@krischoichoi/channel-web 0.6.0

package/lib/host/routes.js

@@ -0,0 +1,250 @@
+import { errorBody } from './security.js';
+import { authInputSchema } from './routes-v2.js';
+/** The fixed four-channel catalog the dashboard always shows, mounted or not. */
+export const CHANNEL_CATALOG = ['weixin', 'qq', 'dingtalk', 'lark'];
+/** Human label for a channel id; falls back to the id itself. */
+const CHANNEL_LABELS = {
+    weixin: 'Weixin',
+    qq: 'QQ',
+    dingtalk: 'DingTalk',
+    lark: 'Lark',
+};
+/** Sanitize a channel lastError to avoid leaking credentials. */
+function safeLastError(error) {
+    if (!error)
+        return null;
+    const msg = typeof error === 'string' ? error : error instanceof Error ? error.message : String(error);
+    if (!msg)
+        return null;
+    return errorBody('REDACTED', msg).error.message;
+}
+export class ChannelApi {
+    channels;
+    now;
+    /** Host-side store of full auth challenges: never exposes payload. */
+    challenges = new Map();
+    constructor(channels, options = {}) {
+        this.channels = channels;
+        this.now = options.now ?? Date.now;
+    }
+    adapter(id) {
+        return this.channels.get(id);
+    }
+    projectCapabilities(c) {
+        if (!c)
+            return {};
+        const out = {};
+        for (const [k, v] of Object.entries(c)) {
+            if (v === undefined)
+                continue;
+            out[k] = typeof v === 'object' && v !== null ? JSON.stringify(v) : v;
+        }
+        return out;
+    }
+    /** Map a ChannelHealth to the spec §23 status enum. */
+    mapStatus(health) {
+        if (health?.error)
+            return 'error';
+        if (!health)
+            return 'unconfigured';
+        switch (health.status) {
+            case 'ok':
+                return 'connected';
+            case 'degraded':
+                return 'degraded';
+            default:
+                // 'down' | 'unknown': authenticated but receive loop down → degraded,
+                // otherwise treat as unconfigured.
+                return health.authenticated === true ? 'degraded' : 'unconfigured';
+        }
+    }
+    async buildView(adapter) {
+        const health = adapter.getHealth ? await adapter.getHealth().catch(() => undefined) : undefined;
+        const authenticated = health?.authenticated === true;
+        // M1 has no managed lifecycle: a registered adapter is mounted/enabled.
+        // configured is inferred from adapter health.
+        const configured = authenticated;
+        return {
+            id: adapter.id,
+            enabled: true,
+            configured,
+            mounted: true,
+            status: this.mapStatus(health),
+            health: health ?? null,
+            capabilities: this.projectCapabilities(adapter.capabilities),
+            lastError: health?.error ? safeLastError(health.error) : null,
+        };
+    }
+    /** A neutral, unmounted view for a known catalog id with no live adapter. */
+    offlineView(id) {
+        return {
+            id,
+            enabled: false,
+            configured: false,
+            mounted: false,
+            status: 'unconfigured',
+            health: null,
+            capabilities: null,
+            lastError: null,
+        };
+    }
+    /** GET /channels → ChannelView[] for the fixed four-channel catalog. */
+    async listChannels() {
+        const views = await Promise.all(CHANNEL_CATALOG.map((id) => {
+            const adapter = this.adapter(id);
+            return adapter ? this.buildView(adapter) : Promise.resolve(this.offlineView(id));
+        }));
+        return { status: 200, body: views };
+    }
+    /** GET /channels/:id → ChannelView. */
+    async getChannel(id) {
+        const adapter = this.adapter(id);
+        if (adapter)
+            return { status: 200, body: await this.buildView(adapter) };
+        // A known catalog id that is not mounted returns its offline view (200),
+        // not 404; truly unknown ids still 404.
+        if (CHANNEL_CATALOG.includes(id)) {
+            return { status: 200, body: this.offlineView(id) };
+        }
+        return { status: 404, body: errorBody('CHANNEL_NOT_FOUND', 'unknown channel: ' + id) };
+    }
+    /** POST /channels/:id/auth/start → PublicAuthChallenge. */
+    async startAuth(id) {
+        const adapter = this.adapter(id);
+        if (!adapter)
+            return { status: 404, body: errorBody('CHANNEL_NOT_FOUND', 'unknown channel: ' + id) };
+        if (!adapter.beginAuth) {
+            return { status: 400, body: errorBody('AUTH_NOT_SUPPORTED', 'channel does not support auth') };
+        }
+        try {
+            const full = await adapter.beginAuth();
+            if (!full || typeof full.id !== 'string') {
+                return { status: 500, body: errorBody('AUTH_BEGIN_FAILED', 'channel returned an invalid challenge') };
+            }
+            this.challenges.set(full.id, full);
+            const pub = {
+                id: full.id,
+                instruction: full.instruction,
+                qrUrl: full.qrUrl,
+                expiresAt: full.expiresAt,
+            };
+            return { status: 200, body: pub };
+        }
+        catch (error) {
+            return { status: 500, body: errorBody('AUTH_BEGIN_FAILED', error instanceof Error ? error.message : String(error)) };
+        }
+    }
+    /** Resolve a stored challenge or a structured error result. */
+    storedChallenge(id, challengeId) {
+        if (typeof challengeId !== 'string' || !challengeId) {
+            return { ok: false, result: { status: 400, body: errorBody('INVALID_CHALLENGE', 'challengeId is required') } };
+        }
+        const challenge = this.challenges.get(challengeId);
+        if (!challenge) {
+            return { ok: false, result: { status: 404, body: errorBody('CHALLENGE_NOT_FOUND', 'unknown or expired challenge') } };
+        }
+        if (challenge.expiresAt !== undefined && this.now() > challenge.expiresAt) {
+            this.challenges.delete(challengeId);
+            return { ok: false, result: { status: 410, body: errorBody('CHALLENGE_EXPIRED', 'challenge expired') } };
+        }
+        return { ok: true, challenge };
+    }
+    /** POST /channels/:id/auth/poll → PublicAuthPoll. */
+    async pollAuth(id, challengeId) {
+        const adapter = this.adapter(id);
+        if (!adapter)
+            return { status: 404, body: errorBody('CHANNEL_NOT_FOUND', 'unknown channel: ' + id) };
+        if (!adapter.pollAuth)
+            return { status: 400, body: errorBody('AUTH_NOT_SUPPORTED', 'channel does not support auth polling') };
+        const stored = this.storedChallenge(id, challengeId);
+        if (!stored.ok)
+            return stored.result;
+        try {
+            const poll = await adapter.pollAuth(stored.challenge);
+            const pub = {
+                state: poll.state,
+                detail: poll.detail,
+                prompt: derivePrompt(poll.state, poll.detail),
+            };
+            if (poll.state === 'authenticated' || poll.state === 'expired' || poll.state === 'failed') {
+                this.challenges.delete(stored.challenge.id);
+            }
+            return { status: 200, body: pub };
+        }
+        catch (error) {
+            return { status: 500, body: errorBody('AUTH_POLL_FAILED', error instanceof Error ? error.message : String(error)) };
+        }
+    }
+    /** POST /channels/:id/auth/input → PublicAuthPoll. */
+    async inputAuth(id, challengeId, input) {
+        const adapter = this.adapter(id);
+        if (!adapter)
+            return { status: 404, body: errorBody('CHANNEL_NOT_FOUND', 'unknown channel: ' + id) };
+        if (!adapter.submitAuthInput) {
+            return { status: 400, body: errorBody('AUTH_NOT_SUPPORTED', 'channel does not support auth input') };
+        }
+        if (!input || !authInputSchema.safeParse(input).success) {
+            return { status: 400, body: errorBody('INVALID_INPUT', 'input must be { kind: "verification-code", value: string }') };
+        }
+        const stored = this.storedChallenge(id, challengeId);
+        if (!stored.ok)
+            return stored.result;
+        try {
+            await adapter.submitAuthInput(stored.challenge, input);
+            // Call pollAuth as a method so adapters keep their `this` binding.
+            const poll = await adapter.pollAuth(stored.challenge);
+            const pub = {
+                state: poll.state,
+                detail: poll.detail,
+                prompt: derivePrompt(poll.state, poll.detail),
+            };
+            return { status: 200, body: pub };
+        }
+        catch (error) {
+            return { status: 500, body: errorBody('AUTH_INPUT_FAILED', error instanceof Error ? error.message : String(error)) };
+        }
+    }
+    /**
+     * Match a path under `/dsh-channels/api/v1` (the prefix is stripped by the
+     * caller) and dispatch to the appropriate handler. Returns 404 for unknown routes.
+     */
+    async handle(method, pathname, body) {
+        const clean = pathname.replace(/\/+$/, '');
+        if (method === 'GET' && clean === '/channels')
+            return this.listChannels();
+        if (method === 'GET') {
+            const one = /^\/channels\/([^/]+)$/.exec(clean);
+            if (one)
+                return this.getChannel(decodeURIComponent(one[1]));
+        }
+        if (method === 'POST') {
+            const start = /^\/channels\/([^/]+)\/auth\/start$/.exec(clean);
+            if (start)
+                return this.startAuth(decodeURIComponent(start[1]));
+            const poll = /^\/channels\/([^/]+)\/auth\/poll$/.exec(clean);
+            if (poll) {
+                const b = body;
+                return this.pollAuth(decodeURIComponent(poll[1]), b?.challengeId);
+            }
+            const input = /^\/channels\/([^/]+)\/auth\/input$/.exec(clean);
+            if (input) {
+                const b = (body ?? {});
+                return this.inputAuth(decodeURIComponent(input[1]), b?.challengeId, b?.input);
+            }
+        }
+        return { status: 404, body: errorBody('NOT_FOUND', 'no such endpoint') };
+    }
+}
+/** Map an auth poll to a client face-hint string. */
+function derivePrompt(state, detail) {
+    if (state === 'pending') {
+        const d = detail?.toLowerCase() ?? '';
+        if (d.includes('verify') || d.includes('code'))
+            return 'verify-code';
+        if (d.includes('scan'))
+            return d.includes('confirm') || d.includes('redirect') ? 'confirm' : 'waiting-scan';
+        return d.includes('confirm') ? 'confirm' : 'waiting-scan';
+    }
+    return undefined;
+}
+//# sourceMappingURL=routes.js.map

package/lib/host/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/host/routes.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAKjD,iFAAiF;AACjF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAU,CAAC;AA8C7E,iEAAiE;AACjE,MAAM,cAAc,GAA2B;IAC7C,MAAM,EAAE,QAAQ;IAChB,EAAE,EAAE,IAAI;IACR,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,iEAAiE;AACjE,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvG,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;AAClD,CAAC;AAED,MAAM,OAAO,UAAU;IACJ,QAAQ,CAAe;IACvB,GAAG,CAAe;IACnC,sEAAsE;IACrD,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IAE/D,YAAY,QAAsB,EAAE,UAAgC,EAAE;QACpE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACrC,CAAC;IAEO,OAAO,CAAC,EAAU;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAEO,mBAAmB,CAAC,CAAiC;QAC3D,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAClB,MAAM,GAAG,GAAqC,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,SAAS;gBAAE,SAAS;YAC9B,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAsB,CAAC;QAC7F,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,uDAAuD;IAC/C,SAAS,CAAC,MAAiC;QACjD,IAAI,MAAM,EAAE,KAAK;YAAE,OAAO,OAAO,CAAC;QAClC,IAAI,CAAC,MAAM;YAAE,OAAO,cAAc,CAAC;QACnC,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,IAAI;gBACP,OAAO,WAAW,CAAC;YACrB,KAAK,UAAU;gBACb,OAAO,UAAU,CAAC;YACpB;gBACE,sEAAsE;gBACtE,mCAAmC;gBACnC,OAAO,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,OAAuB;QAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,MAAM,aAAa,GAAG,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;QACrD,wEAAwE;QACxE,8CAA8C;QAC9C,MAAM,UAAU,GAAG,aAAa,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,OAAO,EAAE,IAAI;YACb,UAAU;YACV,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YAC9B,MAAM,EAAE,MAAM,IAAI,IAAI;YACtB,YAAY,EAAE,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC;YAC5D,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;SAC9D,CAAC;IACJ,CAAC;IAED,6EAA6E;IACrE,WAAW,CAAC,EAAU;QAC5B,OAAO;YACL,EAAE;YACF,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,IAAI;SAChB,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,YAAY;QAChB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACjC,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QACnF,CAAC,CAAC,CACH,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IAED,uCAAuC;IACvC,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACzE,yEAAyE;QACzE,wCAAwC;QACxC,IAAK,eAAqC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACxD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,mBAAmB,EAAE,mBAAmB,GAAG,EAAE,CAAC,EAAE,CAAC;IACzF,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,SAAS,CAAC,EAAU;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,mBAAmB,EAAE,mBAAmB,GAAG,EAAE,CAAC,EAAE,CAAC;QACrG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACvB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,oBAAoB,EAAE,+BAA+B,CAAC,EAAE,CAAC;QACjG,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACzC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,mBAAmB,EAAE,uCAAuC,CAAC,EAAE,CAAC;YACxG,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACnC,MAAM,GAAG,GAAwB;gBAC/B,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,mBAAmB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvH,CAAC;IACH,CAAC;IAED,+DAA+D;IACvD,eAAe,CAAC,EAAU,EAAE,WAAoB;QACtD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,EAAE,EAAE,CAAC;QACjH,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,qBAAqB,EAAE,8BAA8B,CAAC,EAAE,EAAE,CAAC;QACxH,CAAC;QACD,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;YAC1E,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;QAC3G,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACjC,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,QAAQ,CAAC,EAAU,EAAE,WAAoB;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,mBAAmB,EAAE,mBAAmB,GAAG,EAAE,CAAC,EAAE,CAAC;QACrG,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,oBAAoB,EAAE,uCAAuC,CAAC,EAAE,CAAC;QAC9H,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,GAAG,GAAmB;gBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;aAC9C,CAAC;YACF,IAAI,IAAI,CAAC,KAAK,KAAK,eAAe,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC1F,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC9C,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,kBAAkB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACtH,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,WAAoB,EAAE,KAA4B;QAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,mBAAmB,EAAE,mBAAmB,GAAG,EAAE,CAAC,EAAE,CAAC;QACrG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,oBAAoB,EAAE,qCAAqC,CAAC,EAAE,CAAC;QACvG,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;YACxD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,eAAe,EAAE,4DAA4D,CAAC,EAAE,CAAC;QACzH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACvD,mEAAmE;YACnE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACvD,MAAM,GAAG,GAAmB;gBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;aAC9C,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,mBAAmB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,QAAgB,EAAE,IAAa;QAC1D,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1E,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,GAAG;gBAAE,OAAO,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/D,IAAI,KAAK;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7D,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,CAAC,GAAG,IAA6C,CAAC;gBACxD,OAAO,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,KAAK,GAAG,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/D,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA6D,CAAC;gBACnF,OAAO,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,CAAC;IAC3E,CAAC;CACF;AAED,qDAAqD;AACrD,SAAS,YAAY,CAAC,KAA6B,EAAE,MAAe;IAClE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,aAAa,CAAC;QACrE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC;QAC5G,OAAO,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC;IAC5D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/lib/host/security.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Security helpers for the dsh-channels host API (M1). Pure, unit-testable.
+ *
+ * Rules (spec §2.2):
+ *  - state-changing requests (POST) are loopback-only;
+ *  - POST bodies must be application/json (else 415);
+ *  - bodies are capped at BODY_LIMIT_BYTES (else 413);
+ *  - error messages are sanitized so no token/secret leaks into a response.
+ */
+/** Upper bound for a request body payload (64 KiB). */
+export declare const BODY_LIMIT_BYTES: number;
+/**
+ * True when the socket remote address is a loopback address.
+ * Used to restrict state-changing API calls to the local machine.
+ */
+export declare function isLoopbackAddress(address: string | undefined): boolean;
+/** True when the Content-Type header is application/json (options ignored). */
+export declare function isJsonContentType(contentType: string | undefined): boolean;
+/** Structured result of reading + parsing a JSON request body. */
+export type BodyResult<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    status: 413 | 415 | 400;
+    error: PublicErrorBody;
+};
+export interface PublicErrorBody {
+    error: {
+        code: string;
+        message: string;
+    };
+}
+export declare function errorBody(code: string, message: string): PublicErrorBody;
+/**
+ * Read a JSON request body from a node:http IncomingMessage, respecting the
+ * 64 KiB cap. Never trusts caller-provided Content-Length; it reads the real
+ * stream to enforce the byte limit regardless of the header.
+ */
+export declare function readJsonBody<T>(req: AsyncIterable<Buffer | string>): Promise<BodyResult<T>>;
+/**
+ * Best-effort sanitization of an error message so no secret/credential
+ * leaks into an API response. Values like 'token=...' / 'aeskey=...' are
+ * replaced with a redaction marker.
+ */
+export declare function sanitizeError(message: string): string;
+//# sourceMappingURL=security.d.ts.map

package/lib/host/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/host/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,uDAAuD;AACvD,eAAO,MAAM,gBAAgB,QAAY,CAAC;AAI1C;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGtE;AAED,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAI1E;AAED,kEAAkE;AAClE,MAAM,MAAM,UAAU,CAAC,CAAC,IACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,CAAC;AAEnE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,eAAe,CAExE;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAAE,GAAG,EAAE,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAuBjG;AAQD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMrD"}

package/lib/host/security.js

@@ -0,0 +1,78 @@
+/**
+ * Security helpers for the dsh-channels host API (M1). Pure, unit-testable.
+ *
+ * Rules (spec §2.2):
+ *  - state-changing requests (POST) are loopback-only;
+ *  - POST bodies must be application/json (else 415);
+ *  - bodies are capped at BODY_LIMIT_BYTES (else 413);
+ *  - error messages are sanitized so no token/secret leaks into a response.
+ */
+/** Upper bound for a request body payload (64 KiB). */
+export const BODY_LIMIT_BYTES = 64 * 1024;
+const LOOPBACK = new Set(['127.0.0.1', '::1', '::ffff:127.0.0.1']);
+/**
+ * True when the socket remote address is a loopback address.
+ * Used to restrict state-changing API calls to the local machine.
+ */
+export function isLoopbackAddress(address) {
+    if (!address)
+        return false;
+    return LOOPBACK.has(address);
+}
+/** True when the Content-Type header is application/json (options ignored). */
+export function isJsonContentType(contentType) {
+    if (!contentType)
+        return false;
+    const [media] = contentType.split(';').map((s) => s.trim());
+    return media?.toLowerCase() === 'application/json';
+}
+export function errorBody(code, message) {
+    return { error: { code, message: sanitizeError(message) } };
+}
+/**
+ * Read a JSON request body from a node:http IncomingMessage, respecting the
+ * 64 KiB cap. Never trusts caller-provided Content-Length; it reads the real
+ * stream to enforce the byte limit regardless of the header.
+ */
+export async function readJsonBody(req) {
+    const chunks = [];
+    let total = 0;
+    for await (const chunk of req) {
+        const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        total += buf.length;
+        if (total > BODY_LIMIT_BYTES) {
+            return { ok: false, status: 413, error: errorBody('BODY_TOO_LARGE', 'request body exceeds 64 KiB limit') };
+        }
+        chunks.push(buf);
+    }
+    // An empty body is treated as an empty object; endpoints validate their
+    // own required fields (e.g. challengeId), so auth/start (no body) works.
+    if (total === 0) {
+        return { ok: true, value: {} };
+    }
+    const raw = Buffer.concat(chunks).toString('utf8');
+    try {
+        return { ok: true, value: JSON.parse(raw) };
+    }
+    catch {
+        return { ok: false, status: 400, error: errorBody('INVALID_JSON', 'request body is not valid JSON') };
+    }
+}
+/** Regex capturing common credential-shaped fragments in an error message. */
+const SECRET_PATTERNS = [
+    /(\b(?:token|aeskey|secret|password|verifycode|verify_code|verify code)\b\s*[:=]\s*)\S+/gi,
+    /\b(?:Illegal character code range [0-9a-f-]+)/gi,
+];
+/**
+ * Best-effort sanitization of an error message so no secret/credential
+ * leaks into an API response. Values like 'token=...' / 'aeskey=...' are
+ * replaced with a redaction marker.
+ */
+export function sanitizeError(message) {
+    let out = String(message ?? '');
+    for (const pattern of SECRET_PATTERNS) {
+        out = out.replace(pattern, (_match, prefix) => (prefix ?? '') + '<redacted>');
+    }
+    return out.length > 500 ? out.slice(0, 500) + '…' : out;
+}
+//# sourceMappingURL=security.js.map

package/lib/host/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/host/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,uDAAuD;AACvD,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,CAAC,WAAW,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAE3E;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,WAA+B;IAC/D,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,KAAK,kBAAkB,CAAC;AACrD,CAAC;AAWD,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,OAAe;IACrD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,GAAmC;IACvE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC;QACpB,IAAI,KAAK,GAAG,gBAAgB,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,gBAAgB,EAAE,mCAAmC,CAAC,EAAE,CAAC;QAC7G,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAO,EAAE,CAAC;IACtC,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,cAAc,EAAE,gCAAgC,CAAC,EAAE,CAAC;IACxG,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,eAAe,GAAa;IAChC,0FAA0F;IAC1F,iDAAiD;CAClD,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAChC,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAe,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAC1D,CAAC"}

package/lib/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * @krischoichoi/channel-web — host (Node) side.
+ *
+ * Cordis plugin entry for a Harness host process. Registers TWO webServer
+ * prefix routes:
+ *
+ *  - `/dsh-channels/api/v1` — the M1 read-only dashboard + adapter auth loop
+ *    (compat; doc §34). Kept intact. Talks only to `ctx.channels`.
+ *  - `/dsh-channels/api/v2` — the control-plane API (doc §28–§33) that
+ *    delegates to the ChannelControlService (`ctx.channelControl`). When the
+ *    control plugin is absent (standalone web profile) every v2 route returns
+ *    503 SERVICE_UNAVAILABLE so the profile still boots.
+ *
+ * The webServer / channels / channelControl services are injected via
+ * ctx.inject so this plugin does not hard-depend on the web profile. The host
+ * entry exports ONLY name + apply — no module-level inject export — which the
+ * bundle test asserts.
+ */
+import type { Context } from '@deepseek-ai/cordis';
+export declare const name = "channel-web";
+export declare function apply(ctx: Context): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAMnD,eAAO,MAAM,IAAI,gBAAgB,CAAC;AA6FlC,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAoDxC"}

package/lib/index.js

@@ -0,0 +1,129 @@
+import { ChannelApi } from './host/routes.js';
+import { ChannelApiV2 } from './host/routes-v2.js';
+import { errorBody, isJsonContentType, isLoopbackAddress, readJsonBody } from './host/security.js';
+export const name = 'channel-web';
+function sendJson(res, status, body) {
+    // 204 No Content carries no response body.
+    if (status === 204 || body === undefined) {
+        res.writeHead(status);
+        res.end();
+        return;
+    }
+    const payload = JSON.stringify(body);
+    res.writeHead(status, {
+        'Content-Type': 'application/json',
+        'Content-Length': Buffer.byteLength(payload).toString(),
+    });
+    res.end(payload);
+}
+/** A read-only HTTP method — no loopback restriction (only mutations are gated). */
+const MUTATION_METHODS = new Set(['POST', 'PATCH', 'PUT', 'DELETE']);
+/** Unsafe non-empty JSON media check for mutation bodies (415 otherwise). */
+function isMutationWithBody(method) {
+    return method === 'POST' || method === 'PATCH' || method === 'PUT';
+}
+/**
+ * Build the v2 prefix handler. `control` is resolved lazily on every request
+ * so a control service that becomes available after webServer is picked up on
+ * the next request; when it is never available, every v2 request returns 503.
+ * The API wrapper is re-created whenever the control service identity changes
+ * (an HMR reload of the control plugin provides a NEW service object), so a
+ * request can never delegate to an unloaded provider.
+ */
+function makeV2Handler(resolveControl) {
+    let api;
+    let apiControl;
+    // Re-create the API wrapper whenever the control service identity changes
+    // (an HMR reload of the control plugin provides a NEW service object), so a
+    // request can never delegate to an unloaded provider.
+    function apiFor(control) {
+        if (apiControl === control && api)
+            return api;
+        api = new ChannelApiV2(control);
+        apiControl = control;
+        return api;
+    }
+    return async (req, res) => {
+        const url = req.url ?? '/';
+        const rawPath = url.split('?')[0] ?? '/';
+        const pathname = rawPath.replace(/^\/dsh-channels\/api\/v2/, '') || '/';
+        const method = (req.method ?? 'GET').toUpperCase();
+        // The control service is optional: without it every v2 route is 503 so the
+        // standalone web profile still boots.
+        const control = resolveControl();
+        if (!control) {
+            return sendJson(res, 503, errorBody('SERVICE_UNAVAILABLE', 'channel control is not available'));
+        }
+        const ready = apiFor(control);
+        if (MUTATION_METHODS.has(method) && !isLoopbackAddress(req.socket.remoteAddress)) {
+            return sendJson(res, 403, errorBody('FORBIDDEN', 'state-changing requests are loopback-only'));
+        }
+        if (isMutationWithBody(method)) {
+            if (!isJsonContentType(req.headers['content-type'])) {
+                return sendJson(res, 415, errorBody('UNSUPPORTED_MEDIA_TYPE', 'Content-Type must be application/json'));
+            }
+            const body = await readJsonBody(req);
+            if (!body.ok)
+                return sendJson(res, body.status, body.error);
+            const result = await ready.handle(method, pathname, body.value);
+            return sendJson(res, result.status, result.body);
+        }
+        if (method === 'GET' || method === 'DELETE') {
+            const result = await ready.handle(method, pathname, undefined);
+            return sendJson(res, result.status, result.body);
+        }
+        sendJson(res, 405, errorBody('METHOD_NOT_ALLOWED', 'method not allowed'));
+    };
+}
+export function apply(ctx) {
+    // v1 compat (doc §34): needs webServer + channels. The M1 auth start/poll/
+    // input talk to ctx.channels adapters as today.
+    ctx.inject(['webServer', 'channels'], (webCtx) => {
+        const server = webCtx.webServer;
+        const channels = webCtx.channels;
+        const api = new ChannelApi(channels);
+        return server.register({
+            kind: 'prefix',
+            path: '/dsh-channels/api/v1',
+            handler: async (req, res) => {
+                const url = req.url ?? '/';
+                const rawPath = url.split('?')[0] ?? '/';
+                const pathname = rawPath.replace(/^\/dsh-channels\/api\/v1/, '') || '/';
+                const method = (req.method ?? 'GET').toUpperCase();
+                if (method === 'POST' && !isLoopbackAddress(req.socket.remoteAddress)) {
+                    return sendJson(res, 403, errorBody('FORBIDDEN', 'state-changing requests are loopback-only'));
+                }
+                if (method === 'POST' && !isJsonContentType(req.headers['content-type'])) {
+                    return sendJson(res, 415, errorBody('UNSUPPORTED_MEDIA_TYPE', 'Content-Type must be application/json'));
+                }
+                if (method === 'POST') {
+                    const body = await readJsonBody(req);
+                    if (!body.ok)
+                        return sendJson(res, body.status, body.error);
+                    const result = await api.handle(method, pathname, body.value);
+                    return sendJson(res, result.status, result.body);
+                }
+                if (method === 'GET') {
+                    const result = await api.handle(method, pathname, undefined);
+                    return sendJson(res, result.status, result.body);
+                }
+                sendJson(res, 405, errorBody('METHOD_NOT_ALLOWED', 'method not allowed'));
+            },
+        });
+    });
+    // v2 control-plane (doc §28–§33): needs webServer; channelControl is
+    // optional — when absent, requests return 503. The control service is read
+    // lazily via ctx.get() on every request (never cached in a module-level ref):
+    // ctx.get() resolves only the currently active provider, so an HMR unload of
+    // the control plugin immediately degrades to 503 instead of calling into an
+    // already-unloaded service object.
+    ctx.inject(['webServer'], (webCtx) => {
+        const server = webCtx.webServer;
+        return server.register({
+            kind: 'prefix',
+            path: '/dsh-channels/api/v2',
+            handler: makeV2Handler(() => ctx.get('channelControl')),
+        });
+    });
+}
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,UAAU,EAAqB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,YAAY,EAA2B,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEnG,MAAM,CAAC,MAAM,IAAI,GAAG,aAAa,CAAC;AAWlC,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAClE,2CAA2C;IAC3C,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACzC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACtB,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;KACxD,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAED,oFAAoF;AACpF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAErE,6EAA6E;AAC7E,SAAS,kBAAkB,CAAC,MAAc;IACxC,OAAO,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,KAAK,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,cAAoD;IACzE,IAAI,GAA6B,CAAC;IAClC,IAAI,UAA0C,CAAC;IAE/C,0EAA0E;IAC1E,4EAA4E;IAC5E,sDAAsD;IACtD,SAAS,MAAM,CAAC,OAA2B;QACzC,IAAI,UAAU,KAAK,OAAO,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QAC9C,GAAG,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;QAChC,UAAU,GAAG,OAAO,CAAC;QACrB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAiB,EAAE;QACxE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;QACxE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAEnD,2EAA2E;QAC3E,sCAAsC;QACtC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,qBAAqB,EAAE,kCAAkC,CAAC,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAE9B,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YACjF,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,WAAW,EAAE,2CAA2C,CAAC,CAAC,CAAC;QACjG,CAAC;QAED,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;gBACpD,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,wBAAwB,EAAE,uCAAuC,CAAC,CAAC,CAAC;YAC1G,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,YAAY,CAA0B,GAAG,CAAC,CAAC;YAC9D,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAChE,OAAO,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC/D,OAAO,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;QAED,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAY;IAChC,2EAA2E;IAC3E,gDAAgD;IAChD,GAAG,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE;QAC/C,MAAM,MAAM,GAAI,MAAkD,CAAC,SAAS,CAAC;QAC7E,MAAM,QAAQ,GAAI,MAAgD,CAAC,QAAQ,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;QAErC,OAAO,MAAM,CAAC,QAAQ,CAAC;YACrB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC1B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;gBAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;gBACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;gBACxE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;gBAEnD,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;oBACtE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,WAAW,EAAE,2CAA2C,CAAC,CAAC,CAAC;gBACjG,CAAC;gBACD,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;oBACzE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,wBAAwB,EAAE,uCAAuC,CAAC,CAAC,CAAC;gBAC1G,CAAC;gBACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACtB,MAAM,IAAI,GAAG,MAAM,YAAY,CAA0B,GAAG,CAAC,CAAC;oBAC9D,IAAI,CAAC,IAAI,CAAC,EAAE;wBAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC5D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC9D,OAAO,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACnD,CAAC;gBACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;oBACrB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;oBAC7D,OAAO,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACnD,CAAC;gBACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC,CAAC;YAC5E,CAAC;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,qEAAqE;IACrE,2EAA2E;IAC3E,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,mCAAmC;IACnC,GAAG,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE;QACnC,MAAM,MAAM,GAAI,MAAkD,CAAC,SAAS,CAAC;QAC7E,OAAO,MAAM,CAAC,QAAQ,CAAC;YACrB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAmC,CAAC;SAC1F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}