geo/apps/desktop-client/src/main/generic-ai-auth.ts

function normalizeText(value: unknown): string | null {
  if (typeof value !== "string") {
    return null;
  }
  const trimmed = value.trim();
  return trimmed ? trimmed : null;
}

function hashText(value: string): string {
  let hash = 0;
  for (let index = 0; index < value.length; index += 1) {
    hash = ((hash << 5) - hash + value.charCodeAt(index)) | 0;
  }
  return Math.abs(hash).toString(16).padStart(8, "0");
}

function boundedIdentity(prefix: string, raw: string): string {
  const normalizedPrefix = prefix.trim().replace(/:+$/, "");
  const normalizedRaw = raw.trim();
  if (!normalizedRaw) {
    return `${normalizedPrefix}:${hashText(prefix)}`;
  }

  const candidate = `${normalizedPrefix}:${normalizedRaw}`;
  if (candidate.length <= 120) {
    return candidate;
  }

  return `${normalizedPrefix}:${hashText(normalizedRaw)}`;
}

function normalizeURLPath(pathname: string): string {
  const normalized = pathname.replace(/\/+$/, "");
  return normalized === "/" ? "" : normalized;
}

function safeParseURL(input: string): URL | null {
  try {
    return new URL(input);
  } catch {
    return null;
  }
}

function genericAIConversationPath(pathname: string): boolean {
  return /^\/(?:chat|c|conversation)(?:\/|$)/i.test(pathname);
}

export interface GenericAIPageState {
  displayName: string | null;
  avatarUrl: string | null;
  fingerprint: string | null;
  credentialFingerprint: string | null;
  currentPath: string | null;
  strongAuthSignalCount: number;
  loginSignalCount: number;
  loggedOutSignalCount: number;
  challengeSignalCount: number;
}

export function genericAIPageLooksAuthenticated(
  currentURL: string,
  pageState: GenericAIPageState | null,
): boolean {
  const current = safeParseURL(currentURL);
  const currentPath = normalizeURLPath(current?.pathname ?? pageState?.currentPath ?? "");
  const strongAuthSignalCount = pageState?.strongAuthSignalCount ?? 0;
  const loginSignalCount = pageState?.loginSignalCount ?? 0;
  const loggedOutSignalCount = pageState?.loggedOutSignalCount ?? 0;
  const challengeSignalCount = pageState?.challengeSignalCount ?? 0;
  const hasCredentialFingerprint = Boolean(normalizeText(pageState?.credentialFingerprint));
  const onConversationPath = genericAIConversationPath(currentPath);

  if (challengeSignalCount > 0) {
    return false;
  }

  if (loggedOutSignalCount > 0) {
    return false;
  }

  if (loginSignalCount > 0 && strongAuthSignalCount === 0 && !onConversationPath && !hasCredentialFingerprint) {
    return false;
  }

  if (loginSignalCount > 0) {
    return (strongAuthSignalCount >= 2 || hasCredentialFingerprint) && !onConversationPath;
  }

  return strongAuthSignalCount > 0 || onConversationPath || hasCredentialFingerprint;
}

export function buildGenericAIPageFingerprintFallback(
  platformId: string,
  pageState?: GenericAIPageState | null,
): string | null {
  const credentialFingerprint = normalizeText(pageState?.credentialFingerprint);
  if (credentialFingerprint) {
    return boundedIdentity(`${platformId}-session`, credentialFingerprint);
  }

  const fallbackFingerprint = normalizeText(pageState?.fingerprint);
  if (!fallbackFingerprint) {
    return null;
  }

  const strongAuthSignalCount = pageState?.strongAuthSignalCount ?? 0;
  if (strongAuthSignalCount <= 0) {
    return null;
  }

  return boundedIdentity(`${platformId}-page`, fallbackFingerprint);
}