@krischoichoi/channel-control 0.6.0

package/lib/access/validation.js

@@ -0,0 +1,89 @@
+/**
+ * Access Policy validation — the entry constrains what a policy may express
+ * against a channel's declared access descriptor.
+ *
+ * Validation is two-layered:
+ * 1. The shared `channelAccessPolicySchema` (version pinning, canonical id
+ *    trimming, strict unknown-key rejection, type checks).
+ * 2. Descriptor-relative rules (owner-only needs an ownerId, mentions/groups/
+ *    DM capability gating).
+ *
+ * Normalization performed on a validated policy: trim canonical ids and remove
+ * EXACT duplicates in every `allowFrom` list. Deliberately NO lowercase, no
+ * username resolution, no fuzzy matching — ids are opaque.
+ */
+import { channelAccessPolicySchema, } from '@krischoichoi/channel-core';
+import { materializeAccessPolicy } from './materialize.js';
+/** Remove exact duplicated strings while preserving first-seen order. */
+function dedupeExact(values) {
+    const seen = new Set();
+    const out = [];
+    for (const value of values) {
+        if (seen.has(value))
+            continue;
+        seen.add(value);
+        out.push(value);
+    }
+    return out;
+}
+/**
+ * Validate a candidate policy against a channel descriptor and, when valid,
+ * return a normalized copy (ids trimmed by the schema, `allowFrom` de-duplicated).
+ */
+export function validateAccessPolicy(input, descriptor) {
+    const parsed = channelAccessPolicySchema.safeParse(input);
+    if (!parsed.success) {
+        return { ok: false, error: `invalid policy: ${parsed.error.issues[0]?.message ?? 'schema mismatch'}` };
+    }
+    // From here on we work on the canonical, schema-validated policy.
+    const policy = parsed.data;
+    if (policy.preset === 'owner-only' && (!policy.ownerId || policy.ownerId === '')) {
+        return { ok: false, error: 'owner-only preset requires an ownerId' };
+    }
+    // requireMention=true is only expressible when the channel can detect mentions.
+    const groupRules = [
+        ...Object.entries(policy.groups),
+        ...(policy.defaultGroupRule
+            ? [['*', policy.defaultGroupRule]]
+            : []),
+    ];
+    for (const [groupId, rule] of groupRules) {
+        if (rule.requireMention && descriptor.mentions !== true) {
+            return {
+                ok: false,
+                error: `group '${groupId}' requires mention but channel does not support mentions`,
+            };
+        }
+    }
+    // A channel without groups cannot carry any group configuration.
+    const hasGroupConfig = policy.groupPolicy !== 'disabled' || Object.keys(policy.groups).length > 0;
+    if (hasGroupConfig && descriptor.groups !== true) {
+        return { ok: false, error: 'policy configures groups but channel does not support groups' };
+    }
+    // Channel with direct messages disabled must keep DM fully disabled.
+    if (descriptor.directMessages !== true && policy.dmPolicy !== 'disabled') {
+        return { ok: false, error: 'policy enables direct messages but channel does not support them' };
+    }
+    // Channel without groups must keep group policy disabled.
+    if (descriptor.groups !== true && policy.groupPolicy !== 'disabled') {
+        return { ok: false, error: 'policy enables groups but channel does not support them' };
+    }
+    // ---------------------------------------------------------------------------
+    // Normalization (trim + exact dedupe). The schema already trims ids; here we
+    // additionally de-duplicate allowFrom lists. No lowercase / fuzzy matching.
+    // ---------------------------------------------------------------------------
+    const groups = {};
+    for (const [groupId, rule] of Object.entries(policy.groups)) {
+        groups[groupId] = { ...rule, allowFrom: dedupeExact(rule.allowFrom) };
+    }
+    const normalized = {
+        ...policy,
+        allowFrom: dedupeExact(policy.allowFrom),
+        groups,
+        ...(policy.defaultGroupRule
+            ? { defaultGroupRule: { ...policy.defaultGroupRule, allowFrom: dedupeExact(policy.defaultGroupRule.allowFrom) } }
+            : {}),
+    };
+    return { ok: true, policy: materializeAccessPolicy(normalized) };
+}
+//# sourceMappingURL=validation.js.map

package/lib/access/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/access/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,yBAAyB,GAE1B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAM3D,yEAAyE;AACzE,SAAS,WAAW,CAAC,MAAgB;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA0B,EAC1B,UAAmC;IAEnC,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,iBAAiB,EAAE,EAAE,CAAC;IACzG,CAAC;IACD,kEAAkE;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IAE3B,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC,EAAE,CAAC;QACjF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;IACvE,CAAC;IAED,gFAAgF;IAChF,MAAM,UAAU,GAAG;QACjB,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;QAChC,GAAG,CAAC,MAAM,CAAC,gBAAgB;YACzB,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAU,CAAC;YAC3C,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,cAAc,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACxD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,UAAU,OAAO,0DAA0D;aACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,MAAM,cAAc,GAClB,MAAM,CAAC,WAAW,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7E,IAAI,cAAc,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACjD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8DAA8D,EAAE,CAAC;IAC9F,CAAC;IAED,qEAAqE;IACrE,IAAI,UAAU,CAAC,cAAc,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kEAAkE,EAAE,CAAC;IAClG,CAAC;IAED,0DAA0D;IAC1D,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QACpE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yDAAyD,EAAE,CAAC;IACzF,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,MAAM,GAAkC,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;IACxE,CAAC;IAED,MAAM,UAAU,GAAwB;QACtC,GAAG,MAAM;QACT,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC;QACxC,MAAM;QACN,GAAG,CAAC,MAAM,CAAC,gBAAgB;YACzB,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,GAAG,MAAM,CAAC,gBAAgB,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,EAAE;YACjH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;AACnE,CAAC"}

package/lib/auth/sanitizer.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Public-DTO sanitizer (doc §18, §59).
+ *
+ * Converts host-only auth session/status objects into browser-facing public
+ * DTOs. The sanitizer is the ONLY legitimate path to a [PublicAuthSession] /
+ * [PublicAuthStatus]: it strips every field that must never reach the browser
+ * (providerState, challenge, deviceCode, tokens, any provider payload).
+ * Security tests assert the absence of these fields after sanitization.
+ *
+ * The manager stores sessions as a [SessionSnapshot] — an [InternalAuthSession]
+ * plus the host-tracked current phase/state/qr/prompt. The sanitizer accepts
+ * that snapshot and forwards only the declared public fields.
+ */
+import type { AuthMethod, AuthPhase, AuthProviderSession, AuthState, InternalAuthSession, PublicAuthPrompt, PublicAuthSession, PublicAuthStatus, PublicQrPayload } from '../types.js';
+/** Host-view snapshot the manager keeps for one session. */
+export interface SessionSnapshot extends InternalAuthSession {
+    method: AuthMethod;
+    state: AuthState;
+    phase: AuthPhase;
+    qr?: PublicQrPayload;
+    prompt?: PublicAuthPrompt;
+    /** The full provider session returned by beginAuth (host-only). */
+    providerSession: AuthProviderSession;
+}
+/** Deep-copy a QR payload so mutations cannot escape the host boundary. */
+export declare function toPublicQr(qr: PublicQrPayload | undefined): PublicQrPayload | undefined;
+export declare function toPublicPrompt(prompt: PublicAuthPrompt | undefined): PublicAuthPrompt | undefined;
+/**
+ * Field-by-field copy into the public session shape. Nothing beyond the
+ * declared public fields is forwarded, so a host mutation cannot leak.
+ */
+export declare function toPublicSession(session: SessionSnapshot): PublicAuthSession;
+/** Sanitize a poll/status result, dropping any host-only fields. */
+export declare function toPublicStatus(status: PublicAuthStatus): PublicAuthStatus;
+//# sourceMappingURL=sanitizer.d.ts.map

package/lib/auth/sanitizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.d.ts","sourceRoot":"","sources":["../../src/auth/sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EACV,UAAU,EACV,SAAS,EACT,mBAAmB,EACnB,SAAS,EACT,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EAChB,MAAM,aAAa,CAAC;AAErB,4DAA4D;AAC5D,MAAM,WAAW,eAAgB,SAAQ,mBAAmB;IAC1D,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,EAAE,SAAS,CAAC;IACjB,EAAE,CAAC,EAAE,eAAe,CAAC;IACrB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,mEAAmE;IACnE,eAAe,EAAE,mBAAmB,CAAC;CACtC;AAED,2EAA2E;AAC3E,wBAAgB,UAAU,CAAC,EAAE,EAAE,eAAe,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAGvF;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,gBAAgB,GAAG,SAAS,GACnC,gBAAgB,GAAG,SAAS,CAE9B;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,GAAG,iBAAiB,CAmB3E;AAED,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,CAUzE"}

package/lib/auth/sanitizer.js

@@ -0,0 +1,52 @@
+/** Deep-copy a QR payload so mutations cannot escape the host boundary. */
+export function toPublicQr(qr) {
+    if (!qr)
+        return undefined;
+    return qr.kind && qr.value ? { ...qr } : undefined;
+}
+export function toPublicPrompt(prompt) {
+    return prompt ? { ...prompt } : undefined;
+}
+/**
+ * Field-by-field copy into the public session shape. Nothing beyond the
+ * declared public fields is forwarded, so a host mutation cannot leak.
+ */
+export function toPublicSession(session) {
+    const publicSession = {
+        id: session.id,
+        channelId: session.channelId,
+        state: session.state,
+        phase: session.phase,
+    };
+    const qr = toPublicQr(session.qr);
+    if (qr)
+        publicSession.qr = qr;
+    if (session.expiresAt !== undefined)
+        publicSession.expiresAt = session.expiresAt;
+    const prompt = toPublicPrompt(session.prompt);
+    if (prompt)
+        publicSession.prompt = prompt;
+    // The provider poll interval is safe to expose (doc §15): it is neither a
+    // secret nor a credential — it just lets the browser space client polls at
+    // the provider's declared throttle. Only forwarded when actually declared.
+    if (typeof session.pollingIntervalMs === 'number' && session.pollingIntervalMs > 0) {
+        publicSession.pollingIntervalMs = session.pollingIntervalMs;
+    }
+    return publicSession;
+}
+/** Sanitize a poll/status result, dropping any host-only fields. */
+export function toPublicStatus(status) {
+    const result = {
+        state: status.state,
+        phase: status.phase,
+    };
+    if (status.expiresAt !== undefined)
+        result.expiresAt = status.expiresAt;
+    if (status.detail !== undefined)
+        result.detail = status.detail;
+    const prompt = toPublicPrompt(status.prompt);
+    if (prompt)
+        result.prompt = prompt;
+    return result;
+}
+//# sourceMappingURL=sanitizer.js.map

package/lib/auth/sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.js","sourceRoot":"","sources":["../../src/auth/sanitizer.ts"],"names":[],"mappings":"AAoCA,2EAA2E;AAC3E,MAAM,UAAU,UAAU,CAAC,EAA+B;IACxD,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1B,OAAO,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAAoC;IAEpC,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAAwB;IACtD,MAAM,aAAa,GAAsB;QACvC,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC;IACF,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClC,IAAI,EAAE;QAAE,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC;IAC9B,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,aAAa,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACjF,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,MAAM;QAAE,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC;IAC1C,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,IAAI,OAAO,OAAO,CAAC,iBAAiB,KAAK,QAAQ,IAAI,OAAO,CAAC,iBAAiB,GAAG,CAAC,EAAE,CAAC;QACnF,aAAa,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAC9D,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,MAAwB;IACrD,MAAM,MAAM,GAAqB;QAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;IACF,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACxE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/D,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,MAAM;QAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/lib/auth/session-manager.d.ts

@@ -0,0 +1,38 @@
+import { ChannelDefinitionRegistry } from '../definitions/registry.js';
+import type { AuthBeginInput, AuthInput, PublicAuthSession, PublicAuthStatus } from '../types.js';
+/** Interactive QR/device authorization is deliberately short-lived. */
+export declare const MAX_AUTH_SESSION_TTL_MS: number;
+export interface AuthSessionManagerOptions {
+    registry: ChannelDefinitionRegistry;
+    /** Injectable clock (ms since epoch) for tests. Defaults to Date.now. */
+    now?: () => number;
+}
+export declare class AuthSessionManager {
+    private readonly sessions;
+    /** Tombstones for cancelled session ids so a later poll/submit rejects clearly. */
+    private readonly cancelled;
+    private readonly registry;
+    private readonly now;
+    constructor(options: AuthSessionManagerOptions);
+    create(channelId: string, input: AuthBeginInput): Promise<PublicAuthSession>;
+    poll(sessionId: string): Promise<PublicAuthStatus>;
+    submit(sessionId: string, input: AuthInput): Promise<PublicAuthStatus>;
+    cancel(sessionId: string): Promise<void>;
+    /** Abort + delete every session past its TTL; returns how many expired. */
+    expireAll(): number;
+    /** Sweep expired sessions and prune cancelled tombstones. */
+    cleanup(): number;
+    /** Internal list of live session ids (test/diagnostics). */
+    listIds(): string[];
+    get size(): number;
+    private key;
+    private findByKey;
+    private accountKey;
+    private buildSnapshot;
+    /** Call the definition's pollAuth, update stored status, return sanitized. */
+    private pollProvider;
+    private lastKnownStatus;
+    private cancelById;
+    private expire;
+}
+//# sourceMappingURL=session-manager.d.ts.map

package/lib/auth/session-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../../src/auth/session-manager.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAEvE,OAAO,KAAK,EACV,cAAc,EACd,SAAS,EAIT,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,aAAa,CAAC;AAOrB,uEAAuE;AACvE,eAAO,MAAM,uBAAuB,QAAgB,CAAC;AAErD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,yBAAyB,CAAC;IACpC,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAID,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsC;IAC/D,mFAAmF;IACnF,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IACrD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEvB,OAAO,EAAE,yBAAyB;IAOxC,MAAM,CACV,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,iBAAiB,CAAC;IA6BvB,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkClD,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkBtE,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAY9C,2EAA2E;IAC3E,SAAS,IAAI,MAAM;IAWnB,6DAA6D;IAC7D,OAAO,IAAI,MAAM;IAIjB,4DAA4D;IAC5D,OAAO,IAAI,MAAM,EAAE;IAInB,IAAI,IAAI,IAAI,MAAM,CAEjB;IAID,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,SAAS;IAOjB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,aAAa;IA8CrB,8EAA8E;YAChE,YAAY;IAgB1B,OAAO,CAAC,eAAe;YAST,UAAU;IAWxB,OAAO,CAAC,MAAM;CAMf"}

package/lib/auth/session-manager.js

@@ -0,0 +1,219 @@
+/**
+ * [AuthSessionManager] — host-side lifecycle for interactive authorization
+ * (doc §19–§20, §53 Task 7).
+ *
+ * Responsibilities:
+ * - one active session per (channelId, accountId, method); a new session for
+ *   the same key cancels (aborts + deletes) the previous pending one
+ * - browser-safe session ids are [crypto.randomUUID()], never derived from
+ *   channelId/timestamp/deviceCode
+ * - host-side POLL THROTTLE: the provider is only hit when
+ *   now >= nextPollAt; between intervals the last known status is returned
+ *   without touching the provider (the browser may poll every second)
+ * - terminal states (authenticated/expired/failed) short-circuit provider
+ *   polls and return the cached status
+ * - TTL expiry sweeps + a lightweight injectable clock for tests
+ * - every public result is passed through the sanitizer
+ */
+import { randomUUID } from 'node:crypto';
+import { ChannelDefinitionRegistry } from '../definitions/registry.js';
+import { ControlError } from '../errors.js';
+import { toPublicSession, toPublicStatus, } from './sanitizer.js';
+/** Interactive QR/device authorization is deliberately short-lived. */
+export const MAX_AUTH_SESSION_TTL_MS = 3 * 60 * 1000;
+const TERMINAL_STATES = ['authenticated', 'expired', 'failed'];
+export class AuthSessionManager {
+    sessions = new Map();
+    /** Tombstones for cancelled session ids so a later poll/submit rejects clearly. */
+    cancelled = new Set();
+    registry;
+    now;
+    constructor(options) {
+        this.registry = options.registry;
+        this.now = options.now ?? (() => Date.now());
+    }
+    // --- create ---------------------------------------------------------------
+    async create(channelId, input) {
+        const definition = this.registry.require(channelId);
+        if (!definition.beginAuth) {
+            throw new ControlError('AUTH_NOT_SUPPORTED', `channel '${channelId}' does not support interactive authorization`);
+        }
+        const key = this.key(channelId, input);
+        // One active session per key: cancel any existing pending session first.
+        const existing = this.findByKey(key);
+        if (existing) {
+            await this.cancelById(existing.id);
+        }
+        const providerSession = await definition.beginAuth(input);
+        const snapshot = this.buildSnapshot(channelId, input.accountId ?? '', key, providerSession);
+        this.sessions.set(snapshot.id, snapshot);
+        return toPublicSession(snapshot);
+    }
+    // --- poll -----------------------------------------------------------------
+    async poll(sessionId) {
+        if (this.cancelled.has(sessionId)) {
+            throw new ControlError('AUTH_SESSION_CANCELLED');
+        }
+        const session = this.sessions.get(sessionId);
+        if (!session) {
+            throw new ControlError('AUTH_SESSION_NOT_FOUND');
+        }
+        // Terminal states: return the cached status without ever hitting provider.
+        if (TERMINAL_STATES.includes(session.state)) {
+            return toPublicStatus({
+                state: session.state,
+                phase: session.phase,
+                expiresAt: session.expiresAt,
+            });
+        }
+        // Expired by TTL: mark + delete, report 'expired'.
+        if (this.now() >= session.expiresAt) {
+            this.expire(session);
+            return toPublicStatus({ state: 'expired', phase: 'expired' });
+        }
+        // Poll throttle: within the provider interval, return the last known status.
+        if (this.now() < session.nextPollAt) {
+            return this.lastKnownStatus(session);
+        }
+        return this.pollProvider(session);
+    }
+    // --- submit -----------------------------------------------------------------
+    async submit(sessionId, input) {
+        if (this.cancelled.has(sessionId)) {
+            throw new ControlError('AUTH_SESSION_CANCELLED');
+        }
+        const session = this.sessions.get(sessionId);
+        if (!session)
+            throw new ControlError('AUTH_SESSION_NOT_FOUND');
+        const definition = this.registry.require(session.channelId);
+        if (!definition.submitAuthInput) {
+            throw new ControlError('AUTH_NOT_SUPPORTED');
+        }
+        await definition.submitAuthInput(session.providerSession, input);
+        // Force a fresh provider poll to reflect the submitted input.
+        return this.pollProvider(session);
+    }
+    // --- cancel ----------------------------------------------------------------
+    async cancel(sessionId) {
+        if (this.cancelled.has(sessionId))
+            return;
+        const session = this.sessions.get(sessionId);
+        if (!session) {
+            // Idempotent: unknown ids are treated as already gone.
+            return;
+        }
+        await this.cancelById(session.id);
+    }
+    // --- expiry / cleanup --------------------------------------------------------
+    /** Abort + delete every session past its TTL; returns how many expired. */
+    expireAll() {
+        let count = 0;
+        for (const session of [...this.sessions.values()]) {
+            if (this.now() >= session.expiresAt) {
+                this.expire(session);
+                count += 1;
+            }
+        }
+        return count;
+    }
+    /** Sweep expired sessions and prune cancelled tombstones. */
+    cleanup() {
+        return this.expireAll();
+    }
+    /** Internal list of live session ids (test/diagnostics). */
+    listIds() {
+        return [...this.sessions.keys()];
+    }
+    get size() {
+        return this.sessions.size;
+    }
+    // --- internals ----------------------------------------------------------------
+    key(channelId, input) {
+        return `${channelId}:${input.accountId ?? ''}:${input.method}`;
+    }
+    findByKey(key) {
+        for (const session of this.sessions.values()) {
+            if (this.accountKey(session) === key)
+                return session;
+        }
+        return undefined;
+    }
+    accountKey(session) {
+        return `${session.channelId}:${session.accountId}:${session.method}`;
+    }
+    buildSnapshot(channelId, accountId, key, providerSession) {
+        const now = this.now();
+        const expiresAt = Math.min(providerSession.expiresAt ?? now + MAX_AUTH_SESSION_TTL_MS, now + MAX_AUTH_SESSION_TTL_MS);
+        const scopedQr = providerSession.qr
+            ? { ...providerSession.qr, expiresAt: Math.min(providerSession.qr.expiresAt ?? expiresAt, expiresAt) }
+            : undefined;
+        const scopedProviderSession = {
+            ...providerSession,
+            expiresAt,
+            qr: scopedQr,
+        };
+        const interval = scopedProviderSession.pollingIntervalMs;
+        const initialPhase = scopedProviderSession.qr || scopedProviderSession.prompt?.kind === 'open-browser'
+            ? 'waiting-scan'
+            : 'preparing';
+        const snapshot = {
+            id: randomUUID(),
+            channelId,
+            accountId,
+            method: key.split(':')[2] ?? 'qr',
+            provider: scopedProviderSession.provider,
+            createdAt: now,
+            expiresAt,
+            pollingIntervalMs: interval,
+            nextPollAt: now + interval,
+            deviceCode: scopedProviderSession.deviceCode,
+            abortController: new AbortController(),
+            providerState: scopedProviderSession.providerState,
+            qr: scopedProviderSession.qr,
+            prompt: scopedProviderSession.prompt,
+            state: 'pending',
+            phase: initialPhase,
+            providerSession: scopedProviderSession,
+        };
+        return snapshot;
+    }
+    /** Call the definition's pollAuth, update stored status, return sanitized. */
+    async pollProvider(session) {
+        const definition = this.registry.require(session.channelId);
+        if (!definition.pollAuth) {
+            throw new ControlError('AUTH_NOT_SUPPORTED', `channel '${session.channelId}' has no pollAuth to drive authorize flow`);
+        }
+        const status = await definition.pollAuth(session.providerSession);
+        session.nextPollAt = this.now() + session.pollingIntervalMs;
+        session.state = status.state;
+        session.phase = status.phase;
+        if (status.prompt)
+            session.prompt = status.prompt;
+        return toPublicStatus({ ...status, expiresAt: session.expiresAt });
+    }
+    lastKnownStatus(session) {
+        return toPublicStatus({
+            state: session.state,
+            phase: session.phase,
+            expiresAt: session.expiresAt,
+            prompt: session.prompt,
+        });
+    }
+    async cancelById(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session) {
+            this.cancelled.add(sessionId);
+            return;
+        }
+        session.abortController.abort();
+        this.sessions.delete(sessionId);
+        this.cancelled.add(sessionId);
+    }
+    expire(session) {
+        session.abortController.abort();
+        session.state = 'expired';
+        session.phase = 'expired';
+        this.sessions.delete(session.id);
+    }
+}
+//# sourceMappingURL=session-manager.js.map

package/lib/auth/session-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.js","sourceRoot":"","sources":["../../src/auth/session-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAU5C,OAAO,EACL,eAAe,EACf,cAAc,GAEf,MAAM,gBAAgB,CAAC;AAExB,uEAAuE;AACvE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAQrD,MAAM,eAAe,GAAyB,CAAC,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAErF,MAAM,OAAO,kBAAkB;IACZ,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC/D,mFAAmF;IAClE,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,QAAQ,CAA4B;IACpC,GAAG,CAAe;IAEnC,YAAY,OAAkC;QAC5C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,6EAA6E;IAE7E,KAAK,CAAC,MAAM,CACV,SAAiB,EACjB,KAAqB;QAErB,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,YAAY,CACpB,oBAAoB,EACpB,YAAY,SAAS,8CAA8C,CACpE,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACvC,yEAAyE;QACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CACjC,SAAS,EACT,KAAK,CAAC,SAAS,IAAI,EAAE,EACrB,GAAG,EACH,eAAe,CAChB,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACzC,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,6EAA6E;IAE7E,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAC;QACnD,CAAC;QAED,2EAA2E;QAC3E,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,cAAc,CAAC;gBACpB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,mDAAmD;QACnD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,6EAA6E;QAC7E,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,+EAA+E;IAE/E,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,KAAgB;QAC9C,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAC;QAE/D,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC;YAChC,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACjE,8DAA8D;QAC9D,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,8EAA8E;IAE9E,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,uDAAuD;YACvD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,gFAAgF;IAEhF,2EAA2E;IAC3E,SAAS;QACP,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACpC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACrB,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6DAA6D;IAC7D,OAAO;QACL,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1B,CAAC;IAED,4DAA4D;IAC5D,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,iFAAiF;IAEzE,GAAG,CAAC,SAAiB,EAAE,KAAqB;QAClD,OAAO,GAAG,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;IACjE,CAAC;IAEO,SAAS,CAAC,GAAW;QAC3B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,GAAG;gBAAE,OAAO,OAAO,CAAC;QACvD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,UAAU,CAAC,OAAwB;QACzC,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IACvE,CAAC;IAEO,aAAa,CACnB,SAAiB,EACjB,SAAiB,EACjB,GAAW,EACX,eAAoC;QAEpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,eAAe,CAAC,SAAS,IAAI,GAAG,GAAG,uBAAuB,EAC1D,GAAG,GAAG,uBAAuB,CAC9B,CAAC;QACF,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE;YACjC,CAAC,CAAC,EAAE,GAAG,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,SAAS,IAAI,SAAS,EAAE,SAAS,CAAC,EAAE;YACtG,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,qBAAqB,GAAwB;YACjD,GAAG,eAAe;YAClB,SAAS;YACT,EAAE,EAAE,QAAQ;SACb,CAAC;QACF,MAAM,QAAQ,GAAG,qBAAqB,CAAC,iBAAiB,CAAC;QACzD,MAAM,YAAY,GAChB,qBAAqB,CAAC,EAAE,IAAI,qBAAqB,CAAC,MAAM,EAAE,IAAI,KAAK,cAAc;YAC/E,CAAC,CAAE,cAAwB;YAC3B,CAAC,CAAE,WAAqB,CAAC;QAC7B,MAAM,QAAQ,GAAoB;YAChC,EAAE,EAAE,UAAU,EAAE;YAChB,SAAS;YACT,SAAS;YACT,MAAM,EAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAgB,IAAI,IAAI;YACjD,QAAQ,EAAE,qBAAqB,CAAC,QAAQ;YACxC,SAAS,EAAE,GAAG;YACd,SAAS;YACT,iBAAiB,EAAE,QAAQ;YAC3B,UAAU,EAAE,GAAG,GAAG,QAAQ;YAC1B,UAAU,EAAE,qBAAqB,CAAC,UAAU;YAC5C,eAAe,EAAE,IAAI,eAAe,EAAE;YACtC,aAAa,EAAE,qBAAqB,CAAC,aAAa;YAClD,EAAE,EAAE,qBAAqB,CAAC,EAAE;YAC5B,MAAM,EAAE,qBAAqB,CAAC,MAAM;YACpC,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,YAAY;YACnB,eAAe,EAAE,qBAAqB;SACvC,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,8EAA8E;IACtE,KAAK,CAAC,YAAY,CAAC,OAAwB;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,YAAY,CACpB,oBAAoB,EACpB,YAAY,OAAO,CAAC,SAAS,2CAA2C,CACzE,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAClE,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;QAC5D,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC7B,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAClD,OAAO,cAAc,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACrE,CAAC;IAEO,eAAe,CAAC,OAAwB;QAC9C,OAAO,cAAc,CAAC;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,SAAiB;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAEO,MAAM,CAAC,OAAwB;QACrC,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAChC,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC;QAC1B,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;CACF"}

package/lib/config.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Schemastery configuration for the channel-control plugin.
+ *
+ * All deployment-tunable parameters live here (no hardcoded deployment
+ * constants). The update check is prompt-only; disabling it only removes the
+ * hint surfaces, never any channel functionality.
+ */
+import Schema from '@deepseek-ai/schemastery';
+/** Runtime bundle update check (prompt-only; never installs anything). */
+export interface UpdateCheckConfig {
+    /** Whether the periodic npm dist-tag check runs. */
+    enabled: boolean;
+    /** Minimum hours between two registry checks (cache TTL). */
+    intervalHours: number;
+}
+export interface Config {
+    updateCheck: UpdateCheckConfig;
+}
+export declare const Config: Schema<Config>;
+//# sourceMappingURL=config.d.ts.map

package/lib/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,MAAM,MAAM,0BAA0B,CAAC;AAE9C,0EAA0E;AAC1E,MAAM,WAAW,iBAAiB;IAChC,oDAAoD;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,6DAA6D;IAC7D,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,MAAM;IACrB,WAAW,EAAE,iBAAiB,CAAC;CAChC;AAED,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,CAKhC,CAAC"}

package/lib/config.js

@@ -0,0 +1,15 @@
+/**
+ * Schemastery configuration for the channel-control plugin.
+ *
+ * All deployment-tunable parameters live here (no hardcoded deployment
+ * constants). The update check is prompt-only; disabling it only removes the
+ * hint surfaces, never any channel functionality.
+ */
+import Schema from '@deepseek-ai/schemastery';
+export const Config = Schema.object({
+    updateCheck: Schema.object({
+        enabled: Schema.boolean().default(true),
+        intervalHours: Schema.natural().default(24),
+    }).default({ enabled: true, intervalHours: 24 }),
+});
+//# sourceMappingURL=config.js.map

package/lib/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,MAAM,MAAM,0BAA0B,CAAC;AAc9C,MAAM,CAAC,MAAM,MAAM,GAAmB,MAAM,CAAC,MAAM,CAAC;IAClD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACvC,aAAa,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;KAC5C,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;CACjD,CAAC,CAAC"}

package/lib/credentials/manager.d.ts

@@ -0,0 +1,44 @@
+/**
+ * [CredentialManager] — the single place channel-control touches the injected
+ * credential seam (doc §13, §31, §52).
+ *
+ * The seam is typed structurally (locally) and is never directly imported from
+ * an implementation package: the concrete seam is injected at construction,
+ * exactly like channel-core wires 'ctx.channels'. The manager is deliberately
+ * thin. [CredentialManager.set] never returns the written value — callers only
+ * learn whether the credential is configured and writable.
+ */
+export interface CredentialSeam {
+    resolve(ref: string): Promise<{
+        value: string;
+        source: string;
+    } | undefined>;
+    describe(ref: string): Promise<{
+        configured: boolean;
+        source?: string;
+        writable: boolean;
+    }>;
+    set(ref: string, value: string): Promise<void>;
+    unset(ref: string): Promise<void>;
+}
+export interface CredentialDescribe {
+    configured: boolean;
+    source?: string;
+    writable: boolean;
+}
+export declare class CredentialManager {
+    private readonly seam;
+    constructor(seam: CredentialSeam);
+    resolve(ref: string): Promise<{
+        value: string;
+        source: string;
+    } | undefined>;
+    describe(ref: string): Promise<CredentialDescribe>;
+    /**
+     * Write a credential. Returns { configured, writable } metadata and NEVER
+     * echoes the value back.
+     */
+    set(ref: string, value: string): Promise<CredentialDescribe>;
+    unset(ref: string): Promise<void>;
+}
+//# sourceMappingURL=manager.d.ts.map

package/lib/credentials/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/credentials/manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IAC7E,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC5F,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,iBAAiB;IAChB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,cAAc;IAE3C,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAI5E,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIxD;;;OAGG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAK5D,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGxC"}

package/lib/credentials/manager.js

@@ -0,0 +1,24 @@
+export class CredentialManager {
+    seam;
+    constructor(seam) {
+        this.seam = seam;
+    }
+    async resolve(ref) {
+        return this.seam.resolve(ref);
+    }
+    async describe(ref) {
+        return this.seam.describe(ref);
+    }
+    /**
+     * Write a credential. Returns { configured, writable } metadata and NEVER
+     * echoes the value back.
+     */
+    async set(ref, value) {
+        await this.seam.set(ref, value);
+        return this.seam.describe(ref);
+    }
+    async unset(ref) {
+        await this.seam.unset(ref);
+    }
+}
+//# sourceMappingURL=manager.js.map

package/lib/credentials/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/credentials/manager.ts"],"names":[],"mappings":"AAuBA,MAAM,OAAO,iBAAiB;IACC;IAA7B,YAA6B,IAAoB;QAApB,SAAI,GAAJ,IAAI,CAAgB;IAAG,CAAC;IAErD,KAAK,CAAC,OAAO,CAAC,GAAW;QACvB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;CACF"}

package/lib/definitions/registry.d.ts

@@ -0,0 +1,24 @@
+import type { ChannelDefinition } from '../types.js';
+export declare class ChannelDefinitionRegistry {
+    private readonly definitions;
+    private readonly listeners;
+    /**
+     * Subscribe to definition registrations. The returned disposer removes the
+     * listener. Fired synchronously after a successful register() — the control
+     * plane uses this to auto-start configured channels the moment their plugin
+     * registers the definition (doc §27), since channel plugins activate AFTER
+     * the channel-control plugin itself.
+     */
+    onRegister(listener: (definition: ChannelDefinition) => void): () => void;
+    /** Register a definition; throws ChannelDuplicateError on duplicate id. */
+    register(definition: ChannelDefinition): void;
+    get(id: string): ChannelDefinition | undefined;
+    /** Require a definition, or raise a stable ChannelError. */
+    require(id: string): ChannelDefinition;
+    has(id: string): boolean;
+    /** List definitions in registration order. */
+    list(): ChannelDefinition[];
+    /** Remove a definition; returns whether it existed. */
+    unregister(id: string): boolean;
+}
+//# sourceMappingURL=registry.d.ts.map

package/lib/definitions/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/definitions/registry.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwC;IACpE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsD;IAEhF;;;;;;OAMG;IACH,UAAU,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,iBAAiB,KAAK,IAAI,GAAG,MAAM,IAAI;IAOzE,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,EAAE,iBAAiB,GAAG,IAAI;IAa7C,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;IAI9C,4DAA4D;IAC5D,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB;IAWtC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAIxB,8CAA8C;IAC9C,IAAI,IAAI,iBAAiB,EAAE;IAI3B,uDAAuD;IACvD,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;CAGhC"}