pryv 3.2.0 → 3.3.1

package/README.md

@@ -57,6 +57,7 @@ Other distributions available:
 
 - Socket.IO: [NPM package](https://www.npmjs.com/package/@pryv/socket.io), [README](https://github.com/pryv/lib-js/tree/master/components/pryv-socket.io#readme)
 - Monitor: [NPM package](https://www.npmjs.com/package/@pryv/monitor), [README](https://github.com/pryv/lib-js/tree/master/components/pryv-monitor#readme)
+- CMC (Cross-account Messaging & Consent) client helpers: [NPM package](https://www.npmjs.com/package/@pryv/cmc), [README](https://github.com/pryv/lib-js/tree/master/components/pryv-cmc#readme)
 
 
 ### Quick example
@@ -677,6 +678,7 @@ The project is structured as a monorepo with components (a.k.a. workspaces in NP
 - `pryv`: the library
 - `pryv-socket.io`: Socket.IO add-on
 - `pryv-monitor`: Monitor add-on
+- `pryv-cmc`: CMC (Cross-account Messaging & Consent) client helpers
 
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pryv",
-  "version": "3.2.0",
+  "version": "3.3.1",
   "description": "Pryv JavaScript library",
   "keywords": [
     "Pryv",

package/src/index.d.ts

@@ -1069,10 +1069,24 @@ declare module 'pryv' {
     token: string | null;
   };
 
+  /**
+   * Decomposed form of an APIEndpoint, returned by
+   * `pryv.utils.decomposeAPIEndpoint`. `host` is the canonical platform
+   * host (no `<username>.` subdomain prefix in subdomain-style
+   * deployments) — the same identity cross-account features (CMC
+   * counterparty slugs, etc.) key on.
+   */
+  export type DecomposedAPIEndpoint = {
+    token: string | null;
+    username: string | null;
+    host: string;
+  };
+
   export const utils: {
     isBrowser(): boolean;
     extractTokenAndAPIEndpoint(apiEndpoint: string): TokenAndAPIEndpoint;
     buildAPIEndpoint(tokenAndAPI: TokenAndAPIEndpoint): string;
+    decomposeAPIEndpoint(apiEndpoint: string, serviceInfoApi: string): DecomposedAPIEndpoint;
     browserIsMobileOrTablet(navigator?: string | Navigator): boolean;
     cleanURLFromPrYvParams(url: string): string;
     getQueryParamsFromURL(url: string): KeyValue;
@@ -1107,6 +1121,7 @@ declare module 'pryv' {
       isBrowser(): boolean;
       extractTokenAndAPIEndpoint(apiEndpoint: string): TokenAndAPIEndpoint;
       buildAPIEndpoint(tokenAndAPI: TokenAndAPIEndpoint): string;
+      decomposeAPIEndpoint(apiEndpoint: string, serviceInfoApi: string): DecomposedAPIEndpoint;
       browserIsMobileOrTablet(navigator?: string | Navigator): boolean;
       cleanURLFromPrYvParams(url: string): string;
       getQueryParamsFromURL(url: string): KeyValue;

package/src/index.js

@@ -13,7 +13,6 @@
  * @property {pryv.MfaRequiredError} MfaRequiredError - Thrown by Service.login when the platform returns an mfaToken instead of a token. Carries `.mfaToken`.
  * @property {pryv.StaleAccessIdError} StaleAccessIdError - Plan 66: thrown when a Pryv.io server rejects an `accesses.update` / `accesses.delete` with a 409 stale-resource. Refetch + retry.
  * @property {Object} ERRORS - Catalogue of Pryv API error ids (mirrors open-pryv.io/components/errors)
- * @property {pryv.cmc} cmc - Cross-account Messaging & Consent helpers (slug + stream-id builders + parsers)
  */
 module.exports = {
   Service: require('./Service'),
@@ -25,6 +24,5 @@ module.exports = {
   MfaRequiredError: require('./lib/MfaRequiredError'),
   StaleAccessIdError: require('./lib/StaleAccessIdError'),
   ERRORS: require('./lib/errorIds'),
-  cmc: require('./cmc'),
   version: require('../package.json').version
 };

package/src/utils.js

@@ -127,6 +127,76 @@ const utils = module.exports = {
     return res[1] + '://' + tokenAndAPI.token + '@' + res[2];
   },
 
+  /**
+   * Decompose a Pryv apiEndpoint into `{ token, username, host }` using
+   * the platform's `service.info.api` URL template to invert whichever
+   * username placement the platform uses (subdomain vs path-style).
+   *
+   * Pryv apiEndpoints follow one of two URL shapes (the difference is
+   * platform-defined, encoded in `service.info.api`):
+   *
+   *   subdomain  template `https://{username}.<domain>/`
+   *              endpoint `https://<token>@<username>.<domain>/`
+   *   path-style template `https://<host>/{username}/`
+   *              endpoint `https://<token>@<host>/<username>/`
+   *
+   * Returns the **canonical platform host** (no `<username>.` subdomain
+   * prefix in subdomain mode) — the identity cross-account features
+   * (e.g. CMC counterparty slugs) key on, regardless of which user the
+   * endpoint belongs to.
+   *
+   * `token` and `username` are null when the endpoint carries no token /
+   * when the endpoint shape doesn't match the template; `host` is
+   * best-effort in that case.
+   *
+   * @memberof pryv.utils
+   * @param {APIEndpoint} apiEndpoint  e.g. 'https://t0k3n@alice.pryv.me/'
+   * @param {string} serviceInfoApi    e.g. 'https://{username}.pryv.me/'
+   *                                   from /service/info → field `api`.
+   * @returns {DecomposedAPIEndpoint}
+   *
+   * @example
+   *   const conn = new pryv.Connection(apiEndpoint);
+   *   const info = await conn.service.info();
+   *   const me = pryv.utils.decomposeAPIEndpoint(apiEndpoint, info.api);
+   *   // → { token: 't0k3n', username: 'alice', host: 'pryv.me' }
+   */
+  decomposeAPIEndpoint: function (apiEndpoint, serviceInfoApi) {
+    const { token, endpoint } = utils.extractTokenAndAPIEndpoint(apiEndpoint);
+    const tplIdx = serviceInfoApi.indexOf('{username}');
+    if (tplIdx < 0) {
+      // Template doesn't carry {username} — operator-defined, can't decompose.
+      let host = '';
+      try { host = new URL(endpoint).host; } catch (_e) {}
+      return { token, username: null, host };
+    }
+    const tplPrefix = serviceInfoApi.slice(0, tplIdx);
+    const tplSuffix = serviceInfoApi.slice(tplIdx + '{username}'.length);
+    if (!endpoint.startsWith(tplPrefix) || !endpoint.endsWith(tplSuffix)) {
+      let host = '';
+      try { host = new URL(endpoint).host; } catch (_e) {}
+      return { token, username: null, host };
+    }
+    const username = endpoint.slice(tplPrefix.length, endpoint.length - tplSuffix.length);
+    // Disambiguate by where {username} sits in the template:
+    //   - subdomain  → prefix ends with `://` (username right after scheme)
+    //   - path-style → prefix has more after `://` (host already in prefix)
+    const isSubdomainTemplate = /:\/\/$/.test(tplPrefix);
+    let host;
+    if (isSubdomainTemplate) {
+      // tplSuffix starts with the domain (e.g. '.pryv.me/')
+      host = tplSuffix.replace(/^\.+/, '').replace(/\/+$/, '');
+    } else {
+      // path-style — host is in the prefix's URL
+      try {
+        host = new URL(tplPrefix).host;
+      } catch (_e) {
+        host = '';
+      }
+    }
+    return { token, username, host };
+  },
+
   /**
    * Check if the browser is running on a mobile device or tablet
    * @memberof pryv.utils
@@ -251,6 +321,18 @@ utils.buildPryvApiEndpoint = utils.buildAPIEndpoint;
  * @typedef {string} APIEndpoint
  */
 
+/**
+ * Decomposed form of an APIEndpoint, returned by `decomposeAPIEndpoint`.
+ * `token` and `username` are `null` when the endpoint doesn't carry a
+ * token / doesn't match the `service.info.api` template. `host` is the
+ * canonical platform host (no `<username>.` subdomain prefix in
+ * subdomain-style deployments).
+ * @typedef {Object} DecomposedAPIEndpoint
+ * @property {string|null} token
+ * @property {string|null} username
+ * @property {string} host
+ */
+
 /**
  * Common Meta are returned by each standard call on the API https://api.pryv.com/reference/#in-method-results
  * @typedef {Object} CommonMeta

package/test/utils.test.js

@@ -103,4 +103,41 @@ describe('[UTLX] utils', function () {
     expect(err.data.currentSerial).to.equal(2);
     expect(err.name).to.equal('StaleAccessIdError');
   });
+
+  describe('[UTLM] decomposeAPIEndpoint', function () {
+    it('[UTLMA] subdomain template — host strips the {username}. prefix', function () {
+      const r = pryv.utils.decomposeAPIEndpoint(
+        'https://t0k3n@alice.pryv.me/',
+        'https://{username}.pryv.me/'
+      );
+      expect(r).to.eql({ token: 't0k3n', username: 'alice', host: 'pryv.me' });
+    });
+
+    it('[UTLMB] path-style template — host is the literal hostname[:port]', function () {
+      const r = pryv.utils.decomposeAPIEndpoint(
+        'http://t0k3n@127.0.0.1:3000/alice/',
+        'http://127.0.0.1:3000/{username}/'
+      );
+      expect(r).to.eql({ token: 't0k3n', username: 'alice', host: '127.0.0.1:3000' });
+    });
+
+    it('[UTLMC] returns username:null when the endpoint doesn\'t match the template', function () {
+      const r = pryv.utils.decomposeAPIEndpoint(
+        'https://t0k3n@somewhere.else.com/',
+        'https://{username}.pryv.me/'
+      );
+      expect(r.username).to.equal(null);
+      expect(r.token).to.equal('t0k3n');
+    });
+
+    it('[UTLMD] returns token:null when endpoint carries no token', function () {
+      const r = pryv.utils.decomposeAPIEndpoint(
+        'https://alice.pryv.me/',
+        'https://{username}.pryv.me/'
+      );
+      expect(r.token).to.equal(null);
+      expect(r.username).to.equal('alice');
+      expect(r.host).to.equal('pryv.me');
+    });
+  });
 });

package/src/cmc.js

@@ -1,348 +0,0 @@
-/**
- * @license
- * [BSD-3-Clause](https://github.com/pryv/lib-js/blob/master/LICENSE)
- */
-
-/**
- * CMC (Cross-account Messaging & Consent) client-side helpers.
- *
- * Mirrors the server plugin's slug + stream-id helpers so app code can
- * build stream-ids deterministically without depending on the server's
- * private modules. See server-side `components/cmc/src/{slug,constants}.ts`.
- *
- * Stream-id model:
- *   :_cmc:                                  reserved root
- *   :_cmc:inbox                             one-shot lifecycle (cross-app)
- *   :_cmc:apps:<app-code>:[<path>:]chats:<counterparty-slug>
- *   :_cmc:apps:<app-code>:[<path>:]collectors:<counterparty-slug>
- *
- * `counterparty-slug` = `<username>--<host-slug>` where host-slug is the
- * host with `.` replaced by `-`.
- *
- * @memberof pryv
- * @namespace pryv.cmc
- */
-
-// --- Constants ---
-// All :_cmc:* identifiers compose from NS. If the namespace is ever
-// rebranded (e.g. to ':_xchg:' or similar), changing NS alone updates
-// every constant + every helper that builds a stream-id.
-const NS = ':_cmc:';
-const NS_INBOX = NS + 'inbox';
-const NS_APPS = NS + 'apps';
-const NS_INTERNAL = NS + '_internal';
-const NS_INTERNAL_RETRIES = NS_INTERNAL + ':retries';
-
-const ET_REQUEST = 'consent/request-cmc';
-const ET_ACCEPT = 'consent/accept-cmc';
-const ET_REFUSE = 'consent/refuse-cmc';
-const ET_REVOKE = 'consent/revoke-cmc';
-const ET_CHAT = 'message/chat-cmc';
-const ET_SYSTEM_ALERT = 'notification/alert-cmc';
-const ET_SYSTEM_ACK = 'notification/ack-cmc';
-const ET_SYSTEM_SCOPE_REQUEST = 'consent/scope-request-cmc';
-const ET_SYSTEM_SCOPE_UPDATE = 'consent/scope-update-cmc';
-
-const EVENT_TYPES_LIFECYCLE = [ET_REQUEST, ET_ACCEPT, ET_REFUSE, ET_REVOKE];
-const EVENT_TYPES_CHAT = [ET_CHAT];
-const EVENT_TYPES_SYSTEM = [
-  ET_SYSTEM_ALERT,
-  ET_SYSTEM_ACK,
-  ET_SYSTEM_SCOPE_REQUEST,
-  ET_SYSTEM_SCOPE_UPDATE
-];
-
-// --- Slug helpers ---
-
-const SEPARATOR = '--';
-const SLUG_PIECE_RE = /^[a-z0-9-]+$/;
-
-function assertNonEmpty (label, value) {
-  if (typeof value !== 'string' || value.length === 0) {
-    throw new Error('cmc-slug: ' + label + ' must be a non-empty string');
-  }
-  return value;
-}
-
-function assertSlugPiece (label, value) {
-  if (!SLUG_PIECE_RE.test(value)) {
-    throw new Error(
-      'cmc-slug: ' + label + ' "' + value + '" must match ' + SLUG_PIECE_RE.toString()
-    );
-  }
-  if (value.includes(SEPARATOR)) {
-    throw new Error(
-      'cmc-slug: ' + label + ' "' + value + '" must not contain the double-hyphen separator'
-    );
-  }
-}
-
-/**
- * Slugify a host: lowercase and replace `.` with `-`.
- */
-function slugifyHost (host) {
-  assertNonEmpty('host', host);
-  // Strip trailing port (`:3000`) — port doesn't affect cross-account
-  // identity. Two users on the same hostname are the same platform
-  // regardless of which port their api endpoint listens on. Mirrors
-  // the server-side helper in open-pryv.io components/cmc/src/slug.ts.
-  const hostNoPort = host.replace(/:\d+$/, '');
-  return hostNoPort.toLowerCase().replace(/\./g, '-');
-}
-
-/**
- * Build a counterparty slug `<username>--<host-slug>`.
- *
- * @param {Object} params
- * @param {string} params.username
- * @param {string} params.host - full hostname (e.g. 'pryv.me')
- * @returns {string}
- */
-function counterpartySlug (params) {
-  const username = assertNonEmpty('username', params.username).toLowerCase();
-  assertSlugPiece('username', username);
-  const hostSlug = slugifyHost(params.host);
-  assertSlugPiece('host-slug', hostSlug);
-  return username + SEPARATOR + hostSlug;
-}
-
-/**
- * Parse a counterparty slug back to its pieces. Note: the host-slug is
- * lossy — `pryv-me` could come from `pryv.me` or `pryv-me`. Store the
- * canonical host alongside the slug if you need it.
- *
- * @param {string} slug
- * @returns {{ username: string, hostSlug: string }}
- */
-function parseCounterpartySlug (slug) {
-  assertNonEmpty('slug', slug);
-  const pieces = slug.split(SEPARATOR);
-  if (pieces.length !== 2) {
-    throw new Error(
-      'cmc-slug: counterparty slug "' + slug + '" must have exactly 2 ' +
-      'double-hyphen-separated pieces, got ' + pieces.length
-    );
-  }
-  for (const piece of pieces) {
-    assertSlugPiece('slug piece', piece);
-  }
-  return { username: pieces[0], hostSlug: pieces[1] };
-}
-
-// --- Stream-id builders ---
-
-/** `<scopeStreamId>:chats` */
-function chatsParentUnder (scopeStreamId) {
-  return scopeStreamId + ':chats';
-}
-
-/** `<scopeStreamId>:chats:<counterparty-slug>` */
-function chatStreamUnder (scopeStreamId, slug) {
-  return scopeStreamId + ':chats:' + slug;
-}
-
-/** `<scopeStreamId>:collectors` */
-function collectorsParentUnder (scopeStreamId) {
-  return scopeStreamId + ':collectors';
-}
-
-/** `<scopeStreamId>:collectors:<counterparty-slug>` */
-function collectorStreamUnder (scopeStreamId, slug) {
-  return scopeStreamId + ':collectors:' + slug;
-}
-
-/**
- * Build the app-scope root `:_cmc:apps:<app-code>`.
- */
-function appScope (appCode) {
-  assertNonEmpty('appCode', appCode);
-  return NS_APPS + ':' + appCode;
-}
-
-// --- Classification predicates ---
-
-/** Does this stream-id live under the :_cmc: namespace? */
-function isCmcStreamId (streamId) {
-  return streamId === ':_cmc' || streamId.startsWith(NS);
-}
-
-const APP_NESTED_PLUGIN_RE = /:_cmc:apps:[^:]+(?::[^:]+)*:(chats|collectors)(?::|$)/;
-
-/** True if this id is at or beneath chats/collectors under :_cmc:apps:*. */
-function isAppNestedPluginStream (streamId) {
-  return APP_NESTED_PLUGIN_RE.test(streamId);
-}
-
-/**
- * Extract the app-code segment from `:_cmc:apps:<app-code>[:...]`.
- * Returns null for ids that aren't under `:_cmc:apps:`.
- */
-function getAppCode (streamId) {
-  if (!streamId.startsWith(NS_APPS + ':')) return null;
-  const rest = streamId.substring(NS_APPS.length + 1);
-  const colonIdx = rest.indexOf(':');
-  return colonIdx === -1 ? rest : rest.substring(0, colonIdx);
-}
-
-const CHAT_STREAM_ID_RE = /^(:_cmc:apps:[^:]+(?::[^:]+)*):chats:([a-z0-9-]+--[a-z0-9-]+)$/;
-const COLLECTOR_STREAM_ID_RE = /^(:_cmc:apps:[^:]+(?::[^:]+)*):collectors:([a-z0-9-]+--[a-z0-9-]+)$/;
-
-/**
- * Parse a chat trigger stream-id into its components.
- * Returns null on shape mismatch.
- */
-function parseChatStreamId (streamId) {
-  if (typeof streamId !== 'string') return null;
-  const m = streamId.match(CHAT_STREAM_ID_RE);
-  if (m == null) return null;
-  let counterparty;
-  try {
-    counterparty = parseCounterpartySlug(m[2]);
-  } catch (_e) {
-    return null;
-  }
-  return {
-    appCode: getAppCode(m[1]),
-    scopeStreamId: m[1],
-    counterpartySlug: m[2],
-    counterparty
-  };
-}
-
-/**
- * Parse a collectors trigger stream-id into its components.
- * Returns null on shape mismatch.
- */
-function parseCollectorStreamId (streamId) {
-  if (typeof streamId !== 'string') return null;
-  const m = streamId.match(COLLECTOR_STREAM_ID_RE);
-  if (m == null) return null;
-  let counterparty;
-  try {
-    counterparty = parseCounterpartySlug(m[2]);
-  } catch (_e) {
-    return null;
-  }
-  return {
-    appCode: getAppCode(m[1]),
-    scopeStreamId: m[1],
-    counterpartySlug: m[2],
-    counterparty
-  };
-}
-
-// --- Actor helpers (apiEndpoint → { token, username, host }) ---
-
-/**
- * Extract `{ token, username, host }` from a Pryv apiEndpoint, given
- * the platform's `service.info.api` URL template.
- *
- * Pryv apiEndpoints follow one of two URL shapes (the difference is
- * platform-defined, encoded in `service.info.api`):
- *
- *   subdomain  template `https://{username}.<domain>/`
- *              endpoint `https://<token>@<username>.<domain>/`
- *   path-style template `https://<host>/{username}/`
- *              endpoint `https://<token>@<host>/<username>/`
- *
- * This helper inverts whichever template the platform serves, returning
- * the **canonical host** (no `<username>.` subdomain prefix in subdomain
- * mode) — that's the host CMC uses for cross-account identity (slugs,
- * counterparty matching).
- *
- * @param {string} apiEndpoint  e.g. 'https://t0k3n@alice.pryv.me/'
- * @param {string} serviceInfoApi  e.g. 'https://{username}.pryv.me/'
- *                                 from /service/info → field `api`.
- * @returns {{ token: string|null, username: string|null, host: string }}
- *
- * @example
- *   const conn = new pryv.Connection(apiEndpoint);
- *   const info = await conn.service.info();
- *   const me = pryv.cmc.extractActor(apiEndpoint, info.api);
- *   // → { token: 't0k3n', username: 'alice', host: 'pryv.me' }
- */
-function extractActor (apiEndpoint, serviceInfoApi) {
-  // Avoid circular require: utils is the consumer, cmc the provider.
-  // We pull at call-time so cmc.js stays loadable without requiring
-  // utils early.
-  const utils = require('./utils');
-  const { token, endpoint } = utils.extractTokenAndAPIEndpoint(apiEndpoint);
-  // Match the api template's variable position to find the username.
-  // Both endpoint + template are guaranteed to have a trailing slash.
-  const tplIdx = serviceInfoApi.indexOf('{username}');
-  if (tplIdx < 0) {
-    // Template doesn't carry {username} — operator-defined, can't decompose.
-    let host = '';
-    try { host = new URL(endpoint).host; } catch (_e) {}
-    return { token, username: null, host };
-  }
-  const tplPrefix = serviceInfoApi.slice(0, tplIdx);
-  const tplSuffix = serviceInfoApi.slice(tplIdx + '{username}'.length);
-  if (!endpoint.startsWith(tplPrefix) || !endpoint.endsWith(tplSuffix)) {
-    let host = '';
-    try { host = new URL(endpoint).host; } catch (_e) {}
-    return { token, username: null, host };
-  }
-  const username = endpoint.slice(tplPrefix.length, endpoint.length - tplSuffix.length);
-  // For subdomain templates, host is `<username>.<domain>` — but the
-  // canonical CMC host is the bare `<domain>` (the platform identity,
-  // not per-user). For path-style, host is just the literal host.
-  // Disambiguate by where {username} sits in the template:
-  //   - subdomain  → prefix ends with `://` (username right after scheme)
-  //   - path-style → prefix has more after `://` (host already in prefix)
-  const isSubdomainTemplate = /:\/\/$/.test(tplPrefix);
-  let host;
-  if (isSubdomainTemplate) {
-    // tplSuffix starts with the domain (e.g. '.pryv.me/')
-    host = tplSuffix.replace(/^\.+/, '').replace(/\/+$/, '');
-  } else {
-    // path-style — host is in the prefix's URL
-    try {
-      host = new URL(tplPrefix).host;
-    } catch (_e) {
-      host = '';
-    }
-  }
-  return { token, username, host };
-}
-
-module.exports = {
-  // namespace constants
-  NS,
-  NS_INBOX,
-  NS_APPS,
-  NS_INTERNAL,
-  NS_INTERNAL_RETRIES,
-  // actor helper
-  extractActor,
-  // event types
-  ET_REQUEST,
-  ET_ACCEPT,
-  ET_REFUSE,
-  ET_REVOKE,
-  ET_CHAT,
-  ET_SYSTEM_ALERT,
-  ET_SYSTEM_ACK,
-  ET_SYSTEM_SCOPE_REQUEST,
-  ET_SYSTEM_SCOPE_UPDATE,
-  EVENT_TYPES_LIFECYCLE,
-  EVENT_TYPES_CHAT,
-  EVENT_TYPES_SYSTEM,
-  // slug helpers
-  SEPARATOR,
-  slugifyHost,
-  counterpartySlug,
-  parseCounterpartySlug,
-  // stream-id builders
-  appScope,
-  chatsParentUnder,
-  chatStreamUnder,
-  collectorsParentUnder,
-  collectorStreamUnder,
-  // classification + parsing
-  isCmcStreamId,
-  isAppNestedPluginStream,
-  getAppCode,
-  parseChatStreamId,
-  parseCollectorStreamId
-};

package/test/cmc.test.js

@@ -1,172 +0,0 @@
-/**
- * @license
- * [BSD-3-Clause](https://github.com/pryv/lib-js/blob/master/LICENSE)
- */
-/* global describe, it, expect */
-
-const cmc = require('../src/cmc');
-
-describe('[CMCX] pryv.cmc client helpers', function () {
-  describe('[CMCXC] constants', function () {
-    it('[CMCXCA] exposes namespace + event-type constants', function () {
-      expect(cmc.NS).to.equal(':_cmc:');
-      expect(cmc.NS_INBOX).to.equal(':_cmc:inbox');
-      expect(cmc.NS_APPS).to.equal(':_cmc:apps');
-      expect(cmc.NS_INTERNAL).to.equal(':_cmc:_internal');
-      expect(cmc.NS_INTERNAL_RETRIES).to.equal(':_cmc:_internal:retries');
-      expect(cmc.ET_REQUEST).to.equal('consent/request-cmc');
-      expect(cmc.ET_ACCEPT).to.equal('consent/accept-cmc');
-      expect(cmc.ET_CHAT).to.equal('message/chat-cmc');
-      expect(cmc.ET_SYSTEM_ALERT).to.equal('notification/alert-cmc');
-      expect(cmc.EVENT_TYPES_LIFECYCLE).to.include('consent/request-cmc');
-      expect(cmc.EVENT_TYPES_SYSTEM).to.include('consent/scope-update-cmc');
-    });
-  });
-
-  describe('[CMCXS] slug helpers', function () {
-    it('[CMCXSA] slugifyHost lowercases + replaces dots with hyphens', function () {
-      expect(cmc.slugifyHost('PRYV.me')).to.equal('pryv-me');
-      expect(cmc.slugifyHost('a.b.c.example.org')).to.equal('a-b-c-example-org');
-    });
-
-    it('[CMCXSB] counterpartySlug joins username + host-slug with --', function () {
-      expect(cmc.counterpartySlug({ username: 'alice', host: 'pryv.me' }))
-        .to.equal('alice--pryv-me');
-      expect(cmc.counterpartySlug({ username: 'provider-a', host: 'example.com' }))
-        .to.equal('provider-a--example-com');
-    });
-
-    it('[CMCXSC] counterpartySlug rejects invalid pieces', function () {
-      expect(() => cmc.counterpartySlug({ username: 'has space', host: 'a.b' })).to.throw();
-      expect(() => cmc.counterpartySlug({ username: '', host: 'a.b' })).to.throw();
-      expect(() => cmc.counterpartySlug({ username: 'a--b', host: 'a.b' })).to.throw();
-    });
-
-    it('[CMCXSD] parseCounterpartySlug round-trips the slug', function () {
-      const s = cmc.counterpartySlug({ username: 'alice', host: 'pryv.me' });
-      const parsed = cmc.parseCounterpartySlug(s);
-      expect(parsed).to.deep.equal({ username: 'alice', hostSlug: 'pryv-me' });
-    });
-
-    it('[CMCXSE] parseCounterpartySlug rejects malformed input', function () {
-      expect(() => cmc.parseCounterpartySlug('no-separator')).to.throw();
-      expect(() => cmc.parseCounterpartySlug('a--b--c')).to.throw();
-      expect(() => cmc.parseCounterpartySlug('')).to.throw();
-    });
-  });
-
-  describe('[CMCXB] stream-id builders', function () {
-    it('[CMCXBA] appScope produces :_cmc:apps:<app-code>', function () {
-      expect(cmc.appScope('my-app')).to.equal(':_cmc:apps:my-app');
-    });
-
-    it('[CMCXBB] chats helpers build the nested path', function () {
-      const scope = cmc.appScope('my-app');
-      expect(cmc.chatsParentUnder(scope)).to.equal(':_cmc:apps:my-app:chats');
-      const slug = cmc.counterpartySlug({ username: 'alice', host: 'pryv.me' });
-      expect(cmc.chatStreamUnder(scope, slug)).to.equal(':_cmc:apps:my-app:chats:alice--pryv-me');
-    });
-
-    it('[CMCXBC] collectors helpers build the nested path', function () {
-      const scope = ':_cmc:apps:my-app:campaign-2026';
-      expect(cmc.collectorsParentUnder(scope)).to.equal(':_cmc:apps:my-app:campaign-2026:collectors');
-      expect(cmc.collectorStreamUnder(scope, 'alice--pryv-me'))
-        .to.equal(':_cmc:apps:my-app:campaign-2026:collectors:alice--pryv-me');
-    });
-  });
-
-  describe('[CMCXP] predicates + parsers', function () {
-    it('[CMCXPA] isCmcStreamId true for :_cmc:* + false for non-cmc', function () {
-      expect(cmc.isCmcStreamId(':_cmc:apps:foo')).to.equal(true);
-      expect(cmc.isCmcStreamId(':_cmc:inbox')).to.equal(true);
-      expect(cmc.isCmcStreamId('fertility')).to.equal(false);
-      expect(cmc.isCmcStreamId(':_system:account:email')).to.equal(false);
-    });
-
-    it('[CMCXPB] isAppNestedPluginStream true for chats/collectors leaves', function () {
-      expect(cmc.isAppNestedPluginStream(':_cmc:apps:my-app:chats:alice--pryv-me')).to.equal(true);
-      expect(cmc.isAppNestedPluginStream(':_cmc:apps:my-app:collectors:alice--pryv-me')).to.equal(true);
-      expect(cmc.isAppNestedPluginStream(':_cmc:apps:my-app:study-A:chats')).to.equal(true);
-      expect(cmc.isAppNestedPluginStream(':_cmc:apps:my-app:study-A')).to.equal(false);
-      expect(cmc.isAppNestedPluginStream(':_cmc:apps:my-app:chats-style-data')).to.equal(false);
-    });
-
-    it('[CMCXPC] getAppCode pulls the app segment', function () {
-      expect(cmc.getAppCode(':_cmc:apps:my-app')).to.equal('my-app');
-      expect(cmc.getAppCode(':_cmc:apps:my-app:campaign-2026')).to.equal('my-app');
-      expect(cmc.getAppCode(':_cmc:inbox')).to.equal(null);
-      expect(cmc.getAppCode('fertility')).to.equal(null);
-    });
-
-    it('[CMCXPD] parseChatStreamId extracts scope + counterparty', function () {
-      const r = cmc.parseChatStreamId(':_cmc:apps:my-app:campaign-2026:chats:alice--pryv-me');
-      expect(r.appCode).to.equal('my-app');
-      expect(r.scopeStreamId).to.equal(':_cmc:apps:my-app:campaign-2026');
-      expect(r.counterpartySlug).to.equal('alice--pryv-me');
-      expect(r.counterparty).to.deep.equal({ username: 'alice', hostSlug: 'pryv-me' });
-    });
-
-    it('[CMCXPE] parseChatStreamId returns null for non-chat ids', function () {
-      expect(cmc.parseChatStreamId(':_cmc:inbox')).to.equal(null);
-      expect(cmc.parseChatStreamId(':_cmc:apps:my-app:collectors:foo--bar')).to.equal(null);
-      expect(cmc.parseChatStreamId('arbitrary-stream')).to.equal(null);
-    });
-
-    it('[CMCXPF] parseCollectorStreamId extracts scope + counterparty', function () {
-      const r = cmc.parseCollectorStreamId(':_cmc:apps:my-app:collectors:alice--pryv-me');
-      expect(r.appCode).to.equal('my-app');
-      expect(r.scopeStreamId).to.equal(':_cmc:apps:my-app');
-      expect(r.counterpartySlug).to.equal('alice--pryv-me');
-    });
-
-    it('[CMCXPG] parseCollectorStreamId returns null for non-collector ids', function () {
-      expect(cmc.parseCollectorStreamId(':_cmc:apps:my-app:chats:foo--bar')).to.equal(null);
-      expect(cmc.parseCollectorStreamId(':_cmc:apps:my-app:collectors:no-separator')).to.equal(null);
-    });
-  });
-
-  describe('[CMCXI] integration with pryv module', function () {
-    it('[CMCXIA] exposed as pryv.cmc', function () {
-      const pryv = require('../src');
-      expect(pryv.cmc).to.exist;
-      expect(pryv.cmc.counterpartySlug).to.be.a('function');
-      expect(pryv.cmc.NS).to.equal(':_cmc:');
-    });
-  });
-
-  describe('[CMCXA] extractActor', function () {
-    it('[CMCXAA] subdomain template — host strips the {username}. prefix', function () {
-      const r = cmc.extractActor(
-        'https://t0k3n@alice.pryv.me/',
-        'https://{username}.pryv.me/'
-      );
-      expect(r).to.deep.equal({ token: 't0k3n', username: 'alice', host: 'pryv.me' });
-    });
-
-    it('[CMCXAB] path-style template — host is the literal hostname[:port]', function () {
-      const r = cmc.extractActor(
-        'http://t0k3n@127.0.0.1:3000/alice/',
-        'http://127.0.0.1:3000/{username}/'
-      );
-      expect(r).to.deep.equal({ token: 't0k3n', username: 'alice', host: '127.0.0.1:3000' });
-    });
-
-    it('[CMCXAC] returns username:null when the endpoint doesn\'t match the template', function () {
-      const r = cmc.extractActor(
-        'https://t0k3n@somewhere.else.com/',
-        'https://{username}.pryv.me/'
-      );
-      expect(r.username).to.equal(null);
-    });
-
-    it('[CMCXAD] returns token:null when endpoint carries no token', function () {
-      const r = cmc.extractActor(
-        'https://alice.pryv.me/',
-        'https://{username}.pryv.me/'
-      );
-      expect(r.token).to.equal(null);
-      expect(r.username).to.equal('alice');
-      expect(r.host).to.equal('pryv.me');
-    });
-  });
-});