@maudecode/talaria-web 0.0.0

package/dist/api/session-visibility.js

@@ -0,0 +1,51 @@
+/**
+ * Request-supplied session ids must belong to the request's profile (Python
+ * `_guard_request_session_visibility`): a top-level `session_id` in the query or
+ * JSON body of any `/api/` request answers 404 when the session exists under a
+ * different profile. Routes that carry ids under other keys guard themselves.
+ */
+import { os as orpcBase } from '@orpc/server';
+import { HttpError } from './router.js';
+import { isSafeSessionId } from '../sessions/session.js';
+/** Python `_request_session_visibility_exempt`: detail-load owns the mismatch so the frontend can switch profiles; import and chat/start (placeholder retag) run their own rules. */
+const EXEMPT_PROCEDURES = new Set(['session.get', 'session.import', 'chat.start']);
+/** Python `_session_id_visible_to_request_profile`: unknown or unsafe ids fall through to the handler's own error. */
+export function sessionIdVisibleToRequest(ctx, sid) {
+    return ctx.deps.sessions.sessionIdVisible(sid);
+}
+/** Pre-dispatch query guard for every `/api/` request (raw, SSE, and contract routes). */
+export function guardQuerySessionId(ctx) {
+    if (ctx.method === 'GET' && ctx.path === '/api/session')
+        return true;
+    if (sessionIdVisibleToRequest(ctx, ctx.query.get('session_id')))
+        return true;
+    ctx.json({ error: 'Session not found' }, { status: 404 });
+    return false;
+}
+/** Contract-route guard for the parsed input (query or JSON body) of every procedure. */
+export const requestSessionIdGuard = orpcBase.$context().middleware(({ context: { ctx }, path, next }, input) => {
+    if (!EXEMPT_PROCEDURES.has(path.join('.'))) {
+        const sid = input && typeof input === 'object' && !Array.isArray(input) ? input.session_id : undefined;
+        if (!sessionIdVisibleToRequest(ctx, sid))
+            throw new HttpError(404, 'Session not found');
+    }
+    return next();
+});
+/** Python `_stream_id_owner_session_id`: the live registry first, then the run journal once the run has finished. */
+export function streamOwnerSessionId(ctx, streamId) {
+    const id = streamId.trim();
+    if (!id)
+        return null;
+    const live = ctx.deps.registry.ownerSessionId(id);
+    if (live)
+        return live;
+    if (!isSafeSessionId(id))
+        return null;
+    return ctx.deps.journal.findRunSummary(id)?.session_id || null;
+}
+/** Python `_stream_id_visible_to_request_profile`: a stream is visible when its owner session is (or it has no known owner). */
+export function streamVisibleToRequest(ctx, streamId) {
+    const owner = streamOwnerSessionId(ctx, streamId);
+    return !owner || sessionIdVisibleToRequest(ctx, owner);
+}
+//# sourceMappingURL=session-visibility.js.map

package/dist/api/session-visibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-visibility.js","sourceRoot":"","sources":["../../src/api/session-visibility.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,EAAE,IAAI,QAAQ,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAmB,MAAM,aAAa,CAAA;AAExD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAExD,qLAAqL;AACrL,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC,CAAA;AAElF,sHAAsH;AACtH,MAAM,UAAU,yBAAyB,CAAC,GAAmB,EAAE,GAAY;IACzE,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;AAChD,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,mBAAmB,CAAC,GAAmB;IACrD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,IAAI,CAAA;IACpE,IAAI,yBAAyB,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5E,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACzD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAAC,QAAQ,EAAc,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAc,EAAE,EAAE;IACnI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;QACnI,IAAI,CAAC,yBAAyB,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;IACzF,CAAC;IACD,OAAO,IAAI,EAAE,CAAA;AACf,CAAC,CAAC,CAAA;AAEF,qHAAqH;AACrH,MAAM,UAAU,oBAAoB,CAAC,GAAmB,EAAE,QAAgB;IACxE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC1B,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAA;IACpB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,CAAA;IACjD,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IACrB,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAA;IACrC,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,UAAU,IAAI,IAAI,CAAA;AAChE,CAAC;AAED,gIAAgI;AAChI,MAAM,UAAU,sBAAsB,CAAC,GAAmB,EAAE,QAAgB;IAC1E,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACjD,OAAO,CAAC,KAAK,IAAI,yBAAyB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;AACxD,CAAC"}