@opengeni/core 3.0.1 → 3.1.2

package/dist/{chunk-ZYCNLYGH.js → chunk-OMJFIIWK.js}

@@ -14,7 +14,7 @@ import {
   editableArtifactStateHash,
   editableArtifactTransactionId,
   validateEditableArtifactActor
-} from "./chunk-VCZFFEPB.js";
+} from "./chunk-7T2SZ7BI.js";
 
 // src/editable-artifact-live/application.ts
 import { EDITABLE_ARTIFACT_KERNEL_VERSION_MAX_BYTES } from "@opengeni/contracts/editable-artifacts";
@@ -94,7 +94,8 @@ var EditableArtifactApplication = class {
       artifactId: artifact.id,
       modality: artifact.modality,
       actor: input.actor,
-      allowEdit: input.allowEdit
+      allowEdit: input.allowEdit,
+      ...input.sourceSessionAuthority ? { sourceSessionAuthority: input.sourceSessionAuthority } : {}
     });
   }
   openLive(input) {
@@ -748,6 +749,12 @@ import {
 import { decodeCommittedTransactionSummary } from "@opengeni/contracts/editable-artifact-committed-transaction";
 import { decodeEditableArtifactSerializedCommit } from "@opengeni/contracts/editable-artifact-serialized-commit";
 
+// src/editable-artifact-live/ticket.ts
+import { AccessGrant } from "@opengeni/contracts";
+import { ExternalActorContinuation } from "@opengeni/contracts/external-identities";
+import { z } from "zod";
+import { deflateRawSync, inflateRawSync } from "zlib";
+
 // src/editable-artifact-live/types.ts
 import { EDITABLE_ARTIFACT_LIVE_WIRE_VERSION } from "@opengeni/contracts/editable-artifact-live";
 var EDITABLE_ARTIFACT_LIVE_PROTOCOL_VERSION = EDITABLE_ARTIFACT_LIVE_WIRE_VERSION;
@@ -756,6 +763,14 @@ var EDITABLE_ARTIFACT_LIVE_PROTOCOL_VERSION = EDITABLE_ARTIFACT_LIVE_WIRE_VERSIO
 var DEFAULT_TTL_MS = 3e4;
 var MAX_TTL_MS = 6e4;
 var MAX_TOKEN_BYTES = 4096;
+var SOURCE_AUTHORITY_MARKER = ".ogs1.";
+var COMPRESSED_SOURCE_AUTHORITY_MARKER = ".ogs2.";
+var MAX_SOURCE_AUTHORITY_BYTES = 16 * 1024;
+var SourceSessionAuthority = z.object({
+  sessionId: z.string().uuid(),
+  grant: AccessGrant,
+  externalContinuation: ExternalActorContinuation.optional()
+}).strict();
 var EditableArtifactLiveTicketAuthority = class {
   constructor(dependencies) {
     this.dependencies = dependencies;
@@ -788,7 +803,19 @@ var EditableArtifactLiveTicketAuthority = class {
         "Editable artifact read permission denied"
       );
     }
-    const token = this.dependencies.tokens.randomOpaqueToken();
+    const sourceSessionAuthority = input.sourceSessionAuthority ? SourceSessionAuthority.parse(input.sourceSessionAuthority) : void 0;
+    if (sourceSessionAuthority) {
+      assertSourceSessionAuthority(sourceSessionAuthority, scope, actor);
+    }
+    const sourceBytes = sourceSessionAuthority ? Buffer.from(JSON.stringify(sourceSessionAuthority)) : null;
+    if (sourceBytes && sourceBytes.byteLength > MAX_SOURCE_AUTHORITY_BYTES) {
+      throw new EditableArtifactLiveError(
+        "invalid_ticket",
+        "Live ticket source authority is too large"
+      );
+    }
+    const nonce = this.dependencies.tokens.randomOpaqueToken();
+    const token = sourceBytes ? `${nonce}${COMPRESSED_SOURCE_AUTHORITY_MARKER}${deflateRawSync(sourceBytes).toString("base64url")}` : nonce;
     assertToken(token);
     const tokenDigest = await this.dependencies.tokens.digestOpaqueToken(token);
     assertDigest(tokenDigest);
@@ -831,6 +858,10 @@ var EditableArtifactLiveTicketAuthority = class {
       );
     }
     validateTicketRecord(record);
+    const sourceSessionAuthority = decodeSourceSessionAuthority(input.token);
+    if (sourceSessionAuthority) {
+      assertSourceSessionAuthority(sourceSessionAuthority, record.scope, record.actor);
+    }
     if (Date.parse(record.expiresAt) <= this.dependencies.clock.now().getTime()) {
       throw new EditableArtifactLiveError("ticket_expired", "Live ticket has expired", {
         retryable: true
@@ -848,7 +879,8 @@ var EditableArtifactLiveTicketAuthority = class {
     return Object.freeze({
       ...record,
       scope: editableArtifactScope(record.scope),
-      actor: Object.freeze({ ...record.actor })
+      actor: Object.freeze({ ...record.actor }),
+      ...sourceSessionAuthority ? { sourceSessionAuthority } : {}
     });
   }
 };
@@ -890,6 +922,34 @@ function validateTicketRecord(record) {
   assertIsoTimestamp(record.issuedAt, "ticket issuedAt");
   assertIsoTimestamp(record.expiresAt, "ticket expiresAt");
 }
+function decodeSourceSessionAuthority(token) {
+  const compressed = token.includes(COMPRESSED_SOURCE_AUTHORITY_MARKER);
+  const marker = compressed ? COMPRESSED_SOURCE_AUTHORITY_MARKER : SOURCE_AUTHORITY_MARKER;
+  const separator = token.lastIndexOf(marker);
+  if (separator === -1) return void 0;
+  try {
+    return SourceSessionAuthority.parse(
+      JSON.parse(
+        (compressed ? inflateRawSync(Buffer.from(token.slice(separator + marker.length), "base64url"), {
+          maxOutputLength: MAX_SOURCE_AUTHORITY_BYTES
+        }) : Buffer.from(token.slice(separator + marker.length), "base64url")).toString("utf8")
+      )
+    );
+  } catch {
+    throw new EditableArtifactLiveError(
+      "invalid_ticket",
+      "Live ticket source authority is invalid"
+    );
+  }
+}
+function assertSourceSessionAuthority(authority, scope, actor) {
+  if (authority.grant.accountId !== scope.accountId || authority.grant.workspaceId !== scope.workspaceId || authority.grant.subjectId !== actor.subjectId) {
+    throw new EditableArtifactLiveError(
+      "invalid_ticket",
+      "Live ticket source scope does not match"
+    );
+  }
+}
 function assertModality(value) {
   if (value !== "document" && value !== "spreadsheet" && value !== "presentation") {
     throw new TypeError("ticket modality is invalid");
@@ -908,6 +968,7 @@ function assertDigest(value) {
 
 // src/editable-artifact-live/server.ts
 var textEncoder2 = new TextEncoder();
+var SOURCE_SESSION_LIVE_LEASE_MS = 15e3;
 var strictDecoder = new TextDecoder("utf-8", { fatal: true });
 var DEFAULT_MAX_CLIENT_FRAME_BYTES = 5 * 1024 * 1024 + 64 * 1024;
 var DEFAULT_MAX_OUTBOUND_FRAME_BYTES = 8 * 1024 * 1024 + 64 * 1024;
@@ -960,7 +1021,8 @@ var EditableArtifactLiveServer = class {
       streamEpoch,
       resume: input.resume,
       sink: input.sink,
-      ...input.signal === void 0 ? {} : { parentSignal: input.signal }
+      ...input.signal === void 0 ? {} : { parentSignal: input.signal },
+      ...input.authorizeSourceSession ? { authorizeSourceSession: input.authorizeSourceSession } : {}
     });
     await session.start();
     return session;
@@ -974,6 +1036,8 @@ var EditableArtifactLiveSessionImpl = class {
   dependencies;
   options;
   ticket;
+  authorizeSourceSession;
+  sourceSessionLeaseExpiresAt;
   resume;
   sink;
   abort = new AbortController();
@@ -1006,6 +1070,8 @@ var EditableArtifactLiveSessionImpl = class {
     this.dependencies = input.dependencies;
     this.options = input.options;
     this.ticket = input.ticket;
+    this.authorizeSourceSession = input.authorizeSourceSession;
+    this.sourceSessionLeaseExpiresAt = input.ticket.sourceSessionAuthority ? Date.parse(input.ticket.issuedAt) + SOURCE_SESSION_LIVE_LEASE_MS : null;
     this.artifactId = input.ticket.artifactId;
     this.modality = input.ticket.modality;
     this.streamEpoch = input.streamEpoch;
@@ -1026,6 +1092,11 @@ var EditableArtifactLiveSessionImpl = class {
   async start() {
     try {
       this.assertOpen();
+      if (this.sourceSessionLeaseExpiresAt !== null) {
+        void this.runSourceSessionLease().catch((error) => {
+          if (!this.abort.signal.aborted) void this.fail(error);
+        });
+      }
       this.authorizationRevision = await this.requireRead();
       this.assertOpen();
       const releaseHints = await this.dependencies.hints.subscribe({
@@ -1249,6 +1320,7 @@ var EditableArtifactLiveSessionImpl = class {
     this.resolveClosed(close);
   }
   assertOpen() {
+    this.assertSourceSessionLease();
     if (this.closedValue) {
       throw new EditableArtifactLiveError("closed", "Live session is closed");
     }
@@ -1597,6 +1669,20 @@ var EditableArtifactLiveSessionImpl = class {
         scope: this.ticket.scope,
         artifactId: this.artifactId,
         actor: this.ticket.actor,
+        ...this.ticket.sourceSessionAuthority ? {
+          authorizeCommit: async (transaction2) => {
+            this.assertOpen();
+            if (!this.authorizeSourceSession || !await this.withBoundedAuthorization(
+              (signal) => this.authorizeSourceSession(this.ticket, "edit", transaction2, signal)
+            )) {
+              throw new EditableArtifactLiveError(
+                "permission_changed",
+                "Editable artifact source session permission changed"
+              );
+            }
+            this.assertOpen();
+          }
+        } : {},
         request: {
           intentBytes: frame.intentBytes.slice(),
           requestHash: frame.requestHash
@@ -1687,17 +1773,66 @@ var EditableArtifactLiveSessionImpl = class {
     return decision.revision;
   }
   async checkPermission(permission) {
-    const decision = await this.dependencies.authorization.authorize({
-      scope: this.ticket.scope,
-      artifactId: this.artifactId,
-      actor: this.ticket.actor,
-      permission
+    const decision = await this.withBoundedAuthorization(async (signal) => {
+      if (this.ticket.sourceSessionAuthority) {
+        if (!this.authorizeSourceSession || !await this.authorizeSourceSession(this.ticket, permission, void 0, signal)) {
+          return Object.freeze({ allowed: false, revision: this.authorizationRevision });
+        }
+      }
+      signal.throwIfAborted();
+      return await this.dependencies.authorization.authorize({
+        scope: this.ticket.scope,
+        artifactId: this.artifactId,
+        actor: this.ticket.actor,
+        permission
+      });
     });
     if (permission === "edit" && !this.ticket.allowEdit) {
       return Object.freeze({ ...decision, allowed: false });
     }
     return decision;
   }
+  async withBoundedAuthorization(operation) {
+    this.assertSourceSessionLease();
+    const timeout = new AbortController();
+    const signal = AbortSignal.any([this.abort.signal, timeout.signal]);
+    if (this.sourceSessionLeaseExpiresAt !== null) {
+      const budget = this.sourceSessionLeaseExpiresAt - this.dependencies.clock.now().getTime();
+      void this.dependencies.scheduler.sleep(budget, signal).then(
+        () => timeout.abort(
+          new EditableArtifactLiveError("ticket_expired", "Live authorization lease expired", {
+            retryable: true
+          })
+        ),
+        () => void 0
+      );
+    }
+    try {
+      const result = await awaitLiveAuthorization(operation(signal), signal);
+      this.assertOpen();
+      return result;
+    } finally {
+      timeout.abort();
+    }
+  }
+  async runSourceSessionLease() {
+    while (!this.abort.signal.aborted && this.sourceSessionLeaseExpiresAt !== null) {
+      const remaining = this.sourceSessionLeaseExpiresAt - this.dependencies.clock.now().getTime();
+      if (remaining <= 0) {
+        await this.close("ticket_expired");
+        return;
+      }
+      await this.dependencies.scheduler.sleep(remaining, this.abort.signal);
+    }
+  }
+  assertSourceSessionLease() {
+    if (this.sourceSessionLeaseExpiresAt !== null && this.dependencies.clock.now().getTime() >= this.sourceSessionLeaseExpiresAt) {
+      void this.close("ticket_expired");
+      throw new EditableArtifactLiveError("ticket_expired", "Source session lease expired", {
+        retryable: true
+      });
+    }
+  }
   async sendBarrier() {
     if (!this.sentStateHash)
       throw new EditableArtifactLiveError("durable_gap", "Bootstrap has no state boundary");
@@ -1712,6 +1847,7 @@ var EditableArtifactLiveSessionImpl = class {
   }
   async send(frame) {
     if (this.closedValue) return;
+    this.assertSourceSessionLease();
     const bytes = estimateFrameBytes(frame);
     if (bytes > this.options.maxOutboundFrameBytes) {
       throw new EditableArtifactLiveError(
@@ -1769,9 +1905,18 @@ var EditableArtifactLiveSessionImpl = class {
       )
     );
     while (!this.abort.signal.aborted) {
-      await this.dependencies.scheduler.sleep(tick, this.abort.signal);
+      const leaseRemaining = this.sourceSessionLeaseExpiresAt === null ? tick : this.sourceSessionLeaseExpiresAt - this.dependencies.clock.now().getTime();
+      if (leaseRemaining <= 0) {
+        await this.close("ticket_expired");
+        return;
+      }
+      await this.dependencies.scheduler.sleep(Math.min(tick, leaseRemaining), this.abort.signal);
       if (this.abort.signal.aborted || this.closedValue) return;
       const now = this.dependencies.clock.now().getTime();
+      if (this.sourceSessionLeaseExpiresAt !== null && now >= this.sourceSessionLeaseExpiresAt) {
+        await this.close("ticket_expired");
+        return;
+      }
       if (this.oldestInFlightAt !== 0 && now - this.oldestInFlightAt >= this.options.ackTimeoutMs) {
         await this.enqueue(() => this.requireResync("slow_client", this.targetHead));
         return;
@@ -1805,6 +1950,27 @@ var EditableArtifactLiveSessionImpl = class {
     await this.close("transport_error");
   }
 };
+function awaitLiveAuthorization(operation, signal) {
+  return new Promise((resolve, reject) => {
+    const abort = () => {
+      signal.removeEventListener("abort", abort);
+      reject(signal.reason);
+    };
+    operation.then(
+      (value) => {
+        signal.removeEventListener("abort", abort);
+        if (signal.aborted) reject(signal.reason);
+        else resolve(value);
+      },
+      (error) => {
+        signal.removeEventListener("abort", abort);
+        reject(error);
+      }
+    );
+    if (signal.aborted) abort();
+    else signal.addEventListener("abort", abort, { once: true });
+  });
+}
 function decodeClientFrame(bytes, artifactId, streamEpoch, protocolVersion) {
   let value;
   try {
@@ -2269,4 +2435,4 @@ export {
   encodeEditableArtifactLiveMutationWireFrame,
   encodeEditableArtifactLiveServerWireFrame
 };
-//# sourceMappingURL=chunk-ZYCNLYGH.js.map
+//# sourceMappingURL=chunk-OMJFIIWK.js.map