@helyx/module-account-gate 1.0.9 → 1.0.11

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## 1.0.11
+
+### Patch Changes
+
+- Harden dashboard authentication, privacy execution, control routing, database transactions, and self-host configuration.
+
+  Add bounded multi-value record reads and use them to batch Polls and Reaction Roles dashboard queries. Improve dashboard presentation, Forms workflows, release safety, and operational tooling across hosted and self-hosted deployments.
+
+- Updated dependencies
+  - @helyx/sdk@0.7.0
+
+## 1.0.10
+
+### Patch Changes
+
+- Launch the shared gaming statistics foundation and the Achievements, Counting and Trivia module integrations, while removing retired Access Control and Counting storage through guarded migrations.
+
 ## 1.0.9
 
 ### Patch Changes

package/dist/contracts.d.ts

@@ -2,7 +2,7 @@ export declare const ACCOUNT_GATE_IDENTITY: {
     readonly packageName: "@helyx/module-account-gate";
     readonly moduleId: "helyx.account-gate";
     readonly name: "Access Control";
-    readonly version: "1.0.9";
+    readonly version: "1.0.11";
     readonly releaseStatus: "live";
     readonly category: "safety";
     readonly icon: "shield-check";

package/dist/contracts.js

@@ -2,7 +2,7 @@ export const ACCOUNT_GATE_IDENTITY = {
     packageName: "@helyx/module-account-gate",
     moduleId: "helyx.account-gate",
     name: "Access Control",
-    version: "1.0.9",
+    version: "1.0.11",
     releaseStatus: "live",
     category: "safety",
     icon: "shield-check",

package/dist/index.js

@@ -7,7 +7,6 @@ import { ACCOUNT_GATE_COMPONENTS, ACCOUNT_GATE_IDENTITY, ACCOUNT_GATE_SESSION_PU
 import { generatedChallengePool, isStrictModeActive, parseAccountGateConfiguration, validateRuntimeCapabilities, } from "./configuration.js";
 import { applyRoleTransition, neutralKickDirectMessage, } from "./enforcement.js";
 import { verifyPasswordEntry } from "./password-entry.js";
-import { getPasswordSecret } from "./password-resource.js";
 import { accountGateMemberResource } from "./member-resource.js";
 import { accountGateRecords } from "./records.js";
 import { serverQuestionResource } from "./question-resource.js";
@@ -1037,7 +1036,7 @@ async function handlePasswordEntry(context) {
     const secret = state.panelId
         ? ((await getGatePanelRuntime(store, context.serverId, state.panelId))
             ?.password ?? null)
-        : await getPasswordSecret(store, context.serverId);
+        : null;
     const matched = secret !== null &&
         (await verifyPasswordEntry(context.content, secret.encodedHash, secret));
     await processGatewayAction(context.services, context.serverId, context.userId, session, matched
@@ -2744,8 +2743,7 @@ export async function validateAccountGateSetup(services, guildId, configuration,
             !configuration.temporaryRoleIds.every((roleId) => passwordAudience.roles.some((role) => role.roleId === roleId && role.exists && role.canView)))
             errors.push("Password Entry requires every configured temporary pre-gate role to view its isolated channel.");
         const store = services.get(HELYX_SERVICE_NAMES.records);
-        if (!(await hasPasswordGatePanel(store, guildId)) &&
-            !(await getPasswordSecret(store, guildId)))
+        if (!(await hasPasswordGatePanel(store, guildId)))
             errors.push("Password Entry needs a published panel with a password.");
     }
     if (configuration.enabledChallengeTypes.includes("server_question") &&

package/dist/records.d.ts

@@ -47,23 +47,6 @@ export declare const accountGateRecords: {
         readonly writableFields: readonly ["channel_id", "message_id", "message_body", "access_type", "password_hash", "password_ignore_case", "password_trim_whitespace", "revision", "updated_at"];
         readonly orderKeys: readonly [readonly ["guild_id", "created_at", "panel_id"]];
     };
-    readonly public_channels: {
-        readonly table: "account_gate_public_channels";
-        readonly fields: {
-            readonly guild_id: {
-                readonly type: "string";
-            };
-            readonly channel_id: {
-                readonly type: "string";
-            };
-            readonly created_at: {
-                readonly type: "date";
-            };
-        };
-        readonly uniqueKeys: readonly [readonly ["guild_id", "channel_id"]];
-        readonly readableFields: readonly ["guild_id", "channel_id", "created_at"];
-        readonly orderKeys: readonly [readonly ["guild_id", "channel_id"]];
-    };
     readonly questions: {
         readonly table: "account_gate_questions";
         readonly fields: {
@@ -128,36 +111,6 @@ export declare const accountGateRecords: {
         readonly readableFields: readonly ["attribution_id", "question_id", "guild_id", "creator_user_id", "created_at"];
         readonly orderKeys: readonly [readonly ["creator_user_id", "created_at", "attribution_id"]];
     };
-    readonly password_secrets: {
-        readonly table: "account_gate_password_secrets";
-        readonly fields: {
-            readonly guild_id: {
-                readonly type: "string";
-            };
-            readonly encoded_hash: {
-                readonly type: "string";
-            };
-            readonly ignore_case: {
-                readonly type: "boolean";
-            };
-            readonly trim_whitespace: {
-                readonly type: "boolean";
-            };
-            readonly revision: {
-                readonly type: "number";
-            };
-            readonly created_at: {
-                readonly type: "date";
-            };
-            readonly updated_at: {
-                readonly type: "date";
-            };
-        };
-        readonly uniqueKeys: readonly [readonly ["guild_id"]];
-        readonly readableFields: readonly ["guild_id", "encoded_hash", "ignore_case", "trim_whitespace", "revision", "created_at", "updated_at"];
-        readonly writableFields: readonly ["encoded_hash", "ignore_case", "trim_whitespace", "revision", "updated_at"];
-        readonly orderKeys: readonly [readonly ["guild_id"]];
-    };
     readonly attempts: {
         readonly table: "account_gate_attempts";
         readonly fields: {

package/dist/records.js

@@ -43,17 +43,6 @@ export const accountGateRecords = {
         ],
         orderKeys: [["guild_id", "created_at", "panel_id"]],
     },
-    public_channels: {
-        table: "account_gate_public_channels",
-        fields: {
-            guild_id: { type: "string" },
-            channel_id: { type: "string" },
-            created_at: { type: "date" },
-        },
-        uniqueKeys: [["guild_id", "channel_id"]],
-        readableFields: ["guild_id", "channel_id", "created_at"],
-        orderKeys: [["guild_id", "channel_id"]],
-    },
     questions: {
         table: "account_gate_questions",
         fields: {
@@ -113,36 +102,6 @@ export const accountGateRecords = {
         ],
         orderKeys: [["creator_user_id", "created_at", "attribution_id"]],
     },
-    password_secrets: {
-        table: "account_gate_password_secrets",
-        fields: {
-            guild_id: { type: "string" },
-            encoded_hash: { type: "string" },
-            ignore_case: { type: "boolean" },
-            trim_whitespace: { type: "boolean" },
-            revision: { type: "number" },
-            created_at: { type: "date" },
-            updated_at: { type: "date" },
-        },
-        uniqueKeys: [["guild_id"]],
-        readableFields: [
-            "guild_id",
-            "encoded_hash",
-            "ignore_case",
-            "trim_whitespace",
-            "revision",
-            "created_at",
-            "updated_at",
-        ],
-        writableFields: [
-            "encoded_hash",
-            "ignore_case",
-            "trim_whitespace",
-            "revision",
-            "updated_at",
-        ],
-        orderKeys: [["guild_id"]],
-    },
     attempts: {
         table: "account_gate_attempts",
         fields: {

package/manifest.json

@@ -3,7 +3,7 @@
   "releaseStatus": "live",
   "id": "helyx.account-gate",
   "name": "Access Control",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "description": "Require new members to complete configurable Discord interaction checks before gaining access.",
   "entry": "./dist/index.js",
   "framework": "^0.1.0",

package/migrations/0006_remove_legacy_gate_storage.sql

@@ -0,0 +1,2 @@
+DROP TABLE IF EXISTS account_gate_public_channels;
+DROP TABLE IF EXISTS account_gate_password_secrets;

package/migrations/0007_privacy_suppression_trigger_privileges.sql

@@ -0,0 +1,32 @@
+-- Privacy erasure deletes Account Gate subject rows through a deliberately
+-- column-scoped executor role. The deletion triggers must still be able to
+-- write the suppression tombstone that prevents erased data being recreated.
+CREATE OR REPLACE FUNCTION public.account_gate_install_privacy_suppression()
+RETURNS trigger
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = pg_catalog, public
+AS $$
+BEGIN
+  INSERT INTO public.account_gate_privacy_suppressions (
+    suppression_id,
+    guild_id,
+    member_user_id,
+    suppressed_at,
+    created_at
+  )
+  VALUES (
+    OLD.guild_id || ':' || OLD.member_user_id,
+    OLD.guild_id,
+    OLD.member_user_id,
+    clock_timestamp(),
+    clock_timestamp()
+  )
+  ON CONFLICT (guild_id, member_user_id)
+  DO UPDATE SET suppressed_at = GREATEST(
+    public.account_gate_privacy_suppressions.suppressed_at,
+    EXCLUDED.suppressed_at
+  );
+  RETURN OLD;
+END;
+$$;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@helyx/module-account-gate",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "description": "Require configurable Discord interaction checks before new members gain access.",
   "keywords": [
     "helyx",
@@ -49,6 +49,6 @@
   },
   "dependencies": {
     "@helyx/module-manifest": ">=0.6.0 <0.7.0",
-    "@helyx/sdk": ">=0.6.0 <0.7.0"
+    "@helyx/sdk": ">=0.7.0 <0.8.0"
   }
 }

package/dist/password-resource.d.ts

@@ -1,8 +0,0 @@
-import type { ModuleManagedResource, ModuleRecordService } from "@helyx/sdk";
-export declare const passwordEntryPhraseResource: ModuleManagedResource;
-export declare function getPasswordSecret(records: ModuleRecordService, guildId: string): Promise<{
-    encodedHash: string;
-    ignoreCase: boolean;
-    trimWhitespace: boolean;
-} | null>;
-//# sourceMappingURL=password-resource.d.ts.map

package/dist/password-resource.js

@@ -1,208 +0,0 @@
-import { DashboardActionValidationError, HELYX_SERVICE_NAMES, } from "@helyx/sdk";
-import { ACCOUNT_GATE_IDENTITY } from "./contracts.js";
-import { parseAccountGateConfiguration } from "./configuration.js";
-import { managedResourceSummary } from "./managed-resource-summary.js";
-import { hashPasswordEntryPhrase } from "./password-entry.js";
-const RESOURCE_ID = "shared-phrase";
-const select = [
-    "guild_id",
-    "encoded_hash",
-    "ignore_case",
-    "trim_whitespace",
-    "revision",
-    "created_at",
-    "updated_at",
-];
-export const passwordEntryPhraseResource = {
-    id: "password-entry-phrase",
-    availableWhileDisabled: true,
-    async list(context) {
-        const row = await findSecret(context.services, context.guildId);
-        return { items: row ? [managedResourceSummary(safeDetail(row))] : [] };
-    },
-    async read(context, resourceId) {
-        if (resourceId !== RESOURCE_ID)
-            return null;
-        const row = await findSecret(context.services, context.guildId);
-        return row ? safeDetail(row) : null;
-    },
-    preview() {
-        return Promise.resolve({
-            ephemeral: true,
-            embed: {
-                title: "Password Entry phrase",
-                description: "The replacement phrase will be converted to a one-way hash. The phrase and hash are not shown after saving.",
-                color: 0x7c3aed,
-            },
-        });
-    },
-    async create(context, value) {
-        const records = context.services.get(HELYX_SERVICE_NAMES.records);
-        if (await findSecret(context.services, context.guildId)) {
-            throw new DashboardActionValidationError("A shared phrase is already configured. Open it and replace the phrase.");
-        }
-        const rules = await currentRules(context.services, context.guildId);
-        const encodedHash = await hashPasswordEntryPhrase(replacementPhrase(value), rules);
-        const now = new Date();
-        const result = await records.appendUnique({
-            moduleId: ACCOUNT_GATE_IDENTITY.moduleId,
-            collection: "password_secrets",
-            uniqueBy: ["guild_id"],
-            values: {
-                guild_id: context.guildId,
-                encoded_hash: encodedHash,
-                ignore_case: rules.ignoreCase,
-                trim_whitespace: rules.trimWhitespace,
-                revision: 1,
-                created_at: now,
-                updated_at: now,
-            },
-        });
-        if (!result.created) {
-            throw new DashboardActionValidationError("The shared phrase changed in another session. Reload and try again.");
-        }
-        return safeDetail({
-            revision: 1,
-            updated_at: now,
-        });
-    },
-    async update(context, input) {
-        if (input.resourceId !== RESOURCE_ID) {
-            throw new DashboardActionValidationError("The Password Entry phrase was not found.");
-        }
-        const rules = await currentRules(context.services, context.guildId);
-        const encodedHash = await hashPasswordEntryPhrase(replacementPhrase(input.value), rules);
-        const now = new Date();
-        const result = await context.services
-            .get(HELYX_SERVICE_NAMES.records)
-            .updateOne({
-            moduleId: ACCOUNT_GATE_IDENTITY.moduleId,
-            collection: "password_secrets",
-            where: { guild_id: context.guildId },
-            expected: { field: "revision", value: input.expectedRevision },
-            values: {
-                encoded_hash: encodedHash,
-                ignore_case: rules.ignoreCase,
-                trim_whitespace: rules.trimWhitespace,
-                revision: input.expectedRevision + 1,
-                updated_at: now,
-            },
-            audit: {
-                guildId: context.guildId,
-                actorUserId: context.actor.userId,
-                action: "account_gate.password_phrase_replaced",
-                source: "dashboard",
-                correlationId: context.correlationId,
-                idempotencyKey: context.correlationId,
-                targetType: "account_gate_password_phrase",
-                targetId: context.guildId,
-                metadata: { revision: input.expectedRevision + 1 },
-            },
-        });
-        if (!result.updated) {
-            throw new DashboardActionValidationError("The shared phrase changed in another session. Reload and try again.");
-        }
-        return safeDetail({
-            revision: input.expectedRevision + 1,
-            updated_at: now,
-        });
-    },
-    async delete(context, input) {
-        if (input.resourceId !== RESOURCE_ID)
-            return { deleted: false };
-        const current = await findSecret(context.services, context.guildId);
-        if (!current || number(current.revision) !== input.expectedRevision) {
-            throw new DashboardActionValidationError("The shared phrase changed in another session. Reload and try again.");
-        }
-        const result = await context.services
-            .get(HELYX_SERVICE_NAMES.records)
-            .deleteMany({
-            moduleId: ACCOUNT_GATE_IDENTITY.moduleId,
-            collection: "password_secrets",
-            where: { guild_id: context.guildId },
-            limit: 1,
-        });
-        return { deleted: result.deleted === 1 };
-    },
-    executeAction() {
-        return Promise.reject(new DashboardActionValidationError("Password Entry phrase actions are not supported."));
-    },
-};
-export async function getPasswordSecret(records, guildId) {
-    const row = await records.findOne({
-        moduleId: ACCOUNT_GATE_IDENTITY.moduleId,
-        collection: "password_secrets",
-        select,
-        where: { guild_id: guildId },
-    });
-    if (!row)
-        return null;
-    return {
-        encodedHash: string(row.encoded_hash),
-        ignoreCase: boolean(row.ignore_case),
-        trimWhitespace: boolean(row.trim_whitespace),
-    };
-}
-function safeDetail(row) {
-    const updatedAt = row.updated_at instanceof Date ? row.updated_at : new Date(0);
-    return {
-        id: RESOURCE_ID,
-        revision: number(row.revision),
-        status: "configured",
-        title: "Password Entry phrase",
-        description: "A one-way phrase hash is configured. Enter a replacement to change it.",
-        attributes: {
-            phraseConfigured: true,
-        },
-        updatedAt: updatedAt.toISOString(),
-        value: {
-            replacementPhrase: "",
-        },
-    };
-}
-async function findSecret(services, guildId) {
-    return services
-        .get(HELYX_SERVICE_NAMES.records)
-        .findOne({
-        moduleId: ACCOUNT_GATE_IDENTITY.moduleId,
-        collection: "password_secrets",
-        select,
-        where: { guild_id: guildId },
-    });
-}
-async function currentRules(services, guildId) {
-    const record = await services
-        .get(HELYX_SERVICE_NAMES.configuration)
-        .get(guildId, ACCOUNT_GATE_IDENTITY.moduleId);
-    if (!record) {
-        throw new DashboardActionValidationError("Save the Access Control settings before configuring a shared phrase.");
-    }
-    const configuration = parseAccountGateConfiguration(record.value);
-    return {
-        ignoreCase: configuration.passwordIgnoreCase,
-        trimWhitespace: configuration.passwordTrimWhitespace,
-    };
-}
-function replacementPhrase(value) {
-    const phrase = value.replacementPhrase;
-    if (typeof phrase !== "string") {
-        throw new DashboardActionValidationError("Enter a replacement phrase containing 4 to 200 characters.");
-    }
-    return phrase;
-}
-function string(value) {
-    if (typeof value !== "string")
-        throw new Error("Password secret is invalid");
-    return value;
-}
-function boolean(value) {
-    if (typeof value !== "boolean")
-        throw new Error("Password secret is invalid");
-    return value;
-}
-function number(value) {
-    if (typeof value !== "number" || !Number.isSafeInteger(value))
-        throw new Error("Password secret is invalid");
-    return value;
-}
-//# sourceMappingURL=password-resource.js.map