@bitspark/archon-server 0.7.0 → 0.8.2

package/dist/src/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./login.js";
+export { fromHex, MAX_BODY_BYTES, rfc3339, scanTopLevel, stripMount, toHex } from "./json.js";

package/dist/src/index.js

@@ -0,0 +1,12 @@
+// archon-server — the service side of the archon login protocol (docs/login.md §4).
+//
+// A service adopts proof-of-possession sign-in by constructing a `Handler` and calling it from
+// whatever already serves its requests. The handler is fetch-style —
+// `(Request) => Promise<Response>` — so it mounts in Node, Deno, Bun, a Worker, or any
+// framework that speaks the Web platform's own types, and this package depends on none of
+// them. It opens no socket, starts no timer, persists nothing, and interprets no authority:
+// that is ADR 0007 §B, and it is what makes the tier adoptable by a service that has already
+// chosen its stack.
+export * from "./login.js";
+export { fromHex, MAX_BODY_BYTES, rfc3339, scanTopLevel, stripMount, toHex } from "./json.js";
+//# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,EAAE;AACF,+FAA+F;AAC/F,qEAAqE;AACrE,uFAAuF;AACvF,0FAA0F;AAC1F,4FAA4F;AAC5F,6FAA6F;AAC7F,oBAAoB;AACpB,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC"}

package/dist/src/json.d.ts

@@ -0,0 +1,101 @@
+/** Caps every request body. See the note on `MAX_BODY_BYTES` in the Rust lane: the authority
+ *  payload is the only field with no natural size, and a law needing more than this should say
+ *  so rather than have the handler guess high. */
+export declare const MAX_BODY_BYTES: number;
+/** The floor on an offer's code (§4.1): at least 16 bytes of the PROVER's entropy, spelled as
+ *  lowercase hex — so 32 characters. The code is the address of an open offer and is
+ *  confidential until the offer is taken; a short one is guessable. */
+export declare const MIN_CODE_HEX = 32;
+/**
+ * Throws on a code that is not what §4.1 says a code is: lowercase hex of even length, at
+ * least MIN_CODE_HEX characters. The offer route answers 400 to a refusal; begin's `offer`
+ * member and the read route answer 404, because a registered code is always well-formed and
+ * so a malformed one is unknown by construction — a stranger learns nothing from the
+ * difference (the same rule as an unknown versus an expired id).
+ */
+export declare function checkCode(code: string): void;
+export declare function toHex(bytes: Uint8Array): string;
+/** Throws on anything that is not an even-length run of hex digits. Total by refusal, never
+ *  by silently dropping a bad pair. */
+export declare function fromHex(text: string): Uint8Array;
+/**
+ * Parses a request body strictly: capped, an object, and with UNKNOWN FIELDS REFUSED.
+ *
+ * The refusal is deliberate and is the same rule the other two lanes apply. A caller sending
+ * a field this package does not know is speaking a different version of the protocol, and
+ * half-reading their message is how two peers come to disagree about what was agreed.
+ * Refusing says so at the door — and in particular refuses an `audience` field, which is
+ * exactly the value review Finding 1 forbids trusting.
+ */
+export declare function parseBody(raw: ArrayBuffer, allowed: readonly string[]): ParsedBody;
+/** A parsed body, the exact text it was parsed from, and each top-level member's source span. */
+export interface ParsedBody {
+    text: string;
+    body: Record<string, unknown>;
+    /** Member name to the exact source text of its value. */
+    members: Map<string, string>;
+}
+/**
+ * Refuses what the CLI could not display faithfully: an empty entry, a control character
+ * (§3.1), or text that is not valid UTF-8.
+ *
+ * Checked HERE as well as in the scheme, and that is not redundancy for its own sake:
+ * checking at the door means a request that could lie on screen never exists to be shown.
+ */
+export declare function checkScopeEntry(entry: string): void;
+/**
+ * Formats a Unix timestamp as RFC 3339 UTC, which is what §4's `expires` field carries.
+ *
+ * The milliseconds are dropped so all three lanes emit the SAME spelling: Go and Rust format
+ * whole seconds, and a `.000Z` here would be a difference visible to any client that compared
+ * two services.
+ */
+export declare function rfc3339(unixSeconds: number): string;
+/**
+ * Strips `mount` from the front of a request path, or returns undefined if the path is not
+ * under it.
+ *
+ * EXPORTED SO IT CAN BE TESTED DIRECTLY, and that is not an accident of style. Through the
+ * handler this rule is nearly invisible: a path that should have been refused here goes on to
+ * miss the id lookup and produce the same 404 anyway, so a test driving it through `handle`
+ * passes whether the rule is present or not. The Rust lane has the same rule in its adapter
+ * and tests it the same way, on the function itself.
+ *
+ * The remainder must be empty or begin with `/`, so a handler mounted at `/api/login` does not
+ * also claim `/api/loginX` — a path that belongs to whatever else the service routes.
+ *
+ * Nothing is percent-decoded: ids are hex and never need it, and decoding is how a `%2f` turns
+ * into a path separator that routing has already finished looking at.
+ */
+export declare function stripMount(pathname: string, mount: string): string | undefined;
+/**
+ * The exact source text of the top-level `authority` member of `text`, or undefined if the
+ * body has no such member.
+ *
+ * THE AUTHORITY IS OPAQUE BYTES (ADR 0007 §B), and `JSON.parse` followed by `JSON.stringify`
+ * is NOT a round trip. `9007199254740993` comes back `9007199254740992` — it does not fit a
+ * double. `1.10` comes back `1.1`. A `\\u00e9` escape comes back as the character. Key order is
+ * whatever the parser kept. A law that signs its payload, or carries a 64-bit id, would then
+ * be handed something the CLI never sent, and the browser something the law never saw — and
+ * the three server lanes would each produce a different payload from one answer.
+ *
+ * `JSON.parse`'s reviver cannot do this: its `context.source` is populated for primitives
+ * only, so an object- or array-valued authority would have no source to read. Hence the
+ * scanner. It runs on text that has ALREADY parsed, so it is measuring, not validating.
+ *
+ * A repeated top-level key is refused rather than resolved. `JSON.parse` keeps the last one,
+ * so a body with two `authority` members would have two candidate spans and no reason to
+ * prefer either; refusing is the only answer that cannot be argued with. (The Rust lane
+ * refuses duplicates already, via serde; Go accepts them and keeps the last.)
+ */
+export declare function authoritySpan(text: string): string | undefined;
+/**
+ * Every top-level member of `text`, name to the exact source text of its value.
+ *
+ * A repeated name is REFUSED rather than resolved. `JSON.parse` keeps the last one, so a body
+ * with two `authority` members would have two candidate spans and no reason to prefer either;
+ * refusing is the only answer that cannot be argued with. That reasoning is about `authority`,
+ * but the refusal is applied to every member, because "which of the two did you mean" has no
+ * good answer for any of them.
+ */
+export declare function scanTopLevel(text: string): Map<string, string>;

package/dist/src/json.js

@@ -0,0 +1,287 @@
+// Hex, strict body parsing and the door checks. Small on purpose: the wire format is §4's
+// and is spelled where the routes are, not abstracted behind builders that would hide it.
+/** Caps every request body. See the note on `MAX_BODY_BYTES` in the Rust lane: the authority
+ *  payload is the only field with no natural size, and a law needing more than this should say
+ *  so rather than have the handler guess high. */
+export const MAX_BODY_BYTES = 64 * 1024;
+/** The floor on an offer's code (§4.1): at least 16 bytes of the PROVER's entropy, spelled as
+ *  lowercase hex — so 32 characters. The code is the address of an open offer and is
+ *  confidential until the offer is taken; a short one is guessable. */
+export const MIN_CODE_HEX = 32;
+/**
+ * Throws on a code that is not what §4.1 says a code is: lowercase hex of even length, at
+ * least MIN_CODE_HEX characters. The offer route answers 400 to a refusal; begin's `offer`
+ * member and the read route answer 404, because a registered code is always well-formed and
+ * so a malformed one is unknown by construction — a stranger learns nothing from the
+ * difference (the same rule as an unknown versus an expired id).
+ */
+export function checkCode(code) {
+    if (code.length < MIN_CODE_HEX || code.length % 2 !== 0) {
+        throw new Error(`a code is lowercase hex of even length, at least ${MIN_CODE_HEX} characters`);
+    }
+    if (!/^[0-9a-f]*$/.test(code))
+        throw new Error("a code is lowercase hex");
+}
+export function toHex(bytes) {
+    let out = "";
+    for (const b of bytes)
+        out += b.toString(16).padStart(2, "0");
+    return out;
+}
+/** Throws on anything that is not an even-length run of hex digits. Total by refusal, never
+ *  by silently dropping a bad pair. */
+export function fromHex(text) {
+    if (text.length % 2 !== 0)
+        throw new Error(`hex has odd length (${text.length})`);
+    if (!/^[0-9a-fA-F]*$/.test(text))
+        throw new Error("hex carries a non-hex character");
+    const out = new Uint8Array(text.length / 2);
+    for (let i = 0; i < out.length; i++)
+        out[i] = Number.parseInt(text.slice(i * 2, i * 2 + 2), 16);
+    return out;
+}
+/**
+ * Parses a request body strictly: capped, an object, and with UNKNOWN FIELDS REFUSED.
+ *
+ * The refusal is deliberate and is the same rule the other two lanes apply. A caller sending
+ * a field this package does not know is speaking a different version of the protocol, and
+ * half-reading their message is how two peers come to disagree about what was agreed.
+ * Refusing says so at the door — and in particular refuses an `audience` field, which is
+ * exactly the value review Finding 1 forbids trusting.
+ */
+export function parseBody(raw, allowed) {
+    if (raw.byteLength > MAX_BODY_BYTES) {
+        throw new Error(`body is ${raw.byteLength} bytes, over the ${MAX_BODY_BYTES} cap`);
+    }
+    const text = new TextDecoder("utf-8", { fatal: true }).decode(raw);
+    const value = JSON.parse(text);
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new Error("body is not a JSON object");
+    }
+    const body = value;
+    for (const key of Object.keys(body)) {
+        if (!allowed.includes(key))
+            throw new Error(`body carries the unknown field ${JSON.stringify(key)}`);
+    }
+    // Scanned once, HERE, so every route refuses a repeated member — not only the one that
+    // happens to want a span. go refuses duplicates in its shared decoder and serde refuses
+    // them for a struct; a lane that refused them on `answer` alone would be the same
+    // three-lanes-three-answers defect in miniature.
+    const members = scanTopLevel(text);
+    return { text, body, members };
+}
+/**
+ * An unpaired surrogate — a string JavaScript will hold happily and UTF-8 cannot represent.
+ *
+ * Go and TypeScript both need this check; Rust does not, because a `String` cannot hold one.
+ * That asymmetry is why it is spelled out here rather than assumed: the scheme refuses these
+ * at `loginBinding`, but that happens when a proof is MADE, which is after the person has
+ * already read the statement.
+ */
+const LONE_SURROGATE = /[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/;
+/**
+ * Refuses what the CLI could not display faithfully: an empty entry, a control character
+ * (§3.1), or text that is not valid UTF-8.
+ *
+ * Checked HERE as well as in the scheme, and that is not redundancy for its own sake:
+ * checking at the door means a request that could lie on screen never exists to be shown.
+ */
+export function checkScopeEntry(entry) {
+    if (entry.length === 0)
+        throw new Error("a scope entry is empty");
+    if (LONE_SURROGATE.test(entry))
+        throw new Error("a scope entry is not valid UTF-8");
+    for (const ch of entry) {
+        const code = ch.codePointAt(0) ?? 0;
+        if (code < 0x20 || code === 0x7f) {
+            throw new Error(`a scope entry carries a control character (U+${code.toString(16).padStart(4, "0")})`);
+        }
+    }
+}
+/**
+ * Formats a Unix timestamp as RFC 3339 UTC, which is what §4's `expires` field carries.
+ *
+ * The milliseconds are dropped so all three lanes emit the SAME spelling: Go and Rust format
+ * whole seconds, and a `.000Z` here would be a difference visible to any client that compared
+ * two services.
+ */
+export function rfc3339(unixSeconds) {
+    return new Date(unixSeconds * 1000).toISOString().replace(/\.\d{3}Z$/, "Z");
+}
+/**
+ * Strips `mount` from the front of a request path, or returns undefined if the path is not
+ * under it.
+ *
+ * EXPORTED SO IT CAN BE TESTED DIRECTLY, and that is not an accident of style. Through the
+ * handler this rule is nearly invisible: a path that should have been refused here goes on to
+ * miss the id lookup and produce the same 404 anyway, so a test driving it through `handle`
+ * passes whether the rule is present or not. The Rust lane has the same rule in its adapter
+ * and tests it the same way, on the function itself.
+ *
+ * The remainder must be empty or begin with `/`, so a handler mounted at `/api/login` does not
+ * also claim `/api/loginX` — a path that belongs to whatever else the service routes.
+ *
+ * Nothing is percent-decoded: ids are hex and never need it, and decoding is how a `%2f` turns
+ * into a path separator that routing has already finished looking at.
+ */
+export function stripMount(pathname, mount) {
+    const prefix = mount.replace(/\/+$/, "");
+    if (prefix.length === 0)
+        return pathname;
+    if (!pathname.startsWith(prefix))
+        return undefined;
+    const rest = pathname.slice(prefix.length);
+    if (rest.length > 0 && !rest.startsWith("/"))
+        return undefined;
+    return rest;
+}
+/**
+ * The exact source text of the top-level `authority` member of `text`, or undefined if the
+ * body has no such member.
+ *
+ * THE AUTHORITY IS OPAQUE BYTES (ADR 0007 §B), and `JSON.parse` followed by `JSON.stringify`
+ * is NOT a round trip. `9007199254740993` comes back `9007199254740992` — it does not fit a
+ * double. `1.10` comes back `1.1`. A `\\u00e9` escape comes back as the character. Key order is
+ * whatever the parser kept. A law that signs its payload, or carries a 64-bit id, would then
+ * be handed something the CLI never sent, and the browser something the law never saw — and
+ * the three server lanes would each produce a different payload from one answer.
+ *
+ * `JSON.parse`'s reviver cannot do this: its `context.source` is populated for primitives
+ * only, so an object- or array-valued authority would have no source to read. Hence the
+ * scanner. It runs on text that has ALREADY parsed, so it is measuring, not validating.
+ *
+ * A repeated top-level key is refused rather than resolved. `JSON.parse` keeps the last one,
+ * so a body with two `authority` members would have two candidate spans and no reason to
+ * prefer either; refusing is the only answer that cannot be argued with. (The Rust lane
+ * refuses duplicates already, via serde; Go accepts them and keeps the last.)
+ */
+export function authoritySpan(text) {
+    return scanTopLevel(text).get("authority");
+}
+/**
+ * Every top-level member of `text`, name to the exact source text of its value.
+ *
+ * A repeated name is REFUSED rather than resolved. `JSON.parse` keeps the last one, so a body
+ * with two `authority` members would have two candidate spans and no reason to prefer either;
+ * refusing is the only answer that cannot be argued with. That reasoning is about `authority`,
+ * but the refusal is applied to every member, because "which of the two did you mean" has no
+ * good answer for any of them.
+ */
+export function scanTopLevel(text) {
+    const members = new Map();
+    const cur = new Cursor(text);
+    cur.ws();
+    cur.expect("{");
+    cur.ws();
+    if (cur.peek() === "}") {
+        cur.take();
+    }
+    else {
+        for (;;) {
+            cur.ws();
+            const key = cur.str();
+            if (members.has(key))
+                throw new Error(`the body repeats the top-level key ${JSON.stringify(key)}`);
+            cur.ws();
+            cur.expect(":");
+            cur.ws();
+            const start = cur.i;
+            cur.skip();
+            members.set(key, text.slice(start, cur.i));
+            cur.ws();
+            const next = cur.take();
+            if (next === ",")
+                continue;
+            if (next === "}")
+                break;
+            throw new Error("expected , or } after a member");
+        }
+    }
+    cur.ws();
+    if (cur.peek() !== undefined)
+        throw new Error("trailing content after the body");
+    return members;
+}
+/** Just enough JSON to walk a top-level object and measure one member's value. */
+class Cursor {
+    text;
+    i = 0;
+    constructor(text) {
+        this.text = text;
+    }
+    ws() {
+        while (this.i < this.text.length && " \t\n\r".includes(this.text[this.i]))
+            this.i += 1;
+    }
+    peek() {
+        return this.text[this.i];
+    }
+    take() {
+        const c = this.text[this.i];
+        if (c === undefined)
+            throw new Error("unexpected end of body");
+        this.i += 1;
+        return c;
+    }
+    expect(c) {
+        if (this.take() !== c)
+            throw new Error(`expected ${c}`);
+    }
+    /** Consumes a string literal and returns its value. Used for member names only — the
+     *  authority is never decoded. */
+    str() {
+        const start = this.i;
+        this.expect('"');
+        for (;;) {
+            const c = this.take();
+            if (c === '"')
+                return JSON.parse(this.text.slice(start, this.i));
+            // Skip whatever the backslash escapes. For \\uXXXX the four hex digits that follow are
+            // ordinary characters — none of them can be a quote or a backslash — so no special case.
+            if (c === "\\")
+                this.i += 1;
+        }
+    }
+    /** Advances past one value of any type WITHOUT interpreting it. */
+    skip() {
+        this.ws();
+        const c = this.peek();
+        if (c === '"') {
+            this.str();
+            return;
+        }
+        if (c === "{" || c === "[") {
+            const close = c === "{" ? "}" : "]";
+            this.take();
+            this.ws();
+            if (this.peek() === close) {
+                this.take();
+                return;
+            }
+            for (;;) {
+                this.ws();
+                if (close === "}") {
+                    this.str();
+                    this.ws();
+                    this.expect(":");
+                }
+                this.skip();
+                this.ws();
+                const next = this.take();
+                if (next === ",")
+                    continue;
+                if (next === close)
+                    return;
+                throw new Error(`expected , or ${close}`);
+            }
+        }
+        // A number, true, false or null: up to the next structural character.
+        const start = this.i;
+        while (this.i < this.text.length && !",}] \t\n\r".includes(this.text[this.i])) {
+            this.i += 1;
+        }
+        if (this.i === start)
+            throw new Error("expected a value");
+    }
+}
+//# sourceMappingURL=json.js.map

package/dist/src/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../src/json.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,0FAA0F;AAE1F;;kDAEkD;AAClD,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AAExC;;uEAEuE;AACvE,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAE/B;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,IAAI,IAAI,CAAC,MAAM,GAAG,YAAY,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,oDAAoD,YAAY,aAAa,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,KAAiB;IACrC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED;uCACuC;AACvC,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAClF,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChG,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,GAAgB,EAAE,OAA0B;IACpE,IAAI,GAAG,CAAC,UAAU,GAAG,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,WAAW,GAAG,CAAC,UAAU,oBAAoB,cAAc,MAAM,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnE,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,uFAAuF;IACvF,wFAAwF;IACxF,kFAAkF;IAClF,iDAAiD;IACjD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAUD;;;;;;;GAOG;AACH,MAAM,cAAc,GAAG,wEAAwE,CAAC;AAEhG;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAClE,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACpF,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,WAAmB;IACzC,OAAO,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,KAAa;IACxD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,EAAE,CAAC;IACT,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChB,GAAG,CAAC,EAAE,EAAE,CAAC;IACT,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,EAAE,CAAC;IACb,CAAC;SAAM,CAAC;QACN,SAAS,CAAC;YACR,GAAG,CAAC,EAAE,EAAE,CAAC;YACT,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC;YACtB,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnG,GAAG,CAAC,EAAE,EAAE,CAAC;YACT,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,GAAG,CAAC,EAAE,EAAE,CAAC;YACT,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC;YACpB,GAAG,CAAC,IAAI,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,GAAG,CAAC,EAAE,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,IAAI,KAAK,GAAG;gBAAE,SAAS;YAC3B,IAAI,IAAI,KAAK,GAAG;gBAAE,MAAM;YACxB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,GAAG,CAAC,EAAE,EAAE,CAAC;IACT,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACjF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,kFAAkF;AAClF,MAAM,MAAM;IAGmB,IAAI;IAFjC,CAAC,GAAG,CAAC,CAAC;IAEN,YAA6B,IAAY;oBAAZ,IAAI;IAAW,CAAC;IAE7C,EAAE;QACA,OAAO,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC;YAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;IACnG,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI;QACF,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC/D,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QACZ,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,CAAC,CAAS;QACd,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;sCACkC;IAClC,GAAG;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjB,SAAS,CAAC;YACR,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAW,CAAC;YAC3E,uFAAuF;YACvF,yFAAyF;YACzF,IAAI,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,IAAI;QACF,IAAI,CAAC,EAAE,EAAE,CAAC;QACV,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,GAAG,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,IAAI,CAAC,EAAE,EAAE,CAAC;YACV,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;gBAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,SAAS,CAAC;gBACR,IAAI,CAAC,EAAE,EAAE,CAAC;gBACV,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;oBAClB,IAAI,CAAC,GAAG,EAAE,CAAC;oBACX,IAAI,CAAC,EAAE,EAAE,CAAC;oBACV,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACnB,CAAC;gBACD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,IAAI,CAAC,EAAE,EAAE,CAAC;gBACV,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBACzB,IAAI,IAAI,KAAK,GAAG;oBAAE,SAAS;gBAC3B,IAAI,IAAI,KAAK,KAAK;oBAAE,OAAO;gBAC3B,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,EAAE,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,sEAAsE;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC,EAAE,CAAC;YACxF,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC5D,CAAC;CACF"}

package/dist/src/login.d.ts

@@ -0,0 +1,84 @@
+/** The header carrying the browser's collect proof. Exported because a browser client has to
+ *  spell it, and one spelling in one place is how the two halves stay agreed. */
+export declare const COLLECT_HEADER = "archon-collect";
+/** Five minutes, from §4. */
+export declare const DEFAULT_TTL_SECONDS = 300;
+/** Five seconds, from §4. */
+export declare const DEFAULT_INTERVAL_SECONDS = 5;
+/**
+ * Interprets the authority payload — the ONLY place one is interpreted, and archon ships no
+ * implementation. THROWING refuses the answer with `403 invalid_grant` and stores nothing.
+ * Omitting it means the proof alone suffices, which is right for a service whose law needs
+ * nothing beyond "this key holder was here and approved this scope".
+ *
+ * It may be async, and the handler awaits it. See the note on `answer` for why every check it
+ * depends on is repeated afterwards.
+ */
+export type AdmitAuthority = (browser: Uint8Array, principal: Uint8Array, authority: Uint8Array) => void | Promise<void>;
+/** Seconds since the Unix epoch. A config field rather than a call to `Date.now()`, which is
+ *  the sdk's rule and the reason the suite never sleeps. */
+export type Clock = () => number;
+/** Fills `n` bytes. A config field for the same reason as `Clock`: a test predicts it,
+ *  production draws from the platform's CSPRNG. */
+export type Entropy = (n: number) => Uint8Array;
+/** What a service supplies. Only the audience is required. */
+export interface Config {
+    /** The service's public identity, and a fixed point of §2.1 — see the constructor. */
+    audience: string;
+    /** The path prefix the routes live under, e.g. `/api/login`. Default: none. */
+    mount?: string;
+    admit?: AdmitAuthority;
+    /** The address a person opens to finish a login the CLI started (§4.1 — the offers form).
+     *  Optional. When set, an offer's response carries `<page>#<code>`: the code travels in the
+     *  FRAGMENT, which a browser never sends to any server, so it reaches the page's script and
+     *  no log. A page that already carries a fragment is refused by the constructor. The CLI
+     *  prints the address and never opens it (§4.1 rule 1). */
+    page?: string;
+    /** How long a pending login lives — and how long an open offer lives. */
+    ttlSeconds?: number;
+    intervalSeconds?: number;
+    clock?: Clock;
+    entropy?: Entropy;
+}
+export declare class Handler {
+    #private;
+    readonly audience: string;
+    readonly mount: string;
+    readonly page: string | undefined;
+    readonly ttlSeconds: number;
+    readonly intervalSeconds: number;
+    /**
+     * Builds a handler, or throws explaining why the configuration cannot work.
+     *
+     * THE AUDIENCE MUST BE A FIXED POINT OF THE §2.1 GRAMMAR, and that is checked with the
+     * grammar itself rather than with a list of rules restated here. `https://Dawn.example/api`,
+     * `…:443` and `wss://…` each DERIVE to something else, so a handler configured with one
+     * would bind the spelling in the config file while the CLI bound the derived one, and every
+     * proof would fail with nothing on either side saying why. Feeding the audience back through
+     * `deriveAudience` asks the only question that matters: is this the string the CLI will
+     * produce?
+     *
+     * The `/login/00` is the shortest invocation URL the grammar admits — a minimum-length id —
+     * and exists only to make the audience parseable as one.
+     */
+    constructor(config: Config);
+    /**
+     * The four shapes of §4 and the two of §4.1, relative to the mount:
+     *
+     *   POST   ""               begin       the browser opens a request ("offer" names an offer)
+     *   POST   "/offers"        offer       the CLI registers what it will delegate, under its code
+     *   GET    "/offers/<code>" read offer  the page reads it once; the CLI polls it until taken
+     *   GET    "/<id>"          read        the CLI reads what it is being asked to sign
+     *   POST   "/<id>/answer"   answer      the CLI delivers the proof
+     *   GET    "/<id>/answer"   collect     the browser takes the answer, once
+     *
+     * The `offers` segment is matched before the id routes. There is no ambiguity to resolve —
+     * an id is hex and `offers` is not — but the order says which family owns the segment.
+     */
+    handle(request: Request): Promise<Response>;
+    /** Drops expired records and dead offers and reports how many went. Optional: both also
+     *  expire on read, so a handler that is never swept is correct, just less tidy. This package
+     *  starts no timer of its own — a long-lived service calls this from its own maintenance
+     *  loop. */
+    sweep(): number;
+}

package/dist/src/login.js

@@ -0,0 +1,616 @@
+// The service side of the archon login protocol (docs/login.md §4 and §4.1): the four routes a
+// browser and a CLI need to rendezvous, and the two by which the CLI may start instead (an
+// offer, read and taken by the page), so a service adopts proof-of-possession sign-in by
+// mounting a handler rather than by building a session system.
+//
+// FETCH-STYLE, WHICH IS THIS LANE'S WHOLE ADAPTER STORY. `handle` is
+// `(Request) => Promise<Response>` over the Web platform's own types, so the same handler
+// mounts in Node 18+, Deno, Bun, Cloudflare Workers and any framework that speaks fetch —
+// without this package depending on any of them. Express and friends need about ten lines of
+// glue, which belongs beside this package rather than inside it (`examples/serve.ts` is the
+// node:http version).
+//
+// Three things this package deliberately is not (ADR 0007 §B):
+//
+//   - Not a server. It opens no socket and starts no timer.
+//   - Not a law. The authority payload is opaque bytes, interpreted only inside the
+//     AdmitAuthority the service supplies. archon ships no implementation of one.
+//   - Not a store. One in-memory record per pending login, dropped at expiry or on collection.
+//
+// THE AUDIENCE IS CONFIGURED, NEVER READ FROM THE WIRE. Every binding is recomputed from the
+// string the service configured. That is the WebAuthn rule and review Finding 1: a relying
+// party's identity comes from its own configuration, not from a value an attacker can put in
+// a message. No code path here reads an audience from a request.
+//
+// The scheme itself — the binding layout, the domain, the proofs — is @bitspark/archon-sdk's
+// and is consumed, never reimplemented: a binding written twice is a binding that drifts.
+import { decodeKey, encodeKey } from "@bitspark/archon";
+import { deriveAudience, loginBinding, LOGIN_ROLE_LOGIN, verifyCollect, verifyLogin } from "@bitspark/archon-sdk";
+import { checkCode, checkScopeEntry, fromHex, parseBody, rfc3339, stripMount, toHex } from "./json.js";
+/** The RFC 8628 / RFC 6749 codes §4 adopts verbatim. Their bearer-token result is not ours,
+ *  but their vocabulary is, so a client that already speaks device flow behaves well. */
+const ERR_INVALID_REQUEST = "invalid_request";
+const ERR_INVALID_GRANT = "invalid_grant";
+const ERR_EXPIRED_TOKEN = "expired_token";
+const ERR_PENDING = "authorization_pending";
+const ERR_SLOW_DOWN = "slow_down";
+/** The header carrying the browser's collect proof. Exported because a browser client has to
+ *  spell it, and one spelling in one place is how the two halves stay agreed. */
+export const COLLECT_HEADER = "archon-collect";
+/** Five minutes, from §4. */
+export const DEFAULT_TTL_SECONDS = 300;
+/** Five seconds, from §4. */
+export const DEFAULT_INTERVAL_SECONDS = 5;
+/** The floor on both the generated id and the generated nonce. §3.1 requires it of the nonce
+ *  and recommends it for the id; this package applies it to both, since an id a stranger can
+ *  guess is the address of a pending login. */
+const MIN_ENTROPY = 16;
+/** §4.1's "differs in any way", stated once: the same number of entries, each equal to its
+ *  counterpart IN ORDER, and the same validity. A set comparison would let a page reorder
+ *  what the person typed; a length comparison would let it swap an entry. */
+function matchesOffer(offer, scope, validFor) {
+    return validFor === offer.validFor && scope.length === offer.scope.length && scope.every((s, i) => s === offer.scope[i]);
+}
+const JSON_HEADERS = { "content-type": "application/json", "cache-control": "no-store" };
+/** The error body of §4: exactly `{"error": "<code>"}` and nothing else. No description, no
+ *  echoed id — a client that guessed an id learns only that it is not pending, which is the
+ *  same thing it learns for an id that never existed. */
+function fail(status, code) {
+    return new Response(JSON.stringify({ error: code }), { status, headers: JSON_HEADERS });
+}
+function ok(status, body) {
+    return new Response(JSON.stringify(body), { status, headers: JSON_HEADERS });
+}
+/** `checkCode` as a predicate, for the two routes that answer a malformed code with 404. */
+function isCode(code) {
+    try {
+        checkCode(code);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function toRequest(record) {
+    return {
+        id: record.id,
+        nonce: record.nonce,
+        browser: record.browser,
+        scope: record.scope,
+        validFor: record.validFor,
+    };
+}
+export class Handler {
+    audience;
+    mount;
+    page;
+    ttlSeconds;
+    intervalSeconds;
+    #admit;
+    #clock;
+    #entropy;
+    #records = new Map();
+    #offers = new Map();
+    /**
+     * Builds a handler, or throws explaining why the configuration cannot work.
+     *
+     * THE AUDIENCE MUST BE A FIXED POINT OF THE §2.1 GRAMMAR, and that is checked with the
+     * grammar itself rather than with a list of rules restated here. `https://Dawn.example/api`,
+     * `…:443` and `wss://…` each DERIVE to something else, so a handler configured with one
+     * would bind the spelling in the config file while the CLI bound the derived one, and every
+     * proof would fail with nothing on either side saying why. Feeding the audience back through
+     * `deriveAudience` asks the only question that matters: is this the string the CLI will
+     * produce?
+     *
+     * The `/login/00` is the shortest invocation URL the grammar admits — a minimum-length id —
+     * and exists only to make the audience parseable as one.
+     */
+    constructor(config) {
+        if (config.audience.length === 0) {
+            throw new Error("login: an audience is required — the handler binds to it and never reads one from the wire");
+        }
+        let derived;
+        try {
+            derived = deriveAudience(`${config.audience}/login/00`).audience;
+        }
+        catch (cause) {
+            throw new Error(`login: audience ${JSON.stringify(config.audience)} is not valid: ${String(cause)} (docs/login.md §2.1)`);
+        }
+        if (derived !== config.audience) {
+            throw new Error(`login: audience ${JSON.stringify(config.audience)} is not canonical — the CLI will derive ` +
+                `${JSON.stringify(derived)} and bind THAT, so every proof would fail. ` +
+                `Configure ${JSON.stringify(derived)} (docs/login.md §2.1)`);
+        }
+        // The code goes in the page's fragment (§4.1), so a page that already has one is a
+        // configuration mistake — refused here, where the operator can read it, rather than
+        // producing an address with two fragments that no browser parses the way anyone meant.
+        if (config.page !== undefined && config.page.includes("#")) {
+            throw new Error(`login: page ${JSON.stringify(config.page)} carries a fragment — the offer's code goes there (docs/login.md §4.1)`);
+        }
+        this.audience = config.audience;
+        this.mount = (config.mount ?? "").replace(/\/+$/, "");
+        this.page = config.page;
+        this.ttlSeconds = config.ttlSeconds ?? DEFAULT_TTL_SECONDS;
+        this.intervalSeconds = config.intervalSeconds ?? DEFAULT_INTERVAL_SECONDS;
+        this.#admit = config.admit;
+        this.#clock = config.clock ?? (() => Math.floor(Date.now() / 1000));
+        this.#entropy = config.entropy ?? ((n) => crypto.getRandomValues(new Uint8Array(n)));
+    }
+    /**
+     * The four shapes of §4 and the two of §4.1, relative to the mount:
+     *
+     *   POST   ""               begin       the browser opens a request ("offer" names an offer)
+     *   POST   "/offers"        offer       the CLI registers what it will delegate, under its code
+     *   GET    "/offers/<code>" read offer  the page reads it once; the CLI polls it until taken
+     *   GET    "/<id>"          read        the CLI reads what it is being asked to sign
+     *   POST   "/<id>/answer"   answer      the CLI delivers the proof
+     *   GET    "/<id>/answer"   collect     the browser takes the answer, once
+     *
+     * The `offers` segment is matched before the id routes. There is no ambiguity to resolve —
+     * an id is hex and `offers` is not — but the order says which family owns the segment.
+     */
+    async handle(request) {
+        const path = stripMount(new URL(request.url).pathname, this.mount);
+        if (path === undefined)
+            return fail(404, ERR_EXPIRED_TOKEN);
+        const parts = path.split("/").filter((p) => p.length > 0);
+        const method = request.method.toUpperCase();
+        if (parts.length === 0) {
+            return method === "POST" ? this.#begin(request) : fail(405, ERR_INVALID_REQUEST);
+        }
+        if (parts[0] === "offers") {
+            if (parts.length === 1)
+                return method === "POST" ? this.#offer(request) : fail(405, ERR_INVALID_REQUEST);
+            if (parts.length === 2)
+                return method === "GET" ? this.#readOffer(parts[1]) : fail(405, ERR_INVALID_REQUEST);
+            return fail(404, ERR_EXPIRED_TOKEN);
+        }
+        const id = parts[0];
+        if (parts.length === 1) {
+            return method === "GET" ? this.#read(id) : fail(405, ERR_INVALID_REQUEST);
+        }
+        if (parts.length === 2 && parts[1] === "answer") {
+            if (method === "POST")
+                return this.#answer(request, id);
+            if (method === "GET")
+                return this.#collect(request, id);
+            return fail(405, ERR_INVALID_REQUEST);
+        }
+        return fail(404, ERR_EXPIRED_TOKEN);
+    }
+    /** Drops expired records and dead offers and reports how many went. Optional: both also
+     *  expire on read, so a handler that is never swept is correct, just less tidy. This package
+     *  starts no timer of its own — a long-lived service calls this from its own maintenance
+     *  loop. */
+    sweep() {
+        const now = this.#clock();
+        let dropped = 0;
+        for (const [key, record] of this.#records) {
+            if (now >= record.expires) {
+                this.#records.delete(key);
+                dropped += 1;
+            }
+        }
+        // Offers after records, so an offer whose request just went is seen as orphaned.
+        for (const [code, offer] of this.#offers) {
+            if (!this.#offerIsLive(offer, now)) {
+                this.#offers.delete(code);
+                dropped += 1;
+            }
+        }
+        return dropped;
+    }
+    /** Creates a pending record: the server's id and nonce, the browser's key, the scope and
+     *  validity it asked for. The nonce is the SERVER's, never the browser's — a nonce a caller
+     *  chooses is a nonce a caller can replay (§3.1).
+     *
+     *  On an offer, the request must be what the prover offered — scope entry for entry, in
+     *  order, and validity equal — and the offer must be open. That is checked FIRST, before the
+     *  browser key is decoded and before any entropy is drawn (§4.1: refused before anything is
+     *  stored, before any key is involved), and again when the request is stored and the offer
+     *  taken — with NO `await` between the check and the take, which is this lane's critical
+     *  section (see `#takeOffer`). */
+    async #begin(request) {
+        let body;
+        try {
+            ({ body } = parseBody(await request.arrayBuffer(), ["browser", "scope", "valid_for", "offer"]));
+        }
+        catch {
+            return fail(400, ERR_INVALID_REQUEST);
+        }
+        // `valid_for`, and ONLY that spelling. A `validFor` alias here would be comfortable for a
+        // TypeScript caller and would let them write a client that go and rs refuse -- the exact
+        // cross-lane divergence the shared wire fixture exists to prevent. One wire, three lanes.
+        const validFor = body["valid_for"];
+        const browserText = body["browser"];
+        const scopeRaw = body["scope"] ?? [];
+        if (typeof browserText !== "string" || !Array.isArray(scopeRaw))
+            return fail(400, ERR_INVALID_REQUEST);
+        if (typeof validFor !== "number" || !Number.isInteger(validFor) || validFor <= 0 || validFor > 0xffffffff) {
+            return fail(400, ERR_INVALID_REQUEST);
+        }
+        const scope = [];
+        for (const entry of scopeRaw) {
+            if (typeof entry !== "string")
+                return fail(400, ERR_INVALID_REQUEST);
+            try {
+                checkScopeEntry(entry);
+            }
+            catch {
+                return fail(400, ERR_INVALID_REQUEST);
+            }
+            scope.push(entry);
+        }
+        // THE OFFER IS CHECKED HERE — before the browser key is decoded, before any entropy is
+        // drawn (§4.1: refused before anything is stored, before any key is involved).
+        let offerCode;
+        if ("offer" in body) {
+            const code = body["offer"];
+            // A member that is present must be a code STRING: null or any other type is a malformed
+            // body (400), the same answer go and rs give — refused, not read as "no offer" (the
+            // page-started form leaves the member out) and not mistaken for an unknown code.
+            if (typeof code !== "string")
+                return fail(400, ERR_INVALID_REQUEST);
+            // A malformed code is an UNKNOWN one: a registered code is always well-formed, so this
+            // names nothing, and the answer is the poll route's 404 — not a 400 that would tell a
+            // prober which of its guesses were at least the right shape.
+            if (!isCode(code))
+                return fail(404, ERR_EXPIRED_TOKEN);
+            const refused = this.#checkOffer(code, scope, validFor);
+            if (refused !== undefined)
+                return refused;
+            offerCode = code;
+        }
+        let browser;
+        try {
+            browser = decodeKey(browserText);
+        }
+        catch {
+            return fail(400, ERR_INVALID_REQUEST);
+        }
+        const record = {
+            id: this.#entropy(MIN_ENTROPY),
+            nonce: this.#entropy(MIN_ENTROPY),
+            browser,
+            scope,
+            validFor,
+            expires: this.#clock() + this.ttlSeconds,
+            answered: undefined,
+            lastPoll: undefined,
+        };
+        // A request that cannot produce a binding must not be handed out: the CLI would fetch it,
+        // show it, and fail at signing time with nothing to explain.
+        try {
+            loginBinding(LOGIN_ROLE_LOGIN, this.audience, toRequest(record));
+        }
+        catch {
+            return fail(400, ERR_INVALID_REQUEST);
+        }
+        const idHex = toHex(record.id);
+        if (offerCode !== undefined) {
+            const refused = this.#takeOffer(offerCode, idHex, record);
+            if (refused !== undefined)
+                return refused;
+        }
+        else {
+            this.#records.set(idHex, record);
+        }
+        // The same body whether or not an offer was named: the offer is not echoed, so a browser
+        // client needs one shape for begin (pinned as begin_on_offer in login-wire.json).
+        return ok(201, {
+            id: idHex,
+            nonce: toHex(record.nonce),
+            browser: browserText,
+            scope,
+            valid_for: validFor,
+            expires_in: this.ttlSeconds,
+            interval: this.intervalSeconds,
+            verification_uri: `${this.audience}/login/${idHex}`,
+        });
+    }
+    /** §4.1's refusals for a request naming an offer, or undefined when it may go on: unknown,
+     *  expired or orphaned → 404 (one answer, indistinguishable); taken → 409 (one offer, one
+     *  request); differing from the offer in any way → 400. `#begin` asks twice — before
+     *  building the request and again when storing it. */
+    #checkOffer(code, scope, validFor) {
+        const offer = this.#liveOffer(code);
+        if (offer === undefined)
+            return fail(404, ERR_EXPIRED_TOKEN);
+        if (offer.request !== undefined)
+            return fail(409, ERR_INVALID_REQUEST);
+        if (!matchesOffer(offer, scope, validFor))
+            return fail(400, ERR_INVALID_REQUEST);
+        return undefined;
+    }
+    /** Stores the request AND marks the offer taken, repeating every check first and with NO
+     *  `await` between check and take — in this lane that span is the critical section, and it
+     *  is what makes "exactly one of two pages beginning on one code wins" a fact rather than a
+     *  likelihood. The offer may have been taken, or died, while the request was being built. */
+    #takeOffer(code, idHex, record) {
+        const refused = this.#checkOffer(code, record.scope, record.validFor);
+        if (refused !== undefined)
+            return refused;
+        this.#records.set(idHex, record);
+        const offer = this.#offers.get(code);
+        if (offer !== undefined)
+            offer.request = idHex;
+        return undefined;
+    }
+    /** Registers what a prover is willing to delegate, under a code the PROVER minted. The
+     *  server draws no entropy here: the code is the prover's own, which is what lets the prover
+     *  know it before anyone else does and print it on its own terminal (§4.1 "The code").
+     *
+     *  Everything that would make the offer impossible to begin on is refused now, at the door,
+     *  rather than at the page's begin — where the refusal would reach the page and not the
+     *  person who typed the offer: a malformed code, a validity of zero, a scope entry the CLI
+     *  could not display, and a scope that cannot bind at all. */
+    async #offer(request) {
+        let body;
+        try {
+            ({ body } = parseBody(await request.arrayBuffer(), ["code", "scope", "valid_for"]));
+        }
+        catch {
+            return fail(400, ERR_INVALID_REQUEST);
+        }
+        const code = body["code"];
+        const validFor = body["valid_for"];
+        const scopeRaw = body["scope"] ?? [];
+        if (typeof code !== "string" || !isCode(code) || !Array.isArray(scopeRaw))
+            return fail(400, ERR_INVALID_REQUEST);
+        if (typeof validFor !== "number" || !Number.isInteger(validFor) || validFor <= 0 || validFor > 0xffffffff) {
+            return fail(400, ERR_INVALID_REQUEST);
+        }
+        const scope = [];
+        for (const entry of scopeRaw) {
+            if (typeof entry !== "string")
+                return fail(400, ERR_INVALID_REQUEST);
+            try {
+                checkScopeEntry(entry);
+            }
+            catch {
+                return fail(400, ERR_INVALID_REQUEST);
+            }
+            scope.push(entry);
+        }
+        // THE SCOPE MUST BIND. A binding needs a key and an id the offer does not have yet, so the
+        // probe uses placeholders of the right size: what is being asked is only whether THESE
+        // scope entries and THIS validity fit the binding's fields (§3.2), which no key changes. An
+        // offer that passes here can always be begun on; one that failed would have sat open until
+        // it expired, every begin on it refused for a reason the page cannot see.
+        try {
+            loginBinding(LOGIN_ROLE_LOGIN, this.audience, {
+                id: new Uint8Array(MIN_ENTROPY),
+                nonce: new Uint8Array(MIN_ENTROPY),
+                browser: new Uint8Array(32),
+                scope,
+                validFor,
+            });
+        }
+        catch {
+            return fail(400, ERR_INVALID_REQUEST);
+        }
+        // One code, one offer: a LIVE offer under this code already is a conflict. The prover
+        // minted the code from 16 bytes of its own entropy, so this is a broken prover or a
+        // replay, never a collision worth retrying silently. A dead offer under the code is simply
+        // replaced — the code is free again.
+        if (this.#liveOffer(code) !== undefined)
+            return fail(409, ERR_INVALID_REQUEST);
+        const now = this.#clock();
+        this.#offers.set(code, { code, scope, validFor, expires: now + this.ttlSeconds, request: undefined });
+        const response = {
+            code,
+            scope,
+            valid_for: validFor,
+            expires_in: this.ttlSeconds,
+            interval: this.intervalSeconds,
+        };
+        // The code rides in the fragment, which a browser keeps to itself: the page's script reads
+        // it, no server and no log ever sees it (§4.1 "The code").
+        if (this.page !== undefined)
+            response["page"] = `${this.page}#${code}`;
+        return ok(201, response);
+    }
+    /** Read once by the page — to learn what it is being offered — and polled by the prover
+     *  until `request` names the request that took the offer (§4.1).
+     *
+     *  There is deliberately NO pacing on this route (ADR 0007 §C.7, amendment #39). Two parties
+     *  poll it, and one reference time would let the prover's period lock the page out on every
+     *  retry; and there is nothing here to protect — no proof to verify, no answer to hand over.
+     *  A stranger who holds the code already has everything this route returns. The prover paces
+     *  itself by the `interval` the offer response advertised.
+     *
+     *  A malformed code is 404, the same as an unknown one: a registered code is always
+     *  well-formed, so a malformed one is unknown by construction. */
+    #readOffer(code) {
+        if (!isCode(code))
+            return fail(404, ERR_EXPIRED_TOKEN);
+        const offer = this.#liveOffer(code);
+        if (offer === undefined)
+            return fail(404, ERR_EXPIRED_TOKEN);
+        return ok(200, {
+            code: offer.code,
+            scope: offer.scope,
+            valid_for: offer.validFor,
+            // null until taken, then the id — the shape a poller switches on.
+            request: offer.request ?? null,
+            expires: rfc3339(offer.expires),
+        });
+    }
+    /** The one definition of a live offer: unexpired, and — if a request has taken it — that
+     *  request still present and unexpired. "Dies with its request" (§4.1) is enforced here, on
+     *  every read, rather than by anything that runs when a request is collected: an offer that
+     *  consults the record it points at can never disagree with it. */
+    #offerIsLive(offer, now) {
+        if (now >= offer.expires)
+            return false;
+        if (offer.request === undefined)
+            return true;
+        const record = this.#records.get(offer.request);
+        return record !== undefined && now < record.expires;
+    }
+    /** The live offer under `code`, or undefined if it never existed, expired, or died with its
+     *  request — one answer on the wire, so a stranger probing codes learns nothing. */
+    #liveOffer(code) {
+        const offer = this.#offers.get(code);
+        if (offer === undefined)
+            return undefined;
+        if (!this.#offerIsLive(offer, this.#clock())) {
+            this.#offers.delete(code);
+            return undefined;
+        }
+        return offer;
+    }
+    /** What the CLI fetches. It answers with the request and NOT with the audience: there is no
+     *  audience field in this response by design, because a CLI that would read one is a CLI
+     *  that can be told to sign for someone else (Finding 1). */
+    #read(idHex) {
+        const record = this.#live(idHex);
+        if (record === undefined)
+            return fail(404, ERR_EXPIRED_TOKEN);
+        return ok(200, {
+            id: idHex,
+            nonce: toHex(record.nonce),
+            browser: encodeKey(record.browser),
+            scope: record.scope,
+            valid_for: record.validFor,
+            expires: rfc3339(record.expires),
+        });
+    }
+    /**
+     * Verifies BEFORE storing, which is the whole point of the route (§4).
+     *
+     * THE AWAIT IS THE HAZARD. `AdmitAuthority` is the SERVICE's code and may be async — a
+     * database, a network call — and JavaScript hands the runtime to every other pending request
+     * at that `await`. So the state this decision rests on is RE-CHECKED afterwards: a second
+     * CLI answering the same login while the first was being admitted is ordinary (a person with
+     * two terminals), and the loser must get 409 rather than overwrite an answer the browser may
+     * already have collected.
+     *
+     * The three server lanes reach the same rule from opposite directions: go and rs must keep
+     * the law OUT of the store's mutex so one slow law cannot decide the throughput of every
+     * login; here there is no mutex to hold, and the danger is the interleaving that an `await`
+     * makes certain rather than merely possible.
+     */
+    async #answer(request, idHex) {
+        let body;
+        let authority;
+        try {
+            const parsed = parseBody(await request.arrayBuffer(), ["principal", "possession", "authority"]);
+            body = parsed.body;
+            // The authority is carried as the bytes the CLI sent, never rebuilt from the parse.
+            // See `authoritySpan`: JSON.parse + JSON.stringify silently rewrites large integers,
+            // trailing zeros, escapes and key order.
+            authority = parsed.members.get("authority");
+            if (authority === undefined && Object.prototype.hasOwnProperty.call(body, "authority")) {
+                // The parser saw a member the scanner did not. They read the same bytes, so this is
+                // not a request problem — but guessing which one is right is how a payload gets
+                // rebuilt behind the law's back. Refuse instead.
+                return fail(400, ERR_INVALID_REQUEST);
+            }
+        }
+        catch {
+            return fail(400, ERR_INVALID_REQUEST);
+        }
+        const principalText = body["principal"];
+        const possessionText = body["possession"];
+        if (typeof principalText !== "string" || typeof possessionText !== "string") {
+            return fail(400, ERR_INVALID_REQUEST);
+        }
+        let principal;
+        let possession;
+        try {
+            principal = decodeKey(principalText);
+            possession = fromHex(possessionText);
+        }
+        catch {
+            return fail(400, ERR_INVALID_REQUEST);
+        }
+        const record = this.#live(idHex);
+        if (record === undefined)
+            return fail(404, ERR_EXPIRED_TOKEN);
+        if (record.answered !== undefined)
+            return fail(409, ERR_INVALID_REQUEST);
+        if (!verifyLogin(principal, this.audience, toRequest(record), possession)) {
+            return fail(403, ERR_INVALID_GRANT);
+        }
+        if (this.#admit !== undefined) {
+            try {
+                await this.#admit(record.browser, principal, new TextEncoder().encode(authority ?? ""));
+            }
+            catch {
+                return fail(403, ERR_INVALID_GRANT);
+            }
+        }
+        // Everything the decision rested on, re-read after the await.
+        const still = this.#live(idHex);
+        if (still === undefined)
+            return fail(404, ERR_EXPIRED_TOKEN);
+        if (still.answered !== undefined) {
+            // Another answer won while this one was being admitted. Storing here would discard a
+            // proof the browser may already have collected.
+            return fail(409, ERR_INVALID_REQUEST);
+        }
+        still.answered = { principal: principalText, possession: possessionText, authority };
+        return new Response(null, { status: 204 });
+    }
+    /**
+     * Hands the answer to the browser ONCE and drops the record.
+     *
+     * THE ORDER IS caa's FIX: the interval is checked WITHOUT writing the timer, the proof is
+     * verified, and only then does the timer advance — immediately before the answer is taken,
+     * with NO `await` in between, which is what makes the take-and-drop atomic in this lane.
+     * Advancing the timer before verification let a stranger polling junk hold the real browser
+     * at 429 indefinitely, turning slow_down into a denial of service handed to anyone who saw
+     * the id.
+     *
+     * A stranger is therefore not rate-limited here at all. That is correct: they get 403 every
+     * time, and §B says to add no rate limiting beyond slow_down, which exists for the legitimate
+     * client rather than as a guard.
+     */
+    #collect(request, idHex) {
+        const header = request.headers.get(COLLECT_HEADER);
+        if (header === null || header.length === 0)
+            return fail(403, ERR_INVALID_GRANT);
+        let proof;
+        try {
+            proof = fromHex(header);
+        }
+        catch {
+            return fail(403, ERR_INVALID_GRANT);
+        }
+        const record = this.#live(idHex);
+        if (record === undefined)
+            return fail(404, ERR_EXPIRED_TOKEN);
+        const now = this.#clock();
+        if (record.lastPoll !== undefined && now - record.lastPoll < this.intervalSeconds) {
+            return fail(429, ERR_SLOW_DOWN);
+        }
+        if (!verifyCollect(this.audience, toRequest(record), proof))
+            return fail(403, ERR_INVALID_GRANT);
+        record.lastPoll = now;
+        const answer = record.answered;
+        if (answer === undefined)
+            return fail(202, ERR_PENDING);
+        this.#records.delete(idHex);
+        // Built as TEXT, not as an object handed to JSON.stringify: the authority is spliced in
+        // exactly as the CLI wrote it, which is the whole point. `principal` and `possession` are
+        // this handler's own key text and hex, so encoding those is safe.
+        const authority = answer.authority === undefined ? "" : `,"authority":${answer.authority}`;
+        const body = `{"principal":${JSON.stringify(answer.principal)},` +
+            `"possession":${JSON.stringify(answer.possession)}${authority}}`;
+        return new Response(body, { status: 200, headers: JSON_HEADERS });
+    }
+    /** The record for `idHex`, or undefined if it never existed or has expired — which are the
+     *  same answer on the wire, so a stranger probing ids learns nothing from the difference. */
+    #live(idHex) {
+        const record = this.#records.get(idHex);
+        if (record === undefined)
+            return undefined;
+        if (this.#clock() >= record.expires) {
+            this.#records.delete(idHex);
+            return undefined;
+        }
+        return record;
+    }
+}
+//# sourceMappingURL=login.js.map

package/dist/src/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/login.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,2FAA2F;AAC3F,yFAAyF;AACzF,+DAA+D;AAC/D,EAAE;AACF,qEAAqE;AACrE,0FAA0F;AAC1F,0FAA0F;AAC1F,6FAA6F;AAC7F,4FAA4F;AAC5F,sBAAsB;AACtB,EAAE;AACF,+DAA+D;AAC/D,EAAE;AACF,4DAA4D;AAC5D,oFAAoF;AACpF,kFAAkF;AAClF,+FAA+F;AAC/F,EAAE;AACF,6FAA6F;AAC7F,2FAA2F;AAC3F,6FAA6F;AAC7F,iEAAiE;AACjE,EAAE;AACF,6FAA6F;AAC7F,0FAA0F;AAE1F,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAqB,MAAM,sBAAsB,CAAC;AAErI,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAEvG;yFACyF;AACzF,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAC9C,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAC1C,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAC1C,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAC5C,MAAM,aAAa,GAAG,WAAW,CAAC;AAElC;iFACiF;AACjF,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAE/C,6BAA6B;AAC7B,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,6BAA6B;AAC7B,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C;;+CAE+C;AAC/C,MAAM,WAAW,GAAG,EAAE,CAAC;AAoFvB;;6EAE6E;AAC7E,SAAS,YAAY,CAAC,KAAY,EAAE,KAAe,EAAE,QAAgB;IACnE,OAAO,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3H,CAAC;AAED,MAAM,YAAY,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;AAEzF;;yDAEyD;AACzD,SAAS,IAAI,CAAC,MAAc,EAAE,IAAY;IACxC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,EAAE,CAAC,MAAc,EAAE,IAAa;IACvC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,4FAA4F;AAC5F,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,MAAe;IAChC,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,OAAO;IACT,QAAQ,CAAS;IACjB,KAAK,CAAS;IACd,IAAI,CAAqB;IACzB,UAAU,CAAS;IACnB,eAAe,CAAS;IACxB,MAAM,CAA6B;IACnC,MAAM,CAAQ;IACd,QAAQ,CAAU;IAClB,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IAE5C;;;;;;;;;;;;;OAaG;IACH,YAAY,MAAc;QACxB,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;QAChH,CAAC;QACD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,cAAc,CAAC,GAAG,MAAM,CAAC,QAAQ,WAAW,CAAC,CAAC,QAAQ,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,MAAM,CAAC,KAAK,CAAC,uBAAuB,CACzG,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,0CAA0C;gBAC1F,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,6CAA6C;gBACvE,aAAa,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,uBAAuB,CAC9D,CAAC;QACJ,CAAC;QACD,mFAAmF;QACnF,oFAAoF;QACpF,uFAAuF;QACvF,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,wEAAwE,CACnH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAC3D,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,wBAAwB,CAAC;QAC1E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAE5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACzG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACvH,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAChD,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACxD,IAAI,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACtC,CAAC;IAED;;;gBAGY;IACZ,KAAK;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC1B,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,iFAAiF;QACjF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC1B,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;;;sCASkC;IAClC,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC3B,IAAI,IAA6B,CAAC;QAClC,IAAI,CAAC;YACH,CAAC,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAClG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACxC,CAAC;QAED,0FAA0F;QAC1F,yFAAyF;QACzF,0FAA0F;QAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACvG,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,GAAG,UAAU,EAAE,CAAC;YAC1G,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,QAAqB,EAAE,CAAC;YAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACrE,IAAI,CAAC;gBACH,eAAe,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACxC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,uFAAuF;QACvF,+EAA+E;QAC/E,IAAI,SAA6B,CAAC;QAClC,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,wFAAwF;YACxF,oFAAoF;YACpF,iFAAiF;YACjF,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACpE,uFAAuF;YACvF,sFAAsF;YACtF,6DAA6D;YAC7D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACxD,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC;YAC1C,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,IAAI,OAAmB,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,MAAM,GAAY;YACtB,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC9B,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YACjC,OAAO;YACP,KAAK;YACL,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU;YACxC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,SAAS;SACpB,CAAC;QACF,0FAA0F;QAC1F,6DAA6D;QAC7D,IAAI,CAAC;YACH,YAAY,CAAC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAC1D,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,yFAAyF;QACzF,kFAAkF;QAClF,OAAO,EAAE,CAAC,GAAG,EAAE;YACb,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;YAC1B,OAAO,EAAE,WAAW;YACpB,KAAK;YACL,SAAS,EAAE,QAAQ;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,eAAe;YAC9B,gBAAgB,EAAE,GAAG,IAAI,CAAC,QAAQ,UAAU,KAAK,EAAE;SACpD,CAAC,CAAC;IACL,CAAC;IAED;;;0DAGsD;IACtD,WAAW,CAAC,IAAY,EAAE,KAAe,EAAE,QAAgB;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACvE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACjF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;iGAG6F;IAC7F,UAAU,CAAC,IAAY,EAAE,KAAa,EAAE,MAAe;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtE,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;QAC/C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;kEAO8D;IAC9D,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC3B,IAAI,IAA6B,CAAC;QAClC,IAAI,CAAC;YACH,CAAC,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACjH,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,GAAG,UAAU,EAAE,CAAC;YAC1G,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,QAAqB,EAAE,CAAC;YAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACrE,IAAI,CAAC;gBACH,eAAe,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACxC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,2FAA2F;QAC3F,uFAAuF;QACvF,4FAA4F;QAC5F,2FAA2F;QAC3F,0EAA0E;QAC1E,IAAI,CAAC;YACH,YAAY,CAAC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,EAAE;gBAC5C,EAAE,EAAE,IAAI,UAAU,CAAC,WAAW,CAAC;gBAC/B,KAAK,EAAE,IAAI,UAAU,CAAC,WAAW,CAAC;gBAClC,OAAO,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;gBAC3B,KAAK;gBACL,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACxC,CAAC;QAED,sFAAsF;QACtF,oFAAoF;QACpF,2FAA2F;QAC3F,qCAAqC;QACrC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAEtG,MAAM,QAAQ,GAA4B;YACxC,IAAI;YACJ,KAAK;YACL,SAAS,EAAE,QAAQ;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,eAAe;SAC/B,CAAC;QACF,2FAA2F;QAC3F,2DAA2D;QAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QACvE,OAAO,EAAE,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;;;;sEAUkE;IAClE,UAAU,CAAC,IAAY;QACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QAC7D,OAAO,EAAE,CAAC,GAAG,EAAE;YACb,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,QAAQ;YACzB,kEAAkE;YAClE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;YAC9B,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAED;;;uEAGmE;IACnE,YAAY,CAAC,KAAY,EAAE,GAAW;QACpC,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,MAAM,KAAK,SAAS,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;IACtD,CAAC;IAED;wFACoF;IACpF,UAAU,CAAC,IAAY;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;iEAE6D;IAC7D,KAAK,CAAC,KAAa;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QAC9D,OAAO,EAAE,CAAC,GAAG,EAAE;YACb,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;YAC1B,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;YAClC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,OAAO,CAAC,OAAgB,EAAE,KAAa;QAC3C,IAAI,IAA6B,CAAC;QAClC,IAAI,SAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;YAChG,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACnB,oFAAoF;YACpF,qFAAqF;YACrF,yCAAyC;YACzC,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC5C,IAAI,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;gBACvF,oFAAoF;gBACpF,gFAAgF;gBAChF,iDAAiD;gBACjD,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;YAC5E,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,SAAqB,CAAC;QAC1B,IAAI,UAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,SAAS,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;YACrC,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAEzE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;YAC1E,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1F,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,qFAAqF;YACrF,gDAAgD;YAChD,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,CAAC,QAAQ,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;QACrF,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,OAAgB,EAAE,KAAa;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACnD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QAChF,IAAI,KAAiB,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAClF,OAAO,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QAEjG,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC/B,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE5B,wFAAwF;QACxF,0FAA0F;QAC1F,kEAAkE;QAClE,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,SAAS,EAAE,CAAC;QAC3F,MAAM,IAAI,GACR,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG;YACnD,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC;QACnE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IACpE,CAAC;IAED;iGAC6F;IAC7F,KAAK,CAAC,KAAa;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bitspark/archon-server",
-  "version": "0.7.0",
+  "version": "0.8.2",
   "description": "archon login: the service-side handler — four routes, law-free, store-minimal. A fetch-style handler that opens no socket.",
   "license": "Apache-2.0",
   "repository": {
@@ -18,11 +18,12 @@
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",
+    "prepack": "npm run build",
     "test": "tsc -p tsconfig.json && node --test dist/test/*.test.js"
   },
   "dependencies": {
-    "@bitspark/archon": "^0.7.0",
-    "@bitspark/archon-sdk": "^0.7.0"
+    "@bitspark/archon": "^0.8.2",
+    "@bitspark/archon-sdk": "^0.8.2"
   },
   "devDependencies": {
     "@types/node": "^26",