@sockethub/data-layer 1.0.0-alpha.12 → 1.0.0-alpha.13

package/README.md

@@ -56,7 +56,7 @@ encryption/decryption and session-based isolation.
 **Dependencies:**
 
 - Redis server (6.0+)
-- `@sockethub/crypto` for encryption
+- `@sockethub/util` (`@sockethub/util/crypto`) for encryption
 - `@sockethub/schemas` for type definitions
 
 ## API Documentation

package/dist/credentials-store.d.ts

@@ -0,0 +1,88 @@
+import type { CredentialsObject } from "@sockethub/schemas";
+import { type Redis } from "ioredis";
+import SecureStore from "secure-store-redis";
+import type { RedisConfig } from "./types.js";
+/**
+ * Creates or returns a shared Redis connection for CredentialsStore instances.
+ * This prevents connection exhaustion by reusing a single connection across
+ * all credential storage operations.
+ *
+ * @param config - Redis configuration
+ * @returns Shared Redis connection instance
+ */
+export declare function createCredentialsRedisConnection(config: RedisConfig): Redis;
+/**
+ * Resets the shared credentials Redis connection. Used primarily for testing.
+ */
+export declare function resetSharedCredentialsRedisConnection(): Promise<void>;
+export interface CredentialsStoreInterface {
+    get(actor: string, credentialsHash?: string, options?: CredentialsValidationOptions): Promise<CredentialsObject | undefined>;
+    save(actor: string, creds: CredentialsObject): Promise<number>;
+}
+export interface CredentialsValidationOptions {
+    /**
+     * Enables stricter checks used only when trying to attach a second socket
+     * session to an already-running actor-scoped platform instance.
+     */
+    validateSessionShare?: boolean;
+}
+export declare class CredentialsMismatchError extends Error {
+    constructor(message: string);
+}
+export declare class CredentialsNotShareableError extends Error {
+    constructor(message: string);
+}
+export declare function verifySecureStore(config: RedisConfig): Promise<void>;
+/**
+ * Secure, encrypted storage for user credentials with session-based isolation.
+ *
+ * Provides automatic encryption/decryption of credential objects stored in Redis,
+ * ensuring that sensitive authentication data is never stored in plaintext.
+ * Each session gets its own isolated credential store.
+ *
+ * @example
+ * ```typescript
+ * const store = new CredentialsStore('session123', secret, redisConfig);
+ *
+ * // Store credentials
+ * await store.save('user@example.com', {
+ *   username: 'user',
+ *   password: 'secret',
+ *   server: 'irc.freenode.net'
+ * });
+ *
+ * // Retrieve credentials
+ * const creds = await store.get('user@example.com', credentialsHash);
+ * ```
+ */
+export declare class CredentialsStore implements CredentialsStoreInterface {
+    readonly uid: string;
+    store: SecureStore;
+    objectHash: (o: unknown) => string;
+    private readonly log;
+    /**
+     * Creates a new CredentialsStore instance.
+     *
+     * @param parentId - Unique identifier for the parent instance (e.g. server ID)
+     * @param sessionId - Client session identifier for credential isolation
+     * @param secret - 32-character encryption secret for credential security
+     * @param redisConfig - Redis connection configuration
+     * @throws Error if secret is not exactly 32 characters
+     */
+    constructor(parentId: string, sessionId: string, secret: string, redisConfig: RedisConfig);
+    initCrypto(): void;
+    initSecureStore(secret: string, redisConfig: RedisConfig): void;
+    /**
+     * Gets the credentials for a given actor ID.
+     * @param actor
+     * @param credentialsHash - Optional hash to validate credentials.
+     *   If undefined, validation is skipped.
+     */
+    get(actor: string, credentialsHash?: string, options?: CredentialsValidationOptions): Promise<CredentialsObject>;
+    /**
+     * Saves the credentials for a given actor ID
+     * @param actor
+     * @param creds
+     */
+    save(actor: string, creds: CredentialsObject): Promise<number>;
+}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+import { CredentialsMismatchError, CredentialsNotShareableError, CredentialsStore, type CredentialsStoreInterface, type CredentialsValidationOptions, resetSharedCredentialsRedisConnection } from "./credentials-store.js";
+import { getRedisConnectionCount, resetSharedRedisConnection } from "./job-base.js";
+import { JobQueue } from "./job-queue.js";
+import { JobWorker, type JobWorkerOptions } from "./job-worker.js";
+export * from "./types.js";
+import type { RedisConfig } from "./types.js";
+declare function redisCheck(config: RedisConfig): Promise<void>;
+export { redisCheck, JobQueue, JobWorker, type JobWorkerOptions, CredentialsStore, CredentialsMismatchError, CredentialsNotShareableError, getRedisConnectionCount, resetSharedRedisConnection, resetSharedCredentialsRedisConnection, type CredentialsValidationOptions, type CredentialsStoreInterface, };