@api-client/core 0.20.9 → 0.21.0

package/build/src/models/Authorization.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"Authorization.js","sourceRoot":"","sources":["../../../src/models/Authorization.ts"],"names":[],"mappings":"","sourcesContent":["/* eslint-disable @typescript-eslint/no-empty-object-type */\nimport { HttpCertificate } from './ClientCertificate.js'\n\nexport interface IBasicAuthorization {\n  /**\n   * User name value.\n   */\n  username?: string\n  /**\n   * User password value.\n   */\n  password?: string\n}\n\nexport interface IBearerAuthorization {\n  /**\n   * Bearer token value\n   */\n  token: string\n}\n\nexport interface INtlmAuthorization {\n  /**\n   * User name value.\n   */\n  username?: string\n  /**\n   * User password value.\n   */\n  password?: string\n  /**\n   * Authorization domain\n   */\n  domain: string\n}\n\nexport interface IDigestAuthorization {\n  username?: string\n  password?: string\n  realm: string\n  nonce: string\n  uri: string\n  qop: string\n  opaque: string\n  response: string\n  nc: string | number\n  cnonce: string\n  algorithm: string\n}\n\nexport interface IOAuth1Authorization {\n  consumerKey: string\n  consumerSecret: string\n  token: string\n  tokenSecret: string\n  timestamp: string | number\n  nonce: string\n  realm: string\n  signatureMethod: string\n  requestTokenUri: string\n  accessTokenUri: string\n  redirectUri: string\n  authParamsLocation: string\n  authTokenMethod: string\n  authorizationUri: string\n  type: string\n}\n\n/**\n * Client Certificate Authorization\n */\nexport interface ICCAuthorization {\n  /**\n   * The certificate object to use with the HTTP request.\n   */\n  certificate?: HttpCertificate\n}\n\nexport declare interface IOAuth2CustomParameter {\n  /**\n   * The name of the parameter\n   */\n  name: string\n  /**\n   * The value of the parameter. It is ALWAYS a string.\n   */\n  value: string\n}\n\nexport interface IOAuth2TokenRequestCustomData {\n  /**\n   * The query parameters to use with the token request\n   */\n  parameters?: IOAuth2CustomParameter[]\n  /**\n   * The headers to use with the token request\n   */\n  headers?: IOAuth2CustomParameter[]\n  /**\n   * The body parameters to use with the token request.\n   * This is x-www-urlencoded parameters to be added to the message.\n   */\n  body?: IOAuth2CustomParameter[]\n}\n\nexport interface IOAuth2AuthorizationRequestCustomData {\n  /**\n   * The query parameters to add to the authorization URI\n   */\n  parameters?: IOAuth2CustomParameter[]\n}\n\nexport interface IOAuth2CustomData {\n  /**\n   * The custom data to set on the authorization URI when opening the auth popup.\n   */\n  auth?: IOAuth2AuthorizationRequestCustomData\n  /**\n   * The custom data to be set on the token request.\n   */\n  token?: IOAuth2TokenRequestCustomData\n}\n\ndeclare interface IBaseOAuth2Authorization {\n  /**\n   * OAuth flow with `interactive` option set to `false` allows to quietly request for the token\n   * from the cache or form the authorization server\n   * without notifying the user (without bringing the authorization pop-up).\n   *\n   * This is to be used to check if valid session exists for current user and update the UI accordingly.\n   */\n  interactive?: boolean\n  /**\n   * List of scopes to be used with the token request.\n   * This parameter is not required per OAuth2 spec.\n   */\n  scopes?: string[]\n}\n\n/**\n * OAuth 2 configuration object used in the API Client and API Components.\n */\nexport interface IOAuth2Authorization extends IBaseOAuth2Authorization {\n  /**\n   * The grant type of the OAuth 2 flow.\n   *\n   * Can be:\n   * - implicit - deprecated and legacy\n   * - authorization_code\n   * - password - deprecated and legacy\n   * - client_credentials\n   * - refresh_token\n   * - any custom grant supported by the authorization server\n   */\n  grantType?: 'implicit' | 'authorization_code' | 'password' | 'client_credentials' | 'refresh_token' | string\n  /**\n   * Optional value to set on the `response_type` parameter.\n   */\n  responseType?: string\n  /**\n   * The client ID registered in the OAuth2 provider.\n   */\n  clientId?: string\n  /**\n   * The client ID registered in the OAuth2 provider.\n   * This value is not required for select grant types.\n   */\n  clientSecret?: string\n  /**\n   * The user authorization URI as defined by the authorization server.\n   * This is required for the `implicit` and `authorization_code` grant types\n   */\n  authorizationUri?: string\n  /**\n   * The token request URI as defined by the authorization server.\n   * This is not required for the `implicit` grant type\n   */\n  accessTokenUri?: string\n  /**\n   * The user redirect URI as configured in the authorization server.\n   * This is required for the `implicit` and `authorization_code` grant types.\n   */\n  redirectUri?: string\n  /**\n   * Required for the `password` grant type\n   */\n  username?: string\n  /**\n   * Required for the `password` grant type\n   */\n  password?: string\n  /**\n   * The state parameter as defined in the OAuth2 spec.\n   * The state is returned back with the token response.\n   */\n  state?: string\n  /**\n   * Additional data defined outside the scope of the OAuth2 protocol to be set\n   * on both authorization and token requests.\n   */\n  customData?: IOAuth2CustomData\n  /**\n   * This is not a standard OAuth 2 parameter.\n   * Used by Google's oauth 2 server to include already granted to this app\n   * scopes to the list of this scopes.\n   */\n  includeGrantedScopes?: boolean\n  /**\n   * This is not a standard OAuth 2 parameter.\n   * Used by Google's oauth 2 server. It's the user email, when known.\n   */\n  loginHint?: string\n  /**\n   * When set the `authorization_code` will use the PKCE extension of the OAuth2\n   * to perform the authorization. Default to `false`.\n   * This is only relevant when the `authorization_code` grant type is used.\n   */\n  pkce?: boolean\n  /**\n   * The access token type. Default to `Bearer`\n   */\n  tokenType?: string\n  /**\n   * The last access token received from the authorization server.\n   * This is optional and indicates that the token has been already received.\n   * This property should not be stored anywhere.\n   */\n  accessToken?: string\n  /**\n   * Informs about what filed of the authenticated request the token property should be set.\n   * By default the value is `header` which corresponds to the `authorization` by default,\n   * but it is configured by the `deliveryName` property.\n   *\n   * This can be used by the AMF model when the API spec defines where the access token should be\n   * put in the authenticated request.\n   *\n   * @default header\n   */\n  deliveryMethod?: OAuth2DeliveryMethod\n\n  /**\n   * The name of the authenticated request property that carries the token.\n   * By default it is `authorization` which corresponds to `header` value of the `deliveryMethod` property.\n   *\n   * By setting both `deliveryMethod` and `deliveryName` you instruct the application (assuming it reads this values)\n   * where to put the authorization token.\n   *\n   * @default authorization\n   */\n  deliveryName?: string\n  /**\n   * The assertion parameter for the JWT token authorization.\n   *\n   * @link https://datatracker.ietf.org/doc/html/rfc7523#section-2.1\n   */\n  assertion?: string\n  /**\n   * The device_code parameter for the device code authorization.\n   *\n   * @link https://datatracker.ietf.org/doc/html/rfc8628#section-3.4\n   */\n  deviceCode?: string\n}\n\nexport type OAuth2DeliveryMethod = 'header' | 'query' | 'body'\n\n/**\n * Options for removing the OAuth 2 token from the cache.\n */\nexport interface ITokenRemoveOptions {\n  /**\n   * The client id used to issue the token.\n   */\n  clientId: string\n  /**\n   * The authorization URI used to issue the token.\n   * For the request that do not have `authorizationUrl` a value for\n   * `accessTokenUri` should be used.\n   */\n  authorizationUri: string\n}\n\ndeclare interface ITokenBase {\n  /**\n   * Whether the token request was marked as interactive.\n   */\n  interactive?: boolean\n  /**\n   * The request state parameter, if used with the request.\n   */\n  state: string\n}\n\n/**\n * OAuth 2 token response object.\n */\nexport interface ITokenInfo extends ITokenBase {\n  /**\n   * The access token.\n   */\n  accessToken: string\n  /**\n   * The access token type.\n   */\n  tokenType?: string\n  /**\n   * Access token expiration timeout.\n   */\n  expiresIn: number\n  /**\n   * Access token expiration timestamp\n   */\n  expiresAt: number\n  /**\n   * When `true` the `expires_in` and `expires_at` are assumed values (1 hour).\n   */\n  expiresAssumed?: boolean\n  /**\n   * The list of scopes the token has been granted\n   */\n  scope?: string[]\n  /**\n   * The refresh token, when requested\n   */\n  refreshToken?: string\n}\n\ninterface IOidcToken {\n  /**\n   * The response type of the token.\n   */\n  responseType: string\n  /**\n   * The state passed by the authorization server,\n   */\n  state: string\n}\n\nexport interface IOidcTokenInfo extends IOidcToken {\n  /**\n   * The timestamp when the token response was read.\n   * With the combination with `expiresIn` this tells when the token\n   * expires +- few seconds (depending onm the network).\n   */\n  time: number\n  /**\n   * The received access token.\n   */\n  accessToken?: string\n  /**\n   * The received refresh token.\n   */\n  refreshToken?: string\n  /**\n   * The received ID token.\n   */\n  idToken?: string\n  /**\n   * The received from the authorization server code.\n   * The code has no use as it probably was exchanged for the token,\n   * which invalidates the code.\n   */\n  code?: string\n  /**\n   * The received from the authorization server token type\n   */\n  tokenType?: string\n  /**\n   * The received from the authorization server expires_in parameter.\n   */\n  expiresIn?: number\n  /**\n   * The received from the authorization server scope parameter processed to an array.\n   */\n  scope?: string[]\n}\n\nexport interface IOidcTokenError extends IOidcToken {\n  /**\n   * Whether the token has error when processing it. This is the error message to render to the user.\n   */\n  errorDescription?: string\n  /**\n   * Whether the token has error when processing it. This is the error code received from the server.\n   */\n  error?: string\n}\n\nexport interface IOauth2GrantType {\n  type: string\n  label: string\n}\n\nexport interface IOauth2ResponseType {\n  type: string\n  label: string\n}\n\n/**\n * OpenID Connect configuration object used in API Client and API Components.\n */\nexport interface IOidcAuthorization extends IOAuth2Authorization {\n  /**\n   * The URL of the issuer for discovery.\n   */\n  issuerUri?: string\n  /**\n   * The list of mist recent tokens requested from the auth server.\n   */\n  tokens?: (IOidcTokenInfo | IOidcTokenError)[]\n  /**\n   * The array index of the token to be used with HTTP request.\n   */\n  tokenInUse?: number\n  /**\n   * The list of response types supported by the authorization server.\n   * Optional, used to restore state.\n   */\n  supportedResponses?: IOauth2ResponseType[][]\n  /**\n   * The list of grant types supported by the authorization server.\n   * Optional, used to restore state.\n   */\n  grantTypes?: IOauth2GrantType[]\n  /**\n   * The list of scopes supported by the authorization server.\n   * Optional, used to restore state.\n   */\n  serverScopes?: string[]\n}\n\n/**\n * Token response object.\n */\nexport interface ITokenError {\n  /**\n   * The error message\n   */\n  message: string\n  /**\n   * One of the application error codes.\n   */\n  code: string\n}\n\nexport interface IAuthorizationParams {\n  header?: Record<string, string>\n  query?: Record<string, string>\n  path?: Record<string, string>\n  cookie?: Record<string, string>\n}\n\n/**\n * Authorization configuration for OAS' APiKey\n */\n\nexport interface IApiKeyAuthorization extends IAuthorizationParams {}\n\n/**\n * Authorization configuration for the PassThrough authorization\n */\nexport interface IPassThroughAuthorization {\n  /**\n   * List of headers to apply to the request\n   */\n  header?: Record<string, string>\n  /**\n   * List of query parameters to apply to the request\n   */\n  query?: Record<string, string>\n}\n\n/**\n * Authorization configuration for RAML's custom scheme\n */\n\nexport interface IRamlCustomAuthorization extends IPassThroughAuthorization {}\n\nexport type IAuthorizationSettingsUnion =\n  | IBasicAuthorization\n  | IBearerAuthorization\n  | INtlmAuthorization\n  | IDigestAuthorization\n  | IOAuth1Authorization\n  | IOAuth2Authorization\n  | ICCAuthorization\n  | IApiKeyAuthorization\n  | IPassThroughAuthorization\n  | IRamlCustomAuthorization\n  | IOidcAuthorization\nexport type AuthorizationType =\n  | 'basic'\n  | 'bearer'\n  | 'ntlm'\n  | 'digest'\n  | 'oauth 1'\n  | 'oauth 2'\n  | 'client certificate'\n  | 'api key'\n  | 'pass through'\n  | 'raml custom'\n  | 'open id'\n"]}

package/build/src/models/AuthorizationData.d.ts

@@ -1,30 +0,0 @@
-export interface IAuthorizationData {
-    key: string;
-    username?: string;
-    password?: string;
-    domain?: string;
-}
-/**
- * Represents an auth data stored in API Client's data store to be retrieved
- * when the response status is 401.
- *
- * Each entry represent a Basic or NTLM authorization.
- */
-export declare class AuthorizationData {
-    key: string;
-    username?: string;
-    password?: string;
-    domain?: string;
-    /**
-     * @param input The provider definition used to restore the state.
-     */
-    constructor(input?: string | IAuthorizationData);
-    /**
-     * Creates a new provider clearing anything that is so far defined.
-     *
-     * Note, this throws an error when the provider is not an API Client provider object.
-     */
-    new(init: IAuthorizationData): void;
-    toJSON(): IAuthorizationData;
-}
-//# sourceMappingURL=AuthorizationData.d.ts.map

package/build/src/models/AuthorizationData.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AuthorizationData.d.ts","sourceRoot":"","sources":["../../../src/models/AuthorizationData.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;GAKG;AACH,qBAAa,iBAAiB;IAC5B,GAAG,SAAK;IACR,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;OAEG;gBACS,KAAK,CAAC,EAAE,MAAM,GAAG,kBAAkB;IAc/C;;;;OAIG;IACH,GAAG,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI;IAQnC,MAAM,IAAI,kBAAkB;CAe7B"}

package/build/src/models/AuthorizationData.js

@@ -1,59 +0,0 @@
-import { nanoid } from '../nanoid.js';
-/**
- * Represents an auth data stored in API Client's data store to be retrieved
- * when the response status is 401.
- *
- * Each entry represent a Basic or NTLM authorization.
- */
-export class AuthorizationData {
-    key = '';
-    username;
-    password;
-    domain;
-    /**
-     * @param input The provider definition used to restore the state.
-     */
-    constructor(input) {
-        let init;
-        if (typeof input === 'string') {
-            init = JSON.parse(input);
-        }
-        else if (typeof input === 'object') {
-            init = input;
-        }
-        else {
-            init = {
-                key: nanoid(),
-            };
-        }
-        this.new(init);
-    }
-    /**
-     * Creates a new provider clearing anything that is so far defined.
-     *
-     * Note, this throws an error when the provider is not an API Client provider object.
-     */
-    new(init) {
-        const { username, password, domain, key = nanoid() } = init;
-        this.username = username;
-        this.password = password;
-        this.domain = domain;
-        this.key = key;
-    }
-    toJSON() {
-        const result = {
-            key: this.key,
-        };
-        if (this.username) {
-            result.username = this.username;
-        }
-        if (this.password) {
-            result.password = this.password;
-        }
-        if (this.domain) {
-            result.domain = this.domain;
-        }
-        return result;
-    }
-}
-//# sourceMappingURL=AuthorizationData.js.map

package/build/src/models/AuthorizationData.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"AuthorizationData.js","sourceRoot":"","sources":["../../../src/models/AuthorizationData.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AASrC;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IAC5B,GAAG,GAAG,EAAE,CAAA;IACR,QAAQ,CAAS;IACjB,QAAQ,CAAS;IACjB,MAAM,CAAS;IAEf;;OAEG;IACH,YAAY,KAAmC;QAC7C,IAAI,IAAwB,CAAA;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC1B,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,GAAG,KAAK,CAAA;QACd,CAAC;aAAM,CAAC;YACN,IAAI,GAAG;gBACL,GAAG,EAAE,MAAM,EAAE;aACd,CAAA;QACH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAChB,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,IAAwB;QAC1B,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAG,MAAM,EAAE,EAAE,GAAG,IAAI,CAAA;QAC3D,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;IAChB,CAAC;IAED,MAAM;QACJ,MAAM,MAAM,GAAuB;YACjC,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAA;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAC7B,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;CACF","sourcesContent":["import { nanoid } from '../nanoid.js'\n\nexport interface IAuthorizationData {\n  key: string\n  username?: string\n  password?: string\n  domain?: string\n}\n\n/**\n * Represents an auth data stored in API Client's data store to be retrieved\n * when the response status is 401.\n *\n * Each entry represent a Basic or NTLM authorization.\n */\nexport class AuthorizationData {\n  key = ''\n  username?: string\n  password?: string\n  domain?: string\n\n  /**\n   * @param input The provider definition used to restore the state.\n   */\n  constructor(input?: string | IAuthorizationData) {\n    let init: IAuthorizationData\n    if (typeof input === 'string') {\n      init = JSON.parse(input)\n    } else if (typeof input === 'object') {\n      init = input\n    } else {\n      init = {\n        key: nanoid(),\n      }\n    }\n    this.new(init)\n  }\n\n  /**\n   * Creates a new provider clearing anything that is so far defined.\n   *\n   * Note, this throws an error when the provider is not an API Client provider object.\n   */\n  new(init: IAuthorizationData): void {\n    const { username, password, domain, key = nanoid() } = init\n    this.username = username\n    this.password = password\n    this.domain = domain\n    this.key = key\n  }\n\n  toJSON(): IAuthorizationData {\n    const result: IAuthorizationData = {\n      key: this.key,\n    }\n    if (this.username) {\n      result.username = this.username\n    }\n    if (this.password) {\n      result.password = this.password\n    }\n    if (this.domain) {\n      result.domain = this.domain\n    }\n    return result\n  }\n}\n"]}

package/build/src/models/CertificateFile.d.ts

@@ -1,19 +0,0 @@
-import { Certificate, ICertificate } from './ClientCertificate.js';
-import { CertificateFileKind } from './kinds.js';
-import { FileSchema, File } from './store/File.js';
-export interface ICertificateFile extends FileSchema {
-    kind: typeof CertificateFileKind;
-}
-export declare class CertificateFile extends File {
-    kind: string;
-    static fromCertificate(certificate: ICertificate | Certificate): CertificateFile;
-    /**
-     * @param name The name to set.
-     */
-    static fromName(name: string): CertificateFile;
-    constructor(input?: string | ICertificateFile);
-    new(init: ICertificateFile): this;
-    static isCertificate(input: unknown): boolean;
-    toJSON(): ICertificateFile;
-}
-//# sourceMappingURL=CertificateFile.d.ts.map

package/build/src/models/CertificateFile.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CertificateFile.d.ts","sourceRoot":"","sources":["../../../src/models/CertificateFile.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAGlD,MAAM,WAAW,gBAAiB,SAAQ,UAAU;IAClD,IAAI,EAAE,OAAO,mBAAmB,CAAA;CACjC;AAED,qBAAa,eAAgB,SAAQ,IAAI;IAC9B,IAAI,SAAsB;IAEnC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,YAAY,GAAG,WAAW,GAAG,eAAe;IAahF;;OAEG;WACa,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe;gBAI3C,KAAK,CAAC,EAAE,MAAM,GAAG,gBAAgB;IAqBpC,GAAG,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI;IAS1C,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAQpC,MAAM,IAAI,gBAAgB;CAOpC"}

package/build/src/models/CertificateFile.js

@@ -1,70 +0,0 @@
-import { nanoid } from '../nanoid.js';
-import { CertificateFileKind } from './kinds.js';
-import { File } from './store/File.js';
-import { Thing } from './Thing.js';
-export class CertificateFile extends File {
-    kind = CertificateFileKind;
-    static fromCertificate(certificate) {
-        const init = {
-            kind: CertificateFileKind,
-            key: certificate.key,
-            info: Thing.fromName(certificate.name).toJSON(),
-            lastModified: { user: '', time: 0, byMe: false },
-            parents: [],
-            permissionIds: [],
-            permissions: [],
-        };
-        return new CertificateFile(init);
-    }
-    /**
-     * @param name The name to set.
-     */
-    static fromName(name) {
-        return super.fromName(name, CertificateFileKind);
-    }
-    constructor(input) {
-        super();
-        let init;
-        if (typeof input === 'string') {
-            init = JSON.parse(input);
-        }
-        else if (typeof input === 'object') {
-            init = input;
-        }
-        else {
-            init = {
-                kind: CertificateFileKind,
-                key: nanoid(),
-                info: Thing.fromName('').toJSON(),
-                parents: [],
-                permissionIds: [],
-                permissions: [],
-                lastModified: { user: '', time: 0, byMe: false },
-            };
-        }
-        this.new(init);
-    }
-    new(init) {
-        if (!CertificateFile.isCertificate(init)) {
-            throw new Error(`Not a certificate file.`);
-        }
-        super.new(init);
-        this.kind = CertificateFileKind;
-        return this;
-    }
-    static isCertificate(input) {
-        const typed = input;
-        if (!input || typed.kind !== CertificateFileKind) {
-            return false;
-        }
-        return true;
-    }
-    toJSON() {
-        const result = {
-            ...super.toJSON(),
-            kind: CertificateFileKind,
-        };
-        return result;
-    }
-}
-//# sourceMappingURL=CertificateFile.js.map

package/build/src/models/CertificateFile.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CertificateFile.js","sourceRoot":"","sources":["../../../src/models/CertificateFile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAErC,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAChD,OAAO,EAAc,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAMlC,MAAM,OAAO,eAAgB,SAAQ,IAAI;IAC9B,IAAI,GAAG,mBAAmB,CAAA;IAEnC,MAAM,CAAC,eAAe,CAAC,WAAuC;QAC5D,MAAM,IAAI,GAAqB;YAC7B,IAAI,EAAE,mBAAmB;YACzB,GAAG,EAAE,WAAW,CAAC,GAAG;YACpB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;YAC/C,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE;YAChD,OAAO,EAAE,EAAE;YACX,aAAa,EAAE,EAAE;YACjB,WAAW,EAAE,EAAE;SAChB,CAAA;QACD,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,CAAA;IAClC,CAAC;IAED;;OAEG;IACH,MAAM,CAAU,QAAQ,CAAC,IAAY;QACnC,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAoB,CAAA;IACrE,CAAC;IAED,YAAY,KAAiC;QAC3C,KAAK,EAAE,CAAA;QACP,IAAI,IAAsB,CAAA;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC1B,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,GAAG,KAAK,CAAA;QACd,CAAC;aAAM,CAAC;YACN,IAAI,GAAG;gBACL,IAAI,EAAE,mBAAmB;gBACzB,GAAG,EAAE,MAAM,EAAE;gBACb,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;gBACjC,OAAO,EAAE,EAAE;gBACX,aAAa,EAAE,EAAE;gBACjB,WAAW,EAAE,EAAE;gBACf,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE;aACjD,CAAA;QACH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAChB,CAAC;IAEQ,GAAG,CAAC,IAAsB;QACjC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;QAC5C,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAA;QAC/B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,KAAc;QACjC,MAAM,KAAK,GAAG,KAAyB,CAAA;QACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACjD,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAEQ,MAAM;QACb,MAAM,MAAM,GAAqB;YAC/B,GAAG,KAAK,CAAC,MAAM,EAAE;YACjB,IAAI,EAAE,mBAAmB;SAC1B,CAAA;QACD,OAAO,MAAM,CAAA;IACf,CAAC;CACF","sourcesContent":["import { nanoid } from '../nanoid.js'\nimport { Certificate, ICertificate } from './ClientCertificate.js'\nimport { CertificateFileKind } from './kinds.js'\nimport { FileSchema, File } from './store/File.js'\nimport { Thing } from './Thing.js'\n\nexport interface ICertificateFile extends FileSchema {\n  kind: typeof CertificateFileKind\n}\n\nexport class CertificateFile extends File {\n  override kind = CertificateFileKind\n\n  static fromCertificate(certificate: ICertificate | Certificate): CertificateFile {\n    const init: ICertificateFile = {\n      kind: CertificateFileKind,\n      key: certificate.key,\n      info: Thing.fromName(certificate.name).toJSON(),\n      lastModified: { user: '', time: 0, byMe: false },\n      parents: [],\n      permissionIds: [],\n      permissions: [],\n    }\n    return new CertificateFile(init)\n  }\n\n  /**\n   * @param name The name to set.\n   */\n  static override fromName(name: string): CertificateFile {\n    return super.fromName(name, CertificateFileKind) as CertificateFile\n  }\n\n  constructor(input?: string | ICertificateFile) {\n    super()\n    let init: ICertificateFile\n    if (typeof input === 'string') {\n      init = JSON.parse(input)\n    } else if (typeof input === 'object') {\n      init = input\n    } else {\n      init = {\n        kind: CertificateFileKind,\n        key: nanoid(),\n        info: Thing.fromName('').toJSON(),\n        parents: [],\n        permissionIds: [],\n        permissions: [],\n        lastModified: { user: '', time: 0, byMe: false },\n      }\n    }\n    this.new(init)\n  }\n\n  override new(init: ICertificateFile): this {\n    if (!CertificateFile.isCertificate(init)) {\n      throw new Error(`Not a certificate file.`)\n    }\n    super.new(init)\n    this.kind = CertificateFileKind\n    return this\n  }\n\n  static isCertificate(input: unknown): boolean {\n    const typed = input as ICertificateFile\n    if (!input || typed.kind !== CertificateFileKind) {\n      return false\n    }\n    return true\n  }\n\n  override toJSON(): ICertificateFile {\n    const result: ICertificateFile = {\n      ...super.toJSON(),\n      kind: CertificateFileKind,\n    }\n    return result\n  }\n}\n"]}

package/build/src/models/ClientCertificate.d.ts

@@ -1,188 +0,0 @@
-import { ARCCertificateIndex, RequestCertificate } from './legacy/models/ClientCertificate.js';
-export type CertificateType = 'p12' | 'pem';
-export declare const Kind = "Core#Certificate";
-export type CertificateDataFormat = string | ArrayBuffer | Uint8Array;
-/**
- * Represents a single certificate object (cert/key)
- */
-export interface ICertificateData {
-    /**
-     * The certificate to use.
-     * The `p12` type certificate must be a Buffer.
-     */
-    data: CertificateDataFormat;
-    /**
-     * A passphrase to use to unlock the certificate.
-     */
-    passphrase?: string;
-    /**
-     * The original data type of the certificate. This is only used internally by the data store
-     * to move between buffers and string values stored in the store.
-     * Outside the internal procedure of the data store this
-     * is always `undefined` and the `data` contains the original data format.
-     */
-    type?: 'buffer';
-}
-export interface ICertificate {
-    kind: typeof Kind;
-    /**
-     * The data store key to refer under which this certificate is stored.
-     */
-    key: string;
-    /**
-     * The custom name of the certificate.
-     */
-    name: string;
-    /**
-     * The timestamp when the certificate was inserted into the data store.
-     * Required when returning a result. Auto-generated when inserting, if missing.
-     */
-    created?: number;
-    /**
-     * Certificate type. Either `p12` or `pem`.
-     */
-    type: CertificateType;
-    /**
-     * Certificate or list of certificates to use.
-     */
-    cert: ICertificateData;
-}
-export interface IP12Certificate extends ICertificate {
-    type: 'p12';
-}
-/**
- * Represents a complete certificate configuration required to make
- * an HTTP request.
- */
-export interface IPemCertificate extends ICertificate {
-    type: 'pem';
-    /**
-     * The key for the `pem` type certificate.
-     */
-    certKey: ICertificateData;
-}
-export type HttpCertificate = IP12Certificate | IPemCertificate | ICertificate;
-/**
- * @deprecated Do not use this type anymore. Create a cert instance instead.
- */
-export interface IPemCreateOptions {
-    type: 'p12';
-    /**
-     * The certificate contents.
-     */
-    cert: CertificateDataFormat;
-    /**
-     * The key contents.
-     */
-    key: CertificateDataFormat;
-    /**
-     * Optional name for the certificate.
-     */
-    name?: string;
-    /**
-     * Optional passphrase for the key.
-     */
-    passphrase?: string;
-}
-/**
- * @deprecated Do not use this type anymore. Create a cert instance instead.
- */
-export interface IP12CreateOptions {
-    type: 'pem';
-    /**
-     * The certificate contents.
-     */
-    cert: CertificateDataFormat;
-    /**
-     * Optional name for the certificate.
-     */
-    name?: string;
-    /**
-     * Optional passphrase for the certificate.
-     */
-    passphrase?: string;
-}
-/**
- * @deprecated Do not use this type anymore. Create a cert instance instead.
- */
-export type ICertificateCreateOptions = IPemCreateOptions | IP12CreateOptions;
-/**
- * A class that represents a certificate in the system
- */
-export declare class Certificate {
-    kind: string;
-    /**
-     * The data store key to refer.
-     */
-    key: string;
-    /**
-     * Custom name of the certificate.
-     */
-    name: string;
-    /**
-     * Timestamp when the certificate was inserted into the data store.
-     * Required when returning a result. Auto-generated when inserting, if missing.
-     */
-    created: number;
-    /**
-     * Certificate type. Either `p12` or `pem`.
-     */
-    type: CertificateType;
-    /**
-     * Certificate or list of certificates to use.
-     */
-    cert: ICertificateData;
-    /**
-     * The key for the `pem` type certificate.
-     */
-    certKey?: ICertificateData;
-    /**
-     * Creates a new certificate instance for a PEM key
-     *
-     * @param pem The certificate contents
-     * @param key The key contents
-     * @param name The certificate name
-     * @param keyPassphrase The key passphrase
-     */
-    static fromPem(pem: CertificateDataFormat, key: CertificateDataFormat, name?: string, keyPassphrase?: string): Certificate;
-    /**
-     * Creates a new certificate instance for a P12 key
-     *
-     * @param cert The certificate contents
-     * @param name The certificate name
-     * @param passphrase The key passphrase
-     */
-    static fromP12(cert: CertificateDataFormat, name?: string, passphrase?: string): Certificate;
-    /**
-     * Creates a certificate object from the ARC's legacy certificate definition.
-     *
-     * @param index The legacy certificate index object. If it has set `_id` it will be used as the `key`.
-     * @param index The certificate data object as read from the data store. Do not restore the data
-     *              to its original format.
-     */
-    static fromLegacy(index: ARCCertificateIndex, cert: RequestCertificate): Certificate;
-    constructor(certificate: HttpCertificate);
-    /**
-     * When needed it reads the certificate's original format.
-     * @param data The certificate data.
-     * @returns The restored certificate.
-     */
-    static fromStore(data: ICertificateData): ICertificateData;
-    /**
-     * Prepares certificate object to be stored in the data store.
-     * If the `data` property is not string then it assumes buffer (either
-     * Node's or ArrayBuffer). In this case it converts buffer to base64 string.
-     * It also adds `type` property set to `buffer` for the `fromStore()`
-     * function to recognize what to do with the data.
-     *
-     * Note, for optimization, PEM keys should be strings as the content of the
-     * certificate is already a base62 string. To spare double base64 conversion
-     * use string data.
-     *
-     * @param data The certificate data object.
-     * @throws When data is not set
-     */
-    static toStore(data: ICertificateData): ICertificateData;
-    toJSON(): HttpCertificate;
-}
-//# sourceMappingURL=ClientCertificate.d.ts.map

package/build/src/models/ClientCertificate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ClientCertificate.d.ts","sourceRoot":"","sources":["../../../src/models/ClientCertificate.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,sCAAsC,CAAA;AAE7C,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,KAAK,CAAA;AAE3C,eAAO,MAAM,IAAI,qBAAqB,CAAA;AAEtC,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,WAAW,GAAG,UAAU,CAAA;AAErE;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,IAAI,EAAE,qBAAqB,CAAA;IAC3B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,QAAQ,CAAA;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,IAAI,CAAA;IACjB;;OAEG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;OAEG;IACH,IAAI,EAAE,eAAe,CAAA;IACrB;;OAEG;IACH,IAAI,EAAE,gBAAgB,CAAA;CACvB;AAED,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,IAAI,EAAE,KAAK,CAAA;CACZ;AAED;;;GAGG;AACH,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,IAAI,EAAE,KAAK,CAAA;IACX;;OAEG;IACH,OAAO,EAAE,gBAAgB,CAAA;CAC1B;AAED,MAAM,MAAM,eAAe,GAAG,eAAe,GAAG,eAAe,GAAG,YAAY,CAAA;AAE9E;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,KAAK,CAAA;IACX;;OAEG;IACH,IAAI,EAAE,qBAAqB,CAAA;IAC3B;;OAEG;IACH,GAAG,EAAE,qBAAqB,CAAA;IAC1B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,KAAK,CAAA;IACX;;OAEG;IACH,IAAI,EAAE,qBAAqB,CAAA;IAC3B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,MAAM,yBAAyB,GAAG,iBAAiB,GAAG,iBAAiB,CAAA;AAE7E;;GAEG;AACH,qBAAa,WAAW;IACtB,IAAI,SAAO;IACX;;OAEG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,OAAO,SAAI;IACX;;OAEG;IACH,IAAI,EAAE,eAAe,CAAA;IACrB;;OAEG;IACH,IAAI,EAAE,gBAAgB,CAAA;IACtB;;OAEG;IACH,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAE1B;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,CACZ,GAAG,EAAE,qBAAqB,EAC1B,GAAG,EAAE,qBAAqB,EAC1B,IAAI,SAAwB,EAC5B,aAAa,CAAC,EAAE,MAAM,GACrB,WAAW;IAoBd;;;;;;OAMG;IACH,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,qBAAqB,EAAE,IAAI,SAAwB,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,WAAW;IAiB3G;;;;;;OAMG;IACH,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,kBAAkB,GAAG,WAAW;gBAiCxE,WAAW,EAAE,eAAe;IAaxC;;;;OAIG;IACH,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB;IAS1D;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB;IAexD,MAAM,IAAI,eAAe;CAiB1B"}

package/build/src/models/ClientCertificate.js

@@ -1,193 +0,0 @@
-import { base64ToBuffer, bufferToBase64 } from '../lib/Buffer.js';
-import { nanoid } from '../nanoid.js';
-export const Kind = 'Core#Certificate';
-/**
- * A class that represents a certificate in the system
- */
-export class Certificate {
-    kind = Kind;
-    /**
-     * The data store key to refer.
-     */
-    key;
-    /**
-     * Custom name of the certificate.
-     */
-    name;
-    /**
-     * Timestamp when the certificate was inserted into the data store.
-     * Required when returning a result. Auto-generated when inserting, if missing.
-     */
-    created = 0;
-    /**
-     * Certificate type. Either `p12` or `pem`.
-     */
-    type;
-    /**
-     * Certificate or list of certificates to use.
-     */
-    cert;
-    /**
-     * The key for the `pem` type certificate.
-     */
-    certKey;
-    /**
-     * Creates a new certificate instance for a PEM key
-     *
-     * @param pem The certificate contents
-     * @param key The key contents
-     * @param name The certificate name
-     * @param keyPassphrase The key passphrase
-     */
-    static fromPem(pem, key, name = 'New PEM certificate', keyPassphrase) {
-        const init = {
-            kind: Kind,
-            cert: {
-                data: pem,
-            },
-            certKey: {
-                data: key,
-            },
-            key: nanoid(),
-            name,
-            type: 'pem',
-            created: Date.now(),
-        };
-        if (keyPassphrase) {
-            init.certKey.passphrase = keyPassphrase;
-        }
-        return new Certificate(init);
-    }
-    /**
-     * Creates a new certificate instance for a P12 key
-     *
-     * @param cert The certificate contents
-     * @param name The certificate name
-     * @param passphrase The key passphrase
-     */
-    static fromP12(cert, name = 'New P12 certificate', passphrase) {
-        const init = {
-            kind: Kind,
-            cert: {
-                data: cert,
-            },
-            key: nanoid(),
-            name,
-            type: 'p12',
-            created: Date.now(),
-        };
-        if (passphrase) {
-            init.cert.passphrase = passphrase;
-        }
-        return new Certificate(init);
-    }
-    /**
-     * Creates a certificate object from the ARC's legacy certificate definition.
-     *
-     * @param index The legacy certificate index object. If it has set `_id` it will be used as the `key`.
-     * @param index The certificate data object as read from the data store. Do not restore the data
-     *              to its original format.
-     */
-    static fromLegacy(index, cert) {
-        const { name = '', type, created = Date.now(), _id = nanoid() } = index;
-        if (type === 'pem') {
-            const data = Array.isArray(cert.cert) ? cert.cert[0] : cert.cert;
-            const key = Array.isArray(cert.key) ? cert.key[0] : cert.key;
-            if (!key) {
-                throw new Error(`Unable to create a PEM certificate without the key.`);
-            }
-            const init = {
-                kind: Kind,
-                cert: data, // these are compatible.
-                certKey: key,
-                key: _id,
-                name,
-                type: 'pem',
-                created,
-            };
-            return new Certificate(init);
-        }
-        else if (type === 'p12') {
-            const data = Array.isArray(cert.cert) ? cert.cert[0] : cert.cert;
-            const init = {
-                kind: Kind,
-                cert: data, // these are compatible.
-                key: _id,
-                name,
-                type: 'p12',
-                created,
-            };
-            return new Certificate(init);
-        }
-        throw new Error(`Unable to create a certificate. Unknown type: ${type}.`);
-    }
-    constructor(certificate) {
-        const { type, cert, key = nanoid(), name = '', created = Date.now() } = certificate;
-        this.key = key;
-        this.name = name;
-        this.type = type;
-        this.cert = Certificate.fromStore(cert);
-        this.created = created;
-        if (type === 'pem') {
-            const typed = certificate;
-            this.certKey = Certificate.fromStore(typed.certKey);
-        }
-    }
-    /**
-     * When needed it reads the certificate's original format.
-     * @param data The certificate data.
-     * @returns The restored certificate.
-     */
-    static fromStore(data) {
-        if (data.type) {
-            delete data.type;
-            const content = data.data;
-            data.data = base64ToBuffer(content);
-        }
-        return data;
-    }
-    /**
-     * Prepares certificate object to be stored in the data store.
-     * If the `data` property is not string then it assumes buffer (either
-     * Node's or ArrayBuffer). In this case it converts buffer to base64 string.
-     * It also adds `type` property set to `buffer` for the `fromStore()`
-     * function to recognize what to do with the data.
-     *
-     * Note, for optimization, PEM keys should be strings as the content of the
-     * certificate is already a base62 string. To spare double base64 conversion
-     * use string data.
-     *
-     * @param data The certificate data object.
-     * @throws When data is not set
-     */
-    static toStore(data) {
-        if (!data) {
-            throw new Error('Certificate data is missing.');
-        }
-        if (!data.data) {
-            throw new Error('Certificate content not set.');
-        }
-        if (typeof data.data !== 'string') {
-            data.type = 'buffer';
-            const buff = data.data;
-            data.data = bufferToBase64(buff);
-        }
-        return data;
-    }
-    toJSON() {
-        const result = {
-            kind: Kind,
-            key: this.key,
-            cert: Certificate.toStore(this.cert),
-            name: this.name,
-            type: this.type,
-            created: this.created,
-        };
-        if (this.type === 'pem' && this.certKey) {
-            const typed = result;
-            typed.certKey = Certificate.toStore(this.certKey);
-        }
-        return result;
-    }
-}
-//# sourceMappingURL=ClientCertificate.js.map

package/build/src/models/ClientCertificate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ClientCertificate.js","sourceRoot":"","sources":["../../../src/models/ClientCertificate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AASrC,MAAM,CAAC,MAAM,IAAI,GAAG,kBAAkB,CAAA;AAoHtC;;GAEG;AACH,MAAM,OAAO,WAAW;IACtB,IAAI,GAAG,IAAI,CAAA;IACX;;OAEG;IACH,GAAG,CAAQ;IACX;;OAEG;IACH,IAAI,CAAQ;IACZ;;;OAGG;IACH,OAAO,GAAG,CAAC,CAAA;IACX;;OAEG;IACH,IAAI,CAAiB;IACrB;;OAEG;IACH,IAAI,CAAkB;IACtB;;OAEG;IACH,OAAO,CAAmB;IAE1B;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,CACZ,GAA0B,EAC1B,GAA0B,EAC1B,IAAI,GAAG,qBAAqB,EAC5B,aAAsB;QAEtB,MAAM,IAAI,GAAoB;YAC5B,IAAI,EAAE,IAAI;YACV,IAAI,EAAE;gBACJ,IAAI,EAAE,GAAG;aACV;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,GAAG;aACV;YACD,GAAG,EAAE,MAAM,EAAE;YACb,IAAI;YACJ,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;SACpB,CAAA;QACD,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,CAAC,UAAU,GAAG,aAAa,CAAA;QACzC,CAAC;QACD,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,CAAA;IAC9B,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,OAAO,CAAC,IAA2B,EAAE,IAAI,GAAG,qBAAqB,EAAE,UAAmB;QAC3F,MAAM,IAAI,GAAoB;YAC5B,IAAI,EAAE,IAAI;YACV,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI;aACX;YACD,GAAG,EAAE,MAAM,EAAE;YACb,IAAI;YACJ,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;SACpB,CAAA;QACD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QACnC,CAAC;QACD,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,CAAA;IAC9B,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,UAAU,CAAC,KAA0B,EAAE,IAAwB;QACpE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,GAAG,MAAM,EAAE,EAAE,GAAG,KAAK,CAAA;QACvE,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;YAChE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,GAAyB,CAAA;YACnF,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACxE,CAAC;YACD,MAAM,IAAI,GAAoB;gBAC5B,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,IAAwB,EAAE,wBAAwB;gBACxD,OAAO,EAAE,GAAuB;gBAChC,GAAG,EAAE,GAAG;gBACR,IAAI;gBACJ,IAAI,EAAE,KAAK;gBACX,OAAO;aACR,CAAA;YACD,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,CAAA;QAC9B,CAAC;aAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;YAChE,MAAM,IAAI,GAAoB;gBAC5B,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,IAAwB,EAAE,wBAAwB;gBACxD,GAAG,EAAE,GAAG;gBACR,IAAI;gBACJ,IAAI,EAAE,KAAK;gBACX,OAAO;aACR,CAAA;YACD,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,CAAA;QAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,GAAG,CAAC,CAAA;IAC3E,CAAC;IAED,YAAY,WAA4B;QACtC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,GAAG,MAAM,EAAE,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,WAAW,CAAA;QACnF,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,WAA8B,CAAA;YAC5C,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACrD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,SAAS,CAAC,IAAsB;QACrC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,IAAI,CAAA;YAChB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAc,CAAA;YACnC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QACrC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,OAAO,CAAC,IAAsB;QACnC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACjD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACjD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAA;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAgC,CAAA;YAClD,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;QAClC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM;QACJ,MAAM,MAAM,GAAoB;YAC9B,IAAI,EAAE,IAAI;YACV,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAA;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,MAAoC,CAAA;YAClD,KAAK,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACnD,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;CACF","sourcesContent":["import { base64ToBuffer, bufferToBase64 } from '../lib/Buffer.js'\nimport { nanoid } from '../nanoid.js'\nimport {\n  Certificate as LegacyCertificate,\n  ARCCertificateIndex,\n  RequestCertificate,\n} from './legacy/models/ClientCertificate.js'\n\nexport type CertificateType = 'p12' | 'pem'\n\nexport const Kind = 'Core#Certificate'\n\nexport type CertificateDataFormat = string | ArrayBuffer | Uint8Array\n\n/**\n * Represents a single certificate object (cert/key)\n */\nexport interface ICertificateData {\n  /**\n   * The certificate to use.\n   * The `p12` type certificate must be a Buffer.\n   */\n  data: CertificateDataFormat\n  /**\n   * A passphrase to use to unlock the certificate.\n   */\n  passphrase?: string\n  /**\n   * The original data type of the certificate. This is only used internally by the data store\n   * to move between buffers and string values stored in the store.\n   * Outside the internal procedure of the data store this\n   * is always `undefined` and the `data` contains the original data format.\n   */\n  type?: 'buffer'\n}\n\nexport interface ICertificate {\n  kind: typeof Kind\n  /**\n   * The data store key to refer under which this certificate is stored.\n   */\n  key: string\n  /**\n   * The custom name of the certificate.\n   */\n  name: string\n  /**\n   * The timestamp when the certificate was inserted into the data store.\n   * Required when returning a result. Auto-generated when inserting, if missing.\n   */\n  created?: number\n  /**\n   * Certificate type. Either `p12` or `pem`.\n   */\n  type: CertificateType\n  /**\n   * Certificate or list of certificates to use.\n   */\n  cert: ICertificateData\n}\n\nexport interface IP12Certificate extends ICertificate {\n  type: 'p12'\n}\n\n/**\n * Represents a complete certificate configuration required to make\n * an HTTP request.\n */\nexport interface IPemCertificate extends ICertificate {\n  type: 'pem'\n  /**\n   * The key for the `pem` type certificate.\n   */\n  certKey: ICertificateData\n}\n\nexport type HttpCertificate = IP12Certificate | IPemCertificate | ICertificate\n\n/**\n * @deprecated Do not use this type anymore. Create a cert instance instead.\n */\nexport interface IPemCreateOptions {\n  type: 'p12'\n  /**\n   * The certificate contents.\n   */\n  cert: CertificateDataFormat\n  /**\n   * The key contents.\n   */\n  key: CertificateDataFormat\n  /**\n   * Optional name for the certificate.\n   */\n  name?: string\n  /**\n   * Optional passphrase for the key.\n   */\n  passphrase?: string\n}\n\n/**\n * @deprecated Do not use this type anymore. Create a cert instance instead.\n */\nexport interface IP12CreateOptions {\n  type: 'pem'\n  /**\n   * The certificate contents.\n   */\n  cert: CertificateDataFormat\n  /**\n   * Optional name for the certificate.\n   */\n  name?: string\n  /**\n   * Optional passphrase for the certificate.\n   */\n  passphrase?: string\n}\n\n/**\n * @deprecated Do not use this type anymore. Create a cert instance instead.\n */\nexport type ICertificateCreateOptions = IPemCreateOptions | IP12CreateOptions\n\n/**\n * A class that represents a certificate in the system\n */\nexport class Certificate {\n  kind = Kind\n  /**\n   * The data store key to refer.\n   */\n  key: string\n  /**\n   * Custom name of the certificate.\n   */\n  name: string\n  /**\n   * Timestamp when the certificate was inserted into the data store.\n   * Required when returning a result. Auto-generated when inserting, if missing.\n   */\n  created = 0\n  /**\n   * Certificate type. Either `p12` or `pem`.\n   */\n  type: CertificateType\n  /**\n   * Certificate or list of certificates to use.\n   */\n  cert: ICertificateData\n  /**\n   * The key for the `pem` type certificate.\n   */\n  certKey?: ICertificateData\n\n  /**\n   * Creates a new certificate instance for a PEM key\n   *\n   * @param pem The certificate contents\n   * @param key The key contents\n   * @param name The certificate name\n   * @param keyPassphrase The key passphrase\n   */\n  static fromPem(\n    pem: CertificateDataFormat,\n    key: CertificateDataFormat,\n    name = 'New PEM certificate',\n    keyPassphrase?: string\n  ): Certificate {\n    const init: IPemCertificate = {\n      kind: Kind,\n      cert: {\n        data: pem,\n      },\n      certKey: {\n        data: key,\n      },\n      key: nanoid(),\n      name,\n      type: 'pem',\n      created: Date.now(),\n    }\n    if (keyPassphrase) {\n      init.certKey.passphrase = keyPassphrase\n    }\n    return new Certificate(init)\n  }\n\n  /**\n   * Creates a new certificate instance for a P12 key\n   *\n   * @param cert The certificate contents\n   * @param name The certificate name\n   * @param passphrase The key passphrase\n   */\n  static fromP12(cert: CertificateDataFormat, name = 'New P12 certificate', passphrase?: string): Certificate {\n    const init: IP12Certificate = {\n      kind: Kind,\n      cert: {\n        data: cert,\n      },\n      key: nanoid(),\n      name,\n      type: 'p12',\n      created: Date.now(),\n    }\n    if (passphrase) {\n      init.cert.passphrase = passphrase\n    }\n    return new Certificate(init)\n  }\n\n  /**\n   * Creates a certificate object from the ARC's legacy certificate definition.\n   *\n   * @param index The legacy certificate index object. If it has set `_id` it will be used as the `key`.\n   * @param index The certificate data object as read from the data store. Do not restore the data\n   *              to its original format.\n   */\n  static fromLegacy(index: ARCCertificateIndex, cert: RequestCertificate): Certificate {\n    const { name = '', type, created = Date.now(), _id = nanoid() } = index\n    if (type === 'pem') {\n      const data = Array.isArray(cert.cert) ? cert.cert[0] : cert.cert\n      const key = Array.isArray(cert.key) ? cert.key[0] : (cert.key as LegacyCertificate)\n      if (!key) {\n        throw new Error(`Unable to create a PEM certificate without the key.`)\n      }\n      const init: IPemCertificate = {\n        kind: Kind,\n        cert: data as ICertificateData, // these are compatible.\n        certKey: key as ICertificateData,\n        key: _id,\n        name,\n        type: 'pem',\n        created,\n      }\n      return new Certificate(init)\n    } else if (type === 'p12') {\n      const data = Array.isArray(cert.cert) ? cert.cert[0] : cert.cert\n      const init: IP12Certificate = {\n        kind: Kind,\n        cert: data as ICertificateData, // these are compatible.\n        key: _id,\n        name,\n        type: 'p12',\n        created,\n      }\n      return new Certificate(init)\n    }\n    throw new Error(`Unable to create a certificate. Unknown type: ${type}.`)\n  }\n\n  constructor(certificate: HttpCertificate) {\n    const { type, cert, key = nanoid(), name = '', created = Date.now() } = certificate\n    this.key = key\n    this.name = name\n    this.type = type\n    this.cert = Certificate.fromStore(cert)\n    this.created = created\n    if (type === 'pem') {\n      const typed = certificate as IPemCertificate\n      this.certKey = Certificate.fromStore(typed.certKey)\n    }\n  }\n\n  /**\n   * When needed it reads the certificate's original format.\n   * @param data The certificate data.\n   * @returns The restored certificate.\n   */\n  static fromStore(data: ICertificateData): ICertificateData {\n    if (data.type) {\n      delete data.type\n      const content = data.data as string\n      data.data = base64ToBuffer(content)\n    }\n    return data\n  }\n\n  /**\n   * Prepares certificate object to be stored in the data store.\n   * If the `data` property is not string then it assumes buffer (either\n   * Node's or ArrayBuffer). In this case it converts buffer to base64 string.\n   * It also adds `type` property set to `buffer` for the `fromStore()`\n   * function to recognize what to do with the data.\n   *\n   * Note, for optimization, PEM keys should be strings as the content of the\n   * certificate is already a base62 string. To spare double base64 conversion\n   * use string data.\n   *\n   * @param data The certificate data object.\n   * @throws When data is not set\n   */\n  static toStore(data: ICertificateData): ICertificateData {\n    if (!data) {\n      throw new Error('Certificate data is missing.')\n    }\n    if (!data.data) {\n      throw new Error('Certificate content not set.')\n    }\n    if (typeof data.data !== 'string') {\n      data.type = 'buffer'\n      const buff = data.data as ArrayBuffer | Uint8Array\n      data.data = bufferToBase64(buff)\n    }\n    return data\n  }\n\n  toJSON(): HttpCertificate {\n    const result: HttpCertificate = {\n      kind: Kind,\n      key: this.key,\n      cert: Certificate.toStore(this.cert),\n      name: this.name,\n      type: this.type,\n      created: this.created,\n    }\n\n    if (this.type === 'pem' && this.certKey) {\n      const typed = result as unknown as IPemCertificate\n      typed.certKey = Certificate.toStore(this.certKey)\n    }\n\n    return result\n  }\n}\n"]}