@cats-inc/cats-platform 0.1.0

package/build/server/platform/auth/session.js

@@ -0,0 +1,112 @@
+import { createHmac, randomBytes, randomUUID, timingSafeEqual } from 'node:crypto';
+const DEFAULT_TOKEN_BYTES = 32;
+export function generateSessionTokenMaterial(sessionSecret, tokenBytes = DEFAULT_TOKEN_BYTES) {
+    const token = randomBytes(tokenBytes).toString('base64url');
+    return {
+        token,
+        tokenHash: hashSessionToken(token, sessionSecret),
+    };
+}
+export function hashSessionToken(token, sessionSecret) {
+    assertSessionSecret(sessionSecret);
+    return createHmac('sha256', sessionSecret)
+        .update(token)
+        .digest('base64url');
+}
+export function verifySessionTokenHash(token, tokenHash, sessionSecret) {
+    const candidate = hashSessionToken(token, sessionSecret);
+    return timingSafeEqualString(candidate, tokenHash);
+}
+export function issueBrowserSession(input) {
+    const now = input.now ?? new Date();
+    const issued = issueSessionRecord({
+        accountId: input.accountId,
+        kind: 'browser',
+        sessionSecret: input.sessionSecret,
+        ttlMs: input.ttlMs,
+        now,
+    });
+    const csrf = generateSessionTokenMaterial(input.sessionSecret);
+    return {
+        session: {
+            ...issued.session,
+            csrfTokenHash: csrf.tokenHash,
+        },
+        token: issued.token,
+        csrfToken: csrf.token,
+    };
+}
+export function issueMobileDeviceSession(input) {
+    const now = input.now ?? new Date();
+    const issued = issueSessionRecord({
+        accountId: input.accountId,
+        kind: 'mobile_device',
+        sessionSecret: input.sessionSecret,
+        ttlMs: input.ttlMs,
+        now,
+    });
+    return {
+        session: {
+            ...issued.session,
+            deviceLabel: input.deviceLabel,
+            devicePlatform: input.devicePlatform,
+            appVersion: input.appVersion,
+            lastSeenAddress: input.remoteAddress,
+        },
+        token: issued.token,
+    };
+}
+export function isSessionActive(session, now = new Date()) {
+    return session.revokedAt === null && Date.parse(session.expiresAt) > now.getTime();
+}
+export function revokeSession(session, now = new Date()) {
+    return {
+        ...structuredClone(session),
+        revokedAt: session.revokedAt ?? now.toISOString(),
+        lastSeenAt: now.toISOString(),
+    };
+}
+export function touchSession(session, input = {}) {
+    return {
+        ...structuredClone(session),
+        lastSeenAt: (input.now ?? new Date()).toISOString(),
+        lastSeenAddress: input.remoteAddress ?? session.lastSeenAddress,
+    };
+}
+export function findActiveSessionByToken(sessions, input) {
+    const tokenHash = hashSessionToken(input.token, input.sessionSecret);
+    return structuredClone(sessions.find((session) => session.tokenHash === tokenHash
+        && (!input.kind || session.kind === input.kind)
+        && isSessionActive(session, input.now ?? new Date())) ?? null);
+}
+function issueSessionRecord(input) {
+    const material = generateSessionTokenMaterial(input.sessionSecret);
+    const nowIso = input.now.toISOString();
+    return {
+        token: material.token,
+        session: {
+            id: `auth-session-${randomUUID()}`,
+            accountId: input.accountId,
+            kind: input.kind,
+            tokenHash: material.tokenHash,
+            createdAt: nowIso,
+            expiresAt: new Date(input.now.getTime() + input.ttlMs).toISOString(),
+            revokedAt: null,
+            lastSeenAt: nowIso,
+        },
+    };
+}
+function timingSafeEqualString(left, right) {
+    const leftBuffer = Buffer.from(left, 'utf-8');
+    const rightBuffer = Buffer.from(right, 'utf-8');
+    if (leftBuffer.length !== rightBuffer.length) {
+        return false;
+    }
+    return timingSafeEqual(leftBuffer, rightBuffer);
+}
+function assertSessionSecret(sessionSecret) {
+    if (sessionSecret.length < 16) {
+        throw new Error('Session secret must be at least 16 characters.');
+    }
+}
+//# sourceMappingURL=session.js.map

package/build/server/platform/auth/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../../src/platform/auth/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAQnF,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAgC/B,MAAM,UAAU,4BAA4B,CAC1C,aAAqB,EACrB,UAAU,GAAG,mBAAmB;IAEhC,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5D,OAAO;QACL,KAAK;QACL,SAAS,EAAE,gBAAgB,CAAC,KAAK,EAAE,aAAa,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,aAAqB;IACnE,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACnC,OAAO,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC;SACvC,MAAM,CAAC,KAAK,CAAC;SACb,MAAM,CAAC,WAAW,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAa,EACb,SAAiB,EACjB,aAAqB;IAErB,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACzD,OAAO,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAgC;IAClE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG;KACJ,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,4BAA4B,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/D,OAAO;QACL,OAAO,EAAE;YACP,GAAG,MAAM,CAAC,OAAO;YACjB,aAAa,EAAE,IAAI,CAAC,SAAS;SAC9B;QACD,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,IAAI,CAAC,KAAK;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAqC;IAErC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,eAAe;QACrB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG;KACJ,CAAC,CAAC;IACH,OAAO;QACL,OAAO,EAAE;YACP,GAAG,MAAM,CAAC,OAAO;YACjB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,eAAe,EAAE,KAAK,CAAC,aAAa;SACrC;QACD,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAA8B,EAC9B,MAAY,IAAI,IAAI,EAAE;IAEtB,OAAO,OAAO,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAA8B,EAC9B,MAAY,IAAI,IAAI,EAAE;IAEtB,OAAO;QACL,GAAG,eAAe,CAAC,OAAO,CAAC;QAC3B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC,WAAW,EAAE;QACjD,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,OAA8B,EAC9B,QAAgD,EAAE;IAElD,OAAO;QACL,GAAG,eAAe,CAAC,OAAO,CAAC;QAC3B,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;QACnD,eAAe,EAAE,KAAK,CAAC,aAAa,IAAI,OAAO,CAAC,eAAe;KAChE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,QAAiC,EACjC,KAKC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IACrE,OAAO,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC/C,OAAO,CAAC,SAAS,KAAK,SAAS;WAC5B,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC;WAC5C,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CACrD,IAAI,IAAI,CAAC,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,KAM3B;IACC,MAAM,QAAQ,GAAG,4BAA4B,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,EAAE,gBAAgB,UAAU,EAAE,EAAE;YAClC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,MAAM;YACjB,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;YACpE,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,MAAM;SACnB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,KAAa;IACxD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,UAAU,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,mBAAmB,CAAC,aAAqB;IAChD,IAAI,aAAa,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;AACH,CAAC"}

package/build/server/platform/auth/state.d.ts

@@ -0,0 +1,17 @@
+import { type PlatformAuthState } from './types.js';
+export type PlatformAuthStateReadStatus = {
+    status: 'ready';
+    state: PlatformAuthState;
+} | {
+    status: 'missing';
+} | {
+    status: 'corrupt';
+    error: Error;
+};
+export declare class PlatformAuthStateCorruptError extends Error {
+    constructor(message: string);
+}
+export declare function createEmptyPlatformAuthState(now?: Date): PlatformAuthState;
+export declare function clonePlatformAuthState(state: PlatformAuthState): PlatformAuthState;
+export declare function normalizePlatformAuthState(input: unknown): PlatformAuthState;
+//# sourceMappingURL=state.d.ts.map

package/build/server/platform/auth/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../../src/platform/auth/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,iBAAiB,EAMvB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,2BAA2B,GACnC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,GAC7C;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC;AAExC,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,4BAA4B,CAC1C,GAAG,GAAE,IAAiB,GACrB,iBAAiB,CAWnB;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,GAAG,iBAAiB,CAElF;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,GACb,iBAAiB,CA0BnB"}

package/build/server/platform/auth/state.js

@@ -0,0 +1,216 @@
+import { PLATFORM_AUTH_STATE_VERSION, } from './types.js';
+export class PlatformAuthStateCorruptError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'PlatformAuthStateCorruptError';
+    }
+}
+export function createEmptyPlatformAuthState(now = new Date()) {
+    return {
+        version: PLATFORM_AUTH_STATE_VERSION,
+        updatedAt: now.toISOString(),
+        accounts: [],
+        identities: [],
+        sessions: [],
+        memberships: [],
+        loginFailures: [],
+        loginCooldowns: [],
+    };
+}
+export function clonePlatformAuthState(state) {
+    return structuredClone(state);
+}
+export function normalizePlatformAuthState(input) {
+    const record = readRecord(input, 'auth state');
+    const version = record.version;
+    if (version !== PLATFORM_AUTH_STATE_VERSION) {
+        if (typeof version === 'number' && version > PLATFORM_AUTH_STATE_VERSION) {
+            throw new PlatformAuthStateCorruptError(`Auth state version ${version} is newer than supported version ${PLATFORM_AUTH_STATE_VERSION}.`);
+        }
+        throw new PlatformAuthStateCorruptError('Auth state version is missing or unsupported.');
+    }
+    return {
+        version: PLATFORM_AUTH_STATE_VERSION,
+        updatedAt: readString(record.updatedAt, 'updatedAt'),
+        accounts: readArray(record.accounts, 'accounts').map(readAccountRecord),
+        identities: readArray(record.identities, 'identities').map(readIdentityRecord),
+        sessions: readArray(record.sessions, 'sessions').map(readSessionRecord),
+        memberships: readArray(record.memberships, 'memberships').map(readMembershipRecord),
+        loginFailures: readOptionalArray(record.loginFailures, 'loginFailures').map(readLoginFailureRecord),
+        loginCooldowns: readOptionalArray(record.loginCooldowns, 'loginCooldowns').map(readLoginCooldownRecord),
+    };
+}
+function readAccountRecord(input) {
+    const record = readRecord(input, 'account');
+    const status = readString(record.status, 'account.status');
+    if (status !== 'active' && status !== 'disabled') {
+        throw new PlatformAuthStateCorruptError(`Invalid account status: ${status}.`);
+    }
+    return {
+        id: readString(record.id, 'account.id'),
+        displayName: readString(record.displayName, 'account.displayName'),
+        email: readNullableString(record.email, 'account.email'),
+        avatarUrl: readNullableString(record.avatarUrl, 'account.avatarUrl'),
+        status,
+        createdAt: readString(record.createdAt, 'account.createdAt'),
+        updatedAt: readString(record.updatedAt, 'account.updatedAt'),
+    };
+}
+function readIdentityRecord(input) {
+    const record = readRecord(input, 'identity');
+    const provider = readString(record.provider, 'identity.provider');
+    if (provider !== 'local_password' && provider !== 'google') {
+        throw new PlatformAuthStateCorruptError(`Invalid identity provider: ${provider}.`);
+    }
+    const identity = {
+        id: readString(record.id, 'identity.id'),
+        accountId: readString(record.accountId, 'identity.accountId'),
+        provider,
+        providerSubject: readString(record.providerSubject, 'identity.providerSubject'),
+        email: readNullableString(record.email, 'identity.email'),
+        createdAt: readString(record.createdAt, 'identity.createdAt'),
+        updatedAt: readString(record.updatedAt, 'identity.updatedAt'),
+    };
+    const passwordHash = readOptionalString(record.passwordHash, 'identity.passwordHash');
+    const passwordHashAlgorithm = readOptionalString(record.passwordHashAlgorithm, 'identity.passwordHashAlgorithm');
+    if (passwordHash !== undefined) {
+        identity.passwordHash = passwordHash;
+    }
+    if (passwordHashAlgorithm !== undefined) {
+        identity.passwordHashAlgorithm = passwordHashAlgorithm;
+    }
+    return identity;
+}
+function readSessionRecord(input) {
+    const record = readRecord(input, 'session');
+    const kind = readString(record.kind, 'session.kind');
+    if (kind !== 'browser' && kind !== 'mobile_device') {
+        throw new PlatformAuthStateCorruptError(`Invalid session kind: ${kind}.`);
+    }
+    const session = {
+        id: readString(record.id, 'session.id'),
+        accountId: readString(record.accountId, 'session.accountId'),
+        kind,
+        tokenHash: readString(record.tokenHash, 'session.tokenHash'),
+        createdAt: readString(record.createdAt, 'session.createdAt'),
+        expiresAt: readString(record.expiresAt, 'session.expiresAt'),
+        revokedAt: readNullableString(record.revokedAt, 'session.revokedAt'),
+        lastSeenAt: readString(record.lastSeenAt, 'session.lastSeenAt'),
+    };
+    const csrfTokenHash = readOptionalString(record.csrfTokenHash, 'session.csrfTokenHash');
+    if (csrfTokenHash !== undefined) {
+        session.csrfTokenHash = csrfTokenHash;
+    }
+    const deviceLabel = readOptionalString(record.deviceLabel, 'session.deviceLabel');
+    if (deviceLabel !== undefined) {
+        session.deviceLabel = deviceLabel;
+    }
+    const devicePlatform = readOptionalString(record.devicePlatform, 'session.devicePlatform');
+    if (devicePlatform !== undefined) {
+        if (!['ios', 'android', 'web', 'unknown'].includes(devicePlatform)) {
+            throw new PlatformAuthStateCorruptError(`Invalid device platform: ${devicePlatform}.`);
+        }
+        session.devicePlatform = devicePlatform;
+    }
+    const appVersion = readOptionalString(record.appVersion, 'session.appVersion');
+    if (appVersion !== undefined) {
+        session.appVersion = appVersion;
+    }
+    const lastSeenAddress = readOptionalString(record.lastSeenAddress, 'session.lastSeenAddress');
+    if (lastSeenAddress !== undefined) {
+        session.lastSeenAddress = lastSeenAddress;
+    }
+    return session;
+}
+function readMembershipRecord(input) {
+    const record = readRecord(input, 'membership');
+    const roles = readArray(record.roles, 'membership.roles').map((role) => {
+        const value = readString(role, 'membership.roles[]');
+        if (!['owner', 'admin', 'operator', 'member'].includes(value)) {
+            throw new PlatformAuthStateCorruptError(`Invalid membership role: ${value}.`);
+        }
+        return value;
+    });
+    return {
+        id: readString(record.id, 'membership.id'),
+        accountId: readString(record.accountId, 'membership.accountId'),
+        roles,
+        coreActorId: readNullableString(record.coreActorId, 'membership.coreActorId'),
+        createdAt: readString(record.createdAt, 'membership.createdAt'),
+        updatedAt: readString(record.updatedAt, 'membership.updatedAt'),
+    };
+}
+function readLoginFailureRecord(input) {
+    const record = readRecord(input, 'loginFailure');
+    const provider = readIdentityProvider(record.provider, 'loginFailure.provider');
+    return {
+        id: readString(record.id, 'loginFailure.id'),
+        provider,
+        accountKey: readString(record.accountKey, 'loginFailure.accountKey'),
+        remoteAddress: readString(record.remoteAddress, 'loginFailure.remoteAddress'),
+        subnetKey: readString(record.subnetKey, 'loginFailure.subnetKey'),
+        failedAt: readString(record.failedAt, 'loginFailure.failedAt'),
+    };
+}
+function readLoginCooldownRecord(input) {
+    const record = readRecord(input, 'loginCooldown');
+    const reason = readString(record.reason, 'loginCooldown.reason');
+    if (!['composite_lockout', 'account_daily_cap', 'subnet_daily_cap'].includes(reason)) {
+        throw new PlatformAuthStateCorruptError(`Invalid login cooldown reason: ${reason}.`);
+    }
+    const provider = readIdentityProvider(record.provider, 'loginCooldown.provider');
+    return {
+        id: readString(record.id, 'loginCooldown.id'),
+        reason: reason,
+        provider,
+        accountKey: readNullableString(record.accountKey, 'loginCooldown.accountKey'),
+        remoteAddress: readNullableString(record.remoteAddress, 'loginCooldown.remoteAddress'),
+        subnetKey: readNullableString(record.subnetKey, 'loginCooldown.subnetKey'),
+        createdAt: readString(record.createdAt, 'loginCooldown.createdAt'),
+        expiresAt: readString(record.expiresAt, 'loginCooldown.expiresAt'),
+    };
+}
+function readRecord(input, label) {
+    if (typeof input !== 'object' || input === null || Array.isArray(input)) {
+        throw new PlatformAuthStateCorruptError(`${label} must be an object.`);
+    }
+    return input;
+}
+function readIdentityProvider(input, label) {
+    const provider = readString(input, label);
+    if (provider !== 'local_password' && provider !== 'google') {
+        throw new PlatformAuthStateCorruptError(`Invalid identity provider: ${provider}.`);
+    }
+    return provider;
+}
+function readArray(input, label) {
+    if (!Array.isArray(input)) {
+        throw new PlatformAuthStateCorruptError(`${label} must be an array.`);
+    }
+    return input;
+}
+function readOptionalArray(input, label) {
+    if (input === undefined) {
+        return [];
+    }
+    return readArray(input, label);
+}
+function readString(input, label) {
+    if (typeof input !== 'string') {
+        throw new PlatformAuthStateCorruptError(`${label} must be a string.`);
+    }
+    return input;
+}
+function readOptionalString(input, label) {
+    if (input === undefined) {
+        return undefined;
+    }
+    return readString(input, label);
+}
+function readNullableString(input, label) {
+    if (input === null || input === undefined) {
+        return null;
+    }
+    return readString(input, label);
+}
+//# sourceMappingURL=state.js.map

package/build/server/platform/auth/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../../src/platform/auth/state.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,GAQ5B,MAAM,YAAY,CAAC;AAOpB,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,UAAU,4BAA4B,CAC1C,MAAY,IAAI,IAAI,EAAE;IAEtB,OAAO;QACL,OAAO,EAAE,2BAA2B;QACpC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,EAAE;QACf,aAAa,EAAE,EAAE;QACjB,cAAc,EAAE,EAAE;KACnB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAwB;IAC7D,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAAc;IAEd,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IAAI,OAAO,KAAK,2BAA2B,EAAE,CAAC;QAC5C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,GAAG,2BAA2B,EAAE,CAAC;YACzE,MAAM,IAAI,6BAA6B,CACrC,sBAAsB,OAAO,oCAAoC,2BAA2B,GAAG,CAChG,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,6BAA6B,CAAC,+CAA+C,CAAC,CAAC;IAC3F,CAAC;IAED,OAAO;QACL,OAAO,EAAE,2BAA2B;QACpC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC;QACpD,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACvE,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC9E,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACvE,WAAW,EAAE,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACnF,aAAa,EAAE,iBAAiB,CAAC,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,GAAG,CACzE,sBAAsB,CACvB;QACD,cAAc,EAAE,iBAAiB,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,GAAG,CAC5E,uBAAuB,CACxB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3D,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QACjD,MAAM,IAAI,6BAA6B,CAAC,2BAA2B,MAAM,GAAG,CAAC,CAAC;IAChF,CAAC;IACD,OAAO;QACL,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC;QACvC,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,qBAAqB,CAAC;QAClE,KAAK,EAAE,kBAAkB,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC;QACxD,SAAS,EAAE,kBAAkB,CAAC,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC;QACpE,MAAM;QACN,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC;QAC5D,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAClE,IAAI,QAAQ,KAAK,gBAAgB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC3D,MAAM,IAAI,6BAA6B,CAAC,8BAA8B,QAAQ,GAAG,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,QAAQ,GAA2B;QACvC,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC;QACxC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,oBAAoB,CAAC;QAC7D,QAAQ;QACR,eAAe,EAAE,UAAU,CAAC,MAAM,CAAC,eAAe,EAAE,0BAA0B,CAAC;QAC/E,KAAK,EAAE,kBAAkB,CAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC;QACzD,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,oBAAoB,CAAC;QAC7D,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,oBAAoB,CAAC;KAC9D,CAAC;IACF,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IACtF,MAAM,qBAAqB,GAAG,kBAAkB,CAC9C,MAAM,CAAC,qBAAqB,EAC5B,gCAAgC,CACjC,CAAC;IACF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,QAAQ,CAAC,YAAY,GAAG,YAAY,CAAC;IACvC,CAAC;IACD,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;QACxC,QAAQ,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;IACzD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACrD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QACnD,MAAM,IAAI,6BAA6B,CAAC,yBAAyB,IAAI,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,OAAO,GAA0B;QACrC,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC;QACvC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC;QAC5D,IAAI;QACJ,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC;QAC5D,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC;QAC5D,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC;QAC5D,SAAS,EAAE,kBAAkB,CAAC,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC;QACpE,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,oBAAoB,CAAC;KAChE,CAAC;IACF,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IACxF,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;IACxC,CAAC;IACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;IAClF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC;IACpC,CAAC;IACD,MAAM,cAAc,GAAG,kBAAkB,CAAC,MAAM,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;IAC3F,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,6BAA6B,CAAC,4BAA4B,cAAc,GAAG,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,CAAC,cAAc,GAAG,cAAyD,CAAC;IACrF,CAAC;IACD,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;IAC/E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC;IAClC,CAAC;IACD,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAC;IAC9F,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,CAAC,eAAe,GAAG,eAAe,CAAC;IAC5C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACrE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;QACrD,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,6BAA6B,CAAC,4BAA4B,KAAK,GAAG,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,KAAkD,CAAC;IAC5D,CAAC,CAAC,CAAC;IACH,OAAO;QACL,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,CAAC;QAC1C,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,sBAAsB,CAAC;QAC/D,KAAK;QACL,WAAW,EAAE,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE,wBAAwB,CAAC;QAC7E,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,sBAAsB,CAAC;QAC/D,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,sBAAsB,CAAC;KAChE,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IAChF,OAAO;QACL,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,CAAC;QAC5C,QAAQ;QACR,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,yBAAyB,CAAC;QACpE,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,aAAa,EAAE,4BAA4B,CAAC;QAC7E,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,wBAAwB,CAAC;QACjE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,6BAA6B,CAAC,kCAAkC,MAAM,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IACjF,OAAO;QACL,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,kBAAkB,CAAC;QAC7C,MAAM,EAAE,MAA+C;QACvD,QAAQ;QACR,UAAU,EAAE,kBAAkB,CAAC,MAAM,CAAC,UAAU,EAAE,0BAA0B,CAAC;QAC7E,aAAa,EAAE,kBAAkB,CAAC,MAAM,CAAC,aAAa,EAAE,6BAA6B,CAAC;QACtF,SAAS,EAAE,kBAAkB,CAAC,MAAM,CAAC,SAAS,EAAE,yBAAyB,CAAC;QAC1E,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,yBAAyB,CAAC;QAClE,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,yBAAyB,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,6BAA6B,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAc,EACd,KAAa;IAEb,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,QAAQ,KAAK,gBAAgB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC3D,MAAM,IAAI,6BAA6B,CAAC,8BAA8B,QAAQ,GAAG,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,6BAA6B,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACtD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,6BAA6B,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAa;IACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAa;IACvD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC"}

package/build/server/platform/auth/store.d.ts

@@ -0,0 +1,36 @@
+import { type PlatformAuthStateReadStatus } from './state.js';
+import type { PlatformAuthState } from './types.js';
+export interface PlatformAuthStore {
+    readState(): Promise<PlatformAuthState>;
+    readStateStatus(): Promise<PlatformAuthStateReadStatus>;
+    writeState(state: PlatformAuthState): Promise<PlatformAuthState>;
+    updateState(mutator: (state: PlatformAuthState) => PlatformAuthState | Promise<PlatformAuthState>): Promise<PlatformAuthState>;
+}
+declare abstract class BasePlatformAuthStore implements PlatformAuthStore {
+    private readonly now;
+    private mutationQueue;
+    constructor(now?: () => Date);
+    protected currentDate(): Date;
+    protected abstract readSnapshotStatus(): Promise<PlatformAuthStateReadStatus>;
+    protected abstract writeSnapshot(state: PlatformAuthState): Promise<void>;
+    private runExclusive;
+    readStateStatus(): Promise<PlatformAuthStateReadStatus>;
+    readState(): Promise<PlatformAuthState>;
+    writeState(state: PlatformAuthState): Promise<PlatformAuthState>;
+    updateState(mutator: (state: PlatformAuthState) => PlatformAuthState | Promise<PlatformAuthState>): Promise<PlatformAuthState>;
+}
+export declare class MemoryPlatformAuthStore extends BasePlatformAuthStore {
+    private state;
+    constructor(initialState?: PlatformAuthState, now?: () => Date);
+    protected readSnapshotStatus(): Promise<PlatformAuthStateReadStatus>;
+    protected writeSnapshot(state: PlatformAuthState): Promise<void>;
+}
+export declare class FileBackedPlatformAuthStore extends BasePlatformAuthStore {
+    private readonly statePath;
+    constructor(statePath: string, now?: () => Date);
+    protected readSnapshotStatus(): Promise<PlatformAuthStateReadStatus>;
+    protected writeSnapshot(state: PlatformAuthState): Promise<void>;
+}
+export declare function createFileBackedPlatformAuthStore(chatStatePath: string, now?: () => Date): PlatformAuthStore;
+export {};
+//# sourceMappingURL=store.d.ts.map

package/build/server/platform/auth/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../../src/platform/auth/store.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,2BAA2B,EACjC,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAGpD,MAAM,WAAW,iBAAiB;IAChC,SAAS,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACxC,eAAe,IAAI,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxD,UAAU,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjE,WAAW,CACT,OAAO,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,GACpF,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC/B;AAED,uBAAe,qBAAsB,YAAW,iBAAiB;IAGnD,OAAO,CAAC,QAAQ,CAAC,GAAG;IAFhC,OAAO,CAAC,aAAa,CAAoC;gBAE5B,GAAG,GAAE,MAAM,IAAuB;IAE/D,SAAS,CAAC,WAAW,IAAI,IAAI;IAI7B,SAAS,CAAC,QAAQ,CAAC,kBAAkB,IAAI,OAAO,CAAC,2BAA2B,CAAC;IAC7E,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;YAE3D,YAAY;IAcpB,eAAe,IAAI,OAAO,CAAC,2BAA2B,CAAC;IAQvD,SAAS,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAcvC,UAAU,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAWhE,WAAW,CACf,OAAO,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,GACpF,OAAO,CAAC,iBAAiB,CAAC;CAiB9B;AAED,qBAAa,uBAAwB,SAAQ,qBAAqB;IAChE,OAAO,CAAC,KAAK,CAAoB;gBAG/B,YAAY,CAAC,EAAE,iBAAiB,EAChC,GAAG,CAAC,EAAE,MAAM,IAAI;cAQF,kBAAkB,IAAI,OAAO,CAAC,2BAA2B,CAAC;cAI1D,aAAa,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;CAGvE;AAED,qBAAa,2BAA4B,SAAQ,qBAAqB;IAElE,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,MAAM,EAClC,GAAG,CAAC,EAAE,MAAM,IAAI;cAKF,kBAAkB,IAAI,OAAO,CAAC,2BAA2B,CAAC;cAkB1D,aAAa,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;CAIvE;AAED,wBAAgB,iCAAiC,CAC/C,aAAa,EAAE,MAAM,EACrB,GAAG,CAAC,EAAE,MAAM,IAAI,GACf,iBAAiB,CAKnB"}

package/build/server/platform/auth/store.js

@@ -0,0 +1,124 @@
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { clonePlatformAuthState, createEmptyPlatformAuthState, normalizePlatformAuthState, } from './state.js';
+import { resolvePlatformAuthStatePathFromChatState } from '../../shared/platformPaths.js';
+class BasePlatformAuthStore {
+    now;
+    mutationQueue = Promise.resolve();
+    constructor(now = () => new Date()) {
+        this.now = now;
+    }
+    currentDate() {
+        return this.now();
+    }
+    async runExclusive(operation) {
+        const previous = this.mutationQueue;
+        let release = () => { };
+        this.mutationQueue = new Promise((resolve) => {
+            release = resolve;
+        });
+        await previous;
+        try {
+            return await operation();
+        }
+        finally {
+            release();
+        }
+    }
+    async readStateStatus() {
+        await this.mutationQueue;
+        const result = await this.readSnapshotStatus();
+        return result.status === 'ready'
+            ? { status: 'ready', state: clonePlatformAuthState(result.state) }
+            : result;
+    }
+    async readState() {
+        await this.mutationQueue;
+        const result = await this.readSnapshotStatus();
+        if (result.status === 'ready') {
+            return clonePlatformAuthState(result.state);
+        }
+        if (result.status === 'corrupt') {
+            throw result.error;
+        }
+        const empty = createEmptyPlatformAuthState(this.currentDate());
+        await this.writeSnapshot(empty);
+        return clonePlatformAuthState(empty);
+    }
+    async writeState(state) {
+        return this.runExclusive(async () => {
+            const next = {
+                ...clonePlatformAuthState(state),
+                updatedAt: this.currentDate().toISOString(),
+            };
+            await this.writeSnapshot(next);
+            return clonePlatformAuthState(next);
+        });
+    }
+    async updateState(mutator) {
+        return this.runExclusive(async () => {
+            const result = await this.readSnapshotStatus();
+            if (result.status === 'corrupt') {
+                throw result.error;
+            }
+            const current = result.status === 'ready'
+                ? clonePlatformAuthState(result.state)
+                : createEmptyPlatformAuthState(this.currentDate());
+            const next = {
+                ...clonePlatformAuthState(await mutator(current)),
+                updatedAt: this.currentDate().toISOString(),
+            };
+            await this.writeSnapshot(next);
+            return clonePlatformAuthState(next);
+        });
+    }
+}
+export class MemoryPlatformAuthStore extends BasePlatformAuthStore {
+    state;
+    constructor(initialState, now) {
+        super(now);
+        this.state = clonePlatformAuthState(initialState ?? createEmptyPlatformAuthState(now?.() ?? new Date()));
+    }
+    async readSnapshotStatus() {
+        return { status: 'ready', state: clonePlatformAuthState(this.state) };
+    }
+    async writeSnapshot(state) {
+        this.state = clonePlatformAuthState(state);
+    }
+}
+export class FileBackedPlatformAuthStore extends BasePlatformAuthStore {
+    statePath;
+    constructor(statePath, now) {
+        super(now);
+        this.statePath = statePath;
+    }
+    async readSnapshotStatus() {
+        try {
+            const raw = await readFile(this.statePath, 'utf-8');
+            return {
+                status: 'ready',
+                state: normalizePlatformAuthState(JSON.parse(raw)),
+            };
+        }
+        catch (error) {
+            if (isErrnoException(error) && error.code === 'ENOENT') {
+                return { status: 'missing' };
+            }
+            return {
+                status: 'corrupt',
+                error: error instanceof Error ? error : new Error(String(error)),
+            };
+        }
+    }
+    async writeSnapshot(state) {
+        await mkdir(path.dirname(this.statePath), { recursive: true });
+        await writeFile(this.statePath, `${JSON.stringify(state, null, 2)}\n`, 'utf-8');
+    }
+}
+export function createFileBackedPlatformAuthStore(chatStatePath, now) {
+    return new FileBackedPlatformAuthStore(resolvePlatformAuthStatePathFromChatState(chatStatePath), now);
+}
+function isErrnoException(error) {
+    return error instanceof Error && 'code' in error;
+}
+//# sourceMappingURL=store.js.map

package/build/server/platform/auth/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../../src/platform/auth/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,0BAA0B,GAE3B,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,yCAAyC,EAAE,MAAM,+BAA+B,CAAC;AAW1F,MAAe,qBAAqB;IAGL;IAFrB,aAAa,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEzD,YAA6B,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAAlC,QAAG,GAAH,GAAG,CAA+B;IAAG,CAAC;IAEzD,WAAW;QACnB,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;IAKO,KAAK,CAAC,YAAY,CAAI,SAA2B;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC;QACpC,IAAI,OAAO,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACjD,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC;QACf,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,IAAI,CAAC,aAAa,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,MAAM,KAAK,OAAO;YAC9B,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YAClE,CAAC,CAAC,MAAM,CAAC;IACb,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,CAAC,aAAa,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,MAAM,CAAC,KAAK,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/D,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAwB;QACvC,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE;YAClC,MAAM,IAAI,GAAG;gBACX,GAAG,sBAAsB,CAAC,KAAK,CAAC;gBAChC,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE;aAC5C,CAAC;YACF,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAC/B,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CACf,OAAqF;QAErF,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE;YAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,MAAM,CAAC,KAAK,CAAC;YACrB,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,OAAO;gBACvC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC;gBACtC,CAAC,CAAC,4BAA4B,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG;gBACX,GAAG,sBAAsB,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;gBACjD,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE;aAC5C,CAAC;YACF,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAC/B,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,qBAAqB;IACxD,KAAK,CAAoB;IAEjC,YACE,YAAgC,EAChC,GAAgB;QAEhB,KAAK,CAAC,GAAG,CAAC,CAAC;QACX,IAAI,CAAC,KAAK,GAAG,sBAAsB,CACjC,YAAY,IAAI,4BAA4B,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CACpE,CAAC;IACJ,CAAC;IAES,KAAK,CAAC,kBAAkB;QAChC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IACxE,CAAC;IAES,KAAK,CAAC,aAAa,CAAC,KAAwB;QACpD,IAAI,CAAC,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,OAAO,2BAA4B,SAAQ,qBAAqB;IAEjD;IADnB,YACmB,SAAiB,EAClC,GAAgB;QAEhB,KAAK,CAAC,GAAG,CAAC,CAAC;QAHM,cAAS,GAAT,SAAS,CAAQ;IAIpC,CAAC;IAES,KAAK,CAAC,kBAAkB;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACpD,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;aAC9D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;aACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAES,KAAK,CAAC,aAAa,CAAC,KAAwB;QACpD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClF,CAAC;CACF;AAED,MAAM,UAAU,iCAAiC,CAC/C,aAAqB,EACrB,GAAgB;IAEhB,OAAO,IAAI,2BAA2B,CACpC,yCAAyC,CAAC,aAAa,CAAC,EACxD,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}

package/build/server/platform/auth/throttle.d.ts

@@ -0,0 +1,62 @@
+import type { PlatformAuthState, PlatformLoginFailureProvider } from './types.js';
+export interface PlatformLoginThrottlePolicy {
+    loginFailureLimit: number;
+    loginLockoutMs: number;
+    accountDailyFailureCap: number;
+    accountCooldownMs: number;
+    subnetDailyFailureCap: number;
+}
+export interface PlatformLoginThrottleSubject {
+    provider: PlatformLoginFailureProvider;
+    accountKey: string;
+    remoteAddress: string;
+    subnetKey: string;
+}
+export type PlatformLoginThrottleBlockReason = 'composite_lockout' | 'account_daily_cap' | 'subnet_daily_cap';
+export interface PlatformLoginThrottleAlert {
+    reason: Extract<PlatformLoginThrottleBlockReason, 'account_daily_cap' | 'subnet_daily_cap'>;
+    provider: PlatformLoginFailureProvider;
+    createdAt: string;
+    expiresAt: string;
+}
+export type PlatformLoginThrottleEvaluation = {
+    blocked: false;
+    delayMs: number;
+} | {
+    blocked: true;
+    reason: PlatformLoginThrottleBlockReason;
+    retryAfterMs: number;
+};
+export declare function createLoginThrottleSubject(input: {
+    provider: PlatformLoginFailureProvider;
+    accountKey: string;
+    remoteAddress?: string | null;
+}): PlatformLoginThrottleSubject;
+export declare function normalizeLoginAccountKey(accountKey: string): string;
+export declare function normalizeLoginRemoteAddress(remoteAddress?: string | null): string;
+export declare function resolveLoginSubnetKey(remoteAddress: string): string;
+export declare function evaluateLoginThrottle(state: PlatformAuthState, input: {
+    subject: PlatformLoginThrottleSubject;
+    policy: PlatformLoginThrottlePolicy;
+    now?: Date;
+}): PlatformLoginThrottleEvaluation;
+export declare function recordFailedLogin(state: PlatformAuthState, input: {
+    subject: PlatformLoginThrottleSubject;
+    policy: PlatformLoginThrottlePolicy;
+    now?: Date;
+}): PlatformAuthState;
+export declare function collectLoginThrottleAlerts(previous: PlatformAuthState, next: PlatformAuthState): PlatformLoginThrottleAlert[];
+export declare function recordSuccessfulLogin(state: PlatformAuthState, input: {
+    subject: PlatformLoginThrottleSubject;
+    now?: Date;
+}): PlatformAuthState;
+export declare function clearLoginThrottleForAccount(state: PlatformAuthState, input: {
+    provider: PlatformLoginFailureProvider;
+    accountKey: string;
+    now?: Date;
+}): PlatformAuthState;
+export declare function clearAllLoginThrottleState(state: PlatformAuthState, input?: {
+    now?: Date;
+}): PlatformAuthState;
+export declare function pruneLoginThrottleState(state: PlatformAuthState, now?: Date): PlatformAuthState;
+//# sourceMappingURL=throttle.d.ts.map

package/build/server/platform/auth/throttle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"throttle.d.ts","sourceRoot":"","sources":["../../../../src/platform/auth/throttle.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAMlF,MAAM,WAAW,2BAA2B;IAC1C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,4BAA4B,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,gCAAgC,GACxC,mBAAmB,GACnB,mBAAmB,GACnB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,OAAO,CAAC,gCAAgC,EAAE,mBAAmB,GAAG,kBAAkB,CAAC,CAAC;IAC5F,QAAQ,EAAE,4BAA4B,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,+BAA+B,GACvC;IACE,OAAO,EAAE,KAAK,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,GACD;IACE,OAAO,EAAE,IAAI,CAAC;IACd,MAAM,EAAE,gCAAgC,CAAC;IACzC,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEN,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,EAAE,4BAA4B,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B,GAAG,4BAA4B,CAQ/B;AAED,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAMnE;AAED,wBAAgB,2BAA2B,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CASjF;AAED,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAYnE;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,iBAAiB,EACxB,KAAK,EAAE;IACL,OAAO,EAAE,4BAA4B,CAAC;IACtC,MAAM,EAAE,2BAA2B,CAAC;IACpC,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GACA,+BAA+B,CAgCjC;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,iBAAiB,EACxB,KAAK,EAAE;IACL,OAAO,EAAE,4BAA4B,CAAC;IACtC,MAAM,EAAE,2BAA2B,CAAC;IACpC,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GACA,iBAAiB,CA4EnB;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,iBAAiB,EAC3B,IAAI,EAAE,iBAAiB,GACtB,0BAA0B,EAAE,CAiB9B;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,iBAAiB,EACxB,KAAK,EAAE;IACL,OAAO,EAAE,4BAA4B,CAAC;IACtC,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GACA,iBAAiB,CAcnB;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,iBAAiB,EACxB,KAAK,EAAE;IACL,QAAQ,EAAE,4BAA4B,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GACA,iBAAiB,CAcnB;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,iBAAiB,EACxB,KAAK,GAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAA;CAAO,GACzB,iBAAiB,CAOnB;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,iBAAiB,EACxB,GAAG,GAAE,IAAiB,GACrB,iBAAiB,CAWnB"}