@linkshell/gateway 0.5.2 → 0.6.0

package/dist/gateway/src/tokens.d.ts

@@ -1,19 +0,0 @@
-import type { GatewayStateStore } from "./state-store.js";
-export declare class TokenManager {
-    private readonly store?;
-    private tokens;
-    private sessionToToken;
-    private cleanupTimer;
-    constructor(store?: GatewayStateStore | undefined);
-    hydrate(): Promise<void>;
-    register(deviceToken?: string): string;
-    bind(token: string, sessionId: string): boolean;
-    validate(token: string): boolean;
-    owns(token: string, sessionId: string): boolean;
-    ownsFresh(token: string, sessionId: string): Promise<boolean>;
-    getSessionIds(token: string): Set<string>;
-    getTokenForSession(sessionId: string): string | undefined;
-    private cleanup;
-    private persist;
-    destroy(): void;
-}

package/dist/gateway/src/tokens.js

@@ -1,151 +0,0 @@
-import { randomUUID } from "node:crypto";
-const CLEANUP_INTERVAL = 5 * 60_000;
-const SESSION_TTL = 7 * 24 * 60 * 60_000; // 7 days — prune stale bindings
-export class TokenManager {
-    store;
-    tokens = new Map();
-    sessionToToken = new Map();
-    cleanupTimer;
-    constructor(store) {
-        this.store = store;
-        this.cleanupTimer = setInterval(() => this.cleanup(), CLEANUP_INTERVAL);
-    }
-    async hydrate() {
-        if (!this.store)
-            return;
-        try {
-            const records = await this.store.loadTokens();
-            const now = Date.now();
-            for (const record of records) {
-                if (now - record.lastUsedAt > SESSION_TTL) {
-                    void this.store.deleteToken(record.token).catch(() => { });
-                    continue;
-                }
-                this.tokens.set(record.token, {
-                    token: record.token,
-                    sessionIds: new Set(record.sessionIds),
-                    createdAt: record.createdAt,
-                    lastUsedAt: record.lastUsedAt,
-                });
-                for (const sessionId of record.sessionIds) {
-                    this.sessionToToken.set(sessionId, record.token);
-                }
-            }
-        }
-        catch (err) {
-            process.stderr.write(`[gateway] token store hydrate failed, using memory only: ${err}\n`);
-        }
-    }
-    register(deviceToken) {
-        if (deviceToken && this.tokens.has(deviceToken)) {
-            const record = this.tokens.get(deviceToken);
-            record.lastUsedAt = Date.now();
-            this.persist(record);
-            return deviceToken;
-        }
-        const token = deviceToken || randomUUID();
-        this.tokens.set(token, {
-            token,
-            sessionIds: new Set(),
-            createdAt: Date.now(),
-            lastUsedAt: Date.now(),
-        });
-        this.persist(this.tokens.get(token));
-        return token;
-    }
-    bind(token, sessionId) {
-        const record = this.tokens.get(token);
-        if (!record)
-            return false;
-        record.sessionIds.add(sessionId);
-        record.lastUsedAt = Date.now();
-        this.sessionToToken.set(sessionId, token);
-        this.persist(record);
-        return true;
-    }
-    validate(token) {
-        const record = this.tokens.get(token);
-        if (!record)
-            return false;
-        record.lastUsedAt = Date.now();
-        this.persist(record);
-        return true;
-    }
-    owns(token, sessionId) {
-        const record = this.tokens.get(token);
-        if (!record)
-            return false;
-        record.lastUsedAt = Date.now();
-        this.persist(record);
-        return record.sessionIds.has(sessionId);
-    }
-    async ownsFresh(token, sessionId) {
-        if (this.owns(token, sessionId))
-            return true;
-        if (!this.store)
-            return false;
-        try {
-            const records = await this.store.loadTokens();
-            const now = Date.now();
-            for (const record of records) {
-                if (now - record.lastUsedAt > SESSION_TTL)
-                    continue;
-                if (record.token !== token)
-                    continue;
-                const next = {
-                    token: record.token,
-                    sessionIds: new Set(record.sessionIds),
-                    createdAt: record.createdAt,
-                    lastUsedAt: Date.now(),
-                };
-                this.tokens.set(record.token, next);
-                for (const sid of record.sessionIds) {
-                    this.sessionToToken.set(sid, record.token);
-                }
-                this.persist(next);
-                return next.sessionIds.has(sessionId);
-            }
-        }
-        catch (err) {
-            process.stderr.write(`[gateway] token store refresh failed: ${err}\n`);
-        }
-        return false;
-    }
-    getSessionIds(token) {
-        const record = this.tokens.get(token);
-        if (!record)
-            return new Set();
-        record.lastUsedAt = Date.now();
-        this.persist(record);
-        return record.sessionIds;
-    }
-    getTokenForSession(sessionId) {
-        return this.sessionToToken.get(sessionId);
-    }
-    cleanup() {
-        const now = Date.now();
-        for (const [token, record] of this.tokens) {
-            if (now - record.lastUsedAt > SESSION_TTL) {
-                for (const sid of record.sessionIds) {
-                    this.sessionToToken.delete(sid);
-                }
-                this.tokens.delete(token);
-                void this.store?.deleteToken(token).catch(() => { });
-            }
-        }
-    }
-    persist(record) {
-        void this.store?.saveToken({
-            token: record.token,
-            sessionIds: [...record.sessionIds],
-            createdAt: record.createdAt,
-            lastUsedAt: record.lastUsedAt,
-        }).catch((err) => {
-            process.stderr.write(`[gateway] token store save failed: ${err}\n`);
-        });
-    }
-    destroy() {
-        clearInterval(this.cleanupTimer);
-    }
-}
-//# sourceMappingURL=tokens.js.map

package/dist/gateway/src/tokens.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../../src/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC;AACpC,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,gCAAgC;AAS1E,MAAM,OAAO,YAAY;IAKM;IAJrB,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxC,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,YAAY,CAAiC;IAErD,YAA6B,KAAyB;QAAzB,UAAK,GAAL,KAAK,CAAoB;QACpD,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,WAAW,EAAE,CAAC;oBAC1C,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBAC1D,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE;oBAC5B,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,UAAU,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;oBACtC,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAC;gBACH,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBAC1C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4DAA4D,GAAG,IAAI,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,WAAoB;QAC3B,IAAI,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;YAC7C,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,IAAI,UAAU,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE;YACrB,KAAK;YACL,UAAU,EAAE,IAAI,GAAG,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,SAAiB;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,SAAiB;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,SAAiB;QAC9C,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,WAAW;oBAAE,SAAS;gBACpD,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK;oBAAE,SAAS;gBACrC,MAAM,IAAI,GAAG;oBACX,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,UAAU,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;oBACtC,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;iBACvB,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBACpC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACpC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC7C,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACnB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,GAAG,IAAI,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,aAAa,CAAC,KAAa;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,MAAM,CAAC,UAAU,CAAC;IAC3B,CAAC;IAED,kBAAkB,CAAC,SAAiB;QAClC,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAEO,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1C,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,WAAW,EAAE,CAAC;gBAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACpC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClC,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1B,KAAK,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,MAAmB;QACjC,KAAK,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;YAClC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,GAAG,IAAI,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/gateway/src/tunnel.d.ts

@@ -1,61 +0,0 @@
-import type { IncomingMessage, ServerResponse } from "node:http";
-import type WebSocket from "ws";
-import type { SessionManager } from "./sessions.js";
-import type { TokenManager } from "./tokens.js";
-export interface PendingTunnelRequest {
-    res: ServerResponse;
-    headersSent: boolean;
-    timeout: ReturnType<typeof setTimeout>;
-    tunnelCookie?: string;
-    sessionId: string;
-    port: number;
-    requestPath: string;
-}
-export interface PendingTunnelWs {
-    ws: WebSocket;
-}
-export declare function tokenFromTunnelCookie(req: IncomingMessage, sessionId: string, port: number): string | null;
-/** Parse lsh_tunnel cookie: "sessionId:port:token" */
-export declare function parseTunnelCookie(req: IncomingMessage): {
-    sessionId: string;
-    port: number;
-    token: string;
-} | null;
-export declare function parseTunnelPath(pathname: string): {
-    sessionId: string;
-    port: number;
-    path: string;
-} | null;
-export declare function hasTunnelReferer(req: IncomingMessage): boolean;
-export declare function shouldUseTunnelCookieFallback(req: IncomingMessage, pathname: string, isReservedPath?: (pathname: string) => boolean): boolean;
-export declare function mergeTunnelSetCookie(headers: Record<string, string | string[]>, tunnelCookie?: string): Record<string, string | string[]>;
-export declare function handleTunnelRequest(req: IncomingMessage, res: ServerResponse, sessions: SessionManager, tokens: TokenManager, parsed: {
-    sessionId: string;
-    port: number;
-    path: string;
-}, url: URL, preAuthToken?: string): Promise<void>;
-export declare function handleTunnelResponse(payload: {
-    requestId: string;
-    statusCode: number;
-    headers: Record<string, string>;
-    body: string;
-    isFinal: boolean;
-}): void;
-export declare function handleTunnelWsData(payload: {
-    requestId: string;
-    data: string;
-    isBinary: boolean;
-}): void;
-export declare function handleTunnelWsClose(payload: {
-    requestId: string;
-    code?: number;
-    reason?: string;
-}): void;
-export declare function registerTunnelWs(requestId: string, ws: WebSocket): void;
-export declare function removeTunnelWs(requestId: string): void;
-export declare function cleanupSessionTunnels(sessionId: string): void;
-export declare function handleTunnelWsUpgrade(ws: WebSocket, parsed: {
-    sessionId: string;
-    port: number;
-    path: string;
-}, url: URL, sessions: SessionManager, tokens: TokenManager, preAuthToken?: string): Promise<void>;