@linkshell/gateway 0.3.9 → 0.4.0

package/dist/gateway/src/state-store.d.ts

@@ -1,22 +1,19 @@
-export interface StoredAuthorizationRecord {
-    authorizationId: string;
+export interface StoredTokenRecord {
     token: string;
-    hostDeviceId: string;
-    clientDeviceId?: string;
-    clientName?: string;
+    sessionIds: string[];
     createdAt: number;
     lastUsedAt: number;
 }
 export interface StoredPairingRecord {
-    hostDeviceId: string;
+    sessionId: string;
     pairingCode: string;
     expiresAt: number;
     claimed: boolean;
 }
 export interface GatewayStateStore {
-    loadAuthorizations(): Promise<StoredAuthorizationRecord[]>;
-    saveAuthorization(record: StoredAuthorizationRecord): Promise<void>;
-    deleteAuthorization(authorizationId: string): Promise<void>;
+    loadTokens(): Promise<StoredTokenRecord[]>;
+    saveToken(record: StoredTokenRecord): Promise<void>;
+    deleteToken(token: string): Promise<void>;
     loadPairings(): Promise<StoredPairingRecord[]>;
     savePairing(record: StoredPairingRecord): Promise<void>;
     deletePairing(pairingCode: string): Promise<void>;

package/dist/gateway/src/state-store.js

@@ -1,7 +1,5 @@
-const AUTHORIZATION_TABLE = process.env.SUPABASE_GATEWAY_AUTHORIZATION_TABLE ??
-    "linkshell_gateway_device_authorizations";
-const PAIRING_TABLE = process.env.SUPABASE_GATEWAY_PAIRING_TABLE ??
-    "linkshell_gateway_pairing_challenges";
+const TOKEN_TABLE = process.env.SUPABASE_GATEWAY_TOKEN_TABLE ?? "linkshell_gateway_tokens";
+const PAIRING_TABLE = process.env.SUPABASE_GATEWAY_PAIRING_TABLE ?? "linkshell_gateway_pairings";
 const STORE_TIMEOUT_MS = Number(process.env.SUPABASE_STATE_TIMEOUT_MS ?? 3_000);
 function msToIso(ms) {
     return new Date(ms).toISOString();
@@ -12,9 +10,6 @@ function isoToMs(value) {
     const parsed = Date.parse(value);
     return Number.isNaN(parsed) ? Date.now() : parsed;
 }
-function maybeString(value) {
-    return typeof value === "string" && value.length > 0 ? value : undefined;
-}
 export function createSupabaseStateStore() {
     const url = process.env.SUPABASE_URL?.replace(/\/+$/, "");
     const key = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.SUPABASE_ANON_KEY;
@@ -43,44 +38,42 @@ export function createSupabaseStateStore() {
         return (await res.json());
     }
     return {
-        async loadAuthorizations() {
-            const rows = await request(`${AUTHORIZATION_TABLE}?select=authorization_id,token,host_device_id,client_device_id,client_name,created_at,last_used_at`);
+        async loadTokens() {
+            const rows = await request(`${TOKEN_TABLE}?select=token,session_ids,created_at,last_used_at`);
             return rows.map((row) => ({
-                authorizationId: String(row.authorization_id ?? ""),
                 token: String(row.token ?? ""),
-                hostDeviceId: String(row.host_device_id ?? ""),
-                clientDeviceId: maybeString(row.client_device_id),
-                clientName: maybeString(row.client_name),
+                sessionIds: Array.isArray(row.session_ids)
+                    ? row.session_ids.map(String)
+                    : [],
                 createdAt: isoToMs(row.created_at),
                 lastUsedAt: isoToMs(row.last_used_at),
-            })).filter((record) => record.authorizationId && record.token && record.hostDeviceId);
+            })).filter((record) => record.token);
         },
-        async saveAuthorization(record) {
-            await request(`${AUTHORIZATION_TABLE}?on_conflict=authorization_id`, {
+        async saveToken(record) {
+            await request(`${TOKEN_TABLE}?on_conflict=token`, {
                 method: "POST",
                 headers: { Prefer: "resolution=merge-duplicates" },
                 body: JSON.stringify({
-                    authorization_id: record.authorizationId,
                     token: record.token,
-                    host_device_id: record.hostDeviceId,
-                    client_device_id: record.clientDeviceId ?? null,
-                    client_name: record.clientName ?? null,
+                    session_ids: record.sessionIds,
                     created_at: msToIso(record.createdAt),
                     last_used_at: msToIso(record.lastUsedAt),
                 }),
             });
         },
-        async deleteAuthorization(authorizationId) {
-            await request(`${AUTHORIZATION_TABLE}?authorization_id=eq.${encodeURIComponent(authorizationId)}`, { method: "DELETE" });
+        async deleteToken(token) {
+            await request(`${TOKEN_TABLE}?token=eq.${encodeURIComponent(token)}`, {
+                method: "DELETE",
+            });
         },
         async loadPairings() {
-            const rows = await request(`${PAIRING_TABLE}?select=pairing_code,host_device_id,expires_at,claimed`);
+            const rows = await request(`${PAIRING_TABLE}?select=pairing_code,session_id,expires_at,claimed`);
             return rows.map((row) => ({
                 pairingCode: String(row.pairing_code ?? ""),
-                hostDeviceId: String(row.host_device_id ?? ""),
+                sessionId: String(row.session_id ?? ""),
                 expiresAt: isoToMs(row.expires_at),
                 claimed: row.claimed === true,
-            })).filter((record) => record.pairingCode && record.hostDeviceId);
+            })).filter((record) => record.pairingCode && record.sessionId);
         },
         async savePairing(record) {
             await request(`${PAIRING_TABLE}?on_conflict=pairing_code`, {
@@ -88,7 +81,7 @@ export function createSupabaseStateStore() {
                 headers: { Prefer: "resolution=merge-duplicates" },
                 body: JSON.stringify({
                     pairing_code: record.pairingCode,
-                    host_device_id: record.hostDeviceId,
+                    session_id: record.sessionId,
                     expires_at: msToIso(record.expiresAt),
                     claimed: record.claimed,
                 }),

package/dist/gateway/src/state-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"state-store.js","sourceRoot":"","sources":["../../../src/state-store.ts"],"names":[],"mappings":"AA0BA,MAAM,mBAAmB,GACvB,OAAO,CAAC,GAAG,CAAC,oCAAoC;IAChD,yCAAyC,CAAC;AAC5C,MAAM,aAAa,GACjB,OAAO,CAAC,GAAG,CAAC,8BAA8B;IAC1C,sCAAsC,CAAC;AACzC,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,KAAK,CAAC,CAAC;AAEhF,SAAS,OAAO,CAAC,EAAU;IACzB,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AACpD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACnF,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAEnC,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,GAAG;QACX,aAAa,EAAE,UAAU,GAAG,EAAE;QAC9B,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,KAAK,UAAU,OAAO,CAAI,IAAY,EAAE,IAAkB;QACxD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,YAAY,IAAI,EAAE,EAAE;YAChD,GAAG,IAAI;YACP,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC7D,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;aACzB;SACF,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC9C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;IAED,OAAO;QACL,KAAK,CAAC,kBAAkB;YACtB,MAAM,IAAI,GAAG,MAAM,OAAO,CACxB,GAAG,mBAAmB,oGAAoG,CAC3H,CAAC;YACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxB,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;gBACnD,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC9B,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;gBAC9C,cAAc,EAAE,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC;gBACjD,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC;gBACxC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;gBAClC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;aACtC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC;QACxF,CAAC;QACD,KAAK,CAAC,iBAAiB,CAAC,MAAM;YAC5B,MAAM,OAAO,CACX,GAAG,mBAAmB,+BAA+B,EACrD;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE;gBAClD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,gBAAgB,EAAE,MAAM,CAAC,eAAe;oBACxC,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,cAAc,EAAE,MAAM,CAAC,YAAY;oBACnC,gBAAgB,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;oBAC/C,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;oBACtC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;oBACrC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;iBACzC,CAAC;aACH,CACF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,mBAAmB,CAAC,eAAe;YACvC,MAAM,OAAO,CACX,GAAG,mBAAmB,wBAAwB,kBAAkB,CAAC,eAAe,CAAC,EAAE,EACnF,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,YAAY;YAChB,MAAM,IAAI,GAAG,MAAM,OAAO,CACxB,GAAG,aAAa,wDAAwD,CACzE,CAAC;YACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;gBAC3C,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;gBAC9C,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;gBAClC,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,IAAI;aAC9B,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,MAAM,OAAO,CACX,GAAG,aAAa,2BAA2B,EAC3C;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE;gBAClD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,YAAY,EAAE,MAAM,CAAC,WAAW;oBAChC,cAAc,EAAE,MAAM,CAAC,YAAY;oBACnC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;oBACrC,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB,CAAC;aACH,CACF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,WAAW;YAC7B,MAAM,OAAO,CACX,GAAG,aAAa,oBAAoB,kBAAkB,CAAC,WAAW,CAAC,EAAE,EACrE,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"state-store.js","sourceRoot":"","sources":["../../../src/state-store.ts"],"names":[],"mappings":"AAuBA,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,0BAA0B,CAAC;AAC3F,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,4BAA4B,CAAC;AACjG,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,KAAK,CAAC,CAAC;AAEhF,SAAS,OAAO,CAAC,EAAU;IACzB,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACnF,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAEnC,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,GAAG;QACX,aAAa,EAAE,UAAU,GAAG,EAAE;QAC9B,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,KAAK,UAAU,OAAO,CAAI,IAAY,EAAE,IAAkB;QACxD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,YAAY,IAAI,EAAE,EAAE;YAChD,GAAG,IAAI;YACP,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC7D,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;aACzB;SACF,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC9C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;IAED,OAAO;QACL,KAAK,CAAC,UAAU;YACd,MAAM,IAAI,GAAG,MAAM,OAAO,CACxB,GAAG,WAAW,mDAAmD,CAClE,CAAC;YACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC9B,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;oBACxC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;oBAC7B,CAAC,CAAC,EAAE;gBACN,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;gBAClC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;aACtC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,MAAM;YACpB,MAAM,OAAO,CACX,GAAG,WAAW,oBAAoB,EAClC;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE;gBAClD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,WAAW,EAAE,MAAM,CAAC,UAAU;oBAC9B,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;oBACrC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;iBACzC,CAAC;aACH,CACF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,KAAK;YACrB,MAAM,OAAO,CAAC,GAAG,WAAW,aAAa,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE;gBACpE,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,YAAY;YAChB,MAAM,IAAI,GAAG,MAAM,OAAO,CACxB,GAAG,aAAa,oDAAoD,CACrE,CAAC;YACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;gBAC3C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;gBACvC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;gBAClC,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,IAAI;aAC9B,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;QACjE,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,MAAM,OAAO,CACX,GAAG,aAAa,2BAA2B,EAC3C;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE;gBAClD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,YAAY,EAAE,MAAM,CAAC,WAAW;oBAChC,UAAU,EAAE,MAAM,CAAC,SAAS;oBAC5B,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;oBACrC,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB,CAAC;aACH,CACF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,WAAW;YAC7B,MAAM,OAAO,CACX,GAAG,aAAa,oBAAoB,kBAAkB,CAAC,WAAW,CAAC,EAAE,EACrE,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway/src/tokens.d.ts

@@ -1,38 +1,18 @@
 import type { GatewayStateStore } from "./state-store.js";
-interface DeviceAuthorization {
-    authorizationId: string;
-    hostDeviceId: string;
-    clientDeviceId: string | undefined;
-    clientName: string | undefined;
-    createdAt: number;
-    lastUsedAt: number;
-}
-export declare class AuthorizationManager {
+export declare class TokenManager {
     private readonly store?;
     private tokens;
-    private hostDeviceToTokens;
+    private sessionToToken;
+    private cleanupTimer;
     constructor(store?: GatewayStateStore | undefined);
     hydrate(): Promise<void>;
     register(deviceToken?: string): string;
-    authorize(token: string, hostDeviceId: string, input?: {
-        authorizationId?: string;
-        clientDeviceId?: string;
-        clientName?: string;
-        createdAt?: number;
-        lastUsedAt?: number;
-        persist?: boolean;
-    }): DeviceAuthorization | undefined;
+    bind(token: string, sessionId: string): boolean;
     validate(token: string): boolean;
-    owns(token: string, hostDeviceId: string): boolean;
-    revoke(token: string, hostDeviceId: string, authorizationId: string): boolean;
-    getHostDeviceIds(token: string): Set<string>;
+    owns(token: string, sessionId: string): boolean;
     getSessionIds(token: string): Set<string>;
-    getAuthorizationId(token: string, hostDeviceId: string): string | undefined;
-    getTokenForHostDevice(hostDeviceId: string): string | undefined;
-    bind(token: string, hostDeviceId: string): boolean;
+    getTokenForSession(sessionId: string): string | undefined;
+    private cleanup;
     private persist;
     destroy(): void;
 }
-export declare class TokenManager extends AuthorizationManager {
-}
-export {};

package/dist/gateway/src/tokens.js

@@ -1,145 +1,119 @@
 import { randomUUID } from "node:crypto";
-export class AuthorizationManager {
+const CLEANUP_INTERVAL = 5 * 60_000;
+const SESSION_TTL = 7 * 24 * 60 * 60_000; // 7 days — prune stale bindings
+export class TokenManager {
     store;
     tokens = new Map();
-    hostDeviceToTokens = new Map();
+    sessionToToken = new Map();
+    cleanupTimer;
     constructor(store) {
         this.store = store;
+        this.cleanupTimer = setInterval(() => this.cleanup(), CLEANUP_INTERVAL);
     }
     async hydrate() {
         if (!this.store)
             return;
         try {
-            const records = await this.store.loadAuthorizations();
+            const records = await this.store.loadTokens();
+            const now = Date.now();
             for (const record of records) {
-                const token = this.register(record.token);
-                this.authorize(token, record.hostDeviceId, {
-                    authorizationId: record.authorizationId,
-                    clientDeviceId: record.clientDeviceId,
-                    clientName: record.clientName,
+                if (now - record.lastUsedAt > SESSION_TTL) {
+                    void this.store.deleteToken(record.token).catch(() => { });
+                    continue;
+                }
+                this.tokens.set(record.token, {
+                    token: record.token,
+                    sessionIds: new Set(record.sessionIds),
                     createdAt: record.createdAt,
                     lastUsedAt: record.lastUsedAt,
-                    persist: false,
                 });
+                for (const sessionId of record.sessionIds) {
+                    this.sessionToToken.set(sessionId, record.token);
+                }
             }
         }
         catch (err) {
-            process.stderr.write(`[gateway] authorization store hydrate failed, using memory only: ${err}\n`);
+            process.stderr.write(`[gateway] token store hydrate failed, using memory only: ${err}\n`);
         }
     }
     register(deviceToken) {
         if (deviceToken && this.tokens.has(deviceToken)) {
             const record = this.tokens.get(deviceToken);
             record.lastUsedAt = Date.now();
+            this.persist(record);
             return deviceToken;
         }
         const token = deviceToken || randomUUID();
         this.tokens.set(token, {
             token,
-            authorizations: new Map(),
+            sessionIds: new Set(),
             createdAt: Date.now(),
             lastUsedAt: Date.now(),
         });
+        this.persist(this.tokens.get(token));
         return token;
     }
-    authorize(token, hostDeviceId, input = {}) {
-        const record = this.tokens.get(token);
-        if (!record)
-            return undefined;
-        const existing = record.authorizations.get(hostDeviceId);
-        const now = Date.now();
-        const authorization = {
-            authorizationId: input.authorizationId ?? existing?.authorizationId ?? randomUUID(),
-            hostDeviceId,
-            clientDeviceId: input.clientDeviceId ?? existing?.clientDeviceId,
-            clientName: input.clientName ?? existing?.clientName,
-            createdAt: input.createdAt ?? existing?.createdAt ?? now,
-            lastUsedAt: input.lastUsedAt ?? now,
-        };
-        record.authorizations.set(hostDeviceId, authorization);
-        record.lastUsedAt = now;
-        let tokens = this.hostDeviceToTokens.get(hostDeviceId);
-        if (!tokens) {
-            tokens = new Set();
-            this.hostDeviceToTokens.set(hostDeviceId, tokens);
-        }
-        tokens.add(token);
-        if (input.persist !== false) {
-            this.persist(token, authorization);
-        }
-        return authorization;
-    }
-    validate(token) {
+    bind(token, sessionId) {
         const record = this.tokens.get(token);
         if (!record)
             return false;
+        record.sessionIds.add(sessionId);
         record.lastUsedAt = Date.now();
+        this.sessionToToken.set(sessionId, token);
+        this.persist(record);
         return true;
     }
-    owns(token, hostDeviceId) {
+    validate(token) {
         const record = this.tokens.get(token);
         if (!record)
             return false;
-        const authorization = record.authorizations.get(hostDeviceId);
-        if (!authorization)
-            return false;
-        const now = Date.now();
-        record.lastUsedAt = now;
-        authorization.lastUsedAt = now;
-        this.persist(token, authorization);
+        record.lastUsedAt = Date.now();
+        this.persist(record);
         return true;
     }
-    revoke(token, hostDeviceId, authorizationId) {
+    owns(token, sessionId) {
         const record = this.tokens.get(token);
-        const authorization = record?.authorizations.get(hostDeviceId);
-        if (!record || !authorization || authorization.authorizationId !== authorizationId) {
+        if (!record)
             return false;
-        }
-        record.authorizations.delete(hostDeviceId);
-        const tokens = this.hostDeviceToTokens.get(hostDeviceId);
-        tokens?.delete(token);
-        if (tokens && tokens.size === 0) {
-            this.hostDeviceToTokens.delete(hostDeviceId);
-        }
-        void this.store?.deleteAuthorization(authorizationId).catch((err) => {
-            process.stderr.write(`[gateway] authorization store delete failed: ${err}\n`);
-        });
-        return true;
+        record.lastUsedAt = Date.now();
+        this.persist(record);
+        return record.sessionIds.has(sessionId);
     }
-    getHostDeviceIds(token) {
+    getSessionIds(token) {
         const record = this.tokens.get(token);
         if (!record)
             return new Set();
         record.lastUsedAt = Date.now();
-        return new Set(record.authorizations.keys());
-    }
-    getSessionIds(token) {
-        return this.getHostDeviceIds(token);
-    }
-    getAuthorizationId(token, hostDeviceId) {
-        return this.tokens.get(token)?.authorizations.get(hostDeviceId)?.authorizationId;
+        this.persist(record);
+        return record.sessionIds;
     }
-    getTokenForHostDevice(hostDeviceId) {
-        return this.hostDeviceToTokens.get(hostDeviceId)?.values().next().value;
+    getTokenForSession(sessionId) {
+        return this.sessionToToken.get(sessionId);
     }
-    bind(token, hostDeviceId) {
-        return !!this.authorize(token, hostDeviceId);
+    cleanup() {
+        const now = Date.now();
+        for (const [token, record] of this.tokens) {
+            if (now - record.lastUsedAt > SESSION_TTL) {
+                for (const sid of record.sessionIds) {
+                    this.sessionToToken.delete(sid);
+                }
+                this.tokens.delete(token);
+                void this.store?.deleteToken(token).catch(() => { });
+            }
+        }
     }
-    persist(token, authorization) {
-        void this.store?.saveAuthorization({
-            token,
-            authorizationId: authorization.authorizationId,
-            hostDeviceId: authorization.hostDeviceId,
-            clientDeviceId: authorization.clientDeviceId,
-            clientName: authorization.clientName,
-            createdAt: authorization.createdAt,
-            lastUsedAt: authorization.lastUsedAt,
+    persist(record) {
+        void this.store?.saveToken({
+            token: record.token,
+            sessionIds: [...record.sessionIds],
+            createdAt: record.createdAt,
+            lastUsedAt: record.lastUsedAt,
         }).catch((err) => {
-            process.stderr.write(`[gateway] authorization store save failed: ${err}\n`);
+            process.stderr.write(`[gateway] token store save failed: ${err}\n`);
         });
     }
-    destroy() { }
-}
-export class TokenManager extends AuthorizationManager {
+    destroy() {
+        clearInterval(this.cleanupTimer);
+    }
 }
 //# sourceMappingURL=tokens.js.map

package/dist/gateway/src/tokens.js.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../../src/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmBzC,MAAM,OAAO,oBAAoB;IAIF;IAHrB,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxC,kBAAkB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE5D,YAA6B,KAAyB;QAAzB,UAAK,GAAL,KAAK,CAAoB;IAAG,CAAC;IAE1D,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;YACtD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1C,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE;oBACzC,eAAe,EAAE,MAAM,CAAC,eAAe;oBACvC,cAAc,EAAE,MAAM,CAAC,cAAc;oBACrC,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,OAAO,EAAE,KAAK;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,GAAG,IAAI,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,WAAoB;QAC3B,IAAI,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;YAC7C,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,IAAI,UAAU,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE;YACrB,KAAK;YACL,cAAc,EAAE,IAAI,GAAG,EAAE;YACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;SACvB,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,CACP,KAAa,EACb,YAAoB,EACpB,QAOI,EAAE;QAEN,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,aAAa,GAAwB;YACzC,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,QAAQ,EAAE,eAAe,IAAI,UAAU,EAAE;YACnF,YAAY;YACZ,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,QAAQ,EAAE,cAAc;YAChE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,QAAQ,EAAE,UAAU;YACpD,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,QAAQ,EAAE,SAAS,IAAI,GAAG;YACxD,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,GAAG;SACpC,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACvD,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;QACxB,IAAI,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YACnB,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,YAAoB;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9D,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;QACxB,aAAa,CAAC,UAAU,GAAG,GAAG,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,YAAoB,EAAE,eAAuB;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,eAAe,KAAK,eAAe,EAAE,CAAC;YACnF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACzD,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,IAAI,CAAC,KAAK,EAAE,mBAAmB,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,GAAG,IAAI,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gBAAgB,CAAC,KAAa;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,aAAa,CAAC,KAAa;QACzB,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,kBAAkB,CAAC,KAAa,EAAE,YAAoB;QACpD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,eAAe,CAAC;IACnF,CAAC;IAED,qBAAqB,CAAC,YAAoB;QACxC,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;IAC1E,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,YAAoB;QACtC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC/C,CAAC;IAEO,OAAO,CAAC,KAAa,EAAE,aAAkC;QAC/D,KAAK,IAAI,CAAC,KAAK,EAAE,iBAAiB,CAAC;YACjC,KAAK;YACL,eAAe,EAAE,aAAa,CAAC,eAAe;YAC9C,YAAY,EAAE,aAAa,CAAC,YAAY;YACxC,cAAc,EAAE,aAAa,CAAC,cAAc;YAC5C,UAAU,EAAE,aAAa,CAAC,UAAU;YACpC,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,UAAU,EAAE,aAAa,CAAC,UAAU;SACrC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,GAAG,IAAI,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAU,CAAC;CACnB;AAED,MAAM,OAAO,YAAa,SAAQ,oBAAoB;CAAG"}
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../../src/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC;AACpC,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,gCAAgC;AAS1E,MAAM,OAAO,YAAY;IAKM;IAJrB,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxC,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,YAAY,CAAiC;IAErD,YAA6B,KAAyB;QAAzB,UAAK,GAAL,KAAK,CAAoB;QACpD,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,WAAW,EAAE,CAAC;oBAC1C,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBAC1D,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE;oBAC5B,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,UAAU,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;oBACtC,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAC;gBACH,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBAC1C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4DAA4D,GAAG,IAAI,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,WAAoB;QAC3B,IAAI,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;YAC7C,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,IAAI,UAAU,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE;YACrB,KAAK;YACL,UAAU,EAAE,IAAI,GAAG,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,SAAiB;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,SAAiB;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;IAED,aAAa,CAAC,KAAa;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,MAAM,CAAC,UAAU,CAAC;IAC3B,CAAC;IAED,kBAAkB,CAAC,SAAiB;QAClC,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAEO,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1C,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,WAAW,EAAE,CAAC;gBAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACpC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClC,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1B,KAAK,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,MAAmB;QACjC,KAAK,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;YAClC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,GAAG,IAAI,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/gateway/src/tunnel.d.ts

@@ -1,6 +1,6 @@
 import type { IncomingMessage, ServerResponse } from "node:http";
 import type WebSocket from "ws";
-import type { DeviceManager } from "./sessions.js";
+import type { SessionManager } from "./sessions.js";
 import type { TokenManager } from "./tokens.js";
 export interface PendingTunnelRequest {
     res: ServerResponse;
@@ -10,23 +10,22 @@ export interface PendingTunnelRequest {
 export interface PendingTunnelWs {
     ws: WebSocket;
 }
-/** Parse lsh_tunnel cookie: "hostDeviceId:port:token" */
+/** Parse lsh_tunnel cookie: "sessionId:port:token" */
 export declare function parseTunnelCookie(req: IncomingMessage): {
-    hostDeviceId: string;
+    sessionId: string;
     port: number;
     token: string;
 } | null;
 export declare function parseTunnelPath(pathname: string): {
-    hostDeviceId: string;
+    sessionId: string;
     port: number;
     path: string;
 } | null;
-type ParsedTunnelTarget = {
-    hostDeviceId: string;
+export declare function handleTunnelRequest(req: IncomingMessage, res: ServerResponse, sessions: SessionManager, tokens: TokenManager, parsed: {
+    sessionId: string;
     port: number;
     path: string;
-};
-export declare function handleTunnelRequest(req: IncomingMessage, res: ServerResponse, sessions: DeviceManager, tokens: TokenManager, parsed: ParsedTunnelTarget, url: URL, preAuthToken?: string): Promise<void>;
+}, url: URL, preAuthToken?: string): Promise<void>;
 export declare function handleTunnelResponse(payload: {
     requestId: string;
     statusCode: number;
@@ -46,6 +45,9 @@ export declare function handleTunnelWsClose(payload: {
 }): void;
 export declare function registerTunnelWs(requestId: string, ws: WebSocket): void;
 export declare function removeTunnelWs(requestId: string): void;
-export declare function cleanupSessionTunnels(hostDeviceId: string): void;
-export declare function handleTunnelWsUpgrade(ws: WebSocket, parsed: ParsedTunnelTarget, url: URL, sessions: DeviceManager, tokens: TokenManager): Promise<void>;
-export {};
+export declare function cleanupSessionTunnels(sessionId: string): void;
+export declare function handleTunnelWsUpgrade(ws: WebSocket, parsed: {
+    sessionId: string;
+    port: number;
+    path: string;
+}, url: URL, sessions: SessionManager, tokens: TokenManager): Promise<void>;