DataExchange"],"optional":false,"default_features":true,"target":"cfg(windows)","kind":"normal","registry":"https://github.com/rust-lang/crates.io-index","package":null,"public":null,"artifact":null,"bindep_target":null,"lib":false}],"features":{},"features2":null,"cksum":"ccd8a735fb1ffa2eb39ea5f6d7703e1ec000487e68f1e6ca95d38693bb519775","yanked":null,"links":null,"rust_version":null,"v":2}