@yadsh/dsh-qa-surface 0.15.7 → 0.17.0

package/lib/chat-sharing/native-fence.js

@@ -0,0 +1,120 @@
+export function qaNativeEndpointDenied(endpoint) {
+    const normalized = decodeURIComponent(endpoint).replace(/^\//u, "");
+    // QA accounts are an application identity, whereas the Host's other APIs
+    // authenticate the deployment operator. An unknown endpoint fails closed.
+    if (normalized.startsWith("qaIntegrations/")) {
+        // These installed integration-card methods resolve the QA token's own
+        // principal. Keep the explicit method list so future operator APIs fail closed.
+        const method = normalized.slice("qaIntegrations/".length);
+        return ![
+            "describe",
+            "providers",
+            "list",
+            "managedServiceCredentials",
+            "credentialSource",
+            "serviceBoundary",
+            "serviceHealth",
+            ...[
+                "Bitrix24",
+                "Gitlab",
+                "Confluence",
+                "Teamcity",
+                "Jira",
+                "Testit",
+                "Weblate",
+            ].flatMap((provider) => [
+                `get${provider}`,
+                `put${provider}Credential`,
+                `test${provider}`,
+                `patch${provider}Policy`,
+                `disconnect${provider}`,
+            ]),
+            "bitrix24Instances",
+            "gitlabInstances",
+            "confluenceSites",
+            "teamcityServer",
+            "jiraSites",
+            "testitInstances",
+            "weblateInstances",
+        ].includes(method);
+    }
+    // Replies to Host-wide waterfalls have no QA identity either. All approval
+    // decisions must use the tokenized owner-only QA operations.
+    return normalized.split("/")[0] !== "qaSurface";
+}
+/** Native operator APIs carry no QA identity. Accounts use the QA transport. */
+export function installQaNativeFence(ctx, enabled) {
+    const gateway = ctx.get("typertGateway");
+    if (gateway === undefined)
+        throw new Error("QA accounts require the Typert gateway boundary.");
+    const invoke = gateway.invoke;
+    const stream = gateway.stream;
+    const open = gateway.wireStream.open;
+    // Only Connection can attest a cookie role and the peer minted from it.
+    // Older Hosts without this capability retain the closed account boundary.
+    const connection = ctx.get("connection");
+    const operatorPeer = (peer) => peer !== undefined && connection?.isOperatorPeer?.(peer) === true;
+    const check = (request) => {
+        if (enabled() &&
+            !operatorPeer(request.peer) &&
+            qaNativeEndpointDenied(request.namespace + "/" + request.method))
+            throw new Error("QA account authentication is required through the QA chat API.");
+    };
+    gateway.invoke = async function (request) {
+        check(request);
+        return invoke.call(this, request);
+    };
+    gateway.stream = async function (request) {
+        check(request);
+        return stream.call(this, request);
+    };
+    const wire = gateway.wireStream;
+    wire.open = async function (endpoint, payload, uplink, peer, signal) {
+        if (enabled() &&
+            !operatorPeer(peer) &&
+            endpoint !== "$events" &&
+            qaNativeEndpointDenied(endpoint))
+            throw new Error("QA account authentication is required through the QA chat API.");
+        const source = await open.call(this, endpoint, payload, uplink, peer, signal);
+        if (endpoint !== "$events")
+            return source;
+        return (async function* () {
+            for await (const frame of source) {
+                // Remote notifications are Host-wide and have no account token. The
+                // authenticated QA control/follow streams replace them for this surface.
+                if (enabled() && !operatorPeer(peer)) {
+                    if (typeof frame !== "object" ||
+                        frame === null ||
+                        !("type" in frame) ||
+                        frame.type !== "ready")
+                        continue;
+                    yield { ...frame, host: { home: "" } };
+                    continue;
+                }
+                yield frame;
+            }
+        })();
+    };
+    const stopHttp = ctx.on("connection/request", async (request, response, next) => {
+        const pathname = decodeURIComponent(new URL(request.url ?? "/", "http://localhost").pathname);
+        const api = pathname.indexOf("/api/");
+        if (enabled() &&
+            connection?.isOperatorRequest?.(request) !== true &&
+            api >= 0 &&
+            pathname.slice(api + 5) !== "qa-chat-upload" &&
+            pathname.slice(api + 5) !== "remote.mux" &&
+            qaNativeEndpointDenied(pathname.slice(api + 5))) {
+            response.writeHead(403, { "Cache-Control": "no-store" });
+            response.end("QA account authentication is required through the QA chat API.");
+            return;
+        }
+        await next();
+    });
+    return () => {
+        stopHttp();
+        gateway.invoke = invoke;
+        gateway.stream = stream;
+        wire.open = open;
+    };
+}
+//# sourceMappingURL=native-fence.js.map

package/lib/chat-sharing/native-fence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-fence.js","sourceRoot":"","sources":["../../src/chat-sharing/native-fence.ts"],"names":[],"mappings":"AAgBA,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpE,yEAAyE;IACzE,0EAA0E;IAC1E,IAAI,UAAU,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7C,sEAAsE;QACtE,gFAAgF;QAChF,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC1D,OAAO,CAAC;YACN,UAAU;YACV,WAAW;YACX,MAAM;YACN,2BAA2B;YAC3B,kBAAkB;YAClB,iBAAiB;YACjB,eAAe;YACf,GAAG;gBACD,UAAU;gBACV,QAAQ;gBACR,YAAY;gBACZ,UAAU;gBACV,MAAM;gBACN,QAAQ;gBACR,SAAS;aACV,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;gBACtB,MAAM,QAAQ,EAAE;gBAChB,MAAM,QAAQ,YAAY;gBAC1B,OAAO,QAAQ,EAAE;gBACjB,QAAQ,QAAQ,QAAQ;gBACxB,aAAa,QAAQ,EAAE;aACxB,CAAC;YACF,mBAAmB;YACnB,iBAAiB;YACjB,iBAAiB;YACjB,gBAAgB;YAChB,WAAW;YACX,iBAAiB;YACjB,kBAAkB;SACnB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IACD,2EAA2E;IAC3E,6DAA6D;IAC7D,OAAO,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC;AAClD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,oBAAoB,CAClC,GAAY,EACZ,OAAsB;IAEtB,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,eAAe,CAA8B,CAAC;IACtE,IAAI,OAAO,KAAK,SAAS;QACvB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;IACrC,wEAAwE;IACxE,0EAA0E;IAC1E,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAK1B,CAAC;IACd,MAAM,YAAY,GAAG,CAAC,IAAa,EAAW,EAAE,CAC9C,IAAI,KAAK,SAAS,IAAI,UAAU,EAAE,cAAc,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IACpE,MAAM,KAAK,GAAG,CAAC,OAA4B,EAAE,EAAE;QAC7C,IACE,OAAO,EAAE;YACT,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC;YAC3B,sBAAsB,CAAC,OAAO,CAAC,SAAS,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;YAEhE,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACN,CAAC,CAAC;IACF,OAAO,CAAC,MAAM,GAAG,KAAK,WAAW,OAAO;QACtC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC;IACF,OAAO,CAAC,MAAM,GAAG,KAAK,WAAW,OAAO;QACtC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,OAAO,CAAC,UAAmC,CAAC;IACzD,IAAI,CAAC,IAAI,GAAG,KAAK,WAAW,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;QACjE,IACE,OAAO,EAAE;YACT,CAAC,YAAY,CAAC,IAAI,CAAC;YACnB,QAAQ,KAAK,SAAS;YACtB,sBAAsB,CAAC,QAAQ,CAAC;YAEhC,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAC5B,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,MAAM,EACN,IAAI,EACJ,MAAM,CACP,CAAC;QACF,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAC1C,OAAO,CAAC,KAAK,SAAS,CAAC;YACrB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACjC,oEAAoE;gBACpE,yEAAyE;gBACzE,IAAI,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,IACE,OAAO,KAAK,KAAK,QAAQ;wBACzB,KAAK,KAAK,IAAI;wBACd,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;wBAClB,KAAK,CAAC,IAAI,KAAK,OAAO;wBAEtB,SAAS;oBACX,MAAM,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC;oBACvC,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE,CACrB,oBAAoB,EACpB,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QAChC,MAAM,QAAQ,GAAG,kBAAkB,CACjC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CACzD,CAAC;QACF,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,IACE,OAAO,EAAE;YACT,UAAU,EAAE,iBAAiB,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI;YACjD,GAAG,IAAI,CAAC;YACR,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,gBAAgB;YAC5C,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,YAAY;YACxC,sBAAsB,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAC/C,CAAC;YACD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;YACzD,QAAQ,CAAC,GAAG,CACV,gEAAgE,CACjE,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CACF,CAAC;IACF,OAAO,GAAG,EAAE;QACV,QAAQ,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;QACxB,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC"}

package/lib/chat-sharing/resources.js

@@ -0,0 +1,57 @@
+import path from "node:path";
+import { SessionId } from "@deepseek-ai/dsh-session/types";
+import { artifactsOfToolResult } from "../client/chat-artifacts.js";
+/** Paths reach recipients only through the chat's sources or reported outputs. */
+export function qaChatPublishedFile(ctx, id, requested, sourceAllowed) {
+    const session = ctx.sessions.get(SessionId(id));
+    const cwd = session?.header.cwd;
+    if (session === undefined || cwd === undefined)
+        return false;
+    const target = path.resolve(cwd, requested);
+    if (sourceAllowed(id, target))
+        return true;
+    const calls = new Map();
+    for (const event of session.snapshotEvents()) {
+        if (event.type === "user/message") {
+            const attachments = ctx.get("attachments");
+            if (event.data.content.some((block) => {
+                if (block.type !== "file")
+                    return false;
+                const hostPath = attachments?.fileHostPath?.(block.attachment);
+                return (hostPath !== undefined && path.resolve(cwd, hostPath) === target);
+            }))
+                return true;
+        }
+        if (event.type === "tool/call")
+            calls.set(String(event.data.callId), event.data.name);
+        if (event.type !== "tool/result" || event.data.error !== undefined)
+            continue;
+        const name = calls.get(String(event.data.message.source.callId));
+        if (name === undefined)
+            continue;
+        const output = event.data.message.content
+            .map((part) => (part.type === "text" ? part.text : ""))
+            .join("\n");
+        if (artifactsOfToolResult(name, output).some((file) => path.resolve(cwd, file.path) === target))
+            return true;
+    }
+    return false;
+}
+export function qaChatAttachmentPath(ctx, id, attachmentId) {
+    const session = ctx.sessions.get(SessionId(id));
+    const attachments = ctx.get("attachments");
+    for (const event of session?.snapshotEvents() ?? []) {
+        if (event.type !== "user/message")
+            continue;
+        for (const block of event.data.content) {
+            if (block.type !== "file" ||
+                String(block.attachment.attachmentId) !== attachmentId)
+                continue;
+            const filePath = attachments?.fileHostPath?.(block.attachment);
+            if (filePath !== undefined)
+                return filePath;
+        }
+    }
+    throw new Error("This attachment is unavailable in the chat.");
+}
+//# sourceMappingURL=resources.js.map

package/lib/chat-sharing/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../src/chat-sharing/resources.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CACjC,GAAY,EACZ,EAAU,EACV,SAAiB,EACjB,aAAoD;IAEpD,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC;IAChC,IAAI,OAAO,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC5C,IAAI,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CACwB,CAAC;YAClE,IACE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBAChC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;oBAAE,OAAO,KAAK,CAAC;gBACxC,MAAM,QAAQ,GAAG,WAAW,EAAE,YAAY,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC/D,OAAO,CACL,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,MAAM,CACjE,CAAC;YACJ,CAAC,CAAC;gBAEF,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAC5B,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;YAChE,SAAS;QACX,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO;aACtC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aACtD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,IACE,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CACtC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM,CAClD;YAED,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,GAAY,EACZ,EAAU,EACV,YAAoB;IAEpB,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CACwB,CAAC;IAClE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC;QACpD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,SAAS;QAC5C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,IACE,KAAK,CAAC,IAAI,KAAK,MAAM;gBACrB,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,YAAY;gBAEtD,SAAS;YACX,MAAM,QAAQ,GAAG,WAAW,EAAE,YAAY,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/D,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,QAAQ,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;AACjE,CAAC"}

package/lib/chat-sharing/store.js

@@ -0,0 +1,199 @@
+import { SqliteDatabase } from "@yadsh/dsh-plugin-kit/sqlite";
+/** Separate schema: installing sharing does not upgrade the accounts CLI's DB. */
+export class QaChatSharingStore {
+    accounts;
+    storage;
+    constructor(filePath, accounts) {
+        this.accounts = accounts;
+        this.storage = new SqliteDatabase(filePath, [
+            {
+                version: 1,
+                up: `
+      CREATE TABLE grants (session_id TEXT NOT NULL, owner_id TEXT NOT NULL,
+        user_id TEXT NOT NULL, mode TEXT NOT NULL CHECK(mode IN ('read','collaborate')),
+        revision INTEGER NOT NULL, PRIMARY KEY(session_id,user_id));
+      CREATE TABLE authors (session_id TEXT NOT NULL, request_id TEXT NOT NULL,
+        user_id TEXT NOT NULL, display_name TEXT NOT NULL, grant_revision INTEGER,
+        PRIMARY KEY(session_id,request_id));
+      CREATE TABLE revisions (session_id TEXT PRIMARY KEY, revision INTEGER NOT NULL);
+    `,
+            },
+        ]);
+    }
+    access(token, sessionId) {
+        const accounts = this.accounts();
+        const actor = accounts.currentUser(token);
+        return this.accessForActor(accounts, actor, sessionId);
+    }
+    accessForActor(accounts, actor, sessionId) {
+        const ownerId = accounts.ownerIdOf(sessionId);
+        const owner = ownerId === undefined ? undefined : accounts.accountById(ownerId);
+        if (owner === undefined)
+            throw new Error("Chat access is unavailable.");
+        if (actor.id === owner.id)
+            return {
+                sessionId,
+                ownerId: owner.id,
+                ownerName: owner.displayName,
+                actorId: actor.id,
+                mode: "owner",
+                revision: 0,
+            };
+        const grant = this.storage.db
+            .prepare("SELECT mode, revision FROM grants WHERE session_id=? AND owner_id=? AND user_id=?")
+            .get(sessionId, owner.id, actor.id);
+        if (grant === undefined)
+            throw new Error("Chat access is unavailable.");
+        return {
+            sessionId,
+            ownerId: owner.id,
+            ownerName: owner.displayName,
+            actorId: actor.id,
+            mode: grant.mode,
+            revision: grant.revision,
+        };
+    }
+    owner(token, sessionId) {
+        const access = this.access(token, sessionId);
+        if (access.mode !== "owner")
+            throw new Error("This action requires the chat owner.");
+        return access;
+    }
+    write(token, sessionId) {
+        const access = this.access(token, sessionId);
+        if (access.mode === "read")
+            throw new Error("This chat is read-only.");
+        return access;
+    }
+    /** Exact address lookup after ownership, never an account directory. */
+    set(token, sessionId, email, mode) {
+        this.storage.transaction(() => {
+            const access = this.owner(token, sessionId);
+            if (mode !== null && mode !== "read" && mode !== "collaborate")
+                throw new Error("Invalid chat access mode.");
+            const user = this.accounts().findUser(email);
+            if (user === undefined ||
+                (mode !== null && this.accounts().accountById(user.id) === undefined) ||
+                user.id === access.ownerId)
+                throw new Error("The recipient account is unavailable.");
+            this.storage.db
+                .prepare(`INSERT INTO revisions VALUES (?,1)
+        ON CONFLICT(session_id) DO UPDATE SET revision=revision+1`)
+                .run(sessionId);
+            const { revision } = this.storage.db
+                .prepare("SELECT revision FROM revisions WHERE session_id=?")
+                .get(sessionId);
+            if (mode === null)
+                this.storage.db
+                    .prepare("DELETE FROM grants WHERE session_id=? AND user_id=?")
+                    .run(sessionId, user.id);
+            else
+                this.storage.db
+                    .prepare(`INSERT INTO grants VALUES (?,?,?,?,?)
+        ON CONFLICT(session_id,user_id) DO UPDATE SET owner_id=excluded.owner_id,
+        mode=excluded.mode, revision=excluded.revision`)
+                    .run(sessionId, access.ownerId, user.id, mode, revision);
+        });
+        return this.grants(token, sessionId);
+    }
+    grants(token, sessionId) {
+        const owner = this.owner(token, sessionId);
+        const rows = this.storage.db
+            .prepare("SELECT user_id,mode FROM grants WHERE session_id=? AND owner_id=?")
+            .all(sessionId, owner.ownerId);
+        return rows.flatMap((row) => {
+            // Ownership was checked above. Disabled recipients stay in the owner's
+            // management list so their durable grants can still be revoked.
+            const user = this.accounts().accountById(row.user_id, true);
+            return user === undefined
+                ? []
+                : [
+                    {
+                        userId: user.id,
+                        email: user.email,
+                        displayName: user.displayName,
+                        mode: row.mode,
+                    },
+                ];
+        });
+    }
+    visible(token) {
+        // One synchronous authorization batch: refresh the account provider and
+        // verify the principal once, while reading every grant from current storage.
+        const accounts = this.accounts();
+        const actor = accounts.currentUser(token);
+        const rows = this.storage.db
+            .prepare("SELECT session_id FROM grants WHERE user_id=?")
+            .all(actor.id);
+        const ids = new Set([
+            ...accounts.ownedSessionIds(token),
+            ...rows.map((row) => row.session_id),
+        ]);
+        return [...ids].flatMap((id) => {
+            try {
+                return [this.accessForActor(accounts, actor, id)];
+            }
+            catch {
+                return [];
+            }
+        });
+    }
+    revalidate(token, previous) {
+        const current = this.access(token, previous.sessionId);
+        if (current.actorId !== previous.actorId ||
+            current.ownerId !== previous.ownerId ||
+            current.mode !== previous.mode ||
+            current.revision !== previous.revision)
+            throw new Error("Chat access changed during the operation.");
+        return current;
+    }
+    recordAuthor(token, access, requestId) {
+        this.revalidate(token, access);
+        const actor = this.accounts().currentUser(token);
+        this.storage.db
+            .prepare("INSERT INTO authors VALUES (?,?,?,?,?)")
+            .run(access.sessionId, requestId, actor.id, actor.displayName, access.mode === "owner" ? null : access.revision);
+    }
+    authors(token, sessionId) {
+        this.access(token, sessionId);
+        return this.storage.db
+            .prepare(`SELECT request_id AS requestId, user_id AS userId,
+      display_name AS displayName FROM authors WHERE session_id=?`)
+            .all(sessionId);
+    }
+    requestActor(sessionId, requestId) {
+        return this.storage.db
+            .prepare("SELECT user_id AS userId, grant_revision AS revision FROM authors WHERE session_id=? AND request_id=?")
+            .get(sessionId, requestId);
+    }
+    /** Copy only immutable attribution for the native prefix, never memberships. */
+    forkAuthors(sourceId, targetId, requests) {
+        this.storage.transaction(() => {
+            for (const request of new Set(requests))
+                this.storage.db
+                    .prepare(`INSERT INTO authors
+        SELECT ?,request_id,user_id,display_name,NULL FROM authors WHERE session_id=? AND request_id=?`)
+                    .run(targetId, sourceId, request);
+        });
+    }
+    dropSession(id) {
+        this.storage.transaction(() => {
+            this.storage.db.prepare("DELETE FROM grants WHERE session_id=?").run(id);
+            this.storage.db.prepare("DELETE FROM authors WHERE session_id=?").run(id);
+            this.storage.db
+                .prepare(`INSERT INTO revisions VALUES (?,1)
+        ON CONFLICT(session_id) DO UPDATE SET revision=revision+1`)
+                .run(id);
+        });
+    }
+    actorStillAllowed(sessionId, userId, revision) {
+        const ownerId = this.accounts().ownerIdOf(sessionId);
+        return (this.accounts().accountById(userId) !== undefined &&
+            ownerId !== undefined &&
+            this.accounts().accountById(ownerId) !== undefined &&
+            this.storage.db
+                .prepare("SELECT 1 FROM grants WHERE session_id=? AND owner_id=? AND user_id=? AND mode='collaborate' AND revision=?")
+                .get(sessionId, ownerId, userId, revision) !== undefined);
+    }
+}
+//# sourceMappingURL=store.js.map

package/lib/chat-sharing/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/chat-sharing/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAS9D,kFAAkF;AAClF,MAAM,OAAO,kBAAkB;IAIV,QAAQ;IAHlB,OAAO,CAAiB;IACjC,YACE,QAAgB,EACC,QAA0B;wBAA1B,QAAQ;QAEzB,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,CAAC,QAAQ,EAAE;YAC1C;gBACE,OAAO,EAAE,CAAC;gBACV,EAAE,EAAE;;;;;;;;KAQP;aACE;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,SAAiB;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IAEO,cAAc,CACpB,QAAoB,EACpB,KAA4C,EAC5C,SAAiB;QAEjB,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,KAAK,GACT,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACxE,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE;YACvB,OAAO;gBACL,SAAS;gBACT,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,SAAS,EAAE,KAAK,CAAC,WAAW;gBAC5B,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE;aAC1B,OAAO,CACN,mFAAmF,CACpF;aACA,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CACgB,CAAC;QACrD,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACxE,OAAO;YACL,SAAS;YACT,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,SAAS,EAAE,KAAK,CAAC,WAAW;YAC5B,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAa,EAAE,SAAiB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YACzB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,KAAa,EAAE,SAAiB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACvE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,wEAAwE;IACxE,GAAG,CACD,KAAa,EACb,SAAiB,EACjB,KAAa,EACb,IAAuB;QAEvB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC5C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,aAAa;gBAC5D,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7C,IACE,IAAI,KAAK,SAAS;gBAClB,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC;gBACrE,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,OAAO;gBAE1B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,IAAI,CAAC,OAAO,CAAC,EAAE;iBACZ,OAAO,CACN;kEACwD,CACzD;iBACA,GAAG,CAAC,SAAS,CAAC,CAAC;YAClB,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE;iBACjC,OAAO,CAAC,mDAAmD,CAAC;iBAC5D,GAAG,CAAC,SAAS,CAAyB,CAAC;YAC1C,IAAI,IAAI,KAAK,IAAI;gBACf,IAAI,CAAC,OAAO,CAAC,EAAE;qBACZ,OAAO,CAAC,qDAAqD,CAAC;qBAC9D,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;;gBAE3B,IAAI,CAAC,OAAO,CAAC,EAAE;qBACZ,OAAO,CACN;;uDAE2C,CAC5C;qBACA,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,SAAiB;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE;aACzB,OAAO,CACN,mEAAmE,CACpE;aACA,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAG5B,CAAC;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YAC1B,uEAAuE;YACvE,gEAAgE;YAChE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC5D,OAAO,IAAI,KAAK,SAAS;gBACvB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE;wBACE,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,IAAI,EAAE,GAAG,CAAC,IAAI;qBACf;iBACF,CAAC;QACR,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,wEAAwE;QACxE,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE;aACzB,OAAO,CAAC,+CAA+C,CAAC;aACxD,GAAG,CAAC,KAAK,CAAC,EAAE,CAAwC,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC;YAClB,GAAG,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC;YAClC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC;SACrC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YAC7B,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,KAAa,EAAE,QAAsB;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvD,IACE,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;YACpC,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;YACpC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;YAC9B,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;YAEtC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,YAAY,CAAC,KAAa,EAAE,MAAoB,EAAE,SAAiB;QACjE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,EAAE;aACZ,OAAO,CAAC,wCAAwC,CAAC;aACjD,GAAG,CACF,MAAM,CAAC,SAAS,EAChB,SAAS,EACT,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,WAAW,EACjB,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CACjD,CAAC;IACN,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,SAAiB;QACtC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE;aACnB,OAAO,CACN;kEAC0D,CAC3D;aACA,GAAG,CAAC,SAAS,CAA8B,CAAC;IACjD,CAAC;IAED,YAAY,CACV,SAAiB,EACjB,SAAiB;QAEjB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE;aACnB,OAAO,CACN,uGAAuG,CACxG;aACA,GAAG,CAAC,SAAS,EAAE,SAAS,CAC8B,CAAC;IAC5D,CAAC;IAED,gFAAgF;IAChF,WAAW,CACT,QAAgB,EAChB,QAAgB,EAChB,QAA2B;QAE3B,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,MAAM,OAAO,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC;gBACrC,IAAI,CAAC,OAAO,CAAC,EAAE;qBACZ,OAAO,CACN;uGAC2F,CAC5F;qBACA,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,EAAU;QACpB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,OAAO,CAAC,EAAE;iBACZ,OAAO,CACN;kEACwD,CACzD;iBACA,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CACf,SAAiB,EACjB,MAAc,EACd,QAAgB;QAEhB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACrD,OAAO,CACL,IAAI,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,SAAS;YACjD,OAAO,KAAK,SAAS;YACrB,IAAI,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,SAAS;YAClD,IAAI,CAAC,OAAO,CAAC,EAAE;iBACZ,OAAO,CACN,4GAA4G,CAC7G;iBACA,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,SAAS,CAC3D,CAAC;IACJ,CAAC;CACF"}