@cotal-ai/auth 0.90.1 → 0.92.0

package/dist/chat-session-authority.d.ts

@@ -0,0 +1,120 @@
+import { type LifecycleRegistry } from "./lifecycle-registry.js";
+import type { UserTokenIssuer } from "./issuer.js";
+import type { AclResolver } from "./permissions.js";
+import { type ValidatedUserToken } from "./token.js";
+/** At most this many own candidate reads per sweep pass (D). */
+export declare const CHAT_SWEEP_READS = 256;
+/** At most this many sweep retirements in flight at once (C). */
+export declare const CHAT_SWEEP_RETIREMENTS = 4;
+/** A retired row's body is compacted to its tombstone this long after the session's expiry. */
+export declare const CHAT_ROW_RETENTION_MS: number;
+/** The minimum quiet period after a reservation before the sweep acts on it. It is
+ *  never the evidence: every sweep action is gated on durable state, and a holder whose admission
+ *  or retirement is visibly in flight in this process is skipped. */
+export declare const CHAT_SWEEP_QUIET_MS: number;
+/** The retirement barrier's operation for one chat lifecycle. */
+export declare function chatRetireOpId(lifecycleUid: string): string;
+/** The sweep's own activation operation for one holder (S2 `opS`): it births and retires
+ *  the gate of a bound UID that never got one. */
+export declare function chatSweepOpId(owner: string, holderHash: string): string;
+/** The holder hash a proof must match: lowercase SHA-256 hex over the proof's UTF-8 bytes. */
+export declare function chatHolderHash(holderProof: string): string;
+/** The bearer window (exchange step 5): the TTL is the least of the bearer cap, the IdP proof's
+ *  remaining life and the session's remaining life; `notAfter` is the absolute ceiling the issuer
+ *  re-reads at signing. Undefined means nothing may be signed. All values are unix seconds except
+ *  `expiresAtMs`. */
+export declare function chatBearerWindow(nowSec: number, idpExpSec: number, expiresAtMs: number): {
+    ttlSec: number;
+    notAfter: number;
+} | undefined;
+export interface ChatAdmissionRequest {
+    /** Derived from the verified IdP proof by the route, never from the request body. */
+    owner: string;
+    holderHash: string;
+    label?: string;
+    read: string[];
+    post: string[];
+    ttlSec: number;
+}
+/** `expiresAt` is unix seconds, fixed at admission. */
+export interface ChatSessionAdmitted {
+    actor: string;
+    lifecycleUid: string;
+    expiresAt: number;
+}
+export interface ChatRetireRequest {
+    owner: string;
+    actor: string;
+    lifecycleUid: string;
+    holderProof: string;
+}
+export interface ChatRetireResult {
+    outcome: "retired" | "alreadyRetired" | "notStarted" | "failed";
+    pending?: string;
+}
+export interface ChatSessionAuthorityDeps {
+    space: string;
+    /** The provider state dir holding the three ledger row spaces. */
+    dir: string;
+    /** The mint writer's registry: UID reservation, the activation saga, the root credential, and the
+     *  chat records in the auth store. */
+    registry: LifecycleRegistry;
+    /** The minting authority recorded on reservations and heads. */
+    managerInstance: string;
+    /** Run, join or resume the terminal retirement barrier for one chat lifecycle. */
+    retireLifecycle: (args: {
+        owner: string;
+        actor: string;
+        lifecycleUid: string;
+        opId: string;
+    }) => Promise<void>;
+    /** a7 and part of a8: pre-create the lifecycle's own `dm_` and `dlv_` durables and its read-ACL row
+     *  (the history authority), then read all three back. Throws unless all three read back. */
+    provisionFootprint: (args: {
+        owner: string;
+        actor: string;
+        lifecycleUid: string;
+        read: string[];
+    }) => Promise<void>;
+    /** Remove the lifecycle's durables and read-ACL row, UID-exact and idempotent. */
+    deprovisionFootprint: (args: {
+        owner: string;
+        actor: string;
+        lifecycleUid: string;
+        memberChannels: string[];
+    }) => Promise<void>;
+    now: () => number;
+    log: (line: string) => void;
+}
+export interface ChatSessionAuthority {
+    admit(req: ChatAdmissionRequest): Promise<ChatSessionAdmitted>;
+    exchange(args: {
+        owner: string;
+        actor: string;
+        holderProof: string;
+        idpExp: number;
+        issuer: UserTokenIssuer;
+    }): Promise<{
+        token: string;
+        exp: number;
+    }>;
+    /** True when this principal is a chat session (its alias is present in the chat row space). */
+    isChatPrincipal(owner: string, actor: string): boolean;
+    /** The callout's chat checks. Run before signing AND inside the issuance recorder after it. */
+    authorizeConnect(t: ValidatedUserToken): Promise<void>;
+    retire(req: ChatRetireRequest): Promise<ChatRetireResult>;
+    /** One bounded sweep pass. Throws only on a fault that stops the whole pass. */
+    sweepPass(): Promise<void>;
+}
+/**
+ * Build the session authority over the plane's mint-writer registry. The chat KV records are read
+ * and written on that registry's auth store, which is leader-served by shape.
+ */
+export declare function openChatSessionAuthority(deps: ChatSessionAuthorityDeps): ChatSessionAuthority;
+/**
+ * The callout's ACL resolver, chat-aware. A chat principal resolves from its closed row only: the
+ * session's read and post lists, its UID, and an empty capability set, so core mints exactly the
+ * agent leaf with no role. Every other principal resolves through `base` unchanged.
+ */
+export declare function chatAwareAclResolver(dir: string, base: AclResolver): AclResolver;
+//# sourceMappingURL=chat-session-authority.d.ts.map

package/dist/chat-session-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-session-authority.d.ts","sourceRoot":"","sources":["../src/chat-session-authority.ts"],"names":[],"mappings":"AAiEA,OAAO,EAQL,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAGpD,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAExE,gEAAgE;AAChE,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,iEAAiE;AACjE,eAAO,MAAM,sBAAsB,IAAI,CAAC;AACxC,+FAA+F;AAC/F,eAAO,MAAM,qBAAqB,QAAsB,CAAC;AACzD;;qEAEqE;AACrE,eAAO,MAAM,mBAAmB,QAAY,CAAC;AAE7C,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;kDACkD;AAClD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,8FAA8F;AAC9F,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;;qBAGqB;AACrB,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAIzI;AAED,MAAM,WAAW,oBAAoB;IACnC,qFAAqF;IACrF,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,uDAAuD;AACvD,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,SAAS,GAAG,gBAAgB,GAAG,YAAY,GAAG,QAAQ,CAAC;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,GAAG,EAAE,MAAM,CAAC;IACZ;0CACsC;IACtC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,gEAAgE;IAChE,eAAe,EAAE,MAAM,CAAC;IACxB,kFAAkF;IAClF,eAAe,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/G;gGAC4F;IAC5F,kBAAkB,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpH,kFAAkF;IAClF,oBAAoB,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,EAAE,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChI,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC/D,QAAQ,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,eAAe,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxJ,+FAA+F;IAC/F,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IACvD,+FAA+F;IAC/F,gBAAgB,CAAC,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC1D,gFAAgF;IAChF,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAwBD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,wBAAwB,GAAG,oBAAoB,CAkwB7F;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAYhF"}