@awiki/dsh-plugin 0.3.11 → 0.3.16

package/lib/types/index.js

@@ -35,6 +35,7 @@ var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn,
 export { registerAwikiLoopbackRpc } from "./settings-transport.js";
 import { registerAwikiSettingsTransport } from "./settings-transport.js";
 import { registrationHandleLocalPart } from "./registration-policy.js";
+import { isMessageTarget } from "./message-target.js";
 import { decodeDesktopDistribution } from "./desktop-distribution.js";
 /** Unified AWiki identity, messaging, attachment, Remote, and model-tool service. */
 import { Context } from '@deepseek-ai/cordis';
@@ -99,6 +100,7 @@ export const Config = z.object({
     messageServiceDid: z.string().default(DEFAULT_AWIKI_MESSAGE_SERVICE_DID),
     allowedAttachmentOrigins: z.array(z.string()).default([]),
     allowInsecureLoopbackForTesting: z.boolean().default(false),
+    caBundle: z.string(),
     stateRoot: z.string(),
     attachmentMaxBytes: z.number().default(DEFAULT_ATTACHMENT_MAX_BYTES),
     mailAttachmentMaxCount: z.number().default(MAIL_ATTACHMENT_SERVICE_MAX_COUNT),
@@ -407,6 +409,7 @@ function resolveConfig(ctx, config) {
         messageServiceDid: serviceDid(config.messageServiceDid ?? DEFAULT_AWIKI_MESSAGE_SERVICE_DID),
         allowedAttachmentOrigins: attachmentOrigins(config.allowedAttachmentOrigins, messageServicePublicUrl, allowInsecureLoopbackForTesting),
         allowInsecureLoopbackForTesting,
+        ...(config.caBundle === undefined ? {} : { caBundle: config.caBundle }),
         stateRoot,
         attachmentMaxBytes,
         mailAttachmentMaxCount,
@@ -615,7 +618,7 @@ function identityAccessTarget(request, configuredDomain) {
 }
 function normalizeSendTextRequest(request) {
     if (typeof request?.text !== 'string' || typeof request.idempotencyKey !== 'string'
-        || typeof request.target !== 'object' || request.target === null)
+        || !isMessageTarget(request.target))
         return undefined;
     const text = request.text;
     const codePoints = Array.from(text);
@@ -623,15 +626,9 @@ function normalizeSendTextRequest(request) {
         || request.idempotencyKey.length === 0 || request.idempotencyKey.length > 512)
         return undefined;
     if (request.target.kind === 'direct') {
-        if (typeof request.target.peer !== 'string' || request.mentions !== undefined)
+        if (request.mentions !== undefined)
             return undefined;
     }
-    else if (request.target.kind === 'group') {
-        if (typeof request.target.group !== 'string')
-            return undefined;
-    }
-    else
-        return undefined;
     if (request.mentions === undefined)
         return request;
     if (!Array.isArray(request.mentions) || request.mentions.length === 0 || request.mentions.length > 100)
@@ -800,8 +797,12 @@ let AwikiService = (() => {
     let _getDeviceJoinStatus_decorators;
     let _cancelDeviceJoin_decorators;
     let _refreshDeviceManagement_decorators;
+    let _getIdentityServices_decorators;
+    let _updateIdentityServices_decorators;
+    let _resumeIdentityServicesUpdate_decorators;
     let _startDeviceJoinVerification_decorators;
     let _approveDeviceJoin_decorators;
+    let _retryDeviceManagement_decorators;
     let _rejectDeviceJoin_decorators;
     let _revokeDevice_decorators;
     let _prepareRootTransfer_decorators;
@@ -865,8 +866,12 @@ let AwikiService = (() => {
             _getDeviceJoinStatus_decorators = [Remote];
             _cancelDeviceJoin_decorators = [Remote];
             _refreshDeviceManagement_decorators = [Remote];
+            _getIdentityServices_decorators = [Remote];
+            _updateIdentityServices_decorators = [Remote];
+            _resumeIdentityServicesUpdate_decorators = [Remote];
             _startDeviceJoinVerification_decorators = [Remote];
             _approveDeviceJoin_decorators = [Remote];
+            _retryDeviceManagement_decorators = [Remote];
             _rejectDeviceJoin_decorators = [Remote];
             _revokeDevice_decorators = [Remote];
             _prepareRootTransfer_decorators = [Remote];
@@ -927,8 +932,12 @@ let AwikiService = (() => {
             __esDecorate(this, null, _getDeviceJoinStatus_decorators, { kind: "method", name: "getDeviceJoinStatus", static: false, private: false, access: { has: obj => "getDeviceJoinStatus" in obj, get: obj => obj.getDeviceJoinStatus }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _cancelDeviceJoin_decorators, { kind: "method", name: "cancelDeviceJoin", static: false, private: false, access: { has: obj => "cancelDeviceJoin" in obj, get: obj => obj.cancelDeviceJoin }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _refreshDeviceManagement_decorators, { kind: "method", name: "refreshDeviceManagement", static: false, private: false, access: { has: obj => "refreshDeviceManagement" in obj, get: obj => obj.refreshDeviceManagement }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _getIdentityServices_decorators, { kind: "method", name: "getIdentityServices", static: false, private: false, access: { has: obj => "getIdentityServices" in obj, get: obj => obj.getIdentityServices }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _updateIdentityServices_decorators, { kind: "method", name: "updateIdentityServices", static: false, private: false, access: { has: obj => "updateIdentityServices" in obj, get: obj => obj.updateIdentityServices }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _resumeIdentityServicesUpdate_decorators, { kind: "method", name: "resumeIdentityServicesUpdate", static: false, private: false, access: { has: obj => "resumeIdentityServicesUpdate" in obj, get: obj => obj.resumeIdentityServicesUpdate }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _startDeviceJoinVerification_decorators, { kind: "method", name: "startDeviceJoinVerification", static: false, private: false, access: { has: obj => "startDeviceJoinVerification" in obj, get: obj => obj.startDeviceJoinVerification }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _approveDeviceJoin_decorators, { kind: "method", name: "approveDeviceJoin", static: false, private: false, access: { has: obj => "approveDeviceJoin" in obj, get: obj => obj.approveDeviceJoin }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _retryDeviceManagement_decorators, { kind: "method", name: "retryDeviceManagement", static: false, private: false, access: { has: obj => "retryDeviceManagement" in obj, get: obj => obj.retryDeviceManagement }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _rejectDeviceJoin_decorators, { kind: "method", name: "rejectDeviceJoin", static: false, private: false, access: { has: obj => "rejectDeviceJoin" in obj, get: obj => obj.rejectDeviceJoin }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _revokeDevice_decorators, { kind: "method", name: "revokeDevice", static: false, private: false, access: { has: obj => "revokeDevice" in obj, get: obj => obj.revokeDevice }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _prepareRootTransfer_decorators, { kind: "method", name: "prepareRootTransfer", static: false, private: false, access: { has: obj => "prepareRootTransfer" in obj, get: obj => obj.prepareRootTransfer }, metadata: _metadata }, null, _instanceExtraInitializers);
@@ -1163,6 +1172,7 @@ let AwikiService = (() => {
                     : [messageServicePublicOrigin],
                 attachmentMaxBytes: this.resolved.attachmentMaxBytes,
                 allowInsecureLoopbackForTesting: this.resolved.allowInsecureLoopbackForTesting,
+                ...(this.resolved.caBundle === undefined ? {} : { caBundle: this.resolved.caBundle }),
                 stateRoot: this.ensureTenantRegistry().stateRoot(tenant),
             };
         }
@@ -1215,7 +1225,8 @@ let AwikiService = (() => {
         }
         /** Read the Host-owned catalog for trusted loopback settings surfaces. */
         getTenantRegistryView() {
-            return this.ensureTenantRegistry().snapshot(this.tenantSwitching);
+            // The public generation fences runtime requests; the catalog keeps its own durable revision.
+            return { ...this.ensureTenantRegistry().snapshot(this.tenantSwitching), generation: this.runtimeGeneration };
         }
         /** Browser-safe, same-process update state for Desktop and loopback settings. */
         getUpdatePolicyStatus() {
@@ -1227,16 +1238,25 @@ let AwikiService = (() => {
                 ...modelProxyVersion === undefined ? {} : { currentModelProxyVersion: modelProxyVersion },
             });
         }
-        /** Only the Desktop provider owns its release source; tenants cannot override it. */
+        /** Project only the active tenant's Desktop state; retain legacy detection without its fixed source. */
         getDesktopUpdate() {
-            return decodeDesktopDistribution(this.desktopDistribution?.getSnapshot());
+            const view = decodeDesktopDistribution(this.desktopDistribution?.getSnapshot());
+            if (view === undefined || view.schemaVersion === 1)
+                return view;
+            const tenant = this.activeTenant ?? this.ensureTenantRegistry().active();
+            if (this.tenantSwitching || view.tenantId !== tenant.tenantId
+                || view.policyOrigin !== new URL(tenant.backendBaseUrl).origin || view.tenantGeneration !== this.runtimeGeneration) {
+                return { schemaVersion: 2, distributionId: 'awiki-dsh-desktop', currentVersion: view.currentVersion,
+                    channel: view.channel, state: 'unavailable', updateAvailable: false, usedCache: false };
+            }
+            return view;
         }
         async refreshDesktopUpdate() {
             const provider = this.desktopDistribution;
             if (provider === undefined)
                 return undefined;
-            const value = await provider.check();
-            return provider === this.desktopDistribution ? decodeDesktopDistribution(value) : this.getDesktopUpdate();
+            await provider.check();
+            return this.getDesktopUpdate();
         }
         /** Refresh only the active generation; late results from old tenants are discarded. */
         refreshUpdatePolicy() {
@@ -1705,49 +1725,58 @@ let AwikiService = (() => {
             const target = identityAccessTarget(request, options.userServiceDomain);
             if (target === undefined)
                 return { ok: false, error: failure('invalid-request') };
-            const endpoint = new URL(`/.well-known/handle/${encodeURIComponent(target.localPart)}`, options.userServiceUrl);
+            if ((request.inviteCode !== undefined && (typeof request.inviteCode !== 'string' || request.inviteCode.length > 512))
+                || (request.phone !== undefined && (typeof request.phone !== 'string' || request.phone.length > 64))) {
+                return { ok: false, error: failure('invalid-request') };
+            }
+            const endpoint = new URL('/user-service/v1/handle/rpc', options.userServiceUrl);
             const abort = new AbortController();
             const timeout = setTimeout(() => { abort.abort(); }, 10_000);
-            let response;
             try {
-                response = await fetch(endpoint, {
-                    method: 'GET',
-                    headers: { accept: 'application/json', 'cache-control': 'no-store' },
-                    cache: 'no-store',
-                    redirect: 'error',
-                    signal: abort.signal,
+                const response = await fetch(endpoint, {
+                    method: 'POST',
+                    headers: { accept: 'application/json', 'content-type': 'application/json', 'cache-control': 'no-store' },
+                    body: JSON.stringify({ jsonrpc: '2.0', id: 'registration-check', method: 'registration_check', params: {
+                            handle: target.localPart, domain: options.userServiceDomain,
+                            check_invite: request.inviteCode !== undefined,
+                            ...(request.inviteCode === undefined ? {} : { invite_code: request.inviteCode }),
+                            ...(request.phone === undefined ? {} : { phone: request.phone }),
+                        } }),
+                    cache: 'no-store', redirect: 'error', signal: abort.signal,
                 });
-            }
-            catch {
-                return { ok: false, error: failure('network') };
-            }
-            finally {
-                clearTimeout(timeout);
-            }
-            if (response.status === 404) {
-                return { ok: true, value: { status: 'available', fullHandle: target.fullHandle } };
-            }
-            if (!response.ok && response.status !== 410)
-                return { ok: false, error: failure('remote') };
-            try {
+                if (!response.ok)
+                    return { ok: false, error: failure('remote') };
                 const text = await readBoundedResponseText(response, IDENTITY_ACCESS_RESPONSE_MAX_BYTES);
                 if (text === undefined)
                     return { ok: false, error: failure('remote') };
-                const value = JSON.parse(text);
-                if (typeof value !== 'object' || value === null)
+                let envelope;
+                try {
+                    envelope = JSON.parse(text);
+                }
+                catch {
                     return { ok: false, error: failure('remote') };
-                const binding = value;
-                if (binding.handle !== target.fullHandle
-                    || !isBoundedDidUri(binding.did)
-                    || typeof binding.status !== 'string'
-                    || binding.status.length === 0
-                    || (response.status === 410 && binding.status !== 'revoked')) {
+                }
+                const value = envelope?.result;
+                if (envelope?.jsonrpc !== '2.0' || envelope.id !== 'registration-check' || (envelope.error !== undefined && envelope.error !== null)
+                    || value?.full_handle !== target.fullHandle
+                    || !['register', 'existing', 'unavailable'].includes(value.decision)
+                    || typeof value.invite_required !== 'boolean'
+                    || !['not_required', 'required', 'valid', 'invalid'].includes(value.invite_status)
+                    || (value.decision === 'existing' && value.invite_required)
+                    || (!value.invite_required && value.invite_status !== 'not_required')
+                    || (value.invite_required && value.invite_status === 'not_required')) {
                     return { ok: false, error: failure('remote') };
                 }
-                return { ok: true, value: { status: 'existing', fullHandle: target.fullHandle } };
+                return { ok: true, value: {
+                        status: value.decision === 'register' ? 'available' : value.decision,
+                        fullHandle: target.fullHandle, inviteRequired: value.invite_required, inviteStatus: value.invite_status,
+                    } };
             }
             catch {
-                return { ok: false, error: failure('remote') };
+                return { ok: false, error: failure('network') };
+            }
+            finally {
+                clearTimeout(timeout);
             }
         }
         async sendRegistrationOtp(request) {
@@ -1783,6 +1812,7 @@ let AwikiService = (() => {
                 fullHandle: result.value.fullHandle,
                 mode: result.value.mode,
                 requiresUserPresence: result.value.requiresUserPresence,
+                ...result.value.methodCapabilities === undefined ? {} : { methodCapabilities: result.value.methodCapabilities },
             };
             return {
                 ok: true,
@@ -1791,6 +1821,7 @@ let AwikiService = (() => {
                     fullHandle: result.value.fullHandle,
                     mode: result.value.mode,
                     requiresUserPresence: result.value.requiresUserPresence,
+                    ...result.value.methodCapabilities === undefined ? {} : { methodCapabilities: result.value.methodCapabilities },
                 },
             };
         }
@@ -1863,6 +1894,10 @@ let AwikiService = (() => {
             return this.run(async (client) => {
                 const joining = await this.selectDeviceJoinSession(client) !== null;
                 const recoveries = await client.listPendingRecoveries();
+                const pendingRegistrations = await client.pendingIdentityRegistrations();
+                const creationMethods = await client.identityCreationMethods().catch(() => []);
+                const identity = await client.getIdentity();
+                const capabilities = identity === null ? undefined : await client.identityMethodCapabilities(identity.did);
                 const domain = this.activeClientOptions?.userServiceDomain;
                 const choice = this.pendingDeviceJoin;
                 return {
@@ -1870,8 +1905,12 @@ let AwikiService = (() => {
                         status: 'join-required',
                         fullHandle: choice.fullHandle,
                         mode: choice.mode, requiresUserPresence: choice.requiresUserPresence,
+                        ...choice.methodCapabilities === undefined ? {} : { methodCapabilities: choice.methodCapabilities },
                     },
                     joining,
+                    creationMethods,
+                    pendingRegistrations,
+                    ...capabilities === undefined ? {} : { methodCapabilities: capabilities },
                     recoveries: recoveries.filter(value => domain !== undefined && value.fullHandle.slice(value.fullHandle.indexOf('.') + 1) === domain),
                 };
             }, { allowSignedOut: true });
@@ -1906,6 +1945,40 @@ let AwikiService = (() => {
         refreshDeviceManagement() {
             return this.run(client => this.deviceManagementSnapshot(client));
         }
+        getIdentityServices() {
+            return this.run(client => client.getIdentityServices());
+        }
+        updateIdentityServices(request) {
+            if (request === null || !Array.isArray(request.services))
+                return Promise.resolve({ ok: false, error: failure('invalid-request') });
+            return this.run(async (client) => {
+                const did = await this.requireIdentityServicesManager(client);
+                if (request.did !== did)
+                    throw Object.assign(new Error('identity changed'), { name: 'AwikiSdkError', code: 'conflict' });
+                if ((await client.getIdentityServices()).pending) {
+                    throw Object.assign(new Error('pending service update'), { name: 'AwikiSdkError', code: 'conflict' });
+                }
+                await client.updateIdentityServices(request);
+                return client.getIdentityServices();
+            });
+        }
+        resumeIdentityServicesUpdate(request) {
+            return this.run(async (client) => {
+                const did = await this.requireIdentityServicesManager(client);
+                if (request?.did !== did)
+                    throw Object.assign(new Error('identity changed'), { name: 'AwikiSdkError', code: 'conflict' });
+                await client.resumeIdentityServicesUpdate();
+                return client.getIdentityServices();
+            });
+        }
+        async requireIdentityServicesManager(client) {
+            await this.requireDeviceManager(client);
+            const identity = await client.getIdentity();
+            if (identity === null || !(await client.identityMethodCapabilities(identity.did)).servicesUpdate) {
+                throw Object.assign(new Error('service update unavailable'), { name: 'AwikiSdkError', code: 'forbidden' });
+            }
+            return identity.did;
+        }
         async startDeviceJoinVerification(request) {
             const joinSessionId = this.requestSessions.get(request?.requestRef);
             if (joinSessionId === undefined)
@@ -1989,6 +2062,20 @@ let AwikiService = (() => {
             });
             return result.ok ? this.publicAdminJoinProgress(request.requestRef, result.value) : result;
         }
+        async retryDeviceManagement(request) {
+            const deviceId = this.deviceIds.get(request?.deviceRef);
+            if (deviceId === undefined)
+                return { ok: false, error: failure('invalid-request') };
+            return this.run(async (client) => {
+                await this.requireDeviceManager(client);
+                const task = (await client.deviceJoinManagementStatus()).find(value => value.recipientDeviceId === deviceId);
+                if (task === undefined || task.phase !== 'failed' || ['root_transfer.delivery_expired', 'root_transfer.delivery_invalidated'].includes(task.failureCode ?? '')) {
+                    throw Object.assign(new Error('management retry unavailable'), { name: 'AwikiSdkError', code: 'forbidden' });
+                }
+                await client.retryDeviceJoinManagement(task.joinSessionId);
+                return null;
+            });
+        }
         async rejectDeviceJoin(request) {
             const joinSessionId = this.requestSessions.get(request?.requestRef);
             if (joinSessionId === undefined
@@ -2391,6 +2478,8 @@ let AwikiService = (() => {
          * @returns The accepted attachment message or a closed failure.
          */
         async sendAttachment(request) {
+            if (!isMessageTarget(request?.target))
+                return { ok: false, error: failure('invalid-request') };
             const decoded = decodeAttachment(request.bytesBase64, this.resolved.attachmentMaxBytes);
             if (!decoded.ok)
                 return decoded;
@@ -2749,6 +2838,9 @@ let AwikiService = (() => {
             if (identity === null) {
                 throw Object.assign(new Error('identity required'), { name: 'AwikiSdkError', code: 'not-registered' });
             }
+            if (!(await client.identityMethodCapabilities(identity.did)).rootTransfer) {
+                throw Object.assign(new Error('root transfer unavailable'), { name: 'AwikiSdkError', code: 'forbidden' });
+            }
             const target = (await client.getDeviceRegistry()).find(device => device.deviceId === deviceId);
             if (target === undefined
                 || target.isCurrent
@@ -2780,6 +2872,9 @@ let AwikiService = (() => {
         async deviceManagementSnapshot(client) {
             await client.syncDeviceManagement();
             const current = await client.getCurrentDeviceSummary();
+            const currentIdentity = await client.getIdentity();
+            const capabilities = currentIdentity === null ? undefined : await client.identityMethodCapabilities(currentIdentity.did);
+            const rootTransferSupported = capabilities?.rootTransfer === true && client.trustedUserPresenceSupported;
             if (!current.canManage || current.role !== 'admin' || current.readiness !== 'admin_ready') {
                 this.requestRefs.clear();
                 this.requestSessions.clear();
@@ -2788,7 +2883,8 @@ let AwikiService = (() => {
                 this.rootTransfers.clear();
                 return {
                     canManage: false,
-                    rootTransferSupported: client.trustedUserPresenceSupported,
+                    rootTransferSupported,
+                    ...capabilities === undefined ? {} : { methodCapabilities: capabilities },
                     ...current.role === undefined ? {} : { role: current.role },
                     readiness: current.readiness,
                     devices: [],
@@ -2799,6 +2895,7 @@ let AwikiService = (() => {
             await Promise.all(requests
                 .filter(request => request.claimedByCurrentDevice)
                 .map(request => client.getLocalDeviceJoinVerificationProgress(request.joinSessionId).catch(() => undefined)));
+            const management = await client.deviceJoinManagementStatus();
             const devices = await client.getDeviceRegistry();
             const identity = await client.getIdentity();
             const joinedAtByDeviceId = new Map();
@@ -2813,12 +2910,22 @@ let AwikiService = (() => {
                 : new Date(identity.registeredAt).toISOString();
             return {
                 canManage: true,
-                rootTransferSupported: client.trustedUserPresenceSupported,
+                rootTransferSupported,
+                ...capabilities === undefined ? {} : { methodCapabilities: capabilities },
                 role: 'admin',
                 readiness: 'admin_ready',
                 devices: devices
                     .filter(device => device.status === 'active')
-                    .map(device => this.publicDevice(device, joinedAtByDeviceId.get(device.deviceId) ?? (device.isCurrent ? initialDeviceJoinedAt : undefined))),
+                    .map(device => {
+                    const task = management.find(value => value.recipientDeviceId === device.deviceId);
+                    const phase = task?.phase === 'failed' ? 'failed'
+                        : task?.phase === 'management_registered' ? 'complete'
+                            : task?.phase === 'waiting_for_recipient' ? 'waiting' : 'pending';
+                    return {
+                        ...this.publicDevice(device, joinedAtByDeviceId.get(device.deviceId) ?? (device.isCurrent ? initialDeviceJoinedAt : undefined)),
+                        ...task === undefined ? {} : { provisioning: { phase, attempts: task.attempts, ...['root_transfer.delivery_expired', 'root_transfer.delivery_invalidated'].includes(task.failureCode ?? '') ? { requiresRejoin: true } : {} } },
+                    };
+                }),
                 requests: requests.map(request => ({
                     requestRef: this.requestRef(request.joinSessionId),
                     candidateKeyFingerprint: request.candidateKeyFingerprint,