@itookit/dsht 0.3.0 → 0.3.2

package/dist/transport/auth.js

@@ -0,0 +1,65 @@
+/** Origin-scoped cookie persistence; launch tokens are never written to disk. */
+import { createHash } from 'node:crypto';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { ensurePrivateDirectory, readPrivateFile, writePrivateFile } from "../storage/index.js";
+import { HttpError } from "./client.js";
+/** Fatal authentication failure requiring a new startup token. */
+export class AuthenticationRequired extends Error {
+}
+/** Private, atomic cookie files, separated by the complete HTTP origin. */
+export class CookieStore {
+    directory;
+    constructor(directory = process.env.DSHT_AUTH_DIR
+        ?? join(process.env.XDG_STATE_HOME ?? join(homedir(), '.local', 'state'), 'dsht', 'auth')) {
+        this.directory = directory;
+    }
+    /** Read an unexpired cookie, rejecting unsafe permissions or malformed storage. */
+    async load(origin) {
+        const raw = await readPrivateFile(this.path(origin), 'Cookie file');
+        if (raw === undefined)
+            return undefined;
+        let saved;
+        try {
+            saved = JSON.parse(raw);
+        }
+        catch {
+            throw new Error('Invalid cookie file JSON. Remove the origin cookie file and log in again.');
+        }
+        if (saved === null || typeof saved !== 'object' || !('version' in saved) || saved.version !== 1
+            || !('origin' in saved) || saved.origin !== origin || !('cookie' in saved) || typeof saved.cookie !== 'string'
+            || !('expiresAt' in saved) || typeof saved.expiresAt !== 'number' || !Number.isSafeInteger(saved.expiresAt)) {
+            throw new Error('Invalid saved cookie. Remove the origin cookie file and log in again.');
+        }
+        return saved.expiresAt > Date.now() ? saved.cookie : undefined;
+    }
+    /** Atomically save a persistent host cookie with owner-only POSIX permissions. */
+    async save(origin, cookie, expiresAt) {
+        await ensurePrivateDirectory(this.directory, 'Cookie directory');
+        await writePrivateFile(this.path(origin), JSON.stringify({ version: 1, origin, cookie, expiresAt }) + '\n');
+    }
+    path(origin) {
+        return join(this.directory, `${createHash('sha256').update(origin).digest('hex')}.json`);
+    }
+}
+/** Reuse a validated cookie first; only authentication rejection permits token fallback. */
+export async function login(client, token, store) {
+    const cookie = await store.load(client.base.origin);
+    if (cookie) {
+        client.restoreCookie(cookie);
+        try {
+            await client.call('session/list', { _request: {} });
+            return;
+        }
+        catch (error) {
+            if (!(error instanceof HttpError) || error.status !== 401)
+                throw error;
+        }
+    }
+    if (!token)
+        throw new AuthenticationRequired('Login required: export DSH_TOKEN, or export DSH_URL as the URL printed by dsh web');
+    await client.authenticate(token);
+    const session = client.persistentCookie;
+    if (session)
+        await store.save(client.base.origin, session.cookie, session.expiresAt);
+}

package/dist/transport/host.d.ts

@@ -0,0 +1,13 @@
+/** Host access contract every domain controller uses for the active connection generation. */
+import type { Client } from './client.ts';
+/** One authenticated host connection, as seen by a domain that never owns it. */
+export interface HostAccess {
+    /** Connected client, or undefined while offline or between generations. */
+    client(): Client | undefined;
+    /** Connected client, or a `Not connected` failure. */
+    require(): Client;
+    /** Whether the current generation has applied its host baseline. */
+    online(): boolean;
+    /** Client lifetime signal, aborted when the process closes the connection. */
+    signal(): AbortSignal;
+}

package/dist/transport/host.js

@@ -0,0 +1 @@
+export {};

package/dist/ui/app.d.ts

@@ -0,0 +1,11 @@
+import { type Theme } from './theme/index.ts';
+import { Controller } from '../controller/controller.ts';
+/** The caller owns starting and stopping the controller around the Ink render lifetime.
+ * @param props - Controller, panel lifetime and semantic theme.
+ * @returns The rendered terminal interface.
+ */
+export declare function App({ controller, panelLifetimeMs, theme }: {
+    controller: Controller;
+    panelLifetimeMs?: number;
+    theme?: Theme;
+}): import("react").JSX.Element;