@atproto/oauth-provider 0.16.5 → 0.17.0

package/dist/lexicon/lexicon-manager.js

@@ -1,29 +1,10 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LexiconManager = void 0;
-exports.nsidToPermissionScopes = nsidToPermissionScopes;
-const lex_resolver_1 = require("@atproto/lex-resolver");
-const oauth_scopes_1 = require("@atproto/oauth-scopes");
-const lexicon_getter_js_1 = require("./lexicon-getter.js");
-__exportStar(require("./lexicon-store.js"), exports);
-class LexiconManager {
-    lexiconGetter;
+import { LexResolverError } from '@atproto/lex-resolver';
+import { IncludeScope } from '@atproto/oauth-scopes';
+import { LexiconGetter } from './lexicon-getter.js';
+export * from './lexicon-store.js';
+export class LexiconManager {
     constructor(store, lexResolver) {
-        this.lexiconGetter = new lexicon_getter_js_1.LexiconGetter(store, lexResolver);
+        this.lexiconGetter = new LexiconGetter(store, lexResolver);
     }
     async getPermissionSetsFromScope(scope) {
         const { includeScopes } = parseScope(scope);
@@ -63,22 +44,21 @@ class LexiconManager {
     async getPermissionSet(nsid) {
         const { lexicon } = await this.lexiconGetter.get(nsid);
         if (!lexicon) {
-            throw lex_resolver_1.LexResolverError.from(nsid);
+            throw LexResolverError.from(nsid);
         }
         if (lexicon.defs.main?.type !== 'permission-set') {
             const description = 'Lexicon document is not a permission set';
-            throw lex_resolver_1.LexResolverError.from(nsid, description);
+            throw LexResolverError.from(nsid, description);
         }
         return lexicon.defs.main;
     }
 }
-exports.LexiconManager = LexiconManager;
 function parseScope(scope) {
     const includeScopes = [];
     const otherScopes = [];
     if (scope) {
         for (const scopeValue of scope.split(' ')) {
-            const parsed = oauth_scopes_1.IncludeScope.fromString(scopeValue);
+            const parsed = IncludeScope.fromString(scopeValue);
             if (parsed) {
                 includeScopes.push(parsed);
             }
@@ -98,7 +78,7 @@ function extractNsids(includeScopes) {
 function extractNsid(nsidScope) {
     return nsidScope.nsid;
 }
-function nsidToPermissionScopes(includeScope) {
+export function nsidToPermissionScopes(includeScope) {
     const permissionSet = this.get(includeScope.nsid);
     if (permissionSet)
         return includeScope.toScopes(permissionSet);

package/dist/lexicon/lexicon-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"lexicon-manager.js","sourceRoot":"","sources":["../../src/lexicon/lexicon-manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AA0GA,wDASC;AAlHD,wDAAqE;AACrE,wDAA0D;AAC1D,2DAAmD;AAGnD,qDAAkC;AAElC,MAAa,cAAc;IACN,aAAa,CAAe;IAE/C,YAAY,KAAmB,EAAE,WAAwB;QACvD,IAAI,CAAC,aAAa,GAAG,IAAI,iCAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IAC5D,CAAC;IAEM,KAAK,CAAC,0BAA0B,CAAC,KAAc;QACpD,MAAM,EAAE,aAAa,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;QAC3C,OAAO,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAA;IAClD,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,eAAe,CAAC,KAAa;QACxC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;QAExD,8EAA8E;QAC9E,IAAI,CAAC,aAAa,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QAEvC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAA;QAEtE,OAAO,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;aAC7B,OAAO,CAAC,sBAAsB,EAAE,cAAc,CAAC;aAC/C,MAAM,CAAC,WAAW,CAAC;aACnB,IAAI,CAAC,GAAG,CAAC,CAAA;IACd,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,qBAAqB,CAAC,aAA6B;QACjE,MAAM,KAAK,GAAG,YAAY,CAAC,aAAa,CAAC,CAAA;QACzC,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAES,KAAK,CAAC,iBAAiB,CAAC,KAAgB;QAChD,OAAO,IAAI,GAAG,CACZ,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC,CACvE,CAAA;IACH,CAAC;IAES,KAAK,CAAC,qBAAqB,CACnC,IAAU;QAEV,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;QACvD,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;IAC9B,CAAC;IAES,KAAK,CAAC,gBAAgB,CAAC,IAAU;QACzC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAEtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,+BAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnC,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,0CAA0C,CAAA;YAC9D,MAAM,+BAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAChD,CAAC;QAED,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAA;IAC1B,CAAC;CACF;AAnED,wCAmEC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,aAAa,GAAmB,EAAE,CAAA;IACxC,MAAM,WAAW,GAAa,EAAE,CAAA;IAEhC,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,2BAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;YAClD,IAAI,MAAM,EAAE,CAAC;gBACX,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC5B,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa;QACb,WAAW;KACZ,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,aAA6B;IACjD,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,WAAW,CAAC,SAAuB;IAC1C,OAAO,SAAS,CAAC,IAAI,CAAA;AACvB,CAAC;AAED,SAAgB,sBAAsB,CAEpC,YAA0B;IAE1B,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IACjD,IAAI,aAAa;QAAE,OAAO,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAA;IAE9D,uEAAuE;IACvE,MAAM,IAAI,KAAK,CAAC,oCAAoC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAA;AAC1E,CAAC","sourcesContent":["import { LexiconPermissionSet } from '@atproto/lex-document'\nimport { LexResolver, LexResolverError } from '@atproto/lex-resolver'\nimport { IncludeScope, Nsid } from '@atproto/oauth-scopes'\nimport { LexiconGetter } from './lexicon-getter.js'\nimport { LexiconStore } from './lexicon-store.js'\n\nexport * from './lexicon-store.js'\n\nexport class LexiconManager {\n  protected readonly lexiconGetter: LexiconGetter\n\n  constructor(store: LexiconStore, lexResolver: LexResolver) {\n    this.lexiconGetter = new LexiconGetter(store, lexResolver)\n  }\n\n  public async getPermissionSetsFromScope(scope?: string) {\n    const { includeScopes } = parseScope(scope)\n    return this.extractPermissionSets(includeScopes)\n  }\n\n  /**\n   * Transforms a scope string from an authorization request into a scope\n   * composed solely of granular permission scopes, transforming any NSID\n   * into its corresponding permission scopes.\n   */\n  public async buildTokenScope(scope: string): Promise<string> {\n    const { includeScopes, otherScopes } = parseScope(scope)\n\n    // If the scope does not contain any \"include:<nsid>\" scopes, return it as-is.\n    if (!includeScopes.length) return scope\n\n    const permissionSets = await this.extractPermissionSets(includeScopes)\n\n    return Array.from(includeScopes)\n      .flatMap(nsidToPermissionScopes, permissionSets)\n      .concat(otherScopes)\n      .join(' ')\n  }\n\n  /**\n   * Given a list of scope values, extract those that are NSIDs and return their\n   * corresponding permission sets.\n   */\n  protected async extractPermissionSets(includeScopes: IncludeScope[]) {\n    const nsids = extractNsids(includeScopes)\n    return this.getPermissionSets(nsids)\n  }\n\n  protected async getPermissionSets(nsids: Set<Nsid>) {\n    return new Map<string, LexiconPermissionSet>(\n      await Promise.all(Array.from(nsids, this.getPermissionSetEntry, this)),\n    )\n  }\n\n  protected async getPermissionSetEntry(\n    nsid: Nsid,\n  ): Promise<[nsid: Nsid, permissionSet: LexiconPermissionSet]> {\n    const permissionSet = await this.getPermissionSet(nsid)\n    return [nsid, permissionSet]\n  }\n\n  protected async getPermissionSet(nsid: Nsid): Promise<LexiconPermissionSet> {\n    const { lexicon } = await this.lexiconGetter.get(nsid)\n\n    if (!lexicon) {\n      throw LexResolverError.from(nsid)\n    }\n\n    if (lexicon.defs.main?.type !== 'permission-set') {\n      const description = 'Lexicon document is not a permission set'\n      throw LexResolverError.from(nsid, description)\n    }\n\n    return lexicon.defs.main\n  }\n}\n\nfunction parseScope(scope?: string) {\n  const includeScopes: IncludeScope[] = []\n  const otherScopes: string[] = []\n\n  if (scope) {\n    for (const scopeValue of scope.split(' ')) {\n      const parsed = IncludeScope.fromString(scopeValue)\n      if (parsed) {\n        includeScopes.push(parsed)\n      } else {\n        otherScopes.push(scopeValue)\n      }\n    }\n  }\n\n  return {\n    includeScopes,\n    otherScopes,\n  }\n}\n\nfunction extractNsids(includeScopes: IncludeScope[]): Set<Nsid> {\n  return new Set(Array.from(includeScopes, extractNsid))\n}\n\nfunction extractNsid(nsidScope: IncludeScope): Nsid {\n  return nsidScope.nsid\n}\n\nexport function nsidToPermissionScopes(\n  this: Map<string, LexiconPermissionSet>,\n  includeScope: IncludeScope,\n): string[] {\n  const permissionSet = this.get(includeScope.nsid)\n  if (permissionSet) return includeScope.toScopes(permissionSet)\n\n  // Should never happen (mostly there for type safety & future proofing)\n  throw new Error(`Missing permission set for NSID: ${includeScope.nsid}`)\n}\n"]}
+{"version":3,"file":"lexicon-manager.js","sourceRoot":"","sources":["../../src/lexicon/lexicon-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACrE,OAAO,EAAE,YAAY,EAAQ,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAGnD,cAAc,oBAAoB,CAAA;AAElC,MAAM,OAAO,cAAc;IAGzB,YAAY,KAAmB,EAAE,WAAwB;QACvD,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IAC5D,CAAC;IAEM,KAAK,CAAC,0BAA0B,CAAC,KAAc;QACpD,MAAM,EAAE,aAAa,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;QAC3C,OAAO,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAA;IAClD,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,eAAe,CAAC,KAAa;QACxC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;QAExD,8EAA8E;QAC9E,IAAI,CAAC,aAAa,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QAEvC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAA;QAEtE,OAAO,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;aAC7B,OAAO,CAAC,sBAAsB,EAAE,cAAc,CAAC;aAC/C,MAAM,CAAC,WAAW,CAAC;aACnB,IAAI,CAAC,GAAG,CAAC,CAAA;IACd,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,qBAAqB,CAAC,aAA6B;QACjE,MAAM,KAAK,GAAG,YAAY,CAAC,aAAa,CAAC,CAAA;QACzC,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAES,KAAK,CAAC,iBAAiB,CAAC,KAAgB;QAChD,OAAO,IAAI,GAAG,CACZ,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC,CACvE,CAAA;IACH,CAAC;IAES,KAAK,CAAC,qBAAqB,CACnC,IAAU;QAEV,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;QACvD,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;IAC9B,CAAC;IAES,KAAK,CAAC,gBAAgB,CAAC,IAAU;QACzC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAEtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnC,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,0CAA0C,CAAA;YAC9D,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAChD,CAAC;QAED,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAA;IAC1B,CAAC;CACF;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,aAAa,GAAmB,EAAE,CAAA;IACxC,MAAM,WAAW,GAAa,EAAE,CAAA;IAEhC,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;YAClD,IAAI,MAAM,EAAE,CAAC;gBACX,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC5B,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa;QACb,WAAW;KACZ,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,aAA6B;IACjD,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,WAAW,CAAC,SAAuB;IAC1C,OAAO,SAAS,CAAC,IAAI,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAEpC,YAA0B;IAE1B,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IACjD,IAAI,aAAa;QAAE,OAAO,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAA;IAE9D,uEAAuE;IACvE,MAAM,IAAI,KAAK,CAAC,oCAAoC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAA;AAC1E,CAAC","sourcesContent":["import { LexiconPermissionSet } from '@atproto/lex-document'\nimport { LexResolver, LexResolverError } from '@atproto/lex-resolver'\nimport { IncludeScope, Nsid } from '@atproto/oauth-scopes'\nimport { LexiconGetter } from './lexicon-getter.js'\nimport { LexiconStore } from './lexicon-store.js'\n\nexport * from './lexicon-store.js'\n\nexport class LexiconManager {\n  protected readonly lexiconGetter: LexiconGetter\n\n  constructor(store: LexiconStore, lexResolver: LexResolver) {\n    this.lexiconGetter = new LexiconGetter(store, lexResolver)\n  }\n\n  public async getPermissionSetsFromScope(scope?: string) {\n    const { includeScopes } = parseScope(scope)\n    return this.extractPermissionSets(includeScopes)\n  }\n\n  /**\n   * Transforms a scope string from an authorization request into a scope\n   * composed solely of granular permission scopes, transforming any NSID\n   * into its corresponding permission scopes.\n   */\n  public async buildTokenScope(scope: string): Promise<string> {\n    const { includeScopes, otherScopes } = parseScope(scope)\n\n    // If the scope does not contain any \"include:<nsid>\" scopes, return it as-is.\n    if (!includeScopes.length) return scope\n\n    const permissionSets = await this.extractPermissionSets(includeScopes)\n\n    return Array.from(includeScopes)\n      .flatMap(nsidToPermissionScopes, permissionSets)\n      .concat(otherScopes)\n      .join(' ')\n  }\n\n  /**\n   * Given a list of scope values, extract those that are NSIDs and return their\n   * corresponding permission sets.\n   */\n  protected async extractPermissionSets(includeScopes: IncludeScope[]) {\n    const nsids = extractNsids(includeScopes)\n    return this.getPermissionSets(nsids)\n  }\n\n  protected async getPermissionSets(nsids: Set<Nsid>) {\n    return new Map<string, LexiconPermissionSet>(\n      await Promise.all(Array.from(nsids, this.getPermissionSetEntry, this)),\n    )\n  }\n\n  protected async getPermissionSetEntry(\n    nsid: Nsid,\n  ): Promise<[nsid: Nsid, permissionSet: LexiconPermissionSet]> {\n    const permissionSet = await this.getPermissionSet(nsid)\n    return [nsid, permissionSet]\n  }\n\n  protected async getPermissionSet(nsid: Nsid): Promise<LexiconPermissionSet> {\n    const { lexicon } = await this.lexiconGetter.get(nsid)\n\n    if (!lexicon) {\n      throw LexResolverError.from(nsid)\n    }\n\n    if (lexicon.defs.main?.type !== 'permission-set') {\n      const description = 'Lexicon document is not a permission set'\n      throw LexResolverError.from(nsid, description)\n    }\n\n    return lexicon.defs.main\n  }\n}\n\nfunction parseScope(scope?: string) {\n  const includeScopes: IncludeScope[] = []\n  const otherScopes: string[] = []\n\n  if (scope) {\n    for (const scopeValue of scope.split(' ')) {\n      const parsed = IncludeScope.fromString(scopeValue)\n      if (parsed) {\n        includeScopes.push(parsed)\n      } else {\n        otherScopes.push(scopeValue)\n      }\n    }\n  }\n\n  return {\n    includeScopes,\n    otherScopes,\n  }\n}\n\nfunction extractNsids(includeScopes: IncludeScope[]): Set<Nsid> {\n  return new Set(Array.from(includeScopes, extractNsid))\n}\n\nfunction extractNsid(nsidScope: IncludeScope): Nsid {\n  return nsidScope.nsid\n}\n\nexport function nsidToPermissionScopes(\n  this: Map<string, LexiconPermissionSet>,\n  includeScope: IncludeScope,\n): string[] {\n  const permissionSet = this.get(includeScope.nsid)\n  if (permissionSet) return includeScope.toScopes(permissionSet)\n\n  // Should never happen (mostly there for type safety & future proofing)\n  throw new Error(`Missing permission set for NSID: ${includeScope.nsid}`)\n}\n"]}

package/dist/lexicon/lexicon-store.js

@@ -1,21 +1,16 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.isLexiconStore = void 0;
-exports.ifLexiconStore = ifLexiconStore;
-exports.asLexiconStore = asLexiconStore;
-const type_js_1 = require("../lib/util/type.js");
-exports.isLexiconStore = (0, type_js_1.buildInterfaceChecker)([
+import { buildInterfaceChecker } from '../lib/util/type.js';
+export const isLexiconStore = buildInterfaceChecker([
     'findLexicon',
     'storeLexicon',
     'deleteLexicon',
 ]);
-function ifLexiconStore(implementation) {
-    if (implementation && (0, exports.isLexiconStore)(implementation)) {
+export function ifLexiconStore(implementation) {
+    if (implementation && isLexiconStore(implementation)) {
         return implementation;
     }
     return undefined;
 }
-function asLexiconStore(implementation) {
+export function asLexiconStore(implementation) {
     const store = ifLexiconStore(implementation);
     if (store)
         return store;

package/dist/lexicon/lexicon-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"lexicon-store.js","sourceRoot":"","sources":["../../src/lexicon/lexicon-store.ts"],"names":[],"mappings":";;;AAiBA,wCAQC;AAED,wCAOC;AAlCD,iDAAsE;AAWzD,QAAA,cAAc,GAAG,IAAA,+BAAqB,EAAe;IAChE,aAAa;IACb,cAAc;IACd,eAAe;CAChB,CAAC,CAAA;AAEF,SAAgB,cAAc,CAC5B,cAAkB;IAElB,IAAI,cAAc,IAAI,IAAA,sBAAc,EAAC,cAAc,CAAC,EAAE,CAAC;QACrD,OAAO,cAAc,CAAA;IACvB,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAgB,cAAc,CAC5B,cAAkB;IAElB,MAAM,KAAK,GAAG,cAAc,CAAC,cAAc,CAAC,CAAA;IAC5C,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IAEvB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;AACxD,CAAC","sourcesContent":["import { Awaitable, buildInterfaceChecker } from '../lib/util/type.js'\nimport { LexiconData, LexiconDocument } from './lexicon-data.js'\n\nexport type { Awaitable, LexiconData, LexiconDocument }\n\nexport interface LexiconStore {\n  findLexicon(nsid: string): Awaitable<LexiconData | null>\n  storeLexicon(nsid: string, data: LexiconData): Awaitable<void>\n  deleteLexicon(nsid: string): Awaitable<void>\n}\n\nexport const isLexiconStore = buildInterfaceChecker<LexiconStore>([\n  'findLexicon',\n  'storeLexicon',\n  'deleteLexicon',\n])\n\nexport function ifLexiconStore<V extends Partial<LexiconStore>>(\n  implementation?: V,\n): (V & LexiconStore) | undefined {\n  if (implementation && isLexiconStore(implementation)) {\n    return implementation\n  }\n\n  return undefined\n}\n\nexport function asLexiconStore<V extends Partial<LexiconStore>>(\n  implementation?: V,\n): V & LexiconStore {\n  const store = ifLexiconStore(implementation)\n  if (store) return store\n\n  throw new Error('Invalid LexiconStore implementation')\n}\n"]}
+{"version":3,"file":"lexicon-store.js","sourceRoot":"","sources":["../../src/lexicon/lexicon-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAWtE,MAAM,CAAC,MAAM,cAAc,GAAG,qBAAqB,CAAe;IAChE,aAAa;IACb,cAAc;IACd,eAAe;CAChB,CAAC,CAAA;AAEF,MAAM,UAAU,cAAc,CAC5B,cAAkB;IAElB,IAAI,cAAc,IAAI,cAAc,CAAC,cAAc,CAAC,EAAE,CAAC;QACrD,OAAO,cAAc,CAAA;IACvB,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,cAAkB;IAElB,MAAM,KAAK,GAAG,cAAc,CAAC,cAAc,CAAC,CAAA;IAC5C,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IAEvB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;AACxD,CAAC","sourcesContent":["import { Awaitable, buildInterfaceChecker } from '../lib/util/type.js'\nimport { LexiconData, LexiconDocument } from './lexicon-data.js'\n\nexport type { Awaitable, LexiconData, LexiconDocument }\n\nexport interface LexiconStore {\n  findLexicon(nsid: string): Awaitable<LexiconData | null>\n  storeLexicon(nsid: string, data: LexiconData): Awaitable<void>\n  deleteLexicon(nsid: string): Awaitable<void>\n}\n\nexport const isLexiconStore = buildInterfaceChecker<LexiconStore>([\n  'findLexicon',\n  'storeLexicon',\n  'deleteLexicon',\n])\n\nexport function ifLexiconStore<V extends Partial<LexiconStore>>(\n  implementation?: V,\n): (V & LexiconStore) | undefined {\n  if (implementation && isLexiconStore(implementation)) {\n    return implementation\n  }\n\n  return undefined\n}\n\nexport function asLexiconStore<V extends Partial<LexiconStore>>(\n  implementation?: V,\n): V & LexiconStore {\n  const store = ifLexiconStore(implementation)\n  if (store) return store\n\n  throw new Error('Invalid LexiconStore implementation')\n}\n"]}

package/dist/lib/csp/index.js

@@ -1,8 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildCsp = buildCsp;
-exports.mergeCsp = mergeCsp;
-exports.combineCsp = combineCsp;
 const STRING_DIRECTIVES = ['base-uri'];
 const BOOLEAN_DIRECTIVES = [
     'upgrade-insecure-requests',
@@ -19,7 +14,7 @@ const ARRAY_DIRECTIVES = [
     'style-src',
 ];
 const NONE = "'none'";
-function buildCsp(config) {
+export function buildCsp(config) {
     const values = [];
     for (const name of BOOLEAN_DIRECTIVES) {
         if (config[name] === true)
@@ -37,10 +32,10 @@ function buildCsp(config) {
     }
     return values.join('; ');
 }
-function mergeCsp(...configs) {
+export function mergeCsp(...configs) {
     return configs.filter((v) => v != null).reduce(combineCsp);
 }
-function combineCsp(a, b) {
+export function combineCsp(a, b) {
     const result = {};
     for (const name of BOOLEAN_DIRECTIVES) {
         // @NOTE b (if defined) takes precedence

package/dist/lib/csp/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/csp/index.ts"],"names":[],"mappings":";;AA4CA,4BAkBC;AAED,4BAIC;AAED,gCA8BC;AApFD,MAAM,iBAAiB,GAAG,CAAC,UAAU,CAAU,CAAA;AAC/C,MAAM,kBAAkB,GAAG;IACzB,2BAA2B;IAC3B,yBAAyB;CACjB,CAAA;AACV,MAAM,gBAAgB,GAAG;IACvB,aAAa;IACb,aAAa;IACb,aAAa;IACb,iBAAiB;IACjB,WAAW;IACX,SAAS;IACT,YAAY;IACZ,WAAW;CACH,CAAA;AAYV,MAAM,IAAI,GAAG,QAAQ,CAAA;AAErB,SAAgB,QAAQ,CAAC,MAAiB;IACxC,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9C,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC1D,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,yCAAyC;QACzC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC5D,IAAI,GAAG,EAAE,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACpE,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC1B,CAAC;AAED,SAAgB,QAAQ,CACtB,GAAG,OAAU;IAEb,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAqB,CAAA;AAChF,CAAC;AAED,SAAgB,UAAU,CAAC,CAAY,EAAE,CAAY;IACnD,MAAM,MAAM,GAAc,EAAE,CAAA;IAE5B,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,wCAAwC;QACxC,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,KAAK,IAAI,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;IACzC,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YACvD,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YACvD,2BAA2B;YAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,IAAI,IAAI,CAAA;QAC7C,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YAC5B,IAAI,CAAC,CAAC,IAAI,CAAC;gBAAE,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC;oBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACxD,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACnD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAA;QACzB,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAA;QACnC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["import { CombinedTuple, Simplify } from '../util/type.js'\n\nexport type CspValue =\n  | `data:`\n  | `http:${string}`\n  | `https:${string}`\n  | `'none'`\n  | `'self'`\n  | `'sha256-${string}'`\n  | `'nonce-${string}'`\n  | `'unsafe-inline'`\n  | `'unsafe-eval'`\n  | `'strict-dynamic'`\n  | `'report-sample'`\n  | `'unsafe-hashes'`\n\nconst STRING_DIRECTIVES = ['base-uri'] as const\nconst BOOLEAN_DIRECTIVES = [\n  'upgrade-insecure-requests',\n  'block-all-mixed-content',\n] as const\nconst ARRAY_DIRECTIVES = [\n  'connect-src',\n  'default-src',\n  'form-action',\n  'frame-ancestors',\n  'frame-src',\n  'img-src',\n  'script-src',\n  'style-src',\n] as const\n\nexport type CspConfig = Simplify<\n  {\n    [K in (typeof BOOLEAN_DIRECTIVES)[number]]?: boolean\n  } & {\n    [K in (typeof STRING_DIRECTIVES)[number]]?: CspValue\n  } & {\n    [K in (typeof ARRAY_DIRECTIVES)[number]]?: Iterable<CspValue>\n  }\n>\n\nconst NONE = \"'none'\"\n\nexport function buildCsp(config: CspConfig): string {\n  const values: string[] = []\n\n  for (const name of BOOLEAN_DIRECTIVES) {\n    if (config[name] === true) values.push(name)\n  }\n\n  for (const name of STRING_DIRECTIVES) {\n    if (config[name]) values.push(`${name} ${config[name]}`)\n  }\n\n  for (const name of ARRAY_DIRECTIVES) {\n    // Remove duplicate values by using a Set\n    const val = config[name] ? new Set(config[name]) : undefined\n    if (val?.size) values.push(`${name} ${Array.from(val).join(' ')}`)\n  }\n\n  return values.join('; ')\n}\n\nexport function mergeCsp<C extends (CspConfig | null | undefined)[]>(\n  ...configs: C\n) {\n  return configs.filter((v) => v != null).reduce(combineCsp) as CombinedTuple<C>\n}\n\nexport function combineCsp(a: CspConfig, b: CspConfig): CspConfig {\n  const result: CspConfig = {}\n\n  for (const name of BOOLEAN_DIRECTIVES) {\n    // @NOTE b (if defined) takes precedence\n    const value = b[name] ?? a[name]\n    if (value != null) result[name] = value\n  }\n\n  for (const name of STRING_DIRECTIVES) {\n    if (a[name] || b[name]) {\n      const aNotNone = a[name] === NONE ? undefined : a[name]\n      const bNotNone = b[name] === NONE ? undefined : b[name]\n      // @NOTE b takes precedence\n      result[name] = bNotNone || aNotNone || NONE\n    }\n  }\n\n  for (const name of ARRAY_DIRECTIVES) {\n    if (a[name] && b[name]) {\n      const set = new Set(a[name])\n      if (b[name]) for (const value of b[name]) set.add(value)\n      if (set.size > 1 && set.has(NONE)) set.delete(NONE)\n      result[name] = [...set]\n    } else if (a[name] || b[name]) {\n      result[name] = a[name] || b[name]\n    }\n  }\n\n  return result\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/csp/index.ts"],"names":[],"mappings":"AAgBA,MAAM,iBAAiB,GAAG,CAAC,UAAU,CAAU,CAAA;AAC/C,MAAM,kBAAkB,GAAG;IACzB,2BAA2B;IAC3B,yBAAyB;CACjB,CAAA;AACV,MAAM,gBAAgB,GAAG;IACvB,aAAa;IACb,aAAa;IACb,aAAa;IACb,iBAAiB;IACjB,WAAW;IACX,SAAS;IACT,YAAY;IACZ,WAAW;CACH,CAAA;AAYV,MAAM,IAAI,GAAG,QAAQ,CAAA;AAErB,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9C,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC1D,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,yCAAyC;QACzC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC5D,IAAI,GAAG,EAAE,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACpE,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,GAAG,OAAU;IAEb,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAqB,CAAA;AAChF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAAY,EAAE,CAAY;IACnD,MAAM,MAAM,GAAc,EAAE,CAAA;IAE5B,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,wCAAwC;QACxC,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,KAAK,IAAI,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;IACzC,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YACvD,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YACvD,2BAA2B;YAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,IAAI,IAAI,CAAA;QAC7C,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YAC5B,IAAI,CAAC,CAAC,IAAI,CAAC;gBAAE,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC;oBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACxD,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACnD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAA;QACzB,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAA;QACnC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["import { CombinedTuple, Simplify } from '../util/type.js'\n\nexport type CspValue =\n  | `data:`\n  | `http:${string}`\n  | `https:${string}`\n  | `'none'`\n  | `'self'`\n  | `'sha256-${string}'`\n  | `'nonce-${string}'`\n  | `'unsafe-inline'`\n  | `'unsafe-eval'`\n  | `'strict-dynamic'`\n  | `'report-sample'`\n  | `'unsafe-hashes'`\n\nconst STRING_DIRECTIVES = ['base-uri'] as const\nconst BOOLEAN_DIRECTIVES = [\n  'upgrade-insecure-requests',\n  'block-all-mixed-content',\n] as const\nconst ARRAY_DIRECTIVES = [\n  'connect-src',\n  'default-src',\n  'form-action',\n  'frame-ancestors',\n  'frame-src',\n  'img-src',\n  'script-src',\n  'style-src',\n] as const\n\nexport type CspConfig = Simplify<\n  {\n    [K in (typeof BOOLEAN_DIRECTIVES)[number]]?: boolean\n  } & {\n    [K in (typeof STRING_DIRECTIVES)[number]]?: CspValue\n  } & {\n    [K in (typeof ARRAY_DIRECTIVES)[number]]?: Iterable<CspValue>\n  }\n>\n\nconst NONE = \"'none'\"\n\nexport function buildCsp(config: CspConfig): string {\n  const values: string[] = []\n\n  for (const name of BOOLEAN_DIRECTIVES) {\n    if (config[name] === true) values.push(name)\n  }\n\n  for (const name of STRING_DIRECTIVES) {\n    if (config[name]) values.push(`${name} ${config[name]}`)\n  }\n\n  for (const name of ARRAY_DIRECTIVES) {\n    // Remove duplicate values by using a Set\n    const val = config[name] ? new Set(config[name]) : undefined\n    if (val?.size) values.push(`${name} ${Array.from(val).join(' ')}`)\n  }\n\n  return values.join('; ')\n}\n\nexport function mergeCsp<C extends (CspConfig | null | undefined)[]>(\n  ...configs: C\n) {\n  return configs.filter((v) => v != null).reduce(combineCsp) as CombinedTuple<C>\n}\n\nexport function combineCsp(a: CspConfig, b: CspConfig): CspConfig {\n  const result: CspConfig = {}\n\n  for (const name of BOOLEAN_DIRECTIVES) {\n    // @NOTE b (if defined) takes precedence\n    const value = b[name] ?? a[name]\n    if (value != null) result[name] = value\n  }\n\n  for (const name of STRING_DIRECTIVES) {\n    if (a[name] || b[name]) {\n      const aNotNone = a[name] === NONE ? undefined : a[name]\n      const bNotNone = b[name] === NONE ? undefined : b[name]\n      // @NOTE b takes precedence\n      result[name] = bNotNone || aNotNone || NONE\n    }\n  }\n\n  for (const name of ARRAY_DIRECTIVES) {\n    if (a[name] && b[name]) {\n      const set = new Set(a[name])\n      if (b[name]) for (const value of b[name]) set.add(value)\n      if (set.size > 1 && set.has(NONE)) set.delete(NONE)\n      result[name] = [...set]\n    } else if (a[name] || b[name]) {\n      result[name] = a[name] || b[name]\n    }\n  }\n\n  return result\n}\n"]}

package/dist/lib/hcaptcha.js

@@ -1,24 +1,21 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.HCaptchaVerifyError = exports.HCaptchaClient = exports.hcaptchaVerifyResultSchema = exports.hcaptchaConfigSchema = exports.hcaptchaTokenSchema = void 0;
-const node_crypto_1 = require("node:crypto");
-const zod_1 = require("zod");
-const fetch_1 = require("@atproto-labs/fetch");
-const pipe_1 = require("@atproto-labs/pipe");
-exports.hcaptchaTokenSchema = zod_1.z.string().min(1);
-exports.hcaptchaConfigSchema = zod_1.z.object({
+import { createHash } from 'node:crypto';
+import { z } from 'zod';
+import { bindFetch, fetchJsonProcessor, fetchJsonZodProcessor, fetchOkProcessor, } from '@atproto-labs/fetch';
+import { pipe } from '@atproto-labs/pipe';
+export const hcaptchaTokenSchema = z.string().min(1);
+export const hcaptchaConfigSchema = z.object({
     /**
      * The hCaptcha site key to use for the sign-up form.
      */
-    siteKey: zod_1.z.string().min(1),
+    siteKey: z.string().min(1),
     /**
      * The hCaptcha secret key to use for the sign-up form.
      */
-    secretKey: zod_1.z.string().min(1),
+    secretKey: z.string().min(1),
     /**
      * A salt to use when hashing client tokens.
      */
-    tokenSalt: zod_1.z.string().min(1),
+    tokenSalt: z.string().min(1),
     /**
      * The risk score above which the user is considered a threat and will be
      * denied access. This will be ignored if the enterprise features are not
@@ -26,92 +23,89 @@ exports.hcaptchaConfigSchema = zod_1.z.object({
      *
      * Note: Score values ranges from 0.0 (no risk) to 1.0 (confirmed threat).
      */
-    scoreThreshold: zod_1.z.number().optional(),
+    scoreThreshold: z.number().optional(),
 });
 /**
  * @see {@link https://docs.hcaptcha.com/#verify-the-user-response-server-side hCaptcha API}
  */
-exports.hcaptchaVerifyResultSchema = zod_1.z.object({
+export const hcaptchaVerifyResultSchema = z.object({
     /**
      * is the passcode valid, and does it meet security criteria you specified, e.g. sitekey?
      */
-    success: zod_1.z.boolean(),
+    success: z.boolean(),
     /**
      * timestamp of the challenge (ISO format yyyy-MM-dd'T'HH:mm:ssZZ)
      */
-    challenge_ts: zod_1.z.string(),
+    challenge_ts: z.string(),
     /**
      * the hostname of the site where the challenge was passed
      */
-    hostname: zod_1.z.string().nullable(),
+    hostname: z.string().nullable(),
     /**
      * optional: any error codes returned by the hCaptcha API.
      * @see {@link https://docs.hcaptcha.com/#siteverify-error-codes-table}
      */
-    'error-codes': zod_1.z.array(zod_1.z.string()).optional(),
+    'error-codes': z.array(z.string()).optional(),
     /**
      * ENTERPRISE feature: a score denoting malicious activity. Value ranges from
      * 0.0 (no risk) to 1.0 (confirmed threat).
      */
-    score: zod_1.z.number().optional(),
+    score: z.number().optional(),
     /**
      * ENTERPRISE feature: reason(s) for score.
      */
-    score_reason: zod_1.z.array(zod_1.z.string()).optional(),
+    score_reason: z.array(z.string()).optional(),
     /**
      * sitekey of the request
      */
-    sitekey: zod_1.z.string().optional(),
+    sitekey: z.string().optional(),
     /**
      * obj of form: {'ip_device': 1, .. etc}
      */
-    behavior_counts: zod_1.z.record(zod_1.z.unknown()).optional(),
+    behavior_counts: z.record(z.unknown()).optional(),
     /**
      * how similar is this? (0.0 - 1.0, -1 on err)
      */
-    similarity: zod_1.z.number().optional(),
+    similarity: z.number().optional(),
     /**
      * count of similar_tokens not processed
      */
-    similarity_failures: zod_1.z.number().optional(),
+    similarity_failures: z.number().optional(),
     /**
      * array of strings for any similarity errors
      */
-    similarity_error_details: zod_1.z.array(zod_1.z.string()).optional(),
+    similarity_error_details: z.array(z.string()).optional(),
     /**
      * encoded clientID
      */
-    scoped_uid_0: zod_1.z.string().optional(),
+    scoped_uid_0: z.string().optional(),
     /**
      * encoded IP
      */
-    scoped_uid_1: zod_1.z.string().optional(),
+    scoped_uid_1: z.string().optional(),
     /**
      * encoded IP (APT)
      */
-    scoped_uid_2: zod_1.z.string().optional(),
+    scoped_uid_2: z.string().optional(),
     /**
      * Risk Insights (APT + RI)
      */
-    risk_insights: zod_1.z.record(zod_1.z.unknown()).optional(),
+    risk_insights: z.record(z.unknown()).optional(),
     /**
      * Advanced Threat Signatures (APT)
      */
-    sigs: zod_1.z.record(zod_1.z.unknown()).optional(),
+    sigs: z.record(z.unknown()).optional(),
     /**
      * tags added via Rules
      */
-    tags: zod_1.z.array(zod_1.z.string()).optional(),
+    tags: z.array(z.string()).optional(),
 });
-const fetchSuccessHandler = (0, pipe_1.pipe)((0, fetch_1.fetchOkProcessor)(), (0, fetch_1.fetchJsonProcessor)(), (0, fetch_1.fetchJsonZodProcessor)(exports.hcaptchaVerifyResultSchema));
-class HCaptchaClient {
-    hostname;
-    config;
-    fetch;
+const fetchSuccessHandler = pipe(fetchOkProcessor(), fetchJsonProcessor(), fetchJsonZodProcessor(hcaptchaVerifyResultSchema));
+export class HCaptchaClient {
     constructor(hostname, config, fetch = globalThis.fetch) {
         this.hostname = hostname;
         this.config = config;
-        this.fetch = (0, fetch_1.bindFetch)(fetch);
+        this.fetch = bindFetch(fetch);
     }
     async verify(behaviorType, response, remoteip, clientTokens) {
         return this.fetch('https://api.hcaptcha.com/siteverify', {
@@ -158,21 +152,17 @@ class HCaptchaClient {
         };
     }
     hashToken(value) {
-        const hash = (0, node_crypto_1.createHash)('sha256');
+        const hash = createHash('sha256');
         hash.update(this.config.tokenSalt);
         hash.update(value);
         return hash.digest().toString('base64');
     }
 }
-exports.HCaptchaClient = HCaptchaClient;
-class HCaptchaVerifyError extends Error {
-    result;
-    tokens;
+export class HCaptchaVerifyError extends Error {
     constructor(result, tokens, message) {
         super(message);
         this.result = result;
         this.tokens = tokens;
     }
 }
-exports.HCaptchaVerifyError = HCaptchaVerifyError;
 //# sourceMappingURL=hcaptcha.js.map

package/dist/lib/hcaptcha.js.map

@@ -1 +1 @@
-{"version":3,"file":"hcaptcha.js","sourceRoot":"","sources":["../../src/lib/hcaptcha.ts"],"names":[],"mappings":";;;AAAA,6CAAwC;AACxC,6BAAuB;AACvB,+CAO4B;AAC5B,6CAAyC;AAE5B,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAGvC,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C;;OAEG;IACH,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B;;OAEG;IACH,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B;;OAEG;IACH,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B;;;;;;OAMG;IACH,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAA;AAGF;;GAEG;AACU,QAAA,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;IACjD;;OAEG;IACH,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IACpB;;OAEG;IACH,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;IACxB;;OAEG;IACH,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B;;;OAGG;IACH,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C;;;OAGG;IACH,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B;;OAEG;IACH,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C;;OAEG;IACH,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B;;OAEG;IACH,eAAe,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjD;;OAEG;IACH,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC;;OAEG;IACH,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C;;OAEG;IACH,wBAAwB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD;;OAEG;IACH,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC;;OAEG;IACH,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC;;OAEG;IACH,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC;;OAEG;IACH,aAAa,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C;;OAEG;IACH,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC;;OAEG;IACH,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAA;AAUF,MAAM,mBAAmB,GAAG,IAAA,WAAI,EAC9B,IAAA,wBAAgB,GAAE,EAClB,IAAA,0BAAkB,GAAE,EACpB,IAAA,6BAAqB,EAAC,kCAA0B,CAAC,CAClD,CAAA;AAED,MAAa,cAAc;IAGd;IACA;IAHQ,KAAK,CAAY;IACpC,YACW,QAAgB,EAChB,MAAsB,EAC/B,QAAe,UAAU,CAAC,KAAK;QAFtB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAgB;QAG/B,IAAI,CAAC,KAAK,GAAG,IAAA,iBAAS,EAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;IAEM,KAAK,CAAC,MAAM,CACjB,YAAgC,EAChC,QAAgB,EAChB,QAAgB,EAChB,YAAkC;QAElC,OAAO,IAAI,CAAC,KAAK,CAAC,qCAAqC,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;gBAC7B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAC5B,aAAa,EAAE,YAAY;gBAC3B,QAAQ;gBACR,QAAQ;gBACR,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;aAC5C,CAAC,CAAC,QAAQ,EAAE;SACd,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAC9B,CAAC;IAEM,iBAAiB,CACtB,MAA4B,EAC5B,MAA4B;QAE5B,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;QAEjC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,mBAAmB,CAC3B,MAAM,EACN,MAAM,EACN,6BAA6B,CAC9B,CAAA;QACH,CAAC;QAED,kEAAkE;QAElE,uEAAuE;QACvE,wEAAwE;QACxE,4EAA4E;QAC5E,uEAAuE;QACvE,2EAA2E;QAC3E,gDAAgD;QAEhD;QACE,8CAA8C;QAC9C,KAAK,IAAI,IAAI;YACb,oCAAoC;YACpC,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI;YAClC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EACnC,CAAC;YACD,MAAM,IAAI,mBAAmB,CAC3B,MAAM,EACN,MAAM,EACN,SAAS,KAAK,2BAA2B,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CACtE,CAAA;QACH,CAAC;IACH,CAAC;IAEM,iBAAiB,CACtB,QAAgB,EAChB,MAAc,EACd,SAAkB;QAElB,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAClC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACpC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;SACnE,CAAA;IACH,CAAC;IAES,SAAS,CAAC,KAAa;QAC/B,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAA;QACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAClB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACzC,CAAC;CACF;AAxFD,wCAwFC;AAED,MAAa,mBAAoB,SAAQ,KAAK;IAEjC;IACA;IAFX,YACW,MAA4B,EAC5B,MAA4B,EACrC,OAAgB;QAEhB,KAAK,CAAC,OAAO,CAAC,CAAA;QAJL,WAAM,GAAN,MAAM,CAAsB;QAC5B,WAAM,GAAN,MAAM,CAAsB;IAIvC,CAAC;CACF;AARD,kDAQC","sourcesContent":["import { createHash } from 'node:crypto'\nimport { z } from 'zod'\nimport {\n  Fetch,\n  FetchBound,\n  bindFetch,\n  fetchJsonProcessor,\n  fetchJsonZodProcessor,\n  fetchOkProcessor,\n} from '@atproto-labs/fetch'\nimport { pipe } from '@atproto-labs/pipe'\n\nexport const hcaptchaTokenSchema = z.string().min(1)\nexport type HcaptchaToken = z.infer<typeof hcaptchaTokenSchema>\n\nexport const hcaptchaConfigSchema = z.object({\n  /**\n   * The hCaptcha site key to use for the sign-up form.\n   */\n  siteKey: z.string().min(1),\n  /**\n   * The hCaptcha secret key to use for the sign-up form.\n   */\n  secretKey: z.string().min(1),\n  /**\n   * A salt to use when hashing client tokens.\n   */\n  tokenSalt: z.string().min(1),\n  /**\n   * The risk score above which the user is considered a threat and will be\n   * denied access. This will be ignored if the enterprise features are not\n   * available.\n   *\n   * Note: Score values ranges from 0.0 (no risk) to 1.0 (confirmed threat).\n   */\n  scoreThreshold: z.number().optional(),\n})\nexport type HcaptchaConfig = z.infer<typeof hcaptchaConfigSchema>\n\n/**\n * @see {@link https://docs.hcaptcha.com/#verify-the-user-response-server-side hCaptcha API}\n */\nexport const hcaptchaVerifyResultSchema = z.object({\n  /**\n   * is the passcode valid, and does it meet security criteria you specified, e.g. sitekey?\n   */\n  success: z.boolean(),\n  /**\n   * timestamp of the challenge (ISO format yyyy-MM-dd'T'HH:mm:ssZZ)\n   */\n  challenge_ts: z.string(),\n  /**\n   * the hostname of the site where the challenge was passed\n   */\n  hostname: z.string().nullable(),\n  /**\n   * optional: any error codes returned by the hCaptcha API.\n   * @see {@link https://docs.hcaptcha.com/#siteverify-error-codes-table}\n   */\n  'error-codes': z.array(z.string()).optional(),\n  /**\n   * ENTERPRISE feature: a score denoting malicious activity. Value ranges from\n   * 0.0 (no risk) to 1.0 (confirmed threat).\n   */\n  score: z.number().optional(),\n  /**\n   * ENTERPRISE feature: reason(s) for score.\n   */\n  score_reason: z.array(z.string()).optional(),\n  /**\n   * sitekey of the request\n   */\n  sitekey: z.string().optional(),\n  /**\n   * obj of form: {'ip_device': 1, .. etc}\n   */\n  behavior_counts: z.record(z.unknown()).optional(),\n  /**\n   * how similar is this? (0.0 - 1.0, -1 on err)\n   */\n  similarity: z.number().optional(),\n  /**\n   * count of similar_tokens not processed\n   */\n  similarity_failures: z.number().optional(),\n  /**\n   * array of strings for any similarity errors\n   */\n  similarity_error_details: z.array(z.string()).optional(),\n  /**\n   * encoded clientID\n   */\n  scoped_uid_0: z.string().optional(),\n  /**\n   * encoded IP\n   */\n  scoped_uid_1: z.string().optional(),\n  /**\n   * encoded IP (APT)\n   */\n  scoped_uid_2: z.string().optional(),\n  /**\n   * Risk Insights (APT + RI)\n   */\n  risk_insights: z.record(z.unknown()).optional(),\n  /**\n   * Advanced Threat Signatures (APT)\n   */\n  sigs: z.record(z.unknown()).optional(),\n  /**\n   * tags added via Rules\n   */\n  tags: z.array(z.string()).optional(),\n})\n\nexport type HcaptchaVerifyResult = z.infer<typeof hcaptchaVerifyResultSchema>\n\nexport type HcaptchaClientTokens = {\n  hashedIp: string\n  hashedHandle: string\n  hashedUserAgent?: string\n}\n\nconst fetchSuccessHandler = pipe(\n  fetchOkProcessor(),\n  fetchJsonProcessor(),\n  fetchJsonZodProcessor(hcaptchaVerifyResultSchema),\n)\n\nexport class HCaptchaClient {\n  protected readonly fetch: FetchBound\n  constructor(\n    readonly hostname: string,\n    readonly config: HcaptchaConfig,\n    fetch: Fetch = globalThis.fetch,\n  ) {\n    this.fetch = bindFetch(fetch)\n  }\n\n  public async verify(\n    behaviorType: 'login' | 'signup',\n    response: string,\n    remoteip: string,\n    clientTokens: HcaptchaClientTokens,\n  ) {\n    return this.fetch('https://api.hcaptcha.com/siteverify', {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: new URLSearchParams({\n        secret: this.config.secretKey,\n        sitekey: this.config.siteKey,\n        behavior_type: behaviorType,\n        response,\n        remoteip,\n        client_tokens: JSON.stringify(clientTokens),\n      }).toString(),\n    }).then(fetchSuccessHandler)\n  }\n\n  public checkVerifyResult(\n    result: HcaptchaVerifyResult,\n    tokens: HcaptchaClientTokens,\n  ): void {\n    const { success, score } = result\n\n    if (success !== true) {\n      throw new HCaptchaVerifyError(\n        result,\n        tokens,\n        'Expected success to be true',\n      )\n    }\n\n    // https://docs.hcaptcha.com/#verify-the-user-response-server-side\n\n    // Please [...] note that the hostname field is derived from the user's\n    // browser, and should not be used for authentication of any kind; it is\n    // primarily useful as a statistical metric. Additionally, in the event that\n    // your site experiences unusually high challenge traffic, the hostname\n    // field may be returned as \"not-provided\" rather than the usual value; all\n    // other fields will return their normal values.\n\n    if (\n      // Ignore if enterprise feature is not enabled\n      score != null &&\n      // Ignore if disabled through config\n      this.config.scoreThreshold != null &&\n      score >= this.config.scoreThreshold\n    ) {\n      throw new HCaptchaVerifyError(\n        result,\n        tokens,\n        `Score ${score} is above the threshold ${this.config.scoreThreshold}`,\n      )\n    }\n  }\n\n  public buildClientTokens(\n    remoteip: string,\n    handle: string,\n    userAgent?: string,\n  ): HcaptchaClientTokens {\n    return {\n      hashedIp: this.hashToken(remoteip),\n      hashedHandle: this.hashToken(handle),\n      hashedUserAgent: userAgent ? this.hashToken(userAgent) : undefined,\n    }\n  }\n\n  protected hashToken(value: string) {\n    const hash = createHash('sha256')\n    hash.update(this.config.tokenSalt)\n    hash.update(value)\n    return hash.digest().toString('base64')\n  }\n}\n\nexport class HCaptchaVerifyError extends Error {\n  constructor(\n    readonly result: HcaptchaVerifyResult,\n    readonly tokens: HcaptchaClientTokens,\n    message?: string,\n  ) {\n    super(message)\n  }\n}\n"]}
+{"version":3,"file":"hcaptcha.js","sourceRoot":"","sources":["../../src/lib/hcaptcha.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAGL,SAAS,EACT,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AAEzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAGpD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C;;OAEG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B;;OAEG;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B;;OAEG;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B;;;;;;OAMG;IACH,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAA;AAGF;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD;;OAEG;IACH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB;;OAEG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB;;OAEG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B;;;OAGG;IACH,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C;;;OAGG;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B;;OAEG;IACH,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C;;OAEG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B;;OAEG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjD;;OAEG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC;;OAEG;IACH,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C;;OAEG;IACH,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD;;OAEG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC;;OAEG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC;;OAEG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC;;OAEG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C;;OAEG;IACH,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC;;OAEG;IACH,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAA;AAUF,MAAM,mBAAmB,GAAG,IAAI,CAC9B,gBAAgB,EAAE,EAClB,kBAAkB,EAAE,EACpB,qBAAqB,CAAC,0BAA0B,CAAC,CAClD,CAAA;AAED,MAAM,OAAO,cAAc;IAEzB,YACW,QAAgB,EAChB,MAAsB,EAC/B,QAAe,UAAU,CAAC,KAAK;QAFtB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAgB;QAG/B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;IAEM,KAAK,CAAC,MAAM,CACjB,YAAgC,EAChC,QAAgB,EAChB,QAAgB,EAChB,YAAkC;QAElC,OAAO,IAAI,CAAC,KAAK,CAAC,qCAAqC,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;gBAC7B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAC5B,aAAa,EAAE,YAAY;gBAC3B,QAAQ;gBACR,QAAQ;gBACR,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;aAC5C,CAAC,CAAC,QAAQ,EAAE;SACd,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAC9B,CAAC;IAEM,iBAAiB,CACtB,MAA4B,EAC5B,MAA4B;QAE5B,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;QAEjC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,mBAAmB,CAC3B,MAAM,EACN,MAAM,EACN,6BAA6B,CAC9B,CAAA;QACH,CAAC;QAED,kEAAkE;QAElE,uEAAuE;QACvE,wEAAwE;QACxE,4EAA4E;QAC5E,uEAAuE;QACvE,2EAA2E;QAC3E,gDAAgD;QAEhD;QACE,8CAA8C;QAC9C,KAAK,IAAI,IAAI;YACb,oCAAoC;YACpC,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI;YAClC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EACnC,CAAC;YACD,MAAM,IAAI,mBAAmB,CAC3B,MAAM,EACN,MAAM,EACN,SAAS,KAAK,2BAA2B,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CACtE,CAAA;QACH,CAAC;IACH,CAAC;IAEM,iBAAiB,CACtB,QAAgB,EAChB,MAAc,EACd,SAAkB;QAElB,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAClC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACpC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;SACnE,CAAA;IACH,CAAC;IAES,SAAS,CAAC,KAAa;QAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;QACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAClB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACzC,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YACW,MAA4B,EAC5B,MAA4B,EACrC,OAAgB;QAEhB,KAAK,CAAC,OAAO,CAAC,CAAA;QAJL,WAAM,GAAN,MAAM,CAAsB;QAC5B,WAAM,GAAN,MAAM,CAAsB;IAIvC,CAAC;CACF","sourcesContent":["import { createHash } from 'node:crypto'\nimport { z } from 'zod'\nimport {\n  Fetch,\n  FetchBound,\n  bindFetch,\n  fetchJsonProcessor,\n  fetchJsonZodProcessor,\n  fetchOkProcessor,\n} from '@atproto-labs/fetch'\nimport { pipe } from '@atproto-labs/pipe'\n\nexport const hcaptchaTokenSchema = z.string().min(1)\nexport type HcaptchaToken = z.infer<typeof hcaptchaTokenSchema>\n\nexport const hcaptchaConfigSchema = z.object({\n  /**\n   * The hCaptcha site key to use for the sign-up form.\n   */\n  siteKey: z.string().min(1),\n  /**\n   * The hCaptcha secret key to use for the sign-up form.\n   */\n  secretKey: z.string().min(1),\n  /**\n   * A salt to use when hashing client tokens.\n   */\n  tokenSalt: z.string().min(1),\n  /**\n   * The risk score above which the user is considered a threat and will be\n   * denied access. This will be ignored if the enterprise features are not\n   * available.\n   *\n   * Note: Score values ranges from 0.0 (no risk) to 1.0 (confirmed threat).\n   */\n  scoreThreshold: z.number().optional(),\n})\nexport type HcaptchaConfig = z.infer<typeof hcaptchaConfigSchema>\n\n/**\n * @see {@link https://docs.hcaptcha.com/#verify-the-user-response-server-side hCaptcha API}\n */\nexport const hcaptchaVerifyResultSchema = z.object({\n  /**\n   * is the passcode valid, and does it meet security criteria you specified, e.g. sitekey?\n   */\n  success: z.boolean(),\n  /**\n   * timestamp of the challenge (ISO format yyyy-MM-dd'T'HH:mm:ssZZ)\n   */\n  challenge_ts: z.string(),\n  /**\n   * the hostname of the site where the challenge was passed\n   */\n  hostname: z.string().nullable(),\n  /**\n   * optional: any error codes returned by the hCaptcha API.\n   * @see {@link https://docs.hcaptcha.com/#siteverify-error-codes-table}\n   */\n  'error-codes': z.array(z.string()).optional(),\n  /**\n   * ENTERPRISE feature: a score denoting malicious activity. Value ranges from\n   * 0.0 (no risk) to 1.0 (confirmed threat).\n   */\n  score: z.number().optional(),\n  /**\n   * ENTERPRISE feature: reason(s) for score.\n   */\n  score_reason: z.array(z.string()).optional(),\n  /**\n   * sitekey of the request\n   */\n  sitekey: z.string().optional(),\n  /**\n   * obj of form: {'ip_device': 1, .. etc}\n   */\n  behavior_counts: z.record(z.unknown()).optional(),\n  /**\n   * how similar is this? (0.0 - 1.0, -1 on err)\n   */\n  similarity: z.number().optional(),\n  /**\n   * count of similar_tokens not processed\n   */\n  similarity_failures: z.number().optional(),\n  /**\n   * array of strings for any similarity errors\n   */\n  similarity_error_details: z.array(z.string()).optional(),\n  /**\n   * encoded clientID\n   */\n  scoped_uid_0: z.string().optional(),\n  /**\n   * encoded IP\n   */\n  scoped_uid_1: z.string().optional(),\n  /**\n   * encoded IP (APT)\n   */\n  scoped_uid_2: z.string().optional(),\n  /**\n   * Risk Insights (APT + RI)\n   */\n  risk_insights: z.record(z.unknown()).optional(),\n  /**\n   * Advanced Threat Signatures (APT)\n   */\n  sigs: z.record(z.unknown()).optional(),\n  /**\n   * tags added via Rules\n   */\n  tags: z.array(z.string()).optional(),\n})\n\nexport type HcaptchaVerifyResult = z.infer<typeof hcaptchaVerifyResultSchema>\n\nexport type HcaptchaClientTokens = {\n  hashedIp: string\n  hashedHandle: string\n  hashedUserAgent?: string\n}\n\nconst fetchSuccessHandler = pipe(\n  fetchOkProcessor(),\n  fetchJsonProcessor(),\n  fetchJsonZodProcessor(hcaptchaVerifyResultSchema),\n)\n\nexport class HCaptchaClient {\n  protected readonly fetch: FetchBound\n  constructor(\n    readonly hostname: string,\n    readonly config: HcaptchaConfig,\n    fetch: Fetch = globalThis.fetch,\n  ) {\n    this.fetch = bindFetch(fetch)\n  }\n\n  public async verify(\n    behaviorType: 'login' | 'signup',\n    response: string,\n    remoteip: string,\n    clientTokens: HcaptchaClientTokens,\n  ) {\n    return this.fetch('https://api.hcaptcha.com/siteverify', {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: new URLSearchParams({\n        secret: this.config.secretKey,\n        sitekey: this.config.siteKey,\n        behavior_type: behaviorType,\n        response,\n        remoteip,\n        client_tokens: JSON.stringify(clientTokens),\n      }).toString(),\n    }).then(fetchSuccessHandler)\n  }\n\n  public checkVerifyResult(\n    result: HcaptchaVerifyResult,\n    tokens: HcaptchaClientTokens,\n  ): void {\n    const { success, score } = result\n\n    if (success !== true) {\n      throw new HCaptchaVerifyError(\n        result,\n        tokens,\n        'Expected success to be true',\n      )\n    }\n\n    // https://docs.hcaptcha.com/#verify-the-user-response-server-side\n\n    // Please [...] note that the hostname field is derived from the user's\n    // browser, and should not be used for authentication of any kind; it is\n    // primarily useful as a statistical metric. Additionally, in the event that\n    // your site experiences unusually high challenge traffic, the hostname\n    // field may be returned as \"not-provided\" rather than the usual value; all\n    // other fields will return their normal values.\n\n    if (\n      // Ignore if enterprise feature is not enabled\n      score != null &&\n      // Ignore if disabled through config\n      this.config.scoreThreshold != null &&\n      score >= this.config.scoreThreshold\n    ) {\n      throw new HCaptchaVerifyError(\n        result,\n        tokens,\n        `Score ${score} is above the threshold ${this.config.scoreThreshold}`,\n      )\n    }\n  }\n\n  public buildClientTokens(\n    remoteip: string,\n    handle: string,\n    userAgent?: string,\n  ): HcaptchaClientTokens {\n    return {\n      hashedIp: this.hashToken(remoteip),\n      hashedHandle: this.hashToken(handle),\n      hashedUserAgent: userAgent ? this.hashToken(userAgent) : undefined,\n    }\n  }\n\n  protected hashToken(value: string) {\n    const hash = createHash('sha256')\n    hash.update(this.config.tokenSalt)\n    hash.update(value)\n    return hash.digest().toString('base64')\n  }\n}\n\nexport class HCaptchaVerifyError extends Error {\n  constructor(\n    readonly result: HcaptchaVerifyResult,\n    readonly tokens: HcaptchaClientTokens,\n    message?: string,\n  ) {\n    super(message)\n  }\n}\n"]}

package/dist/lib/html/build-document.js

@@ -1,8 +1,5 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildDocument = exports.isLinkRel = void 0;
-const html_js_1 = require("./html.js");
-const tags_js_1 = require("./tags.js");
+import { Html } from './html.js';
+import { html } from './tags.js';
 /**
  * @see {@link https://developer.mozilla.org/fr/docs/Web/HTML/Attributes/rel}
  */
@@ -31,18 +28,17 @@ const ALLOWED_LINK_REL_VALUES = Object.freeze([
     'stylesheet',
     'terms-of-service',
 ]);
-const isLinkRel = (rel) => ALLOWED_LINK_REL_VALUES.includes(rel);
-exports.isLinkRel = isLinkRel;
-const defaultViewport = (0, tags_js_1.html) `<meta
+export const isLinkRel = (rel) => ALLOWED_LINK_REL_VALUES.includes(rel);
+const defaultViewport = html `<meta
   name="viewport"
   content="width=device-width, initial-scale=1.0"
 />`;
-const buildDocument = ({ htmlAttrs, head, title, body, bodyAttrs, base, meta, links, preloads, scripts, styles, }) => (0, tags_js_1.html) `<!doctype html>
+export const buildDocument = ({ htmlAttrs, head, title, body, bodyAttrs, base, meta, links, preloads, scripts, styles, }) => html `<!doctype html>
 <html${attrsToHtml(htmlAttrs)}>
   <head>
     <meta charset="UTF-8" />
-    ${title && (0, tags_js_1.html) `<title>${title}</title>`}
-    ${base && (0, tags_js_1.html) `<base href="${base.href}" />`}
+    ${title && html `<title>${title}</title>`}
+    ${base && html `<base href="${base.href}" />`}
     ${meta?.some(isViewportMeta) ? null : defaultViewport}
     ${meta?.map(metaToHtml)}
     ${preloads?.map(linkPreload)}
@@ -52,15 +48,14 @@ const buildDocument = ({ htmlAttrs, head, title, body, bodyAttrs, base, meta, li
   </head>
   <body${attrsToHtml(bodyAttrs)}>${body}${scripts?.map(scriptToHtml)}</body>
 </html>`;
-exports.buildDocument = buildDocument;
 function isViewportMeta(attrs) {
     return 'name' in attrs && attrs.name === 'viewport';
 }
 function linkToHtml(attrs) {
-    return (0, tags_js_1.html) `<link${attrsToHtml(attrs)} />`;
+    return html `<link${attrsToHtml(attrs)} />`;
 }
 function metaToHtml(attrs) {
-    return (0, tags_js_1.html) `<meta${attrsToHtml(attrs)} />`;
+    return html `<meta${attrsToHtml(attrs)} />`;
 }
 function* attrsToHtml(attrs) {
     if (attrs) {
@@ -70,36 +65,36 @@ function* attrsToHtml(attrs) {
             else if (value === false)
                 continue;
             else if (value === true)
-                yield (0, tags_js_1.html) ` ${name}`;
+                yield html ` ${name}`;
             else
-                yield (0, tags_js_1.html) ` ${name}="${value}"`;
+                yield html ` ${name}="${value}"`;
         }
     }
 }
 function linkPreload(asset) {
     const [path] = asset.url.split('?', 2);
     if (path.endsWith('.js')) {
-        return (0, tags_js_1.html) `<link rel="modulepreload" href="${asset.url}" />`;
+        return html `<link rel="modulepreload" href="${asset.url}" />`;
     }
     if (path.endsWith('.css')) {
-        return (0, tags_js_1.html) `<link rel="preload" href="${asset.url}" as="style" />`;
+        return html `<link rel="preload" href="${asset.url}" as="style" />`;
     }
     return undefined;
 }
 function scriptToHtml(script) {
     if (script == null)
         return undefined;
-    return script instanceof html_js_1.Html
+    return script instanceof Html
         ? // prettier-ignore
-            (0, tags_js_1.html) `<script>${script}</script>` // hash validity requires no space around the content
-        : (0, tags_js_1.html) `<script type="module" src="${script.url}"></script>`;
+            html `<script>${script}</script>` // hash validity requires no space around the content
+        : html `<script type="module" src="${script.url}"></script>`;
 }
 function styleToHtml(style) {
     if (style == null)
         return undefined;
-    return style instanceof html_js_1.Html
+    return style instanceof Html
         ? // prettier-ignore
-            (0, tags_js_1.html) `<style>${style}</style>` // hash validity requires no space around the content
-        : (0, tags_js_1.html) `<link rel="stylesheet" href="${style.url}" />`;
+            html `<style>${style}</style>` // hash validity requires no space around the content
+        : html `<link rel="stylesheet" href="${style.url}" />`;
 }
 //# sourceMappingURL=build-document.js.map

package/dist/lib/html/build-document.js.map

@@ -1 +1 @@
-{"version":3,"file":"build-document.js","sourceRoot":"","sources":["../../../src/lib/html/build-document.ts"],"names":[],"mappings":";;;AACA,uCAAgC;AAChC,uCAAgC;AAQhC;;GAEG;AACH,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,WAAW;IACX,QAAQ;IACR,WAAW;IACX,cAAc;IACd,UAAU;IACV,QAAQ;IACR,MAAM;IACN,MAAM;IACN,SAAS;IACT,UAAU;IACV,IAAI;IACJ,eAAe;IACf,MAAM;IACN,UAAU;IACV,YAAY;IACZ,UAAU;IACV,SAAS;IACT,WAAW;IACX,MAAM;IACN,gBAAgB;IAChB,QAAQ;IACR,YAAY;IACZ,kBAAkB;CACV,CAAC,CAAA;AAEJ,MAAM,SAAS,GAAG,CAAC,GAAY,EAAkB,EAAE,CACvD,uBAA8C,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;AADlD,QAAA,SAAS,aACyC;AAU/D,MAAM,eAAe,GAAG,IAAA,cAAI,EAAA;;;GAGzB,CAAA;AAgBI,MAAM,aAAa,GAAG,CAAC,EAC5B,SAAS,EACT,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,OAAO,EACP,MAAM,GACe,EAAE,EAAE,CAAC,IAAA,cAAI,EAAA;OACzB,WAAW,CAAC,SAAS,CAAC;;;MAGvB,KAAK,IAAI,IAAA,cAAI,EAAA,UAAU,KAAK,UAAU;MACtC,IAAI,IAAI,IAAA,cAAI,EAAA,eAAe,IAAI,CAAC,IAAI,MAAM;MAC1C,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe;MACnD,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC;MACrB,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC;MAC1B,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC;MACtB,IAAI;MACJ,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC;;SAErB,WAAW,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC;QAC5D,CAAA;AA1BK,QAAA,aAAa,iBA0BlB;AAER,SAAS,cAAc,CACrB,KAAQ;IAER,OAAO,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAA;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,KAAgB;IAClC,OAAO,IAAA,cAAI,EAAA,QAAQ,WAAW,CAAC,KAAK,CAAC,KAAK,CAAA;AAC5C,CAAC;AAED,SAAS,UAAU,CAAC,KAAgB;IAClC,OAAO,IAAA,cAAI,EAAA,QAAQ,WAAW,CAAC,KAAK,CAAC,KAAK,CAAA;AAC5C,CAAC;AAED,QAAQ,CAAC,CAAC,WAAW,CAAC,KAAa;IACjC,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,IAAI,KAAK,IAAI,IAAI;gBAAE,SAAQ;iBACtB,IAAI,KAAK,KAAK,KAAK;gBAAE,SAAQ;iBAC7B,IAAI,KAAK,KAAK,IAAI;gBAAE,MAAM,IAAA,cAAI,EAAA,IAAI,IAAI,EAAE,CAAA;;gBACxC,MAAM,IAAA,cAAI,EAAA,IAAI,IAAI,KAAK,KAAK,GAAG,CAAA;QACtC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAe;IAClC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IAEtC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAA,cAAI,EAAA,mCAAmC,KAAK,CAAC,GAAG,MAAM,CAAA;IAC/D,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAA,cAAI,EAAA,6BAA6B,KAAK,CAAC,GAAG,iBAAiB,CAAA;IACpE,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,MAAwB;IAC5C,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,SAAS,CAAA;IACpC,OAAO,MAAM,YAAY,cAAI;QAC3B,CAAC,CAAC,kBAAkB;YAClB,IAAA,cAAI,EAAA,WAAW,MAAM,WAAW,CAAC,qDAAqD;QACxF,CAAC,CAAC,IAAA,cAAI,EAAA,8BAA8B,MAAM,CAAC,GAAG,aAAa,CAAA;AAC/D,CAAC;AAED,SAAS,WAAW,CAAC,KAAuB;IAC1C,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAA;IACnC,OAAO,KAAK,YAAY,cAAI;QAC1B,CAAC,CAAC,kBAAkB;YAClB,IAAA,cAAI,EAAA,UAAU,KAAK,UAAU,CAAC,qDAAqD;QACrF,CAAC,CAAC,IAAA,cAAI,EAAA,gCAAgC,KAAK,CAAC,GAAG,MAAM,CAAA;AACzD,CAAC","sourcesContent":["import { HtmlValue } from './escapers.js'\nimport { Html } from './html.js'\nimport { html } from './tags.js'\n\nexport type AssetRef = {\n  url: string\n}\n\nexport type Attrs = Record<string, boolean | string | undefined>\n\n/**\n * @see {@link https://developer.mozilla.org/fr/docs/Web/HTML/Attributes/rel}\n */\nconst ALLOWED_LINK_REL_VALUES = Object.freeze([\n  'alternate',\n  'author',\n  'canonical',\n  'dns-prefetch',\n  'external',\n  'expect',\n  'help',\n  'icon',\n  'license',\n  'manifest',\n  'me',\n  'modulepreload',\n  'next',\n  'pingback',\n  'preconnect',\n  'prefetch',\n  'preload',\n  'prerender',\n  'prev',\n  'privacy-policy',\n  'search',\n  'stylesheet',\n  'terms-of-service',\n] as const)\nexport type LinkRel = (typeof ALLOWED_LINK_REL_VALUES)[number]\nexport const isLinkRel = (rel: unknown): rel is LinkRel =>\n  (ALLOWED_LINK_REL_VALUES as readonly unknown[]).includes(rel)\n\nexport type LinkAttrs = Attrs & {\n  href: string\n  rel: LinkRel\n}\nexport type MetaAttrs =\n  | { name: string; content: string }\n  | { 'http-equiv': string; content: string }\n\nconst defaultViewport = html`<meta\n  name=\"viewport\"\n  content=\"width=device-width, initial-scale=1.0\"\n/>`\n\nexport type BuildDocumentOptions = {\n  htmlAttrs?: Attrs\n  base?: URL\n  meta?: readonly MetaAttrs[]\n  links?: readonly LinkAttrs[]\n  preloads?: readonly AssetRef[]\n  head?: HtmlValue\n  title?: HtmlValue\n  scripts?: readonly (Html | AssetRef | undefined)[]\n  styles?: readonly (Html | AssetRef | undefined)[]\n  body?: HtmlValue\n  bodyAttrs?: Attrs\n}\n\nexport const buildDocument = ({\n  htmlAttrs,\n  head,\n  title,\n  body,\n  bodyAttrs,\n  base,\n  meta,\n  links,\n  preloads,\n  scripts,\n  styles,\n}: BuildDocumentOptions) => html`<!doctype html>\n<html${attrsToHtml(htmlAttrs)}>\n  <head>\n    <meta charset=\"UTF-8\" />\n    ${title && html`<title>${title}</title>`}\n    ${base && html`<base href=\"${base.href}\" />`}\n    ${meta?.some(isViewportMeta) ? null : defaultViewport}\n    ${meta?.map(metaToHtml)}\n    ${preloads?.map(linkPreload)}\n    ${links?.map(linkToHtml)}\n    ${head}\n    ${styles?.map(styleToHtml)}\n  </head>\n  <body${attrsToHtml(bodyAttrs)}>${body}${scripts?.map(scriptToHtml)}</body>\n</html>`\n\nfunction isViewportMeta<T extends MetaAttrs>(\n  attrs: T,\n): attrs is T & { name: 'viewport' } {\n  return 'name' in attrs && attrs.name === 'viewport'\n}\n\nfunction linkToHtml(attrs: LinkAttrs) {\n  return html`<link${attrsToHtml(attrs)} />`\n}\n\nfunction metaToHtml(attrs: MetaAttrs) {\n  return html`<meta${attrsToHtml(attrs)} />`\n}\n\nfunction* attrsToHtml(attrs?: Attrs) {\n  if (attrs) {\n    for (const [name, value] of Object.entries(attrs)) {\n      if (value == null) continue\n      else if (value === false) continue\n      else if (value === true) yield html` ${name}`\n      else yield html` ${name}=\"${value}\"`\n    }\n  }\n}\n\nfunction linkPreload(asset: AssetRef) {\n  const [path] = asset.url.split('?', 2)\n\n  if (path.endsWith('.js')) {\n    return html`<link rel=\"modulepreload\" href=\"${asset.url}\" />`\n  }\n\n  if (path.endsWith('.css')) {\n    return html`<link rel=\"preload\" href=\"${asset.url}\" as=\"style\" />`\n  }\n\n  return undefined\n}\n\nfunction scriptToHtml(script?: Html | AssetRef): Html | undefined {\n  if (script == null) return undefined\n  return script instanceof Html\n    ? // prettier-ignore\n      html`<script>${script}</script>` // hash validity requires no space around the content\n    : html`<script type=\"module\" src=\"${script.url}\"></script>`\n}\n\nfunction styleToHtml(style?: Html | AssetRef): Html | undefined {\n  if (style == null) return undefined\n  return style instanceof Html\n    ? // prettier-ignore\n      html`<style>${style}</style>` // hash validity requires no space around the content\n    : html`<link rel=\"stylesheet\" href=\"${style.url}\" />`\n}\n"]}
+{"version":3,"file":"build-document.js","sourceRoot":"","sources":["../../../src/lib/html/build-document.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAQhC;;GAEG;AACH,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,WAAW;IACX,QAAQ;IACR,WAAW;IACX,cAAc;IACd,UAAU;IACV,QAAQ;IACR,MAAM;IACN,MAAM;IACN,SAAS;IACT,UAAU;IACV,IAAI;IACJ,eAAe;IACf,MAAM;IACN,UAAU;IACV,YAAY;IACZ,UAAU;IACV,SAAS;IACT,WAAW;IACX,MAAM;IACN,gBAAgB;IAChB,QAAQ;IACR,YAAY;IACZ,kBAAkB;CACV,CAAC,CAAA;AAEX,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAY,EAAkB,EAAE,CACvD,uBAA8C,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;AAU/D,MAAM,eAAe,GAAG,IAAI,CAAA;;;GAGzB,CAAA;AAgBH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,EAC5B,SAAS,EACT,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,OAAO,EACP,MAAM,GACe,EAAE,EAAE,CAAC,IAAI,CAAA;OACzB,WAAW,CAAC,SAAS,CAAC;;;MAGvB,KAAK,IAAI,IAAI,CAAA,UAAU,KAAK,UAAU;MACtC,IAAI,IAAI,IAAI,CAAA,eAAe,IAAI,CAAC,IAAI,MAAM;MAC1C,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe;MACnD,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC;MACrB,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC;MAC1B,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC;MACtB,IAAI;MACJ,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC;;SAErB,WAAW,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC;QAC5D,CAAA;AAER,SAAS,cAAc,CACrB,KAAQ;IAER,OAAO,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAA;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,KAAgB;IAClC,OAAO,IAAI,CAAA,QAAQ,WAAW,CAAC,KAAK,CAAC,KAAK,CAAA;AAC5C,CAAC;AAED,SAAS,UAAU,CAAC,KAAgB;IAClC,OAAO,IAAI,CAAA,QAAQ,WAAW,CAAC,KAAK,CAAC,KAAK,CAAA;AAC5C,CAAC;AAED,QAAQ,CAAC,CAAC,WAAW,CAAC,KAAa;IACjC,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,IAAI,KAAK,IAAI,IAAI;gBAAE,SAAQ;iBACtB,IAAI,KAAK,KAAK,KAAK;gBAAE,SAAQ;iBAC7B,IAAI,KAAK,KAAK,IAAI;gBAAE,MAAM,IAAI,CAAA,IAAI,IAAI,EAAE,CAAA;;gBACxC,MAAM,IAAI,CAAA,IAAI,IAAI,KAAK,KAAK,GAAG,CAAA;QACtC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAe;IAClC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IAEtC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAA,mCAAmC,KAAK,CAAC,GAAG,MAAM,CAAA;IAC/D,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAA,6BAA6B,KAAK,CAAC,GAAG,iBAAiB,CAAA;IACpE,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,MAAwB;IAC5C,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,SAAS,CAAA;IACpC,OAAO,MAAM,YAAY,IAAI;QAC3B,CAAC,CAAC,kBAAkB;YAClB,IAAI,CAAA,WAAW,MAAM,WAAW,CAAC,qDAAqD;QACxF,CAAC,CAAC,IAAI,CAAA,8BAA8B,MAAM,CAAC,GAAG,aAAa,CAAA;AAC/D,CAAC;AAED,SAAS,WAAW,CAAC,KAAuB;IAC1C,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAA;IACnC,OAAO,KAAK,YAAY,IAAI;QAC1B,CAAC,CAAC,kBAAkB;YAClB,IAAI,CAAA,UAAU,KAAK,UAAU,CAAC,qDAAqD;QACrF,CAAC,CAAC,IAAI,CAAA,gCAAgC,KAAK,CAAC,GAAG,MAAM,CAAA;AACzD,CAAC","sourcesContent":["import { HtmlValue } from './escapers.js'\nimport { Html } from './html.js'\nimport { html } from './tags.js'\n\nexport type AssetRef = {\n  url: string\n}\n\nexport type Attrs = Record<string, boolean | string | undefined>\n\n/**\n * @see {@link https://developer.mozilla.org/fr/docs/Web/HTML/Attributes/rel}\n */\nconst ALLOWED_LINK_REL_VALUES = Object.freeze([\n  'alternate',\n  'author',\n  'canonical',\n  'dns-prefetch',\n  'external',\n  'expect',\n  'help',\n  'icon',\n  'license',\n  'manifest',\n  'me',\n  'modulepreload',\n  'next',\n  'pingback',\n  'preconnect',\n  'prefetch',\n  'preload',\n  'prerender',\n  'prev',\n  'privacy-policy',\n  'search',\n  'stylesheet',\n  'terms-of-service',\n] as const)\nexport type LinkRel = (typeof ALLOWED_LINK_REL_VALUES)[number]\nexport const isLinkRel = (rel: unknown): rel is LinkRel =>\n  (ALLOWED_LINK_REL_VALUES as readonly unknown[]).includes(rel)\n\nexport type LinkAttrs = Attrs & {\n  href: string\n  rel: LinkRel\n}\nexport type MetaAttrs =\n  | { name: string; content: string }\n  | { 'http-equiv': string; content: string }\n\nconst defaultViewport = html`<meta\n  name=\"viewport\"\n  content=\"width=device-width, initial-scale=1.0\"\n/>`\n\nexport type BuildDocumentOptions = {\n  htmlAttrs?: Attrs\n  base?: URL\n  meta?: readonly MetaAttrs[]\n  links?: readonly LinkAttrs[]\n  preloads?: readonly AssetRef[]\n  head?: HtmlValue\n  title?: HtmlValue\n  scripts?: readonly (Html | AssetRef | undefined)[]\n  styles?: readonly (Html | AssetRef | undefined)[]\n  body?: HtmlValue\n  bodyAttrs?: Attrs\n}\n\nexport const buildDocument = ({\n  htmlAttrs,\n  head,\n  title,\n  body,\n  bodyAttrs,\n  base,\n  meta,\n  links,\n  preloads,\n  scripts,\n  styles,\n}: BuildDocumentOptions) => html`<!doctype html>\n<html${attrsToHtml(htmlAttrs)}>\n  <head>\n    <meta charset=\"UTF-8\" />\n    ${title && html`<title>${title}</title>`}\n    ${base && html`<base href=\"${base.href}\" />`}\n    ${meta?.some(isViewportMeta) ? null : defaultViewport}\n    ${meta?.map(metaToHtml)}\n    ${preloads?.map(linkPreload)}\n    ${links?.map(linkToHtml)}\n    ${head}\n    ${styles?.map(styleToHtml)}\n  </head>\n  <body${attrsToHtml(bodyAttrs)}>${body}${scripts?.map(scriptToHtml)}</body>\n</html>`\n\nfunction isViewportMeta<T extends MetaAttrs>(\n  attrs: T,\n): attrs is T & { name: 'viewport' } {\n  return 'name' in attrs && attrs.name === 'viewport'\n}\n\nfunction linkToHtml(attrs: LinkAttrs) {\n  return html`<link${attrsToHtml(attrs)} />`\n}\n\nfunction metaToHtml(attrs: MetaAttrs) {\n  return html`<meta${attrsToHtml(attrs)} />`\n}\n\nfunction* attrsToHtml(attrs?: Attrs) {\n  if (attrs) {\n    for (const [name, value] of Object.entries(attrs)) {\n      if (value == null) continue\n      else if (value === false) continue\n      else if (value === true) yield html` ${name}`\n      else yield html` ${name}=\"${value}\"`\n    }\n  }\n}\n\nfunction linkPreload(asset: AssetRef) {\n  const [path] = asset.url.split('?', 2)\n\n  if (path.endsWith('.js')) {\n    return html`<link rel=\"modulepreload\" href=\"${asset.url}\" />`\n  }\n\n  if (path.endsWith('.css')) {\n    return html`<link rel=\"preload\" href=\"${asset.url}\" as=\"style\" />`\n  }\n\n  return undefined\n}\n\nfunction scriptToHtml(script?: Html | AssetRef): Html | undefined {\n  if (script == null) return undefined\n  return script instanceof Html\n    ? // prettier-ignore\n      html`<script>${script}</script>` // hash validity requires no space around the content\n    : html`<script type=\"module\" src=\"${script.url}\"></script>`\n}\n\nfunction styleToHtml(style?: Html | AssetRef): Html | undefined {\n  if (style == null) return undefined\n  return style instanceof Html\n    ? // prettier-ignore\n      html`<style>${style}</style>` // hash validity requires no space around the content\n    : html`<link rel=\"stylesheet\" href=\"${style.url}\" />`\n}\n"]}

package/dist/lib/html/escapers.js

@@ -1,29 +1,23 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.javascriptEscaper = javascriptEscaper;
-exports.jsonEscaper = jsonEscaper;
-exports.cssEscaper = cssEscaper;
-exports.htmlEscaper = htmlEscaper;
-const html_js_1 = require("./html.js");
-const util_js_1 = require("./util.js");
-function* javascriptEscaper(code) {
+import { Html } from './html.js';
+import { stringReplacer } from './util.js';
+export function* javascriptEscaper(code) {
     // "</script>" can only appear in javascript strings, so we can safely escape
     // the "<" without breaking the javascript.
-    yield* (0, util_js_1.stringReplacer)(code, '</script>', '\\u003c/script>');
+    yield* stringReplacer(code, '</script>', '\\u003c/script>');
 }
-function* jsonEscaper(value) {
+export function* jsonEscaper(value) {
     // https://redux.js.org/usage/server-rendering#security-considerations
     const json = JSON.stringify(value);
     if (json === undefined)
         throw new TypeError('Cannot serialize to JSON');
     // "<" can only appear in JSON strings, so we can safely escape it without
     // breaking the JSON.
-    yield* (0, util_js_1.stringReplacer)(json, '<', '\\u003c');
+    yield* stringReplacer(json, '<', '\\u003c');
 }
-function* cssEscaper(css) {
-    yield* (0, util_js_1.stringReplacer)(css, '</style>', '\\u003c/style>');
+export function* cssEscaper(css) {
+    yield* stringReplacer(css, '</style>', '\\u003c/style>');
 }
-function* htmlEscaper(htmlFragments, values) {
+export function* htmlEscaper(htmlFragments, values) {
     for (let i = 0; i < htmlFragments.length; i++) {
         yield htmlFragments[i];
         const value = values[i];
@@ -41,7 +35,7 @@ function* htmlVariableToFragments(value) {
     else if (typeof value === 'string') {
         yield encode(value);
     }
-    else if (value instanceof html_js_1.Html) {
+    else if (value instanceof Html) {
         yield value;
     }
     else {