@abaxxtech/id 0.0.0

package/dist/esm/json-schemas/definitions.json

@@ -0,0 +1,23 @@
+{
+    "$schema": "http://json-schema.org/draft-07/schema#",
+    "$id": "https://identity.foundation/dwn/json-schemas/defs.json",
+    "type": "object",
+    "definitions": {
+        "base64url": {
+            "type": "string",
+            "pattern": "^[A-Za-z0-9_-]+$"
+        },
+        "uuid": {
+            "type": "string",
+            "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$"
+        },
+        "did": {
+            "type": "string",
+            "pattern": "^did:([a-z0-9]+):((?:(?:[a-zA-Z0-9._-]|(?:%[0-9a-fA-F]{2}))*:)*((?:[a-zA-Z0-9._-]|(?:%[0-9a-fA-F]{2}))+))((;[a-zA-Z0-9_.:%-]+=[a-zA-Z0-9_.:%-]*)*)(\/[^#?]*)?([?][^#]*)?(#.*)?$"
+        },
+        "date-time": {
+            "type": "string",
+            "pattern": "^\\d{4}-[0-1]\\d-[0-3]\\dT(?:[0-2]\\d:[0-5]\\d:[0-5]\\d|23:59:60)\\.\\d{6}Z$"
+        }
+    }
+}

package/dist/esm/src/core/abstract-message.js

@@ -0,0 +1,37 @@
+import { Jws } from '../utils/jws.js';
+import { Message } from './message.js';
+/**
+ * An abstract implementation of the `MessageInterface` interface.
+ */
+export class AbstractMessage {
+    get message() {
+        return this._message;
+    }
+    get author() {
+        return this._author;
+    }
+    get signaturePayload() {
+        return this._signaturePayload;
+    }
+    constructor(message) {
+        this._message = message;
+        if (message.authorization !== undefined) {
+            // if the message authorization contains author delegated grant, the author would be the grantor of the grant
+            // else the author would be the signer of the message
+            if (message.authorization.authorDelegatedGrant !== undefined) {
+                this._author = Message.getSigner(message.authorization.authorDelegatedGrant);
+            }
+            else {
+                this._author = Message.getSigner(message);
+            }
+            this._signaturePayload = Jws.decodePlainObjectPayload(message.authorization.signature);
+        }
+    }
+    /**
+     * Called by `JSON.stringify(...)` automatically.
+     */
+    toJSON() {
+        return this.message;
+    }
+}
+//# sourceMappingURL=abstract-message.js.map

package/dist/esm/src/core/abstract-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abstract-message.js","sourceRoot":"","sources":["../../../../src/core/abstract-message.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC;;GAEG;AACH,MAAM,OAAgB,eAAe;IAEnC,IAAW,OAAO;QAChB,OAAO,IAAI,CAAC,QAAa,CAAC;IAC5B,CAAC;IAGD,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAGD,IAAW,gBAAgB;QACzB,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED,YAAsB,OAAU;QAC9B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QAExB,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACxC,6GAA6G;YAC7G,qDAAqD;YACrD,IAAI,OAAO,CAAC,aAAa,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;gBAC7D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,OAAyB,CAAC,CAAC;YAC9D,CAAC;YAED,IAAI,CAAC,iBAAiB,GAAG,GAAG,CAAC,wBAAwB,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF"}

package/dist/esm/src/core/auth.js

@@ -0,0 +1,97 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { Cid } from '../utils/cid.js';
+import { GeneralJwsVerifier } from '../jose/jws/general/verifier.js';
+import { Jws } from '../utils/jws.js';
+import { PermissionsGrant } from '../interfaces/permissions-grant.js';
+import { validateJsonSchema } from '../schema-validator.js';
+import { DwnError, DwnErrorCode } from './dwn-error.js';
+export class Authenticate {
+    /**
+     * Verifies all the signature(s) within the authorization property.
+     * @throws {Error} if fails authentication
+     */
+    static authenticate(authorizationModel, didResolver) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (authorizationModel === undefined) {
+                throw new DwnError(DwnErrorCode.AuthenticateJwsMissing, 'Missing JWS.');
+            }
+            yield GeneralJwsVerifier.verifySignatures(authorizationModel.signature, didResolver);
+            if (authorizationModel.ownerSignature !== undefined) {
+                yield GeneralJwsVerifier.verifySignatures(authorizationModel.ownerSignature, didResolver);
+            }
+            if (authorizationModel.authorDelegatedGrant !== undefined) {
+                // verify the signature of the grantor of the delegated grant
+                const authorDelegatedGrant = yield PermissionsGrant.parse(authorizationModel.authorDelegatedGrant);
+                yield GeneralJwsVerifier.verifySignatures(authorDelegatedGrant.message.authorization.signature, didResolver);
+            }
+        });
+    }
+}
+;
+/**
+ * Validates the structural integrity of the message signature given.
+ * NOTE: signature is not verified.
+ * @param payloadJsonSchemaKey The key to look up the JSON schema referenced in `compile-validators.js` and perform payload schema validation on.
+ * @returns the parsed JSON payload object if validation succeeds.
+ */
+export function validateMessageSignatureIntegrity(messageSignature_1, messageDescriptor_1) {
+    return __awaiter(this, arguments, void 0, function* (messageSignature, messageDescriptor, payloadJsonSchemaKey = 'GenericSignaturePayload') {
+        if (messageSignature.signatures.length !== 1) {
+            throw new DwnError(DwnErrorCode.AuthenticationMoreThanOneSignatureNotSupported, 'expected no more than 1 signature for authorization purpose');
+        }
+        // validate payload integrity
+        const payloadJson = Jws.decodePlainObjectPayload(messageSignature);
+        validateJsonSchema(payloadJsonSchemaKey, payloadJson);
+        // `descriptorCid` validation - ensure that the provided descriptorCid matches the CID of the actual message
+        const { descriptorCid } = payloadJson;
+        const expectedDescriptorCid = yield Cid.computeCid(messageDescriptor);
+        if (descriptorCid !== expectedDescriptorCid) {
+            throw new DwnError(DwnErrorCode.AuthenticateDescriptorCidMismatch, `provided descriptorCid ${descriptorCid} does not match expected CID ${expectedDescriptorCid}`);
+        }
+        return payloadJson;
+    });
+}
+/**
+ * Verifies all the signature(s) within the authorization property.
+ * @throws {Error} if fails authentication
+ */
+export function authenticate(authorizationModel, didResolver) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (authorizationModel === undefined) {
+            throw new DwnError(DwnErrorCode.AuthenticateJwsMissing, 'Missing JWS.');
+        }
+        yield GeneralJwsVerifier.verifySignatures(authorizationModel.signature, didResolver);
+        if (authorizationModel.ownerSignature !== undefined) {
+            yield GeneralJwsVerifier.verifySignatures(authorizationModel.ownerSignature, didResolver);
+        }
+        if (authorizationModel.authorDelegatedGrant !== undefined) {
+            // verify the signature of the grantor of the delegated grant
+            const authorDelegatedGrant = yield PermissionsGrant.parse(authorizationModel.authorDelegatedGrant);
+            yield GeneralJwsVerifier.verifySignatures(authorDelegatedGrant.message.authorization.signature, didResolver);
+        }
+    });
+}
+/**
+ * Authorizes the incoming message.
+ * @throws {Error} if fails authentication
+ */
+export function authorize(tenant, incomingMessage) {
+    return __awaiter(this, void 0, void 0, function* () {
+        // if author is the same as the target tenant, we can directly grant access
+        if (incomingMessage.author === tenant) {
+            return;
+        }
+        else {
+            throw new DwnError(DwnErrorCode.AuthorizationUnknownAuthor, 'message failed authorization, permission grant check not yet implemented');
+        }
+    });
+}
+//# sourceMappingURL=auth.js.map

package/dist/esm/src/core/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../../src/core/auth.ts"],"names":[],"mappings":";;;;;;;;;AAIA,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,OAAO,YAAY;IAEvB;;;OAGG;IACI,MAAM,CAAO,YAAY,CAAC,kBAAkD,EAAE,WAAwB;;YAE3G,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;gBACrC,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAC;YAC1E,CAAC;YAED,MAAM,kBAAkB,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAErF,IAAI,kBAAkB,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;gBACpD,MAAM,kBAAkB,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YAC5F,CAAC;YAED,IAAI,kBAAkB,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;gBAC1D,6DAA6D;gBAC7D,MAAM,oBAAoB,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;gBACnG,MAAM,kBAAkB,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC/G,CAAC;QAEH,CAAC;KAAA;CACF;AAAA,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAgB,iCAAiC;yDACrD,gBAA4B,EAC5B,iBAA6B,EAC7B,uBAA+B,yBAAyB;QAGxD,IAAI,gBAAgB,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,8CAA8C,EAAE,6DAA6D,CAAC,CAAC;QACjJ,CAAC;QAED,6BAA6B;QAC7B,MAAM,WAAW,GAAG,GAAG,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;QAEnE,kBAAkB,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;QAEtD,4GAA4G;QAC5G,MAAM,EAAE,aAAa,EAAE,GAAG,WAAW,CAAC;QACtC,MAAM,qBAAqB,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACtE,IAAI,aAAa,KAAK,qBAAqB,EAAE,CAAC;YAC5C,MAAM,IAAI,QAAQ,CAChB,YAAY,CAAC,iCAAiC,EAC9C,0BAA0B,aAAa,gCAAgC,qBAAqB,EAAE,CAC/F,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CAAA;AAED;;;GAGG;AACH,MAAM,UAAgB,YAAY,CAAC,kBAAkD,EAAE,WAAwB;;QAE7G,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,kBAAkB,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAErF,IAAI,kBAAkB,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,kBAAkB,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAC5F,CAAC;QAED,IAAI,kBAAkB,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAC1D,6DAA6D;YAC7D,MAAM,oBAAoB,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;YACnG,MAAM,kBAAkB,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC/G,CAAC;IAEH,CAAC;CAAA;AAED;;;GAGG;AACH,MAAM,UAAgB,SAAS,CAAC,MAAc,EAAE,eAA+C;;QAC7F,2EAA2E;QAC3E,IAAI,eAAe,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACtC,OAAO;QACT,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,0BAA0B,EAAE,0EAA0E,CAAC,CAAC;QAC1I,CAAC;IACH,CAAC;CAAA"}

package/dist/esm/src/core/dwn-constant.js

@@ -0,0 +1,8 @@
+export class DwnConstant {
+}
+/**
+ * The maximum size in bytes of raw data that will be returned as `encodedData`.
+ * this is also the maximum size that we will store within MessageStore.
+ */
+DwnConstant.maxDataSizeAllowedToBeEncoded = 50000;
+//# sourceMappingURL=dwn-constant.js.map

package/dist/esm/src/core/dwn-constant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dwn-constant.js","sourceRoot":"","sources":["../../../../src/core/dwn-constant.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,WAAW;;AACtB;;;GAGG;AACoB,yCAA6B,GAAG,KAAM,CAAC"}

package/dist/esm/src/core/dwn-error.js

@@ -0,0 +1,138 @@
+/**
+ * A class that represents a DWN error.
+ */
+export class DwnError extends Error {
+    constructor(code, message) {
+        super(`${code}: ${message}`);
+        this.code = code;
+        this.name = 'DwnError';
+    }
+}
+/**
+ * DWN SDK error codes.
+ */
+export var DwnErrorCode;
+(function (DwnErrorCode) {
+    DwnErrorCode["AuthenticateJwsMissing"] = "AuthenticateJwsMissing";
+    DwnErrorCode["AuthenticateDescriptorCidMismatch"] = "AuthenticateDescriptorCidMismatch";
+    DwnErrorCode["AuthenticationMoreThanOneSignatureNotSupported"] = "AuthenticationMoreThanOneSignatureNotSupported";
+    DwnErrorCode["AuthorizationUnknownAuthor"] = "AuthorizationUnknownAuthor";
+    DwnErrorCode["AuthorizationNotGrantedToAuthor"] = "AuthorizationNotGrantedToAuthor";
+    DwnErrorCode["ComputeCidCodecNotSupported"] = "ComputeCidCodecNotSupported";
+    DwnErrorCode["ComputeCidMultihashNotSupported"] = "ComputeCidMultihashNotSupported";
+    DwnErrorCode["DidMethodNotSupported"] = "DidMethodNotSupported";
+    DwnErrorCode["DidNotString"] = "DidNotString";
+    DwnErrorCode["DidNotValid"] = "DidNotValid";
+    DwnErrorCode["DidResolutionFailed"] = "DidResolutionFailed";
+    DwnErrorCode["Ed25519InvalidJwk"] = "Ed25519InvalidJwk";
+    DwnErrorCode["GeneralJwsVerifierGetPublicKeyNotFound"] = "GeneralJwsVerifierGetPublicKeyNotFound";
+    DwnErrorCode["GeneralJwsVerifierInvalidSignature"] = "GeneralJwsVerifierInvalidSignature";
+    DwnErrorCode["GrantAuthorizationGrantExpired"] = "GrantAuthorizationGrantExpired";
+    DwnErrorCode["GrantAuthorizationGrantMissing"] = "GrantAuthorizationGrantMissing";
+    DwnErrorCode["GrantAuthorizationGrantRevoked"] = "GrantAuthorizationGrantRevoked";
+    DwnErrorCode["GrantAuthorizationInterfaceMismatch"] = "GrantAuthorizationInterfaceMismatch";
+    DwnErrorCode["GrantAuthorizationMethodMismatch"] = "GrantAuthorizationMethodMismatch";
+    DwnErrorCode["GrantAuthorizationNotGrantedForTenant"] = "GrantAuthorizationNotGrantedForTenant";
+    DwnErrorCode["GrantAuthorizationNotGrantedToAuthor"] = "GrantAuthorizationNotGrantedToAuthor";
+    DwnErrorCode["GrantAuthorizationGrantNotYetActive"] = "GrantAuthorizationGrantNotYetActive";
+    DwnErrorCode["HdKeyDerivationPathInvalid"] = "HdKeyDerivationPathInvalid";
+    DwnErrorCode["JwsVerifySignatureUnsupportedCrv"] = "JwsVerifySignatureUnsupportedCrv";
+    DwnErrorCode["JwsDecodePlainObjectPayloadInvalid"] = "JwsDecodePlainObjectPayloadInvalid";
+    DwnErrorCode["MessageGetInvalidCid"] = "MessageGetInvalidCid";
+    DwnErrorCode["ParseCidCodecNotSupported"] = "ParseCidCodecNotSupported";
+    DwnErrorCode["ParseCidMultihashNotSupported"] = "ParseCidMultihashNotSupported";
+    DwnErrorCode["PermissionsGrantGrantedByMismatch"] = "PermissionsGrantGrantedByMismatch";
+    DwnErrorCode["PermissionsGrantNotADelegatedGrant"] = "PermissionsGrantNotADelegatedGrant";
+    DwnErrorCode["PermissionsGrantScopeContextIdAndProtocolPath"] = "PermissionsGrantScopeContextIdAndProtocolPath";
+    DwnErrorCode["PermissionsGrantScopeSchemaProhibitedFields"] = "PermissionsGrantScopeSchemaProhibitedFields";
+    DwnErrorCode["PermissionsGrantUnauthorizedGrant"] = "PermissionsGrantUnauthorizedGrant";
+    DwnErrorCode["PermissionsRevokeMissingPermissionsGrant"] = "PermissionsRevokeMissingPermissionsGrant";
+    DwnErrorCode["PermissionsRevokeUnauthorizedRevoke"] = "PermissionsRevokeUnauthorizedRevoke";
+    DwnErrorCode["PrivateKeySignerUnableToDeduceAlgorithm"] = "PrivateKeySignerUnableToDeduceAlgorithm";
+    DwnErrorCode["PrivateKeySignerUnableToDeduceKeyId"] = "PrivateKeySignerUnableToDeduceKeyId";
+    DwnErrorCode["PrivateKeySignerUnsupportedCurve"] = "PrivateKeySignerUnsupportedCurve";
+    DwnErrorCode["ProtocolAuthorizationActionNotAllowed"] = "ProtocolAuthorizationActionNotAllowed";
+    DwnErrorCode["ProtocolAuthorizationActionRulesNotFound"] = "ProtocolAuthorizationActionRulesNotFound";
+    DwnErrorCode["ProtocolAuthorizationDuplicateContextRoleRecipient"] = "ProtocolAuthorizationDuplicateContextRoleRecipient";
+    DwnErrorCode["ProtocolAuthorizationDuplicateGlobalRoleRecipient"] = "ProtocolAuthorizationDuplicateGlobalRoleRecipient";
+    DwnErrorCode["ProtocolAuthorizationIncorrectDataFormat"] = "ProtocolAuthorizationIncorrectDataFormat";
+    DwnErrorCode["ProtocolAuthorizationIncorrectProtocolPath"] = "ProtocolAuthorizationIncorrectProtocolPath";
+    DwnErrorCode["ProtocolAuthorizationInvalidSchema"] = "ProtocolAuthorizationInvalidSchema";
+    DwnErrorCode["ProtocolAuthorizationInvalidType"] = "ProtocolAuthorizationInvalidType";
+    DwnErrorCode["ProtocolAuthorizationMissingContextId"] = "ProtocolAuthorizationMissingContextId";
+    DwnErrorCode["ProtocolAuthorizationMissingRole"] = "ProtocolAuthorizationMissingRole";
+    DwnErrorCode["ProtocolAuthorizationMissingRuleSet"] = "ProtocolAuthorizationMissingRuleSet";
+    DwnErrorCode["ProtocolAuthorizationParentlessIncorrectProtocolPath"] = "ProtocolAuthorizationParentlessIncorrectProtocolPath";
+    DwnErrorCode["ProtocolAuthorizationNotARole"] = "ProtocolAuthorizationNotARole";
+    DwnErrorCode["ProtocolAuthorizationParentNotFound"] = "ProtocolAuthorizationParentNotFound";
+    DwnErrorCode["ProtocolAuthorizationProtocolNotFound"] = "ProtocolAuthorizationProtocolNotFound";
+    DwnErrorCode["ProtocolAuthorizationQueryWithoutRole"] = "ProtocolAuthorizationQueryWithoutRole";
+    DwnErrorCode["ProtocolAuthorizationRoleMissingRecipient"] = "ProtocolAuthorizationRoleMissingRecipient";
+    DwnErrorCode["ProtocolsConfigureContextRoleAtProhibitedProtocolPath"] = "ProtocolsConfigureContextRoleAtProhibitedProtocolPath";
+    DwnErrorCode["ProtocolsConfigureGlobalRoleAtProhibitedProtocolPath"] = "ProtocolsConfigureGlobalRoleAtProhibitedProtocolPath";
+    DwnErrorCode["ProtocolsConfigureInvalidRole"] = "ProtocolsConfigureInvalidRole";
+    DwnErrorCode["ProtocolsConfigureInvalidActionMissingOf"] = "ProtocolsConfigureInvalidActionMissingOf";
+    DwnErrorCode["ProtocolsConfigureInvalidActionOfNotAllowed"] = "ProtocolsConfigureInvalidActionOfNotAllowed";
+    DwnErrorCode["ProtocolsConfigureInvalidRecipientOfAction"] = "ProtocolsConfigureInvalidRecipientOfAction";
+    DwnErrorCode["ProtocolsConfigureQueryNotAllowed"] = "ProtocolsConfigureQueryNotAllowed";
+    DwnErrorCode["ProtocolsConfigureUnauthorized"] = "ProtocolsConfigureUnauthorized";
+    DwnErrorCode["ProtocolsQueryUnauthorized"] = "ProtocolsQueryUnauthorized";
+    DwnErrorCode["RecordsDecryptNoMatchingKeyEncryptedFound"] = "RecordsDecryptNoMatchingKeyEncryptedFound";
+    DwnErrorCode["RecordsDeleteAuthorizationFailed"] = "RecordsDeleteAuthorizationFailed";
+    DwnErrorCode["RecordsGrantAuthorizationConditionPublicationProhibited"] = "RecordsGrantAuthorizationConditionPublicationProhibited";
+    DwnErrorCode["RecordsGrantAuthorizationConditionPublicationRequired"] = "RecordsGrantAuthorizationConditionPublicationRequired";
+    DwnErrorCode["RecordsGrantAuthorizationScopeContextIdMismatch"] = "RecordsGrantAuthorizationScopeContextIdMismatch";
+    DwnErrorCode["RecordsGrantAuthorizationScopeNotProtocol"] = "RecordsGrantAuthorizationScopeNotProtocol";
+    DwnErrorCode["RecordsGrantAuthorizationScopeProtocolMismatch"] = "RecordsGrantAuthorizationScopeProtocolMismatch";
+    DwnErrorCode["RecordsGrantAuthorizationScopeProtocolPathMismatch"] = "RecordsGrantAuthorizationScopeProtocolPathMismatch";
+    DwnErrorCode["RecordsGrantAuthorizationScopeSchema"] = "RecordsGrantAuthorizationScopeSchema";
+    DwnErrorCode["RecordsDerivePrivateKeyUnSupportedCurve"] = "RecordsDerivePrivateKeyUnSupportedCurve";
+    DwnErrorCode["RecordsInvalidAncestorKeyDerivationSegment"] = "RecordsInvalidAncestorKeyDerivationSegment";
+    DwnErrorCode["RecordsProtocolContextDerivationSchemeMissingContextId"] = "RecordsProtocolContextDerivationSchemeMissingContextId";
+    DwnErrorCode["RecordsProtocolPathDerivationSchemeMissingProtocol"] = "RecordsProtocolPathDerivationSchemeMissingProtocol";
+    DwnErrorCode["RecordsQueryFilterMissingRequiredProperties"] = "RecordsQueryFilterMissingRequiredProperties";
+    DwnErrorCode["RecordsReadReturnedMultiple"] = "RecordsReadReturnedMultiple";
+    DwnErrorCode["RecordsReadAuthorizationFailed"] = "RecordsReadAuthorizationFailed";
+    DwnErrorCode["RecordsSchemasDerivationSchemeMissingSchema"] = "RecordsSchemasDerivationSchemeMissingSchema";
+    DwnErrorCode["RecordsValidateIntegrityDelegatedGrantAndIdExistenceMismatch"] = "RecordsValidateIntegrityDelegatedGrantAndIdExistenceMismatch";
+    DwnErrorCode["RecordsValidateIntegrityGrantedToAndSignerMismatch"] = "RecordsValidateIntegrityGrantedToAndSignerMismatch";
+    DwnErrorCode["RecordsWriteAttestationIntegrityMoreThanOneSignature"] = "RecordsWriteAttestationIntegrityMoreThanOneSignature";
+    DwnErrorCode["RecordsWriteAttestationIntegrityDescriptorCidMismatch"] = "RecordsWriteAttestationIntegrityDescriptorCidMismatch";
+    DwnErrorCode["RecordsWriteAttestationIntegrityInvalidPayloadProperty"] = "RecordsWriteAttestationIntegrityInvalidPayloadProperty";
+    DwnErrorCode["RecordsWriteAuthorizationFailed"] = "RecordsWriteAuthorizationFailed";
+    DwnErrorCode["RecordsWriteCreateMissingSigner"] = "RecordsWriteCreateMissingSigner";
+    DwnErrorCode["RecordsWriteCreateContextIdAndParentIdMutuallyInclusive"] = "RecordsWriteCreateContextIdAndParentIdMutuallyInclusive";
+    DwnErrorCode["RecordsWriteCreateDataAndDataCidMutuallyExclusive"] = "RecordsWriteCreateDataAndDataCidMutuallyExclusive";
+    DwnErrorCode["RecordsWriteCreateDataCidAndDataSizeMutuallyInclusive"] = "RecordsWriteCreateDataCidAndDataSizeMutuallyInclusive";
+    DwnErrorCode["RecordsWriteCreateProtocolAndProtocolPathMutuallyInclusive"] = "RecordsWriteCreateProtocolAndProtocolPathMutuallyInclusive";
+    DwnErrorCode["RecordsWriteDataCidMismatch"] = "RecordsWriteDataCidMismatch";
+    DwnErrorCode["RecordsWriteDataSizeMismatch"] = "RecordsWriteDataSizeMismatch";
+    DwnErrorCode["RecordsWriteGetEntryIdUndefinedAuthor"] = "RecordsWriteGetEntryIdUndefinedAuthor";
+    DwnErrorCode["RecordsWriteGetInitialWriteNotFound"] = "RecordsWriteGetInitialWriteNotFound";
+    DwnErrorCode["RecordsWriteImmutablePropertyChanged"] = "RecordsWriteImmutablePropertyChanged";
+    DwnErrorCode["RecordsWriteMissingAuthorizationSigner"] = "RecordsWriteMissingAuthorizationSigner";
+    DwnErrorCode["RecordsWriteMissingSigner"] = "RecordsWriteMissingSigner";
+    DwnErrorCode["RecordsWriteMissingDataInPrevious"] = "RecordsWriteMissingDataInPrevious";
+    DwnErrorCode["RecordsWriteMissingDataAssociation"] = "RecordsWriteMissingDataAssociation";
+    DwnErrorCode["RecordsWriteMissingDataStream"] = "RecordsWriteMissingDataStream";
+    DwnErrorCode["RecordsWriteMissingProtocol"] = "RecordsWriteMissingProtocol";
+    DwnErrorCode["RecordsWriteMissingSchema"] = "RecordsWriteMissingSchema";
+    DwnErrorCode["RecordsWriteOwnerAndTenantMismatch"] = "RecordsWriteOwnerAndTenantMismatch";
+    DwnErrorCode["RecordsWriteSignAsOwnerUnknownAuthor"] = "RecordsWriteSignAsOwnerUnknownAuthor";
+    DwnErrorCode["RecordsWriteValidateIntegrityAttestationMismatch"] = "RecordsWriteValidateIntegrityAttestationMismatch";
+    DwnErrorCode["RecordsWriteValidateIntegrityContextIdMismatch"] = "RecordsWriteValidateIntegrityContextIdMismatch";
+    DwnErrorCode["RecordsWriteValidateIntegrityContextIdNotInSignerSignaturePayload"] = "RecordsWriteValidateIntegrityContextIdNotInSignerSignaturePayload";
+    DwnErrorCode["RecordsWriteValidateIntegrityDateCreatedMismatch"] = "RecordsWriteValidateIntegrityDateCreatedMismatch";
+    DwnErrorCode["RecordsWriteValidateIntegrityEncryptionCidMismatch"] = "RecordsWriteValidateIntegrityEncryptionCidMismatch";
+    DwnErrorCode["RecordsWriteValidateIntegrityRecordIdUnauthorized"] = "RecordsWriteValidateIntegrityRecordIdUnauthorized";
+    DwnErrorCode["SchemaValidatorSchemaNotFound"] = "SchemaValidatorSchemaNotFound";
+    DwnErrorCode["SchemaValidationFailure"] = "SchemaValidationFailure";
+    DwnErrorCode["Secp256k1KeyNotValid"] = "Secp256k1KeyNotValid";
+    DwnErrorCode["TimestampInvalid"] = "TimestampInvalid";
+    DwnErrorCode["UrlProtocolNotNormalized"] = "UrlProtocolNotNormalized";
+    DwnErrorCode["UrlProtocolNotNormalizable"] = "UrlProtocolNotNormalizable";
+    DwnErrorCode["UrlSchemaNotNormalized"] = "UrlSchemaNotNormalized";
+    DwnErrorCode["UrlSchemaNotNormalizable"] = "UrlSchemaNotNormalizable";
+})(DwnErrorCode || (DwnErrorCode = {}));
+;
+//# sourceMappingURL=dwn-error.js.map

package/dist/esm/src/core/dwn-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dwn-error.js","sourceRoot":"","sources":["../../../../src/core/dwn-error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,YAAoB,IAAY,EAAE,OAAe;QAC/C,KAAK,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QADX,SAAI,GAAJ,IAAI,CAAQ;QAG9B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,YAyHX;AAzHD,WAAY,YAAY;IACtB,iEAAiD,CAAA;IACjD,uFAAuE,CAAA;IACvE,iHAAiG,CAAA;IACjG,yEAAyD,CAAA;IACzD,mFAAmE,CAAA;IACnE,2EAA2D,CAAA;IAC3D,mFAAmE,CAAA;IACnE,+DAA+C,CAAA;IAC/C,6CAA6B,CAAA;IAC7B,2CAA2B,CAAA;IAC3B,2DAA2C,CAAA;IAC3C,uDAAuC,CAAA;IACvC,iGAAiF,CAAA;IACjF,yFAAyE,CAAA;IACzE,iFAAiE,CAAA;IACjE,iFAAiE,CAAA;IACjE,iFAAiE,CAAA;IACjE,2FAA2E,CAAA;IAC3E,qFAAqE,CAAA;IACrE,+FAA+E,CAAA;IAC/E,6FAA6E,CAAA;IAC7E,2FAA2E,CAAA;IAC3E,yEAAyD,CAAA;IACzD,qFAAqE,CAAA;IACrE,yFAAyE,CAAA;IACzE,6DAA6C,CAAA;IAC7C,uEAAuD,CAAA;IACvD,+EAA+D,CAAA;IAC/D,uFAAuE,CAAA;IACvE,yFAAyE,CAAA;IACzE,+GAA+F,CAAA;IAC/F,2GAA2F,CAAA;IAC3F,uFAAuE,CAAA;IACvE,qGAAqF,CAAA;IACrF,2FAA2E,CAAA;IAC3E,mGAAmF,CAAA;IACnF,2FAA2E,CAAA;IAC3E,qFAAqE,CAAA;IACrE,+FAA+E,CAAA;IAC/E,qGAAqF,CAAA;IACrF,yHAAyG,CAAA;IACzG,uHAAuG,CAAA;IACvG,qGAAqF,CAAA;IACrF,yGAAyF,CAAA;IACzF,yFAAyE,CAAA;IACzE,qFAAqE,CAAA;IACrE,+FAA+E,CAAA;IAC/E,qFAAqE,CAAA;IACrE,2FAA2E,CAAA;IAC3E,6HAA6G,CAAA;IAC7G,+EAA+D,CAAA;IAC/D,2FAA2E,CAAA;IAC3E,+FAA+E,CAAA;IAC/E,+FAA+E,CAAA;IAC/E,uGAAuF,CAAA;IACvF,+HAA+G,CAAA;IAC/G,6HAA6G,CAAA;IAC7G,+EAA+D,CAAA;IAC/D,qGAAqF,CAAA;IACrF,2GAA2F,CAAA;IAC3F,yGAAyF,CAAA;IACzF,uFAAuE,CAAA;IACvE,iFAAiE,CAAA;IACjE,yEAAyD,CAAA;IACzD,uGAAuF,CAAA;IACvF,qFAAqE,CAAA;IACrE,mIAAmH,CAAA;IACnH,+HAA+G,CAAA;IAC/G,mHAAmG,CAAA;IACnG,uGAAuF,CAAA;IACvF,iHAAiG,CAAA;IACjG,yHAAyG,CAAA;IACzG,6FAA6E,CAAA;IAC7E,mGAAmF,CAAA;IACnF,yGAAyF,CAAA;IACzF,iIAAiH,CAAA;IACjH,yHAAyG,CAAA;IACzG,2GAA2F,CAAA;IAC3F,2EAA2D,CAAA;IAC3D,iFAAiE,CAAA;IACjE,2GAA2F,CAAA;IAC3F,6IAA6H,CAAA;IAC7H,yHAAyG,CAAA;IACzG,6HAA6G,CAAA;IAC7G,+HAA+G,CAAA;IAC/G,iIAAiH,CAAA;IACjH,mFAAmE,CAAA;IACnE,mFAAmE,CAAA;IACnE,mIAAmH,CAAA;IACnH,uHAAuG,CAAA;IACvG,+HAA+G,CAAA;IAC/G,yIAAyH,CAAA;IACzH,2EAA2D,CAAA;IAC3D,6EAA6D,CAAA;IAC7D,+FAA+E,CAAA;IAC/E,2FAA2E,CAAA;IAC3E,6FAA6E,CAAA;IAC7E,iGAAiF,CAAA;IACjF,uEAAuD,CAAA;IACvD,uFAAuE,CAAA;IACvE,yFAAyE,CAAA;IACzE,+EAA+D,CAAA;IAC/D,2EAA2D,CAAA;IAC3D,uEAAuD,CAAA;IACvD,yFAAyE,CAAA;IACzE,6FAA6E,CAAA;IAC7E,qHAAqG,CAAA;IACrG,iHAAiG,CAAA;IACjG,uJAAuI,CAAA;IACvI,qHAAqG,CAAA;IACrG,yHAAyG,CAAA;IACzG,uHAAuG,CAAA;IACvG,+EAA+D,CAAA;IAC/D,mEAAmD,CAAA;IACnD,6DAA6C,CAAA;IAC7C,qDAAqC,CAAA;IACrC,qEAAqD,CAAA;IACrD,yEAAyD,CAAA;IACzD,iEAAiD,CAAA;IACjD,qEAAqD,CAAA;AACvD,CAAC,EAzHW,YAAY,KAAZ,YAAY,QAyHvB;AAAA,CAAC"}

package/dist/esm/src/core/grant-authorization.js

@@ -0,0 +1,108 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { Message } from './message.js';
+import { DwnError, DwnErrorCode } from './dwn-error.js';
+import { DwnInterfaceName, DwnMethodName } from '../enums/dwn-interface-method.js';
+export class GrantAuthorization {
+    /**
+     * Performs PermissionsGrant-based authorization against the given message
+     * Does not validate grant `conditions` or `scope` beyond `interface` and `method`
+     * @throws {DwnError} if authorization fails
+     */
+    static authorizeGenericMessage(tenant, incomingMessage, author, permissionsGrantMessage, messageStore) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const incomingMessageDescriptor = incomingMessage.descriptor;
+            const permissionsGrantId = yield Message.getCid(permissionsGrantMessage);
+            GrantAuthorization.verifyGrantedToAndGrantedFor(author, tenant, permissionsGrantMessage);
+            // verify that grant is active during incomingMessage's timestamp
+            yield GrantAuthorization.verifyGrantActive(tenant, incomingMessageDescriptor.messageTimestamp, permissionsGrantMessage, permissionsGrantId, messageStore);
+            // Check grant scope for interface and method
+            yield GrantAuthorization.verifyGrantScopeInterfaceAndMethod(incomingMessageDescriptor.interface, incomingMessageDescriptor.method, permissionsGrantMessage, permissionsGrantId);
+        });
+    }
+    /**
+     * Fetches PermissionsGrantMessage with CID `permissionsGrantId`.
+     * @returns the PermissionsGrantMessage with CID `permissionsGrantId` if message exists
+     * @throws {Error} if PermissionsGrantMessage with CID `permissionsGrantId` does not exist
+     */
+    static fetchGrant(tenant, messageStore, permissionsGrantId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const possibleGrantMessage = yield messageStore.get(tenant, permissionsGrantId);
+            const dwnInterface = possibleGrantMessage === null || possibleGrantMessage === void 0 ? void 0 : possibleGrantMessage.descriptor.interface;
+            const dwnMethod = possibleGrantMessage === null || possibleGrantMessage === void 0 ? void 0 : possibleGrantMessage.descriptor.method;
+            if (possibleGrantMessage === undefined || dwnInterface !== DwnInterfaceName.Permissions || dwnMethod !== DwnMethodName.Grant) {
+                throw new DwnError(DwnErrorCode.GrantAuthorizationGrantMissing, `Could not find PermissionsGrant with CID ${permissionsGrantId}`);
+            }
+            const permissionsGrantMessage = possibleGrantMessage;
+            return permissionsGrantMessage;
+        });
+    }
+    /**
+     * Verifies the given `grantedTo` and `grantedFor` values against the given permissions grant and throws error if there is a mismatch.
+     */
+    static verifyGrantedToAndGrantedFor(grantedTo, grantedFor, permissionsGrantMessage) {
+        // Validate `grantedTo`
+        const expectedGrantedTo = permissionsGrantMessage.descriptor.grantedTo;
+        if (expectedGrantedTo !== grantedTo) {
+            throw new DwnError(DwnErrorCode.GrantAuthorizationNotGrantedToAuthor, `PermissionsGrant has grantedTo ${expectedGrantedTo}, but given ${grantedTo}`);
+        }
+        // Validate `grantedFor`
+        const expectedGrantedFor = permissionsGrantMessage.descriptor.grantedFor;
+        if (expectedGrantedFor !== grantedFor) {
+            throw new DwnError(DwnErrorCode.GrantAuthorizationNotGrantedForTenant, `PermissionsGrant has grantedFor ${expectedGrantedFor}, but given ${grantedFor}`);
+        }
+    }
+    /**
+     * Verify that the incoming message is within the allowed time frame of the grant,
+     * and the grant has not been revoked.
+     * @param permissionsGrantId Purely being passed as an optimization. Technically can be computed from `permissionsGrantMessage`.
+     * @throws {DwnError} if incomingMessage has timestamp for a time in which the grant is not active.
+     */
+    static verifyGrantActive(tenant, incomingMessageTimestamp, permissionsGrantMessage, permissionsGrantId, messageStore) {
+        return __awaiter(this, void 0, void 0, function* () {
+            // Check that incomingMessage is within the grant's time frame
+            if (incomingMessageTimestamp < permissionsGrantMessage.descriptor.messageTimestamp) {
+                // grant is not yet active
+                throw new DwnError(DwnErrorCode.GrantAuthorizationGrantNotYetActive, `The message has a timestamp before the associated PermissionsGrant becomes active`);
+            }
+            else if (incomingMessageTimestamp >= permissionsGrantMessage.descriptor.dateExpires) {
+                // grant has expired
+                throw new DwnError(DwnErrorCode.GrantAuthorizationGrantExpired, `The message has timestamp after the expiry of the associated PermissionsGrant`);
+            }
+            // Check if grant has been revoked
+            const query = {
+                interface: DwnInterfaceName.Permissions,
+                method: DwnMethodName.Revoke,
+                permissionsGrantId,
+            };
+            const { messages: revokes } = yield messageStore.query(tenant, [query]);
+            const oldestExistingRevoke = yield Message.getOldestMessage(revokes);
+            if (oldestExistingRevoke !== undefined && oldestExistingRevoke.descriptor.messageTimestamp <= incomingMessageTimestamp) {
+                throw new DwnError(DwnErrorCode.GrantAuthorizationGrantRevoked, `PermissionsGrant with CID ${permissionsGrantId} has been revoked`);
+            }
+        });
+    }
+    /**
+     * Verify that the `interface` and `method` grant scopes match the incoming message
+     * @param permissionsGrantId Purely being passed for logging purposes.
+     * @throws {DwnError} if the `interface` and `method` of the incoming message do not match the scope of the PermissionsGrant
+     */
+    static verifyGrantScopeInterfaceAndMethod(dwnInterface, dwnMethod, permissionsGrantMessage, permissionsGrantId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (dwnInterface !== permissionsGrantMessage.descriptor.scope.interface) {
+                throw new DwnError(DwnErrorCode.GrantAuthorizationInterfaceMismatch, `DWN Interface of incoming message is outside the scope of PermissionsGrant with CID ${permissionsGrantId}`);
+            }
+            else if (dwnMethod !== permissionsGrantMessage.descriptor.scope.method) {
+                throw new DwnError(DwnErrorCode.GrantAuthorizationMethodMismatch, `DWN Method of incoming message is outside the scope of PermissionsGrant with CID ${permissionsGrantId}`);
+            }
+        });
+    }
+}
+//# sourceMappingURL=grant-authorization.js.map

package/dist/esm/src/core/grant-authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-authorization.js","sourceRoot":"","sources":["../../../../src/core/grant-authorization.ts"],"names":[],"mappings":";;;;;;;;;AAIA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEnF,MAAM,OAAO,kBAAkB;IAE7B;;;;OAIG;IACI,MAAM,CAAO,uBAAuB,CACzC,MAAc,EACd,eAA+B,EAC/B,MAAc,EACd,uBAAgD,EAChD,YAA0B;;YAG1B,MAAM,yBAAyB,GAAG,eAAe,CAAC,UAAU,CAAC;YAC7D,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAEzE,kBAAkB,CAAC,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,uBAAuB,CAAC,CAAC;YAEzF,iEAAiE;YACjE,MAAM,kBAAkB,CAAC,iBAAiB,CACxC,MAAM,EACN,yBAAyB,CAAC,gBAAgB,EAC1C,uBAAuB,EACvB,kBAAkB,EAClB,YAAY,CACb,CAAC;YAEF,6CAA6C;YAC7C,MAAM,kBAAkB,CAAC,kCAAkC,CACzD,yBAAyB,CAAC,SAAS,EACnC,yBAAyB,CAAC,MAAM,EAChC,uBAAuB,EACvB,kBAAkB,CACnB,CAAC;QACJ,CAAC;KAAA;IAED;;;;OAIG;IACI,MAAM,CAAO,UAAU,CAC5B,MAAc,EACd,YAA0B,EAC1B,kBAA0B;;YAE1B,MAAM,oBAAoB,GAA+B,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;YAE5G,MAAM,YAAY,GAAG,oBAAoB,aAApB,oBAAoB,uBAApB,oBAAoB,CAAE,UAAU,CAAC,SAAS,CAAC;YAChE,MAAM,SAAS,GAAG,oBAAoB,aAApB,oBAAoB,uBAApB,oBAAoB,CAAE,UAAU,CAAC,MAAM,CAAC;YAC1D,IAAI,oBAAoB,KAAK,SAAS,IAAI,YAAY,KAAK,gBAAgB,CAAC,WAAW,IAAI,SAAS,KAAK,aAAa,CAAC,KAAK,EAAE,CAAC;gBAC7H,MAAM,IAAI,QAAQ,CAChB,YAAY,CAAC,8BAA8B,EAC3C,4CAA4C,kBAAkB,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,MAAM,uBAAuB,GAAG,oBAA+C,CAAC;YAChF,OAAO,uBAAuB,CAAC;QACjC,CAAC;KAAA;IAED;;OAEG;IACK,MAAM,CAAC,4BAA4B,CAAC,SAAiB,EAAE,UAAkB,EAAE,uBAAgD;QACjI,uBAAuB;QACvB,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,UAAU,CAAC,SAAS,CAAC;QACvE,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,QAAQ,CAChB,YAAY,CAAC,oCAAoC,EACjD,kCAAkC,iBAAiB,eAAe,SAAS,EAAE,CAC9E,CAAC;QACJ,CAAC;QAED,wBAAwB;QACxB,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,UAAU,CAAC,UAAU,CAAC;QACzE,IAAI,kBAAkB,KAAK,UAAU,EAAE,CAAC;YACtC,MAAM,IAAI,QAAQ,CAChB,YAAY,CAAC,qCAAqC,EAClD,mCAAmC,kBAAkB,eAAe,UAAU,EAAE,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAO,iBAAiB,CACpC,MAAc,EACd,wBAAgC,EAChC,uBAAgD,EAChD,kBAA0B,EAC1B,YAA0B;;YAE1B,8DAA8D;YAC9D,IAAI,wBAAwB,GAAG,uBAAuB,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;gBACnF,0BAA0B;gBAC1B,MAAM,IAAI,QAAQ,CAChB,YAAY,CAAC,mCAAmC,EAChD,mFAAmF,CACpF,CAAC;YACJ,CAAC;iBAAM,IAAI,wBAAwB,IAAI,uBAAuB,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;gBACtF,oBAAoB;gBACpB,MAAM,IAAI,QAAQ,CAChB,YAAY,CAAC,8BAA8B,EAC3C,+EAA+E,CAChF,CAAC;YACJ,CAAC;YAED,kCAAkC;YAClC,MAAM,KAAK,GAAG;gBACZ,SAAS,EAAG,gBAAgB,CAAC,WAAW;gBACxC,MAAM,EAAM,aAAa,CAAC,MAAM;gBAChC,kBAAkB;aACnB,CAAC;YACF,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YACxE,MAAM,oBAAoB,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAErE,IAAI,oBAAoB,KAAK,SAAS,IAAI,oBAAoB,CAAC,UAAU,CAAC,gBAAgB,IAAI,wBAAwB,EAAE,CAAC;gBACvH,MAAM,IAAI,QAAQ,CAChB,YAAY,CAAC,8BAA8B,EAC3C,6BAA6B,kBAAkB,mBAAmB,CACnE,CAAC;YACJ,CAAC;QACH,CAAC;KAAA;IAED;;;;OAIG;IACK,MAAM,CAAO,kCAAkC,CACrD,YAAoB,EACpB,SAAiB,EACjB,uBAAgD,EAChD,kBAA0B;;YAE1B,IAAI,YAAY,KAAK,uBAAuB,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBACxE,MAAM,IAAI,QAAQ,CAChB,YAAY,CAAC,mCAAmC,EAChD,uFAAuF,kBAAkB,EAAE,CAC5G,CAAC;YACJ,CAAC;iBAAM,IAAI,SAAS,KAAK,uBAAuB,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACzE,MAAM,IAAI,QAAQ,CAChB,YAAY,CAAC,gCAAgC,EAC7C,oFAAoF,kBAAkB,EAAE,CACzG,CAAC;YACJ,CAAC;QACH,CAAC;KAAA;CACF"}

package/dist/esm/src/core/message-reply.js

@@ -0,0 +1,5 @@
+export function messageReplyFromError(e, code) {
+    const detail = e instanceof Error ? e.message : 'Error';
+    return { status: { code, detail } };
+}
+//# sourceMappingURL=message-reply.js.map

package/dist/esm/src/core/message-reply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-reply.js","sourceRoot":"","sources":["../../../../src/core/message-reply.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,qBAAqB,CAAC,CAAU,EAAE,IAAY;IAE5D,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAExD,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC;AACtC,CAAC"}