@astrale-os/kernel-protocol 0.5.0-beta.2

package/dist/invocation/trace.d.ts

@@ -0,0 +1,10 @@
+export declare const MAXIMUM_TRACEPARENT_BYTES = 512;
+export declare const MAXIMUM_TRACESTATE_BYTES = 512;
+export declare const MAXIMUM_TRACESTATE_MEMBERS = 32;
+export interface Trace {
+    readonly traceparent: string;
+    readonly tracestate?: string;
+}
+/** Admit portable correlation syntax without making it an invocation validity condition. */
+export declare function admitTrace(input: unknown): Trace | undefined;
+//# sourceMappingURL=trace.d.ts.map

package/dist/invocation/trace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace.d.ts","sourceRoot":"","sources":["../../invocation/trace.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,yBAAyB,MAAM,CAAA;AAC5C,eAAO,MAAM,wBAAwB,MAAM,CAAA;AAC3C,eAAO,MAAM,0BAA0B,KAAK,CAAA;AAE5C,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC7B;AASD,4FAA4F;AAC5F,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,GAAG,SAAS,CA2B5D"}

package/dist/invocation/trace.js

@@ -0,0 +1,87 @@
+export const MAXIMUM_TRACEPARENT_BYTES = 512;
+export const MAXIMUM_TRACESTATE_BYTES = 512;
+export const MAXIMUM_TRACESTATE_MEMBERS = 32;
+const TRACEPARENT_PREFIX = /^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})/u;
+const FUTURE_SUFFIX = /^-[\x21-\x7e]+$/u;
+const SIMPLE_KEY = /^[a-z][a-z0-9_*/-]{0,255}$/u;
+const TENANT_ID = /^[a-z0-9][a-z0-9_*/-]{0,240}$/u;
+const SYSTEM_ID = /^[a-z][a-z0-9_*/-]{0,13}$/u;
+const STATE_VALUE = /^[\x20-\x2b\x2d-\x3c\x3e-\x7e]{0,255}[\x21-\x2b\x2d-\x3c\x3e-\x7e]$/u;
+/** Admit portable correlation syntax without making it an invocation validity condition. */
+export function admitTrace(input) {
+    if (input === null || typeof input !== 'object' || Array.isArray(input))
+        return undefined;
+    const keys = Reflect.ownKeys(input);
+    if (!keys.includes('traceparent') ||
+        keys.some((key) => key !== 'traceparent' && key !== 'tracestate')) {
+        return undefined;
+    }
+    let traceparent;
+    let tracestate;
+    try {
+        const value = input;
+        traceparent = value.traceparent;
+        tracestate = value.tracestate;
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof traceparent !== 'string' || !validTraceparent(traceparent))
+        return undefined;
+    const state = typeof tracestate === 'string' && validTracestate(tracestate) ? tracestate : undefined;
+    return Object.freeze({
+        traceparent,
+        ...(state === undefined || state.trim() === '' ? {} : { tracestate: state }),
+    });
+}
+function validTraceparent(input) {
+    if (input.length < 55 || input.length > MAXIMUM_TRACEPARENT_BYTES)
+        return false;
+    const match = TRACEPARENT_PREFIX.exec(input);
+    if (match === null || match.index !== 0)
+        return false;
+    const [, version, traceId, parentId, flags] = match;
+    if (version === undefined ||
+        traceId === undefined ||
+        parentId === undefined ||
+        flags === undefined ||
+        version === 'ff' ||
+        /^0+$/u.test(traceId) ||
+        /^0+$/u.test(parentId)) {
+        return false;
+    }
+    if (version === '00')
+        return input.length === 55 && (flags === '00' || flags === '01');
+    return input.length === 55 || FUTURE_SUFFIX.test(input.slice(55));
+}
+function validTracestate(input) {
+    if (input.length > MAXIMUM_TRACESTATE_BYTES)
+        return false;
+    const members = input.split(',');
+    if (members.length > MAXIMUM_TRACESTATE_MEMBERS)
+        return false;
+    const keys = new Set();
+    for (const inputMember of members) {
+        const member = inputMember.replace(/^[ \t]+|[ \t]+$/gu, '');
+        if (member === '')
+            continue;
+        const separator = member.indexOf('=');
+        if (separator < 1 || separator !== member.lastIndexOf('='))
+            return false;
+        const key = member.slice(0, separator);
+        const value = member.slice(separator + 1);
+        if (!validStateKey(key) || !STATE_VALUE.test(value) || keys.has(key))
+            return false;
+        keys.add(key);
+    }
+    return true;
+}
+function validStateKey(input) {
+    const separator = input.indexOf('@');
+    if (separator === -1)
+        return SIMPLE_KEY.test(input);
+    if (separator !== input.lastIndexOf('@'))
+        return false;
+    return TENANT_ID.test(input.slice(0, separator)) && SYSTEM_ID.test(input.slice(separator + 1));
+}
+//# sourceMappingURL=trace.js.map

package/dist/invocation/trace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace.js","sourceRoot":"","sources":["../../invocation/trace.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAA;AAC5C,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAA;AAC3C,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAA;AAO5C,MAAM,kBAAkB,GAAG,6DAA6D,CAAA;AACxF,MAAM,aAAa,GAAG,kBAAkB,CAAA;AACxC,MAAM,UAAU,GAAG,6BAA6B,CAAA;AAChD,MAAM,SAAS,GAAG,gCAAgC,CAAA;AAClD,MAAM,SAAS,GAAG,4BAA4B,CAAA;AAC9C,MAAM,WAAW,GAAG,sEAAsE,CAAA;AAE1F,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACzF,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACnC,IACE,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,YAAY,CAAC,EACjE,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAI,WAAoB,CAAA;IACxB,IAAI,UAAmB,CAAA;IACvB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAA0E,CAAA;QACxF,WAAW,GAAG,KAAK,CAAC,WAAW,CAAA;QAC/B,UAAU,GAAG,KAAK,CAAC,UAAU,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAA;IAEvF,MAAM,KAAK,GACT,OAAO,UAAU,KAAK,QAAQ,IAAI,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;IACxF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW;QACX,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;KAC7E,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,yBAAyB;QAAE,OAAO,KAAK,CAAA;IAC/E,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrD,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAK,CAAA;IACnD,IACE,OAAO,KAAK,SAAS;QACrB,OAAO,KAAK,SAAS;QACrB,QAAQ,KAAK,SAAS;QACtB,KAAK,KAAK,SAAS;QACnB,OAAO,KAAK,IAAI;QAChB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EACtB,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,CAAA;IACtF,OAAO,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;AACnE,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,KAAK,CAAC,MAAM,GAAG,wBAAwB;QAAE,OAAO,KAAK,CAAA;IACzD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,OAAO,CAAC,MAAM,GAAG,0BAA0B;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,WAAW,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAA;QAC3D,IAAI,MAAM,KAAK,EAAE;YAAE,SAAQ;QAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACrC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,KAAK,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA;QACxE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;QACtC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAA;QACzC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA;QAClF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACf,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACpC,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACnD,IAAI,SAAS,KAAK,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACtD,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAA;AAChG,CAAC"}

package/dist/invocation/version.d.ts

@@ -0,0 +1,3 @@
+export declare const VERSION: 2;
+export type Version = typeof VERSION;
+//# sourceMappingURL=version.d.ts.map

package/dist/invocation/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../invocation/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,EAAG,CAAU,CAAA;AACjC,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAA"}

package/dist/invocation/version.js

@@ -0,0 +1,2 @@
+export const VERSION = 2;
+//# sourceMappingURL=version.js.map

package/dist/invocation/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../invocation/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,CAAU,CAAA"}

package/dist/invocation/websocket/binary.d.ts

@@ -0,0 +1,4 @@
+import type { BinaryResponse } from '../binary.js';
+export declare function encodeBinary(response: BinaryResponse): Uint8Array;
+export declare function decodeBinary(input: Uint8Array): BinaryResponse | undefined;
+//# sourceMappingURL=binary.d.ts.map

package/dist/invocation/websocket/binary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary.d.ts","sourceRoot":"","sources":["../../../invocation/websocket/binary.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAWlD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,cAAc,GAAG,UAAU,CA0BjE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc,GAAG,SAAS,CAgC1E"}

package/dist/invocation/websocket/binary.js

@@ -0,0 +1,71 @@
+import { CODES, ProtocolError } from '../../errors/index.js';
+import { decodeBinaryResponse } from '../binary.js';
+const MAGIC = new Uint8Array([0x41, 0x53, 0x54, 0x42, 0x01]);
+const LENGTH_BYTES = 4;
+const MAXIMUM_METADATA_BYTES = 65_536;
+const encoder = new TextEncoder();
+const decoder = new TextDecoder('utf-8', { fatal: true });
+export function encodeBinary(response) {
+    const headers = response.headers === undefined
+        ? undefined
+        : Object.fromEntries(Object.entries(response.headers).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0));
+    const metadata = encoder.encode(JSON.stringify({
+        kind: response.kind,
+        id: response.id,
+        mediaType: response.mediaType,
+        ...(headers === undefined ? {} : { headers }),
+    }));
+    if (metadata.byteLength > MAXIMUM_METADATA_BYTES)
+        invalid();
+    const output = new Uint8Array(MAGIC.byteLength + LENGTH_BYTES + metadata.byteLength + response.body.byteLength);
+    output.set(MAGIC, 0);
+    new DataView(output.buffer).setUint32(MAGIC.byteLength, metadata.byteLength);
+    output.set(metadata, MAGIC.byteLength + LENGTH_BYTES);
+    output.set(response.body, MAGIC.byteLength + LENGTH_BYTES + metadata.byteLength);
+    return output;
+}
+export function decodeBinary(input) {
+    if (!hasMagic(input))
+        return undefined;
+    const headerBytes = MAGIC.byteLength + LENGTH_BYTES;
+    if (input.byteLength < headerBytes)
+        invalid();
+    const metadataLength = new DataView(input.buffer, input.byteOffset + MAGIC.byteLength, LENGTH_BYTES).getUint32(0);
+    const bodyOffset = headerBytes + metadataLength;
+    if (metadataLength === 0 ||
+        metadataLength > MAXIMUM_METADATA_BYTES ||
+        bodyOffset > input.byteLength) {
+        invalid();
+    }
+    let metadata;
+    try {
+        metadata = JSON.parse(decoder.decode(input.subarray(headerBytes, bodyOffset)));
+    }
+    catch (cause) {
+        if (cause instanceof SyntaxError || cause instanceof TypeError)
+            return invalid();
+        throw cause;
+    }
+    if (typeof metadata !== 'object' || metadata === null || Array.isArray(metadata))
+        invalid();
+    return decodeBinaryResponse({
+        ...metadata,
+        body: input.slice(bodyOffset),
+    });
+}
+function hasMagic(input) {
+    if (input.byteLength < MAGIC.byteLength)
+        return false;
+    for (let index = 0; index < MAGIC.byteLength; index += 1) {
+        if (input[index] !== MAGIC[index])
+            return false;
+    }
+    return true;
+}
+function invalid() {
+    throw new ProtocolError({
+        code: CODES.INVALID_REQUEST,
+        message: 'WebSocket binary response is invalid.',
+    });
+}
+//# sourceMappingURL=binary.js.map

package/dist/invocation/websocket/binary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary.js","sourceRoot":"","sources":["../../../invocation/websocket/binary.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAEnD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAC5D,MAAM,YAAY,GAAG,CAAC,CAAA;AACtB,MAAM,sBAAsB,GAAG,MAAM,CAAA;AACrC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;AACjC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AAEzD,MAAM,UAAU,YAAY,CAAC,QAAwB;IACnD,MAAM,OAAO,GACX,QAAQ,CAAC,OAAO,KAAK,SAAS;QAC5B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CACxD,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACzC,CACF,CAAA;IACP,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAC7B,IAAI,CAAC,SAAS,CAAC;QACb,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;KAC9C,CAAC,CACH,CAAA;IACD,IAAI,QAAQ,CAAC,UAAU,GAAG,sBAAsB;QAAE,OAAO,EAAE,CAAA;IAC3D,MAAM,MAAM,GAAG,IAAI,UAAU,CAC3B,KAAK,CAAC,UAAU,GAAG,YAAY,GAAG,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CACjF,CAAA;IACD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACpB,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAA;IAC5E,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,GAAG,YAAY,CAAC,CAAA;IACrD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,GAAG,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAA;IAChF,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACtC,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,YAAY,CAAA;IACnD,IAAI,KAAK,CAAC,UAAU,GAAG,WAAW;QAAE,OAAO,EAAE,CAAA;IAE7C,MAAM,cAAc,GAAG,IAAI,QAAQ,CACjC,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,EACnC,YAAY,CACb,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACd,MAAM,UAAU,GAAG,WAAW,GAAG,cAAc,CAAA;IAC/C,IACE,cAAc,KAAK,CAAC;QACpB,cAAc,GAAG,sBAAsB;QACvC,UAAU,GAAG,KAAK,CAAC,UAAU,EAC7B,CAAC;QACD,OAAO,EAAE,CAAA;IACX,CAAC;IAED,IAAI,QAAiB,CAAA;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IAChF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW,IAAI,KAAK,YAAY,SAAS;YAAE,OAAO,OAAO,EAAE,CAAA;QAChF,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAA;IAE3F,OAAO,oBAAoB,CAAC;QAC1B,GAAI,QAAoC;QACxC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;KAC9B,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiB;IACjC,IAAI,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU;QAAE,OAAO,KAAK,CAAA;IACrD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACzD,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;IACjD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,OAAO;IACd,MAAM,IAAI,aAAa,CAAC;QACtB,IAAI,EAAE,KAAK,CAAC,eAAe;QAC3B,OAAO,EAAE,uCAAuC;KACjD,CAAC,CAAA;AACJ,CAAC"}

package/dist/invocation/websocket/index.d.ts

@@ -0,0 +1,3 @@
+export { decodeBinary, encodeBinary } from './binary.js';
+export { JSON_SUBPROTOCOL, MSGPACK_SUBPROTOCOL, selectSubprotocol, subprotocolFor, type Subprotocol, type SubprotocolSelection, } from './subprotocol.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/invocation/websocket/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../invocation/websocket/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AACxD,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,KAAK,WAAW,EAChB,KAAK,oBAAoB,GAC1B,MAAM,kBAAkB,CAAA"}

package/dist/invocation/websocket/index.js

@@ -0,0 +1,3 @@
+export { decodeBinary, encodeBinary } from './binary.js';
+export { JSON_SUBPROTOCOL, MSGPACK_SUBPROTOCOL, selectSubprotocol, subprotocolFor, } from './subprotocol.js';
+//# sourceMappingURL=index.js.map

package/dist/invocation/websocket/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../invocation/websocket/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AACxD,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,GAGf,MAAM,kBAAkB,CAAA"}

package/dist/invocation/websocket/subprotocol.d.ts

@@ -0,0 +1,11 @@
+import type { Codec } from '../../codecs/index.js';
+export declare const JSON_SUBPROTOCOL: 'astrale.invocation.v2.json';
+export declare const MSGPACK_SUBPROTOCOL: 'astrale.invocation.v2.msgpack';
+export type Subprotocol = typeof JSON_SUBPROTOCOL | typeof MSGPACK_SUBPROTOCOL;
+export interface SubprotocolSelection {
+    readonly subprotocol: Subprotocol;
+    readonly codec: Codec;
+}
+export declare function subprotocolFor(codec: Codec): Subprotocol;
+export declare function selectSubprotocol(offered: string | null, supported: readonly Codec[]): SubprotocolSelection | undefined;
+//# sourceMappingURL=subprotocol.d.ts.map

package/dist/invocation/websocket/subprotocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprotocol.d.ts","sourceRoot":"","sources":["../../../invocation/websocket/subprotocol.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAIlD,eAAO,MAAM,gBAAgB,EAAG,4BAAqC,CAAA;AACrE,eAAO,MAAM,mBAAmB,EAAG,+BAAwC,CAAA;AAC3E,MAAM,MAAM,WAAW,GAAG,OAAO,gBAAgB,GAAG,OAAO,mBAAmB,CAAA;AAE9E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CACtB;AAID,wBAAgB,cAAc,CAAC,KAAK,EAAE,KAAK,GAAG,WAAW,CAIxD;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,SAAS,EAAE,SAAS,KAAK,EAAE,GAC1B,oBAAoB,GAAG,SAAS,CAgBlC"}

package/dist/invocation/websocket/subprotocol.js

@@ -0,0 +1,30 @@
+import { admitSupportedCodecs, codecProfile } from '../binding-codecs.js';
+export const JSON_SUBPROTOCOL = 'astrale.invocation.v2.json';
+export const MSGPACK_SUBPROTOCOL = 'astrale.invocation.v2.msgpack';
+const TOKEN = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u;
+export function subprotocolFor(codec) {
+    const profile = codecProfile(codec);
+    if (profile === undefined)
+        throw new TypeError('codec is not a canonical Invocation codec.');
+    return profile === 'json' ? JSON_SUBPROTOCOL : MSGPACK_SUBPROTOCOL;
+}
+export function selectSubprotocol(offered, supported) {
+    const admitted = admitSupportedCodecs(supported);
+    if (offered === null || offered.trim() === '')
+        return undefined;
+    const tokens = offered.split(',').map((token) => token.trim());
+    const seen = new Set();
+    for (const token of tokens) {
+        if (!TOKEN.test(token) || seen.has(token))
+            return undefined;
+        seen.add(token);
+    }
+    for (const token of tokens) {
+        const entry = admitted.find((candidate) => subprotocolFor(candidate.codec) === token);
+        if (entry !== undefined) {
+            return Object.freeze({ subprotocol: token, codec: entry.codec });
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=subprotocol.js.map

package/dist/invocation/websocket/subprotocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprotocol.js","sourceRoot":"","sources":["../../../invocation/websocket/subprotocol.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAEzE,MAAM,CAAC,MAAM,gBAAgB,GAAG,4BAAqC,CAAA;AACrE,MAAM,CAAC,MAAM,mBAAmB,GAAG,+BAAwC,CAAA;AAQ3E,MAAM,KAAK,GAAG,gCAAgC,CAAA;AAE9C,MAAM,UAAU,cAAc,CAAC,KAAY;IACzC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IACnC,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAA;IAC5F,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,CAAA;AACpE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,OAAsB,EACtB,SAA2B;IAE3B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAA;IAChD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;IAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QAC3D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACjB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAA;QACrF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,KAAoB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;QACjF,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/issuer/configuration.d.ts

@@ -0,0 +1,15 @@
+import type { IssuerId } from '@astrale-os/kernel-core/auth';
+export interface Configuration {
+    readonly issuer: IssuerId;
+    readonly jwks_uri: string;
+    readonly subject_types_supported: readonly ['public'];
+    readonly id_token_signing_alg_values_supported: readonly [string, ...string[]];
+    readonly token_exchange_endpoint?: string;
+}
+export interface ConfigurationOptions {
+    readonly tokenExchange?: boolean;
+}
+export declare function configuration(issuer: string, algorithms: readonly [string, ...string[]], options?: ConfigurationOptions): Configuration;
+export declare function acceptConfiguration(input: unknown, expectedIssuer?: string): Configuration;
+export declare function acceptAlgorithms(input: unknown): readonly [string, ...string[]];
+//# sourceMappingURL=configuration.d.ts.map

package/dist/issuer/configuration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuration.d.ts","sourceRoot":"","sources":["../../issuer/configuration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAK5D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,uBAAuB,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAA;IACrD,QAAQ,CAAC,qCAAqC,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;IAC9E,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAA;CAC1C;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CACjC;AAID,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,EAC1C,OAAO,GAAE,oBAAyB,GACjC,aAAa,CAWf;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,aAAa,CA4B1F;AAgBD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAc/E"}

package/dist/issuer/configuration.js

@@ -0,0 +1,87 @@
+import { fail } from './error.js';
+import { acceptIssuer } from './url.js';
+const ALGORITHM = /^[A-Za-z0-9_-]{1,64}$/u;
+export function configuration(issuer, algorithms, options = {}) {
+    const admitted = acceptIssuer(issuer);
+    const acceptedAlgorithms = acceptAlgorithms(algorithms);
+    const tokenExchange = acceptConfigurationOptions(options).tokenExchange === true;
+    return deepFreeze({
+        issuer: admitted,
+        jwks_uri: `${admitted}/.well-known/jwks.json`,
+        subject_types_supported: ['public'],
+        id_token_signing_alg_values_supported: acceptedAlgorithms,
+        ...(tokenExchange ? { token_exchange_endpoint: `${admitted}/.well-known/astrale/token` } : {}),
+    });
+}
+export function acceptConfiguration(input, expectedIssuer) {
+    const value = record(input);
+    exact(value, ['issuer', 'jwks_uri', 'subject_types_supported', 'id_token_signing_alg_values_supported'], ['token_exchange_endpoint']);
+    const admitted = acceptIssuer(value.issuer);
+    if (expectedIssuer !== undefined && admitted !== acceptIssuer(expectedIssuer)) {
+        fail('ISSUER_DISCOVERY_MISMATCH', 'Issuer discovery does not match the requested issuer.');
+    }
+    if (value.jwks_uri !== `${admitted}/.well-known/jwks.json`) {
+        fail('ISSUER_DISCOVERY_INVALID', 'Issuer discovery key URL is not canonical.');
+    }
+    if (!Array.isArray(value.subject_types_supported) ||
+        value.subject_types_supported.length !== 1 ||
+        value.subject_types_supported[0] !== 'public') {
+        fail('ISSUER_DISCOVERY_INVALID', 'Issuer discovery subject types are invalid.');
+    }
+    const endpoint = value.token_exchange_endpoint;
+    if (endpoint !== undefined && endpoint !== `${admitted}/.well-known/astrale/token`) {
+        fail('ISSUER_DISCOVERY_INVALID', 'Issuer token-exchange URL is not canonical.');
+    }
+    return configuration(admitted, acceptAlgorithms(value.id_token_signing_alg_values_supported), {
+        tokenExchange: endpoint !== undefined,
+    });
+}
+function acceptConfigurationOptions(input) {
+    if (input === null || typeof input !== 'object' || Array.isArray(input)) {
+        fail('ISSUER_DISCOVERY_INVALID', 'Issuer configuration options are invalid.');
+    }
+    const keys = Reflect.ownKeys(input);
+    if (keys.some((key) => key !== 'tokenExchange')) {
+        fail('ISSUER_DISCOVERY_INVALID', 'Issuer configuration options contain unexpected fields.');
+    }
+    if (input.tokenExchange !== undefined && typeof input.tokenExchange !== 'boolean') {
+        fail('ISSUER_DISCOVERY_INVALID', 'Issuer token-exchange option is invalid.');
+    }
+    return input;
+}
+export function acceptAlgorithms(input) {
+    if (!Array.isArray(input) || input.length === 0) {
+        fail('ISSUER_DISCOVERY_INVALID', 'Issuer algorithms must be a non-empty array.');
+    }
+    const algorithms = input.map((algorithm) => {
+        if (typeof algorithm !== 'string' || !ALGORITHM.test(algorithm)) {
+            fail('ISSUER_DISCOVERY_INVALID', 'Issuer algorithm is invalid.');
+        }
+        return algorithm;
+    });
+    if (new Set(algorithms).size !== algorithms.length) {
+        fail('ISSUER_DISCOVERY_INVALID', 'Issuer algorithms must be unique.');
+    }
+    return Object.freeze(algorithms);
+}
+function record(input) {
+    if (input === null || typeof input !== 'object' || Array.isArray(input)) {
+        fail('ISSUER_DISCOVERY_INVALID', 'Issuer discovery is invalid.');
+    }
+    return input;
+}
+function exact(input, required, optional = []) {
+    const keys = Reflect.ownKeys(input);
+    if (required.some((field) => !Object.hasOwn(input, field)) ||
+        keys.some((key) => typeof key !== 'string' || (!required.includes(key) && !optional.includes(key)))) {
+        fail('ISSUER_DISCOVERY_INVALID', 'Issuer discovery document contains unexpected fields.');
+    }
+}
+function deepFreeze(input) {
+    if (input === null || typeof input !== 'object' || Object.isFrozen(input))
+        return input;
+    for (const value of Object.values(input))
+        deepFreeze(value);
+    return Object.freeze(input);
+}
+//# sourceMappingURL=configuration.js.map

package/dist/issuer/configuration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuration.js","sourceRoot":"","sources":["../../issuer/configuration.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAcvC,MAAM,SAAS,GAAG,wBAAwB,CAAA;AAE1C,MAAM,UAAU,aAAa,CAC3B,MAAc,EACd,UAA0C,EAC1C,OAAO,GAAyB,EAAE;IAElC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IACrC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAA;IACvD,MAAM,aAAa,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC,aAAa,KAAK,IAAI,CAAA;IAChF,OAAO,UAAU,CAAC;QAChB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,GAAG,QAAQ,wBAAwB;QAC7C,uBAAuB,EAAE,CAAC,QAAQ,CAAC;QACnC,qCAAqC,EAAE,kBAAkB;QACzD,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,GAAG,QAAQ,4BAA4B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/F,CAAkB,CAAA;AACrB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,cAAuB;IACzE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,KAAK,CACH,KAAK,EACL,CAAC,QAAQ,EAAE,UAAU,EAAE,yBAAyB,EAAE,uCAAuC,CAAC,EAC1F,CAAC,yBAAyB,CAAC,CAC5B,CAAA;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC3C,IAAI,cAAc,KAAK,SAAS,IAAI,QAAQ,KAAK,YAAY,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9E,IAAI,CAAC,2BAA2B,EAAE,uDAAuD,CAAC,CAAA;IAC5F,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,GAAG,QAAQ,wBAAwB,EAAE,CAAC;QAC3D,IAAI,CAAC,0BAA0B,EAAE,4CAA4C,CAAC,CAAA;IAChF,CAAC;IACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC;QAC7C,KAAK,CAAC,uBAAuB,CAAC,MAAM,KAAK,CAAC;QAC1C,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,KAAK,QAAQ,EAC7C,CAAC;QACD,IAAI,CAAC,0BAA0B,EAAE,6CAA6C,CAAC,CAAA;IACjF,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,uBAAuB,CAAA;IAC9C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,GAAG,QAAQ,4BAA4B,EAAE,CAAC;QACnF,IAAI,CAAC,0BAA0B,EAAE,6CAA6C,CAAC,CAAA;IACjF,CAAC;IACD,OAAO,aAAa,CAAC,QAAQ,EAAE,gBAAgB,CAAC,KAAK,CAAC,qCAAqC,CAAC,EAAE;QAC5F,aAAa,EAAE,QAAQ,KAAK,SAAS;KACtC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,KAA2B;IAC7D,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,0BAA0B,EAAE,2CAA2C,CAAC,CAAA;IAC/E,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACnC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,eAAe,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,0BAA0B,EAAE,yDAAyD,CAAC,CAAA;IAC7F,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAClF,IAAI,CAAC,0BAA0B,EAAE,0CAA0C,CAAC,CAAA;IAC9E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,0BAA0B,EAAE,8CAA8C,CAAC,CAAA;IAClF,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACzC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,0BAA0B,EAAE,8BAA8B,CAAC,CAAA;QAClE,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC,CAAC,CAAA;IACF,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACnD,IAAI,CAAC,0BAA0B,EAAE,mCAAmC,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAA8C,CAAA;AAC/E,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,0BAA0B,EAAE,8BAA8B,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,KAA0C,CAAA;AACnD,CAAC;AAED,SAAS,KAAK,CACZ,KAAwC,EACxC,QAA2B,EAC3B,QAAQ,GAAsB,EAAE;IAEhC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACnC,IACE,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,CACP,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CACzF,EACD,CAAC;QACD,IAAI,CAAC,0BAA0B,EAAE,uDAAuD,CAAC,CAAA;IAC3F,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACvF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAA;IAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC7B,CAAC"}

package/dist/issuer/error.d.ts

@@ -0,0 +1,8 @@
+export type DiscoveryErrorCode = 'ISSUER_DISCOVERY_INVALID' | 'ISSUER_DISCOVERY_MISMATCH' | 'ISSUER_KEY_SET_INVALID';
+export declare class DiscoveryError extends Error {
+    readonly code: DiscoveryErrorCode;
+    readonly name = "DiscoveryError";
+    constructor(code: DiscoveryErrorCode, message: string, options?: ErrorOptions);
+}
+export declare function fail(code: DiscoveryErrorCode, message: string, cause?: unknown): never;
+//# sourceMappingURL=error.d.ts.map

package/dist/issuer/error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../issuer/error.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAC1B,0BAA0B,GAC1B,2BAA2B,GAC3B,wBAAwB,CAAA;AAE5B,qBAAa,cAAe,SAAQ,KAAK;IAIrC,QAAQ,CAAC,IAAI,EAAE,kBAAkB;IAHnC,SAAkB,IAAI,oBAAmB;IAEzC,YACW,IAAI,EAAE,kBAAkB,EACjC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,YAAY,EAGvB;CACF;AAED,wBAAgB,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,KAAK,CAEtF"}

package/dist/issuer/error.js

@@ -0,0 +1,12 @@
+export class DiscoveryError extends Error {
+    code;
+    name = 'DiscoveryError';
+    constructor(code, message, options) {
+        super(message, options);
+        this.code = code;
+    }
+}
+export function fail(code, message, cause) {
+    throw new DiscoveryError(code, message, cause === undefined ? undefined : { cause });
+}
+//# sourceMappingURL=error.js.map

package/dist/issuer/error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../../issuer/error.ts"],"names":[],"mappings":"AAKA,MAAM,OAAO,cAAe,SAAQ,KAAK;IAI5B,IAAI;IAHG,IAAI,GAAG,gBAAgB,CAAA;IAEzC,YACW,IAAwB,EACjC,OAAe,EACf,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;oBAJd,IAAI;IAKf,CAAC;CACF;AAED,MAAM,UAAU,IAAI,CAAC,IAAwB,EAAE,OAAe,EAAE,KAAe;IAC7E,MAAM,IAAI,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AACtF,CAAC"}

package/dist/issuer/exchange.d.ts

@@ -0,0 +1,26 @@
+import type { ErrorPayload } from '../errors/index.js';
+export declare const MEDIA_TYPE: 'application/vnd.astrale+json';
+export interface Request {
+    readonly token: string;
+}
+export interface Response {
+    readonly token: string;
+    readonly expiresAt: number;
+}
+export interface ErrorResponse {
+    readonly error: ErrorPayload;
+}
+export interface HttpRequest {
+    readonly method: string;
+    readonly url: string;
+    readonly authorization: string | null;
+    readonly accept: string | null;
+}
+export declare function request(token: string): Request;
+export declare function acceptRequest(input: unknown): Request;
+export declare function response(token: string, expiresAt: number): Response;
+export declare function acceptResponse(input: unknown): Response;
+export declare function acceptErrorResponse(input: unknown): ErrorResponse;
+export declare function acceptHttpRequest(input: HttpRequest): Request;
+export declare function responseHeaders(): Readonly<Record<string, string>>;
+//# sourceMappingURL=exchange.d.ts.map

package/dist/issuer/exchange.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange.d.ts","sourceRoot":"","sources":["../../issuer/exchange.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAItD,eAAO,MAAM,UAAU,EAAG,8BAAuC,CAAA;AAEjE,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9C;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAGrD;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,QAAQ,CAEnE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CASvD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAGjE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAiC7D;AAED,wBAAgB,eAAe,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAOlE"}

package/dist/issuer/exchange.js

@@ -0,0 +1,130 @@
+import { acceptPayload, CODES, ProtocolError } from '../errors/index.js';
+export const MEDIA_TYPE = 'application/vnd.astrale+json';
+export function request(token) {
+    return acceptRequest({ token });
+}
+export function acceptRequest(input) {
+    const value = exactObject(input, ['token'], 'token-exchange request');
+    return Object.freeze({ token: nonEmptyText(value.token, 'token-exchange request.token') });
+}
+export function response(token, expiresAt) {
+    return acceptResponse({ token, expiresAt });
+}
+export function acceptResponse(input) {
+    const value = exactObject(input, ['token', 'expiresAt'], 'token-exchange response');
+    if (!Number.isSafeInteger(value.expiresAt) || value.expiresAt <= 0) {
+        throw new TypeError('token-exchange response.expiresAt must be a positive safe integer.');
+    }
+    return Object.freeze({
+        token: nonEmptyText(value.token, 'token-exchange response.token'),
+        expiresAt: value.expiresAt,
+    });
+}
+export function acceptErrorResponse(input) {
+    const value = exactObject(input, ['error'], 'token-exchange error response');
+    return Object.freeze({ error: acceptPayload(value.error, 'token-exchange error response.error') });
+}
+export function acceptHttpRequest(input) {
+    const value = exactObject(input, ['method', 'url', 'authorization', 'accept'], 'token-exchange HTTP request');
+    if (value.method !== 'POST') {
+        fail(CODES.METHOD_NOT_ALLOWED, 'Token exchange supports POST only.');
+    }
+    if (typeof value.url !== 'string')
+        invalid('Token-exchange URL is invalid.');
+    let url;
+    try {
+        url = new URL(value.url);
+    }
+    catch {
+        invalid('Token-exchange URL is invalid.');
+    }
+    if (url.search !== '' || url.hash !== '') {
+        invalid('Token-exchange URL must not contain a query or fragment.');
+    }
+    if (value.authorization === null) {
+        fail(CODES.AUTH_MISSING, 'Authentication is required.');
+    }
+    if (typeof value.authorization !== 'string') {
+        fail(CODES.AUTH_INVALID, 'Token is invalid.');
+    }
+    const authorization = /^Bearer ([^\s,]+)$/iu.exec(value.authorization);
+    if (authorization === null)
+        fail(CODES.AUTH_INVALID, 'Token is invalid.');
+    if (value.accept !== null) {
+        if (typeof value.accept !== 'string' || !acceptsJson(value.accept)) {
+            invalid('Token-exchange response representation is not accepted.');
+        }
+    }
+    return request(authorization[1]);
+}
+export function responseHeaders() {
+    return Object.freeze({
+        'content-type': MEDIA_TYPE,
+        'cache-control': 'no-store',
+        pragma: 'no-cache',
+        'x-content-type-options': 'nosniff',
+    });
+}
+function acceptsJson(input) {
+    for (const member of input.split(',')) {
+        const parts = member.split(';');
+        const media = parts.shift()?.trim().toLowerCase();
+        if (media === undefined)
+            continue;
+        let quality = 1;
+        let valid = media === MEDIA_TYPE || media === 'application/json' || media === '*/*';
+        for (const parameter of parts) {
+            const [rawName, rawValue, ...extra] = parameter.split('=');
+            if (extra.length > 0 || rawName?.trim().toLowerCase() !== 'q') {
+                valid = false;
+                break;
+            }
+            const value = rawValue?.trim();
+            if (value === undefined || !/^(?:0(?:\.\d{0,3})?|1(?:\.0{0,3})?)$/u.test(value)) {
+                valid = false;
+                break;
+            }
+            quality = Number(value);
+        }
+        if (valid && quality > 0)
+            return true;
+    }
+    return false;
+}
+function invalid(message) {
+    fail(CODES.INVALID_REQUEST, message);
+}
+function fail(code, message) {
+    throw new ProtocolError({ code, message });
+}
+function exactObject(input, expected, label) {
+    if (input === null || typeof input !== 'object' || Array.isArray(input)) {
+        throw new TypeError(`${label} must be an object.`);
+    }
+    const prototype = Object.getPrototypeOf(input);
+    if (prototype !== Object.prototype && prototype !== null) {
+        throw new TypeError(`${label} must be a plain object.`);
+    }
+    const output = {};
+    const keys = Reflect.ownKeys(input);
+    if (keys.length !== expected.length)
+        throw new TypeError(`${label} must be exact.`);
+    for (const key of keys) {
+        if (typeof key !== 'string' || !expected.includes(key)) {
+            throw new TypeError(`${label} contains an unexpected field.`);
+        }
+        const descriptor = Object.getOwnPropertyDescriptor(input, key);
+        if (descriptor === undefined || !descriptor.enumerable || !('value' in descriptor)) {
+            throw new TypeError(`${label}.${key} must be an enumerable data field.`);
+        }
+        output[key] = descriptor.value;
+    }
+    return output;
+}
+function nonEmptyText(input, label) {
+    if (typeof input !== 'string' || input.length === 0) {
+        throw new TypeError(`${label} must be non-empty text.`);
+    }
+    return input;
+}
+//# sourceMappingURL=exchange.js.map

package/dist/issuer/exchange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange.js","sourceRoot":"","sources":["../../issuer/exchange.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAExE,MAAM,CAAC,MAAM,UAAU,GAAG,8BAAuC,CAAA;AAsBjE,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,wBAAwB,CAAC,CAAA;IACrE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,8BAA8B,CAAC,EAAE,CAAC,CAAA;AAC5F,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,SAAiB;IACvD,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;AAC7C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,yBAAyB,CAAC,CAAA;IACnF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAK,KAAK,CAAC,SAAoB,IAAI,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,SAAS,CAAC,oEAAoE,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,+BAA+B,CAAC;QACjE,SAAS,EAAE,KAAK,CAAC,SAAmB;KACrC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,+BAA+B,CAAC,CAAA;IAC5E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,qCAAqC,CAAC,EAAE,CAAC,CAAA;AACpG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAkB;IAClD,MAAM,KAAK,GAAG,WAAW,CACvB,KAAK,EACL,CAAC,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,CAAC,EAC5C,6BAA6B,CAC9B,CAAA;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,oCAAoC,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,CAAC,gCAAgC,CAAC,CAAA;IAC5E,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,gCAAgC,CAAC,CAAA;IAC3C,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QACzC,OAAO,CAAC,0DAA0D,CAAC,CAAA;IACrE,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,6BAA6B,CAAC,CAAA;IACzD,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAA;IAC/C,CAAC;IACD,MAAM,aAAa,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IACtE,IAAI,aAAa,KAAK,IAAI;QAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAA;IACzE,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC1B,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,yDAAyD,CAAC,CAAA;QACpE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC,CAAE,CAAC,CAAA;AACnC,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,cAAc,EAAE,UAAU;QAC1B,eAAe,EAAE,UAAU;QAC3B,MAAM,EAAE,UAAU;QAClB,wBAAwB,EAAE,SAAS;KACpC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAQ;QACjC,IAAI,OAAO,GAAG,CAAC,CAAA;QACf,IAAI,KAAK,GAAG,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,KAAK,CAAA;QACnF,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;YAC9B,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC1D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;gBAC9D,KAAK,GAAG,KAAK,CAAA;gBACb,MAAK;YACP,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAA;YAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,uCAAuC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChF,KAAK,GAAG,KAAK,CAAA;gBACb,MAAK;YACP,CAAC;YACD,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC;QACD,IAAI,KAAK,IAAI,OAAO,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;IACvC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,OAAO,CAAC,OAAe;IAC9B,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;AACtC,CAAC;AAED,SAAS,IAAI,CAAC,IAA0B,EAAE,OAAe;IACvD,MAAM,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;AAC5C,CAAC;AAED,SAAS,WAAW,CAClB,KAAc,EACd,QAA2B,EAC3B,KAAa;IAEb,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAA;IACpD,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;IAC9C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACzD,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAA;IACzD,CAAC;IACD,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAA;IACnF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAA;QAC/D,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAC9D,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,IAAI,GAAG,oCAAoC,CAAC,CAAA;QAC1E,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAA;IAChC,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/issuer/hosted.d.ts

@@ -0,0 +1,3 @@
+import type { IssuerId } from '@astrale-os/kernel-core/auth';
+export declare function hosted(base: string, thumbprint: string): IssuerId | undefined;
+//# sourceMappingURL=hosted.d.ts.map

package/dist/issuer/hosted.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted.d.ts","sourceRoot":"","sources":["../../issuer/hosted.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAM5D,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAG7E"}

package/dist/issuer/hosted.js

@@ -0,0 +1,8 @@
+import { acceptIssuer } from './url.js';
+const THUMBPRINT = /^[A-Za-z0-9_-]{43}$/u;
+export function hosted(base, thumbprint) {
+    if (typeof thumbprint !== 'string' || !THUMBPRINT.test(thumbprint))
+        return undefined;
+    return acceptIssuer(`${acceptIssuer(base)}/iss/${thumbprint}`);
+}
+//# sourceMappingURL=hosted.js.map