@atproto/oauth-scopes 0.0.2 → 0.2.0

package/dist/lib/syntax-string.d.ts

@@ -0,0 +1,16 @@
+import { ScopeStringFor, ScopeSyntax } from './syntax.js';
+/**
+ * Translates a scope string into a {@link ScopeSyntax}.
+ */
+export declare class ScopeStringSyntax<P extends string> implements ScopeSyntax<P> {
+    readonly prefix: P;
+    readonly positional?: string | undefined;
+    readonly params?: Readonly<URLSearchParams> | undefined;
+    constructor(prefix: P, positional?: string | undefined, params?: Readonly<URLSearchParams> | undefined);
+    keys(): Generator<string, void, unknown>;
+    getSingle(key: string): string | null | undefined;
+    getMulti(key: string): string[] | undefined;
+    toString(): ScopeStringFor<P>;
+    static fromString<P extends string>(scopeValue: ScopeStringFor<P>): ScopeStringSyntax<P>;
+}
+//# sourceMappingURL=syntax-string.d.ts.map

package/dist/lib/syntax-string.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"syntax-string.d.ts","sourceRoot":"","sources":["../../src/lib/syntax-string.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAGzD;;GAEG;AACH,qBAAa,iBAAiB,CAAC,CAAC,SAAS,MAAM,CAAE,YAAW,WAAW,CAAC,CAAC,CAAC;IAEtE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,eAAe,CAAC;gBAFlC,MAAM,EAAE,CAAC,EACT,UAAU,CAAC,EAAE,MAAM,YAAA,EACnB,MAAM,CAAC,EAAE,QAAQ,CAAC,eAAe,CAAC,YAAA;IAG5C,IAAI;IAIL,SAAS,CAAC,GAAG,EAAE,MAAM;IAOrB,QAAQ,CAAC,GAAG,EAAE,MAAM;IAKpB,QAAQ,IAWU,cAAc,CAAC,CAAC,CAAC;IAGnC,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,MAAM,EAChC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,GAC5B,iBAAiB,CAAC,CAAC,CAAC;CA8BxB"}

package/dist/lib/syntax-string.js

@@ -0,0 +1,121 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeStringSyntax = void 0;
+const util_js_1 = require("./util.js");
+/**
+ * Translates a scope string into a {@link ScopeSyntax}.
+ */
+class ScopeStringSyntax {
+    constructor(prefix, positional, params) {
+        Object.defineProperty(this, "prefix", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: prefix
+        });
+        Object.defineProperty(this, "positional", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: positional
+        });
+        Object.defineProperty(this, "params", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: params
+        });
+    }
+    *keys() {
+        if (this.params)
+            yield* this.params.keys();
+    }
+    getSingle(key) {
+        if (!this.params?.has(key))
+            return undefined;
+        const value = this.params.getAll(key);
+        if (value.length > 1)
+            return null;
+        return value[0];
+    }
+    getMulti(key) {
+        if (!this.params?.has(key))
+            return undefined;
+        return this.params.getAll(key);
+    }
+    toString() {
+        let scope = this.prefix;
+        if (this.positional !== undefined) {
+            scope += `:${normalizeURIComponent(encodeURIComponent(this.positional))}`;
+        }
+        if (this.params?.size) {
+            scope += `?${normalizeURIComponent(this.params.toString())}`;
+        }
+        return scope;
+    }
+    static fromString(scopeValue) {
+        const paramIdx = scopeValue.indexOf('?');
+        const colonIdx = scopeValue.indexOf(':');
+        const prefixEnd = (0, util_js_1.minIdx)(paramIdx, colonIdx);
+        // No param or positional
+        if (prefixEnd === -1) {
+            return new ScopeStringSyntax(scopeValue);
+        }
+        const prefix = scopeValue.slice(0, prefixEnd);
+        // Parse the positional parameter if present
+        const positional = colonIdx !== -1
+            ? paramIdx === -1
+                ? decodeURIComponent(scopeValue.slice(colonIdx + 1))
+                : colonIdx < paramIdx
+                    ? decodeURIComponent(scopeValue.slice(colonIdx + 1, paramIdx))
+                    : undefined
+            : undefined;
+        // Parse the query string if present and non empty
+        const params = paramIdx !== -1 && paramIdx < scopeValue.length - 1
+            ? new URLSearchParams(scopeValue.slice(paramIdx + 1))
+            : undefined;
+        return new ScopeStringSyntax(prefix, positional, params);
+    }
+}
+exports.ScopeStringSyntax = ScopeStringSyntax;
+/**
+ * Set of characters that are allowed in scope components without encoding. This
+ * is used to normalize scope components.
+ */
+const ALLOWED_SCOPE_CHARS = new Set(
+// @NOTE This list must not contain "?" or "&" as it would interfere with
+// query string parsing.
+[':', '/', '+', ',', '@', '%']);
+const NORMALIZABLE_CHARS_MAP = new Map(Array.from(ALLOWED_SCOPE_CHARS, (c) => [encodeURIComponent(c), c]).filter(([encoded, c]) => 
+// Make sure that any char added to ALLOWED_SCOPE_CHARS that is a char
+// that indeed needs encoding. Also, the normalizeURIComponent only
+// supports three-character percent-encoded sequences.
+encoded !== c && encoded.length === 3 && encoded.startsWith('%')));
+/**
+ * Assumes a properly url-encoded string.
+ */
+function normalizeURIComponent(value) {
+    // No need to read the last two characters since percent encoded characters
+    // are always three characters long.
+    let end = value.length - 2;
+    for (let i = 0; i < end; i++) {
+        // Check if the character is a percent-encoded character
+        if (value.charCodeAt(i) === 0x25 /* % */) {
+            // Read the next encoded char. Current version only supports
+            // three-character percent-encoded sequences.
+            const encodedChar = value.slice(i, i + 3);
+            // Check if the encoded character is in the normalization map
+            const normalizedChar = NORMALIZABLE_CHARS_MAP.get(encodedChar);
+            if (normalizedChar) {
+                // Replace the encoded character with its normalized version
+                value = `${value.slice(0, i)}${normalizedChar}${value.slice(i + encodedChar.length)}`;
+                // Adjust index to account for the length change
+                i += normalizedChar.length - 1;
+                // Adjust end index since we replaced encoded char with normalized char
+                end -= encodedChar.length - normalizedChar.length;
+            }
+        }
+    }
+    return value;
+}
+//# sourceMappingURL=syntax-string.js.map

package/dist/lib/syntax-string.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syntax-string.js","sourceRoot":"","sources":["../../src/lib/syntax-string.ts"],"names":[],"mappings":";;;AACA,uCAAkC;AAElC;;GAEG;AACH,MAAa,iBAAiB;IAC5B,YACW,MAAS,EACT,UAAmB,EACnB,MAAkC;QAF3C;;;;mBAAS,MAAM;WAAG;QAClB;;;;mBAAS,UAAU;WAAS;QAC5B;;;;mBAAS,MAAM;WAA4B;IAC1C,CAAC;IAEJ,CAAC,IAAI;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IAC5C,CAAC;IAED,SAAS,CAAC,GAAW;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAA;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QACjC,OAAO,KAAK,CAAC,CAAC,CAAE,CAAA;IAClB,CAAC;IAED,QAAQ,CAAC,GAAW;QAClB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAA;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAChC,CAAC;IAED,QAAQ;QACN,IAAI,KAAK,GAAW,IAAI,CAAC,MAAM,CAAA;QAE/B,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,KAAK,IAAI,IAAI,qBAAqB,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAA;QAC3E,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;YACtB,KAAK,IAAI,IAAI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAA;QAC9D,CAAC;QAED,OAAO,KAA0B,CAAA;IACnC,CAAC;IAED,MAAM,CAAC,UAAU,CACf,UAA6B;QAE7B,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACxC,MAAM,SAAS,GAAG,IAAA,gBAAM,EAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAE5C,yBAAyB;QACzB,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;YACrB,OAAO,IAAI,iBAAiB,CAAC,UAAe,CAAC,CAAA;QAC/C,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAM,CAAA;QAElD,4CAA4C;QAC5C,MAAM,UAAU,GACd,QAAQ,KAAK,CAAC,CAAC;YACb,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC;gBACf,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;gBACpD,CAAC,CAAC,QAAQ,GAAG,QAAQ;oBACnB,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;oBAC9D,CAAC,CAAC,SAAS;YACf,CAAC,CAAC,SAAS,CAAA;QAEf,kDAAkD;QAClD,MAAM,MAAM,GACV,QAAQ,KAAK,CAAC,CAAC,IAAI,QAAQ,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC;YACjD,CAAC,CAAC,IAAI,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YACrD,CAAC,CAAC,SAAS,CAAA;QAEf,OAAO,IAAI,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;IAC1D,CAAC;CACF;AArED,8CAqEC;AAED;;;GAGG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG;AACjC,yEAAyE;AACzE,wBAAwB;AACxB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAC/B,CAAA;AAED,MAAM,sBAAsB,GAAG,IAAI,GAAG,CACpC,KAAK,CAAC,IAAI,CACR,mBAAmB,EACnB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAU,CAC3C,CAAC,MAAM,CACN,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;AACf,sEAAsE;AACtE,mEAAmE;AACnE,sDAAsD;AACtD,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CACnE,CACF,CAAA;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,KAAa;IAC1C,2EAA2E;IAC3E,oCAAoC;IACpC,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;IAE1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,wDAAwD;QACxD,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACzC,4DAA4D;YAC5D,6CAA6C;YAC7C,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;YAEzC,6DAA6D;YAC7D,MAAM,cAAc,GAAG,sBAAsB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YAC9D,IAAI,cAAc,EAAE,CAAC;gBACnB,4DAA4D;gBAC5D,KAAK,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,CAAA;gBAErF,gDAAgD;gBAChD,CAAC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,CAAA;gBAE9B,uEAAuE;gBACvE,GAAG,IAAI,WAAW,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAA;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/lib/syntax.d.ts

@@ -0,0 +1,23 @@
+export type ParamValue = string | number | boolean;
+export type NeArray<T> = [T, ...T[]];
+/**
+ * Non-empty readonly array
+ */
+export type NeRoArray<T> = readonly [T, ...T[]];
+export type ScopeStringFor<P extends string> = P | `${P}:${string}` | `${P}?${string}`;
+/**
+ * Allows to quickly check if a scope is for a specific resource.
+ */
+export declare function isScopeStringFor<P extends string>(value: string, prefix: P): value is ScopeStringFor<P>;
+/**
+ * Abstract interface that allows parsing various syntaxes into permission
+ * representations.
+ */
+export interface ScopeSyntax<P extends string> {
+    readonly prefix: P;
+    readonly positional?: ParamValue;
+    keys(): Iterable<string, void, unknown>;
+    getSingle(key: string): ParamValue | null | undefined;
+    getMulti(key: string): ParamValue[] | null | undefined;
+}
+//# sourceMappingURL=syntax.d.ts.map

package/dist/lib/syntax.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"syntax.d.ts","sourceRoot":"","sources":["../../src/lib/syntax.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;AAElD,MAAM,MAAM,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;AAEpC;;GAEG;AACH,MAAM,MAAM,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;AAE/C,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,MAAM,IACvC,CAAC,GACD,GAAG,CAAC,IAAI,MAAM,EAAE,GAChB,GAAG,CAAC,IAAI,MAAM,EAAE,CAAA;AAEpB;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,MAAM,EAC/C,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,CAAC,GACR,KAAK,IAAI,cAAc,CAAC,CAAC,CAAC,CAc5B;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC,SAAS,MAAM;IAC3C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAClB,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAA;IAChC,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IACvC,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,GAAG,SAAS,CAAA;IACrD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,EAAE,GAAG,IAAI,GAAG,SAAS,CAAA;CACvD"}

package/dist/lib/syntax.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isScopeStringFor = isScopeStringFor;
+/**
+ * Allows to quickly check if a scope is for a specific resource.
+ */
+function isScopeStringFor(value, prefix) {
+    if (value.length > prefix.length) {
+        // First, check the next char is either : or ?
+        const nextChar = value.charCodeAt(prefix.length);
+        if (nextChar !== 0x3a /* : */ && nextChar !== 0x3f /* ? */) {
+            return false;
+        }
+        // Then check the full prefix
+        return value.startsWith(prefix);
+    }
+    else {
+        // value and prefix must be equal
+        return value === prefix;
+    }
+}
+//# sourceMappingURL=syntax.js.map

package/dist/lib/syntax.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syntax.js","sourceRoot":"","sources":["../../src/lib/syntax.ts"],"names":[],"mappings":";;AAiBA,4CAiBC;AApBD;;GAEG;AACH,SAAgB,gBAAgB,CAC9B,KAAa,EACb,MAAS;IAET,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACjC,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAChD,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAA;QACd,CAAC;QAED,6BAA6B;QAC7B,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IACjC,CAAC;SAAM,CAAC;QACN,iCAAiC;QACjC,OAAO,KAAK,KAAK,MAAM,CAAA;IACzB,CAAC;AACH,CAAC"}

package/dist/lib/util.d.ts

@@ -1,3 +1,7 @@
+export interface Matchable<T> {
+    matches(options: T): boolean;
+}
 export declare function minIdx(a: number, b: number): number;
-export declare function toRecord(iterable: Iterable<[key: string, value: string]>): Record<string, [string, ...string[]]>;
+export declare function knownValuesValidator<T>(values: Iterable<T>): (value: unknown) => value is T;
+export declare function isNonNullable<T>(value: T): value is NonNullable<T>;
 //# sourceMappingURL=util.d.ts.map

package/dist/lib/util.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../src/lib/util.ts"],"names":[],"mappings":"AAAA,wBAAgB,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAInD;AAED,wBAAgB,QAAQ,CACtB,QAAQ,EAAE,QAAQ,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,GAC/C,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAUvC"}
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../src/lib/util.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS,CAAC,CAAC;IAC1B,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAA;CAC7B;AAED,wBAAgB,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAInD;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,IAEjD,OAAO,OAAO,KAAG,KAAK,IAAI,CAAC,CACpC;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,CAElE"}

package/dist/lib/util.js

@@ -1,7 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.minIdx = minIdx;
-exports.toRecord = toRecord;
+exports.knownValuesValidator = knownValuesValidator;
+exports.isNonNullable = isNonNullable;
 function minIdx(a, b) {
     if (a === -1)
         return b;
@@ -9,16 +10,11 @@ function minIdx(a, b) {
         return a;
     return Math.min(a, b);
 }
-function toRecord(iterable) {
-    const record = Object.create(null);
-    for (const [key, value] of iterable) {
-        if (Object.hasOwn(record, key)) {
-            record[key].push(value);
-        }
-        else {
-            record[key] = [value];
-        }
-    }
-    return record;
+function knownValuesValidator(values) {
+    const set = new Set(values);
+    return (value) => set.has(value);
+}
+function isNonNullable(value) {
+    return value != null;
 }
 //# sourceMappingURL=util.js.map

package/dist/lib/util.js.map

@@ -1 +1 @@
-{"version":3,"file":"util.js","sourceRoot":"","sources":["../../src/lib/util.ts"],"names":[],"mappings":";;AAAA,wBAIC;AAED,4BAYC;AAlBD,SAAgB,MAAM,CAAC,CAAS,EAAE,CAAS;IACzC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACtB,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACvB,CAAC;AAED,SAAgB,QAAQ,CACtB,QAAgD;IAEhD,MAAM,MAAM,GAA0C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACzE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACvB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../src/lib/util.ts"],"names":[],"mappings":";;AAIA,wBAIC;AAED,oDAGC;AAED,sCAEC;AAbD,SAAgB,MAAM,CAAC,CAAS,EAAE,CAAS;IACzC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACtB,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACvB,CAAC;AAED,SAAgB,oBAAoB,CAAI,MAAmB;IACzD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAU,MAAM,CAAC,CAAA;IACpC,OAAO,CAAC,KAAc,EAAc,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AACvD,CAAC;AAED,SAAgB,aAAa,CAAI,KAAQ;IACvC,OAAO,KAAK,IAAI,IAAI,CAAA;AACtB,CAAC"}

package/dist/scope-permissions-transition.d.ts

@@ -0,0 +1,15 @@
+import { AccountPermissionMatch, BlobPermissionMatch, RepoPermissionMatch, RpcPermissionMatch, ScopePermissions } from './scope-permissions.js';
+/**
+ * Overrides the default permission set to allow transitional scopes to be used
+ * in place of the generic scopes.
+ */
+export declare class ScopePermissionsTransition extends ScopePermissions {
+    get hasTransitionGeneric(): boolean;
+    get hasTransitionEmail(): boolean;
+    get hasTransitionChatBsky(): boolean;
+    allowsAccount(options: AccountPermissionMatch): boolean;
+    allowsBlob(options: BlobPermissionMatch): boolean;
+    allowsRepo(options: RepoPermissionMatch): boolean;
+    allowsRpc(options: RpcPermissionMatch): boolean;
+}
+//# sourceMappingURL=scope-permissions-transition.d.ts.map

package/dist/scope-permissions-transition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-permissions-transition.d.ts","sourceRoot":"","sources":["../src/scope-permissions-transition.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,wBAAwB,CAAA;AAE/B;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,gBAAgB;IAC9D,IAAI,oBAAoB,IAAI,OAAO,CAElC;IAED,IAAI,kBAAkB,IAAI,OAAO,CAEhC;IAED,IAAI,qBAAqB,IAAI,OAAO,CAEnC;IAEQ,aAAa,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO;IAYvD,UAAU,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO;IAQjD,UAAU,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO;IAQjD,SAAS,CAAC,OAAO,EAAE,kBAAkB;CAiB/C"}

package/dist/{permission-set-transition.js → scope-permissions-transition.js}

@@ -1,12 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PermissionSetTransition = void 0;
-const permission_set_js_1 = require("./permission-set.js");
+exports.ScopePermissionsTransition = void 0;
+const scope_permissions_js_1 = require("./scope-permissions.js");
 /**
  * Overrides the default permission set to allow transitional scopes to be used
  * in place of the generic scopes.
  */
-class PermissionSetTransition extends permission_set_js_1.PermissionSet {
+class ScopePermissionsTransition extends scope_permissions_js_1.ScopePermissions {
     get hasTransitionGeneric() {
         return this.scopes.has('transition:generic');
     }
@@ -50,5 +50,5 @@ class PermissionSetTransition extends permission_set_js_1.PermissionSet {
         return super.allowsRpc(options);
     }
 }
-exports.PermissionSetTransition = PermissionSetTransition;
-//# sourceMappingURL=permission-set-transition.js.map
+exports.ScopePermissionsTransition = ScopePermissionsTransition;
+//# sourceMappingURL=scope-permissions-transition.js.map

package/dist/scope-permissions-transition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-permissions-transition.js","sourceRoot":"","sources":["../src/scope-permissions-transition.ts"],"names":[],"mappings":";;;AAAA,iEAM+B;AAE/B;;;GAGG;AACH,MAAa,0BAA2B,SAAQ,uCAAgB;IAC9D,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;IAC9C,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;IAC5C,CAAC;IAED,IAAI,qBAAqB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;IAChD,CAAC;IAEQ,aAAa,CAAC,OAA+B;QACpD,IACE,OAAO,CAAC,IAAI,KAAK,OAAO;YACxB,OAAO,CAAC,MAAM,KAAK,MAAM;YACzB,IAAI,CAAC,kBAAkB,EACvB,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IACrC,CAAC;IAEQ,UAAU,CAAC,OAA4B;QAC9C,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAEQ,UAAU,CAAC,OAA4B;QAC9C,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAEQ,SAAS,CAAC,OAA2B;QAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAA;QAEvB,IAAI,IAAI,CAAC,oBAAoB,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,IAAI,CAAC,oBAAoB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACjC,CAAC;CACF;AA1DD,gEA0DC"}

package/dist/scope-permissions.d.ts

@@ -0,0 +1,22 @@
+import { AccountPermissionMatch } from './scopes/account-permission.js';
+import { BlobPermissionMatch } from './scopes/blob-permission.js';
+import { IdentityPermissionMatch } from './scopes/identity-permission.js';
+import { RepoPermissionMatch } from './scopes/repo-permission.js';
+import { RpcPermissionMatch } from './scopes/rpc-permission.js';
+import { ScopesSet } from './scopes-set.js';
+export type { AccountPermissionMatch, BlobPermissionMatch, IdentityPermissionMatch, RepoPermissionMatch, RpcPermissionMatch, };
+export declare class ScopePermissions {
+    readonly scopes: ScopesSet;
+    constructor(scope?: null | string | Iterable<string>);
+    allowsAccount(options: AccountPermissionMatch): boolean;
+    assertAccount(options: AccountPermissionMatch): void;
+    allowsIdentity(options: IdentityPermissionMatch): boolean;
+    assertIdentity(options: IdentityPermissionMatch): void;
+    allowsBlob(options: BlobPermissionMatch): boolean;
+    assertBlob(options: BlobPermissionMatch): void;
+    allowsRepo(options: RepoPermissionMatch): boolean;
+    assertRepo(options: RepoPermissionMatch): void;
+    allowsRpc(options: RpcPermissionMatch): boolean;
+    assertRpc(options: RpcPermissionMatch): void;
+}
+//# sourceMappingURL=scope-permissions.d.ts.map

package/dist/scope-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-permissions.d.ts","sourceRoot":"","sources":["../src/scope-permissions.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,sBAAsB,EACvB,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAEL,mBAAmB,EACpB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAEL,uBAAuB,EACxB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EAEL,mBAAmB,EACpB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAiB,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,YAAY,EACV,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,GACnB,CAAA;AAED,qBAAa,gBAAgB;IAC3B,SAAgB,MAAM,EAAE,SAAS,CAAA;gBAErB,KAAK,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAU7C,aAAa,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO;IAGvD,aAAa,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI;IAOpD,cAAc,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO;IAGzD,cAAc,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI;IAOtD,UAAU,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO;IAGjD,UAAU,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI;IAO9C,UAAU,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO;IAGjD,UAAU,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI;IAO9C,SAAS,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO;IAG/C,SAAS,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI;CAMpD"}

package/dist/{permission-set.js → scope-permissions.js}

@@ -1,29 +1,33 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PermissionSet = void 0;
-const account_scope_js_1 = require("./resources/account-scope.js");
-const blob_scope_js_1 = require("./resources/blob-scope.js");
-const identity_scope_js_1 = require("./resources/identity-scope.js");
-const repo_scope_js_1 = require("./resources/repo-scope.js");
-const rpc_scope_js_1 = require("./resources/rpc-scope.js");
+exports.ScopePermissions = void 0;
 const scope_missing_error_js_1 = require("./scope-missing-error.js");
+const account_permission_js_1 = require("./scopes/account-permission.js");
+const blob_permission_js_1 = require("./scopes/blob-permission.js");
+const identity_permission_js_1 = require("./scopes/identity-permission.js");
+const repo_permission_js_1 = require("./scopes/repo-permission.js");
+const rpc_permission_js_1 = require("./scopes/rpc-permission.js");
 const scopes_set_js_1 = require("./scopes-set.js");
-class PermissionSet {
-    constructor(scopes) {
+class ScopePermissions {
+    constructor(scope) {
         Object.defineProperty(this, "scopes", {
             enumerable: true,
             configurable: true,
             writable: true,
             value: void 0
         });
-        this.scopes = new scopes_set_js_1.ScopesSet(typeof scopes === 'string' ? scopes.split(' ') : scopes);
+        this.scopes = new scopes_set_js_1.ScopesSet(!scope // "" | null | undefined
+            ? undefined
+            : typeof scope === 'string'
+                ? scope.split(' ')
+                : scope);
     }
     allowsAccount(options) {
         return this.scopes.matches('account', options);
     }
     assertAccount(options) {
         if (!this.allowsAccount(options)) {
-            const scope = account_scope_js_1.AccountScope.scopeNeededFor(options);
+            const scope = account_permission_js_1.AccountPermission.scopeNeededFor(options);
             throw new scope_missing_error_js_1.ScopeMissingError(scope);
         }
     }
@@ -32,7 +36,7 @@ class PermissionSet {
     }
     assertIdentity(options) {
         if (!this.allowsIdentity(options)) {
-            const scope = identity_scope_js_1.IdentityScope.scopeNeededFor(options);
+            const scope = identity_permission_js_1.IdentityPermission.scopeNeededFor(options);
             throw new scope_missing_error_js_1.ScopeMissingError(scope);
         }
     }
@@ -41,7 +45,7 @@ class PermissionSet {
     }
     assertBlob(options) {
         if (!this.allowsBlob(options)) {
-            const scope = blob_scope_js_1.BlobScope.scopeNeededFor(options);
+            const scope = blob_permission_js_1.BlobPermission.scopeNeededFor(options);
             throw new scope_missing_error_js_1.ScopeMissingError(scope);
         }
     }
@@ -50,7 +54,7 @@ class PermissionSet {
     }
     assertRepo(options) {
         if (!this.allowsRepo(options)) {
-            const scope = repo_scope_js_1.RepoScope.scopeNeededFor(options);
+            const scope = repo_permission_js_1.RepoPermission.scopeNeededFor(options);
             throw new scope_missing_error_js_1.ScopeMissingError(scope);
         }
     }
@@ -59,10 +63,10 @@ class PermissionSet {
     }
     assertRpc(options) {
         if (!this.allowsRpc(options)) {
-            const scope = rpc_scope_js_1.RpcScope.scopeNeededFor(options);
+            const scope = rpc_permission_js_1.RpcPermission.scopeNeededFor(options);
             throw new scope_missing_error_js_1.ScopeMissingError(scope);
         }
     }
 }
-exports.PermissionSet = PermissionSet;
-//# sourceMappingURL=permission-set.js.map
+exports.ScopePermissions = ScopePermissions;
+//# sourceMappingURL=scope-permissions.js.map

package/dist/scope-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-permissions.js","sourceRoot":"","sources":["../src/scope-permissions.ts"],"names":[],"mappings":";;;AAAA,qEAA4D;AAC5D,0EAGuC;AACvC,oEAGoC;AACpC,4EAGwC;AACxC,oEAGoC;AACpC,kEAA8E;AAC9E,mDAA2C;AAU3C,MAAa,gBAAgB;IAG3B,YAAY,KAAwC;QAFpC;;;;;WAAiB;QAG/B,IAAI,CAAC,MAAM,GAAG,IAAI,yBAAS,CACzB,CAAC,KAAK,CAAC,wBAAwB;YAC7B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;gBACzB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;gBAClB,CAAC,CAAC,KAAK,CACZ,CAAA;IACH,CAAC;IAEM,aAAa,CAAC,OAA+B;QAClD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IAChD,CAAC;IACM,aAAa,CAAC,OAA+B;QAClD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,yCAAiB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACvD,MAAM,IAAI,0CAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAEM,cAAc,CAAC,OAAgC;QACpD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IACjD,CAAC;IACM,cAAc,CAAC,OAAgC;QACpD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,2CAAkB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACxD,MAAM,IAAI,0CAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAEM,UAAU,CAAC,OAA4B;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7C,CAAC;IACM,UAAU,CAAC,OAA4B;QAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,mCAAc,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACpD,MAAM,IAAI,0CAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAEM,UAAU,CAAC,OAA4B;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7C,CAAC;IACM,UAAU,CAAC,OAA4B;QAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,mCAAc,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACpD,MAAM,IAAI,0CAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAEM,SAAS,CAAC,OAA2B;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC5C,CAAC;IACM,SAAS,CAAC,OAA2B;QAC1C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,iCAAa,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACnD,MAAM,IAAI,0CAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;CACF;AA9DD,4CA8DC"}

package/dist/scopes/account-permission.d.ts

@@ -0,0 +1,35 @@
+import { Parser } from '../lib/parser.js';
+import { ResourcePermission } from '../lib/resource-permission.js';
+import { ScopeSyntax } from '../lib/syntax.js';
+export declare const ACCOUNT_ATTRIBUTES: readonly ["email", "repo", "status"];
+export type AccountAttribute = (typeof ACCOUNT_ATTRIBUTES)[number];
+export declare const ACCOUNT_ACTIONS: readonly ["read", "manage"];
+export type AccountAction = (typeof ACCOUNT_ACTIONS)[number];
+export type AccountPermissionMatch = {
+    attr: AccountAttribute;
+    action: AccountAction;
+};
+export declare class AccountPermission implements ResourcePermission<'account', AccountPermissionMatch> {
+    readonly attr: AccountAttribute;
+    readonly action: AccountAction;
+    constructor(attr: AccountAttribute, action: AccountAction);
+    matches(options: AccountPermissionMatch): boolean;
+    toString(): import("../lib/syntax.js").ScopeStringFor<"account">;
+    protected static readonly parser: Parser<"account", {
+        attr: {
+            multiple: false;
+            required: true;
+            validate: (value: unknown) => value is "email" | "repo" | "status";
+        };
+        action: {
+            multiple: false;
+            required: false;
+            validate: (value: unknown) => value is "read" | "manage";
+            default: "read";
+        };
+    }>;
+    static fromString(scope: string): AccountPermission | null;
+    static fromSyntax(syntax: ScopeSyntax<'account'>): AccountPermission | null;
+    static scopeNeededFor(options: AccountPermissionMatch): import("../lib/syntax.js").ScopeStringFor<"account">;
+}
+//# sourceMappingURL=account-permission.d.ts.map

package/dist/scopes/account-permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-permission.d.ts","sourceRoot":"","sources":["../../src/scopes/account-permission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAElE,OAAO,EAAE,WAAW,EAAoB,MAAM,kBAAkB,CAAA;AAGhE,eAAO,MAAM,kBAAkB,sCAIpB,CAAA;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AAElE,eAAO,MAAM,eAAe,6BAA6C,CAAA;AACzE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAA;AAE5D,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,gBAAgB,CAAA;IACtB,MAAM,EAAE,aAAa,CAAA;CACtB,CAAA;AAED,qBAAa,iBACX,YAAW,kBAAkB,CAAC,SAAS,EAAE,sBAAsB,CAAC;aAG9C,IAAI,EAAE,gBAAgB;aACtB,MAAM,EAAE,aAAa;gBADrB,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,aAAa;IAGvC,OAAO,CAAC,OAAO,EAAE,sBAAsB;IAOvC,QAAQ;IAIR,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM;;;;;;;;;;;;OAgB/B;IAED,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM;IAM/B,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,SAAS,CAAC;IAOhD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sBAAsB;CAGtD"}

package/dist/scopes/account-permission.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccountPermission = exports.ACCOUNT_ACTIONS = exports.ACCOUNT_ATTRIBUTES = void 0;
+const parser_js_1 = require("../lib/parser.js");
+const syntax_string_js_1 = require("../lib/syntax-string.js");
+const syntax_js_1 = require("../lib/syntax.js");
+const util_js_1 = require("../lib/util.js");
+exports.ACCOUNT_ATTRIBUTES = Object.freeze([
+    'email',
+    'repo',
+    'status',
+]);
+exports.ACCOUNT_ACTIONS = Object.freeze(['read', 'manage']);
+class AccountPermission {
+    constructor(attr, action) {
+        Object.defineProperty(this, "attr", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: attr
+        });
+        Object.defineProperty(this, "action", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: action
+        });
+    }
+    matches(options) {
+        return (this.attr === options.attr &&
+            (this.action === 'manage' || this.action === options.action));
+    }
+    toString() {
+        return AccountPermission.parser.format(this);
+    }
+    static fromString(scope) {
+        if (!(0, syntax_js_1.isScopeStringFor)(scope, 'account'))
+            return null;
+        const syntax = syntax_string_js_1.ScopeStringSyntax.fromString(scope);
+        return AccountPermission.fromSyntax(syntax);
+    }
+    static fromSyntax(syntax) {
+        const result = AccountPermission.parser.parse(syntax);
+        if (!result)
+            return null;
+        return new AccountPermission(result.attr, result.action);
+    }
+    static scopeNeededFor(options) {
+        return AccountPermission.parser.format(options);
+    }
+}
+exports.AccountPermission = AccountPermission;
+Object.defineProperty(AccountPermission, "parser", {
+    enumerable: true,
+    configurable: true,
+    writable: true,
+    value: new parser_js_1.Parser('account', {
+        attr: {
+            multiple: false,
+            required: true,
+            validate: (0, util_js_1.knownValuesValidator)(exports.ACCOUNT_ATTRIBUTES),
+        },
+        action: {
+            multiple: false,
+            required: false,
+            validate: (0, util_js_1.knownValuesValidator)(exports.ACCOUNT_ACTIONS),
+            default: 'read',
+        },
+    }, 'attr')
+});
+//# sourceMappingURL=account-permission.js.map

package/dist/scopes/account-permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-permission.js","sourceRoot":"","sources":["../../src/scopes/account-permission.ts"],"names":[],"mappings":";;;AAAA,gDAAyC;AAEzC,8DAA2D;AAC3D,gDAAgE;AAChE,4CAAqD;AAExC,QAAA,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,OAAO;IACP,MAAM;IACN,QAAQ;CACA,CAAC,CAAA;AAGE,QAAA,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAU,CAAC,CAAA;AAQzE,MAAa,iBAAiB;IAG5B,YACkB,IAAsB,EACtB,MAAqB;QADrC;;;;mBAAgB,IAAI;WAAkB;QACtC;;;;mBAAgB,MAAM;WAAe;IACpC,CAAC;IAEJ,OAAO,CAAC,OAA+B;QACrC,OAAO,CACL,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;YAC1B,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAC7D,CAAA;IACH,CAAC;IAED,QAAQ;QACN,OAAO,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC9C,CAAC;IAoBD,MAAM,CAAC,UAAU,CAAC,KAAa;QAC7B,IAAI,CAAC,IAAA,4BAAgB,EAAC,KAAK,EAAE,SAAS,CAAC;YAAE,OAAO,IAAI,CAAA;QACpD,MAAM,MAAM,GAAG,oCAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QAClD,OAAO,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAC7C,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,MAA8B;QAC9C,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QAExB,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAC1D,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,OAA+B;QACnD,OAAO,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACjD,CAAC;;AApDH,8CAqDC;AAlC2B;;;;WAAS,IAAI,kBAAM,CAC3C,SAAS,EACT;QACE,IAAI,EAAE;YACJ,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,IAAA,8BAAoB,EAAC,0BAAkB,CAAC;SACnD;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAA,8BAAoB,EAAC,uBAAe,CAAC;YAC/C,OAAO,EAAE,MAAe;SACzB;KACF,EACD,MAAM,CACP;EAhB+B,CAgB/B"}

package/dist/scopes/blob-permission.d.ts

@@ -0,0 +1,27 @@
+import { Accept, isAccept } from '../lib/mime.js';
+import { Parser } from '../lib/parser.js';
+import { ResourcePermission } from '../lib/resource-permission.js';
+import { NeArray, NeRoArray, ParamValue, ScopeSyntax } from '../lib/syntax.js';
+export { type Accept };
+export declare const DEFAULT_ACCEPT: readonly ["*/*"];
+export type BlobPermissionMatch = {
+    mime: string;
+};
+export declare class BlobPermission implements ResourcePermission<'blob', BlobPermissionMatch> {
+    readonly accept: NeRoArray<Accept>;
+    constructor(accept: NeRoArray<Accept>);
+    matches(options: BlobPermissionMatch): boolean;
+    toString(): import("../lib/syntax.js").ScopeStringFor<"blob">;
+    protected static readonly parser: Parser<"blob", {
+        accept: {
+            multiple: true;
+            required: true;
+            validate: typeof isAccept;
+            normalize: (value: NeRoArray<ParamValue>) => readonly ["*/*"] | NeArray<Accept>;
+        };
+    }>;
+    static fromString(scope: string): BlobPermission | null;
+    static fromSyntax(syntax: ScopeSyntax<'blob'>): BlobPermission | null;
+    static scopeNeededFor(options: BlobPermissionMatch): import("../lib/syntax.js").ScopeStringFor<"blob">;
+}
+//# sourceMappingURL=blob-permission.d.ts.map

package/dist/scopes/blob-permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-permission.d.ts","sourceRoot":"","sources":["../../src/scopes/blob-permission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAoB,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAElE,OAAO,EACL,OAAO,EACP,SAAS,EACT,UAAU,EACV,WAAW,EAEZ,MAAM,kBAAkB,CAAA;AAEzB,OAAO,EAAE,KAAK,MAAM,EAAE,CAAA;AAEtB,eAAO,MAAM,cAAc,kBAAkC,CAAA;AAE7D,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,qBAAa,cACX,YAAW,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,CAAC;aAE9B,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC;gBAAzB,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC;IAErD,OAAO,CAAC,OAAO,EAAE,mBAAmB;IAIpC,QAAQ;IAIR,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM;;;;;;;OAmB/B;IAED,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM;IAM/B,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC;IAO7C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,mBAAmB;CAKnD"}