opensoma 0.5.1 → 0.7.0

package/src/credential-manager.test.ts

@@ -66,6 +66,104 @@ describe('CredentialManager', () => {
     await expect(manager.getCredentials()).resolves.toBeNull()
   })
 
+  it('clearSessionState preserves username and password but wipes session fields', async () => {
+    const dir = await makeTempDir()
+    const manager = new CredentialManager(dir)
+
+    await manager.setCredentials({
+      sessionCookie: 'session-value',
+      csrfToken: 'csrf-value',
+      username: 'mentor@example.com',
+      password: 'secret-password',
+      tozName: 'Mentor One',
+      tozPhone: '010-1234-5678',
+      loggedInAt: '2026-04-09T00:00:00.000Z',
+    })
+
+    await manager.clearSessionState()
+
+    await expect(manager.getCredentials()).resolves.toEqual({
+      sessionCookie: '',
+      csrfToken: '',
+      username: 'mentor@example.com',
+      password: 'secret-password',
+      tozName: 'Mentor One',
+      tozPhone: '010-1234-5678',
+    })
+  })
+
+  it('clearSessionState removes the file when no recovery material is stored', async () => {
+    const dir = await makeTempDir()
+    const manager = new CredentialManager(dir)
+
+    await manager.setCredentials({
+      sessionCookie: 'session-value',
+      csrfToken: 'csrf-value',
+    })
+
+    await manager.clearSessionState()
+
+    await expect(manager.getCredentials()).resolves.toBeNull()
+  })
+
+  it('clearSessionState is a no-op when no credentials file exists', async () => {
+    const dir = await makeTempDir()
+    const manager = new CredentialManager(dir)
+
+    await expect(manager.clearSessionState()).resolves.toBeUndefined()
+    await expect(manager.getCredentials()).resolves.toBeNull()
+  })
+
+  it('setTozIdentity merges into existing credentials', async () => {
+    const dir = await makeTempDir()
+    const manager = new CredentialManager(dir)
+
+    await manager.setCredentials({
+      sessionCookie: 'session-value',
+      csrfToken: 'csrf-value',
+    })
+
+    await manager.setTozIdentity('Mentor One', '010-1234-5678')
+
+    await expect(manager.getCredentials()).resolves.toMatchObject({
+      sessionCookie: 'session-value',
+      csrfToken: 'csrf-value',
+      tozName: 'Mentor One',
+      tozPhone: '010-1234-5678',
+    })
+    await expect(manager.getTozIdentity()).resolves.toEqual({
+      name: 'Mentor One',
+      phone: '010-1234-5678',
+    })
+  })
+
+  it('setTozIdentity throws without SWMaestro credentials', async () => {
+    const dir = await makeTempDir()
+    const manager = new CredentialManager(dir)
+
+    await expect(manager.setTozIdentity('Mentor One', '010-1234-5678')).rejects.toThrow(/auth login/)
+  })
+
+  it('clearTozIdentity removes only toz fields', async () => {
+    const dir = await makeTempDir()
+    const manager = new CredentialManager(dir)
+
+    await manager.setCredentials({
+      sessionCookie: 'session-value',
+      csrfToken: 'csrf-value',
+      tozName: 'Mentor One',
+      tozPhone: '010-1234-5678',
+    })
+    await manager.clearTozIdentity()
+
+    const creds = await manager.getCredentials()
+    expect(creds?.tozName).toBeUndefined()
+    expect(creds?.tozPhone).toBeUndefined()
+    expect(creds?.sessionCookie).toBe('session-value')
+    expect(creds?.csrfToken).toBe('csrf-value')
+    await expect(manager.getTozIdentity()).resolves.toBeNull()
+  })
+
   it('preserves session credentials but drops the password when the encryption key is missing', async () => {
     const dir = await makeTempDir()
     const manager = new CredentialManager(dir)

package/src/credential-manager.ts

@@ -76,6 +76,56 @@ export class CredentialManager {
     await rm(this.encryptionKeyPath, { force: true })
   }
 
+  /**
+   * Wipe ephemeral session fields (sessionCookie, csrfToken, loggedInAt) while
+   * preserving long-term material (username, password, TOZ identity). Used when
+   * the server-side session expired but we still want automatic recovery on the
+   * next run via `recoverSession()`.
+   *
+   * No-op when no credentials file exists or no recovery material is stored.
+   */
+  async clearSessionState(): Promise<void> {
+    const current = await this.getCredentials()
+    if (!current) {
+      return
+    }
+
+    if (!current.username && !current.password && !current.tozName && !current.tozPhone) {
+      await this.remove()
+      return
+    }
+
+    await this.setCredentials({
+      sessionCookie: '',
+      csrfToken: '',
+      username: current.username,
+      password: current.password,
+      tozName: current.tozName,
+      tozPhone: current.tozPhone,
+    })
+  }
+
+  async setTozIdentity(name: string, phone: string): Promise<void> {
+    const existing = await this.getCredentials()
+    if (!existing) {
+      throw new Error('SWMaestro credentials not found. Run: opensoma auth login first.')
+    }
+    await this.setCredentials({ ...existing, tozName: name, tozPhone: phone })
+  }
+
+  async clearTozIdentity(): Promise<void> {
+    const existing = await this.getCredentials()
+    if (!existing) return
+    const { tozName: _name, tozPhone: _phone, ...rest } = existing
+    await this.setCredentials(rest)
+  }
+
+  async getTozIdentity(): Promise<{ name: string; phone: string } | null> {
+    const creds = await this.getCredentials()
+    if (!creds?.tozName || !creds?.tozPhone) return null
+    return { name: creds.tozName, phone: creds.tozPhone }
+  }
+
   private async hydrateCredentials(credentials: StoredCredentials): Promise<Credentials> {
     if (!credentials.encryptedPassword) {
       return credentials