@kraki/head 0.20.0 → 0.20.2

package/dist/server/account-control.js

@@ -0,0 +1,288 @@
+/** Account control messages: preferences, Custom Words, push tokens and previews, removing devices, deleting the account. */
+import { RemoteAuthBackend } from '../remote-auth-backend.js';
+import { WebSocket } from 'ws';
+import { ACCOUNT_DELETED_CLOSE_CODE } from '@kraki/protocol';
+import { parseVoiceWordOps } from '../voice-vocabulary.js';
+import { getLogger } from '../logger.js';
+import { trace } from '../trace.js';
+import { broadcastDeviceRemoved } from './presence.js';
+import { publicPreferences } from './shared.js';
+/** The relay-terminated control ops, callable from BOTH the raw-WS dispatch
+ *  (onMessage) and the pulse deliver-to-self path. Returns true if handled. */
+export function handleControlMessage(server, ws, state, msg) {
+    switch (msg.type) {
+        case 'update_preferences':
+            handleUpdatePreferences(server, ws, state, msg);
+            return true;
+        case 'update_voice_vocabulary':
+            handleUpdateVoiceVocabulary(server, state, msg);
+            return true;
+        case 'remove_device':
+            handleRemoveDevice(server, ws, state, msg.deviceId);
+            return true;
+        case 'delete_account':
+            void handleDeleteAccount(server, ws, state);
+            return true;
+        case 'register_push_token':
+            handleRegisterPushToken(server, ws, state, msg);
+            return true;
+        case 'unregister_push_token':
+            handleUnregisterPushToken(server, ws, state, msg);
+            return true;
+        case 'dispatch_push': {
+            const sender = state.deviceId ? server.storage.getDevice(state.deviceId) : undefined;
+            const payload = msg.payload;
+            if (sender?.role !== 'tentacle' || !payload?.preview)
+                return true;
+            firePushPreview(server, state, payload.preview);
+            return true;
+        }
+        default: return false;
+    }
+}
+/** Persist a preferences update and echo the merged result to the sender + the
+ *  user's other online devices. */
+export function handleUpdatePreferences(server, ws, state, msg) {
+    if (!state.userId)
+        return;
+    const prefs = msg.preferences;
+    if (!prefs || typeof prefs !== 'object')
+        return;
+    server.storage.updatePreferences(state.userId, prefs);
+    // Read back the full merged preferences
+    const fullUser = server.storage.getUser(state.userId);
+    const merged = publicPreferences(fullUser?.preferences ?? prefs);
+    const confirmation = { type: 'preferences_updated', preferences: merged };
+    // Confirm to the sender + fan out to the user's other devices — all over pulse.
+    if (state.deviceId)
+        server.sendControlToDevice(state.deviceId, confirmation);
+    const userDevices = (() => {
+        try {
+            return server.storage.getDevicesByUser(state.userId);
+        }
+        catch {
+            return [];
+        }
+    })();
+    for (const d of userDevices) {
+        if (d.id === state.deviceId)
+            continue;
+        const other = server.connections.get(d.id);
+        if (!other || other.readyState !== WebSocket.OPEN)
+            continue;
+        server.sendControlToDevice(d.id, confirmation);
+    }
+}
+/** Account data, not session data: no tentacle is involved. The sender
+ *  always gets the resulting list back (its acknowledgement); other online
+ *  apps of the account get it only when something was applied. */
+export function handleUpdateVoiceVocabulary(server, state, msg) {
+    if (!state.userId || !state.deviceId)
+        return;
+    const requestId = typeof msg.requestId === 'string' ? msg.requestId.slice(0, 64) : undefined;
+    const ops = parseVoiceWordOps(msg.ops);
+    let words;
+    try {
+        words = ops?.length
+            ? server.storage.updateVoiceVocabulary(state.userId, ops)
+            : server.storage.getVoiceVocabulary(state.userId);
+    }
+    catch (err) {
+        // Pulse self-delivery has no outer try/catch. No reply: the client keeps
+        // the ops in its outbox and retries.
+        getLogger().warn('Voice vocabulary update failed', { error: err.message });
+        return;
+    }
+    server.sendControlToDevice(state.deviceId, { type: 'voice_vocabulary_updated', requestId, words });
+    if (!ops?.length)
+        return;
+    for (const d of server.storage.getDevicesByUser(state.userId)) {
+        if (d.id !== state.deviceId && d.role === 'app' && server.connections.get(d.id)?.readyState === WebSocket.OPEN) {
+            server.sendControlToDevice(d.id, { type: 'voice_vocabulary_updated', words });
+        }
+    }
+}
+/** Notify offline devices from a pushPreview side-channel. The preview rides the
+ *  same pulse broadcast envelope as the reliable message. */
+export function firePushPreview(server, state, pushPreview) {
+    const senderUserId = state.userId;
+    const senderDeviceId = state.deviceId;
+    if (!senderUserId || !senderDeviceId || !pushPreview) {
+        trace('PUSH-SKIP', { reason: !senderUserId ? 'no-user' : !senderDeviceId ? 'no-device' : 'no-preview' });
+        return;
+    }
+    // Online native clients that post their own notifications (macOS) get the
+    // same encrypted preview over their live connection.
+    for (const token of server.storage.getPushTokensForOfflineDevices(senderUserId, [])) {
+        if (token.provider !== 'local' || token.deviceId === senderDeviceId)
+            continue;
+        if (!server.connections.has(token.deviceId))
+            continue;
+        const key = pushPreview.keys[token.deviceId];
+        if (!key)
+            continue;
+        server.sendControlToDevice(token.deviceId, { type: 'notification_preview', payload: { blob: pushPreview.blob, key } });
+        trace('PUSH-LOCAL', { deviceId: token.deviceId });
+    }
+    if (!server.options.pushManager) {
+        trace('PUSH-SKIP', { reason: 'no-pushmgr' });
+        return;
+    }
+    const onlineDeviceIds = [senderDeviceId];
+    let offlineCount = 0;
+    for (const device of server.storage.getDevicesByUser(senderUserId)) {
+        if (device.id === senderDeviceId)
+            continue;
+        if (server.connections.get(device.id))
+            onlineDeviceIds.push(device.id);
+        else
+            offlineCount++;
+    }
+    trace('PUSH-FIRE', { sender: senderDeviceId, onlineCount: onlineDeviceIds.length, offlineCount, previewKeys: Object.keys(pushPreview.keys) });
+    server.options.pushManager.sendToOfflineDevices(senderUserId, onlineDeviceIds, pushPreview)
+        .catch(err => getLogger().warn('Push notification send failed', { error: err.message }));
+}
+export function handleRemoveDevice(server, ws, state, targetDeviceId) {
+    const logger = getLogger();
+    if (!state.userId || !state.deviceId) {
+        server.sendError(ws, 'Not authenticated');
+        return;
+    }
+    if (!targetDeviceId || typeof targetDeviceId !== 'string') {
+        server.sendError(ws, 'Missing deviceId');
+        return;
+    }
+    const targetDevice = server.storage.getDevice(targetDeviceId);
+    if (!targetDevice || targetDevice.userId !== state.userId) {
+        server.sendError(ws, 'Device not found');
+        return;
+    }
+    // Only allow removing offline devices (zombie cleanup)
+    if (server.connections.has(targetDeviceId)) {
+        server.sendError(ws, 'Cannot remove an online device');
+        return;
+    }
+    server.storage.deleteDevice(targetDeviceId);
+    server.storage.deletePushTokensForDevice(targetDeviceId);
+    // Drop the device's pulse endpoint + persisted outbox/snapshot/capability
+    // rows too. Otherwise they outlive the device record forever, and
+    // recoverOnBoot faithfully rebuilds an endpoint for a device that can
+    // never authenticate again.
+    server.pulseHub.forgetDevice(targetDeviceId);
+    logger.info('Device removed', { deviceId: targetDeviceId, byDevice: state.deviceId });
+    // Edge mode: the account service owns the device list and every auth
+    // mirrors it back here, so the removal must reach it too (otherwise the
+    // device reappears after the next reconnect).
+    const remote = server.authBackend;
+    if (remote instanceof RemoteAuthBackend) {
+        const userId = state.userId;
+        remote.removeDevice(userId, targetDeviceId).then((ok) => {
+            if (!ok)
+                logger.warn('Account service did not remove device', { deviceId: targetDeviceId });
+        }).catch((err) => {
+            logger.warn('Failed to remove device at account service', { deviceId: targetDeviceId, error: err.message });
+        });
+    }
+    // Broadcast removal to all remaining user devices
+    broadcastDeviceRemoved(server, state.userId, targetDeviceId);
+}
+/**
+ * Delete the requesting user's account: at the account store (the account
+ * service in edge mode) and in this relay's own storage and pulse state.
+ * Then tell every connected device and close it. Devices that were offline
+ * get `auth_error` code `account_deleted` when they next connect.
+ */
+export async function handleDeleteAccount(server, ws, state) {
+    const logger = getLogger();
+    const userId = state.userId;
+    const deviceId = state.deviceId;
+    if (!userId || !deviceId) {
+        server.sendError(ws, 'Not authenticated');
+        return;
+    }
+    if (server.storage.getDevice(deviceId)?.role !== 'app') {
+        server.sendError(ws, 'Only the Kraki app can delete the account');
+        return;
+    }
+    if (server.deletingAccounts.has(userId))
+        return;
+    server.deletingAccounts.add(userId);
+    try {
+        const deviceIds = new Set(server.storage.getDevicesByUser(userId).map((d) => d.id));
+        if (server.authBackend.deleteAccount) {
+            for (const id of await server.authBackend.deleteAccount(userId))
+                deviceIds.add(id);
+        }
+        // This relay's own rows (the edge mirror; already gone when the
+        // account store is this relay's storage).
+        for (const id of server.storage.deleteUser(userId))
+            deviceIds.add(id);
+        logger.info('Account deleted', { userId, devices: deviceIds.size, byDevice: deviceId });
+        for (const id of deviceIds) {
+            const socket = server.connections.get(id);
+            if (socket) {
+                // Detach before closing so the close handler doesn't announce
+                // device_left or touch the deleted rows.
+                server.connections.delete(id);
+                server.userByDevice.delete(id);
+                server.clients.delete(socket);
+                if (socket.readyState === WebSocket.OPEN) {
+                    socket.send(JSON.stringify({ type: 'account_deleted' }));
+                    socket.close(ACCOUNT_DELETED_CLOSE_CODE, 'account_deleted');
+                }
+            }
+            server.pulseHub.forgetDevice(id);
+        }
+    }
+    catch (err) {
+        logger.error('Account deletion failed', { userId, error: err.message });
+        server.sendError(ws, 'Could not delete the account. Try again.');
+    }
+    finally {
+        server.deletingAccounts.delete(userId);
+    }
+}
+export function handleRegisterPushToken(server, ws, state, msg) {
+    const logger = getLogger();
+    if (!state.userId || !state.deviceId) {
+        server.sendError(ws, 'Not authenticated');
+        return;
+    }
+    const payload = msg.payload;
+    if (!payload || typeof payload.token !== 'string' || typeof payload.provider !== 'string') {
+        server.sendError(ws, 'Invalid push token: payload.token and payload.provider required');
+        return;
+    }
+    server.storage.upsertPushToken(state.deviceId, payload.provider, payload.token, payload.environment, payload.bundleId);
+    // Clean up Web Push tokens from stale devices (offline >24h) to prevent
+    // duplicate notifications from abandoned PWA installs on the same phone.
+    // APNs tokens are kept: a phone not opened for a day still needs its pushes.
+    // Only this user's devices matter; passing every connection on the relay
+    // made each registration O(global connections) in SQL parameters.
+    const onlineDeviceIds = server.storage.getDevicesByUser(state.userId)
+        .map((d) => d.id)
+        .filter((id) => server.connections.has(id));
+    const pruned = server.storage.deleteStaleUserPushTokens(state.userId, state.deviceId, onlineDeviceIds);
+    if (pruned > 0) {
+        logger.info('Pruned stale push tokens', { userId: state.userId, count: pruned });
+    }
+    logger.info('Push token registered', { deviceId: state.deviceId, provider: payload.provider });
+    if (state.deviceId) {
+        server.sendControlToDevice(state.deviceId, { type: 'push_token_registered', payload: { provider: payload.provider } });
+    }
+}
+export function handleUnregisterPushToken(server, ws, state, msg) {
+    const logger = getLogger();
+    if (!state.userId || !state.deviceId) {
+        server.sendError(ws, 'Not authenticated');
+        return;
+    }
+    const payload = msg.payload;
+    if (!payload || typeof payload.provider !== 'string') {
+        server.sendError(ws, 'Invalid unregister: payload.provider required');
+        return;
+    }
+    server.storage.deletePushToken(state.deviceId, payload.provider);
+    logger.info('Push token unregistered', { deviceId: state.deviceId, provider: payload.provider });
+}
+//# sourceMappingURL=account-control.js.map

package/dist/server/account-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-control.js","sourceRoot":"","sources":["../../src/server/account-control.ts"],"names":[],"mappings":"AAAA,6HAA6H;AAE7H,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAE/B,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAkB,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAoB,MAAM,aAAa,CAAC;AAElE;+EAC+E;AAC/E,MAAM,UAAU,oBAAoB,CAAC,MAAkB,EAAE,EAAa,EAAE,KAAkB,EAAE,GAA4B;IACtH,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,oBAAoB;YAAK,uBAAuB,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAC3F,KAAK,yBAAyB;YAAE,2BAA2B,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAC7F,KAAK,eAAe;YAAU,kBAAkB,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,QAAkB,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QACzG,KAAK,gBAAgB;YAAS,KAAK,mBAAmB,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QACvF,KAAK,qBAAqB;YAAI,uBAAuB,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAC3F,KAAK,uBAAuB;YAAE,yBAAyB,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAC7F,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACrF,MAAM,OAAO,GAAG,GAAG,CAAC,OAAgD,CAAC;YACrE,IAAI,MAAM,EAAE,IAAI,KAAK,UAAU,IAAI,CAAC,OAAO,EAAE,OAAO;gBAAE,OAAO,IAAI,CAAC;YAClE,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC;IACxB,CAAC;AACH,CAAC;AAED;mCACmC;AACnC,MAAM,UAAU,uBAAuB,CAAC,MAAkB,EAAE,EAAa,EAAE,KAAkB,EAAE,GAA4B;IACzH,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,WAAkD,CAAC;IACrE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO;IAChD,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtD,wCAAwC;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,WAAW,IAAI,KAAK,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAC1E,gFAAgF;IAChF,IAAI,KAAK,CAAC,QAAQ;QAAE,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;QACxB,IAAI,CAAC;YAAC,OAAO,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACrF,CAAC,CAAC,EAAE,CAAC;IACL,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,QAAQ;YAAE,SAAS;QACtC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;YAAE,SAAS;QAC5D,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED;;kEAEkE;AAClE,MAAM,UAAU,2BAA2B,CAAC,MAAkB,EAAE,KAAkB,EAAE,GAA4B;IAC9G,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ;QAAE,OAAO;IAC7C,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,KAAkB,CAAC;IACvB,IAAI,CAAC;QACH,KAAK,GAAG,GAAG,EAAE,MAAM;YACjB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC;YACzD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,qCAAqC;QACrC,SAAS,EAAE,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACtF,OAAO;IACT,CAAC;IACD,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACnG,IAAI,CAAC,GAAG,EAAE,MAAM;QAAE,OAAO;IACzB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YAC/G,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;AACH,CAAC;AAED;6DAC6D;AAC7D,MAAM,UAAU,eAAe,CAAC,MAAkB,EAAE,KAAkB,EAAE,WAAoC;IAC1G,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC;IAClC,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC;IACtC,IAAI,CAAC,YAAY,IAAI,CAAC,cAAc,IAAI,CAAC,WAAW,EAAE,CAAC;QACrD,KAAK,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;QACzG,OAAO;IACT,CAAC;IACD,0EAA0E;IAC1E,qDAAqD;IACrD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC;QACpF,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,cAAc;YAAE,SAAS;QAC9E,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,SAAS;QACtD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACvH,KAAK,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAChC,KAAK,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IACD,MAAM,eAAe,GAAa,CAAC,cAAc,CAAC,CAAC;IACnD,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,CAAC;QACnE,IAAI,MAAM,CAAC,EAAE,KAAK,cAAc;YAAE,SAAS;QAC3C,IAAI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;;YAClE,YAAY,EAAE,CAAC;IACtB,CAAC;IACD,KAAK,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9I,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,YAAY,EAAE,eAAe,EAAE,WAAW,CAAC;SACxF,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAkB,EAAE,EAAa,EAAE,KAAkB,EAAE,cAAsB;IAC9G,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,IAAI,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC9D,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC1D,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,uDAAuD;IACvD,IAAI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,gCAAgC,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;IAC5C,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,cAAc,CAAC,CAAC;IACzD,0EAA0E;IAC1E,kEAAkE;IAClE,sEAAsE;IACtE,4BAA4B;IAC5B,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;IAC7C,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAEtF,qEAAqE;IACrE,wEAAwE;IACxE,8CAA8C;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC;IAClC,IAAI,MAAM,YAAY,iBAAiB,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;YACtD,IAAI,CAAC,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;QAC9F,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACf,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACzH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,kDAAkD;IAClD,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAkB,EAAE,EAAa,EAAE,KAAkB;IAC7F,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC;QACvD,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,2CAA2C,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO;IAChD,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpF,IAAI,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;YACrC,KAAK,MAAM,EAAE,IAAI,MAAM,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC;gBAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,gEAAgE;QAChE,0CAA0C;QAC1C,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAExF,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,MAAM,EAAE,CAAC;gBACX,8DAA8D;gBAC9D,yCAAyC;gBACzC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC9B,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC/B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC9B,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;oBACzC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;oBACzD,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,iBAAiB,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;YACD,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,0CAA0C,CAAC,CAAC;IACnE,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAkB,EAAE,EAAa,EAAE,KAAkB,EAAE,GAA4B;IACzH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAA8C,CAAC;IACnE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1F,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,iEAAiE,CAAC,CAAC;QACxF,OAAO;IACT,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,eAAe,CAC5B,KAAK,CAAC,QAAQ,EACd,OAAO,CAAC,QAAkB,EAC1B,OAAO,CAAC,KAAe,EACvB,OAAO,CAAC,WAAiC,EACzC,OAAO,CAAC,QAA8B,CACvC,CAAC;IAEF,wEAAwE;IACxE,yEAAyE;IACzE,6EAA6E;IAC7E,yEAAyE;IACzE,kEAAkE;IAClE,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC;SAClE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACvG,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/F,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAkB,EAAE,EAAa,EAAE,KAAkB,EAAE,GAA4B;IAC3H,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAA8C,CAAC;IACnE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACrD,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,+CAA+C,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAkB,CAAC,CAAC;IAC3E,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;AACnG,CAAC"}

package/dist/server/auth-flow.d.ts

@@ -0,0 +1,82 @@
+/** The WebSocket auth handshake: token / challenge auth, pairing tokens, replacing an older connection. */
+import { WebSocket } from 'ws';
+import type { AuthMessage, AuthErrorCode, DeviceSummary } from '@kraki/protocol';
+import type { AuthOutcome } from '../auth-backend.js';
+import type { HeadServer } from '../server.js';
+import { type ClientState } from './shared.js';
+export declare function sendAuthError(server: HeadServer, ws: WebSocket, code: AuthErrorCode, message: string, redirect?: string, deviceId?: string): void;
+export declare function handleAuth(server: HeadServer, ws: WebSocket, state: ClientState, msg: AuthMessage): Promise<void>;
+/** After an awaited auth step: is this socket still open, still ours and
+ *  still unauthenticated? The auth deadline may have closed it meanwhile;
+ *  registering a dead socket would evict the device's live connection. */
+export declare function socketStillAuthenticating(server: HeadServer, ws: WebSocket, state: ClientState): boolean;
+export declare function handleChallengeResponse(server: HeadServer, ws: WebSocket, state: ClientState, msg: {
+    deviceId: string;
+    signature: string;
+}): void;
+/**
+ * Handle a result from AuthBackend — registers connection state and sends response.
+ * Used for both initial auth and challenge-response verification.
+ */
+export declare function handleBackendAuthResult(server: HeadServer, ws: WebSocket, state: ClientState, result: AuthOutcome): void;
+/**
+ * Common post-auth completion logic, used by every auth path.
+ *
+ * Responsibilities:
+ *  - Read user preferences from local storage and merge into the user object.
+ *  - Flush any locally-queued pending messages for this device (offline-queue).
+ *  - Build and send the `auth_ok` response.
+ *  - Broadcast `device_joined` to the user's other connected devices.
+ *
+ * Each caller is responsible for path-specific work BEFORE calling this:
+ * validating credentials, persisting user/device records, setting up
+ * ClientState, populating `connections` / `userByDevice` maps, and logging
+ * the path-specific "authenticated via X" line.
+ *
+ * Centralising the tail eliminates a class of bugs where new auth paths
+ * (notably the multi-region delegated-backend path) silently diverge from
+ * the established post-auth flow.
+ */
+export declare function completeAuthHandshake(server: HeadServer, ws: WebSocket, params: {
+    /** The authenticated device's ID. */
+    deviceId: string;
+    /** The authenticated user's ID. */
+    userId: string;
+    /** Identity fields from the auth source (local DB or remote backend).
+     *  `preferences` and `region` are optional and only meaningful from the
+     *  delegated-backend path — local paths leave them undefined and the
+     *  helper reads preferences from local storage instead. */
+    user: {
+        id: string;
+        login: string;
+        provider: string;
+        email?: string;
+        preferences?: Record<string, unknown>;
+        region?: string;
+    };
+    /** Auth method, echoed back in auth_ok. */
+    authMethod: string;
+    /** Devices list to include in auth_ok. If omitted, derived from local storage.
+     *  Edge mode supplies this from the remote backend's view. */
+    devices?: DeviceSummary[];
+    /** Override of the backend's GitHub client id (used when delegated). */
+    githubClientId?: string;
+    /** Override of `getVapidPublicKey()` (used when delegated). */
+    vapidPublicKey?: string;
+}): void;
+/**
+ * A device is about to register `ws` as its connection. If the SAME device id
+ * already had a socket, that older socket is now orphaned: once we overwrite
+ * the map entry its close handler hits the reconnect-guard and skips cleanup,
+ * and the ping timer (which only walks `connections`) never visits it again.
+ * It would sit in `clients` holding its ClientState until TCP finally gives
+ * up. Retire both the WebSocket and its Pulse link explicitly before the new
+ * connection is installed.
+ *
+ * Must be called BEFORE `connections.set(deviceId, ws)`.
+ */
+export declare function evictPreviousConnection(server: HeadServer, deviceId: string, ws: WebSocket): void;
+export declare function handleCreatePairingToken(server: HeadServer, ws: WebSocket, state: ClientState): Promise<void>;
+export declare function handleRequestPairingToken(server: HeadServer, ws: WebSocket, state: ClientState, msg: {
+    token?: string;
+}): Promise<void>;