@cogenta/auth 0.1.0

package/dist/login.js

@@ -0,0 +1,300 @@
+import { createHmac, timingSafeEqual } from 'node:crypto';
+import { CogentaError } from '@cogenta/core';
+import { createCredentialStore } from './credentials.js';
+import { requiresMfa } from './mfa.js';
+import { createRateLimiter } from './rate-limit.js';
+import { createSessionStore } from './sessions.js';
+import { generateTotpSecret, totpUri, verifyTotp } from './totp.js';
+import { createUserStore } from './users.js';
+import { beginWebAuthnAuthentication, beginWebAuthnRegistration, completeWebAuthnAuthentication, completeWebAuthnRegistration, } from './webauthn.js';
+const TICKET_TTL_MS = 5 * 60 * 1000;
+/**
+ * A short-lived proof that a previous step already happened, carried between
+ * that step and whatever completes it.
+ *
+ * The same shape as a preview grant (`@cogenta/api`'s `previewCovers`): an
+ * opaque HMAC-signed ticket rather than server-side state, so the next step
+ * cannot be completed for a user (or a ceremony) whose earlier step never
+ * happened — the ticket is the only thing that says it did, and it cannot be
+ * forged without the signing key. A WebAuthn challenge rides in the same
+ * ticket rather than a separate store: `webauthn.ts`'s own doc says challenge
+ * storage is deliberately this layer's job, not a database table for
+ * something single-use that lives seconds.
+ *
+ * `purpose` is part of what gets signed, not a separate check layered on
+ * top: a login ticket and a first-time TOTP-setup ticket (or a WebAuthn
+ * registration ticket and a WebAuthn login ticket) must not be
+ * interchangeable, and folding the purpose into the signature is what makes
+ * swapping one for another a signature mismatch rather than a bug to
+ * remember not to introduce.
+ */
+function signTicket(key, payload) {
+    const encoded = Buffer.from(JSON.stringify(payload)).toString('base64url');
+    const signature = createHmac('sha256', key).update(encoded).digest('base64url');
+    return `${encoded}.${signature}`;
+}
+function verifyTicket(key, purpose, ticket, now) {
+    const [payload, signature] = ticket.split('.');
+    if (payload === undefined || signature === undefined)
+        return null;
+    const expected = createHmac('sha256', key).update(payload).digest('base64url');
+    const a = Buffer.from(signature);
+    const b = Buffer.from(expected);
+    if (a.length !== b.length || !timingSafeEqual(a, b))
+        return null;
+    try {
+        const parsed = JSON.parse(Buffer.from(payload, 'base64url').toString());
+        if (parsed.purpose !== purpose)
+            return null;
+        if (parsed.userId !== null && typeof parsed.userId !== 'string')
+            return null;
+        if (typeof parsed.expiresAt !== 'number' || parsed.expiresAt <= now)
+            return null;
+        if (parsed.challenge !== undefined && typeof parsed.challenge !== 'string')
+            return null;
+        return { userId: parsed.userId, challenge: parsed.challenge };
+    }
+    catch {
+        return null;
+    }
+}
+function invalidTicket() {
+    return new CogentaError({
+        code: 'AUTH_SESSION_INVALID',
+        message: 'This sign-in attempt has expired or is invalid.',
+        hint: 'Start over from the password step.',
+    });
+}
+function webauthnNotConfigured() {
+    return new CogentaError({
+        code: 'AUTH_WEBAUTHN_FAILED',
+        message: 'Passkeys are not configured for this site.',
+        hint: 'Set relyingPartyName, relyingPartyId and origin when creating the auth service.',
+    });
+}
+export function createAuthService(options) {
+    const { db, signingKey, collections, webauthn: webauthnConfig } = options;
+    const issuer = options.issuer ?? 'Cogenta';
+    const now = options.now ?? Date.now;
+    const users = createUserStore(db, now);
+    const credentials = createCredentialStore(db, now);
+    const sessions = createSessionStore(db, now);
+    const rateLimit = createRateLimiter(db, now);
+    async function issueSession(user) {
+        const session = await sessions.create(user.id);
+        return { status: 'session', session, user };
+    }
+    async function mfaChallenge(user) {
+        const kinds = await credentials.kinds(user.id);
+        const available = [];
+        if (kinds.includes('totp'))
+            available.push('totp');
+        if (kinds.includes('webauthn'))
+            available.push('webauthn');
+        if (available.length === 0) {
+            // A role that requires MFA and a user who never set one up: this is
+            // the one place that enrolment can start, with a ticket scoped to
+            // exactly that — it proves the password step happened, and nothing
+            // more, the same as the ordinary MFA ticket proves the same thing for
+            // completing a second factor that already exists.
+            return {
+                status: 'totp_setup_required',
+                ticket: signTicket(signingKey, {
+                    purpose: 'totp_setup',
+                    userId: user.id,
+                    expiresAt: now() + TICKET_TTL_MS,
+                }),
+            };
+        }
+        return {
+            status: 'mfa_required',
+            ticket: signTicket(signingKey, {
+                purpose: 'login',
+                userId: user.id,
+                expiresAt: now() + TICKET_TTL_MS,
+            }),
+            availableFactors: available,
+        };
+    }
+    return {
+        passwordLogin: async (email, password) => {
+            const subject = email.trim().toLowerCase();
+            await rateLimit.check(subject);
+            const user = await users.byEmail(subject);
+            const valid = user !== null && (await credentials.verifyPassword(user.id, password));
+            if (!valid || user === null || user.status !== 'active') {
+                await rateLimit.record(subject);
+                throw new CogentaError({
+                    code: 'AUTH_INVALID_CREDENTIALS',
+                    message: 'Incorrect email or password.',
+                    hint: 'Check the email and password. Repeated failures are rate-limited.',
+                });
+            }
+            await rateLimit.clear(subject);
+            return requiresMfa(user.roles, collections) ? mfaChallenge(user) : issueSession(user);
+        },
+        totpLogin: async (ticket, token) => {
+            const verified = verifyTicket(signingKey, 'login', ticket, now());
+            if (verified === null || verified.userId === null)
+                throw invalidTicket();
+            const userId = verified.userId;
+            await rateLimit.check(`mfa:${userId}`);
+            const stored = await credentials.totpSecret(userId);
+            const ok = stored !== null &&
+                stored.verified &&
+                verifyTotp(token, stored.secret, { now: Math.floor(now() / 1000) });
+            if (!ok) {
+                await rateLimit.record(`mfa:${userId}`);
+                throw new CogentaError({
+                    code: 'AUTH_INVALID_CREDENTIALS',
+                    message: 'Incorrect verification code.',
+                    hint: 'Check the code from your authenticator app. Codes are valid for 30 seconds.',
+                });
+            }
+            const user = await users.byId(userId);
+            if (user === null) {
+                throw new CogentaError({
+                    code: 'AUTH_USER_NOT_FOUND',
+                    message: 'This account no longer exists.',
+                    hint: 'It may have been deleted between the password step and this one. Sign in again.',
+                });
+            }
+            await rateLimit.clear(`mfa:${userId}`);
+            return issueSession(user);
+        },
+        sessionForVerifiedUser: async (userId) => {
+            const user = await users.byId(userId);
+            if (user === null || user.status !== 'active') {
+                throw new CogentaError({
+                    code: 'AUTH_USER_NOT_FOUND',
+                    message: 'This account no longer exists or is disabled.',
+                });
+            }
+            return issueSession(user);
+        },
+        beginTotpSetup: async (ticket) => {
+            const verified = verifyTicket(signingKey, 'totp_setup', ticket, now());
+            if (verified === null || verified.userId === null)
+                throw invalidTicket();
+            const user = await users.byId(verified.userId);
+            if (user === null) {
+                throw new CogentaError({
+                    code: 'AUTH_USER_NOT_FOUND',
+                    message: 'This account no longer exists.',
+                    hint: 'It may have been deleted between the password step and this one. Sign in again.',
+                });
+            }
+            // A fresh secret every time this is called, even for the same ticket:
+            // requesting the QR code again (a slow scan, a wrong app) must not
+            // let two different secrets both end up "current" — only the last one
+            // requested can ever be confirmed.
+            const secret = generateTotpSecret();
+            await credentials.setTotpSecret(user.id, secret);
+            return { secret, uri: totpUri(secret, issuer, user.email) };
+        },
+        confirmTotpSetup: async (ticket, token) => {
+            const verified = verifyTicket(signingKey, 'totp_setup', ticket, now());
+            if (verified === null || verified.userId === null)
+                throw invalidTicket();
+            const userId = verified.userId;
+            await rateLimit.check(`totp-setup:${userId}`);
+            const stored = await credentials.totpSecret(userId);
+            const ok = stored !== null && verifyTotp(token, stored.secret, { now: Math.floor(now() / 1000) });
+            if (!ok) {
+                await rateLimit.record(`totp-setup:${userId}`);
+                throw new CogentaError({
+                    code: 'AUTH_INVALID_CREDENTIALS',
+                    message: 'Incorrect verification code.',
+                    hint: 'Check the code from your authenticator app. Codes are valid for 30 seconds.',
+                });
+            }
+            const user = await users.byId(userId);
+            if (user === null) {
+                throw new CogentaError({
+                    code: 'AUTH_USER_NOT_FOUND',
+                    message: 'This account no longer exists.',
+                    hint: 'It may have been deleted since the password step. Sign in again.',
+                });
+            }
+            await rateLimit.clear(`totp-setup:${userId}`);
+            await credentials.confirmTotp(userId);
+            return issueSession(user);
+        },
+        beginWebAuthnRegistration: async (userId) => {
+            if (webauthnConfig === undefined)
+                throw webauthnNotConfigured();
+            const user = await users.byId(userId);
+            if (user === null) {
+                throw new CogentaError({
+                    code: 'AUTH_USER_NOT_FOUND',
+                    message: 'This account no longer exists.',
+                });
+            }
+            const existing = await credentials.webAuthnCredentials(userId);
+            const { options, challenge } = await beginWebAuthnRegistration(webauthnConfig, userId, user.email, existing);
+            return {
+                options,
+                ticket: signTicket(signingKey, {
+                    purpose: 'webauthn_register',
+                    userId,
+                    challenge,
+                    expiresAt: now() + TICKET_TTL_MS,
+                }),
+            };
+        },
+        completeWebAuthnRegistration: async (ticket, response, label) => {
+            if (webauthnConfig === undefined)
+                throw webauthnNotConfigured();
+            const verified = verifyTicket(signingKey, 'webauthn_register', ticket, now());
+            if (verified === null || verified.userId === null || verified.challenge === undefined) {
+                throw invalidTicket();
+            }
+            const credential = await completeWebAuthnRegistration(webauthnConfig, response, verified.challenge, label);
+            await credentials.addWebAuthnCredential(verified.userId, credential);
+        },
+        beginWebAuthnLogin: async () => {
+            if (webauthnConfig === undefined)
+                throw webauthnNotConfigured();
+            // No `allowCredentials`: this is the discoverable-credential (resident
+            // key) flow — the browser prompts for whichever passkey it holds for
+            // this site, and the assertion's own credential id says which account
+            // it is, rather than the server naming one up front.
+            const { options, challenge } = await beginWebAuthnAuthentication(webauthnConfig, []);
+            return {
+                options,
+                ticket: signTicket(signingKey, {
+                    purpose: 'webauthn_login',
+                    userId: null,
+                    challenge,
+                    expiresAt: now() + TICKET_TTL_MS,
+                }),
+            };
+        },
+        completeWebAuthnLogin: async (ticket, response) => {
+            if (webauthnConfig === undefined)
+                throw webauthnNotConfigured();
+            const verified = verifyTicket(signingKey, 'webauthn_login', ticket, now());
+            if (verified === null || verified.challenge === undefined)
+                throw invalidTicket();
+            const found = await credentials.webAuthnCredentialByExternalId(response.id);
+            if (found === null) {
+                throw new CogentaError({
+                    code: 'AUTH_WEBAUTHN_FAILED',
+                    message: 'This passkey is not registered with any account.',
+                    hint: 'Register it first from an already-signed-in session, or use a different sign-in method.',
+                });
+            }
+            const result = await completeWebAuthnAuthentication(webauthnConfig, response, verified.challenge, found.data);
+            await credentials.updateWebAuthnCounter(found.data.credentialId, result.newCounter);
+            const user = await users.byId(found.userId);
+            if (user === null || user.status !== 'active') {
+                throw new CogentaError({
+                    code: 'AUTH_USER_NOT_FOUND',
+                    message: 'This account no longer exists or is disabled.',
+                });
+            }
+            return issueSession(user);
+        },
+    };
+}
+//# sourceMappingURL=login.js.map

package/dist/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../src/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAAE,YAAY,EAAuB,MAAM,eAAe,CAAA;AAQjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAClD,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAEnE,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,8BAA8B,EAC9B,4BAA4B,GAE7B,MAAM,eAAe,CAAA;AAEtB,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;AAkBnC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,UAAU,CAAC,GAAW,EAAE,OAAsB;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IAC1E,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC/E,OAAO,GAAG,OAAO,IAAI,SAAS,EAAE,CAAA;AAClC,CAAC;AAED,SAAS,YAAY,CACnB,GAAW,EACX,OAAsB,EACtB,MAAc,EACd,GAAW;IAEX,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9C,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IAEjE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC9E,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAEhE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAKrE,CAAA;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO,IAAI,CAAA;QAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QAC5E,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG;YAAE,OAAO,IAAI,CAAA;QAChF,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QACvF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAA;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAsED,SAAS,aAAa;IACpB,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,iDAAiD;QAC1D,IAAI,EAAE,oCAAoC;KAC3C,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,4CAA4C;QACrD,IAAI,EAAE,iFAAiF;KACxF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,OAAO,CAAA;IACzE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,SAAS,CAAA;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACnC,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IACtC,MAAM,WAAW,GAAG,qBAAqB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IAClD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,iBAAiB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IAE5C,KAAK,UAAU,YAAY,CAAC,IAAU;QACpC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC9C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC7C,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,IAAU;QACpC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC9C,MAAM,SAAS,GAA4B,EAAE,CAAA;QAC7C,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAE1D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,oEAAoE;YACpE,kEAAkE;YAClE,mEAAmE;YACnE,sEAAsE;YACtE,kDAAkD;YAClD,OAAO;gBACL,MAAM,EAAE,qBAAqB;gBAC7B,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE;oBAC7B,OAAO,EAAE,YAAY;oBACrB,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,SAAS,EAAE,GAAG,EAAE,GAAG,aAAa;iBACjC,CAAC;aACH,CAAA;QACH,CAAC;QAED,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE;gBAC7B,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,SAAS,EAAE,GAAG,EAAE,GAAG,aAAa;aACjC,CAAC;YACF,gBAAgB,EAAE,SAAS;SAC5B,CAAA;IACH,CAAC;IAED,OAAO;QACL,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YAC1C,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAE9B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YACzC,MAAM,KAAK,GAAG,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAA;YAEpF,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxD,MAAM,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;gBAC/B,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,8BAA8B;oBACvC,IAAI,EAAE,mEAAmE;iBAC1E,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC9B,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QACvF,CAAC;QAED,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;YACjC,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YACjE,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI;gBAAE,MAAM,aAAa,EAAE,CAAA;YACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;YAE9B,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,MAAM,EAAE,CAAC,CAAA;YACtC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YACnD,MAAM,EAAE,GACN,MAAM,KAAK,IAAI;gBACf,MAAM,CAAC,QAAQ;gBACf,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAA;YAErE,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,SAAS,CAAC,MAAM,CAAC,OAAO,MAAM,EAAE,CAAC,CAAA;gBACvC,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,8BAA8B;oBACvC,IAAI,EAAE,6EAA6E;iBACpF,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACrC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,gCAAgC;oBACzC,IAAI,EAAE,iFAAiF;iBACxF,CAAC,CAAA;YACJ,CAAC;YACD,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,MAAM,EAAE,CAAC,CAAA;YACtC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;QAC3B,CAAC;QAED,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACrC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC9C,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,+CAA+C;iBACzD,CAAC,CAAA;YACJ,CAAC;YACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;QAC3B,CAAC;QAED,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC/B,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YACtE,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI;gBAAE,MAAM,aAAa,EAAE,CAAA;YAExE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YAC9C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,gCAAgC;oBACzC,IAAI,EAAE,iFAAiF;iBACxF,CAAC,CAAA;YACJ,CAAC;YAED,sEAAsE;YACtE,mEAAmE;YACnE,sEAAsE;YACtE,mCAAmC;YACnC,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAA;YACnC,MAAM,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;YAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAA;QAC7D,CAAC;QAED,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;YACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YACtE,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI;gBAAE,MAAM,aAAa,EAAE,CAAA;YACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;YAE9B,MAAM,SAAS,CAAC,KAAK,CAAC,cAAc,MAAM,EAAE,CAAC,CAAA;YAC7C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YACnD,MAAM,EAAE,GACN,MAAM,KAAK,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAA;YAExF,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,SAAS,CAAC,MAAM,CAAC,cAAc,MAAM,EAAE,CAAC,CAAA;gBAC9C,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,8BAA8B;oBACvC,IAAI,EAAE,6EAA6E;iBACpF,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACrC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,gCAAgC;oBACzC,IAAI,EAAE,kEAAkE;iBACzE,CAAC,CAAA;YACJ,CAAC;YACD,MAAM,SAAS,CAAC,KAAK,CAAC,cAAc,MAAM,EAAE,CAAC,CAAA;YAC7C,MAAM,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;YACrC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;QAC3B,CAAC;QAED,yBAAyB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,cAAc,KAAK,SAAS;gBAAE,MAAM,qBAAqB,EAAE,CAAA;YAC/D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACrC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,gCAAgC;iBAC1C,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAA;YAC9D,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,yBAAyB,CAC5D,cAAc,EACd,MAAM,EACN,IAAI,CAAC,KAAK,EACV,QAAQ,CACT,CAAA;YACD,OAAO;gBACL,OAAO;gBACP,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE;oBAC7B,OAAO,EAAE,mBAAmB;oBAC5B,MAAM;oBACN,SAAS;oBACT,SAAS,EAAE,GAAG,EAAE,GAAG,aAAa;iBACjC,CAAC;aACH,CAAA;QACH,CAAC;QAED,4BAA4B,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;YAC9D,IAAI,cAAc,KAAK,SAAS;gBAAE,MAAM,qBAAqB,EAAE,CAAA;YAC/D,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7E,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACtF,MAAM,aAAa,EAAE,CAAA;YACvB,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,4BAA4B,CACnD,cAAc,EACd,QAAQ,EACR,QAAQ,CAAC,SAAS,EAClB,KAAK,CACN,CAAA;YACD,MAAM,WAAW,CAAC,qBAAqB,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;QACtE,CAAC;QAED,kBAAkB,EAAE,KAAK,IAAI,EAAE;YAC7B,IAAI,cAAc,KAAK,SAAS;gBAAE,MAAM,qBAAqB,EAAE,CAAA;YAC/D,uEAAuE;YACvE,qEAAqE;YACrE,sEAAsE;YACtE,qDAAqD;YACrD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,2BAA2B,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;YACpF,OAAO;gBACL,OAAO;gBACP,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE;oBAC7B,OAAO,EAAE,gBAAgB;oBACzB,MAAM,EAAE,IAAI;oBACZ,SAAS;oBACT,SAAS,EAAE,GAAG,EAAE,GAAG,aAAa;iBACjC,CAAC;aACH,CAAA;QACH,CAAC;QAED,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YAChD,IAAI,cAAc,KAAK,SAAS;gBAAE,MAAM,qBAAqB,EAAE,CAAA;YAC/D,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1E,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;gBAAE,MAAM,aAAa,EAAE,CAAA;YAEhF,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,8BAA8B,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YAC3E,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,kDAAkD;oBAC3D,IAAI,EAAE,yFAAyF;iBAChG,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,8BAA8B,CACjD,cAAc,EACd,QAAQ,EACR,QAAQ,CAAC,SAAS,EAClB,KAAK,CAAC,IAAI,CACX,CAAA;YACD,MAAM,WAAW,CAAC,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;YAEnF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YAC3C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC9C,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,+CAA+C;iBACzD,CAAC,CAAA;YACJ,CAAC;YACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;QAC3B,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/mfa.d.ts

@@ -0,0 +1,4 @@
+import type { CollectionDefinition } from '@cogenta/schema';
+export declare function sensitiveRoles(collections: readonly CollectionDefinition[]): ReadonlySet<string>;
+export declare function requiresMfa(userRoles: readonly string[], collections: readonly CollectionDefinition[]): boolean;
+//# sourceMappingURL=mfa.d.ts.map

package/dist/mfa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa.d.ts","sourceRoot":"","sources":["../src/mfa.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAkB3D,wBAAgB,cAAc,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAMhG;AAED,wBAAgB,WAAW,CACzB,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,WAAW,EAAE,SAAS,oBAAoB,EAAE,GAC3C,OAAO,CAGT"}

package/dist/mfa.js

@@ -0,0 +1,28 @@
+/**
+ * Whether a role must clear a second factor before it can act.
+ *
+ * The spec names `content.publish` and `site.config_write` — contract C's
+ * permission taxonomy, for an agent tool. L2 has no tool permissions yet; the
+ * faithful reading for a **collection**-scoped role (contract A) is the
+ * closest equivalent action: a role that can `publish` on any collection, and
+ * the `admin` role always, since site configuration has no dedicated model in
+ * L2 and `admin` is where that power concentrates until it does.
+ *
+ * This is not configurable per site, on purpose — the spec says "non
+ * contournable par configuration", and a setting that can be turned off is a
+ * setting that will be, by whoever is in the biggest hurry the day it matters.
+ */
+const ALWAYS_SENSITIVE_ROLES = new Set(['admin']);
+export function sensitiveRoles(collections) {
+    const roles = new Set(ALWAYS_SENSITIVE_ROLES);
+    for (const collection of collections) {
+        for (const role of collection.permissions.publish ?? [])
+            roles.add(role);
+    }
+    return roles;
+}
+export function requiresMfa(userRoles, collections) {
+    const sensitive = sensitiveRoles(collections);
+    return userRoles.some((role) => sensitive.has(role));
+}
+//# sourceMappingURL=mfa.js.map

package/dist/mfa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa.js","sourceRoot":"","sources":["../src/mfa.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;AAEjD,MAAM,UAAU,cAAc,CAAC,WAA4C;IACzE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,sBAAsB,CAAC,CAAA;IAC7C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,WAAW,CAAC,OAAO,IAAI,EAAE;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC1E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,SAA4B,EAC5B,WAA4C;IAE5C,MAAM,SAAS,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;IAC7C,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;AACtD,CAAC"}

package/dist/password.d.ts

@@ -0,0 +1,11 @@
+export declare function hashPassword(password: string): Promise<string>;
+/**
+ * Verifies a password against a stored hash.
+ *
+ * Every failure path — wrong format, wrong length, wrong bytes — takes the
+ * same route to `false` in roughly the same time. A verify function whose
+ * error path is faster than its comparison path leaks, through timing, which
+ * kind of wrong the guess was.
+ */
+export declare function verifyPassword(password: string, stored: string): Promise<boolean>;
+//# sourceMappingURL=password.d.ts.map

package/dist/password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../src/password.ts"],"names":[],"mappings":"AA8CA,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAUpE;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAYvF"}

package/dist/password.js

@@ -0,0 +1,108 @@
+import { randomBytes, scrypt as scryptCallback, timingSafeEqual } from 'node:crypto';
+import { CogentaError } from '@cogenta/core';
+// `util.promisify` cannot see the options-object overload of `scrypt`, only
+// the no-options one — this wrapper is the three extra lines that buys back
+// the tunable cost parameters without losing the async, non-blocking form.
+function scrypt(password, salt, keyLength, params) {
+    return new Promise((resolve, reject) => {
+        // Node refuses to run scrypt above its default 32MB `maxmem` ceiling, and
+        // the OWASP-floor cost below (N=2^15, r=8) needs `128 * N * r` = exactly
+        // that many bytes before OpenSSL's own overhead — so the default clips
+        // it. Raise the ceiling instead of lowering the cost.
+        const maxmem = 128 * params.N * params.r * 2;
+        scryptCallback(password, salt, keyLength, { ...params, maxmem }, (error, derived) => {
+            if (error)
+                reject(error);
+            else
+                resolve(derived);
+        });
+    });
+}
+/**
+ * scrypt from `node:crypto`, not a dependency.
+ *
+ * bcrypt and argon2 are both native modules — R10 forbids that without a WASM
+ * fallback, and neither ships one. scrypt is memory-hard, tunable, and has
+ * been in Node's standard library since 10.5, so there is nothing to add.
+ */
+const KEY_LENGTH = 64;
+const SALT_LENGTH = 16;
+// N=2^15 costs roughly 100ms on ordinary hardware. Doubling it doubles login
+// latency for everyone to make one offline attacker's job twice as hard; this
+// is the OWASP-recommended floor for scrypt, not a guess.
+const SCRYPT_PARAMS = { N: 2 ** 15, r: 8, p: 1 };
+const MAX_INPUT_LENGTH = 512;
+export async function hashPassword(password) {
+    assertLength(password);
+    const salt = randomBytes(SALT_LENGTH);
+    const derived = await scrypt(password.normalize('NFKC'), salt, KEY_LENGTH, SCRYPT_PARAMS);
+    // Parameters travel with the hash, the way bcrypt embeds its cost factor.
+    // Raising SCRYPT_PARAMS later must not invalidate every password already
+    // stored — it invalidates none, because each hash carries what made it.
+    const { N, r, p } = SCRYPT_PARAMS;
+    return `scrypt$${N}$${r}$${p}$${salt.toString('base64url')}$${derived.toString('base64url')}`;
+}
+/**
+ * Verifies a password against a stored hash.
+ *
+ * Every failure path — wrong format, wrong length, wrong bytes — takes the
+ * same route to `false` in roughly the same time. A verify function whose
+ * error path is faster than its comparison path leaks, through timing, which
+ * kind of wrong the guess was.
+ */
+export async function verifyPassword(password, stored) {
+    const parsed = parseHash(stored);
+    if (parsed === null)
+        return false;
+    if (password.length === 0 || password.length > MAX_INPUT_LENGTH)
+        return false;
+    const derived = await scrypt(password.normalize('NFKC'), parsed.salt, parsed.expected.length, {
+        N: parsed.N,
+        r: parsed.r,
+        p: parsed.p,
+    });
+    return derived.length === parsed.expected.length && timingSafeEqual(derived, parsed.expected);
+}
+function parseHash(stored) {
+    const parts = stored.split('$');
+    if (parts.length !== 6 || parts[0] !== 'scrypt')
+        return null;
+    const N = Number(parts[1]);
+    const r = Number(parts[2]);
+    const p = Number(parts[3]);
+    if (![N, r, p].every((value) => Number.isInteger(value) && value > 0))
+        return null;
+    // An empty salt or hash field parses fine but must not verify: scrypt with
+    // a zero-length key returns a zero-length buffer, which trivially equals
+    // another zero-length buffer — an empty stored hash would then "match"
+    // any password.
+    if (parts[4] === '' || parts[5] === '')
+        return null;
+    try {
+        const salt = Buffer.from(parts[4] ?? '', 'base64url');
+        const expected = Buffer.from(parts[5] ?? '', 'base64url');
+        if (salt.length === 0 || expected.length === 0)
+            return null;
+        return { N, r, p, salt, expected };
+    }
+    catch {
+        return null;
+    }
+}
+function assertLength(password) {
+    if (password.length === 0) {
+        throw new CogentaError({
+            code: 'AUTH_PASSWORD_INVALID',
+            message: 'A password must not be empty.',
+            hint: 'Ask for a password with at least a minimum length before hashing it.',
+        });
+    }
+    if (password.length > MAX_INPUT_LENGTH) {
+        throw new CogentaError({
+            code: 'AUTH_PASSWORD_INVALID',
+            message: `A password longer than ${MAX_INPUT_LENGTH} characters is refused before hashing.`,
+            hint: 'scrypt has no practical upper bound, but an unbounded input is a denial-of-service knob — a large password costs CPU proportional to its length before it is even compared.',
+        });
+    }
+}
+//# sourceMappingURL=password.js.map

package/dist/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../src/password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,IAAI,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAQ5C,4EAA4E;AAC5E,4EAA4E;AAC5E,2EAA2E;AAC3E,SAAS,MAAM,CACb,QAAgB,EAChB,IAAY,EACZ,SAAiB,EACjB,MAAoB;IAEpB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,0EAA0E;QAC1E,yEAAyE;QACzE,uEAAuE;QACvE,sDAAsD;QACtD,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAA;QAC5C,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAClF,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAA;;gBACnB,OAAO,CAAC,OAAO,CAAC,CAAA;QACvB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,EAAE,CAAA;AACrB,MAAM,WAAW,GAAG,EAAE,CAAA;AACtB,6EAA6E;AAC7E,8EAA8E;AAC9E,0DAA0D;AAC1D,MAAM,aAAa,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAW,CAAA;AACzD,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAE5B,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,YAAY,CAAC,QAAQ,CAAC,CAAA;IACtB,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IACrC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;IAEzF,0EAA0E;IAC1E,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,aAAa,CAAA;IACjC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAA;AAC/F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,MAAc;IACnE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;IAChC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,gBAAgB;QAAE,OAAO,KAAK,CAAA;IAE7E,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE;QAC5F,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,CAAC,EAAE,MAAM,CAAC,CAAC;KACZ,CAAC,CAAA;IAEF,OAAO,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;AAC/F,CAAC;AAUD,SAAS,SAAS,CAAC,MAAc;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAE5D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAElF,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,gBAAgB;IAChB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAA;IAEnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAA;QACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAA;QACzD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAC3D,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,+BAA+B;YACxC,IAAI,EAAE,sEAAsE;SAC7E,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACvC,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,0BAA0B,gBAAgB,wCAAwC;YAC3F,IAAI,EAAE,6KAA6K;SACpL,CAAC,CAAA;IACJ,CAAC;AACH,CAAC"}

package/dist/rate-limit.d.ts

@@ -0,0 +1,10 @@
+import { type DatabaseHandle } from '@cogenta/core';
+export interface RateLimiter {
+    /** Throws `AUTH_RATE_LIMITED` if the subject is currently backed off. */
+    check(subject: string): Promise<void>;
+    record(subject: string): Promise<void>;
+    /** Called after a successful login: past failures stop counting against them. */
+    clear(subject: string): Promise<void>;
+}
+export declare function createRateLimiter(db: DatabaseHandle, now?: () => number): RateLimiter;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,cAAc,EAA0B,MAAM,eAAe,CAAA;AAmBzF,MAAM,WAAW,WAAW;IAC1B,yEAAyE;IACzE,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtC,iFAAiF;IACjF,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACtC;AAED,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,GAAE,MAAM,MAAiB,GAAG,WAAW,CAkC/F"}

package/dist/rate-limit.js

@@ -0,0 +1,47 @@
+import { CogentaError, identifier, newId, sql } from '@cogenta/core';
+import { TABLES } from './tables.js';
+/**
+ * Backoff on login attempts, keyed by subject — the email tried, or the caller's
+ * IP when the email itself is what needs protecting from enumeration.
+ *
+ * Progressive, not a hard cap: five attempts inside a minute is a typo, thirty
+ * is a script. The delay is what makes a script expensive without locking a
+ * real person out of their own account after one bad guess.
+ */
+const WINDOW_MS = 15 * 60 * 1000;
+const THRESHOLDS = [
+    { attempts: 5, delayMs: 1_000 },
+    { attempts: 10, delayMs: 10_000 },
+    { attempts: 15, delayMs: 60_000 },
+    { attempts: 20, delayMs: 15 * 60 * 1000 },
+];
+export function createRateLimiter(db, now = Date.now) {
+    const table = identifier(TABLES.loginAttempts, db.dialect);
+    async function countRecent(subject) {
+        const since = new Date(now() - WINDOW_MS).toISOString();
+        const result = await db.query(sql `select count(*) as n from ${table} where subject = ${subject} and at >= ${since}`);
+        return Number(result.rows[0]?.n ?? 0);
+    }
+    return {
+        check: async (subject) => {
+            const attempts = await countRecent(subject);
+            const threshold = [...THRESHOLDS].reverse().find((entry) => attempts >= entry.attempts);
+            if (threshold === undefined)
+                return;
+            throw new CogentaError({
+                code: 'AUTH_RATE_LIMITED',
+                message: 'Too many attempts. Try again later.',
+                hint: `Wait about ${Math.ceil(threshold.delayMs / 1000)} seconds before trying again, or use a passkey, which this limit does not slow down.`,
+                details: { retryAfterMs: threshold.delayMs },
+            });
+        },
+        record: async (subject) => {
+            await db.query(sql `
+        insert into ${table} (id, subject, at) values (${newId(now)}, ${subject}, ${new Date(now()).toISOString()})`);
+        },
+        clear: async (subject) => {
+            await db.query(sql `delete from ${table} where subject = ${subject}`);
+        },
+    };
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAuB,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC;;;;;;;GAOG;AACH,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAChC,MAAM,UAAU,GAAuE;IACrF,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE;IAC/B,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;IACjC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;IACjC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE;CAC1C,CAAA;AAUD,MAAM,UAAU,iBAAiB,CAAC,EAAkB,EAAE,GAAG,GAAiB,IAAI,CAAC,GAAG;IAChF,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAE1D,KAAK,UAAU,WAAW,CAAC,OAAe;QACxC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAA;QACvD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,GAAG,CAAA,6BAA6B,KAAK,oBAAoB,OAAO,cAAc,KAAK,EAAE,CACtF,CAAA;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IACvC,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACvB,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YAC3C,MAAM,SAAS,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAA;YACvF,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAM;YAEnC,MAAM,IAAI,YAAY,CAAC;gBACrB,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,qCAAqC;gBAC9C,IAAI,EAAE,cAAc,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC,sFAAsF;gBAC7I,OAAO,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,OAAO,EAAE;aAC7C,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACxB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;sBACF,KAAK,8BAA8B,KAAK,CAAC,GAAG,CAAC,KAAK,OAAO,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;QACjH,CAAC;QAED,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACvB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA,eAAe,KAAK,oBAAoB,OAAO,EAAE,CAAC,CAAA;QACtE,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/sessions.d.ts

@@ -0,0 +1,20 @@
+import { type DatabaseHandle } from '@cogenta/core';
+import type { IssuedSession, Session } from './types.js';
+export interface SessionStore {
+    create(userId: string, options?: {
+        label?: string;
+        ttlMs?: number;
+    }): Promise<IssuedSession>;
+    /**
+     * Resolves a bearer token to its session, or `null` if it is missing,
+     * expired or revoked. Touches `lastSeenAt` on success — a session is a
+     * sliding window, not a fixed one, so a person working for an hour is not
+     * signed out mid-task.
+     */
+    resolve(token: string): Promise<Session | null>;
+    list(userId: string): Promise<readonly Session[]>;
+    revoke(sessionId: string): Promise<void>;
+    revokeAll(userId: string): Promise<void>;
+}
+export declare function createSessionStore(db: DatabaseHandle, now?: () => number): SessionStore;
+//# sourceMappingURL=sessions.d.ts.map

package/dist/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../src/sessions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,cAAc,EAA0B,MAAM,eAAe,CAAA;AAE3E,OAAO,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AA4CxD,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC5F;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAA;IACjD,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACzC;AAED,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,GAAE,MAAM,MAAiB,GAAG,YAAY,CA2DjG"}