@atproto/oauth-scopes 0.0.1

package/CHANGELOG.md

@@ -0,0 +1,7 @@
+# @atproto/oauth-scopes
+
+## 0.0.1
+
+### Patch Changes
+
+- [#3806](https://github.com/bluesky-social/atproto/pull/3806) [`1899b1fc1`](https://github.com/bluesky-social/atproto/commit/1899b1fc16bc5cd7bb930ec697898766c3a05add) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Initial implementation of library used to parse ATProto OAuth scopes

package/LICENSE.txt

@@ -0,0 +1,7 @@
+Dual MIT/Apache-2.0 License
+
+Copyright (c) 2022-2025 Bluesky Social PBC, and Contributors
+
+Except as otherwise noted in individual files, this software is licensed under the MIT license (<http://opensource.org/licenses/MIT>), or the Apache License, Version 2.0 (<http://www.apache.org/licenses/LICENSE-2.0>).
+
+Downstream projects and end users may chose either license individually, or both together, at their discretion. The motivation for this dual-licensing is the additional software patent assurance provided by Apache 2.0.

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+export * from './scope-missing-error.js';
+export * from './permission-set.js';
+export * from './permission-set-transition.js';
+export * from './scopes-set.js';
+export * from './parser.js';
+export * from './syntax.js';
+export * from './utilities.js';
+export * from './resources/account-scope.js';
+export * from './resources/blob-scope.js';
+export * from './resources/identity-scope.js';
+export * from './resources/repo-scope.js';
+export * from './resources/rpc-scope.js';
+export * from './lib/mime.js';
+export * from './lib/did.js';
+export * from './lib/nsid.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAA;AACxC,cAAc,qBAAqB,CAAA;AACnC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA;AAE9B,cAAc,8BAA8B,CAAA;AAC5C,cAAc,2BAA2B,CAAA;AACzC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,2BAA2B,CAAA;AACzC,cAAc,0BAA0B,CAAA;AAExC,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA"}

package/dist/index.js

@@ -0,0 +1,32 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./scope-missing-error.js"), exports);
+__exportStar(require("./permission-set.js"), exports);
+__exportStar(require("./permission-set-transition.js"), exports);
+__exportStar(require("./scopes-set.js"), exports);
+__exportStar(require("./parser.js"), exports);
+__exportStar(require("./syntax.js"), exports);
+__exportStar(require("./utilities.js"), exports);
+__exportStar(require("./resources/account-scope.js"), exports);
+__exportStar(require("./resources/blob-scope.js"), exports);
+__exportStar(require("./resources/identity-scope.js"), exports);
+__exportStar(require("./resources/repo-scope.js"), exports);
+__exportStar(require("./resources/rpc-scope.js"), exports);
+__exportStar(require("./lib/mime.js"), exports);
+__exportStar(require("./lib/did.js"), exports);
+__exportStar(require("./lib/nsid.js"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2DAAwC;AACxC,sDAAmC;AACnC,iEAA8C;AAC9C,kDAA+B;AAC/B,8CAA2B;AAC3B,8CAA2B;AAC3B,iDAA8B;AAE9B,+DAA4C;AAC5C,4DAAyC;AACzC,gEAA6C;AAC7C,4DAAyC;AACzC,2DAAwC;AAExC,gDAA6B;AAC7B,+CAA4B;AAC5B,gDAA6B"}

package/dist/lib/did.d.ts

@@ -0,0 +1,3 @@
+export type DIDLike = `did:${string}`;
+export declare const isDIDLike: (value: string) => value is DIDLike;
+//# sourceMappingURL=did.d.ts.map

package/dist/lib/did.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"did.d.ts","sourceRoot":"","sources":["../../src/lib/did.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG,OAAO,MAAM,EAAE,CAAA;AACrC,eAAO,MAAM,SAAS,GAAI,OAAO,MAAM,KAAG,KAAK,IAAI,OACzB,CAAA"}

package/dist/lib/did.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isDIDLike = void 0;
+const isDIDLike = (value) => value.startsWith('did:');
+exports.isDIDLike = isDIDLike;
+//# sourceMappingURL=did.js.map

package/dist/lib/did.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"did.js","sourceRoot":"","sources":["../../src/lib/did.ts"],"names":[],"mappings":";;;AACO,MAAM,SAAS,GAAG,CAAC,KAAa,EAAoB,EAAE,CAC3D,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;AADb,QAAA,SAAS,aACI"}

package/dist/lib/mime.d.ts

@@ -0,0 +1,7 @@
+export type Mime = `${string}/${string}`;
+export declare function isMime(value: string): value is Mime;
+export type Accept = '*/*' | `${string}/*` | Mime;
+export declare function isAccept(value: string): value is Accept;
+export declare function matchesAccept(accept: Accept, mime: string): boolean;
+export declare function matchesAnyAccept(acceptable: Iterable<Accept>, mime: string): boolean;
+//# sourceMappingURL=mime.d.ts.map

package/dist/lib/mime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mime.d.ts","sourceRoot":"","sources":["../../src/lib/mime.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAAA;AAExC,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,IAAI,CAEnD;AAED,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,GAAG,MAAM,IAAI,GAAG,IAAI,CAAA;AAEjD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,MAAM,CAIvD;AAiBD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnE;AAmBD,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,EAC5B,IAAI,EAAE,MAAM,GACX,OAAO,CAET"}

package/dist/lib/mime.js

@@ -0,0 +1,65 @@
+"use strict";
+// @TODO Refactor in shared location for use with other @atproto packages
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isMime = isMime;
+exports.isAccept = isAccept;
+exports.matchesAccept = matchesAccept;
+exports.matchesAnyAccept = matchesAnyAccept;
+function isStringSlashString(value) {
+    const slashIndex = value.indexOf('/');
+    if (slashIndex === -1)
+        return false; // Missing slash
+    if (slashIndex === 0)
+        return false; // No leading part before the slash
+    if (slashIndex === value.length - 1)
+        return false; // No trailing part after the slash
+    if (value.includes('/', slashIndex + 1))
+        return false; // More than one slash
+    if (value.includes(' '))
+        return false; // Spaces are not allowed
+    return true;
+}
+function isMime(value) {
+    return isStringSlashString(value) && !value.includes('*');
+}
+function isAccept(value) {
+    if (value === '*/*')
+        return true; // Fast path for the most common case
+    if (!isStringSlashString(value))
+        return false;
+    return !value.includes('*') || value.endsWith('/*');
+}
+/**
+ * @note "unsafe" in that it does not check if either {@link accept} or
+ * {@link mime} are actually valid values (and could, therefore, lead to false
+ * positives if forged values are used).
+ */
+function matchesAcceptUnsafe(accept, mime) {
+    if (accept === '*/*') {
+        return true;
+    }
+    if (accept.endsWith('/*')) {
+        return mime.startsWith(accept.slice(0, -1));
+    }
+    return accept === mime;
+}
+function matchesAccept(accept, mime) {
+    return isMime(mime) && matchesAcceptUnsafe(accept, mime);
+}
+/**
+ * @note "unsafe" in that it does not check if either {@link accept} or
+ * {@link mime} are actually valid values (and could, therefore, lead to false
+ * positives if forged values are used).
+ */
+function matchesAnyAcceptUnsafe(acceptable, mime) {
+    for (const accept of acceptable) {
+        if (matchesAcceptUnsafe(accept, mime)) {
+            return true;
+        }
+    }
+    return false;
+}
+function matchesAnyAccept(acceptable, mime) {
+    return isMime(mime) && matchesAnyAcceptUnsafe(acceptable, mime);
+}
+//# sourceMappingURL=mime.js.map

package/dist/lib/mime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mime.js","sourceRoot":"","sources":["../../src/lib/mime.ts"],"names":[],"mappings":";AAAA,yEAAyE;;AAgBzE,wBAEC;AAID,4BAIC;AAiBD,sCAEC;AAmBD,4CAKC;AAnED,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAErC,IAAI,UAAU,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA,CAAC,gBAAgB;IACpD,IAAI,UAAU,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA,CAAC,mCAAmC;IACtE,IAAI,UAAU,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA,CAAC,mCAAmC;IACrF,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA,CAAC,sBAAsB;IAC5E,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA,CAAC,yBAAyB;IAE/D,OAAO,IAAI,CAAA;AACb,CAAC;AAID,SAAgB,MAAM,CAAC,KAAa;IAClC,OAAO,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;AAC3D,CAAC;AAID,SAAgB,QAAQ,CAAC,KAAa;IACpC,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAA,CAAC,qCAAqC;IACtE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC7C,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AACrD,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,MAAc,EAAE,IAAU;IACrD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7C,CAAC;IACD,OAAO,MAAM,KAAK,IAAI,CAAA;AACxB,CAAC;AAED,SAAgB,aAAa,CAAC,MAAc,EAAE,IAAY;IACxD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;AAC1D,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAC7B,UAA4B,EAC5B,IAAU;IAEV,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,IAAI,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAgB,gBAAgB,CAC9B,UAA4B,EAC5B,IAAY;IAEZ,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;AACjE,CAAC"}

package/dist/lib/nsid.d.ts

@@ -0,0 +1,3 @@
+export type NSID = `${string}.${string}`;
+export declare const isNSID: (value: string) => value is NSID;
+//# sourceMappingURL=nsid.d.ts.map

package/dist/lib/nsid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nsid.d.ts","sourceRoot":"","sources":["../../src/lib/nsid.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAAA;AACxC,eAAO,MAAM,MAAM,GAAI,OAAO,MAAM,KAAG,KAAK,IAAI,IAI1B,CAAA"}

package/dist/lib/nsid.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isNSID = void 0;
+const isNSID = (value) => value.includes('.') &&
+    !value.includes(' ') &&
+    !value.startsWith('.') &&
+    !value.endsWith('.');
+exports.isNSID = isNSID;
+//# sourceMappingURL=nsid.js.map

package/dist/lib/nsid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nsid.js","sourceRoot":"","sources":["../../src/lib/nsid.ts"],"names":[],"mappings":";;;AACO,MAAM,MAAM,GAAG,CAAC,KAAa,EAAiB,EAAE,CACrD,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;IACnB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;IACpB,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;IACtB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;AAJT,QAAA,MAAM,UAIG"}

package/dist/lib/util.d.ts

@@ -0,0 +1,3 @@
+export declare function minIdx(a: number, b: number): number;
+export declare function toRecord(iterable: Iterable<[key: string, value: string]>): Record<string, [string, ...string[]]>;
+//# sourceMappingURL=util.d.ts.map

package/dist/lib/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../src/lib/util.ts"],"names":[],"mappings":"AAAA,wBAAgB,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAInD;AAED,wBAAgB,QAAQ,CACtB,QAAQ,EAAE,QAAQ,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,GAC/C,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAUvC"}

package/dist/lib/util.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.minIdx = minIdx;
+exports.toRecord = toRecord;
+function minIdx(a, b) {
+    if (a === -1)
+        return b;
+    if (b === -1)
+        return a;
+    return Math.min(a, b);
+}
+function toRecord(iterable) {
+    const record = Object.create(null);
+    for (const [key, value] of iterable) {
+        if (Object.hasOwn(record, key)) {
+            record[key].push(value);
+        }
+        else {
+            record[key] = [value];
+        }
+    }
+    return record;
+}
+//# sourceMappingURL=util.js.map

package/dist/lib/util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../src/lib/util.ts"],"names":[],"mappings":";;AAAA,wBAIC;AAED,4BAYC;AAlBD,SAAgB,MAAM,CAAC,CAAS,EAAE,CAAS;IACzC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACtB,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACvB,CAAC;AAED,SAAgB,QAAQ,CACtB,QAAgD;IAEhD,MAAM,MAAM,GAA0C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACzE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACvB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/parser.d.ts

@@ -0,0 +1,31 @@
+import { NeRoArray, ResourceSyntax, ScopeForResource } from './syntax.js';
+type InferStringPredicate<T extends undefined | ((value: string) => boolean)> = T extends ((value: string) => value is infer U extends string) ? U : string;
+type ParamsSchema = Record<string, {
+    multiple: false;
+    required: boolean;
+    default?: string;
+    normalize?: (value: string) => string;
+    validate?: (value: string) => boolean;
+} | {
+    multiple: true;
+    required: boolean;
+    default?: NeRoArray<string>;
+    normalize?: (value: NeRoArray<string>) => NeRoArray<string>;
+    validate?: (value: string) => boolean;
+}>;
+type ParsedParams<S extends ParamsSchema> = {
+    [K in keyof S]: (S[K]['required'] extends true ? never : 'default' extends keyof S[K] ? S[K]['default'] : undefined) | (S[K]['multiple'] extends true ? NeRoArray<InferStringPredicate<S[K]['validate']>> : InferStringPredicate<S[K]['validate']>);
+} & NonNullable<unknown>;
+export declare class Parser<R extends string, S extends ParamsSchema> {
+    readonly resource: R;
+    readonly schema: S;
+    readonly positionalName?: (keyof S & string) | undefined;
+    readonly schemaKeys: ReadonlyArray<keyof S & string>;
+    constructor(resource: R, schema: S, positionalName?: (keyof S & string) | undefined);
+    format(values: ParsedParams<S>): ScopeForResource<R>;
+    parse(syntax: ResourceSyntax): { [K in keyof S]: (S[K]["required"] extends true ? never : "default" extends keyof S[K] ? S[K][keyof S[K] & "default"] : undefined) | (S[K]["multiple"] extends true ? NeRoArray<InferStringPredicate<S[K]["validate"]>> : InferStringPredicate<S[K]["validate"]>); } | null;
+    parseString(scope: string): ParsedParams<S> | null;
+}
+export declare function knownValuesValidator<T extends string>(values: Iterable<T>): (value: string) => value is T;
+export {};
+//# sourceMappingURL=parser.d.ts.map

package/dist/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../src/parser.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,cAAc,EACd,gBAAgB,EAEjB,MAAM,aAAa,CAAA;AAEpB,KAAK,oBAAoB,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAC1E,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,KAAK,IAAI,MAAM,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAA;AAE7E,KAAK,YAAY,GAAG,MAAM,CACxB,MAAM,EACJ;IACE,QAAQ,EAAE,KAAK,CAAA;IACf,QAAQ,EAAE,OAAO,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAA;CACtC,GACD;IACE,QAAQ,EAAE,IAAI,CAAA;IACd,QAAQ,EAAE,OAAO,CAAA;IACjB,OAAO,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;IAC3B,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,MAAM,CAAC,CAAA;IAC3D,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAA;CACtC,CACJ,CAAA;AAED,KAAK,YAAY,CAAC,CAAC,SAAS,YAAY,IAAI;KACzC,CAAC,IAAI,MAAM,CAAC,GACT,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,IAAI,GAC1B,KAAK,GACL,SAAS,SAAS,MAAM,CAAC,CAAC,CAAC,CAAC,GAC1B,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GACf,SAAS,CAAC,GAChB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,IAAI,GAC1B,SAAS,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GACjD,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;CAChD,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;AAExB,qBAAa,MAAM,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,YAAY;IAIxD,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,cAAc,CAAC,GAAE,MAAM,CAAC,GAAG,MAAM;IAL5C,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAA;gBAGzC,QAAQ,EAAE,CAAC,EACX,MAAM,EAAE,CAAC,EACT,cAAc,CAAC,GAAE,MAAM,CAAC,GAAG,MAAM,aAAA;IAK5C,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC;IAuCpD,KAAK,CAAC,MAAM,EAAE,cAAc,MA7D3B,CAAC;IAgGF,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI;CAInD;AAiBD,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,IAEhE,OAAO,MAAM,KAAG,KAAK,IAAI,CAAC,CACnC"}

package/dist/parser.js

@@ -0,0 +1,118 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Parser = void 0;
+exports.knownValuesValidator = knownValuesValidator;
+const syntax_js_1 = require("./syntax.js");
+class Parser {
+    constructor(resource, schema, positionalName) {
+        Object.defineProperty(this, "resource", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: resource
+        });
+        Object.defineProperty(this, "schema", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: schema
+        });
+        Object.defineProperty(this, "positionalName", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: positionalName
+        });
+        Object.defineProperty(this, "schemaKeys", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        this.schemaKeys = Object.keys(schema);
+    }
+    format(values) {
+        // Build params
+        const params = [];
+        for (const key of this.schemaKeys) {
+            const value = values[key];
+            // Ignore undefined values
+            if (value === undefined)
+                continue;
+            const schema = this.schema[key];
+            // @TODO: when the value is an array, we could remove duplicates
+            // Normalize the value if a normalization function is provided
+            const normalized = schema.normalize
+                ? schema.normalize(value)
+                : value;
+            // Ignore values that are equal to the default value
+            if (!schema.required) {
+                if (schema.default === normalized)
+                    continue;
+                if (schema.multiple &&
+                    schema.default &&
+                    arrayParamEquals(schema.default, normalized)) {
+                    continue;
+                }
+            }
+            params.push([key, normalized]);
+        }
+        return (0, syntax_js_1.formatScope)(this.resource, params, this.positionalName);
+    }
+    parse(syntax) {
+        if (!syntax.is(this.resource))
+            return null;
+        if (syntax.containsParamsOtherThan(this.schemaKeys))
+            return null;
+        const result = Object.create(null);
+        for (const key of this.schemaKeys) {
+            const definition = this.schema[key];
+            const value = definition.multiple
+                ? syntax.getMulti(key, key === this.positionalName)
+                : syntax.getSingle(key, key === this.positionalName);
+            if (value === null)
+                return null; // Value is not valid
+            if (value === undefined && definition.required)
+                return null;
+            if (value !== undefined && definition.validate) {
+                if (definition.multiple) {
+                    if (!value.every(definition.validate)) {
+                        return null;
+                    }
+                }
+                else {
+                    if (!definition.validate(value)) {
+                        return null;
+                    }
+                }
+            }
+            result[key] = value ?? definition.default;
+        }
+        return result;
+    }
+    parseString(scope) {
+        const syntax = syntax_js_1.ResourceSyntax.fromString(scope);
+        return this.parse(syntax);
+    }
+}
+exports.Parser = Parser;
+/**
+ * Two param arrays are considered equal if they contain the same values,
+ * regardless of the order and duplicates.
+ * @param a - The first array to compare.
+ * @param b - The second array to compare.
+ */
+function arrayParamEquals(a, b) {
+    for (const item of a)
+        if (!b.includes(item))
+            return false;
+    for (const item of b)
+        if (!a.includes(item))
+            return false;
+    return true;
+}
+function knownValuesValidator(values) {
+    const set = new Set(values);
+    return (value) => set.has(value);
+}
+//# sourceMappingURL=parser.js.map

package/dist/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../src/parser.ts"],"names":[],"mappings":";;;AAkJA,oDAGC;AArJD,2CAKoB;AAmCpB,MAAa,MAAM;IAGjB,YACW,QAAW,EACX,MAAS,EACT,cAAiC;QAF1C;;;;mBAAS,QAAQ;WAAG;QACpB;;;;mBAAS,MAAM;WAAG;QAClB;;;;mBAAS,cAAc;WAAmB;QALnC;;;;;WAA2C;QAOlD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvC,CAAC;IAED,MAAM,CAAC,MAAuB;QAC5B,eAAe;QACf,MAAM,MAAM,GAGN,EAAE,CAAA;QAER,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;YACzB,0BAA0B;YAC1B,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAQ;YAEjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAE/B,gEAAgE;YAEhE,8DAA8D;YAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS;gBACjC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAY,CAAC;gBAChC,CAAC,CAAC,KAAK,CAAA;YAET,oDAAoD;YACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrB,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU;oBAAE,SAAQ;gBAC3C,IACE,MAAM,CAAC,QAAQ;oBACf,MAAM,CAAC,OAAO;oBACd,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,UAA+B,CAAC,EACjE,CAAC;oBACD,SAAQ;gBACV,CAAC;YACH,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAA;QAChC,CAAC;QAED,OAAO,IAAA,uBAAW,EAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;IACnE,CAAC;IAED,KAAK,CAAC,MAAsB;QAC1B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QAC1C,IAAI,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAA;QAEhE,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAErB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAEnC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ;gBAC/B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,cAAc,CAAC;gBACnD,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,cAAc,CAAC,CAAA;YAEtD,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAA,CAAC,qBAAqB;YACrD,IAAI,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAA;YAE3D,IAAI,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;gBAC/C,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;oBACxB,IAAI,CAAE,KAA2B,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC7D,OAAO,IAAI,CAAA;oBACb,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAe,CAAC,EAAE,CAAC;wBAC1C,OAAO,IAAI,CAAA;oBACb,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,UAAU,CAAC,OAAO,CAAA;QAC3C,CAAC;QAED,OAAO,MAAyB,CAAA;IAClC,CAAC;IAED,WAAW,CAAC,KAAa;QACvB,MAAM,MAAM,GAAG,0BAAc,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC3B,CAAC;CACF;AAzFD,wBAyFC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,CAAqB,EACrB,CAAqB;IAErB,KAAK,MAAM,IAAI,IAAI,CAAC;QAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;IACzD,KAAK,MAAM,IAAI,IAAI,CAAC;QAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;IACzD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAgB,oBAAoB,CAAmB,MAAmB;IACxE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,CAAA;IACnC,OAAO,CAAC,KAAa,EAAc,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AACtD,CAAC"}

package/dist/permission-set-transition.d.ts

@@ -0,0 +1,15 @@
+import { AccountScopeMatch, BlobScopeMatch, PermissionSet, RepoScopeMatch, RpcScopeMatch } from './permission-set.js';
+/**
+ * Overrides the default permission set to allow transitional scopes to be used
+ * in place of the generic scopes.
+ */
+export declare class PermissionSetTransition extends PermissionSet {
+    get hasTransitionGeneric(): boolean;
+    get hasTransitionEmail(): boolean;
+    get hasTransitionChatBsky(): boolean;
+    allowsAccount(options: AccountScopeMatch): boolean;
+    allowsBlob(options: BlobScopeMatch): boolean;
+    allowsRepo(options: RepoScopeMatch): boolean;
+    allowsRpc(options: RpcScopeMatch): boolean;
+}
+//# sourceMappingURL=permission-set-transition.d.ts.map

package/dist/permission-set-transition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-set-transition.d.ts","sourceRoot":"","sources":["../src/permission-set-transition.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,cAAc,EACd,aAAa,EACd,MAAM,qBAAqB,CAAA;AAE5B;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,aAAa;IACxD,IAAI,oBAAoB,IAAI,OAAO,CAElC;IAED,IAAI,kBAAkB,IAAI,OAAO,CAEhC;IAED,IAAI,qBAAqB,IAAI,OAAO,CAEnC;IAEQ,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO;IAQlD,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO;IAQ5C,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO;IAQ5C,SAAS,CAAC,OAAO,EAAE,aAAa;CAiB1C"}

package/dist/permission-set-transition.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionSetTransition = void 0;
+const permission_set_js_1 = require("./permission-set.js");
+/**
+ * Overrides the default permission set to allow transitional scopes to be used
+ * in place of the generic scopes.
+ */
+class PermissionSetTransition extends permission_set_js_1.PermissionSet {
+    get hasTransitionGeneric() {
+        return this.scopes.has('transition:generic');
+    }
+    get hasTransitionEmail() {
+        return this.scopes.has('transition:email');
+    }
+    get hasTransitionChatBsky() {
+        return this.scopes.has('transition:chat.bsky');
+    }
+    allowsAccount(options) {
+        if (options.attr === 'email' && this.hasTransitionEmail) {
+            return true;
+        }
+        return super.allowsAccount(options);
+    }
+    allowsBlob(options) {
+        if (this.hasTransitionGeneric) {
+            return true;
+        }
+        return super.allowsBlob(options);
+    }
+    allowsRepo(options) {
+        if (this.hasTransitionGeneric) {
+            return true;
+        }
+        return super.allowsRepo(options);
+    }
+    allowsRpc(options) {
+        const { lxm } = options;
+        if (this.hasTransitionGeneric && lxm === '*') {
+            return true;
+        }
+        if (this.hasTransitionGeneric && !lxm.startsWith('chat.bsky.')) {
+            return true;
+        }
+        if (this.hasTransitionChatBsky && lxm.startsWith('chat.bsky.')) {
+            return true;
+        }
+        return super.allowsRpc(options);
+    }
+}
+exports.PermissionSetTransition = PermissionSetTransition;
+//# sourceMappingURL=permission-set-transition.js.map

package/dist/permission-set-transition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-set-transition.js","sourceRoot":"","sources":["../src/permission-set-transition.ts"],"names":[],"mappings":";;;AAAA,2DAM4B;AAE5B;;;GAGG;AACH,MAAa,uBAAwB,SAAQ,iCAAa;IACxD,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;IAC9C,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;IAC5C,CAAC;IAED,IAAI,qBAAqB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;IAChD,CAAC;IAEQ,aAAa,CAAC,OAA0B;QAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IACrC,CAAC;IAEQ,UAAU,CAAC,OAAuB;QACzC,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAEQ,UAAU,CAAC,OAAuB;QACzC,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAEQ,SAAS,CAAC,OAAsB;QACvC,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAA;QAEvB,IAAI,IAAI,CAAC,oBAAoB,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,IAAI,CAAC,oBAAoB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACjC,CAAC;CACF;AAtDD,0DAsDC"}

package/dist/permission-set.d.ts

@@ -0,0 +1,22 @@
+import { AccountScopeMatch } from './resources/account-scope.js';
+import { BlobScopeMatch } from './resources/blob-scope.js';
+import { IdentityScopeMatch } from './resources/identity-scope.js';
+import { RepoScopeMatch } from './resources/repo-scope.js';
+import { RpcScopeMatch } from './resources/rpc-scope.js';
+import { ScopesSet } from './scopes-set.js';
+export type { AccountScopeMatch, BlobScopeMatch, IdentityScopeMatch, RepoScopeMatch, RpcScopeMatch, };
+export declare class PermissionSet {
+    readonly scopes: ScopesSet;
+    constructor(scopes?: null | string | Iterable<string>);
+    allowsAccount(options: AccountScopeMatch): boolean;
+    assertAccount(options: AccountScopeMatch): void;
+    allowsIdentity(options: IdentityScopeMatch): boolean;
+    assertIdentity(options: IdentityScopeMatch): void;
+    allowsBlob(options: BlobScopeMatch): boolean;
+    assertBlob(options: BlobScopeMatch): void;
+    allowsRepo(options: RepoScopeMatch): boolean;
+    assertRepo(options: RepoScopeMatch): void;
+    allowsRpc(options: RpcScopeMatch): boolean;
+    assertRpc(options: RpcScopeMatch): void;
+}
+//# sourceMappingURL=permission-set.d.ts.map

package/dist/permission-set.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-set.d.ts","sourceRoot":"","sources":["../src/permission-set.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAC9E,OAAO,EAAa,cAAc,EAAE,MAAM,2BAA2B,CAAA;AACrE,OAAO,EAEL,kBAAkB,EACnB,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAa,cAAc,EAAE,MAAM,2BAA2B,CAAA;AACrE,OAAO,EAAY,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAElE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,YAAY,EACV,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,aAAa,GACd,CAAA;AAED,qBAAa,aAAa;IACxB,SAAgB,MAAM,EAAE,SAAS,CAAA;gBAErB,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAM9C,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO;IAGlD,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;IAO/C,cAAc,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO;IAGpD,cAAc,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI;IAOjD,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO;IAG5C,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAOzC,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO;IAG5C,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAOzC,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO;IAG1C,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;CAM/C"}

package/dist/permission-set.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionSet = void 0;
+const account_scope_js_1 = require("./resources/account-scope.js");
+const blob_scope_js_1 = require("./resources/blob-scope.js");
+const identity_scope_js_1 = require("./resources/identity-scope.js");
+const repo_scope_js_1 = require("./resources/repo-scope.js");
+const rpc_scope_js_1 = require("./resources/rpc-scope.js");
+const scope_missing_error_js_1 = require("./scope-missing-error.js");
+const scopes_set_js_1 = require("./scopes-set.js");
+class PermissionSet {
+    constructor(scopes) {
+        Object.defineProperty(this, "scopes", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        this.scopes = new scopes_set_js_1.ScopesSet(typeof scopes === 'string' ? scopes.split(' ') : scopes);
+    }
+    allowsAccount(options) {
+        return this.scopes.matches('account', options);
+    }
+    assertAccount(options) {
+        if (!this.allowsAccount(options)) {
+            const scope = account_scope_js_1.AccountScope.scopeNeededFor(options);
+            throw new scope_missing_error_js_1.ScopeMissingError(scope);
+        }
+    }
+    allowsIdentity(options) {
+        return this.scopes.matches('identity', options);
+    }
+    assertIdentity(options) {
+        if (!this.allowsIdentity(options)) {
+            const scope = identity_scope_js_1.IdentityScope.scopeNeededFor(options);
+            throw new scope_missing_error_js_1.ScopeMissingError(scope);
+        }
+    }
+    allowsBlob(options) {
+        return this.scopes.matches('blob', options);
+    }
+    assertBlob(options) {
+        if (!this.allowsBlob(options)) {
+            const scope = blob_scope_js_1.BlobScope.scopeNeededFor(options);
+            throw new scope_missing_error_js_1.ScopeMissingError(scope);
+        }
+    }
+    allowsRepo(options) {
+        return this.scopes.matches('repo', options);
+    }
+    assertRepo(options) {
+        if (!this.allowsRepo(options)) {
+            const scope = repo_scope_js_1.RepoScope.scopeNeededFor(options);
+            throw new scope_missing_error_js_1.ScopeMissingError(scope);
+        }
+    }
+    allowsRpc(options) {
+        return this.scopes.matches('rpc', options);
+    }
+    assertRpc(options) {
+        if (!this.allowsRpc(options)) {
+            const scope = rpc_scope_js_1.RpcScope.scopeNeededFor(options);
+            throw new scope_missing_error_js_1.ScopeMissingError(scope);
+        }
+    }
+}
+exports.PermissionSet = PermissionSet;
+//# sourceMappingURL=permission-set.js.map

package/dist/permission-set.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-set.js","sourceRoot":"","sources":["../src/permission-set.ts"],"names":[],"mappings":";;;AAAA,mEAA8E;AAC9E,6DAAqE;AACrE,qEAGsC;AACtC,6DAAqE;AACrE,2DAAkE;AAClE,qEAA4D;AAC5D,mDAA2C;AAU3C,MAAa,aAAa;IAGxB,YAAY,MAAyC;QAFrC;;;;;WAAiB;QAG/B,IAAI,CAAC,MAAM,GAAG,IAAI,yBAAS,CACzB,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CACxD,CAAA;IACH,CAAC;IAEM,aAAa,CAAC,OAA0B;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IAChD,CAAC;IACM,aAAa,CAAC,OAA0B;QAC7C,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,+BAAY,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YAClD,MAAM,IAAI,0CAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAEM,cAAc,CAAC,OAA2B;QAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IACjD,CAAC;IACM,cAAc,CAAC,OAA2B;QAC/C,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,iCAAa,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACnD,MAAM,IAAI,0CAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAEM,UAAU,CAAC,OAAuB;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7C,CAAC;IACM,UAAU,CAAC,OAAuB;QACvC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,yBAAS,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YAC/C,MAAM,IAAI,0CAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAEM,UAAU,CAAC,OAAuB;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7C,CAAC;IACM,UAAU,CAAC,OAAuB;QACvC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,yBAAS,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YAC/C,MAAM,IAAI,0CAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAEM,SAAS,CAAC,OAAsB;QACrC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC5C,CAAC;IACM,SAAS,CAAC,OAAsB;QACrC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,uBAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YAC9C,MAAM,IAAI,0CAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;CACF;AA1DD,sCA0DC"}

package/dist/resources/account-scope.d.ts

@@ -0,0 +1,35 @@
+import { Parser } from '../parser.js';
+import { ResourceSyntax } from '../syntax.js';
+declare const ACCOUNT_ATTRIBUTES: readonly ["email", "repo", "status"];
+export type AccountAttribute = (typeof ACCOUNT_ATTRIBUTES)[number];
+declare const ACCOUNT_ACTIONS: readonly ["read", "manage"];
+export type AccountAction = (typeof ACCOUNT_ACTIONS)[number];
+export declare const accountParser: Parser<"account", {
+    attr: {
+        multiple: false;
+        required: true;
+        validate: (value: string) => value is "email" | "repo" | "status";
+    };
+    action: {
+        multiple: false;
+        required: false;
+        validate: (value: string) => value is "read" | "manage";
+        default: "read";
+    };
+}>;
+export type AccountScopeMatch = {
+    attr: AccountAttribute;
+    action: AccountAction;
+};
+export declare class AccountScope {
+    readonly attr: AccountAttribute;
+    readonly action: AccountAction;
+    constructor(attr: AccountAttribute, action: AccountAction);
+    matches(options: AccountScopeMatch): boolean;
+    toString(): import("../syntax.js").ScopeForResource<"account">;
+    static fromString(scope: string): AccountScope | null;
+    static fromSyntax(syntax: ResourceSyntax): AccountScope | null;
+    static scopeNeededFor(options: AccountScopeMatch): string;
+}
+export {};
+//# sourceMappingURL=account-scope.d.ts.map

package/dist/resources/account-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-scope.d.ts","sourceRoot":"","sources":["../../src/resources/account-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAwB,MAAM,cAAc,CAAA;AAC3D,OAAO,EAAE,cAAc,EAAsB,MAAM,cAAc,CAAA;AAEjE,QAAA,MAAM,kBAAkB,sCAAsD,CAAA;AAC9E,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AAElE,QAAA,MAAM,eAAe,6BAA6C,CAAA;AAClE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAA;AAE5D,eAAO,MAAM,aAAa;;;;;;;;;;;;EAgBzB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,gBAAgB,CAAA;IACtB,MAAM,EAAE,aAAa,CAAA;CACtB,CAAA;AAED,qBAAa,YAAY;aAEL,IAAI,EAAE,gBAAgB;aACtB,MAAM,EAAE,aAAa;gBADrB,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,aAAa;IAGvC,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO;IAO5C,QAAQ;IAIR,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM;IAM/B,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,cAAc;IAOxC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM;CAG1D"}