@huaqiu/dsh-auth 0.3.3 → 0.3.6

package/lib/index.d.mts

@@ -1,4 +1,5 @@
 import { Context } from "@deepseek-ai/cordis";
+import { IncomingMessage, ServerResponse } from "node:http";
 //#region src/host.d.ts
 /**
  * HQ Edge host mode for `dsh-auth`.
@@ -126,6 +127,48 @@ interface HuaqiuAuthService {
    */
   readonly hostMode: boolean;
 }
+declare class InMemoryHuaqiuAuthService implements HuaqiuAuthService {
+  private current;
+  private listeners;
+  private readonly host;
+  private readonly validator;
+  /**
+   * True once the current credential has been rejected (API 401) or explicitly
+   * invalidated. Keeps the credential for recovery but makes `isAuthenticated()`
+   * short-circuit to false and forces a fresh remote validation next time.
+   */
+  private stale;
+  constructor(config?: Partial<HuaqiuAuthConfig> | null, opts?: {
+    fetchImpl?: typeof fetch;
+  });
+  /** Host mode is active iff a host base URL was configured (see HostSessionResolver.enabled). */
+  readonly hostMode: boolean;
+  readonly auth: HuaqiuAuthApi;
+  /**
+   * Spec §6.2 resolution order: host → pushed → persisted → null.
+   *
+   * Host mode is STRICT: an enabled host is the single source of truth. If the
+   * host yields no credential, the operator is unauthenticated — we must NOT
+   * fall back to a pushed/persisted credential left behind by an earlier
+   * standalone (auth.eda.cn) login. Otherwise a stale `~/.dsh/auth/session.json`
+   * would let the DSH plugins keep calling the backend while hq-edge itself has
+   * no auth info. The standalone fallbacks only apply when no host is configured.
+   */
+  private resolve;
+  /** Spec §7: resolve → local expiry → remote validation → update state. */
+  private validateInternal;
+  /** Validation-scoped invalidation: keep the credential, drop cached validity. */
+  private markStale;
+  setCredentials(info: HuaqiuUserInfo): void;
+  invalidate(): void;
+  private on;
+  private emit;
+}
+//#endregion
+//#region src/routes.d.ts
+declare const AUTH_ROUTE_PREFIX = "/api/v1/huaqiu/auth";
+type AuthHandler = (req: IncomingMessage, res: ServerResponse) => Promise<void> | void;
+declare function createAuthHandler(service: HuaqiuAuthService): AuthHandler;
 //#endregion
 //#region src/index.d.ts
 declare const name = "@huaqiu/dsh-auth";
@@ -145,4 +188,4 @@ declare module '@deepseek-ai/cordis' {
  */
 declare function apply(ctx: Context, config?: Partial<HuaqiuAuthConfig>): void;
 //#endregion
-export { type HuaqiuAuthApi, type HuaqiuAuthConfig, type HuaqiuAuthService, type HuaqiuUserInfo, apply, inject, name };
+export { AUTH_ROUTE_PREFIX, type AuthHandler, type HuaqiuAuthApi, type HuaqiuAuthConfig, type HuaqiuAuthService, type HuaqiuUserInfo, InMemoryHuaqiuAuthService, apply, createAuthHandler, inject, name };

package/lib/index.mjs

@@ -494,4 +494,4 @@ function apply(ctx, config) {
 	}));
 }
 //#endregion
-export { apply, inject, name };
+export { AUTH_ROUTE_PREFIX, InMemoryHuaqiuAuthService, apply, createAuthHandler, inject, name };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huaqiu/dsh-auth",
-  "version": "0.3.3",
+  "version": "0.3.6",
   "type": "module",
   "main": "./lib/index.mjs",
   "types": "./lib/index.d.mts",
@@ -42,10 +42,10 @@
     "access": "public"
   },
   "devDependencies": {
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.5",
-    "react": "^19.2.8",
-    "react-dom": "^19.2.8"
+    "@types/react": "~18.3.1",
+    "@types/react-dom": "^18.3.5",
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1"
   },
   "scripts": {
     "typecheck": "tsc --noEmit",

package/src/index.ts

@@ -11,6 +11,8 @@ import { AUTH_ROUTE_PREFIX, createAuthHandler } from './routes.js'
 import type { HuaqiuAuthConfig } from './host.js'
 
 export type { HuaqiuAuthApi, HuaqiuAuthService, HuaqiuUserInfo } from './service.js'
+export { InMemoryHuaqiuAuthService } from './service.js'
+export { AUTH_ROUTE_PREFIX, createAuthHandler, type AuthHandler } from './routes.js'
 export type { HuaqiuAuthConfig } from './host.js'
 
 export const name = '@huaqiu/dsh-auth'