@adaptive-ds/project-registry 0.2.3

package/dist/zitadel/zitadelLoginTransactionStoreCreate.js

@@ -0,0 +1,82 @@
+import { createResult, createResultError } from "#result";
+import { clockNowResolve } from "../runtime/clockNowResolve.js";
+import { timeMillisecondsValidate } from "../runtime/timeMillisecondsValidate.js";
+const defaultMaxEntries = 10_000;
+const maximumMaxEntries = 100_000;
+function maxEntriesResolve(value) {
+    const maxEntries = value ?? defaultMaxEntries;
+    if (!Number.isSafeInteger(maxEntries) || maxEntries < 1 || maxEntries > maximumMaxEntries)
+        return undefined;
+    return maxEntries;
+}
+export function zitadelLoginTransactionStoreCreate(options = {}) {
+    const clock = options.clock ?? Date.now;
+    const transactions = new Map();
+    const maxEntries = maxEntriesResolve(options.maxEntries);
+    const expiredEntriesClean = (now) => {
+        for (const [state, transaction] of transactions) {
+            if (transaction.expiresAt <= now)
+                transactions.delete(state);
+        }
+    };
+    return {
+        async put(transaction) {
+            const op = "loginTransactionPut";
+            const nowR = clockNowResolve(clock);
+            if (!nowR.success)
+                return createResultError(op, "login transaction is invalid");
+            const now = nowR.data;
+            expiredEntriesClean(now);
+            if (maxEntries === undefined)
+                return createResultError(op, "login transaction capacity is invalid");
+            if (typeof transaction !== "object" ||
+                transaction === null ||
+                Array.isArray(transaction) ||
+                typeof transaction.state !== "string" ||
+                transaction.state.length !== 43 ||
+                typeof transaction.nonce !== "string" ||
+                transaction.nonce.length !== 43 ||
+                typeof transaction.codeVerifier !== "string" ||
+                transaction.codeVerifier.length !== 43 ||
+                !/^[A-Za-z0-9_-]{43}$/.test(transaction.state) ||
+                !/^[A-Za-z0-9_-]{43}$/.test(transaction.nonce) ||
+                !/^[A-Za-z0-9_-]{43}$/.test(transaction.codeVerifier) ||
+                typeof transaction.callbackUrl !== "string" ||
+                transaction.callbackUrl.length === 0 ||
+                transaction.callbackUrl.length > 2048 ||
+                typeof transaction.preAuthCookieHash !== "string" ||
+                !/^[a-f0-9]{64}$/.test(transaction.preAuthCookieHash) ||
+                !timeMillisecondsValidate(transaction.expiresAt) ||
+                transaction.expiresAt <= now) {
+                return createResultError(op, "login transaction is invalid");
+            }
+            if (transactions.has(transaction.state))
+                return createResultError(op, "login transaction is invalid");
+            if (transactions.size >= maxEntries)
+                return createResultError(op, "login transaction store is full");
+            transactions.set(transaction.state, { ...transaction });
+            return createResult(true);
+        },
+        async consume(state) {
+            const op = "loginTransactionConsume";
+            const nowR = clockNowResolve(clock);
+            if (!nowR.success)
+                return createResultError(op, "login transaction is invalid");
+            expiredEntriesClean(nowR.data);
+            if (maxEntries === undefined)
+                return createResultError(op, "login transaction capacity is invalid");
+            if (typeof state !== "string" || state.length !== 43 || !/^[A-Za-z0-9_-]{43}$/.test(state))
+                return createResultError(op, "login transaction is invalid");
+            const transaction = transactions.get(state);
+            if (transaction === undefined)
+                return createResultError(op, "login transaction is invalid");
+            if (!timeMillisecondsValidate(transaction.expiresAt) || transaction.expiresAt <= nowR.data) {
+                transactions.delete(state);
+                return createResultError(op, "login transaction is invalid");
+            }
+            transactions.delete(state);
+            return createResult({ ...transaction });
+        },
+    };
+}
+//# sourceMappingURL=zitadelLoginTransactionStoreCreate.js.map

package/dist/zitadel/zitadelLoginTransactionStoreCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelLoginTransactionStoreCreate.js","sourceRoot":"","sources":["../../src/zitadel/zitadelLoginTransactionStoreCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAA;AAKjF,MAAM,iBAAiB,GAAG,MAAM,CAAA;AAChC,MAAM,iBAAiB,GAAG,OAAO,CAAA;AAEjC,SAAS,iBAAiB,CAAC,KAAyB;IAClD,MAAM,UAAU,GAAG,KAAK,IAAI,iBAAiB,CAAA;IAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,iBAAiB;QAAE,OAAO,SAAS,CAAA;IAC3G,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,UAAwC,EAAE;IAC3F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAA;IACvC,MAAM,YAAY,GAAG,IAAI,GAAG,EAA4B,CAAA;IACxD,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IAExD,MAAM,mBAAmB,GAAG,CAAC,GAAW,EAAQ,EAAE;QAChD,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,YAAY,EAAE,CAAC;YAChD,IAAI,WAAW,CAAC,SAAS,IAAI,GAAG;gBAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC,CAAA;IAED,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,WAAW;YACnB,MAAM,EAAE,GAAG,qBAAqB,CAAA;YAChC,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;YACnC,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;YAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAA;YACrB,mBAAmB,CAAC,GAAG,CAAC,CAAA;YACxB,IAAI,UAAU,KAAK,SAAS;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,uCAAuC,CAAC,CAAA;YACnG,IACE,OAAO,WAAW,KAAK,QAAQ;gBAC/B,WAAW,KAAK,IAAI;gBACpB,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC1B,OAAO,WAAW,CAAC,KAAK,KAAK,QAAQ;gBACrC,WAAW,CAAC,KAAK,CAAC,MAAM,KAAK,EAAE;gBAC/B,OAAO,WAAW,CAAC,KAAK,KAAK,QAAQ;gBACrC,WAAW,CAAC,KAAK,CAAC,MAAM,KAAK,EAAE;gBAC/B,OAAO,WAAW,CAAC,YAAY,KAAK,QAAQ;gBAC5C,WAAW,CAAC,YAAY,CAAC,MAAM,KAAK,EAAE;gBACtC,CAAC,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBAC9C,CAAC,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBAC9C,CAAC,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;gBACrD,OAAO,WAAW,CAAC,WAAW,KAAK,QAAQ;gBAC3C,WAAW,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;gBACpC,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI;gBACrC,OAAO,WAAW,CAAC,iBAAiB,KAAK,QAAQ;gBACjD,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC;gBACrD,CAAC,wBAAwB,CAAC,WAAW,CAAC,SAAS,CAAC;gBAChD,WAAW,CAAC,SAAS,IAAI,GAAG,EAC5B,CAAC;gBACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;YAC9D,CAAC;YACD,IAAI,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;YACrG,IAAI,YAAY,CAAC,IAAI,IAAI,UAAU;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,iCAAiC,CAAC,CAAA;YACpG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,GAAG,WAAW,EAAE,CAAC,CAAA;YACvD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;QAC3B,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,EAAE,GAAG,yBAAyB,CAAA;YACpC,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;YACnC,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;YAC/E,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC9B,IAAI,UAAU,KAAK,SAAS;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,uCAAuC,CAAC,CAAA;YACnG,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;gBACxF,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;YAC9D,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAC3C,IAAI,WAAW,KAAK,SAAS;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;YAC3F,IAAI,CAAC,wBAAwB,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC3F,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAC1B,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;YAC9D,CAAC;YACD,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAC1B,OAAO,YAAY,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC,CAAA;QACzC,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/zitadel/zitadelPreAuthCookieClear.d.ts

@@ -0,0 +1,3 @@
+import { type Result } from "#result";
+export declare function zitadelPreAuthCookieClear(): Result<string>;
+//# sourceMappingURL=zitadelPreAuthCookieClear.d.ts.map

package/dist/zitadel/zitadelPreAuthCookieClear.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelPreAuthCookieClear.d.ts","sourceRoot":"","sources":["../../src/zitadel/zitadelPreAuthCookieClear.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,SAAS,CAAA;AAInD,wBAAgB,yBAAyB,IAAI,MAAM,CAAC,MAAM,CAAC,CAE1D"}

package/dist/zitadel/zitadelPreAuthCookieClear.js

@@ -0,0 +1,6 @@
+import { createResult } from "#result";
+const cookieName = "__Host-project-registry-pre-auth";
+export function zitadelPreAuthCookieClear() {
+    return createResult(`${cookieName}=; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax`);
+}
+//# sourceMappingURL=zitadelPreAuthCookieClear.js.map

package/dist/zitadel/zitadelPreAuthCookieClear.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelPreAuthCookieClear.js","sourceRoot":"","sources":["../../src/zitadel/zitadelPreAuthCookieClear.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAe,MAAM,SAAS,CAAA;AAEnD,MAAM,UAAU,GAAG,kCAAkC,CAAA;AAErD,MAAM,UAAU,yBAAyB;IACvC,OAAO,YAAY,CAAC,GAAG,UAAU,sDAAsD,CAAC,CAAA;AAC1F,CAAC"}

package/dist/zitadel/zitadelPreAuthCookieHash.d.ts

@@ -0,0 +1,3 @@
+import { type PromiseResult } from "#result";
+export declare function zitadelPreAuthCookieHash(secret: string): PromiseResult<string>;
+//# sourceMappingURL=zitadelPreAuthCookieHash.d.ts.map

package/dist/zitadel/zitadelPreAuthCookieHash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelPreAuthCookieHash.d.ts","sourceRoot":"","sources":["../../src/zitadel/zitadelPreAuthCookieHash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAU7E,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CASpF"}

package/dist/zitadel/zitadelPreAuthCookieHash.js

@@ -0,0 +1,20 @@
+import { createResult, createResultError } from "#result";
+function secretIsValid(secret) {
+    return /^[A-Za-z0-9_-]{43,256}$/.test(secret);
+}
+function hexEncode(bytes) {
+    return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+export async function zitadelPreAuthCookieHash(secret) {
+    const op = "zitadelPreAuthCookieHash";
+    if (typeof secret !== "string" || !secretIsValid(secret))
+        return createResultError(op, "pre-auth cookie is invalid");
+    try {
+        const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(secret));
+        return createResult(hexEncode(new Uint8Array(digest)));
+    }
+    catch {
+        return createResultError(op, "pre-auth cookie could not be bound");
+    }
+}
+//# sourceMappingURL=zitadelPreAuthCookieHash.js.map

package/dist/zitadel/zitadelPreAuthCookieHash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelPreAuthCookieHash.js","sourceRoot":"","sources":["../../src/zitadel/zitadelPreAuthCookieHash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAE7E,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAC/C,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAc;IAC3D,MAAM,EAAE,GAAG,0BAA0B,CAAA;IACrC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,4BAA4B,CAAC,CAAA;IACpH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QACtF,OAAO,YAAY,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAA;IACpE,CAAC;AACH,CAAC"}

package/dist/zitadel/zitadelPreAuthCookieParse.d.ts

@@ -0,0 +1,3 @@
+import { type Result } from "#result";
+export declare function zitadelPreAuthCookieParse(cookieHeader: string | null | undefined): Result<string>;
+//# sourceMappingURL=zitadelPreAuthCookieParse.d.ts.map

package/dist/zitadel/zitadelPreAuthCookieParse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelPreAuthCookieParse.d.ts","sourceRoot":"","sources":["../../src/zitadel/zitadelPreAuthCookieParse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,MAAM,EAAE,MAAM,SAAS,CAAA;AAMtE,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAuBjG"}

package/dist/zitadel/zitadelPreAuthCookieParse.js

@@ -0,0 +1,33 @@
+import { createResult, createResultError } from "#result";
+const cookieName = "__Host-project-registry-pre-auth";
+const maximumCookieHeaderLength = 8192;
+const maximumCookieValueLength = 256;
+export function zitadelPreAuthCookieParse(cookieHeader) {
+    const op = "zitadelPreAuthCookieParse";
+    if (typeof cookieHeader !== "string" || cookieHeader.length > maximumCookieHeaderLength) {
+        return createResultError(op, "pre-auth cookie is unavailable");
+    }
+    const prefix = `${cookieName}=`;
+    let found;
+    for (const part of cookieHeader.split(";")) {
+        const trimmed = part.trim();
+        if (!trimmed.startsWith(prefix))
+            continue;
+        if (found !== undefined)
+            return createResultError(op, "pre-auth cookie is invalid");
+        found = trimmed.slice(prefix.length);
+    }
+    if (found === undefined || found.length === 0)
+        return createResultError(op, "pre-auth cookie is unavailable");
+    try {
+        const secret = decodeURIComponent(found);
+        if (secret.length > maximumCookieValueLength || !/^[A-Za-z0-9_-]{43,256}$/.test(secret)) {
+            return createResultError(op, "pre-auth cookie is invalid");
+        }
+        return createResult(secret);
+    }
+    catch {
+        return createResultError(op, "pre-auth cookie is invalid");
+    }
+}
+//# sourceMappingURL=zitadelPreAuthCookieParse.js.map

package/dist/zitadel/zitadelPreAuthCookieParse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelPreAuthCookieParse.js","sourceRoot":"","sources":["../../src/zitadel/zitadelPreAuthCookieParse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAe,MAAM,SAAS,CAAA;AAEtE,MAAM,UAAU,GAAG,kCAAkC,CAAA;AACrD,MAAM,yBAAyB,GAAG,IAAI,CAAA;AACtC,MAAM,wBAAwB,GAAG,GAAG,CAAA;AAEpC,MAAM,UAAU,yBAAyB,CAAC,YAAuC;IAC/E,MAAM,EAAE,GAAG,2BAA2B,CAAA;IACtC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;QACxF,OAAO,iBAAiB,CAAC,EAAE,EAAE,gCAAgC,CAAC,CAAA;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,UAAU,GAAG,CAAA;IAC/B,IAAI,KAAyB,CAAA;IAC7B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAQ;QACzC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,4BAA4B,CAAC,CAAA;QACnF,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACtC,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,gCAAgC,CAAC,CAAA;IAC7G,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;QACxC,IAAI,MAAM,CAAC,MAAM,GAAG,wBAAwB,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACxF,OAAO,iBAAiB,CAAC,EAAE,EAAE,4BAA4B,CAAC,CAAA;QAC5D,CAAC;QACD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,4BAA4B,CAAC,CAAA;IAC5D,CAAC;AACH,CAAC"}

package/dist/zitadel/zitadelPreAuthCookieSerialize.d.ts

@@ -0,0 +1,4 @@
+import { type Result } from "#result";
+import type { ZitadelPreAuthCookieOptions } from "./ZitadelPreAuthCookieOptions.js";
+export declare function zitadelPreAuthCookieSerialize(secret: string, options?: ZitadelPreAuthCookieOptions): Result<string>;
+//# sourceMappingURL=zitadelPreAuthCookieSerialize.d.ts.map

package/dist/zitadel/zitadelPreAuthCookieSerialize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelPreAuthCookieSerialize.d.ts","sourceRoot":"","sources":["../../src/zitadel/zitadelPreAuthCookieSerialize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,MAAM,EAAE,MAAM,SAAS,CAAA;AACtE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAA;AAMnF,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,2BAAgC,GACxC,MAAM,CAAC,MAAM,CAAC,CAehB"}

package/dist/zitadel/zitadelPreAuthCookieSerialize.js

@@ -0,0 +1,20 @@
+import { createResult, createResultError } from "#result";
+const cookieName = "__Host-project-registry-pre-auth";
+const defaultMaxAgeSeconds = 600;
+const maximumCookieHeaderLength = 8192;
+export function zitadelPreAuthCookieSerialize(secret, options = {}) {
+    const op = "zitadelPreAuthCookieSerialize";
+    const maxAgeSeconds = options.maxAgeSeconds ?? defaultMaxAgeSeconds;
+    if (typeof secret !== "string" ||
+        !/^[A-Za-z0-9_-]{43,256}$/.test(secret) ||
+        !Number.isSafeInteger(maxAgeSeconds) ||
+        maxAgeSeconds < 1 ||
+        maxAgeSeconds > 31_536_000) {
+        return createResultError(op, "pre-auth cookie is invalid");
+    }
+    const cookie = `${cookieName}=${encodeURIComponent(secret)}; Path=/; Max-Age=${maxAgeSeconds}; HttpOnly; Secure; SameSite=Lax`;
+    if (cookie.length > maximumCookieHeaderLength)
+        return createResultError(op, "pre-auth cookie is invalid");
+    return createResult(cookie);
+}
+//# sourceMappingURL=zitadelPreAuthCookieSerialize.js.map

package/dist/zitadel/zitadelPreAuthCookieSerialize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelPreAuthCookieSerialize.js","sourceRoot":"","sources":["../../src/zitadel/zitadelPreAuthCookieSerialize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAe,MAAM,SAAS,CAAA;AAGtE,MAAM,UAAU,GAAG,kCAAkC,CAAA;AACrD,MAAM,oBAAoB,GAAG,GAAG,CAAA;AAChC,MAAM,yBAAyB,GAAG,IAAI,CAAA;AAEtC,MAAM,UAAU,6BAA6B,CAC3C,MAAc,EACd,UAAuC,EAAE;IAEzC,MAAM,EAAE,GAAG,+BAA+B,CAAA;IAC1C,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,oBAAoB,CAAA;IACnE,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC;QACvC,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC;QACpC,aAAa,GAAG,CAAC;QACjB,aAAa,GAAG,UAAU,EAC1B,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,4BAA4B,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,UAAU,IAAI,kBAAkB,CAAC,MAAM,CAAC,qBAAqB,aAAa,kCAAkC,CAAA;IAC9H,IAAI,MAAM,CAAC,MAAM,GAAG,yBAAyB;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,4BAA4B,CAAC,CAAA;IACzG,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;AAC7B,CAAC"}

package/dist/zitadel/zitadelTokenExchange.d.ts

@@ -0,0 +1,5 @@
+import { type PromiseResult } from "#result";
+import type { ZitadelTokenExchangeOptions } from "./ZitadelTokenExchangeOptions.js";
+import type { ZitadelTokens } from "./ZitadelTokens.js";
+export declare function zitadelTokenExchange(options: ZitadelTokenExchangeOptions): PromiseResult<ZitadelTokens>;
+//# sourceMappingURL=zitadelTokenExchange.d.ts.map

package/dist/zitadel/zitadelTokenExchange.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelTokenExchange.d.ts","sourceRoot":"","sources":["../../src/zitadel/zitadelTokenExchange.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAG7E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAA;AACnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAIvD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,2BAA2B,GAAG,aAAa,CAAC,aAAa,CAAC,CAgG7G"}

package/dist/zitadel/zitadelTokenExchange.js

@@ -0,0 +1,92 @@
+import { createResult, createResultError } from "#result";
+import { clockNowResolve } from "../runtime/clockNowResolve.js";
+import { timeExpiryResolve } from "../runtime/timeExpiryResolve.js";
+import { zitadelConfigValidate } from "./zitadelConfigValidate.js";
+import { zitadelHttpJsonFetch } from "./zitadelHttpJsonFetch.js";
+export async function zitadelTokenExchange(options) {
+    const op = "zitadelTokenExchange";
+    if (typeof options.code !== "string" ||
+        options.code.length === 0 ||
+        options.code.length > 4096 ||
+        typeof options.codeVerifier !== "string" ||
+        !/^[A-Za-z0-9_-]{43}$/.test(options.codeVerifier) ||
+        typeof options.http !== "function") {
+        return createResultError(op, "authorization code exchange failed");
+    }
+    const configR = zitadelConfigValidate(options.config);
+    if (!configR.success || options.discovery.issuer !== configR.data.issuer) {
+        return createResultError(op, "authorization code exchange failed");
+    }
+    const clock = options.clock ?? Date.now;
+    const nowR = clockNowResolve(clock);
+    if (!nowR.success)
+        return createResultError(op, "authorization code exchange failed");
+    if (typeof options.discovery.tokenEndpoint !== "string" || options.discovery.tokenEndpoint.length > 2048) {
+        return createResultError(op, "authorization code exchange failed");
+    }
+    try {
+        const tokenEndpoint = new URL(options.discovery.tokenEndpoint);
+        if (tokenEndpoint.protocol !== "https:" ||
+            tokenEndpoint.username.length > 0 ||
+            tokenEndpoint.password.length > 0 ||
+            tokenEndpoint.hash.length > 0) {
+            return createResultError(op, "authorization code exchange failed");
+        }
+    }
+    catch {
+        return createResultError(op, "authorization code exchange failed");
+    }
+    try {
+        const body = new URLSearchParams({
+            grant_type: "authorization_code",
+            client_id: configR.data.clientId,
+            code: options.code,
+            redirect_uri: configR.data.callbackUrl,
+            code_verifier: options.codeVerifier,
+        });
+        if (configR.data.clientSecret !== undefined)
+            body.set("client_secret", configR.data.clientSecret);
+        const responseR = await zitadelHttpJsonFetch(options.http, options.discovery.tokenEndpoint, {
+            method: "POST",
+            headers: { accept: "application/json", "content-type": "application/x-www-form-urlencoded" },
+            body: body.toString(),
+        }, { timeoutMs: options.timeoutMs, signal: options.signal, maxBodyBytes: options.maxBodyBytes });
+        if (!responseR.success || !responseR.data.response.ok)
+            return createResultError(op, "authorization code exchange failed");
+        const value = responseR.data.body;
+        if (typeof value !== "object" || value === null || Array.isArray(value)) {
+            return createResultError(op, "authorization code exchange failed");
+        }
+        const data = value;
+        if (typeof data.access_token !== "string" ||
+            data.access_token.length === 0 ||
+            data.access_token.length > 8192 ||
+            typeof data.id_token !== "string" ||
+            data.id_token.length === 0 ||
+            data.id_token.length > 32_768) {
+            return createResultError(op, "authorization code exchange failed");
+        }
+        if (data.refresh_token !== undefined &&
+            (typeof data.refresh_token !== "string" || data.refresh_token.length === 0 || data.refresh_token.length > 8192)) {
+            return createResultError(op, "authorization code exchange failed");
+        }
+        if (data.expires_in !== undefined &&
+            (typeof data.expires_in !== "number" || !Number.isSafeInteger(data.expires_in) || data.expires_in <= 0)) {
+            return createResultError(op, "authorization code exchange failed");
+        }
+        const expiresAtR = data.expires_in === undefined ? undefined : timeExpiryResolve(nowR.data, data.expires_in);
+        if (expiresAtR !== undefined && !expiresAtR.success) {
+            return createResultError(op, "authorization code exchange failed");
+        }
+        return createResult({
+            accessToken: data.access_token,
+            refreshToken: data.refresh_token,
+            idToken: data.id_token,
+            expiresAt: expiresAtR?.data,
+        });
+    }
+    catch {
+        return createResultError(op, "authorization code exchange failed");
+    }
+}
+//# sourceMappingURL=zitadelTokenExchange.js.map

package/dist/zitadel/zitadelTokenExchange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelTokenExchange.js","sourceRoot":"","sources":["../../src/zitadel/zitadelTokenExchange.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AAGnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAEhE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAoC;IAC7E,MAAM,EAAE,GAAG,sBAAsB,CAAA;IACjC,IACE,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAChC,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI;QAC1B,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ;QACxC,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;QACjD,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU,EAClC,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAA;IACpE,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACrD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACzE,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAA;IACpE,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAA;IACvC,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IACnC,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAA;IACrF,IAAI,OAAO,OAAO,CAAC,SAAS,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACzG,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAA;IACpE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QAC9D,IACE,aAAa,CAAC,QAAQ,KAAK,QAAQ;YACnC,aAAa,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjC,aAAa,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjC,aAAa,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAC7B,CAAC;YACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAA;QACpE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAA;IACpE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;YAChC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW;YACtC,aAAa,EAAE,OAAO,CAAC,YAAY;SACpC,CAAC,CAAA;QACF,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACjG,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAC1C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,SAAS,CAAC,aAAa,EAC/B;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAC5F,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,EACD,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAC7F,CAAA;QACD,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;YACnD,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAA;QACpE,MAAM,KAAK,GAAY,SAAS,CAAC,IAAI,CAAC,IAAI,CAAA;QAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,IAAI,GAAG,KAAgC,CAAA;QAC7C,IACE,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YACrC,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAC9B,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,IAAI;YAC/B,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;YACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,EAC7B,CAAC;YACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAA;QACpE,CAAC;QACD,IACE,IAAI,CAAC,aAAa,KAAK,SAAS;YAChC,CAAC,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC,EAC/G,CAAC;YACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAA;QACpE,CAAC;QACD,IACE,IAAI,CAAC,UAAU,KAAK,SAAS;YAC7B,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,EACvG,CAAC;YACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAC5G,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACpD,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAA;QACpE,CAAC;QACD,OAAO,YAAY,CAAC;YAClB,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,YAAY,EAAE,IAAI,CAAC,aAAmC;YACtD,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,SAAS,EAAE,UAAU,EAAE,IAAI;SAC5B,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAA;IACpE,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,137 @@
+{
+  "name": "@adaptive-ds/project-registry",
+  "version": "0.2.3",
+  "scripts": {
+    "dev": "bun test --watch",
+    "build": "bun run build:lib && bun run build:ui",
+    "build:lib": "rm -rf ./dist && bun tsc -p ./tsconfig.lib.json && chmod 755 ./dist/cli.js ./dist/daemon.js",
+    "build:ui": "vite build --config ./vite.config.ts",
+    "vite:dev": "vite dev --config ./vite.config.ts",
+    "vite:build": "vite build --config ./vite.config.ts",
+    "rsbuild:dev": "rsbuild dev --config ./rsbuild.config.ts",
+    "rsbuild:build": "rsbuild build --config ./rsbuild.config.ts",
+    "test": "bun --conditions=browser test",
+    "test:ui": "bun --conditions=browser test src/ui",
+    "typecheck": "bun tsc -p ./tsconfig.json --noEmit",
+    "typecheck:ui": "bun tsc -p ./tsconfig.ui.json --noEmit",
+    "test:w": "bun test --watch",
+    "release": "bash ./ops/release.sh",
+    "update": "bun update",
+    "update:commit": "bun update && git add package.json && bun run tsc && git commit -m \"chore(deps): update dependencies\" && git push",
+    "clean": "rm -rf ./dist",
+    "reset": "rm -rf ./node_modules",
+    "format": "biome format --write src test package.json tsconfig.json tsconfig.lib.json tsconfig.ui.json vite.config.ts rsbuild.config.ts index.html rsbuild.html biome.json"
+  },
+  "peerDependencies": {
+    "@adaptive-ds/result": "^0.6.0"
+  },
+  "dependencies": {
+    "@adaptive-ds/git-store": "^0.1.0",
+    "@solidjs/router": "^0.15.4",
+    "clsx": "^2.1.1",
+    "solid-js": "^1.9.12",
+    "tailwind-merge": "^3.6.0",
+    "valibot": "^1.2.0"
+  },
+  "devDependencies": {
+    "@adaptive-ds/result": "^0.6.0",
+    "@biomejs/biome": "^2.5.2",
+    "@rsbuild/core": "^2.0.15",
+    "@rsbuild/plugin-babel": "^1.2.1",
+    "@rsbuild/plugin-solid": "^1.2.2",
+    "@rsbuild/plugin-tailwindcss": "^2.0.3",
+    "@tailwindcss/vite": "^4.3.3",
+    "@types/bun": "^1.3.13",
+    "tailwindcss": "^4.3.3",
+    "typescript": "^6.0.3",
+    "vite": "^8.2.1",
+    "vite-plugin-solid": "^2.11.14"
+  },
+  "prettier": {
+    "semi": false,
+    "printWidth": 120,
+    "trailingComma": "all"
+  },
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "project-registry": "./dist/cli.js",
+    "project-registryd": "./dist/daemon.js"
+  },
+  "private": false,
+  "license": "MIT",
+  "description": "Machine-wide Git-backed project registry with CLI and daemon entry points.",
+  "keywords": [
+    "typescript",
+    "registry",
+    "projects",
+    "adaptive-ds",
+    "catalog"
+  ],
+  "homepage": "https://github.com/david1gp/project-registry",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/david1gp/project-registry.git"
+  },
+  "bugs": {
+    "url": "https://github.com/david1gp/project-registry/issues"
+  },
+  "author": "David Siewert",
+  "types": "./dist/index.d.ts",
+  "imports": {
+    "#git-store": "@adaptive-ds/git-store",
+    "#ui/*.js": "./ui/*.ts",
+    "#ui/*.jsx": "./ui/*.tsx",
+    "#ui/*": "./ui/*",
+    "#result": "@adaptive-ds/result"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./Project.js": {
+      "types": "./dist/project/Project.d.ts",
+      "import": "./dist/project/Project.js"
+    },
+    "./projectGet.js": {
+      "types": "./dist/project/projectGet.d.ts",
+      "import": "./dist/project/projectGet.js"
+    },
+    "./projectList.js": {
+      "types": "./dist/project/projectList.d.ts",
+      "import": "./dist/project/projectList.js"
+    },
+    "./project/*.js": {
+      "types": "./dist/project/*.d.ts",
+      "import": "./dist/project/*.js"
+    },
+    "./project-store/*.js": {
+      "types": "./dist/project-store/*.d.ts",
+      "import": "./dist/project-store/*.js"
+    },
+    "./access-log/*.js": {
+      "types": "./dist/access-log/*.d.ts",
+      "import": "./dist/access-log/*.js"
+    },
+    "./identity/*.js": {
+      "types": "./dist/identity/*.d.ts",
+      "import": "./dist/identity/*.js"
+    },
+    "./session/*.js": {
+      "types": "./dist/session/*.d.ts",
+      "import": "./dist/session/*.js"
+    },
+    "./zitadel/*.js": {
+      "types": "./dist/zitadel/*.d.ts",
+      "import": "./dist/zitadel/*.js"
+    },
+    "./web-server/*.js": {
+      "types": "./dist/web-server/*.d.ts",
+      "import": "./dist/web-server/*.js"
+    }
+  },
+  "files": [
+    "dist"
+  ]
+}