Consolidate Persimmons source

extension/vault-session.mjs

@@ -0,0 +1,17 @@
+// Memory only. Nothing here is serialized to storage or exposed externally.
+export const AUTO_LOCK = 'human-auto-lock';
+export const policies = ['close', '5', '15', '60'];
+export class VaultSession {
+  constructor(now = Date.now) { this.now = now; this.clear(); }
+  clear() { this.key = null; this.owner = null; this.deadline = 0; this.policy = 'close'; this.epoch = (this.epoch || 0) + 1; }
+  set(key, owner, policy) {
+    if (!policies.includes(policy) || key.extractable !== false) throw new Error('Invalid session');
+    this.clear(); this.key = key; this.owner = owner; this.policy = policy;
+    this.deadline = policy === 'close' ? Infinity : this.now() + Number(policy) * 60000;
+  }
+  get(owner) {
+    if (this.now() >= this.deadline || owner !== this.owner) this.clear();
+    return this.key;
+  }
+  closed() { if (this.policy === 'close') this.clear(); }
+}