pi-mega-compact 0.8.8 → 0.8.10

package/extensions/dashboard-server/api-contracts.ts

@@ -0,0 +1,96 @@
+/**
+ * @deprecated Import from `./api-contracts/index.js` (barrel) instead.
+ * This file is retained for backward compatibility. All types are re-exported
+ * from domain modules under `api-contracts/`.
+ *
+ * See: api-contracts/core.ts, snapshot.ts, multi-repo.ts, game.ts, infrastructure.ts
+ */
+
+// Re-export everything from the barrel
+export type {
+  // Core
+  HttpMethod,
+  EndpointDef,
+  SseCompactStart,
+  SseCompactEnd,
+  SseCompactTrigger,
+  SseCompactSkip,
+  SseTierChanged,
+  SseModelChanged,
+  SsePressureLifted,
+  SseCheckpointPersisted,
+  SseRecallInject,
+  SseAnchorsUpdated,
+  SseConfigUpdated,
+  SseConfigPreset,
+  SseCrewPresenceChanged,
+  SseCrewTurnChanged,
+  SseCrewBanditChosen,
+  // Snapshot
+  SnapshotResponse,
+  TriggerResponse,
+  CompressionTotalsResponse,
+  CompactHistoryEntry,
+  CompactionRequest,
+  CompactionResponse,
+  // Multi-repo
+  RepoListItem,
+  RepoSnapshotEntry,
+  RepoSnapshotMap,
+  IndexesIndexRow,
+  IndexesSummaryResponse,
+  IndexesDiffEntry,
+  DiffRequest,
+  SnapshotLike,
+  DiffResponse,
+  UpdateRepoConfigRequest,
+  // Game
+  GameConfig,
+  GameStateResponse,
+  GameRitualStage,
+  SseGameRitualStart,
+  SseGameRitualStage,
+  SseGameRitualEnd,
+  SseGameModeChanged,
+  SseGameRender,
+  // Infrastructure
+  InfraHealthResponse,
+  InfraPerfSampleResponse,
+  InfraRateLimitStatus,
+  InfraRateLimitResponse,
+  ContextLevelState,
+  TierOverrideState,
+  FallbackState,
+  RepeatInjectionState,
+  SupersedeGatingState,
+  MinHashBandState,
+  // Composite
+  SseEvent,
+  // Endpoints registry (Sprint A1)
+  VersionResponse,
+  IndexSummary,
+  IndexFallbackResponse,
+  ReposQuery,
+  ReposResponse,
+  SummaryResponse,
+  DriftSeverity,
+  DriftSignal,
+  RepoDrift,
+  DriftReportResponse,
+  ServerEntry,
+  ServersResponse,
+  PerfPercentile,
+  PerfAverage,
+  PerfLatest,
+  PerfCacheHit,
+  PerfDiag,
+  PerfQuery,
+  PerfResponse,
+  GameScoreRow,
+  GameScoresQuery,
+  AchievementRow,
+  GameStatePatch,
+  SseEndpointDef,
+} from './api-contracts/index.js';
+
+export { ENDPOINTS } from './api-contracts/index.js';

package/extensions/dashboard-server/auth.ts

@@ -0,0 +1,20 @@
+import { randomUUID } from "node:crypto";
+
+const CSRF_TOKENS = new Map<string, number>();
+export const CSRF_MAX_AGE_MS = 60 * 60 * 1000; // 60 min rotation
+
+export function generateCsrfToken(): string {
+	const token = randomUUID();
+	CSRF_TOKENS.set(token, Date.now());
+	return token;
+}
+
+export function isCsrfValid(token: string): boolean {
+	if (!CSRF_TOKENS.has(token)) return false;
+	const ts = CSRF_TOKENS.get(token) ?? 0;
+	if (Date.now() - ts > CSRF_MAX_AGE_MS) {
+		CSRF_TOKENS.delete(token);
+		return false;
+	}
+	return true;
+}