@atproto/oauth-scopes 0.3.1 → 0.4.0-next.0

package/dist/scope-missing-error.js

@@ -1,39 +1,15 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ScopeMissingError = void 0;
-class ScopeMissingError extends Error {
+export class ScopeMissingError extends Error {
     get statusCode() {
         return this.status;
     }
     constructor(scope) {
         super(`Missing required scope "${scope}"`);
-        Object.defineProperty(this, "scope", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: scope
-        });
-        Object.defineProperty(this, "name", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: 'ScopeMissingError'
-        });
+        this.scope = scope;
+        this.name = 'ScopeMissingError';
         // compatibility layer with http-errors package. The goal if to make
         // isHttpError(new ScopeMissingError) return true.
-        Object.defineProperty(this, "status", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: 403
-        });
-        Object.defineProperty(this, "expose", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: true
-        });
+        this.status = 403;
+        this.expose = true;
     }
 }
-exports.ScopeMissingError = ScopeMissingError;
 //# sourceMappingURL=scope-missing-error.js.map

package/dist/scope-missing-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-missing-error.js","sourceRoot":"","sources":["../src/scope-missing-error.ts"],"names":[],"mappings":";;;AAAA,MAAa,iBAAkB,SAAQ,KAAK;IAO1C,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED,YAA4B,KAAa;QACvC,KAAK,CAAC,2BAA2B,KAAK,GAAG,CAAC,CAAA;QADhC;;;;mBAAgB,KAAK;WAAQ;QAVzC;;;;mBAAO,mBAAmB;WAAA;QAE1B,oEAAoE;QACpE,kDAAkD;QAClD;;;;mBAAS,GAAG;WAAA;QACZ;;;;mBAAS,IAAI;WAAA;IAOb,CAAC;CACF;AAdD,8CAcC","sourcesContent":["export class ScopeMissingError extends Error {\n  name = 'ScopeMissingError'\n\n  // compatibility layer with http-errors package. The goal if to make\n  // isHttpError(new ScopeMissingError) return true.\n  status = 403\n  expose = true\n  get statusCode() {\n    return this.status\n  }\n\n  constructor(public readonly scope: string) {\n    super(`Missing required scope \"${scope}\"`)\n  }\n}\n"]}
+{"version":3,"file":"scope-missing-error.js","sourceRoot":"","sources":["../src/scope-missing-error.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAO1C,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED,YAA4B,KAAa;QACvC,KAAK,CAAC,2BAA2B,KAAK,GAAG,CAAC,CAAA;QADhB,UAAK,GAAL,KAAK,CAAQ;QAVzC,SAAI,GAAG,mBAAmB,CAAA;QAE1B,oEAAoE;QACpE,kDAAkD;QAClD,WAAM,GAAG,GAAG,CAAA;QACZ,WAAM,GAAG,IAAI,CAAA;IAOb,CAAC;CACF","sourcesContent":["export class ScopeMissingError extends Error {\n  name = 'ScopeMissingError'\n\n  // compatibility layer with http-errors package. The goal if to make\n  // isHttpError(new ScopeMissingError) return true.\n  status = 403\n  expose = true\n  get statusCode() {\n    return this.status\n  }\n\n  constructor(public readonly scope: string) {\n    super(`Missing required scope \"${scope}\"`)\n  }\n}\n"]}

package/dist/scope-permissions-transition.js

@@ -1,12 +1,9 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ScopePermissionsTransition = void 0;
-const scope_permissions_js_1 = require("./scope-permissions.js");
+import { ScopePermissions, } from './scope-permissions.js';
 /**
  * Overrides the default permission set to allow transitional scopes to be used
  * in place of the generic scopes.
  */
-class ScopePermissionsTransition extends scope_permissions_js_1.ScopePermissions {
+export class ScopePermissionsTransition extends ScopePermissions {
     get hasTransitionGeneric() {
         return this.scopes.has('transition:generic');
     }
@@ -50,5 +47,4 @@ class ScopePermissionsTransition extends scope_permissions_js_1.ScopePermissions
         return super.allowsRpc(options);
     }
 }
-exports.ScopePermissionsTransition = ScopePermissionsTransition;
 //# sourceMappingURL=scope-permissions-transition.js.map

package/dist/scope-permissions-transition.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-permissions-transition.js","sourceRoot":"","sources":["../src/scope-permissions-transition.ts"],"names":[],"mappings":";;;AAAA,iEAM+B;AAE/B;;;GAGG;AACH,MAAa,0BAA2B,SAAQ,uCAAgB;IAC9D,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;IAC9C,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;IAC5C,CAAC;IAED,IAAI,qBAAqB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;IAChD,CAAC;IAEQ,aAAa,CAAC,OAA+B;QACpD,IACE,OAAO,CAAC,IAAI,KAAK,OAAO;YACxB,OAAO,CAAC,MAAM,KAAK,MAAM;YACzB,IAAI,CAAC,kBAAkB,EACvB,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IACrC,CAAC;IAEQ,UAAU,CAAC,OAA4B;QAC9C,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAEQ,UAAU,CAAC,OAA4B;QAC9C,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAEQ,SAAS,CAAC,OAA2B;QAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAA;QAEvB,IAAI,IAAI,CAAC,oBAAoB,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,IAAI,CAAC,oBAAoB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACjC,CAAC;CACF;AA1DD,gEA0DC","sourcesContent":["import {\n  AccountPermissionMatch,\n  BlobPermissionMatch,\n  RepoPermissionMatch,\n  RpcPermissionMatch,\n  ScopePermissions,\n} from './scope-permissions.js'\n\n/**\n * Overrides the default permission set to allow transitional scopes to be used\n * in place of the generic scopes.\n */\nexport class ScopePermissionsTransition extends ScopePermissions {\n  get hasTransitionGeneric(): boolean {\n    return this.scopes.has('transition:generic')\n  }\n\n  get hasTransitionEmail(): boolean {\n    return this.scopes.has('transition:email')\n  }\n\n  get hasTransitionChatBsky(): boolean {\n    return this.scopes.has('transition:chat.bsky')\n  }\n\n  override allowsAccount(options: AccountPermissionMatch): boolean {\n    if (\n      options.attr === 'email' &&\n      options.action === 'read' &&\n      this.hasTransitionEmail\n    ) {\n      return true\n    }\n\n    return super.allowsAccount(options)\n  }\n\n  override allowsBlob(options: BlobPermissionMatch): boolean {\n    if (this.hasTransitionGeneric) {\n      return true\n    }\n\n    return super.allowsBlob(options)\n  }\n\n  override allowsRepo(options: RepoPermissionMatch): boolean {\n    if (this.hasTransitionGeneric) {\n      return true\n    }\n\n    return super.allowsRepo(options)\n  }\n\n  override allowsRpc(options: RpcPermissionMatch) {\n    const { lxm } = options\n\n    if (this.hasTransitionGeneric && lxm === '*') {\n      return true\n    }\n\n    if (this.hasTransitionGeneric && !lxm.startsWith('chat.bsky.')) {\n      return true\n    }\n\n    if (this.hasTransitionChatBsky && lxm.startsWith('chat.bsky.')) {\n      return true\n    }\n\n    return super.allowsRpc(options)\n  }\n}\n"]}
+{"version":3,"file":"scope-permissions-transition.js","sourceRoot":"","sources":["../src/scope-permissions-transition.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,gBAAgB,GACjB,MAAM,wBAAwB,CAAA;AAE/B;;;GAGG;AACH,MAAM,OAAO,0BAA2B,SAAQ,gBAAgB;IAC9D,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;IAC9C,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;IAC5C,CAAC;IAED,IAAI,qBAAqB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;IAChD,CAAC;IAEQ,aAAa,CAAC,OAA+B;QACpD,IACE,OAAO,CAAC,IAAI,KAAK,OAAO;YACxB,OAAO,CAAC,MAAM,KAAK,MAAM;YACzB,IAAI,CAAC,kBAAkB,EACvB,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IACrC,CAAC;IAEQ,UAAU,CAAC,OAA4B;QAC9C,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAEQ,UAAU,CAAC,OAA4B;QAC9C,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAEQ,SAAS,CAAC,OAA2B;QAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAA;QAEvB,IAAI,IAAI,CAAC,oBAAoB,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,IAAI,CAAC,oBAAoB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACjC,CAAC;CACF","sourcesContent":["import {\n  AccountPermissionMatch,\n  BlobPermissionMatch,\n  RepoPermissionMatch,\n  RpcPermissionMatch,\n  ScopePermissions,\n} from './scope-permissions.js'\n\n/**\n * Overrides the default permission set to allow transitional scopes to be used\n * in place of the generic scopes.\n */\nexport class ScopePermissionsTransition extends ScopePermissions {\n  get hasTransitionGeneric(): boolean {\n    return this.scopes.has('transition:generic')\n  }\n\n  get hasTransitionEmail(): boolean {\n    return this.scopes.has('transition:email')\n  }\n\n  get hasTransitionChatBsky(): boolean {\n    return this.scopes.has('transition:chat.bsky')\n  }\n\n  override allowsAccount(options: AccountPermissionMatch): boolean {\n    if (\n      options.attr === 'email' &&\n      options.action === 'read' &&\n      this.hasTransitionEmail\n    ) {\n      return true\n    }\n\n    return super.allowsAccount(options)\n  }\n\n  override allowsBlob(options: BlobPermissionMatch): boolean {\n    if (this.hasTransitionGeneric) {\n      return true\n    }\n\n    return super.allowsBlob(options)\n  }\n\n  override allowsRepo(options: RepoPermissionMatch): boolean {\n    if (this.hasTransitionGeneric) {\n      return true\n    }\n\n    return super.allowsRepo(options)\n  }\n\n  override allowsRpc(options: RpcPermissionMatch) {\n    const { lxm } = options\n\n    if (this.hasTransitionGeneric && lxm === '*') {\n      return true\n    }\n\n    if (this.hasTransitionGeneric && !lxm.startsWith('chat.bsky.')) {\n      return true\n    }\n\n    if (this.hasTransitionChatBsky && lxm.startsWith('chat.bsky.')) {\n      return true\n    }\n\n    return super.allowsRpc(options)\n  }\n}\n"]}

package/dist/scope-permissions.js

@@ -1,22 +1,13 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ScopePermissions = void 0;
-const scope_missing_error_js_1 = require("./scope-missing-error.js");
-const account_permission_js_1 = require("./scopes/account-permission.js");
-const blob_permission_js_1 = require("./scopes/blob-permission.js");
-const identity_permission_js_1 = require("./scopes/identity-permission.js");
-const repo_permission_js_1 = require("./scopes/repo-permission.js");
-const rpc_permission_js_1 = require("./scopes/rpc-permission.js");
-const scopes_set_js_1 = require("./scopes-set.js");
-class ScopePermissions {
+import { ScopeMissingError } from './scope-missing-error.js';
+import { AccountPermission, } from './scopes/account-permission.js';
+import { BlobPermission, } from './scopes/blob-permission.js';
+import { IdentityPermission, } from './scopes/identity-permission.js';
+import { RepoPermission, } from './scopes/repo-permission.js';
+import { RpcPermission } from './scopes/rpc-permission.js';
+import { ScopesSet } from './scopes-set.js';
+export class ScopePermissions {
     constructor(scope) {
-        Object.defineProperty(this, "scopes", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: void 0
-        });
-        this.scopes = new scopes_set_js_1.ScopesSet(!scope // "" | null | undefined
+        this.scopes = new ScopesSet(!scope // "" | null | undefined
             ? undefined
             : typeof scope === 'string'
                 ? scope.split(' ')
@@ -27,8 +18,8 @@ class ScopePermissions {
     }
     assertAccount(options) {
         if (!this.allowsAccount(options)) {
-            const scope = account_permission_js_1.AccountPermission.scopeNeededFor(options);
-            throw new scope_missing_error_js_1.ScopeMissingError(scope);
+            const scope = AccountPermission.scopeNeededFor(options);
+            throw new ScopeMissingError(scope);
         }
     }
     allowsIdentity(options) {
@@ -36,8 +27,8 @@ class ScopePermissions {
     }
     assertIdentity(options) {
         if (!this.allowsIdentity(options)) {
-            const scope = identity_permission_js_1.IdentityPermission.scopeNeededFor(options);
-            throw new scope_missing_error_js_1.ScopeMissingError(scope);
+            const scope = IdentityPermission.scopeNeededFor(options);
+            throw new ScopeMissingError(scope);
         }
     }
     allowsBlob(options) {
@@ -45,8 +36,8 @@ class ScopePermissions {
     }
     assertBlob(options) {
         if (!this.allowsBlob(options)) {
-            const scope = blob_permission_js_1.BlobPermission.scopeNeededFor(options);
-            throw new scope_missing_error_js_1.ScopeMissingError(scope);
+            const scope = BlobPermission.scopeNeededFor(options);
+            throw new ScopeMissingError(scope);
         }
     }
     allowsRepo(options) {
@@ -54,8 +45,8 @@ class ScopePermissions {
     }
     assertRepo(options) {
         if (!this.allowsRepo(options)) {
-            const scope = repo_permission_js_1.RepoPermission.scopeNeededFor(options);
-            throw new scope_missing_error_js_1.ScopeMissingError(scope);
+            const scope = RepoPermission.scopeNeededFor(options);
+            throw new ScopeMissingError(scope);
         }
     }
     allowsRpc(options) {
@@ -63,10 +54,9 @@ class ScopePermissions {
     }
     assertRpc(options) {
         if (!this.allowsRpc(options)) {
-            const scope = rpc_permission_js_1.RpcPermission.scopeNeededFor(options);
-            throw new scope_missing_error_js_1.ScopeMissingError(scope);
+            const scope = RpcPermission.scopeNeededFor(options);
+            throw new ScopeMissingError(scope);
         }
     }
 }
-exports.ScopePermissions = ScopePermissions;
 //# sourceMappingURL=scope-permissions.js.map

package/dist/scope-permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-permissions.js","sourceRoot":"","sources":["../src/scope-permissions.ts"],"names":[],"mappings":";;;AAAA,qEAA4D;AAC5D,0EAGuC;AACvC,oEAGoC;AACpC,4EAGwC;AACxC,oEAGoC;AACpC,kEAA8E;AAC9E,mDAA2C;AAU3C,MAAa,gBAAgB;IAG3B,YAAY,KAAwC;QAFpC;;;;;WAAiB;QAG/B,IAAI,CAAC,MAAM,GAAG,IAAI,yBAAS,CACzB,CAAC,KAAK,CAAC,wBAAwB;YAC7B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;gBACzB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;gBAClB,CAAC,CAAC,KAAK,CACZ,CAAA;IACH,CAAC;IAEM,aAAa,CAAC,OAA+B;QAClD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IAChD,CAAC;IACM,aAAa,CAAC,OAA+B;QAClD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,yCAAiB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACvD,MAAM,IAAI,0CAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAEM,cAAc,CAAC,OAAgC;QACpD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IACjD,CAAC;IACM,cAAc,CAAC,OAAgC;QACpD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,2CAAkB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACxD,MAAM,IAAI,0CAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAEM,UAAU,CAAC,OAA4B;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7C,CAAC;IACM,UAAU,CAAC,OAA4B;QAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,mCAAc,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACpD,MAAM,IAAI,0CAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAEM,UAAU,CAAC,OAA4B;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7C,CAAC;IACM,UAAU,CAAC,OAA4B;QAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,mCAAc,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACpD,MAAM,IAAI,0CAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAEM,SAAS,CAAC,OAA2B;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC5C,CAAC;IACM,SAAS,CAAC,OAA2B;QAC1C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,iCAAa,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACnD,MAAM,IAAI,0CAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;CACF;AA9DD,4CA8DC","sourcesContent":["import { ScopeMissingError } from './scope-missing-error.js'\nimport {\n  AccountPermission,\n  AccountPermissionMatch,\n} from './scopes/account-permission.js'\nimport {\n  BlobPermission,\n  BlobPermissionMatch,\n} from './scopes/blob-permission.js'\nimport {\n  IdentityPermission,\n  IdentityPermissionMatch,\n} from './scopes/identity-permission.js'\nimport {\n  RepoPermission,\n  RepoPermissionMatch,\n} from './scopes/repo-permission.js'\nimport { RpcPermission, RpcPermissionMatch } from './scopes/rpc-permission.js'\nimport { ScopesSet } from './scopes-set.js'\n\nexport type {\n  AccountPermissionMatch,\n  BlobPermissionMatch,\n  IdentityPermissionMatch,\n  RepoPermissionMatch,\n  RpcPermissionMatch,\n}\n\nexport class ScopePermissions {\n  public readonly scopes: ScopesSet\n\n  constructor(scope?: null | string | Iterable<string>) {\n    this.scopes = new ScopesSet(\n      !scope // \"\" | null | undefined\n        ? undefined\n        : typeof scope === 'string'\n          ? scope.split(' ')\n          : scope,\n    )\n  }\n\n  public allowsAccount(options: AccountPermissionMatch): boolean {\n    return this.scopes.matches('account', options)\n  }\n  public assertAccount(options: AccountPermissionMatch): void {\n    if (!this.allowsAccount(options)) {\n      const scope = AccountPermission.scopeNeededFor(options)\n      throw new ScopeMissingError(scope)\n    }\n  }\n\n  public allowsIdentity(options: IdentityPermissionMatch): boolean {\n    return this.scopes.matches('identity', options)\n  }\n  public assertIdentity(options: IdentityPermissionMatch): void {\n    if (!this.allowsIdentity(options)) {\n      const scope = IdentityPermission.scopeNeededFor(options)\n      throw new ScopeMissingError(scope)\n    }\n  }\n\n  public allowsBlob(options: BlobPermissionMatch): boolean {\n    return this.scopes.matches('blob', options)\n  }\n  public assertBlob(options: BlobPermissionMatch): void {\n    if (!this.allowsBlob(options)) {\n      const scope = BlobPermission.scopeNeededFor(options)\n      throw new ScopeMissingError(scope)\n    }\n  }\n\n  public allowsRepo(options: RepoPermissionMatch): boolean {\n    return this.scopes.matches('repo', options)\n  }\n  public assertRepo(options: RepoPermissionMatch): void {\n    if (!this.allowsRepo(options)) {\n      const scope = RepoPermission.scopeNeededFor(options)\n      throw new ScopeMissingError(scope)\n    }\n  }\n\n  public allowsRpc(options: RpcPermissionMatch): boolean {\n    return this.scopes.matches('rpc', options)\n  }\n  public assertRpc(options: RpcPermissionMatch): void {\n    if (!this.allowsRpc(options)) {\n      const scope = RpcPermission.scopeNeededFor(options)\n      throw new ScopeMissingError(scope)\n    }\n  }\n}\n"]}
+{"version":3,"file":"scope-permissions.js","sourceRoot":"","sources":["../src/scope-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EACL,iBAAiB,GAElB,MAAM,gCAAgC,CAAA;AACvC,OAAO,EACL,cAAc,GAEf,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,kBAAkB,GAEnB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EACL,cAAc,GAEf,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,aAAa,EAAsB,MAAM,4BAA4B,CAAA;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAU3C,MAAM,OAAO,gBAAgB;IAG3B,YAAY,KAAwC;QAClD,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CACzB,CAAC,KAAK,CAAC,wBAAwB;YAC7B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;gBACzB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;gBAClB,CAAC,CAAC,KAAK,CACZ,CAAA;IACH,CAAC;IAEM,aAAa,CAAC,OAA+B;QAClD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IAChD,CAAC;IACM,aAAa,CAAC,OAA+B;QAClD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,iBAAiB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACvD,MAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAEM,cAAc,CAAC,OAAgC;QACpD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IACjD,CAAC;IACM,cAAc,CAAC,OAAgC;QACpD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,kBAAkB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACxD,MAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAEM,UAAU,CAAC,OAA4B;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7C,CAAC;IACM,UAAU,CAAC,OAA4B;QAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,cAAc,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACpD,MAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAEM,UAAU,CAAC,OAA4B;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7C,CAAC;IACM,UAAU,CAAC,OAA4B;QAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,cAAc,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACpD,MAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAEM,SAAS,CAAC,OAA2B;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC5C,CAAC;IACM,SAAS,CAAC,OAA2B;QAC1C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,aAAa,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACnD,MAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;CACF","sourcesContent":["import { ScopeMissingError } from './scope-missing-error.js'\nimport {\n  AccountPermission,\n  AccountPermissionMatch,\n} from './scopes/account-permission.js'\nimport {\n  BlobPermission,\n  BlobPermissionMatch,\n} from './scopes/blob-permission.js'\nimport {\n  IdentityPermission,\n  IdentityPermissionMatch,\n} from './scopes/identity-permission.js'\nimport {\n  RepoPermission,\n  RepoPermissionMatch,\n} from './scopes/repo-permission.js'\nimport { RpcPermission, RpcPermissionMatch } from './scopes/rpc-permission.js'\nimport { ScopesSet } from './scopes-set.js'\n\nexport type {\n  AccountPermissionMatch,\n  BlobPermissionMatch,\n  IdentityPermissionMatch,\n  RepoPermissionMatch,\n  RpcPermissionMatch,\n}\n\nexport class ScopePermissions {\n  public readonly scopes: ScopesSet\n\n  constructor(scope?: null | string | Iterable<string>) {\n    this.scopes = new ScopesSet(\n      !scope // \"\" | null | undefined\n        ? undefined\n        : typeof scope === 'string'\n          ? scope.split(' ')\n          : scope,\n    )\n  }\n\n  public allowsAccount(options: AccountPermissionMatch): boolean {\n    return this.scopes.matches('account', options)\n  }\n  public assertAccount(options: AccountPermissionMatch): void {\n    if (!this.allowsAccount(options)) {\n      const scope = AccountPermission.scopeNeededFor(options)\n      throw new ScopeMissingError(scope)\n    }\n  }\n\n  public allowsIdentity(options: IdentityPermissionMatch): boolean {\n    return this.scopes.matches('identity', options)\n  }\n  public assertIdentity(options: IdentityPermissionMatch): void {\n    if (!this.allowsIdentity(options)) {\n      const scope = IdentityPermission.scopeNeededFor(options)\n      throw new ScopeMissingError(scope)\n    }\n  }\n\n  public allowsBlob(options: BlobPermissionMatch): boolean {\n    return this.scopes.matches('blob', options)\n  }\n  public assertBlob(options: BlobPermissionMatch): void {\n    if (!this.allowsBlob(options)) {\n      const scope = BlobPermission.scopeNeededFor(options)\n      throw new ScopeMissingError(scope)\n    }\n  }\n\n  public allowsRepo(options: RepoPermissionMatch): boolean {\n    return this.scopes.matches('repo', options)\n  }\n  public assertRepo(options: RepoPermissionMatch): void {\n    if (!this.allowsRepo(options)) {\n      const scope = RepoPermission.scopeNeededFor(options)\n      throw new ScopeMissingError(scope)\n    }\n  }\n\n  public allowsRpc(options: RpcPermissionMatch): boolean {\n    return this.scopes.matches('rpc', options)\n  }\n  public assertRpc(options: RpcPermissionMatch): void {\n    if (!this.allowsRpc(options)) {\n      const scope = RpcPermission.scopeNeededFor(options)\n      throw new ScopeMissingError(scope)\n    }\n  }\n}\n"]}

package/dist/scopes/account-permission.js

@@ -1,30 +1,17 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AccountPermission = exports.ACCOUNT_ACTIONS = exports.ACCOUNT_ATTRIBUTES = void 0;
-const parser_js_1 = require("../lib/parser.js");
-const syntax_string_js_1 = require("../lib/syntax-string.js");
-const syntax_js_1 = require("../lib/syntax.js");
-const util_js_1 = require("../lib/util.js");
-exports.ACCOUNT_ATTRIBUTES = Object.freeze([
+import { Parser } from '../lib/parser.js';
+import { ScopeStringSyntax } from '../lib/syntax-string.js';
+import { isScopeStringFor } from '../lib/syntax.js';
+import { knownValuesValidator } from '../lib/util.js';
+export const ACCOUNT_ATTRIBUTES = Object.freeze([
     'email',
     'repo',
     'status',
 ]);
-exports.ACCOUNT_ACTIONS = Object.freeze(['read', 'manage']);
-class AccountPermission {
+export const ACCOUNT_ACTIONS = Object.freeze(['read', 'manage']);
+export class AccountPermission {
     constructor(attr, action) {
-        Object.defineProperty(this, "attr", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: attr
-        });
-        Object.defineProperty(this, "action", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: action
-        });
+        this.attr = attr;
+        this.action = action;
     }
     matches(options) {
         return (this.attr === options.attr &&
@@ -33,10 +20,23 @@ class AccountPermission {
     toString() {
         return AccountPermission.parser.format(this);
     }
+    static { this.parser = new Parser('account', {
+        attr: {
+            multiple: false,
+            required: true,
+            validate: knownValuesValidator(ACCOUNT_ATTRIBUTES),
+        },
+        action: {
+            multiple: true,
+            required: false,
+            validate: knownValuesValidator(ACCOUNT_ACTIONS),
+            default: ['read'],
+        },
+    }, 'attr'); }
     static fromString(scope) {
-        if (!(0, syntax_js_1.isScopeStringFor)(scope, 'account'))
+        if (!isScopeStringFor(scope, 'account'))
             return null;
-        const syntax = syntax_string_js_1.ScopeStringSyntax.fromString(scope);
+        const syntax = ScopeStringSyntax.fromString(scope);
         return AccountPermission.fromSyntax(syntax);
     }
     static fromSyntax(syntax) {
@@ -52,23 +52,4 @@ class AccountPermission {
         });
     }
 }
-exports.AccountPermission = AccountPermission;
-Object.defineProperty(AccountPermission, "parser", {
-    enumerable: true,
-    configurable: true,
-    writable: true,
-    value: new parser_js_1.Parser('account', {
-        attr: {
-            multiple: false,
-            required: true,
-            validate: (0, util_js_1.knownValuesValidator)(exports.ACCOUNT_ATTRIBUTES),
-        },
-        action: {
-            multiple: true,
-            required: false,
-            validate: (0, util_js_1.knownValuesValidator)(exports.ACCOUNT_ACTIONS),
-            default: ['read'],
-        },
-    }, 'attr')
-});
 //# sourceMappingURL=account-permission.js.map

package/dist/scopes/account-permission.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-permission.js","sourceRoot":"","sources":["../../src/scopes/account-permission.ts"],"names":[],"mappings":";;;AAAA,gDAAyC;AAEzC,8DAA2D;AAC3D,gDAA2E;AAC3E,4CAAqD;AAExC,QAAA,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,OAAO;IACP,MAAM;IACN,QAAQ;CACA,CAAC,CAAA;AAGE,QAAA,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAU,CAAC,CAAA;AAQzE,MAAa,iBAAiB;IAG5B,YACkB,IAAsB,EACtB,MAAgC;QADhD;;;;mBAAgB,IAAI;WAAkB;QACtC;;;;mBAAgB,MAAM;WAA0B;IAC/C,CAAC;IAEJ,OAAO,CAAC,OAA+B;QACrC,OAAO,CACL,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;YAC1B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CACzE,CAAA;IACH,CAAC;IAED,QAAQ;QACN,OAAO,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC9C,CAAC;IAoBD,MAAM,CAAC,UAAU,CAAC,KAAa;QAC7B,IAAI,CAAC,IAAA,4BAAgB,EAAC,KAAK,EAAE,SAAS,CAAC;YAAE,OAAO,IAAI,CAAA;QACpD,MAAM,MAAM,GAAG,oCAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QAClD,OAAO,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAC7C,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,MAA8B;QAC9C,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QAExB,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAC1D,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,OAA+B;QACnD,OAAO,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC;YACrC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;SACzB,CAAC,CAAA;IACJ,CAAC;;AAvDH,8CAwDC;AArC2B;;;;WAAS,IAAI,kBAAM,CAC3C,SAAS,EACT;QACE,IAAI,EAAE;YACJ,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,IAAA,8BAAoB,EAAC,0BAAkB,CAAC;SACnD;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAA,8BAAoB,EAAC,uBAAe,CAAC;YAC/C,OAAO,EAAE,CAAC,MAAe,CAAC;SAC3B;KACF,EACD,MAAM,CACP;EAhB+B,CAgB/B","sourcesContent":["import { Parser } from '../lib/parser.js'\nimport { ResourcePermission } from '../lib/resource-permission.js'\nimport { ScopeStringSyntax } from '../lib/syntax-string.js'\nimport { NeRoArray, ScopeSyntax, isScopeStringFor } from '../lib/syntax.js'\nimport { knownValuesValidator } from '../lib/util.js'\n\nexport const ACCOUNT_ATTRIBUTES = Object.freeze([\n  'email',\n  'repo',\n  'status',\n] as const)\nexport type AccountAttribute = (typeof ACCOUNT_ATTRIBUTES)[number]\n\nexport const ACCOUNT_ACTIONS = Object.freeze(['read', 'manage'] as const)\nexport type AccountAction = (typeof ACCOUNT_ACTIONS)[number]\n\nexport type AccountPermissionMatch = {\n  attr: AccountAttribute\n  action: AccountAction\n}\n\nexport class AccountPermission\n  implements ResourcePermission<'account', AccountPermissionMatch>\n{\n  constructor(\n    public readonly attr: AccountAttribute,\n    public readonly action: NeRoArray<AccountAction>,\n  ) {}\n\n  matches(options: AccountPermissionMatch) {\n    return (\n      this.attr === options.attr &&\n      (this.action.includes('manage') || this.action.includes(options.action))\n    )\n  }\n\n  toString() {\n    return AccountPermission.parser.format(this)\n  }\n\n  protected static readonly parser = new Parser(\n    'account',\n    {\n      attr: {\n        multiple: false,\n        required: true,\n        validate: knownValuesValidator(ACCOUNT_ATTRIBUTES),\n      },\n      action: {\n        multiple: true,\n        required: false,\n        validate: knownValuesValidator(ACCOUNT_ACTIONS),\n        default: ['read' as const],\n      },\n    },\n    'attr',\n  )\n\n  static fromString(scope: string) {\n    if (!isScopeStringFor(scope, 'account')) return null\n    const syntax = ScopeStringSyntax.fromString(scope)\n    return AccountPermission.fromSyntax(syntax)\n  }\n\n  static fromSyntax(syntax: ScopeSyntax<'account'>) {\n    const result = AccountPermission.parser.parse(syntax)\n    if (!result) return null\n\n    return new AccountPermission(result.attr, result.action)\n  }\n\n  static scopeNeededFor(options: AccountPermissionMatch) {\n    return AccountPermission.parser.format({\n      attr: options.attr,\n      action: [options.action],\n    })\n  }\n}\n"]}
+{"version":3,"file":"account-permission.js","sourceRoot":"","sources":["../../src/scopes/account-permission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAA0B,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAErD,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,OAAO;IACP,MAAM;IACN,QAAQ;CACA,CAAC,CAAA;AAGX,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAU,CAAC,CAAA;AAQzE,MAAM,OAAO,iBAAiB;IAG5B,YACkB,IAAsB,EACtB,MAAgC;QADhC,SAAI,GAAJ,IAAI,CAAkB;QACtB,WAAM,GAAN,MAAM,CAA0B;IAC/C,CAAC;IAEJ,OAAO,CAAC,OAA+B;QACrC,OAAO,CACL,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;YAC1B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CACzE,CAAA;IACH,CAAC;IAED,QAAQ;QACN,OAAO,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC9C,CAAC;aAEyB,WAAM,GAAG,IAAI,MAAM,CAC3C,SAAS,EACT;QACE,IAAI,EAAE;YACJ,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,oBAAoB,CAAC,kBAAkB,CAAC;SACnD;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,oBAAoB,CAAC,eAAe,CAAC;YAC/C,OAAO,EAAE,CAAC,MAAe,CAAC;SAC3B;KACF,EACD,MAAM,CACP,CAAA;IAED,MAAM,CAAC,UAAU,CAAC,KAAa;QAC7B,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC;YAAE,OAAO,IAAI,CAAA;QACpD,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QAClD,OAAO,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAC7C,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,MAA8B;QAC9C,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QAExB,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAC1D,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,OAA+B;QACnD,OAAO,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC;YACrC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;SACzB,CAAC,CAAA;IACJ,CAAC","sourcesContent":["import { Parser } from '../lib/parser.js'\nimport { ResourcePermission } from '../lib/resource-permission.js'\nimport { ScopeStringSyntax } from '../lib/syntax-string.js'\nimport { NeRoArray, ScopeSyntax, isScopeStringFor } from '../lib/syntax.js'\nimport { knownValuesValidator } from '../lib/util.js'\n\nexport const ACCOUNT_ATTRIBUTES = Object.freeze([\n  'email',\n  'repo',\n  'status',\n] as const)\nexport type AccountAttribute = (typeof ACCOUNT_ATTRIBUTES)[number]\n\nexport const ACCOUNT_ACTIONS = Object.freeze(['read', 'manage'] as const)\nexport type AccountAction = (typeof ACCOUNT_ACTIONS)[number]\n\nexport type AccountPermissionMatch = {\n  attr: AccountAttribute\n  action: AccountAction\n}\n\nexport class AccountPermission\n  implements ResourcePermission<'account', AccountPermissionMatch>\n{\n  constructor(\n    public readonly attr: AccountAttribute,\n    public readonly action: NeRoArray<AccountAction>,\n  ) {}\n\n  matches(options: AccountPermissionMatch) {\n    return (\n      this.attr === options.attr &&\n      (this.action.includes('manage') || this.action.includes(options.action))\n    )\n  }\n\n  toString() {\n    return AccountPermission.parser.format(this)\n  }\n\n  protected static readonly parser = new Parser(\n    'account',\n    {\n      attr: {\n        multiple: false,\n        required: true,\n        validate: knownValuesValidator(ACCOUNT_ATTRIBUTES),\n      },\n      action: {\n        multiple: true,\n        required: false,\n        validate: knownValuesValidator(ACCOUNT_ACTIONS),\n        default: ['read' as const],\n      },\n    },\n    'attr',\n  )\n\n  static fromString(scope: string) {\n    if (!isScopeStringFor(scope, 'account')) return null\n    const syntax = ScopeStringSyntax.fromString(scope)\n    return AccountPermission.fromSyntax(syntax)\n  }\n\n  static fromSyntax(syntax: ScopeSyntax<'account'>) {\n    const result = AccountPermission.parser.parse(syntax)\n    if (!result) return null\n\n    return new AccountPermission(result.attr, result.action)\n  }\n\n  static scopeNeededFor(options: AccountPermissionMatch) {\n    return AccountPermission.parser.format({\n      attr: options.attr,\n      action: [options.action],\n    })\n  }\n}\n"]}

package/dist/scopes/blob-permission.js

@@ -1,30 +1,38 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.BlobPermission = exports.DEFAULT_ACCEPT = void 0;
-const mime_js_1 = require("../lib/mime.js");
-const parser_js_1 = require("../lib/parser.js");
-const syntax_string_js_1 = require("../lib/syntax-string.js");
-const syntax_js_1 = require("../lib/syntax.js");
-exports.DEFAULT_ACCEPT = Object.freeze(['*/*']);
-class BlobPermission {
+import { isAccept, matchesAnyAccept } from '../lib/mime.js';
+import { Parser } from '../lib/parser.js';
+import { ScopeStringSyntax } from '../lib/syntax-string.js';
+import { isScopeStringFor, } from '../lib/syntax.js';
+export const DEFAULT_ACCEPT = Object.freeze(['*/*']);
+export class BlobPermission {
     constructor(accept) {
-        Object.defineProperty(this, "accept", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: accept
-        });
+        this.accept = accept;
     }
     matches(options) {
-        return (0, mime_js_1.matchesAnyAccept)(this.accept, options.mime);
+        return matchesAnyAccept(this.accept, options.mime);
     }
     toString() {
         return BlobPermission.parser.format(this);
     }
+    static { this.parser = new Parser('blob', {
+        accept: {
+            multiple: true,
+            required: true,
+            validate: isAccept,
+            normalize: (value) => {
+                // Returns a more concise representation of the accept values.
+                if (value.includes('*/*'))
+                    return DEFAULT_ACCEPT;
+                return value
+                    .map(toLowerCase)
+                    .filter(isNonRedundant)
+                    .sort();
+            },
+        },
+    }, 'accept'); }
     static fromString(scope) {
-        if (!(0, syntax_js_1.isScopeStringFor)(scope, 'blob'))
+        if (!isScopeStringFor(scope, 'blob'))
             return null;
-        const syntax = syntax_string_js_1.ScopeStringSyntax.fromString(scope);
+        const syntax = ScopeStringSyntax.fromString(scope);
         return BlobPermission.fromSyntax(syntax);
     }
     static fromSyntax(syntax) {
@@ -39,28 +47,6 @@ class BlobPermission {
         });
     }
 }
-exports.BlobPermission = BlobPermission;
-Object.defineProperty(BlobPermission, "parser", {
-    enumerable: true,
-    configurable: true,
-    writable: true,
-    value: new parser_js_1.Parser('blob', {
-        accept: {
-            multiple: true,
-            required: true,
-            validate: mime_js_1.isAccept,
-            normalize: (value) => {
-                // Returns a more concise representation of the accept values.
-                if (value.includes('*/*'))
-                    return exports.DEFAULT_ACCEPT;
-                return value
-                    .map(toLowerCase)
-                    .filter(isNonRedundant)
-                    .sort();
-            },
-        },
-    }, 'accept')
-});
 function toLowerCase(value) {
     return (typeof value === 'string' ? value.toLowerCase() : value);
 }

package/dist/scopes/blob-permission.js.map

@@ -1 +1 @@
-{"version":3,"file":"blob-permission.js","sourceRoot":"","sources":["../../src/scopes/blob-permission.ts"],"names":[],"mappings":";;;AAAA,4CAAmE;AACnE,gDAAyC;AAEzC,8DAA2D;AAC3D,gDAMyB;AAIZ,QAAA,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAU,CAAC,CAAA;AAM7D,MAAa,cAAc;IAGzB,YAA4B,MAAyB;QAAzC;;;;mBAAgB,MAAM;WAAmB;IAAG,CAAC;IAEzD,OAAO,CAAC,OAA4B;QAClC,OAAO,IAAA,0BAAgB,EAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,CAAC;IAED,QAAQ;QACN,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC3C,CAAC;IAuBD,MAAM,CAAC,UAAU,CAAC,KAAa;QAC7B,IAAI,CAAC,IAAA,4BAAgB,EAAC,KAAK,EAAE,MAAM,CAAC;YAAE,OAAO,IAAI,CAAA;QACjD,MAAM,MAAM,GAAG,oCAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QAClD,OAAO,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,MAA2B;QAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QAExB,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,OAA4B;QAChD,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;YAClC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAc,CAAC;SACjC,CAAC,CAAA;IACJ,CAAC;;AAnDH,wCAoDC;AAvC2B;;;;WAAS,IAAI,kBAAM,CAC3C,MAAM,EACN;QACE,MAAM,EAAE;YACN,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,kBAAQ;YAClB,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;gBACnB,8DAA8D;gBAC9D,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,OAAO,sBAAc,CAAA;gBAEhD,OAAO,KAAK;qBACT,GAAG,CAAC,WAAW,CAAC;qBAChB,MAAM,CAAC,cAAc,CAAC;qBACtB,IAAI,EAAqB,CAAA;YAC9B,CAAC;SACF;KACF,EACD,QAAQ,CACT;EAnB+B,CAmB/B;AAsBH,SAAS,WAAW,CAClB,KAAQ;IAER,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CACvB,CAAA;AACpC,CAAC;AAED,SAAS,cAAc,CACrB,KAAiB,EACjB,KAAa,EACb,GAA0B;IAE1B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,4EAA4E;QAC5E,8DAA8D;QAC9D,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;QAC9B,wEAAwE;QACxE,2EAA2E;QAC3E,0EAA0E;QAC1E,MAAM;QACN,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC","sourcesContent":["import { Accept, isAccept, matchesAnyAccept } from '../lib/mime.js'\nimport { Parser } from '../lib/parser.js'\nimport { ResourcePermission } from '../lib/resource-permission.js'\nimport { ScopeStringSyntax } from '../lib/syntax-string.js'\nimport {\n  NeArray,\n  NeRoArray,\n  ParamValue,\n  ScopeSyntax,\n  isScopeStringFor,\n} from '../lib/syntax.js'\n\nexport { type Accept }\n\nexport const DEFAULT_ACCEPT = Object.freeze(['*/*'] as const)\n\nexport type BlobPermissionMatch = {\n  mime: string\n}\n\nexport class BlobPermission\n  implements ResourcePermission<'blob', BlobPermissionMatch>\n{\n  constructor(public readonly accept: NeRoArray<Accept>) {}\n\n  matches(options: BlobPermissionMatch) {\n    return matchesAnyAccept(this.accept, options.mime)\n  }\n\n  toString() {\n    return BlobPermission.parser.format(this)\n  }\n\n  protected static readonly parser = new Parser(\n    'blob',\n    {\n      accept: {\n        multiple: true,\n        required: true,\n        validate: isAccept,\n        normalize: (value) => {\n          // Returns a more concise representation of the accept values.\n          if (value.includes('*/*')) return DEFAULT_ACCEPT\n\n          return value\n            .map(toLowerCase)\n            .filter(isNonRedundant)\n            .sort() as NeArray<Accept>\n        },\n      },\n    },\n    'accept',\n  )\n\n  static fromString(scope: string) {\n    if (!isScopeStringFor(scope, 'blob')) return null\n    const syntax = ScopeStringSyntax.fromString(scope)\n    return BlobPermission.fromSyntax(syntax)\n  }\n\n  static fromSyntax(syntax: ScopeSyntax<'blob'>) {\n    const result = BlobPermission.parser.parse(syntax)\n    if (!result) return null\n\n    return new BlobPermission(result.accept)\n  }\n\n  static scopeNeededFor(options: BlobPermissionMatch) {\n    return BlobPermission.parser.format({\n      accept: [options.mime as Accept],\n    })\n  }\n}\n\nfunction toLowerCase<T extends ParamValue>(\n  value: T,\n): T extends string ? string : T {\n  return (\n    typeof value === 'string' ? value.toLowerCase() : value\n  ) as T extends string ? string : T\n}\n\nfunction isNonRedundant(\n  value: ParamValue,\n  index: number,\n  arr: readonly ParamValue[],\n): boolean {\n  if (typeof value !== 'string') {\n    return true\n  }\n  if (value.endsWith('/*')) {\n    // assuming the array contains unique element, wildcards cannot be redundant\n    // with one another ('image/*' is not redundant with 'text/*')\n    return true\n  }\n  const base = value.split('/', 1)[0]\n  if (arr.includes(`${base}/*`)) {\n    // If another value in the array is a wildcard for the same base, we can\n    // skip this one as it is redundant. e.g. if the array contains 'image/png'\n    // and 'image/*', we can skip 'image/png' because 'image/*' already covers\n    // it.\n    return false\n  }\n  return true\n}\n"]}
+{"version":3,"file":"blob-permission.js","sourceRoot":"","sources":["../../src/scopes/blob-permission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,QAAQ,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAKL,gBAAgB,GACjB,MAAM,kBAAkB,CAAA;AAIzB,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAU,CAAC,CAAA;AAM7D,MAAM,OAAO,cAAc;IAGzB,YAA4B,MAAyB;QAAzB,WAAM,GAAN,MAAM,CAAmB;IAAG,CAAC;IAEzD,OAAO,CAAC,OAA4B;QAClC,OAAO,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,CAAC;IAED,QAAQ;QACN,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC3C,CAAC;aAEyB,WAAM,GAAG,IAAI,MAAM,CAC3C,MAAM,EACN;QACE,MAAM,EAAE;YACN,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;gBACnB,8DAA8D;gBAC9D,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,OAAO,cAAc,CAAA;gBAEhD,OAAO,KAAK;qBACT,GAAG,CAAC,WAAW,CAAC;qBAChB,MAAM,CAAC,cAAc,CAAC;qBACtB,IAAI,EAAqB,CAAA;YAC9B,CAAC;SACF;KACF,EACD,QAAQ,CACT,CAAA;IAED,MAAM,CAAC,UAAU,CAAC,KAAa;QAC7B,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC;YAAE,OAAO,IAAI,CAAA;QACjD,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QAClD,OAAO,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,MAA2B;QAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QAExB,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,OAA4B;QAChD,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;YAClC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAc,CAAC;SACjC,CAAC,CAAA;IACJ,CAAC;;AAGH,SAAS,WAAW,CAClB,KAAQ;IAER,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CACvB,CAAA;AACpC,CAAC;AAED,SAAS,cAAc,CACrB,KAAiB,EACjB,KAAa,EACb,GAA0B;IAE1B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,4EAA4E;QAC5E,8DAA8D;QAC9D,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;QAC9B,wEAAwE;QACxE,2EAA2E;QAC3E,0EAA0E;QAC1E,MAAM;QACN,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC","sourcesContent":["import { Accept, isAccept, matchesAnyAccept } from '../lib/mime.js'\nimport { Parser } from '../lib/parser.js'\nimport { ResourcePermission } from '../lib/resource-permission.js'\nimport { ScopeStringSyntax } from '../lib/syntax-string.js'\nimport {\n  NeArray,\n  NeRoArray,\n  ParamValue,\n  ScopeSyntax,\n  isScopeStringFor,\n} from '../lib/syntax.js'\n\nexport { type Accept }\n\nexport const DEFAULT_ACCEPT = Object.freeze(['*/*'] as const)\n\nexport type BlobPermissionMatch = {\n  mime: string\n}\n\nexport class BlobPermission\n  implements ResourcePermission<'blob', BlobPermissionMatch>\n{\n  constructor(public readonly accept: NeRoArray<Accept>) {}\n\n  matches(options: BlobPermissionMatch) {\n    return matchesAnyAccept(this.accept, options.mime)\n  }\n\n  toString() {\n    return BlobPermission.parser.format(this)\n  }\n\n  protected static readonly parser = new Parser(\n    'blob',\n    {\n      accept: {\n        multiple: true,\n        required: true,\n        validate: isAccept,\n        normalize: (value) => {\n          // Returns a more concise representation of the accept values.\n          if (value.includes('*/*')) return DEFAULT_ACCEPT\n\n          return value\n            .map(toLowerCase)\n            .filter(isNonRedundant)\n            .sort() as NeArray<Accept>\n        },\n      },\n    },\n    'accept',\n  )\n\n  static fromString(scope: string) {\n    if (!isScopeStringFor(scope, 'blob')) return null\n    const syntax = ScopeStringSyntax.fromString(scope)\n    return BlobPermission.fromSyntax(syntax)\n  }\n\n  static fromSyntax(syntax: ScopeSyntax<'blob'>) {\n    const result = BlobPermission.parser.parse(syntax)\n    if (!result) return null\n\n    return new BlobPermission(result.accept)\n  }\n\n  static scopeNeededFor(options: BlobPermissionMatch) {\n    return BlobPermission.parser.format({\n      accept: [options.mime as Accept],\n    })\n  }\n}\n\nfunction toLowerCase<T extends ParamValue>(\n  value: T,\n): T extends string ? string : T {\n  return (\n    typeof value === 'string' ? value.toLowerCase() : value\n  ) as T extends string ? string : T\n}\n\nfunction isNonRedundant(\n  value: ParamValue,\n  index: number,\n  arr: readonly ParamValue[],\n): boolean {\n  if (typeof value !== 'string') {\n    return true\n  }\n  if (value.endsWith('/*')) {\n    // assuming the array contains unique element, wildcards cannot be redundant\n    // with one another ('image/*' is not redundant with 'text/*')\n    return true\n  }\n  const base = value.split('/', 1)[0]\n  if (arr.includes(`${base}/*`)) {\n    // If another value in the array is a wildcard for the same base, we can\n    // skip this one as it is redundant. e.g. if the array contains 'image/png'\n    // and 'image/*', we can skip 'image/png' because 'image/*' already covers\n    // it.\n    return false\n  }\n  return true\n}\n"]}

package/dist/scopes/identity-permission.js

@@ -1,19 +1,11 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IdentityPermission = exports.IDENTITY_ATTRIBUTES = void 0;
-const parser_js_1 = require("../lib/parser.js");
-const syntax_string_js_1 = require("../lib/syntax-string.js");
-const syntax_js_1 = require("../lib/syntax.js");
-const util_js_1 = require("../lib/util.js");
-exports.IDENTITY_ATTRIBUTES = Object.freeze(['handle', '*']);
-class IdentityPermission {
+import { Parser } from '../lib/parser.js';
+import { ScopeStringSyntax } from '../lib/syntax-string.js';
+import { isScopeStringFor } from '../lib/syntax.js';
+import { knownValuesValidator } from '../lib/util.js';
+export const IDENTITY_ATTRIBUTES = Object.freeze(['handle', '*']);
+export class IdentityPermission {
     constructor(attr) {
-        Object.defineProperty(this, "attr", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: attr
-        });
+        this.attr = attr;
     }
     matches(options) {
         return this.attr === '*' || this.attr === options.attr;
@@ -21,10 +13,17 @@ class IdentityPermission {
     toString() {
         return IdentityPermission.parser.format(this);
     }
+    static { this.parser = new Parser('identity', {
+        attr: {
+            multiple: false,
+            required: true,
+            validate: knownValuesValidator(IDENTITY_ATTRIBUTES),
+        },
+    }, 'attr'); }
     static fromString(scope) {
-        if (!(0, syntax_js_1.isScopeStringFor)(scope, 'identity'))
+        if (!isScopeStringFor(scope, 'identity'))
             return null;
-        const syntax = syntax_string_js_1.ScopeStringSyntax.fromString(scope);
+        const syntax = ScopeStringSyntax.fromString(scope);
         return IdentityPermission.fromSyntax(syntax);
     }
     static fromSyntax(syntax) {
@@ -37,17 +36,4 @@ class IdentityPermission {
         return IdentityPermission.parser.format(options);
     }
 }
-exports.IdentityPermission = IdentityPermission;
-Object.defineProperty(IdentityPermission, "parser", {
-    enumerable: true,
-    configurable: true,
-    writable: true,
-    value: new parser_js_1.Parser('identity', {
-        attr: {
-            multiple: false,
-            required: true,
-            validate: (0, util_js_1.knownValuesValidator)(exports.IDENTITY_ATTRIBUTES),
-        },
-    }, 'attr')
-});
 //# sourceMappingURL=identity-permission.js.map

package/dist/scopes/identity-permission.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity-permission.js","sourceRoot":"","sources":["../../src/scopes/identity-permission.ts"],"names":[],"mappings":";;;AAAA,gDAAyC;AAEzC,8DAA2D;AAC3D,gDAAgE;AAChE,4CAAqD;AAExC,QAAA,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAU,CAAC,CAAA;AAO1E,MAAa,kBAAkB;IAG7B,YAA4B,IAAuB;QAAvC;;;;mBAAgB,IAAI;WAAmB;IAAG,CAAC;IAEvD,OAAO,CAAC,OAAgC;QACtC,OAAO,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAA;IACxD,CAAC;IAED,QAAQ;QACN,OAAO,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC/C,CAAC;IAcD,MAAM,CAAC,UAAU,CAAC,KAAa;QAC7B,IAAI,CAAC,IAAA,4BAAgB,EAAC,KAAK,EAAE,UAAU,CAAC;YAAE,OAAO,IAAI,CAAA;QACrD,MAAM,MAAM,GAAG,oCAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QAClD,OAAO,kBAAkB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAC9C,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,MAA+B;QAC/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACtD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC5C,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,OAAgC;QACpD,OAAO,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAClD,CAAC;;AAvCH,gDAwCC;AA3B2B;;;;WAAS,IAAI,kBAAM,CAC3C,UAAU,EACV;QACE,IAAI,EAAE;YACJ,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,IAAA,8BAAoB,EAAC,2BAAmB,CAAC;SACpD;KACF,EACD,MAAM,CACP;EAV+B,CAU/B","sourcesContent":["import { Parser } from '../lib/parser.js'\nimport { ResourcePermission } from '../lib/resource-permission.js'\nimport { ScopeStringSyntax } from '../lib/syntax-string.js'\nimport { ScopeSyntax, isScopeStringFor } from '../lib/syntax.js'\nimport { knownValuesValidator } from '../lib/util.js'\n\nexport const IDENTITY_ATTRIBUTES = Object.freeze(['handle', '*'] as const)\nexport type IdentityAttribute = (typeof IDENTITY_ATTRIBUTES)[number]\n\nexport type IdentityPermissionMatch = {\n  attr: IdentityAttribute\n}\n\nexport class IdentityPermission\n  implements ResourcePermission<'identity', IdentityPermissionMatch>\n{\n  constructor(public readonly attr: IdentityAttribute) {}\n\n  matches(options: IdentityPermissionMatch) {\n    return this.attr === '*' || this.attr === options.attr\n  }\n\n  toString() {\n    return IdentityPermission.parser.format(this)\n  }\n\n  protected static readonly parser = new Parser(\n    'identity',\n    {\n      attr: {\n        multiple: false,\n        required: true,\n        validate: knownValuesValidator(IDENTITY_ATTRIBUTES),\n      },\n    },\n    'attr',\n  )\n\n  static fromString(scope: string) {\n    if (!isScopeStringFor(scope, 'identity')) return null\n    const syntax = ScopeStringSyntax.fromString(scope)\n    return IdentityPermission.fromSyntax(syntax)\n  }\n\n  static fromSyntax(syntax: ScopeSyntax<'identity'>) {\n    const result = IdentityPermission.parser.parse(syntax)\n    if (!result) return null\n    return new IdentityPermission(result.attr)\n  }\n\n  static scopeNeededFor(options: IdentityPermissionMatch): string {\n    return IdentityPermission.parser.format(options)\n  }\n}\n"]}
+{"version":3,"file":"identity-permission.js","sourceRoot":"","sources":["../../src/scopes/identity-permission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAe,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAErD,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAU,CAAC,CAAA;AAO1E,MAAM,OAAO,kBAAkB;IAG7B,YAA4B,IAAuB;QAAvB,SAAI,GAAJ,IAAI,CAAmB;IAAG,CAAC;IAEvD,OAAO,CAAC,OAAgC;QACtC,OAAO,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAA;IACxD,CAAC;IAED,QAAQ;QACN,OAAO,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC/C,CAAC;aAEyB,WAAM,GAAG,IAAI,MAAM,CAC3C,UAAU,EACV;QACE,IAAI,EAAE;YACJ,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,oBAAoB,CAAC,mBAAmB,CAAC;SACpD;KACF,EACD,MAAM,CACP,CAAA;IAED,MAAM,CAAC,UAAU,CAAC,KAAa;QAC7B,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC;YAAE,OAAO,IAAI,CAAA;QACrD,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QAClD,OAAO,kBAAkB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAC9C,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,MAA+B;QAC/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACtD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC5C,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,OAAgC;QACpD,OAAO,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAClD,CAAC","sourcesContent":["import { Parser } from '../lib/parser.js'\nimport { ResourcePermission } from '../lib/resource-permission.js'\nimport { ScopeStringSyntax } from '../lib/syntax-string.js'\nimport { ScopeSyntax, isScopeStringFor } from '../lib/syntax.js'\nimport { knownValuesValidator } from '../lib/util.js'\n\nexport const IDENTITY_ATTRIBUTES = Object.freeze(['handle', '*'] as const)\nexport type IdentityAttribute = (typeof IDENTITY_ATTRIBUTES)[number]\n\nexport type IdentityPermissionMatch = {\n  attr: IdentityAttribute\n}\n\nexport class IdentityPermission\n  implements ResourcePermission<'identity', IdentityPermissionMatch>\n{\n  constructor(public readonly attr: IdentityAttribute) {}\n\n  matches(options: IdentityPermissionMatch) {\n    return this.attr === '*' || this.attr === options.attr\n  }\n\n  toString() {\n    return IdentityPermission.parser.format(this)\n  }\n\n  protected static readonly parser = new Parser(\n    'identity',\n    {\n      attr: {\n        multiple: false,\n        required: true,\n        validate: knownValuesValidator(IDENTITY_ATTRIBUTES),\n      },\n    },\n    'attr',\n  )\n\n  static fromString(scope: string) {\n    if (!isScopeStringFor(scope, 'identity')) return null\n    const syntax = ScopeStringSyntax.fromString(scope)\n    return IdentityPermission.fromSyntax(syntax)\n  }\n\n  static fromSyntax(syntax: ScopeSyntax<'identity'>) {\n    const result = IdentityPermission.parser.parse(syntax)\n    if (!result) return null\n    return new IdentityPermission(result.attr)\n  }\n\n  static scopeNeededFor(options: IdentityPermissionMatch): string {\n    return IdentityPermission.parser.format(options)\n  }\n}\n"]}