@jingyi0605/codingns 0.4.0 → 0.5.1

package/dist/server/modules/auth/auth-device-display-name.js

@@ -0,0 +1,190 @@
+export function resolveAuthDeviceInfo(clientType, userAgent) {
+    const browser = detectBrowser(userAgent);
+    const os = detectOs(userAgent);
+    const browserName = browser.name;
+    const osName = os.name;
+    return {
+        displayName: buildDisplayName(clientType, browserName, osName),
+        browserName,
+        browserVersion: browser.version,
+        osName,
+        osVersion: os.version
+    };
+}
+export function resolveAuthDeviceDisplayName(clientType, userAgent) {
+    return resolveAuthDeviceInfo(clientType, userAgent).displayName;
+}
+function buildDisplayName(clientType, browserName, osName) {
+    switch (clientType) {
+        case "desktop":
+            return osName ? `Desktop · ${osName}` : "Desktop";
+        case "ios":
+            return "iOS App";
+        case "android":
+            return "Android App";
+        case "web":
+            if (browserName && osName) {
+                return `${browserName} · ${osName}`;
+            }
+            if (browserName) {
+                return browserName;
+            }
+            return osName ? `Web · ${osName}` : "Web";
+        default:
+            if (browserName && osName) {
+                return `${browserName} · ${osName}`;
+            }
+            if (browserName) {
+                return browserName;
+            }
+            if (osName) {
+                return osName;
+            }
+            return null;
+    }
+}
+function detectBrowser(userAgent) {
+    const value = userAgent?.trim();
+    if (!value) {
+        return {
+            name: null,
+            version: null
+        };
+    }
+    const edgeVersion = readVersion(value, /\b(?:EdgA|EdgiOS|Edg|Edge)\/([\d.]+)/i);
+    if (edgeVersion) {
+        return {
+            name: "Edge",
+            version: edgeVersion
+        };
+    }
+    const operaVersion = readVersion(value, /\b(?:OPR|Opera)\/([\d.]+)/i);
+    if (operaVersion) {
+        return {
+            name: "Opera",
+            version: operaVersion
+        };
+    }
+    const firefoxVersion = readVersion(value, /\b(?:Firefox|FxiOS)\/([\d.]+)/i);
+    if (firefoxVersion) {
+        return {
+            name: "Firefox",
+            version: firefoxVersion
+        };
+    }
+    const chromeVersion = readVersion(value, /\b(?:Chrome|CriOS)\/([\d.]+)/i);
+    if (chromeVersion) {
+        return {
+            name: "Chrome",
+            version: chromeVersion
+        };
+    }
+    const safariVersion = readVersion(value, /\bVersion\/([\d.]+).+Safari\//i);
+    if (safariVersion) {
+        return {
+            name: "Safari",
+            version: safariVersion
+        };
+    }
+    return {
+        name: null,
+        version: null
+    };
+}
+function detectOs(userAgent) {
+    const value = userAgent?.trim();
+    const fingerprint = normalizeUserAgent(userAgent);
+    if (!value || !fingerprint) {
+        return {
+            name: null,
+            version: null
+        };
+    }
+    if (fingerprint.includes("iphone") || fingerprint.includes("ipad") || fingerprint.includes("ipod")) {
+        return {
+            name: "iOS",
+            version: readVersion(value, /\bOS ([\d_]+)/i, "_")
+        };
+    }
+    const androidVersion = readVersion(value, /\bAndroid ([\d.]+)/i);
+    if (androidVersion || fingerprint.includes("android")) {
+        return {
+            name: "Android",
+            version: androidVersion
+        };
+    }
+    const windowsVersion = readVersion(value, /\bWindows NT ([\d.]+)/i);
+    if (windowsVersion || fingerprint.includes("windows")) {
+        return {
+            name: "Windows",
+            version: mapWindowsVersion(windowsVersion)
+        };
+    }
+    const macVersion = readVersion(value, /\bMac OS X ([\d_]+)/i, "_");
+    if (macVersion || fingerprint.includes("mac os x") || fingerprint.includes("macintosh")) {
+        return {
+            name: "macOS",
+            version: macVersion
+        };
+    }
+    if (fingerprint.includes("cros")) {
+        return {
+            name: "ChromeOS",
+            version: readVersion(value, /\bCrOS [^ ]+ ([\d.]+)/i)
+        };
+    }
+    if (fingerprint.includes("linux")) {
+        return {
+            name: "Linux",
+            version: null
+        };
+    }
+    return {
+        name: null,
+        version: null
+    };
+}
+function normalizeUserAgent(userAgent) {
+    return userAgent?.trim().toLowerCase() ?? "";
+}
+function readVersion(userAgent, pattern, separator = ".") {
+    const match = pattern.exec(userAgent);
+    const raw = match?.[1]?.trim();
+    if (!raw) {
+        return null;
+    }
+    return normalizeVersion(raw, separator);
+}
+function normalizeVersion(rawVersion, separator = ".") {
+    const parts = rawVersion
+        .split(separator)
+        .map((part) => part.trim())
+        .filter((part) => part.length > 0);
+    if (parts.length === 0) {
+        return rawVersion.trim();
+    }
+    while (parts.length > 1 && parts[parts.length - 1] === "0") {
+        parts.pop();
+    }
+    return parts.join(".");
+}
+function mapWindowsVersion(version) {
+    if (!version) {
+        return null;
+    }
+    switch (version) {
+        case "10":
+            return "10/11";
+        case "6.3":
+            return "8.1";
+        case "6.2":
+            return "8";
+        case "6.1":
+            return "7";
+        case "6":
+            return "Vista";
+        default:
+            return version;
+    }
+}
+//# sourceMappingURL=auth-device-display-name.js.map

package/dist/server/modules/auth/auth-device-display-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-device-display-name.js","sourceRoot":"","sources":["../../../../src/modules/auth/auth-device-display-name.ts"],"names":[],"mappings":"AAUA,MAAM,UAAU,qBAAqB,CACnC,UAA0B,EAC1B,SAAoC;IAEpC,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IACjC,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC;IAEvB,OAAO;QACL,WAAW,EAAE,gBAAgB,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC;QAC9D,WAAW;QACX,cAAc,EAAE,OAAO,CAAC,OAAO;QAC/B,MAAM;QACN,SAAS,EAAE,EAAE,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,UAA0B,EAC1B,SAAoC;IAEpC,OAAO,qBAAqB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,WAAW,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CACvB,UAA0B,EAC1B,WAA0B,EAC1B,MAAqB;IAErB,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,CAAC,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACpD,KAAK,KAAK;YACR,OAAO,SAAS,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,aAAa,CAAC;QACvB,KAAK,KAAK;YACR,IAAI,WAAW,IAAI,MAAM,EAAE,CAAC;gBAC1B,OAAO,GAAG,WAAW,MAAM,MAAM,EAAE,CAAC;YACtC,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,WAAW,CAAC;YACrB,CAAC;YAED,OAAO,MAAM,CAAC,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAC5C;YACE,IAAI,WAAW,IAAI,MAAM,EAAE,CAAC;gBAC1B,OAAO,GAAG,WAAW,MAAM,MAAM,EAAE,CAAC;YACtC,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,WAAW,CAAC;YACrB,CAAC;YAED,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,SAAoC;IAIzD,MAAM,KAAK,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC;IAEhC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,uCAAuC,CAAC,CAAC;IAEhF,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,WAAW;SACrB,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;IAEtE,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,YAAY;SACtB,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAAC;IAE5E,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,cAAc;SACxB,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IAE1E,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,aAAa;SACvB,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAAC;IAE3E,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,aAAa;SACvB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,SAAoC;IAIpD,MAAM,KAAK,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAElD,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACnG,OAAO;YACL,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,gBAAgB,EAAE,GAAG,CAAC;SACnD,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IAEjE,IAAI,cAAc,IAAI,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,OAAO;YACL,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,cAAc;SACxB,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IAEpE,IAAI,cAAc,IAAI,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,OAAO;YACL,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,iBAAiB,CAAC,cAAc,CAAC;SAC3C,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,EAAE,sBAAsB,EAAE,GAAG,CAAC,CAAC;IAEnE,IAAI,UAAU,IAAI,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACxF,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,UAAU;SACpB,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,wBAAwB,CAAC;SACtD,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAoC;IAC9D,OAAO,SAAS,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAClB,SAAiB,EACjB,OAAe,EACf,SAAS,GAAG,GAAG;IAEf,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAE/B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,gBAAgB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB,EAAE,SAAS,GAAG,GAAG;IAC3D,MAAM,KAAK,GAAG,UAAU;SACrB,KAAK,CAAC,SAAS,CAAC;SAChB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAErC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QAC3D,KAAK,CAAC,GAAG,EAAE,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAsB;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,IAAI;YACP,OAAO,OAAO,CAAC;QACjB,KAAK,KAAK;YACR,OAAO,KAAK,CAAC;QACf,KAAK,KAAK;YACR,OAAO,GAAG,CAAC;QACb,KAAK,KAAK;YACR,OAAO,GAAG,CAAC;QACb,KAAK,GAAG;YACN,OAAO,OAAO,CAAC;QACjB;YACE,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/server/modules/auth/auth-service.d.ts

@@ -1,18 +1,34 @@
 import type { HostConfig } from "../../config/env.js";
-import type { DemoCleanupService, DemoOnlineTracker } from "../demo/demo-cleanup-service.js";
+import type { AuthClientType } from "../../types/domain.js";
+import type { AuthDeviceRepository } from "../../storage/repositories/auth-device-repository.js";
+import type { AuthDeviceSessionRepository } from "../../storage/repositories/auth-device-session-repository.js";
 import type { AuthLoginAttemptRepository } from "../../storage/repositories/auth-login-attempt-repository.js";
+import type { AuthLoginEventRepository } from "../../storage/repositories/auth-login-event-repository.js";
 import type { AuthTokenRepository } from "../../storage/repositories/auth-token-repository.js";
 import type { AuthUserRepository } from "../../storage/repositories/auth-user-repository.js";
 import type { BootstrapStateRepository } from "../../storage/repositories/bootstrap-state-repository.js";
+import type { DemoCleanupService, DemoOnlineTracker } from "../demo/demo-cleanup-service.js";
 export interface AuthenticatedUser {
     userId: string;
     username: string;
     role: "admin";
 }
+export type AuthCallerKind = "interactive_user" | "assistant_runtime";
 export interface AuthContext {
     accessToken: string;
+    accessTokenId: string;
+    deviceSessionId: string | null;
+    deviceId: string | null;
+    callerKind: AuthCallerKind;
     user: AuthenticatedUser;
 }
+export interface AuthRequestMetadata {
+    clientType: AuthClientType;
+    clientInstanceId: string | null;
+    displayName: string | null;
+    sourceAddress: string | null;
+    userAgent: string | null;
+}
 export interface LoginInput {
     username: string;
     password: string;
@@ -25,31 +41,89 @@ export interface RefreshInput {
 export interface LogoutInput {
     refreshToken?: string;
 }
+export interface UpdateCurrentDevicePrimaryInput {
+    password: string;
+    primary: boolean;
+}
 export interface AuthResponse {
     accessToken: string;
     refreshToken: string;
     expiresIn: number;
     user: AuthenticatedUser;
 }
+export interface AuthDeviceView {
+    deviceId: string | null;
+    clientType: AuthClientType;
+    clientInstanceId: string | null;
+    displayName: string | null;
+    browserName: string | null;
+    browserVersion: string | null;
+    osName: string | null;
+    osVersion: string | null;
+    lastSourceAddress: string | null;
+    lastSeenAt: string;
+    isPrimary: boolean;
+    isCurrent: boolean;
+    isLegacy: boolean;
+}
+export interface RecentLoginRecordView {
+    id: string;
+    deviceId: string | null;
+    clientType: AuthClientType;
+    displayName: string | null;
+    browserName: string | null;
+    browserVersion: string | null;
+    osName: string | null;
+    osVersion: string | null;
+    sourceAddress: string | null;
+    occurredAt: string;
+    isCurrentDevice: boolean;
+    isLegacy: boolean;
+}
+export interface AuthDeviceManagementSnapshot {
+    currentDevice: AuthDeviceView | null;
+    otherActiveDevices: AuthDeviceView[];
+    recentLoginRecords: RecentLoginRecordView[];
+}
+export interface LogoutOtherDevicesResult {
+    success: true;
+    revokedDeviceCount: number;
+}
+export interface LogoutDeviceResult {
+    success: true;
+    revokedSessionCount: number;
+}
 export declare class AuthService {
     private readonly bootstrapStateRepository;
     private readonly authUserRepository;
     private readonly authTokenRepository;
+    private readonly authDeviceRepository;
+    private readonly authDeviceSessionRepository;
+    private readonly authLoginEventRepository;
     private readonly authLoginAttemptRepository;
     private readonly config;
     private readonly demoCleanupService?;
     private readonly demoOnlineTracker?;
-    constructor(bootstrapStateRepository: BootstrapStateRepository, authUserRepository: AuthUserRepository, authTokenRepository: AuthTokenRepository, authLoginAttemptRepository: AuthLoginAttemptRepository, config: HostConfig, demoServices?: {
+    constructor(bootstrapStateRepository: BootstrapStateRepository, authUserRepository: AuthUserRepository, authTokenRepository: AuthTokenRepository, authDeviceRepository: AuthDeviceRepository, authDeviceSessionRepository: AuthDeviceSessionRepository, authLoginEventRepository: AuthLoginEventRepository, authLoginAttemptRepository: AuthLoginAttemptRepository, config: HostConfig, demoServices?: {
         cleanupService: DemoCleanupService;
         onlineTracker: DemoOnlineTracker;
     });
-    login(input: LoginInput): AuthResponse;
-    refresh(input: RefreshInput): AuthResponse;
+    login(input: LoginInput, metadata?: AuthRequestMetadata): AuthResponse;
+    refresh(input: RefreshInput, metadata?: AuthRequestMetadata): AuthResponse;
     logout(accessToken: string, input?: LogoutInput): {
         success: true;
     };
-    authenticateAccessToken(accessToken: string): AuthenticatedUser;
+    listDeviceManagement(auth: AuthContext): AuthDeviceManagementSnapshot;
+    updateCurrentDevicePrimary(auth: AuthContext, input: UpdateCurrentDevicePrimaryInput): AuthDeviceView;
+    logoutOtherDevices(auth: AuthContext): LogoutOtherDevicesResult;
+    logoutDevice(auth: AuthContext, deviceId: string): LogoutDeviceResult;
+    authenticateAccessToken(accessToken: string): AuthContext;
+    private ensurePrimaryDeviceAccess;
     ensureInitialized(): void;
+    private createDeviceSession;
+    private resolveDeviceForRefresh;
+    private resolveOrCreateDevice;
+    private recordLoginEvent;
     private issueTokenPair;
     private normalizeUsername;
     private normalizeCaptchaCode;
@@ -65,3 +139,4 @@ export declare class AuthService {
     private buildCaptchaImageDataUrl;
     private buildCaptchaSvg;
 }
+export declare function resolveAuthCallerKind(accessToken: string): AuthCallerKind;