@jsbot-tellus/core 2.3.0 → 2.4.0

package/dist/core/web/auth.d.ts

@@ -0,0 +1,43 @@
+import type { WebUiConfig } from '../config/schema.js';
+export interface AuthSession {
+    token: string;
+    username: string;
+    expiresAt: number;
+}
+export interface AuthLoginResult {
+    ok: boolean;
+    status: number;
+    message?: string;
+    session?: AuthSession;
+    retryAfterSeconds?: number;
+}
+export interface AuthManagerOptions {
+    getConfig(): WebUiConfig;
+    now?: (() => number) | undefined;
+    /** Failures allowed per IP inside the window. Defaults to 5. */
+    maxFailures?: number | undefined;
+    /** Failure window. Defaults to 15 minutes. */
+    windowMs?: number | undefined;
+}
+export declare class AuthManager {
+    private readonly options;
+    private readonly sessions;
+    private readonly failures;
+    private cachedHash;
+    constructor(options: AuthManagerOptions);
+    login(username: unknown, password: unknown, ip: string): Promise<AuthLoginResult>;
+    authenticate(token: string | undefined): AuthSession | null;
+    logout(token: string | undefined): void;
+    invalidateAll(): void;
+    clearExpired(): void;
+    private now;
+    private hasCredentials;
+    private comparePassword;
+    private hashFor;
+    private maxFailures;
+    private windowMs;
+    private blockedRetryAfter;
+    private recordFailure;
+    private cleanup;
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/core/web/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/core/web/auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAItD,MAAM,WAAW,WAAW;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,eAAe;IAC5B,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,WAAW,CAAA;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,kBAAkB;IAC/B,SAAS,IAAI,WAAW,CAAA;IACxB,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAA;IAChC,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAChC;AAgBD,qBAAa,WAAW;IAKR,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkC;IAC3D,OAAO,CAAC,UAAU,CAAqD;IAEvE,YAA6B,OAAO,EAAE,kBAAkB,EAAI;IAEtD,KAAK,CACP,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,OAAO,EACjB,EAAE,EAAE,MAAM,GACX,OAAO,CAAC,eAAe,CAAC,CAqE1B;IAED,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,IAAI,CAc1D;IAED,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAEtC;IAED,aAAa,IAAI,IAAI,CAEpB;IAED,YAAY,IAAI,IAAI,CAEnB;IAED,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,cAAc;YASR,eAAe;YAUf,OAAO;IAarB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,aAAa;IAsBrB,OAAO,CAAC,OAAO;CASlB"}

package/dist/core/web/auth.js

@@ -0,0 +1,161 @@
+import { randomBytes, scrypt, timingSafeEqual } from 'node:crypto';
+import { promisify } from 'node:util';
+const scryptAsync = promisify(scrypt);
+async function hashPassword(password, salt) {
+    return (await scryptAsync(password, salt, 64));
+}
+export class AuthManager {
+    options;
+    sessions = new Map();
+    failures = new Map();
+    cachedHash = null;
+    constructor(options) {
+        this.options = options;
+    }
+    async login(username, password, ip) {
+        const now = this.now();
+        const config = this.options.getConfig();
+        if (!config.enabled) {
+            return {
+                ok: false,
+                status: 503,
+                message: 'webui 已禁用，无法登录',
+            };
+        }
+        if (!this.hasCredentials(config)) {
+            return {
+                ok: false,
+                status: 503,
+                message: 'webui 账号密码未配置',
+            };
+        }
+        const blocked = this.blockedRetryAfter(ip, now);
+        if (blocked !== null) {
+            return {
+                ok: false,
+                status: 429,
+                message: '登录尝试过于频繁，请稍后再试',
+                retryAfterSeconds: blocked,
+            };
+        }
+        this.cleanup(now);
+        const providedUsername = typeof username === 'string' ? username : '';
+        const providedPassword = typeof password === 'string' ? password : '';
+        const usernameMatches = providedUsername === config.username;
+        const passwordMatches = await this.comparePassword(config.password ?? '', providedPassword);
+        if (!usernameMatches || !passwordMatches) {
+            this.recordFailure(ip, now);
+            return {
+                ok: false,
+                status: 401,
+                message: '用户名或密码错误',
+            };
+        }
+        this.failures.delete(ip);
+        const token = randomBytes(32).toString('base64url');
+        const expiresAt = now + (config.sessionTtlHours ?? 12) * 60 * 60 * 1000;
+        const session = {
+            token,
+            username: config.username ?? '',
+            expiresAt,
+        };
+        this.sessions.set(token, session);
+        return {
+            ok: true,
+            status: 200,
+            session,
+        };
+    }
+    authenticate(token) {
+        if (!token)
+            return null;
+        const session = this.sessions.get(token);
+        if (!session)
+            return null;
+        if (session.expiresAt <= this.now()) {
+            this.sessions.delete(token);
+            return null;
+        }
+        return session;
+    }
+    logout(token) {
+        if (token)
+            this.sessions.delete(token);
+    }
+    invalidateAll() {
+        this.sessions.clear();
+    }
+    clearExpired() {
+        this.cleanup(this.now());
+    }
+    now() {
+        return (this.options.now ?? Date.now)();
+    }
+    hasCredentials(config) {
+        return (typeof config.username === 'string' &&
+            config.username.length > 0 &&
+            typeof config.password === 'string' &&
+            config.password.length > 0);
+    }
+    async comparePassword(expected, provided) {
+        const { salt, hash } = await this.hashFor(expected);
+        const providedHash = await hashPassword(provided, salt);
+        return timingSafeEqual(hash, providedHash);
+    }
+    async hashFor(password) {
+        const cached = this.cachedHash;
+        if (cached && cached.password === password)
+            return cached;
+        const salt = randomBytes(16);
+        const hash = await hashPassword(password, salt);
+        this.cachedHash = { password, salt, hash };
+        return { salt, hash };
+    }
+    maxFailures() {
+        return this.options.maxFailures ?? 5;
+    }
+    windowMs() {
+        return this.options.windowMs ?? 15 * 60 * 1000;
+    }
+    blockedRetryAfter(ip, now) {
+        const entry = this.failures.get(ip);
+        if (!entry)
+            return null;
+        if (entry.resetAt <= now) {
+            this.failures.delete(ip);
+            return null;
+        }
+        if (entry.count < this.maxFailures())
+            return null;
+        return Math.max(Math.ceil((entry.resetAt - now) / 1000), 1);
+    }
+    recordFailure(ip, now) {
+        const windowMs = this.windowMs();
+        const entry = this.failures.get(ip);
+        if (!entry || entry.resetAt <= now) {
+            this.failures.set(ip, { count: 1, resetAt: now + windowMs });
+            return;
+        }
+        this.failures.set(ip, {
+            count: entry.count + 1,
+            resetAt: entry.resetAt,
+        });
+        if (this.failures.size > 1_000) {
+            for (const [key, value] of this.failures) {
+                if (value.resetAt <= now)
+                    this.failures.delete(key);
+            }
+        }
+    }
+    cleanup(now) {
+        for (const [token, session] of this.sessions) {
+            if (session.expiresAt <= now)
+                this.sessions.delete(token);
+        }
+        for (const [ip, entry] of this.failures) {
+            if (entry.resetAt <= now)
+                this.failures.delete(ip);
+        }
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/core/web/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/core/web/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAGrC,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;AAmCrC,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,IAAY;IACtD,OAAO,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAW,CAAA;AAC5D,CAAC;AAED,MAAM,OAAO,WAAW;IAKS,OAAO;IAJnB,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAA;IACzC,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAA;IACnD,UAAU,GAAiD,IAAI,CAAA;IAEvE,YAA6B,OAA2B;uBAA3B,OAAO;IAAuB,CAAC;IAE5D,KAAK,CAAC,KAAK,CACP,QAAiB,EACjB,QAAiB,EACjB,EAAU;QAEV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAA;QAEvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO;gBACH,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,gBAAgB;aAC5B,CAAA;QACL,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACH,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,eAAe;aAC3B,CAAA;QACL,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QAE/C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO;gBACH,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,gBAAgB;gBACzB,iBAAiB,EAAE,OAAO;aAC7B,CAAA;QACL,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAEjB,MAAM,gBAAgB,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;QACrE,MAAM,gBAAgB,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;QAErE,MAAM,eAAe,GAAG,gBAAgB,KAAK,MAAM,CAAC,QAAQ,CAAA;QAC5D,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,eAAe,CAC9C,MAAM,CAAC,QAAQ,IAAI,EAAE,EACrB,gBAAgB,CACnB,CAAA;QAED,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,EAAE,CAAC;YACvC,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;YAE3B,OAAO;gBACH,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,UAAU;aACtB,CAAA;QACL,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAExB,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACnD,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;QACvE,MAAM,OAAO,GAAgB;YACzB,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;YAC/B,SAAS;SACZ,CAAA;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAEjC,OAAO;YACH,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG;YACX,OAAO;SACV,CAAA;IACL,CAAC;IAED,YAAY,CAAC,KAAyB;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QAEvB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAExC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QAEzB,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAE3B,OAAO,IAAI,CAAA;QACf,CAAC;QAED,OAAO,OAAO,CAAA;IAClB,CAAC;IAED,MAAM,CAAC,KAAyB;QAC5B,IAAI,KAAK;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC1C,CAAC;IAED,aAAa;QACT,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;IACzB,CAAC;IAED,YAAY;QACR,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAC5B,CAAC;IAEO,GAAG;QACP,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IAC3C,CAAC;IAEO,cAAc,CAAC,MAAmB;QACtC,OAAO,CACH,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACnC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC1B,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACnC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAC7B,CAAA;IACL,CAAC;IAEO,KAAK,CAAC,eAAe,CACzB,QAAgB,EAChB,QAAgB;QAEhB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QACnD,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAEvD,OAAO,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IAC9C,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAgB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAA;QAE9B,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAA;QAEzD,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAE/C,IAAI,CAAC,UAAU,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAE1C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACzB,CAAC;IAEO,WAAW;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAA;IACxC,CAAC;IAEO,QAAQ;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;IAClD,CAAC;IAEO,iBAAiB,CAAC,EAAU,EAAE,GAAW;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAEnC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QAEvB,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAExB,OAAO,IAAI,CAAA;QACf,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,IAAI,CAAA;QAEjD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/D,CAAC;IAEO,aAAa,CAAC,EAAU,EAAE,GAAW;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAA;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAEnC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAC,CAAA;YAE5D,OAAM;QACV,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;SACzB,CAAC,CAAA;QAEF,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;YAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACvC,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG;oBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACvD,CAAC;QACL,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,GAAW;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3C,IAAI,OAAO,CAAC,SAAS,IAAI,GAAG;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC7D,CAAC;QAED,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACtD,CAAC;IACL,CAAC;CACJ"}

package/dist/core/web/config-store.d.ts

@@ -0,0 +1,30 @@
+import { type AppConfig } from '../config/schema.js';
+import type { AnyPluginDefinition } from '../plugin/types.js';
+import type { ConfigApplyResult, ConfigDocument, ConfigValidationIssue, ConfigValidationResult } from './types.js';
+export declare class ConfigStoreError extends Error {
+    readonly status: number;
+    readonly issues: ConfigValidationIssue[];
+    constructor(status: number, message: string, issues?: ConfigValidationIssue[]);
+}
+export interface ConfigStoreOptions {
+    configPath: string;
+    getPlugins(): AnyPluginDefinition[];
+    restart(): Promise<boolean>;
+}
+export declare function mergeSecrets(current: AppConfig, incoming: unknown): unknown;
+export interface MaskedConfig {
+    config: Record<string, unknown>;
+    accessTokenSet: boolean;
+    webuiPasswordSet: boolean;
+}
+export declare function maskConfig(config: AppConfig): MaskedConfig;
+export declare class ConfigStore {
+    private readonly options;
+    private tail;
+    constructor(options: ConfigStoreOptions);
+    read(): Promise<ConfigDocument>;
+    validate(value: unknown): Promise<ConfigValidationResult>;
+    apply(value: unknown, baseHash?: string): Promise<ConfigApplyResult>;
+    private serialize;
+}
+//# sourceMappingURL=config-store.d.ts.map

package/dist/core/web/config-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.d.ts","sourceRoot":"","sources":["../../../src/core/web/config-store.ts"],"names":[],"mappings":"AAEA,OAAO,EAGH,KAAK,SAAS,EAEjB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAC7D,OAAO,KAAK,EACR,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACzB,MAAM,YAAY,CAAA;AAEnB,qBAAa,gBAAiB,SAAQ,KAAK;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,EAAE,CAAA;IAExC,YACI,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,qBAAqB,EAAO,EAMvC;CACJ;AAED,MAAM,WAAW,kBAAkB;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,IAAI,mBAAmB,EAAE,CAAA;IACnC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;CAC9B;AAUD,wBAAgB,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CAiC3E;AAED,MAAM,WAAW,YAAY;IACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,cAAc,EAAE,OAAO,CAAA;IACvB,gBAAgB,EAAE,OAAO,CAAA;CAC5B;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,YAAY,CAkB1D;AA4FD,qBAAa,WAAW;IAGR,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,IAAI,CAAsC;IAElD,YAA6B,OAAO,EAAE,kBAAkB,EAAI;IAEtD,IAAI,IAAI,OAAO,CAAC,cAAc,CAAC,CAwCpC;IAEK,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAiB9D;IAED,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAwDnE;IAED,OAAO,CAAC,SAAS;CAUpB"}

package/dist/core/web/config-store.js

@@ -0,0 +1,216 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { copyFile, readFile, rename, stat, writeFile } from 'node:fs/promises';
+import { appConfigSchema, formatConfigIssues, } from '../config/schema.js';
+import { stripPluginEnvelope } from '../plugin/host.js';
+export class ConfigStoreError extends Error {
+    status;
+    issues;
+    constructor(status, message, issues = []) {
+        super(message);
+        this.name = 'ConfigStoreError';
+        this.status = status;
+        this.issues = issues;
+    }
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function asRecord(value) {
+    return isRecord(value) ? value : {};
+}
+export function mergeSecrets(current, incoming) {
+    if (!isRecord(incoming))
+        return incoming;
+    const next = asRecord(JSON.parse(JSON.stringify(incoming)));
+    const accessToken = next['accessToken'];
+    if (accessToken === null) {
+        delete next['accessToken'];
+    }
+    else if (accessToken === undefined || accessToken === '') {
+        if (current.accessToken !== undefined) {
+            next['accessToken'] = current.accessToken;
+        }
+        else {
+            delete next['accessToken'];
+        }
+    }
+    const webui = next['webui'];
+    if (isRecord(webui)) {
+        const password = webui['password'];
+        if (password === null) {
+            delete webui['password'];
+        }
+        else if (password === undefined || password === '') {
+            if (current.webui.password !== undefined) {
+                webui['password'] = current.webui.password;
+            }
+            else {
+                delete webui['password'];
+            }
+        }
+    }
+    return next;
+}
+export function maskConfig(config) {
+    const masked = asRecord(JSON.parse(JSON.stringify(config)));
+    let accessTokenSet = false;
+    let webuiPasswordSet = false;
+    if (typeof masked['accessToken'] === 'string') {
+        masked['accessToken'] = '';
+        accessTokenSet = true;
+    }
+    const webui = asRecord(masked['webui']);
+    if (typeof webui['password'] === 'string') {
+        webui['password'] = '';
+        webuiPasswordSet = true;
+    }
+    return { config: masked, accessTokenSet, webuiPasswordSet };
+}
+function issuesFrom(zodIssues) {
+    return zodIssues.map((issue) => {
+        const path = issue.path
+            .map((part) => String(part))
+            .filter((part) => part !== '')
+            .join('.');
+        return { path, message: issue.message };
+    });
+}
+function validatePlugins(config, definitions) {
+    const issues = [];
+    const byId = new Map(definitions.map((definition) => [definition.manifest.id, definition]));
+    for (const [id, envelope] of Object.entries(config.plugins)) {
+        const definition = byId.get(id);
+        if (!definition) {
+            issues.push({
+                path: `plugins.${id}`,
+                message: `unknown plugin id: ${id}`,
+            });
+            continue;
+        }
+        const enabled = envelope.enabled ??
+            definition.manifest.defaultEnabled ??
+            false;
+        if (!enabled)
+            continue;
+        const result = definition.manifest.configSchema.safeParse(stripPluginEnvelope(envelope));
+        if (!result.success) {
+            issues.push(...issuesFrom(result.error.issues).map((issue) => ({
+                path: `plugins.${id}${issue.path.length > 0 ? `.${issue.path}` : ''}`,
+                message: issue.message,
+            })));
+        }
+    }
+    return issues;
+}
+async function atomicWrite(filePath, raw) {
+    let mode;
+    try {
+        mode = (await stat(filePath)).mode & 0o777;
+    }
+    catch {
+        mode = undefined;
+    }
+    const temporary = `${filePath}.tmp-${randomUUID()}`;
+    await writeFile(temporary, raw, {
+        encoding: 'utf8',
+        ...(mode !== undefined ? { mode } : {}),
+    });
+    try {
+        await copyFile(filePath, `${filePath}.bak`);
+    }
+    catch {
+        // Missing source file; nothing to back up.
+    }
+    await rename(temporary, filePath);
+}
+async function restoreRaw(filePath, raw) {
+    const temporary = `${filePath}.tmp-${randomUUID()}`;
+    await writeFile(temporary, raw, 'utf8');
+    await rename(temporary, filePath);
+}
+export class ConfigStore {
+    options;
+    tail = Promise.resolve();
+    constructor(options) {
+        this.options = options;
+    }
+    async read() {
+        let raw;
+        try {
+            raw = await readFile(this.options.configPath, 'utf8');
+        }
+        catch (error) {
+            throw new ConfigStoreError(500, `cannot read config file: ${this.options.configPath}`, []);
+        }
+        let json;
+        try {
+            json = JSON.parse(raw);
+        }
+        catch {
+            throw new ConfigStoreError(500, `invalid JSON in config file: ${this.options.configPath}`);
+        }
+        const parsed = appConfigSchema.safeParse(json);
+        if (!parsed.success) {
+            throw new ConfigStoreError(500, 'invalid config file', issuesFrom(parsed.error.issues));
+        }
+        return {
+            path: this.options.configPath,
+            raw,
+            hash: createHash('sha256').update(raw).digest('hex'),
+            config: parsed.data,
+        };
+    }
+    async validate(value) {
+        const document = await this.read();
+        const merged = mergeSecrets(document.config, value);
+        const parsed = appConfigSchema.safeParse(merged);
+        if (!parsed.success) {
+            return {
+                ok: false,
+                issues: issuesFrom(parsed.error.issues),
+            };
+        }
+        return {
+            ok: true,
+            issues: validatePlugins(parsed.data, this.options.getPlugins()),
+            config: parsed.data,
+        };
+    }
+    apply(value, baseHash) {
+        return this.serialize(async () => {
+            const document = await this.read();
+            if (baseHash !== undefined && baseHash !== document.hash) {
+                throw new ConfigStoreError(409, '配置文件已被外部修改，请刷新后重试');
+            }
+            const merged = mergeSecrets(document.config, value);
+            const parsed = appConfigSchema.safeParse(merged);
+            if (!parsed.success) {
+                throw new ConfigStoreError(400, '配置校验失败', issuesFrom(parsed.error.issues));
+            }
+            const pluginIssues = validatePlugins(parsed.data, this.options.getPlugins());
+            if (pluginIssues.length > 0) {
+                throw new ConfigStoreError(400, '插件配置校验失败', pluginIssues);
+            }
+            const serialized = `${JSON.stringify(parsed.data, null, 4)}\n`;
+            await atomicWrite(this.options.configPath, serialized);
+            if (await this.options.restart()) {
+                const after = await this.read();
+                return { ok: true, hash: after.hash };
+            }
+            await restoreRaw(this.options.configPath, document.raw);
+            const restored = await this.options.restart();
+            return {
+                ok: false,
+                error: restored
+                    ? '运行时重启失败，已恢复旧配置'
+                    : '运行时重启失败，已恢复旧配置，但恢复重启也未成功',
+            };
+        });
+    }
+    serialize(task) {
+        const run = this.tail.then(task, task);
+        this.tail = run.then(() => undefined, () => undefined);
+        return run;
+    }
+}
+//# sourceMappingURL=config-store.js.map

package/dist/core/web/config-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.js","sourceRoot":"","sources":["../../../src/core/web/config-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC9E,OAAO,EACH,eAAe,EACf,kBAAkB,GAGrB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AASvD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAC9B,MAAM,CAAQ;IACd,MAAM,CAAyB;IAExC,YACI,MAAc,EACd,OAAe,EACf,MAAM,GAA4B,EAAE;QAEpC,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACxB,CAAC;CACJ;AAQD,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;AACvC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAkB,EAAE,QAAiB;IAC9D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAA;IAExC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,CAAA;IAEvC,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,aAAa,CAAC,CAAA;IAC9B,CAAC;SAAM,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACzD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,WAAW,CAAA;QAC7C,CAAC;aAAM,CAAC;YACJ,OAAO,IAAI,CAAC,aAAa,CAAC,CAAA;QAC9B,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;IAE3B,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,CAAA;QAElC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,UAAU,CAAC,CAAA;QAC5B,CAAC;aAAM,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YACnD,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACvC,KAAK,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAA;YAC9C,CAAC;iBAAM,CAAC;gBACJ,OAAO,KAAK,CAAC,UAAU,CAAC,CAAA;YAC5B,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAA;AACf,CAAC;AAQD,MAAM,UAAU,UAAU,CAAC,MAAiB;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAC3D,IAAI,cAAc,GAAG,KAAK,CAAA;IAC1B,IAAI,gBAAgB,GAAG,KAAK,CAAA;IAE5B,IAAI,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAA;QAC1B,cAAc,GAAG,IAAI,CAAA;IACzB,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IAEvC,IAAI,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,CAAA;QACtB,gBAAgB,GAAG,IAAI,CAAA;IAC3B,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAA;AAC/D,CAAC;AAED,SAAS,UAAU,CACf,SAA0D;IAE1D,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI;aAClB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;aAC3B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;aAC7B,IAAI,CAAC,GAAG,CAAC,CAAA;QAEd,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;IAC3C,CAAC,CAAC,CAAA;AACN,CAAC;AAED,SAAS,eAAe,CACpB,MAAiB,EACjB,WAAkC;IAElC,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAChB,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CACxE,CAAA;IAED,KAAK,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAE/B,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,WAAW,EAAE,EAAE;gBACrB,OAAO,EAAE,sBAAsB,EAAE,EAAE;aACtC,CAAC,CAAA;YAEF,SAAQ;QACZ,CAAC;QAED,MAAM,OAAO,GACR,QAA2B,CAAC,OAAO;YACpC,UAAU,CAAC,QAAQ,CAAC,cAAc;YAClC,KAAK,CAAA;QAET,IAAI,CAAC,OAAO;YAAE,SAAQ;QAEtB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CACrD,mBAAmB,CAAC,QAA0B,CAAC,CAClD,CAAA;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CACP,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC/C,IAAI,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBACrE,OAAO,EAAE,KAAK,CAAC,OAAO;aACzB,CAAC,CAAC,CACN,CAAA;QACL,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAA;AACjB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,GAAW;IACpD,IAAI,IAAwB,CAAA;IAE5B,IAAI,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAA;IAC9C,CAAC;IAAC,MAAM,CAAC;QACL,IAAI,GAAG,SAAS,CAAA;IACpB,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,QAAQ,QAAQ,UAAU,EAAE,EAAE,CAAA;IAEnD,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,EAAE;QAC5B,QAAQ,EAAE,MAAM;QAChB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAA;IAEF,IAAI,CAAC;QACD,MAAM,QAAQ,CAAC,QAAQ,EAAE,GAAG,QAAQ,MAAM,CAAC,CAAA;IAC/C,CAAC;IAAC,MAAM,CAAC;QACL,2CAA2C;IAC/C,CAAC;IAED,MAAM,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;AACrC,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAgB,EAAE,GAAW;IACnD,MAAM,SAAS,GAAG,GAAG,QAAQ,QAAQ,UAAU,EAAE,EAAE,CAAA;IAEnD,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;IACvC,MAAM,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;AACrC,CAAC;AAED,MAAM,OAAO,WAAW;IAGS,OAAO;IAF5B,IAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAA;IAElD,YAA6B,OAA2B;uBAA3B,OAAO;IAAuB,CAAC;IAE5D,KAAK,CAAC,IAAI;QACN,IAAI,GAAW,CAAA;QAEf,IAAI,CAAC;YACD,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,gBAAgB,CACtB,GAAG,EACH,4BAA4B,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EACrD,EAAE,CACL,CAAA;QACL,CAAC;QAED,IAAI,IAAa,CAAA;QAEjB,IAAI,CAAC;YACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;QACrC,CAAC;QAAC,MAAM,CAAC;YACL,MAAM,IAAI,gBAAgB,CACtB,GAAG,EACH,gCAAgC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAC5D,CAAA;QACL,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAE9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,gBAAgB,CACtB,GAAG,EACH,qBAAqB,EACrB,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAClC,CAAA;QACL,CAAC;QAED,OAAO;YACH,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;YAC7B,GAAG;YACH,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACpD,MAAM,EAAE,MAAM,CAAC,IAAI;SACtB,CAAA;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAc;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAClC,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACnD,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAEhD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO;gBACH,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;aAC1C,CAAA;QACL,CAAC;QAED,OAAO;YACH,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAC/D,MAAM,EAAE,MAAM,CAAC,IAAI;SACtB,CAAA;IACL,CAAC;IAED,KAAK,CAAC,KAAc,EAAE,QAAiB;QACnC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;YAElC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACvD,MAAM,IAAI,gBAAgB,CACtB,GAAG,EACH,mBAAmB,CACtB,CAAA;YACL,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;YACnD,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YAEhD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,gBAAgB,CACtB,GAAG,EACH,QAAQ,EACR,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAClC,CAAA;YACL,CAAC;YAED,MAAM,YAAY,GAAG,eAAe,CAChC,MAAM,CAAC,IAAI,EACX,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAC5B,CAAA;YAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,gBAAgB,CACtB,GAAG,EACH,UAAU,EACV,YAAY,CACf,CAAA;YACL,CAAC;YAED,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAA;YAE9D,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;YAEtD,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;gBAE/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;YACzC,CAAC;YAED,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA;YAEvD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;YAE7C,OAAO;gBACH,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,QAAQ;oBACX,CAAC,CAAC,gBAAgB;oBAClB,CAAC,CAAC,0BAA0B;aACnC,CAAA;QACL,CAAC,CAAC,CAAA;IACN,CAAC;IAEO,SAAS,CAAI,IAAsB;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAEtC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAChB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAClB,CAAA;QAED,OAAO,GAAG,CAAA;IACd,CAAC;CACJ"}

package/dist/core/web/event-feed.d.ts

@@ -0,0 +1,26 @@
+import type { SnowLumaEvent } from '@snowluma/sdk';
+export type FeedEventType = 'message' | 'notice' | 'request' | 'meta' | 'other';
+export interface FeedEvent {
+    id: number;
+    time: number;
+    type: FeedEventType;
+    summary: string;
+    event: SnowLumaEvent;
+}
+export interface FeedFilter {
+    type?: FeedEventType | undefined;
+    limit?: number | undefined;
+}
+export declare class EventFeed {
+    private readonly capacity;
+    private readonly entries;
+    private readonly listeners;
+    private nextId;
+    constructor(capacity?: number);
+    get size(): number;
+    add(event: SnowLumaEvent): void;
+    list(filter?: FeedFilter): FeedEvent[];
+    clear(): void;
+    subscribe(listener: (entry: FeedEvent) => void): () => void;
+}
+//# sourceMappingURL=event-feed.d.ts.map

package/dist/core/web/event-feed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-feed.d.ts","sourceRoot":"","sources":["../../../src/core/web/event-feed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElD,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAA;AAE/E,MAAM,WAAW,SAAS;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,aAAa,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,aAAa,CAAA;CACvB;AAED,MAAM,WAAW,UAAU;IACvB,IAAI,CAAC,EAAE,aAAa,GAAG,SAAS,CAAA;IAChC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC7B;AAuFD,qBAAa,SAAS;IAKN,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAJrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkB;IAC1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwC;IAClE,OAAO,CAAC,MAAM,CAAI;IAElB,YAA6B,QAAQ,SAAM,EAAI;IAE/C,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAuB9B;IAED,IAAI,CAAC,MAAM,GAAE,UAAe,GAAG,SAAS,EAAE,CAWzC;IAED,KAAK,IAAI,IAAI,CAEZ;IAED,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,GAAG,MAAM,IAAI,CAM1D;CACJ"}

package/dist/core/web/event-feed.js

@@ -0,0 +1,107 @@
+function recordOf(event) {
+    return event;
+}
+function eventTypeOf(event) {
+    const postType = recordOf(event).post_type;
+    switch (postType) {
+        case 'message':
+            return 'message';
+        case 'notice':
+            return 'notice';
+        case 'request':
+            return 'request';
+        case 'meta_event':
+            return 'meta';
+        default:
+            return 'other';
+    }
+}
+function readString(value, key) {
+    const item = value[key];
+    return typeof item === 'string' ? item : undefined;
+}
+function readNumber(value, key) {
+    const item = value[key];
+    return typeof item === 'number' ? item : undefined;
+}
+function truncate(value, max = 200) {
+    return value.length > max ? `${value.slice(0, max)}…` : value;
+}
+function summarize(event) {
+    const value = recordOf(event);
+    const type = eventTypeOf(event);
+    if (type === 'message') {
+        const sender = value.sender;
+        if (typeof sender === 'object' && sender !== null) {
+            const senderRecord = sender;
+            const name = readString(senderRecord, 'card') ??
+                readString(senderRecord, 'nickname') ??
+                String(readNumber(value, 'user_id') ?? 'unknown');
+            const raw = readString(value, 'raw_message') ?? '';
+            return truncate(`${name}: ${raw}`);
+        }
+        return truncate(readString(value, 'raw_message') ?? 'message');
+    }
+    if (type === 'notice') {
+        return truncate(`notice ${readString(value, 'notice_type') ?? 'unknown'}`);
+    }
+    if (type === 'request') {
+        return truncate(`request ${readString(value, 'request_type') ?? 'unknown'}`);
+    }
+    if (type === 'meta') {
+        return truncate(`meta ${readString(value, 'meta_event_type') ?? 'unknown'}`);
+    }
+    return truncate(`event ${String(value.post_type ?? 'unknown')}`);
+}
+export class EventFeed {
+    capacity;
+    entries = [];
+    listeners = new Set();
+    nextId = 1;
+    constructor(capacity = 200) {
+        this.capacity = capacity;
+    }
+    get size() {
+        return this.entries.length;
+    }
+    add(event) {
+        const entry = {
+            id: this.nextId,
+            time: Date.now(),
+            type: eventTypeOf(event),
+            summary: summarize(event),
+            event,
+        };
+        this.nextId += 1;
+        this.entries.push(entry);
+        if (this.entries.length > this.capacity) {
+            this.entries.splice(0, this.entries.length - this.capacity);
+        }
+        for (const listener of this.listeners) {
+            try {
+                listener(entry);
+            }
+            catch {
+                // Event consumers must never break dispatch.
+            }
+        }
+    }
+    list(filter = {}) {
+        const matched = this.entries.filter((entry) => filter.type === undefined || entry.type === filter.type);
+        const limit = filter.limit;
+        if (limit === undefined || limit < 0 || limit >= matched.length) {
+            return matched;
+        }
+        return matched.slice(-limit);
+    }
+    clear() {
+        this.entries.length = 0;
+    }
+    subscribe(listener) {
+        this.listeners.add(listener);
+        return () => {
+            this.listeners.delete(listener);
+        };
+    }
+}
+//# sourceMappingURL=event-feed.js.map

package/dist/core/web/event-feed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-feed.js","sourceRoot":"","sources":["../../../src/core/web/event-feed.ts"],"names":[],"mappings":"AAiBA,SAAS,QAAQ,CAAC,KAAoB;IAClC,OAAO,KAA2C,CAAA;AACtD,CAAC;AAED,SAAS,WAAW,CAAC,KAAoB;IACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,SAAS,CAAA;IAE1C,QAAQ,QAAQ,EAAE,CAAC;QACf,KAAK,SAAS;YACV,OAAO,SAAS,CAAA;QACpB,KAAK,QAAQ;YACT,OAAO,QAAQ,CAAA;QACnB,KAAK,SAAS;YACV,OAAO,SAAS,CAAA;QACpB,KAAK,YAAY;YACb,OAAO,MAAM,CAAA;QACjB;YACI,OAAO,OAAO,CAAA;IACtB,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CACf,KAA8B,EAC9B,GAAW;IAEX,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;IAEvB,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AACtD,CAAC;AAED,SAAS,UAAU,CACf,KAA8B,EAC9B,GAAW;IAEX,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;IAEvB,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AACtD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAG,GAAG,GAAG;IACtC,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAA;AACjE,CAAC;AAED,SAAS,SAAS,CAAC,KAAoB;IACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IAE/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;QAE3B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,YAAY,GAAG,MAAiC,CAAA;YACtD,MAAM,IAAI,GACN,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC;gBAChC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC;gBACpC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC,CAAA;YACrD,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,EAAE,CAAA;YAElD,OAAO,QAAQ,CAAC,GAAG,IAAI,KAAK,GAAG,EAAE,CAAC,CAAA;QACtC,CAAC;QAED,OAAO,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,SAAS,CAAC,CAAA;IAClE,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpB,OAAO,QAAQ,CACX,UAAU,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,SAAS,EAAE,CAC5D,CAAA;IACL,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACrB,OAAO,QAAQ,CACX,WAAW,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,IAAI,SAAS,EAAE,CAC9D,CAAA;IACL,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAClB,OAAO,QAAQ,CACX,QAAQ,UAAU,CAAC,KAAK,EAAE,iBAAiB,CAAC,IAAI,SAAS,EAAE,CAC9D,CAAA;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,SAAS,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC,EAAE,CAAC,CAAA;AACpE,CAAC;AAED,MAAM,OAAO,SAAS;IAKW,QAAQ;IAJpB,OAAO,GAAgB,EAAE,CAAA;IACzB,SAAS,GAAG,IAAI,GAAG,EAA8B,CAAA;IAC1D,MAAM,GAAG,CAAC,CAAA;IAElB,YAA6B,QAAQ,GAAG,GAAG;wBAAd,QAAQ;IAAS,CAAC;IAE/C,IAAI,IAAI;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAA;IAC9B,CAAC;IAED,GAAG,CAAC,KAAoB;QACpB,MAAM,KAAK,GAAc;YACrB,EAAE,EAAE,IAAI,CAAC,MAAM;YACf,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;YAChB,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC;YACxB,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC;YACzB,KAAK;SACR,CAAA;QAED,IAAI,CAAC,MAAM,IAAI,CAAC,CAAA;QAChB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAExB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC/D,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC;gBACD,QAAQ,CAAC,KAAK,CAAC,CAAA;YACnB,CAAC;YAAC,MAAM,CAAC;gBACL,6CAA6C;YACjD,CAAC;QACL,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,GAAe,EAAE;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAC/B,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CACrE,CAAA;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;QAE1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAC9D,OAAO,OAAO,CAAA;QAClB,CAAC;QAED,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC;IAED,KAAK;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAA;IAC3B,CAAC;IAED,SAAS,CAAC,QAAoC;QAC1C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAE5B,OAAO,GAAG,EAAE;YACR,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QACnC,CAAC,CAAA;IACL,CAAC;CACJ"}