@adaptive-ds/project-registry 0.2.3

package/dist/daemon.js

@@ -0,0 +1,40 @@
+#!/usr/bin/env bun
+import { projectRegistryDaemonConfigFromEnv } from "./runtime/projectRegistryDaemonConfigFromEnv.js";
+import { projectRegistryDaemonOpen } from "./runtime/projectRegistryDaemonOpen.js";
+export async function projectRegistryDaemonRun() {
+    try {
+        const configR = projectRegistryDaemonConfigFromEnv();
+        if (!configR.success) {
+            process.stderr.write(`project-registryd configuration error: ${configR.errorMessage}\n`);
+            return 1;
+        }
+        const daemonR = await projectRegistryDaemonOpen({ config: configR.data });
+        if (!daemonR.success) {
+            process.stderr.write(`project-registryd startup error: ${daemonR.errorMessage}\n`);
+            return 1;
+        }
+        const startR = await daemonR.data.start();
+        if (!startR.success) {
+            process.stderr.write(`project-registryd startup error: ${startR.errorMessage}\n`);
+            const cleanupR = await daemonR.data.shutdown();
+            if (!cleanupR.success) {
+                process.stderr.write(`project-registryd shutdown error: ${cleanupR.errorMessage}\n`);
+            }
+            return 1;
+        }
+        const terminationR = await daemonR.data.termination();
+        if (!terminationR.success) {
+            process.stderr.write(`project-registryd shutdown error: ${terminationR.errorMessage}\n`);
+            return 1;
+        }
+        return 0;
+    }
+    catch {
+        process.stderr.write("project-registryd unexpected failure\n");
+        return 1;
+    }
+}
+if (import.meta.main) {
+    process.exitCode = await projectRegistryDaemonRun();
+}
+//# sourceMappingURL=daemon.js.map

package/dist/daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.js","sourceRoot":"","sources":["../src/daemon.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAA;AACpG,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAA;AAElF,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,kCAAkC,EAAE,CAAA;QACpD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,OAAO,CAAC,YAAY,IAAI,CAAC,CAAA;YACxF,OAAO,CAAC,CAAA;QACV,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QACzE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,OAAO,CAAC,YAAY,IAAI,CAAC,CAAA;YAClF,OAAO,CAAC,CAAA;QACV,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA;QACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,MAAM,CAAC,YAAY,IAAI,CAAC,CAAA;YACjF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAA;YAC9C,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,QAAQ,CAAC,YAAY,IAAI,CAAC,CAAA;YACtF,CAAC;YACD,OAAO,CAAC,CAAA;QACV,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;QACrD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,YAAY,CAAC,YAAY,IAAI,CAAC,CAAA;YACxF,OAAO,CAAC,CAAA;QACV,CAAC;QACD,OAAO,CAAC,CAAA;IACV,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAA;QAC9D,OAAO,CAAC,CAAA;IACV,CAAC;AACH,CAAC;AAED,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,OAAO,CAAC,QAAQ,GAAG,MAAM,wBAAwB,EAAE,CAAA;AACrD,CAAC"}

package/dist/identity/IdentityDirectory.d.ts

@@ -0,0 +1,8 @@
+import type { PromiseResult } from "#result";
+import type { IdentityDirectoryUser } from "./IdentityDirectoryUser.js";
+export interface IdentityDirectory {
+    usersList(accessToken: string): PromiseResult<readonly IdentityDirectoryUser[]>;
+    userRolesList(subject: string, accessToken: string): PromiseResult<readonly unknown[]>;
+    userPreferredUsernameResolve(subject: string, accessToken: string): PromiseResult<string>;
+}
+//# sourceMappingURL=IdentityDirectory.d.ts.map

package/dist/identity/IdentityDirectory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityDirectory.d.ts","sourceRoot":"","sources":["../../src/identity/IdentityDirectory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAEvE,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAAA;IAC/E,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,aAAa,CAAC,SAAS,OAAO,EAAE,CAAC,CAAA;IACtF,4BAA4B,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;CAC1F"}

package/dist/identity/IdentityDirectory.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=IdentityDirectory.js.map

package/dist/identity/IdentityDirectory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityDirectory.js","sourceRoot":"","sources":["../../src/identity/IdentityDirectory.ts"],"names":[],"mappings":""}

package/dist/identity/IdentityDirectoryUser.d.ts

@@ -0,0 +1,5 @@
+export type IdentityDirectoryUser = {
+    subject: string;
+    preferredUsername: string;
+};
+//# sourceMappingURL=IdentityDirectoryUser.d.ts.map

package/dist/identity/IdentityDirectoryUser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityDirectoryUser.d.ts","sourceRoot":"","sources":["../../src/identity/IdentityDirectoryUser.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAA;IACf,iBAAiB,EAAE,MAAM,CAAA;CAC1B,CAAA"}

package/dist/identity/IdentityDirectoryUser.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=IdentityDirectoryUser.js.map

package/dist/identity/IdentityDirectoryUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityDirectoryUser.js","sourceRoot":"","sources":["../../src/identity/IdentityDirectoryUser.ts"],"names":[],"mappings":""}

package/dist/identity/MappedUser.d.ts

@@ -0,0 +1,7 @@
+import type { Role } from "../access/Role.js";
+export type MappedUser = {
+    subject: string;
+    username: string;
+    role: Role | undefined;
+};
+//# sourceMappingURL=MappedUser.d.ts.map

package/dist/identity/MappedUser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MappedUser.d.ts","sourceRoot":"","sources":["../../src/identity/MappedUser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AAE7C,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,IAAI,GAAG,SAAS,CAAA;CACvB,CAAA"}

package/dist/identity/MappedUser.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=MappedUser.js.map

package/dist/identity/MappedUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MappedUser.js","sourceRoot":"","sources":["../../src/identity/MappedUser.ts"],"names":[],"mappings":""}

package/dist/identity/PosixUserDirectory.d.ts

@@ -0,0 +1,5 @@
+import type { PromiseResult } from "#result";
+export interface PosixUserDirectory {
+    usernameExists(username: string): PromiseResult<boolean>;
+}
+//# sourceMappingURL=PosixUserDirectory.d.ts.map

package/dist/identity/PosixUserDirectory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PosixUserDirectory.d.ts","sourceRoot":"","sources":["../../src/identity/PosixUserDirectory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAE5C,MAAM,WAAW,kBAAkB;IACjC,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;CACzD"}

package/dist/identity/PosixUserDirectory.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=PosixUserDirectory.js.map

package/dist/identity/PosixUserDirectory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PosixUserDirectory.js","sourceRoot":"","sources":["../../src/identity/PosixUserDirectory.ts"],"names":[],"mappings":""}

package/dist/identity/VisibleUser.d.ts

@@ -0,0 +1,7 @@
+import type { Role } from "../access/Role.js";
+export type VisibleUser = {
+    subject: string;
+    username: string;
+    role: Role | undefined;
+};
+//# sourceMappingURL=VisibleUser.d.ts.map

package/dist/identity/VisibleUser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"VisibleUser.d.ts","sourceRoot":"","sources":["../../src/identity/VisibleUser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AAE7C,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,IAAI,GAAG,SAAS,CAAA;CACvB,CAAA"}

package/dist/identity/VisibleUser.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=VisibleUser.js.map

package/dist/identity/VisibleUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VisibleUser.js","sourceRoot":"","sources":["../../src/identity/VisibleUser.ts"],"names":[],"mappings":""}

package/dist/identity/VisibleUserDirectoryListOptions.d.ts

@@ -0,0 +1,12 @@
+import type { IdentityDirectory } from "./IdentityDirectory.js";
+import type { PosixUserDirectory } from "./PosixUserDirectory.js";
+export type VisibleUserDirectoryListOptions = {
+    accessToken: string;
+    identityDirectory: IdentityDirectory;
+    posixUsers: PosixUserDirectory;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    maxUsers?: number;
+    maxLookupCount?: number;
+};
+//# sourceMappingURL=VisibleUserDirectoryListOptions.d.ts.map

package/dist/identity/VisibleUserDirectoryListOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"VisibleUserDirectoryListOptions.d.ts","sourceRoot":"","sources":["../../src/identity/VisibleUserDirectoryListOptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAEjE,MAAM,MAAM,+BAA+B,GAAG;IAC5C,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,UAAU,EAAE,kBAAkB,CAAA;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,CAAA"}

package/dist/identity/VisibleUserDirectoryListOptions.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=VisibleUserDirectoryListOptions.js.map

package/dist/identity/VisibleUserDirectoryListOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VisibleUserDirectoryListOptions.js","sourceRoot":"","sources":["../../src/identity/VisibleUserDirectoryListOptions.ts"],"names":[],"mappings":""}

package/dist/identity/posixUserDirectoryCreate.d.ts

@@ -0,0 +1,4 @@
+import type { ProjectRegistryDaemonPosix } from "../runtime/ProjectRegistryDaemonPosix.js";
+import type { PosixUserDirectory } from "./PosixUserDirectory.js";
+export declare function posixUserDirectoryCreate(posix?: ProjectRegistryDaemonPosix): PosixUserDirectory;
+//# sourceMappingURL=posixUserDirectoryCreate.d.ts.map

package/dist/identity/posixUserDirectoryCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"posixUserDirectoryCreate.d.ts","sourceRoot":"","sources":["../../src/identity/posixUserDirectoryCreate.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAA;AAE1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAqCjE,wBAAgB,wBAAwB,CACtC,KAAK,GAAE,0BAAgE,GACtE,kBAAkB,CAYpB"}

package/dist/identity/posixUserDirectoryCreate.js

@@ -0,0 +1,47 @@
+import { createResult } from "#result";
+import { projectRegistryDaemonPosixDefault } from "../runtime/projectRegistryDaemonPosixDefault.js";
+const maximumUsernameLength = 255;
+const maximumPosixId = 0xffffffff;
+function usernameIsSafe(value) {
+    return (typeof value === "string" &&
+        value.length > 0 &&
+        value.length <= maximumUsernameLength &&
+        /^[A-Za-z_][A-Za-z0-9_.-]*\$?$/.test(value));
+}
+function mappedUserIsValid(value, username) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return false;
+    const user = value;
+    return (user.username === username &&
+        usernameIsSafe(user.username) &&
+        typeof user.uid === "number" &&
+        Number.isSafeInteger(user.uid) &&
+        user.uid >= 0 &&
+        user.uid <= maximumPosixId &&
+        typeof user.gid === "number" &&
+        Number.isSafeInteger(user.gid) &&
+        user.gid >= 0 &&
+        user.gid <= maximumPosixId);
+}
+function mappedUserResultHasUsername(value, username) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return false;
+    const result = value;
+    return result.success === true && mappedUserIsValid(result.data, username);
+}
+export function posixUserDirectoryCreate(posix = projectRegistryDaemonPosixDefault()) {
+    return {
+        async usernameExists(username) {
+            if (!usernameIsSafe(username))
+                return createResult(false);
+            try {
+                const userR = await posix.userResolve(username);
+                return createResult(mappedUserResultHasUsername(userR, username));
+            }
+            catch {
+                return createResult(false);
+            }
+        },
+    };
+}
+//# sourceMappingURL=posixUserDirectoryCreate.js.map

package/dist/identity/posixUserDirectoryCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"posixUserDirectoryCreate.js","sourceRoot":"","sources":["../../src/identity/posixUserDirectoryCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAGtC,OAAO,EAAE,iCAAiC,EAAE,MAAM,iDAAiD,CAAA;AAGnG,MAAM,qBAAqB,GAAG,GAAG,CAAA;AACjC,MAAM,cAAc,GAAG,UAAU,CAAA;AAEjC,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,qBAAqB;QACrC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAC5C,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,QAAgB;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,MAAM,IAAI,GAAG,KAAgC,CAAA;IAC7C,OAAO,CACL,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAC1B,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC7B,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;QAC5B,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9B,IAAI,CAAC,GAAG,IAAI,CAAC;QACb,IAAI,CAAC,GAAG,IAAI,cAAc;QAC1B,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;QAC5B,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9B,IAAI,CAAC,GAAG,IAAI,CAAC;QACb,IAAI,CAAC,GAAG,IAAI,cAAc,CAC3B,CAAA;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc,EAAE,QAAgB;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,OAAO,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AAC5E,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,QAAoC,iCAAiC,EAAE;IAEvE,OAAO;QACL,KAAK,CAAC,cAAc,CAAC,QAAQ;YAC3B,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;gBAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;YACzD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;gBAC/C,OAAO,YAAY,CAAC,2BAA2B,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAA;YACnE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;YAC5B,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/identity/preferredUsernameMap.d.ts

@@ -0,0 +1,7 @@
+import { type PromiseResult } from "#result";
+import type { PosixUserDirectory } from "./PosixUserDirectory.js";
+export declare function preferredUsernameMap(preferredUsername: string, posixUsers: PosixUserDirectory, options?: {
+    timeoutMs?: number;
+    signal?: AbortSignal;
+}): PromiseResult<string>;
+//# sourceMappingURL=preferredUsernameMap.d.ts.map

package/dist/identity/preferredUsernameMap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preferredUsernameMap.d.ts","sourceRoot":"","sources":["../../src/identity/preferredUsernameMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAE7E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAEjE,wBAAsB,oBAAoB,CACxC,iBAAiB,EAAE,MAAM,EACzB,UAAU,EAAE,kBAAkB,EAC9B,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,GACzD,aAAa,CAAC,MAAM,CAAC,CAiBvB"}

package/dist/identity/preferredUsernameMap.js

@@ -0,0 +1,19 @@
+import { createResult, createResultError } from "#result";
+import { promiseBoundedRace } from "../runtime/promiseBoundedRace.js";
+export async function preferredUsernameMap(preferredUsername, posixUsers, options = {}) {
+    const op = "preferredUsernameMap";
+    if (typeof preferredUsername !== "string" || preferredUsername.length === 0 || preferredUsername.length > 256) {
+        return createResultError(op, "preferred username mapping is unavailable");
+    }
+    try {
+        const existsR = await promiseBoundedRace(Promise.resolve().then(() => posixUsers.usernameExists(preferredUsername)), options);
+        if (existsR.success !== true || existsR.data.success !== true || existsR.data.data !== true) {
+            return createResultError(op, "preferred username mapping is unavailable");
+        }
+        return createResult(preferredUsername);
+    }
+    catch {
+        return createResultError(op, "preferred username mapping is unavailable");
+    }
+}
+//# sourceMappingURL=preferredUsernameMap.js.map

package/dist/identity/preferredUsernameMap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preferredUsernameMap.js","sourceRoot":"","sources":["../../src/identity/preferredUsernameMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAGrE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,iBAAyB,EACzB,UAA8B,EAC9B,UAAwD,EAAE;IAE1D,MAAM,EAAE,GAAG,sBAAsB,CAAA;IACjC,IAAI,OAAO,iBAAiB,KAAK,QAAQ,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,iBAAiB,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC9G,OAAO,iBAAiB,CAAC,EAAE,EAAE,2CAA2C,CAAC,CAAA;IAC3E,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,kBAAkB,CACtC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,EAC1E,OAAO,CACR,CAAA;QACD,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC5F,OAAO,iBAAiB,CAAC,EAAE,EAAE,2CAA2C,CAAC,CAAA;QAC3E,CAAC;QACD,OAAO,YAAY,CAAC,iBAAiB,CAAC,CAAA;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,2CAA2C,CAAC,CAAA;IAC3E,CAAC;AACH,CAAC"}

package/dist/identity/userRoleResolve.d.ts

@@ -0,0 +1,8 @@
+import { type PromiseResult } from "#result";
+import type { Role } from "../access/Role.js";
+import type { IdentityDirectory } from "./IdentityDirectory.js";
+export declare function userRoleResolve(subject: string, accessToken: string, directory: IdentityDirectory, options?: {
+    timeoutMs?: number;
+    signal?: AbortSignal;
+}): PromiseResult<Role>;
+//# sourceMappingURL=userRoleResolve.d.ts.map

package/dist/identity/userRoleResolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"userRoleResolve.d.ts","sourceRoot":"","sources":["../../src/identity/userRoleResolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAC7E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AAG7C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAE/D,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,iBAAiB,EAC5B,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,GACzD,aAAa,CAAC,IAAI,CAAC,CA+BrB"}

package/dist/identity/userRoleResolve.js

@@ -0,0 +1,31 @@
+import { createResult, createResultError } from "#result";
+import { roleResolve } from "../access/roleResolve.js";
+import { promiseBoundedRace } from "../runtime/promiseBoundedRace.js";
+export async function userRoleResolve(subject, accessToken, directory, options = {}) {
+    const op = "userRoleResolve";
+    if (typeof subject !== "string" ||
+        subject.length === 0 ||
+        subject.length > 256 ||
+        typeof accessToken !== "string" ||
+        accessToken.length === 0 ||
+        accessToken.length > 8192) {
+        return createResultError(op, "current role is unavailable");
+    }
+    try {
+        const rolesR = await promiseBoundedRace(Promise.resolve().then(() => directory.userRolesList(subject, accessToken)), options);
+        if (rolesR.success !== true ||
+            rolesR.data.success !== true ||
+            !Array.isArray(rolesR.data.data) ||
+            rolesR.data.data.length > 32) {
+            return createResultError(op, "current role is unavailable");
+        }
+        const roleR = roleResolve(rolesR.data.data);
+        if (!roleR.success)
+            return createResultError(op, "current role is unavailable");
+        return createResult(roleR.data);
+    }
+    catch {
+        return createResultError(op, "current role is unavailable");
+    }
+}
+//# sourceMappingURL=userRoleResolve.js.map

package/dist/identity/userRoleResolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userRoleResolve.js","sourceRoot":"","sources":["../../src/identity/userRoleResolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAE7E,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAGrE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,WAAmB,EACnB,SAA4B,EAC5B,UAAwD,EAAE;IAE1D,MAAM,EAAE,GAAG,iBAAiB,CAAA;IAC5B,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,OAAO,CAAC,MAAM,GAAG,GAAG;QACpB,OAAO,WAAW,KAAK,QAAQ;QAC/B,WAAW,CAAC,MAAM,KAAK,CAAC;QACxB,WAAW,CAAC,MAAM,GAAG,IAAI,EACzB,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,EAC3E,OAAO,CACR,CAAA;QACD,IACE,MAAM,CAAC,OAAO,KAAK,IAAI;YACvB,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI;YAC5B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,EAC5B,CAAC;YACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAA;QAC7D,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAA;QAC/E,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAA;IAC7D,CAAC;AACH,CAAC"}

package/dist/identity/visibleUserDirectoryList.d.ts

@@ -0,0 +1,6 @@
+import { type PromiseResult } from "#result";
+import type { Actor } from "../access/Actor.js";
+import type { VisibleUser } from "./VisibleUser.js";
+import type { VisibleUserDirectoryListOptions } from "./VisibleUserDirectoryListOptions.js";
+export declare function visibleUserDirectoryList(actor: Actor, options: VisibleUserDirectoryListOptions): PromiseResult<VisibleUser[]>;
+//# sourceMappingURL=visibleUserDirectoryList.d.ts.map

package/dist/identity/visibleUserDirectoryList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"visibleUserDirectoryList.d.ts","sourceRoot":"","sources":["../../src/identity/visibleUserDirectoryList.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAC7E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAM/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAA;AAE3F,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,+BAA+B,GACvC,aAAa,CAAC,WAAW,EAAE,CAAC,CA8D9B"}

package/dist/identity/visibleUserDirectoryList.js

@@ -0,0 +1,70 @@
+import { createResult, createResultError } from "#result";
+import { visibleUserList } from "../access/visibleUserList.js";
+import { promiseBoundedRace } from "../runtime/promiseBoundedRace.js";
+import { preferredUsernameMap } from "./preferredUsernameMap.js";
+import { userRoleResolve } from "./userRoleResolve.js";
+export async function visibleUserDirectoryList(actor, options) {
+    const op = "visibleUserDirectoryList";
+    if (actor.role === "own") {
+        const actorR = visibleUserList(actor, []);
+        if (!actorR.success)
+            return createResultError(op, "user directory is unavailable");
+        return createResult([]);
+    }
+    const maxUsers = options.maxUsers ?? 1_000;
+    const maxLookupCount = options.maxLookupCount ?? maxUsers * 2;
+    if (typeof options.accessToken !== "string" ||
+        options.accessToken.length === 0 ||
+        options.accessToken.length > 8192 ||
+        !Number.isSafeInteger(maxUsers) ||
+        maxUsers < 1 ||
+        maxUsers > 10_000 ||
+        !Number.isSafeInteger(maxLookupCount) ||
+        maxLookupCount < 1 ||
+        maxLookupCount > 20_000) {
+        return createResultError(op, "user directory is unavailable");
+    }
+    try {
+        const usersR = await promiseBoundedRace(Promise.resolve().then(() => options.identityDirectory.usersList(options.accessToken)), options);
+        if (usersR.success !== true || usersR.data.success !== true || !Array.isArray(usersR.data.data)) {
+            return createResultError(op, "user directory is unavailable");
+        }
+        if (usersR.data.data.length > maxUsers)
+            return createResultError(op, "user directory is too large");
+        const mappedUsers = [];
+        let lookupCount = 0;
+        for (const user of usersR.data.data) {
+            if (typeof user !== "object" ||
+                user === null ||
+                typeof user.subject !== "string" ||
+                user.subject.length === 0 ||
+                user.subject.length > 256 ||
+                typeof user.preferredUsername !== "string" ||
+                user.preferredUsername.length === 0 ||
+                user.preferredUsername.length > 256) {
+                return createResultError(op, "user directory contains an invalid mapping");
+            }
+            lookupCount += 1;
+            if (lookupCount > maxLookupCount)
+                return createResultError(op, "user directory lookup limit exceeded");
+            const usernameR = await preferredUsernameMap(user.preferredUsername, options.posixUsers, options);
+            if (!usernameR.success)
+                return createResultError(op, "user directory contains an invalid mapping");
+            lookupCount += 1;
+            if (lookupCount > maxLookupCount)
+                return createResultError(op, "user directory lookup limit exceeded");
+            const roleR = await userRoleResolve(user.subject, options.accessToken, options.identityDirectory, options);
+            if (!roleR.success)
+                return createResultError(op, "user directory role lookup is unavailable");
+            mappedUsers.push({ subject: user.subject, username: usernameR.data, role: roleR.data });
+        }
+        const visibleR = visibleUserList(actor, mappedUsers);
+        if (!visibleR.success)
+            return createResultError(op, "user directory is unavailable");
+        return createResult(visibleR.data);
+    }
+    catch {
+        return createResultError(op, "user directory is unavailable");
+    }
+}
+//# sourceMappingURL=visibleUserDirectoryList.js.map

package/dist/identity/visibleUserDirectoryList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"visibleUserDirectoryList.js","sourceRoot":"","sources":["../../src/identity/visibleUserDirectoryList.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAE7E,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAErE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAItD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAY,EACZ,OAAwC;IAExC,MAAM,EAAE,GAAG,0BAA0B,CAAA;IACrC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAA;QAClF,OAAO,YAAY,CAAC,EAAE,CAAC,CAAA;IACzB,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAA;IAC1C,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,QAAQ,GAAG,CAAC,CAAA;IAC7D,IACE,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACvC,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAChC,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI;QACjC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;QAC/B,QAAQ,GAAG,CAAC;QACZ,QAAQ,GAAG,MAAM;QACjB,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC;QACrC,cAAc,GAAG,CAAC;QAClB,cAAc,GAAG,MAAM,EACvB,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAA;IAC/D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,EACtF,OAAO,CACR,CAAA;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChG,OAAO,iBAAiB,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAA;QAC/D,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ;YAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAA;QACnG,MAAM,WAAW,GAAiB,EAAE,CAAA;QACpC,IAAI,WAAW,GAAG,CAAC,CAAA;QACnB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,IACE,OAAO,IAAI,KAAK,QAAQ;gBACxB,IAAI,KAAK,IAAI;gBACb,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;gBAChC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBACzB,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG;gBACzB,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ;gBAC1C,IAAI,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;gBACnC,IAAI,CAAC,iBAAiB,CAAC,MAAM,GAAG,GAAG,EACnC,CAAC;gBACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,4CAA4C,CAAC,CAAA;YAC5E,CAAC;YACD,WAAW,IAAI,CAAC,CAAA;YAChB,IAAI,WAAW,GAAG,cAAc;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,sCAAsC,CAAC,CAAA;YACtG,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;YACjG,IAAI,CAAC,SAAS,CAAC,OAAO;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,4CAA4C,CAAC,CAAA;YAClG,WAAW,IAAI,CAAC,CAAA;YAChB,IAAI,WAAW,GAAG,cAAc;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,sCAAsC,CAAC,CAAA;YACtG,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAA;YAC1G,IAAI,CAAC,KAAK,CAAC,OAAO;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,2CAA2C,CAAC,CAAA;YAC7F,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QACzF,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;QACpD,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAA;QACpF,OAAO,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAA;IAC/D,CAAC;AACH,CAAC"}