@minion-stack/shared 0.7.0 → 0.8.1

package/dist/gateway/connect-params.d.ts

@@ -0,0 +1,34 @@
+export interface ConnectClientInfo {
+    id: string;
+    displayName?: string;
+    version?: string;
+    platform?: string;
+    mode?: string;
+}
+export interface BuildConnectParamsInput {
+    /** Identifying info for this client (id, version, platform, …). */
+    client: ConnectClientInfo;
+    /** Connection role, e.g. "operator" | "node". */
+    role: string;
+    /** Requested scopes. Defaults to []. */
+    scopes?: string[];
+    /** Capability tags. Defaults to []. */
+    caps?: string[];
+    /** Shared-secret token (goes in `auth.token`). */
+    token?: string | null;
+    /** Shared-secret password (goes in `auth.password`). */
+    password?: string | null;
+    /** Hub-issued OIDC JWT for multi-tenant identity. */
+    jwt?: string | null;
+    /** User id for per-user RPC scoping. */
+    userId?: string | null;
+    /** Override the advertised min/max protocol (defaults to PROTOCOL_VERSION). */
+    minProtocol?: number;
+    maxProtocol?: number;
+}
+/**
+ * Build the params object for the `connect` request. Omits `auth`, `jwt`, and
+ * `userId` when not provided so the gateway sees a clean frame.
+ */
+export declare function buildConnectParams(input: BuildConnectParamsInput): Record<string, unknown>;
+//# sourceMappingURL=connect-params.d.ts.map

package/dist/gateway/connect-params.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-params.d.ts","sourceRoot":"","sources":["../../src/gateway/connect-params.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,mEAAmE;IACnE,MAAM,EAAE,iBAAiB,CAAC;IAC1B,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,uCAAuC;IACvC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,qDAAqD;IACrD,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiB1F"}

package/dist/gateway/connect-params.js

@@ -0,0 +1,34 @@
+// Shared builder for the WebSocket `connect` handshake params (R8 of
+// specs/2026-05-26-auth-token-simplification.md).
+//
+// The gateway protocol carries auth in the `connect` request params, not in the
+// frame types — so every client (hub, site, paperclip) hand-rolled the same
+// object shape inside its `onChallenge` callback (protocol version, role,
+// scopes, auth.token, userId). This centralizes that shape so protocol-version
+// bumps and field renames happen in one place. Returns `Record<string, unknown>`
+// to drop straight into `GatewayClientOptions.onChallenge`.
+import { PROTOCOL_VERSION } from "./client.js";
+/**
+ * Build the params object for the `connect` request. Omits `auth`, `jwt`, and
+ * `userId` when not provided so the gateway sees a clean frame.
+ */
+export function buildConnectParams(input) {
+    const auth = {};
+    if (input.token)
+        auth.token = input.token;
+    if (input.password)
+        auth.password = input.password;
+    const hasAuth = auth.token !== undefined || auth.password !== undefined;
+    return {
+        minProtocol: input.minProtocol ?? PROTOCOL_VERSION,
+        maxProtocol: input.maxProtocol ?? PROTOCOL_VERSION,
+        client: input.client,
+        role: input.role,
+        scopes: input.scopes ?? [],
+        caps: input.caps ?? [],
+        ...(hasAuth ? { auth } : {}),
+        ...(input.jwt ? { jwt: input.jwt } : {}),
+        ...(input.userId ? { userId: input.userId } : {}),
+    };
+}
+//# sourceMappingURL=connect-params.js.map

package/dist/gateway/connect-params.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-params.js","sourceRoot":"","sources":["../../src/gateway/connect-params.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,kDAAkD;AAClD,EAAE;AACF,gFAAgF;AAChF,4EAA4E;AAC5E,0EAA0E;AAC1E,+EAA+E;AAC/E,iFAAiF;AACjF,4DAA4D;AAE5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAgC/C;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAA8B;IAC/D,MAAM,IAAI,GAA0C,EAAE,CAAC;IACvD,IAAI,KAAK,CAAC,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1C,IAAI,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC;IAExE,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,gBAAgB;QAClD,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,gBAAgB;QAClD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;QAC1B,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;QACtB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5B,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC"}

package/dist/gateway/connect-params.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=connect-params.test.d.ts.map

package/dist/gateway/connect-params.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-params.test.d.ts","sourceRoot":"","sources":["../../src/gateway/connect-params.test.ts"],"names":[],"mappings":""}

package/dist/gateway/connect-params.test.js

@@ -0,0 +1,40 @@
+import { describe, it, expect } from 'vitest';
+import { buildConnectParams } from './connect-params.js';
+import { PROTOCOL_VERSION } from './client.js';
+const client = { id: 'minion-control-ui', version: '1.0', platform: 'web' };
+describe('buildConnectParams', () => {
+    it('defaults protocol to PROTOCOL_VERSION and scopes/caps to []', () => {
+        const p = buildConnectParams({ client, role: 'operator' });
+        expect(p.minProtocol).toBe(PROTOCOL_VERSION);
+        expect(p.maxProtocol).toBe(PROTOCOL_VERSION);
+        expect(p.scopes).toEqual([]);
+        expect(p.caps).toEqual([]);
+        expect(p.role).toBe('operator');
+    });
+    it('includes auth.token only when a token is provided', () => {
+        expect(buildConnectParams({ client, role: 'operator' }).auth).toBeUndefined();
+        const p = buildConnectParams({ client, role: 'operator', token: 'tok' });
+        expect(p.auth).toEqual({ token: 'tok' });
+    });
+    it('carries password, jwt and userId through when present', () => {
+        const p = buildConnectParams({
+            client,
+            role: 'operator',
+            password: 'pw',
+            jwt: 'jwt-abc',
+            userId: 'user-1',
+            scopes: ['operator.read'],
+        });
+        expect(p.auth).toEqual({ password: 'pw' });
+        expect(p.jwt).toBe('jwt-abc');
+        expect(p.userId).toBe('user-1');
+        expect(p.scopes).toEqual(['operator.read']);
+    });
+    it('omits jwt/userId/auth for empty-string and null inputs', () => {
+        const p = buildConnectParams({ client, role: 'node', token: '', jwt: null, userId: null });
+        expect(p.auth).toBeUndefined();
+        expect('jwt' in p).toBe(false);
+        expect('userId' in p).toBe(false);
+    });
+});
+//# sourceMappingURL=connect-params.test.js.map

package/dist/gateway/connect-params.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-params.test.js","sourceRoot":"","sources":["../../src/gateway/connect-params.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,MAAM,GAAG,EAAE,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAc,EAAE,CAAC;AAErF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,GAAG,kBAAkB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9E,MAAM,CAAC,GAAG,kBAAkB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAG,kBAAkB,CAAC;YAC3B,MAAM;YACN,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,IAAI;YACd,GAAG,EAAE,SAAS;YACd,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,CAAC,eAAe,CAAC;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,kBAAkB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/gateway/index.d.ts

@@ -2,6 +2,7 @@ export * from './types.js';
 export * from './protocol.js';
 export * from './connection.js';
 export * from './client.js';
+export * from './connect-params.js';
 export * from './cache-events.js';
 export * from './secrets.js';
 export * from './shells.js';

package/dist/gateway/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/gateway/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/gateway/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC"}

package/dist/gateway/index.js

@@ -2,6 +2,7 @@ export * from './types.js';
 export * from './protocol.js';
 export * from './connection.js';
 export * from './client.js';
+export * from './connect-params.js';
 export * from './cache-events.js';
 export * from './secrets.js';
 export * from './shells.js';

package/dist/gateway/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/gateway/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/gateway/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC"}

package/dist/utils/uuid.d.ts

@@ -1,2 +1,2 @@
-export declare function uuid(): string;
+export declare const uuid: () => string;
 //# sourceMappingURL=uuid.d.ts.map

package/dist/utils/uuid.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uuid.d.ts","sourceRoot":"","sources":["../../src/utils/uuid.ts"],"names":[],"mappings":"AAAA,wBAAgB,IAAI,IAAI,MAAM,CAM7B"}
+{"version":3,"file":"uuid.d.ts","sourceRoot":"","sources":["../../src/utils/uuid.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,IAAI,QAAO,MAA6B,CAAC"}

package/dist/utils/uuid.js

@@ -1,9 +1,4 @@
-export function uuid() {
-    if (typeof crypto !== 'undefined' && crypto.randomUUID)
-        return crypto.randomUUID();
-    return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, (c) => {
-        const r = (Math.random() * 16) | 0;
-        return (c === 'x' ? r : (r & 0x3) | 0x8).toString(16);
-    });
-}
+// ponytail: crypto.randomUUID is native in Node 15.7+ and all browser secure
+// contexts (https + localhost). No fallback needed.
+export const uuid = () => crypto.randomUUID();
 //# sourceMappingURL=uuid.js.map

package/dist/utils/uuid.js.map

@@ -1 +1 @@
-{"version":3,"file":"uuid.js","sourceRoot":"","sources":["../../src/utils/uuid.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,IAAI;IAClB,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;IACnF,OAAO,sCAAsC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACnE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"uuid.js","sourceRoot":"","sources":["../../src/utils/uuid.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,oDAAoD;AACpD,MAAM,CAAC,MAAM,IAAI,GAAG,GAAW,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minion-stack/shared",
-  "version": "0.7.0",
+  "version": "0.8.1",
   "description": "Shared gateway protocol types and utilities for the Minion platform.",
   "license": "MIT",
   "repository": {