@kraki/head 0.20.1 → 0.20.2

package/dist/server/auth-flow.js

@@ -0,0 +1,315 @@
+/** The WebSocket auth handshake: token / challenge auth, pairing tokens, replacing an older connection. */
+import { WebSocket } from 'ws';
+import { metrics } from '../metrics.js';
+import { DEVICE_REPLACED_CLOSE_CODE } from '@kraki/protocol';
+import { PULSE_ACK_EVERY_BYTES } from '../pulse-hub.js';
+import { getLogger } from '../logger.js';
+import { trace } from '../trace.js';
+import { broadcastDeviceJoined, getDeviceSummaries } from './presence.js';
+import { publicPreferences } from './shared.js';
+export function sendAuthError(server, ws, code, message, redirect, deviceId) {
+    metrics().authFailed(code);
+    if (ws.readyState === WebSocket.OPEN) {
+        ws.send(JSON.stringify({ type: 'auth_error', code, message, ...(redirect && { redirect }), ...(deviceId && { deviceId }) }));
+    }
+}
+export async function handleAuth(server, ws, state, msg) {
+    state.pulseProgressAck = msg.device?.pulseProgressAck === true;
+    const logger = getLogger();
+    const { auth } = msg;
+    // One auth attempt per socket at a time: a second `auth` while the first
+    // is awaiting its backend would register the device twice.
+    if (state.authInFlight || state.pendingNonce) {
+        // Ignored rather than answered with auth_error: clients treat auth
+        // errors as credential failures, and this one is just a duplicate.
+        logger.warn('Ignoring duplicate auth while one is in progress', { ip: state.ip });
+        return;
+    }
+    state.authInFlight = true;
+    try {
+        if (auth.method === 'challenge') {
+            // Challenge is multi-step — start here, verify in handleChallengeResponse
+            const result = await server.authBackend.startChallenge(auth.deviceId, msg.device.encryptionKey, server.options.region);
+            if (!socketStillAuthenticating(server, ws, state))
+                return;
+            if (!result.ok) {
+                sendAuthError(server, ws, result.code, result.message, result.code === 'wrong_region' ? result.redirect : undefined);
+                return;
+            }
+            state.pendingNonce = result.nonce;
+            state.pendingDeviceId = result.deviceId;
+            state.pendingDeviceInfo = { encryptionKey: msg.device.encryptionKey };
+            state.pendingAuthMethod = 'challenge';
+            logger.debug('Issuing auth challenge', { deviceId: auth.deviceId });
+            ws.send(JSON.stringify({ type: 'auth_challenge', nonce: result.nonce }));
+            return;
+        }
+        const result = await server.authBackend.authenticate(auth, msg.device, server.options.region, state.ip);
+        if (!socketStillAuthenticating(server, ws, state))
+            return;
+        handleBackendAuthResult(server, ws, state, result);
+    }
+    finally {
+        state.authInFlight = false;
+    }
+}
+/** After an awaited auth step: is this socket still open, still ours and
+ *  still unauthenticated? The auth deadline may have closed it meanwhile;
+ *  registering a dead socket would evict the device's live connection. */
+export function socketStillAuthenticating(server, ws, state) {
+    return ws.readyState === WebSocket.OPEN && server.clients.get(ws) === state && !state.authenticated;
+}
+export function handleChallengeResponse(server, ws, state, msg) {
+    const logger = getLogger();
+    const deviceId = state.pendingDeviceId;
+    const nonce = state.pendingNonce;
+    const pendingInfo = state.pendingDeviceInfo;
+    state.pendingNonce = undefined;
+    state.pendingDeviceId = undefined;
+    state.pendingDeviceInfo = undefined;
+    if (!deviceId || !nonce) {
+        sendAuthError(server, ws, 'no_pending_challenge', 'No pending challenge');
+        return;
+    }
+    state.authInFlight = true;
+    server.authBackend.verifyChallenge(deviceId, nonce, msg.signature, pendingInfo?.encryptionKey, server.options.region).then(result => {
+        if (!socketStillAuthenticating(server, ws, state))
+            return;
+        handleBackendAuthResult(server, ws, state, result);
+    }).catch(err => {
+        // A thrown error means the auth backend itself was unreachable / timed
+        // out (network, 5xx, abort) — NOT that the signature was invalid. A
+        // deterministic auth failure comes back as a resolved AuthError outcome
+        // above. Reporting this as auth_rejected made the arm treat a transient
+        // backend outage as a permanent credential failure and wipe the paired
+        // device, forcing a full re-pair. Surface it as auth_unavailable so the
+        // client retries instead of destroying a valid session.
+        logger.error('Auth backend verifyChallenge failed', { error: err.message });
+        if (socketStillAuthenticating(server, ws, state)) {
+            sendAuthError(server, ws, 'service_unavailable', 'Authentication service unavailable');
+        }
+    }).finally(() => {
+        state.authInFlight = false;
+    });
+}
+/**
+ * Handle a result from AuthBackend — registers connection state and sends response.
+ * Used for both initial auth and challenge-response verification.
+ */
+export function handleBackendAuthResult(server, ws, state, result) {
+    const logger = getLogger();
+    if (!result.ok) {
+        const redirect = result.code === 'wrong_region' ? result.redirect : undefined;
+        const deviceId = result.code === 'wrong_region' ? result.deviceId : undefined;
+        sendAuthError(server, ws, result.code, result.message, redirect, deviceId);
+        return;
+    }
+    // Register connection
+    state.authenticated = true;
+    state.authenticatedAt = Date.now();
+    if (state.authTimer) {
+        clearTimeout(state.authTimer);
+        state.authTimer = undefined;
+    }
+    state.deviceId = result.deviceId;
+    state.userId = result.userId;
+    evictPreviousConnection(server, result.deviceId, ws);
+    server.connections.set(result.deviceId, ws);
+    server.userByDevice.set(result.deviceId, result.userId);
+    trace('DEV-CONNECT', { device: result.deviceId, user: result.userId, auth: 'backend' });
+    metrics().inc('auth.ok');
+    logger.info('Device authenticated (via backend)', {
+        deviceId: result.deviceId,
+        user: result.user.login,
+        method: result.authMethod,
+        ip: state.ip,
+    });
+    // Mirror user + devices into local storage so edge-local operations
+    // (broadcastDeviceJoined, getDeviceSummaries, etc.) work even when auth
+    // is delegated to a remote backend.
+    try {
+        server.storage.upsertUser(result.user.id, result.user.login, result.user.provider, result.user.email);
+        for (const d of result.devices) {
+            try {
+                server.storage.upsertDevice(d.id, result.userId, d.name, d.role, d.kind ?? undefined, d.publicKey ?? undefined, d.encryptionKey ?? undefined);
+            }
+            catch (err) {
+                logger.warn('Failed to mirror device locally', { deviceId: d.id, error: err.message });
+            }
+        }
+    }
+    catch (err) {
+        logger.warn('Failed to mirror user locally', { userId: result.userId, error: err.message });
+    }
+    completeAuthHandshake(server, ws, {
+        deviceId: result.deviceId,
+        userId: result.userId,
+        user: result.user,
+        authMethod: result.authMethod,
+        devices: result.devices,
+        githubClientId: result.githubClientId,
+        vapidPublicKey: result.vapidPublicKey,
+    });
+}
+/**
+ * Common post-auth completion logic, used by every auth path.
+ *
+ * Responsibilities:
+ *  - Read user preferences from local storage and merge into the user object.
+ *  - Flush any locally-queued pending messages for this device (offline-queue).
+ *  - Build and send the `auth_ok` response.
+ *  - Broadcast `device_joined` to the user's other connected devices.
+ *
+ * Each caller is responsible for path-specific work BEFORE calling this:
+ * validating credentials, persisting user/device records, setting up
+ * ClientState, populating `connections` / `userByDevice` maps, and logging
+ * the path-specific "authenticated via X" line.
+ *
+ * Centralising the tail eliminates a class of bugs where new auth paths
+ * (notably the multi-region delegated-backend path) silently diverge from
+ * the established post-auth flow.
+ */
+export function completeAuthHandshake(server, ws, params) {
+    // Merge preferences. Local storage takes precedence (it captures per-edge
+    // overrides the backend might not know about), but fall back to the
+    // backend-supplied preferences if local has none — e.g. on a user's very
+    // first auth to this edge, before upsertUser has been called or when the
+    // backend is the canonical source of truth.
+    //
+    // Why this matters: storage.upsertUser only writes username/provider/email,
+    // NOT preferences. So a brand-new user record reads back with
+    // preferences=undefined. Without this fallback, backend preferences would
+    // be silently dropped at every first auth.
+    const fullUser = server.storage.getUser(params.userId);
+    const userResponse = {
+        ...params.user,
+        preferences: publicPreferences(fullUser?.preferences ?? params.user.preferences),
+    };
+    // Devices list. If the caller provided one (edge mode), recompute online
+    // status against our current connections map. Otherwise derive locally.
+    const devices = params.devices
+        ? params.devices.map(d => ({ ...d, online: server.connections.has(d.id) }))
+        : getDeviceSummaries(server, params.userId);
+    const deviceRole = devices.find((device) => device.id === params.deviceId)?.role
+        ?? server.storage.getDevice(params.deviceId)?.role;
+    ws.send(JSON.stringify({
+        type: 'auth_ok',
+        deviceId: params.deviceId,
+        authMethod: params.authMethod,
+        user: userResponse,
+        devices,
+        githubClientId: params.githubClientId ?? server.authBackend.getAuthInfo().githubClientId,
+        vapidPublicKey: params.vapidPublicKey ?? server.getVapidPublicKey(),
+        relayVersion: server.options.version,
+        pulseAckBytes: PULSE_ACK_EVERY_BYTES,
+        // Apps only: a tentacle has no use for the user's word list.
+        ...(deviceRole === 'app' && { voiceVocabulary: server.storage.getVoiceVocabulary(params.userId) }),
+        ...(server.getVoiceCapability() && { voice: server.getVoiceCapability() }),
+    }));
+    // Clients only accept Pulse envelopes after processing auth_ok. Starting
+    // the endpoint before auth_ok loses the initial hello, leaving peerEpoch
+    // empty and making a later relay restart indistinguishable from the first
+    // connection. That stale recvCursor then drops the restarted seq=1..N as
+    // duplicates. Keep this ordering centralized for every auth path.
+    //
+    // Apps have explicit reconnect authorities (fresh session_list,
+    // subscription snapshot, and history ranges). If their HELLO carries a new
+    // process epoch, fence the preceding process's non-durable downlink so the
+    // new UI cannot animate through old live events. Tentacle downlinks carry
+    // commands and retain ordinary Pulse resume semantics across process epochs.
+    server.pulseHub.onDeviceConnected(params.deviceId, {
+        discardPreviousProcessNonDurable: deviceRole === 'app',
+    });
+    broadcastDeviceJoined(server, params.userId, params.deviceId);
+}
+/**
+ * A device is about to register `ws` as its connection. If the SAME device id
+ * already had a socket, that older socket is now orphaned: once we overwrite
+ * the map entry its close handler hits the reconnect-guard and skips cleanup,
+ * and the ping timer (which only walks `connections`) never visits it again.
+ * It would sit in `clients` holding its ClientState until TCP finally gives
+ * up. Retire both the WebSocket and its Pulse link explicitly before the new
+ * connection is installed.
+ *
+ * Must be called BEFORE `connections.set(deviceId, ws)`.
+ */
+export function evictPreviousConnection(server, deviceId, ws) {
+    const previous = server.connections.get(deviceId);
+    if (!previous || previous === ws)
+        return;
+    getLogger().info('Replacing existing connection for device', { deviceId });
+    // The old close callback will see the replacement in `connections` and skip
+    // its guarded cleanup. Publish the Pulse disconnect here so capability and
+    // connection-scoped state cannot leak across the replacement boundary.
+    server.pulseHub.onDeviceDisconnected(deviceId);
+    const previousState = server.clients.get(previous);
+    if (previousState)
+        previousState.evicted = true;
+    server.clients.delete(previous);
+    // Say why (a bare terminate() reads as a network drop, and a client that
+    // reconnects on it evicts this new connection in turn). Force the TCP
+    // teardown shortly after in case the old peer never completes the close.
+    try {
+        previous.close(DEVICE_REPLACED_CLOSE_CODE, 'replaced');
+    }
+    catch { /* best effort */ }
+    const force = setTimeout(() => { try {
+        previous.terminate();
+    }
+    catch { /* already gone */ } }, 2_000);
+    force.unref?.();
+    previous.once('close', () => clearTimeout(force));
+}
+export async function handleCreatePairingToken(server, ws, state) {
+    const logger = getLogger();
+    if (!(server.options.pairingEnabled ?? true)) {
+        server.sendError(ws, 'Pairing is disabled on this relay');
+        return;
+    }
+    if (!state.userId) {
+        server.sendError(ws, 'Not authenticated');
+        return;
+    }
+    try {
+        // A remote (edge) backend creates tokens on the account service.
+        const backend = server.authBackend;
+        const result = backend.createPairingTokenAsync
+            ? await backend.createPairingTokenAsync(state.userId)
+            : backend.createPairingToken(state.userId);
+        if (!result?.token)
+            throw new Error('no token returned');
+        logger.info('Pairing token created', { userId: state.userId });
+        if (ws.readyState === WebSocket.OPEN) {
+            ws.send(JSON.stringify({ type: 'pairing_token_created', token: result.token, expiresIn: result.expiresIn }));
+        }
+    }
+    catch (err) {
+        logger.warn('Pairing token creation failed', { userId: state.userId, error: err.message });
+        server.sendError(ws, 'Pairing is temporarily unavailable');
+    }
+}
+export async function handleRequestPairingToken(server, ws, state, msg) {
+    const logger = getLogger();
+    if (!(server.options.pairingEnabled ?? true)) {
+        server.sendError(ws, 'Pairing is disabled on this relay');
+        return;
+    }
+    if (!msg.token) {
+        server.sendError(ws, 'Token required for pairing request');
+        return;
+    }
+    const result = await server.authBackend.requestPairingToken(msg.token, state.ip);
+    if (ws.readyState !== WebSocket.OPEN)
+        return;
+    if (!result.ok) {
+        sendAuthError(server, ws, result.code, result.message);
+        return;
+    }
+    logger.info('Pairing token created (one-shot)', { userId: result.userId });
+    ws.send(JSON.stringify({
+        type: 'pairing_token_created',
+        token: result.pairingToken,
+        expiresIn: result.expiresIn,
+    }));
+}
+//# sourceMappingURL=auth-flow.js.map

package/dist/server/auth-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-flow.js","sourceRoot":"","sources":["../../src/server/auth-flow.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAE3G,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAGpC,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAoB,MAAM,aAAa,CAAC;AAElE,MAAM,UAAU,aAAa,CAAC,MAAkB,EAAE,EAAa,EAAE,IAAmB,EAAE,OAAe,EAAE,QAAiB,EAAE,QAAiB;IACzI,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;QACrC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/H,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAkB,EAAE,EAAa,EAAE,KAAkB,EAAE,GAAgB;IACtG,KAAK,CAAC,gBAAgB,GAAG,GAAG,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAC/D,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IACrB,yEAAyE;IACzE,2DAA2D;IAC3D,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAClF,OAAO;IACT,CAAC;IACD,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAChC,0EAA0E;YAC1E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,cAAc,CACpD,IAAI,CAAC,QAAQ,EACb,GAAG,CAAC,MAAM,CAAC,aAAa,EACxB,MAAM,CAAC,OAAO,CAAC,MAAM,CACtB,CAAC;YACF,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC;gBAAE,OAAO;YAC1D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,IAAqB,EAAE,MAAM,CAAC,OAAO,EACpE,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAE,MAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC3F,OAAO;YACT,CAAC;YACD,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;YAClC,KAAK,CAAC,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC;YACxC,KAAK,CAAC,iBAAiB,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACtE,KAAK,CAAC,iBAAiB,GAAG,WAAW,CAAC;YACtC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YACpE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACxG,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1D,uBAAuB,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;0EAE0E;AAC1E,MAAM,UAAU,yBAAyB,CAAC,MAAkB,EAAE,EAAa,EAAE,KAAkB;IAC7F,OAAO,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;AACtG,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAkB,EAAE,EAAa,EAAE,KAAkB,EAAE,GAA4C;IACzI,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,eAAe,CAAC;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC;IACjC,MAAM,WAAW,GAAG,KAAK,CAAC,iBAAiB,CAAC;IAE5C,KAAK,CAAC,YAAY,GAAG,SAAS,CAAC;IAC/B,KAAK,CAAC,eAAe,GAAG,SAAS,CAAC;IAClC,KAAK,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAEpC,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,sBAAsB,EAAE,sBAAsB,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IAED,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,WAAW,CAAC,eAAe,CAChC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,EAC9B,WAAW,EAAE,aAAa,EAC1B,MAAM,CAAC,OAAO,CAAC,MAAM,CACtB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;QACd,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1D,uBAAuB,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;QACb,uEAAuE;QACvE,oEAAoE;QACpE,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,wDAAwD;QACxD,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,IAAI,yBAAyB,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;YACjD,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,qBAAqB,EAAE,oCAAoC,CAAC,CAAC;QACzF,CAAC;IACH,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QACd,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAkB,EAAE,EAAa,EAAE,KAAkB,EAAE,MAAmB;IAChH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAE,MAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACzG,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAE,MAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACzG,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,IAAqB,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC5F,OAAO;IACT,CAAC;IAED,sBAAsB;IACtB,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAAC,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;IAAC,CAAC;IACpF,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACxD,KAAK,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACxF,OAAO,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEzB,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;QAChD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;QACvB,MAAM,EAAE,MAAM,CAAC,UAAU;QACzB,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;IAEH,oEAAoE;IACpE,wEAAwE;IACxE,oCAAoC;IACpC,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,UAAU,CACvB,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAC3E,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,CAAC,OAAO,CAAC,YAAY,CACzB,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EACnC,CAAC,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC,aAAa,IAAI,SAAS,CAC5E,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACpG,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACzG,CAAC;IAED,qBAAqB,CAAC,MAAM,EAAE,EAAE,EAAE;QAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAkB,EAClB,EAAa,EACb,MA0BC;IAED,0EAA0E;IAC1E,oEAAoE;IACpE,yEAAyE;IACzE,yEAAyE;IACzE,4CAA4C;IAC5C,EAAE;IACF,4EAA4E;IAC5E,8DAA8D;IAC9D,0EAA0E;IAC1E,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG;QACnB,GAAG,MAAM,CAAC,IAAI;QACd,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;KACjF,CAAC;IAEF,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO;QAC5B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI;WAC3E,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;IAErD,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QACrB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,IAAI,EAAE,YAAY;QAClB,OAAO;QACP,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,cAAc;QACxF,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,iBAAiB,EAAE;QACnE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO;QACpC,aAAa,EAAE,qBAAqB;QACpC,6DAA6D;QAC7D,GAAG,CAAC,UAAU,KAAK,KAAK,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAClG,GAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC;KAC3E,CAAC,CAAC,CAAC;IAEJ,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,kEAAkE;IAClE,EAAE;IACF,gEAAgE;IAChE,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,6EAA6E;IAC7E,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE;QACjD,gCAAgC,EAAE,UAAU,KAAK,KAAK;KACvD,CAAC,CAAC;IACH,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAkB,EAAE,QAAgB,EAAE,EAAa;IACzF,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO;IACzC,SAAS,EAAE,CAAC,IAAI,CAAC,0CAA0C,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,aAAa;QAAE,aAAa,CAAC,OAAO,GAAG,IAAI,CAAC;IAChD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,yEAAyE;IACzE,sEAAsE;IACtE,yEAAyE;IACzE,IAAI,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACtG,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAkB,EAAE,EAAa,EAAE,KAAkB;IAClG,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,mCAAmC,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,iEAAiE;QACjE,MAAM,OAAO,GAAG,MAAM,CAAC,WAEtB,CAAC;QACF,MAAM,MAAM,GAAG,OAAO,CAAC,uBAAuB;YAC5C,CAAC,CAAC,MAAM,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC;YACrD,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,EAAE,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/D,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YACrC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACtG,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,MAAkB,EAAE,EAAa,EAAE,KAAkB,EAAE,GAAuB;IAC5H,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,mCAAmC,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACjF,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;QAAE,OAAO;IAC7C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,IAAqB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3E,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QACrB,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,MAAM,CAAC,YAAY;QAC1B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/server/presence.d.ts

@@ -0,0 +1,8 @@
+/** Device presence: who joined, left, is pending or was removed, and the device list. */
+import type { DeviceSummary } from '@kraki/protocol';
+import type { HeadServer } from '../server.js';
+export declare function broadcastDeviceRemoved(server: HeadServer, userId: string, removedDeviceId: string): void;
+export declare function broadcastDeviceJoined(server: HeadServer, userId: string, newDeviceId: string): void;
+export declare function broadcastDeviceLeft(server: HeadServer, userId: string, leftDeviceId: string): void;
+export declare function broadcastDevicePending(server: HeadServer, userId: string, pendingDeviceId: string): void;
+export declare function getDeviceSummaries(server: HeadServer, userId: string): DeviceSummary[];

package/dist/server/presence.js

@@ -0,0 +1,103 @@
+/** Device presence: who joined, left, is pending or was removed, and the device list. */
+import { WebSocket } from 'ws';
+export function broadcastDeviceRemoved(server, userId, removedDeviceId) {
+    let userDevices;
+    try {
+        userDevices = server.storage.getDevicesByUser(userId);
+    }
+    catch {
+        return;
+    }
+    for (const d of userDevices) {
+        const ws = server.connections.get(d.id);
+        if (!ws || ws.readyState !== WebSocket.OPEN)
+            continue;
+        server.sendPresenceToDevice(d.id, { type: 'device_removed', deviceId: removedDeviceId });
+    }
+}
+export function broadcastDeviceJoined(server, userId, newDeviceId) {
+    let device;
+    try {
+        device = server.storage.getDevice(newDeviceId);
+    }
+    catch {
+        return;
+    } // Storage may be closed during shutdown
+    if (!device)
+        return;
+    const summary = {
+        id: device.id,
+        name: device.name,
+        role: device.role,
+        kind: device.kind ?? undefined,
+        publicKey: device.publicKey ?? undefined,
+        encryptionKey: device.encryptionKey ?? undefined,
+        online: true,
+        lastSeen: device.lastSeen,
+        createdAt: device.createdAt,
+    };
+    let userDevices;
+    try {
+        userDevices = server.storage.getDevicesByUser(userId);
+    }
+    catch {
+        return;
+    }
+    for (const d of userDevices) {
+        if (d.id === newDeviceId)
+            continue;
+        const ws = server.connections.get(d.id);
+        if (!ws || ws.readyState !== WebSocket.OPEN)
+            continue;
+        server.sendPresenceToDevice(d.id, { type: 'device_joined', device: summary });
+    }
+}
+export function broadcastDeviceLeft(server, userId, leftDeviceId) {
+    let userDevices;
+    try {
+        userDevices = server.storage.getDevicesByUser(userId);
+    }
+    catch {
+        return;
+    } // Storage may be closed during shutdown
+    for (const d of userDevices) {
+        if (d.id === leftDeviceId)
+            continue;
+        const ws = server.connections.get(d.id);
+        if (!ws || ws.readyState !== WebSocket.OPEN)
+            continue;
+        server.sendPresenceToDevice(d.id, { type: 'device_left', deviceId: leftDeviceId });
+    }
+}
+export function broadcastDevicePending(server, userId, pendingDeviceId) {
+    let userDevices;
+    try {
+        userDevices = server.storage.getDevicesByUser(userId);
+    }
+    catch {
+        return;
+    }
+    for (const d of userDevices) {
+        if (d.id === pendingDeviceId)
+            continue;
+        const ws = server.connections.get(d.id);
+        if (!ws || ws.readyState !== WebSocket.OPEN)
+            continue;
+        server.sendPresenceToDevice(d.id, { type: 'device_pending', deviceId: pendingDeviceId });
+    }
+}
+export function getDeviceSummaries(server, userId) {
+    const stored = server.storage.getDevicesByUser(userId);
+    return stored.map(d => ({
+        id: d.id,
+        name: d.name,
+        role: d.role,
+        kind: d.kind ?? undefined,
+        publicKey: d.publicKey ?? undefined,
+        encryptionKey: d.encryptionKey ?? undefined,
+        online: server.connections.has(d.id),
+        lastSeen: d.lastSeen,
+        createdAt: d.createdAt,
+    }));
+}
+//# sourceMappingURL=presence.js.map

package/dist/server/presence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presence.js","sourceRoot":"","sources":["../../src/server/presence.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAEzF,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAI/B,MAAM,UAAU,sBAAsB,CAAC,MAAkB,EAAE,MAAc,EAAE,eAAuB;IAChG,IAAI,WAAW,CAAC;IAChB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO;IAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;YAAE,SAAS;QACtD,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAkB,EAAE,MAAc,EAAE,WAAmB;IAC3F,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO;IAAC,CAAC,CAAC,wCAAwC;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,OAAO,GAAkB;QAC7B,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAkB;QAC/B,IAAI,EAAG,MAAM,CAAC,IAAmB,IAAI,SAAS;QAC9C,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;QACxC,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,SAAS;QAChD,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;IAEF,IAAI,WAAW,CAAC;IAChB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO;IAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,EAAE,KAAK,WAAW;YAAE,SAAS;QACnC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;YAAE,SAAS;QACtD,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAkB,EAAE,MAAc,EAAE,YAAoB;IAC1F,IAAI,WAAW,CAAC;IAChB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO;IAAC,CAAC,CAAC,wCAAwC;IAC5D,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,EAAE,KAAK,YAAY;YAAE,SAAS;QACpC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;YAAE,SAAS;QACtD,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAkB,EAAE,MAAc,EAAE,eAAuB;IAChG,IAAI,WAAW,CAAC;IAChB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO;IAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,EAAE,KAAK,eAAe;YAAE,SAAS;QACvC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;YAAE,SAAS;QACtD,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAkB,EAAE,MAAc;IACnE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtB,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAkB;QAC1B,IAAI,EAAG,CAAC,CAAC,IAAmB,IAAI,SAAS;QACzC,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,SAAS;QACnC,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,SAAS;QAC3C,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,SAAS,EAAE,CAAC,CAAC,SAAS;KACvB,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/server/shared.d.ts

@@ -0,0 +1,106 @@
+/** Shared by HeadServer and its handler modules: per-socket state, options, limits. */
+import { LeaseIssuer } from '../lease-issuer.js';
+import type { AuthProvider } from '../auth.js';
+import type { PushManager } from '../push/index.js';
+import type { AuthBackend } from '../auth-backend.js';
+/** Custom Words has its own channel (`auth_ok.voiceVocabulary` and
+ *  `voice_vocabulary_updated`). Never ship it inside generic preferences: that
+ *  would duplicate it on every auth and broadcast it on every theme change. */
+export declare function publicPreferences(prefs: Record<string, unknown> | undefined): Record<string, unknown> | undefined;
+export interface ClientState {
+    deviceId?: string;
+    userId?: string;
+    authenticated: boolean;
+    ip?: string;
+    isAlive: boolean;
+    authenticatedAt?: number;
+    pendingNonce?: string;
+    /** An `auth` / `auth_response` is awaiting its backend. */
+    authInFlight?: boolean;
+    pendingDeviceId?: string;
+    pendingDeviceInfo?: {
+        encryptionKey?: string;
+    };
+    pendingAuthMethod?: string;
+    /** Replaced by a newer socket of the same device: closing, inert. */
+    evicted?: boolean;
+    /** Closes the socket if it never authenticates (G1). */
+    authTimer?: ReturnType<typeof setTimeout>;
+    /** Timestamp when pong grace period expires (null = no pending ping). */
+    pongOverdueAt: number | null;
+    /** Whether we already broadcast device_pending for this ping cycle. */
+    pendingLivenessBroadcast: boolean;
+    /** Diagnostic: last time we sent a ping to this client (ms epoch). */
+    lastPingSentAt?: number;
+    /** Diagnostic: last time we received a pong from this client (ms epoch). */
+    lastPongRecvAt?: number;
+    /** Last time any frame arrived from this client (ms epoch). */
+    lastInboundAt?: number;
+    /** ws.bufferedAmount when the last ping was queued. */
+    bufferedAtPing?: number;
+    /** Declared at auth: this client's Pulse accepts progress heartbeats. */
+    pulseProgressAck?: boolean;
+}
+export interface HeadServerOptions {
+    authProviders?: Map<string, AuthProvider>;
+    authProvider?: AuthProvider;
+    maxPayload?: number;
+    pairingEnabled?: boolean;
+    pairingTtl?: number;
+    version?: string;
+    pushManager?: PushManager;
+    /** Optional auth backend. If provided, auth is delegated to it instead of using local providers. */
+    authBackend?: AuthBackend;
+    /** This head's region identifier (e.g., 'us', 'china'). Sent to auth backend for region checks. */
+    region?: string;
+    /** Voice-broker lease signer. If absent, request_voice_lease is rejected with 'not_entitled'. */
+    leaseIssuer?: LeaseIssuer;
+    /** Lease (device voice credential) lifetime in seconds. Default 86400 (24h). */
+    voiceLeaseTtlSec?: number;
+    /** The only voice limit: max seconds of audio per user per UTC day. Default 7200 (2h). */
+    voiceDailyQuotaSec?: number;
+    /**
+     * Public WSS URL of the voice broker for this region (e.g.
+     * `wss://cn.stt.kraki.chat/voice`). When set, head advertises a
+     * `VoiceCapability` inside `auth_ok.voice` so arm can render the mic UI.
+     * When unset, the field is omitted entirely — arm hides the mic UI.
+     *
+     * Must be set together with `leaseIssuer`: cli-side interlock refuses to
+     * start in either-without-the-other configurations because:
+     *   - Advertising a broker URL but having no issuer would mean clients
+     *     show the mic UI then get `not_entitled` on every press.
+     *   - Having an issuer but no advertised URL means clients have no way
+     *     to actually use the leases they're being issued.
+     */
+    voiceBrokerUrl?: string;
+    /**
+     * Close sockets that have not authenticated within this time (ms).
+     * Default 15s. A socket that asked for `auth_info` (an app on its login
+     * screen, waiting for the user to finish signing in) gets
+     * `loginScreenAuthTimeoutMs` instead (default 10 min).
+     */
+    authTimeoutMs?: number;
+    loginScreenAuthTimeoutMs?: number;
+}
+export declare const DEFAULT_VOICE_LEASE_TTL_SEC = 86400;
+export declare const DEFAULT_VOICE_DAILY_QUOTA_SEC = 7200;
+export declare const MIN_VOICE_LEASE_GRANT_SEC = 1;
+export declare const VALID_VOICE_RESOURCES: Set<"voice/doubao">;
+export declare const DEFAULT_MAX_PAYLOAD: number;
+export declare const DEFAULT_AUTH_TIMEOUT_MS = 15000;
+export declare const DEFAULT_LOGIN_SCREEN_AUTH_TIMEOUT_MS: number;
+export declare const MAX_MULTICAST_TARGETS = 64;
+/** Send-buffer ceiling per socket before a stalled client is disconnected. */
+export declare const MAX_WS_BUFFERED_BYTES: number;
+/** How often the liveness sweep runs (ms). Faster than the 30s ping timer so
+ *  device_pending detection latency tracks the recipient's ping cadence
+ *  (~10s), not the slower liveness check cadence. */
+export declare const LIVENESS_SWEEP_INTERVAL_MS = 2500;
+/** Grace period after ping before broadcasting device_pending (ms).
+ *  Overridable via PONG_GRACE_MS environment variable. */
+export declare const PONG_GRACE_MS: number;
+export declare function isValidMessage(msg: unknown): msg is {
+    type: string;
+    [key: string]: unknown;
+};
+export declare function isValidAuth(msg: Record<string, unknown>): boolean;

package/dist/server/shared.js

@@ -0,0 +1,49 @@
+/** Shared by HeadServer and its handler modules: per-socket state, options, limits. */
+/** Custom Words has its own channel (`auth_ok.voiceVocabulary` and
+ *  `voice_vocabulary_updated`). Never ship it inside generic preferences: that
+ *  would duplicate it on every auth and broadcast it on every theme change. */
+export function publicPreferences(prefs) {
+    if (!prefs || !('voiceVocabulary' in prefs))
+        return prefs;
+    const { voiceVocabulary: _omitted, ...rest } = prefs;
+    return rest;
+}
+export const DEFAULT_VOICE_LEASE_TTL_SEC = 86_400;
+export const DEFAULT_VOICE_DAILY_QUOTA_SEC = 7_200;
+export const MIN_VOICE_LEASE_GRANT_SEC = 1;
+export const VALID_VOICE_RESOURCES = new Set(['voice/doubao']);
+export const DEFAULT_MAX_PAYLOAD = 10 * 1024 * 1024;
+export const DEFAULT_AUTH_TIMEOUT_MS = 15_000;
+export const DEFAULT_LOGIN_SCREEN_AUTH_TIMEOUT_MS = 10 * 60_000;
+export const MAX_MULTICAST_TARGETS = 64;
+/** Send-buffer ceiling per socket before a stalled client is disconnected. */
+export const MAX_WS_BUFFERED_BYTES = 32 * 1024 * 1024;
+/** How often the liveness sweep runs (ms). Faster than the 30s ping timer so
+ *  device_pending detection latency tracks the recipient's ping cadence
+ *  (~10s), not the slower liveness check cadence. */
+export const LIVENESS_SWEEP_INTERVAL_MS = 2_500;
+/** Grace period after ping before broadcasting device_pending (ms).
+ *  Overridable via PONG_GRACE_MS environment variable. */
+export const PONG_GRACE_MS = Math.max(1_000, parseInt(process.env.PONG_GRACE_MS ?? '8000', 10) || 8_000);
+export function isValidMessage(msg) {
+    if (typeof msg !== 'object' || msg === null)
+        return false;
+    const obj = msg;
+    return typeof obj.type === 'string' && obj.type.length > 0;
+}
+export function isValidAuth(msg) {
+    if (!msg.device || typeof msg.device !== 'object')
+        return false;
+    const dev = msg.device;
+    if (typeof dev.name !== 'string' || typeof dev.role !== 'string')
+        return false;
+    if (dev.role !== 'tentacle' && dev.role !== 'app')
+        return false;
+    if (!msg.auth || typeof msg.auth !== 'object')
+        return false;
+    const auth = msg.auth;
+    if (typeof auth.method !== 'string')
+        return false;
+    return true;
+}
+//# sourceMappingURL=shared.js.map

package/dist/server/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/server/shared.ts"],"names":[],"mappings":"AAAA,uFAAuF;AAQvF;;+EAE+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,KAA0C;IAC1E,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,iBAAiB,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AA+ED,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAClD,MAAM,CAAC,MAAM,6BAA6B,GAAG,KAAK,CAAC;AACnD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAgB,CAAC,cAAc,CAAC,CAAC,CAAC;AAE9E,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAC9C,MAAM,CAAC,MAAM,oCAAoC,GAAG,EAAE,GAAG,MAAM,CAAC;AAChE,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD;;qDAEqD;AACrD,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAChD;0DAC0D;AAC1D,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,MAAM,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;AAEzG,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,OAAO,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAA4B;IACtD,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,GAAG,GAAG,GAAG,CAAC,MAAiC,CAAC;IAClD,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/E,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,IAA+B,CAAC;IACjD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/server/voice-lease.d.ts

@@ -0,0 +1,5 @@
+/** Voice leases: short-lived credentials for the voice service, within the daily quota. */
+import { WebSocket } from 'ws';
+import type { HeadServer } from '../server.js';
+import { type ClientState } from './shared.js';
+export declare function handleRequestVoiceLease(server: HeadServer, ws: WebSocket, state: ClientState, msg: Record<string, unknown>): void;