@broberg/sso 0.19.0 → 0.20.0

package/dist/index.js

@@ -1,5 +1,5 @@
-import { SsoError, ALLOWED_ALGS, JwksUnavailableError, createJwksCache } from './chunk-PQTT74BA.js';
-export { AVATAR_TYPES, DEFAULT_SESSION_MAX_AGE, EMBEDDED_FLOW_MAX_AGE, JwksError, JwksUnavailableError, JwksUnknownKeyError, MAX_AVATAR_BYTES, MAX_INVITATIONS, SsoAppApiError, SsoAvatarRejectedError, SsoConfigError, SsoError, SsoInsufficientScopeError, SsoIntrospectionUnavailableError, SsoReauthError, SsoTokenInactiveError, cookieHeader, createJwksCache, createSsoClient, loadSsoConfig, memoryTokenStore, openEmbeddedFlow, readCookie, sealEmbeddedFlow, signSession, signValue, verifySession, verifyValue } from './chunk-PQTT74BA.js';
+import { SsoError, ALLOWED_ALGS, JwksUnavailableError, createJwksCache } from './chunk-ZDNBHM2G.js';
+export { AVATAR_TYPES, DEFAULT_SESSION_MAX_AGE, EMBEDDED_FLOW_MAX_AGE, JwksError, JwksUnavailableError, JwksUnknownKeyError, MAX_AVATAR_BYTES, MAX_INVITATIONS, SsoAppApiError, SsoAvatarRejectedError, SsoConfigError, SsoError, SsoInsufficientScopeError, SsoIntrospectionUnavailableError, SsoReauthError, SsoTokenInactiveError, cookieHeader, createJwksCache, createSsoClient, loadSsoConfig, memoryTokenStore, openEmbeddedFlow, readCookie, sealEmbeddedFlow, signSession, signValue, verifySession, verifyValue } from './chunk-ZDNBHM2G.js';
 import { existsSync } from 'fs';
 import { request } from 'http';
 import { generateKeyPair, exportJWK, calculateJwkThumbprint, SignJWT, decodeProtectedHeader, importJWK, jwtVerify } from 'jose';
@@ -133,6 +133,22 @@ function jwtExp(token) {
     return null;
   }
 }
+async function readTicketResponse(res, issuer, target, now) {
+  let body = {};
+  try {
+    body = await res.json();
+  } catch {
+  }
+  if (res.status >= 500) throw new TicketUnavailableError(`${issuer} answered ${res.status}`);
+  if (!res.ok || !body.access_token) {
+    const desc = body.error_description ?? "";
+    const code = desc.includes(":") ? desc.slice(0, desc.indexOf(":")).trim() : body.error ?? "exchange_refused";
+    throw new TicketExchangeError(`BID refused the ticket for ${target}: ${desc || body.error || res.status}`, code, res.status);
+  }
+  const nowSec = Math.floor(now() / 1e3);
+  const exp = jwtExp(body.access_token) ?? nowSec + (body.expires_in ?? 300);
+  return { token: body.access_token, exp };
+}
 function createTicketClient(options = {}) {
   const issuer = (options.issuer ?? DEFAULT_ISSUER).replace(/\/+$/, "");
   const renewBeforeSec = options.renewBeforeSec ?? 30;
@@ -183,20 +199,7 @@ function createTicketClient(options = {}) {
     } catch (e) {
       throw new TicketUnavailableError(`${issuer} unreachable: ${e instanceof Error ? e.message : String(e)}`);
     }
-    let body = {};
-    try {
-      body = await res.json();
-    } catch {
-    }
-    if (res.status >= 500) throw new TicketUnavailableError(`${issuer} answered ${res.status}`);
-    if (!res.ok || !body.access_token) {
-      const desc = body.error_description ?? "";
-      const code = desc.includes(":") ? desc.slice(0, desc.indexOf(":")).trim() : body.error ?? "exchange_refused";
-      throw new TicketExchangeError(`BID refused the ticket for ${audience}: ${desc || body.error || res.status}`, code, res.status);
-    }
-    const nowSec = Math.floor(now() / 1e3);
-    const exp = jwtExp(body.access_token) ?? nowSec + (body.expires_in ?? 300);
-    return { token: body.access_token, exp };
+    return readTicketResponse(res, issuer, audience, now);
   }
   const client = {
     async authHeaders({ audience, scope, method, url }) {
@@ -225,6 +228,36 @@ function fetchTicket(opts) {
   shared ??= createTicketClient();
   return shared.get(opts);
 }
+async function exchangeUserToken(opts) {
+  const issuer = (opts.issuer ?? DEFAULT_ISSUER).replace(/\/+$/, "");
+  const target = opts.resource ?? opts.audience;
+  if (!target) throw new TicketExchangeError("exchangeUserToken needs a receiver: resource (its URL) or audience (BID's name for it)", "malformed_request", 0);
+  const fetchImpl = opts.fetchImpl ?? fetch;
+  const now = opts.now ?? (() => Date.now());
+  const form = new URLSearchParams({
+    grant_type: "urn:ietf:params:oauth:grant-type:token-exchange",
+    subject_token: opts.subjectToken,
+    subject_token_type: "urn:ietf:params:oauth:token-type:access_token"
+  });
+  if (opts.resource) form.set("resource", opts.resource);
+  if (opts.audience) form.set("audience", opts.audience);
+  if (opts.scope) form.set("scope", opts.scope);
+  const tokenUrl = `${issuer}/oauth2/token`;
+  const headers = { "content-type": "application/x-www-form-urlencoded" };
+  if (opts.clientSecret) {
+    headers.authorization = `Basic ${btoa(`${encodeURIComponent(opts.clientId)}:${encodeURIComponent(opts.clientSecret)}`)}`;
+  } else {
+    form.set("client_id", opts.clientId);
+  }
+  if (opts.dpopKey) headers.dpop = await createDpopProof(opts.dpopKey, { method: "POST", url: tokenUrl, now });
+  let res;
+  try {
+    res = await fetchImpl(tokenUrl, { method: "POST", headers, body: form });
+  } catch (e) {
+    throw new TicketUnavailableError(`${issuer} unreachable: ${e instanceof Error ? e.message : String(e)}`);
+  }
+  return readTicketResponse(res, issuer, target, now);
+}
 var PRINCIPAL_TYPES = ["human", "service", "agent", "user"];
 var TICKET_FORMAT_VERSION = 1;
 var MAX_ACT_DEPTH = 5;
@@ -364,6 +397,6 @@ function readActor(raw, depth) {
   return link.act === void 0 ? { sub: link.sub } : { sub: link.sub, act: readActor(link.act, depth + 1) };
 }
 
-export { DEFAULT_ISSUER, MAX_ACT_DEPTH, NoWorkloadIdentityError, TICKET_FORMAT_VERSION, TicketExchangeError, TicketUnavailableError, accessTokenHash, createDpopKey, createDpopProof, createMemoryReplayStore, createTicketClient, createTicketVerifier, fetchTicket, normalizeHtu, verifyDpopProof };
+export { DEFAULT_ISSUER, MAX_ACT_DEPTH, NoWorkloadIdentityError, TICKET_FORMAT_VERSION, TicketExchangeError, TicketUnavailableError, accessTokenHash, createDpopKey, createDpopProof, createMemoryReplayStore, createTicketClient, createTicketVerifier, exchangeUserToken, fetchTicket, normalizeHtu, verifyDpopProof };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/dpop.ts","../src/fetch-ticket.ts","../src/ticket.ts"],"names":["decodeProtectedHeader","jwtVerify"],"mappings":";;;;;;AAuCA,eAAsB,aAAA,GAAkC;AACtD,EAAA,MAAM,EAAE,UAAA,EAAY,SAAA,EAAU,GAAI,MAAM,gBAAgB,OAAA,EAAS,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AACvF,EAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,SAAS,CAAA;AACrC,EAAA,MAAM,SAAA,GAAiB,EAAE,GAAA,EAAK,GAAA,CAAI,GAAA,EAAK,GAAA,EAAK,GAAA,CAAI,GAAA,EAAK,CAAA,EAAG,GAAA,CAAI,CAAA,EAAG,CAAA,EAAG,IAAI,CAAA,EAAE;AACxE,EAAA,OAAO,EAAE,UAAA,EAAY,SAAA,EAAW,KAAK,MAAM,sBAAA,CAAuB,SAAS,CAAA,EAAE;AAC/E;AAEA,IAAM,GAAA,GAAM,IAAI,WAAA,EAAY;AAC5B,IAAM,MAAA,GAAS,CAAC,KAAA,KACd,IAAA,CAAK,OAAO,YAAA,CAAa,GAAG,IAAI,UAAA,CAAW,KAAK,CAAC,CAAC,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAG/G,eAAsB,gBAAgB,MAAA,EAAiC;AACrE,EAAA,OAAO,MAAA,CAAO,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,WAAW,GAAA,CAAI,MAAA,CAAO,MAAM,CAAC,CAAC,CAAA;AACzE;AAGO,SAAS,aAAa,GAAA,EAAqB;AAChD,EAAA,MAAM,CAAA,GAAI,IAAI,GAAA,CAAI,GAAG,CAAA;AACrB,EAAA,OAAO,CAAA,EAAG,EAAE,QAAQ,CAAA,EAAA,EAAK,EAAE,IAAI,CAAA,EAAG,EAAE,QAAQ,CAAA,CAAA;AAC9C;AAGA,eAAsB,eAAA,CACpB,KACA,IAAA,EACiB;AACjB,EAAA,MAAM,OAAA,GAAmC;AAAA,IACvC,GAAA,EAAK,OAAO,UAAA,EAAW;AAAA,IACvB,GAAA,EAAK,IAAA,CAAK,MAAA,CAAO,WAAA,EAAY;AAAA,IAC7B,GAAA,EAAK,YAAA,CAAa,IAAA,CAAK,GAAG,CAAA;AAAA,IAC1B,GAAA,EAAK,KAAK,KAAA,CAAA,CAAO,IAAA,CAAK,OAAM,IAAK,IAAA,CAAK,GAAA,EAAI,IAAK,GAAI;AAAA,GACrD;AACA,EAAA,IAAI,IAAA,CAAK,WAAW,MAAA,EAAW,OAAA,CAAQ,MAAM,MAAM,eAAA,CAAgB,KAAK,MAAM,CAAA;AAC9E,EAAA,OAAO,IAAI,OAAA,CAAQ,OAAO,CAAA,CAAE,kBAAA,CAAmB,EAAE,GAAA,EAAK,UAAA,EAAY,GAAA,EAAK,OAAA,EAAS,KAAK,GAAA,CAAI,SAAA,EAAW,CAAA,CAAE,IAAA,CAAK,IAAI,UAAU,CAAA;AAC3H;AAYO,SAAS,uBAAA,CAAwB,GAAA,GAAoB,MAAM,IAAA,CAAK,KAAI,EAAgB;AACzF,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAoB;AACxC,EAAA,OAAO;AAAA,IACL,MAAM,IAAA,CAAK,GAAA,EAAK,KAAA,EAAO;AACrB,MAAA,MAAM,IAAI,GAAA,EAAI;AACd,MAAA,KAAA,MAAW,CAAC,CAAA,EAAG,KAAK,CAAA,IAAK,OAAA,MAAa,KAAA,IAAS,CAAA,EAAG,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA;AAClE,MAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA,EAAG,OAAO,IAAA;AAC7B,MAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,CAAA,GAAI,KAAK,CAAA;AAC1B,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,GACF;AACF;AAaA,IAAM,UAAA,mBAAa,IAAI,GAAA,CAAI,CAAC,SAAS,OAAA,EAAS,OAAA,EAAS,OAAA,EAAS,OAAA,EAAS,OAAA,EAAS,OAAA,EAAS,OAAA,EAAS,OAAA,EAAS,OAAO,CAAC,CAAA;AAGrH,eAAsB,eAAA,CAAgB,OAAe,CAAA,EAAsC;AACzF,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,sBAAsB,KAAK,CAAA;AAAA,EACtC,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,SAAS,yBAAyB,CAAA;AAAA,EAC9C;AACA,EAAA,IAAI,MAAA,CAAO,GAAA,KAAQ,UAAA,EAAY,MAAM,IAAI,QAAA,CAAS,CAAA,mBAAA,EAAsB,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,GAAG,CAAC,CAAA,gBAAA,CAAkB,CAAA;AACpH,EAAA,IAAI,CAAC,MAAA,CAAO,GAAA,IAAO,CAAC,UAAA,CAAW,GAAA,CAAI,OAAO,GAAG,CAAA,EAAG,MAAM,IAAI,SAAS,CAAA,eAAA,EAAkB,IAAA,CAAK,UAAU,MAAA,CAAO,GAAG,CAAC,CAAA,wCAAA,CAA0C,CAAA;AACzJ,EAAA,MAAM,MAAM,MAAA,CAAO,GAAA;AACnB,EAAA,IAAI,CAAC,OAAO,OAAO,GAAA,KAAQ,UAAU,MAAM,IAAI,SAAS,2BAA2B,CAAA;AACnF,EAAA,IAAI,GAAA,IAAO,GAAA,EAAK,MAAM,IAAI,SAAS,uCAAuC,CAAA;AAE1E,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,GAAA,EAAK,OAAO,GAAG,CAAA;AAC3C,IAAA,CAAC,EAAE,OAAA,EAAQ,GAAI,MAAM,UAAU,KAAA,EAAO,GAAA,EAAK,EAAE,GAAA,EAAK,YAAY,UAAA,EAAY,CAAC,MAAA,CAAO,GAAG,GAAG,CAAA;AAAA,EAC1F,SAAS,CAAA,EAAG;AACV,IAAA,MAAM,IAAI,QAAA,CAAS,CAAA,+BAAA,EAAkC,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,EACnG;AAEA,EAAA,IAAK,MAAM,uBAAuB,GAAG,CAAA,KAAO,EAAE,GAAA,EAAK,MAAM,IAAI,QAAA,CAAS,oDAAoD,CAAA;AAC1H,EAAA,IAAI,OAAA,CAAQ,QAAQ,CAAA,CAAE,MAAA,CAAO,aAAY,EAAG,MAAM,IAAI,QAAA,CAAS,CAAA,kBAAA,EAAqB,KAAK,SAAA,CAAU,OAAA,CAAQ,GAAG,CAAC,CAAA,iBAAA,EAAoB,EAAE,MAAA,CAAO,WAAA,EAAa,CAAA,CAAE,CAAA;AAC3J,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,YAAA,CAAa,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,EACxC,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,SAAS,6BAA6B,CAAA;AAAA,EAClD;AACA,EAAA,IAAI,GAAA,KAAQ,YAAA,CAAa,CAAA,CAAE,GAAG,GAAG,MAAM,IAAI,QAAA,CAAS,CAAA,kBAAA,EAAqB,GAAG,CAAA,iBAAA,EAAoB,YAAA,CAAa,CAAA,CAAE,GAAG,CAAC,CAAA,CAAE,CAAA;AACrH,EAAA,MAAM,SAAS,IAAA,CAAK,KAAA,CAAM,CAAA,CAAE,GAAA,KAAQ,GAAI,CAAA;AACxC,EAAA,IAAI,OAAO,OAAA,CAAQ,GAAA,KAAQ,QAAA,IAAY,IAAA,CAAK,GAAA,CAAI,MAAA,GAAS,OAAA,CAAQ,GAAG,CAAA,GAAI,CAAA,CAAE,YAAA,EAAc;AACtF,IAAA,MAAM,IAAI,QAAA,CAAS,CAAA,8BAAA,EAA8B,CAAA,CAAE,YAAY,CAAA,CAAA,CAAG,CAAA;AAAA,EACpE;AACA,EAAA,IAAI,OAAA,CAAQ,GAAA,KAAS,MAAM,eAAA,CAAgB,CAAA,CAAE,MAAM,CAAA,EAAI,MAAM,IAAI,QAAA,CAAS,2CAA2C,CAAA;AACrH,EAAA,IAAI,OAAO,OAAA,CAAQ,GAAA,KAAQ,QAAA,IAAY,OAAA,CAAQ,QAAQ,EAAA,EAAI,MAAM,IAAI,QAAA,CAAS,uBAAuB,CAAA;AACrG,EAAA,IAAI,MAAM,CAAA,CAAE,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,CAAE,GAAG,CAAA,CAAA,EAAI,OAAA,CAAQ,GAAG,CAAA,CAAA,EAAI,CAAA,CAAE,YAAA,GAAe,CAAA,GAAI,GAAI,CAAA,EAAG;AAC7E,IAAA,MAAM,IAAI,SAAS,0CAA0C,CAAA;AAAA,EAC/D;AACF;;;ACrIO,IAAM,cAAA,GAAiB;AAC9B,IAAM,UAAA,GAAa,WAAA;AAGZ,IAAM,uBAAA,GAAN,cAAsC,KAAA,CAAM;AAAA,EACjD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,yBAAA;AAAA,EACd;AACF;AAOO,IAAM,mBAAA,GAAN,cAAkC,KAAA,CAAM;AAAA,EAC7C,WAAA,CAAY,OAAA,EAA0B,IAAA,EAAuB,MAAA,EAAgB;AAC3E,IAAA,KAAA,CAAM,OAAO,CAAA;AADuB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAuB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAE3D,IAAA,IAAA,CAAK,IAAA,GAAO,qBAAA;AAAA,EACd;AAAA,EAHsC,IAAA;AAAA,EAAuB,MAAA;AAI/D;AAGO,IAAM,sBAAA,GAAN,cAAqC,KAAA,CAAM;AAAA,EAChD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AAAA,EACd;AACF;AAuCA,SAAS,kBAAkB,GAAA,EAA8B;AACvD,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,EAAE,KAAK,CAAA;AACnC,IAAA,MAAM,GAAA,GAAM,OAAA;AAAA,MACV,EAAE,UAAA,EAAY,UAAA,EAAY,IAAA,EAAM,iBAAA,EAAmB,QAAQ,MAAA,EAAQ,OAAA,EAAS,EAAE,cAAA,EAAgB,oBAAoB,gBAAA,EAAkB,MAAA,CAAO,UAAA,CAAW,IAAI,GAAE,EAAE;AAAA,MAC9J,CAAC,GAAA,KAAQ;AACP,QAAA,IAAI,IAAA,GAAO,EAAA;AACX,QAAA,GAAA,CAAI,YAAY,MAAM,CAAA;AACtB,QAAA,GAAA,CAAI,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAO,QAAQ,CAAE,CAAA;AACjC,QAAA,GAAA,CAAI,EAAA,CAAG,OAAO,MAAM;AAClB,UAAA,IAAA,CAAK,GAAA,CAAI,UAAA,IAAc,CAAA,KAAM,GAAA,IAAA,CAAQ,GAAA,CAAI,UAAA,IAAc,CAAA,IAAK,GAAA,EAAK,OAAA,CAAQ,IAAA,CAAK,IAAA,EAAM,CAAA;AAAA,sBACxE,IAAI,sBAAA,CAAuB,qBAAqB,GAAA,CAAI,UAAU,EAAE,CAAC,CAAA;AAAA,QAC/E,CAAC,CAAA;AAAA,MACH;AAAA,KACF;AACA,IAAA,GAAA,CAAI,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAM,MAAA,CAAO,IAAI,sBAAA,CAAuB,CAAA,iBAAA,EAAoB,CAAA,CAAE,OAAO,CAAA,CAAE,CAAC,CAAC,CAAA;AAC1F,IAAA,GAAA,CAAI,IAAI,IAAI,CAAA;AAAA,EACd,CAAC,CAAA;AACH;AAGA,SAAS,OAAO,KAAA,EAA8B;AAC5C,EAAA,IAAI;AACF,IAAA,MAAM,UAAU,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,IAAA,CAAK,MAAM,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,KAAK,EAAA,EAAI,WAAW,CAAA,CAAE,QAAA,CAAS,MAAM,CAAC,CAAA;AAC/F,IAAA,OAAO,OAAO,OAAA,CAAQ,GAAA,KAAQ,QAAA,GAAW,QAAQ,GAAA,GAAM,IAAA;AAAA,EACzD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEO,SAAS,kBAAA,CAAmB,OAAA,GAA+B,EAAC,EAAiB;AAClF,EAAA,MAAM,UAAU,OAAA,CAAQ,MAAA,IAAU,cAAA,EAAgB,OAAA,CAAQ,QAAQ,EAAE,CAAA;AACpE,EAAA,MAAM,cAAA,GAAiB,QAAQ,cAAA,IAAkB,EAAA;AACjD,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,IAAO,OAAA,CAAQ,GAAA;AACnC,EAAA,MAAM,SAAA,GAAY,QAAQ,SAAA,IAAa,KAAA;AACvC,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,KAAQ,MAAM,KAAK,GAAA,EAAI,CAAA;AAC3C,EAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,IAAW,iBAAA;AACnC,EAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,KAAU,MAAM,CAAC,CAAC,GAAA,CAAI,YAAA,IAAgB,UAAA,CAAW,UAAU,CAAA,CAAA;AAEjF,EAAA,MAAM,KAAA,uBAAY,GAAA,EAA4C;AAC9D,EAAA,MAAM,QAAA,uBAAe,GAAA,EAA6B;AAClD,EAAA,IAAI,OAAA,GAAmC,IAAA;AACvC,EAAA,MAAM,MAAA,GAAS,MAAO,OAAA,KAAY,aAAA,EAAc;AAEhD,EAAA,eAAe,aAAA,GAAiC;AAC9C,IAAA,IAAI,KAAA,EAAM,EAAG,OAAO,OAAA,CAAQ,MAAM,CAAA;AAClC,IAAA,MAAM,MAAM,GAAA,CAAI,4BAAA;AAChB,IAAA,MAAM,SAAS,GAAA,CAAI,8BAAA;AACnB,IAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,MAAA,IAAI,GAAA;AACJ,MAAA,IAAI;AACF,QAAA,GAAA,GAAM,MAAM,SAAA,CAAU,CAAA,EAAG,GAAG,CAAA,UAAA,EAAa,mBAAmB,MAAM,CAAC,CAAA,CAAA,EAAI,EAAE,SAAS,EAAE,aAAA,EAAe,UAAU,MAAM,CAAA,CAAA,IAAM,CAAA;AAAA,MAC3H,SAAS,CAAA,EAAG;AACV,QAAA,MAAM,IAAI,sBAAA,CAAuB,CAAA,kCAAA,EAAqC,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,MACpH;AACA,MAAA,IAAI,CAAC,IAAI,EAAA,EAAI,MAAM,IAAI,sBAAA,CAAuB,CAAA,8BAAA,EAAiC,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAC3F,MAAA,MAAM,EAAE,KAAA,EAAM,GAAK,MAAM,IAAI,IAAA,EAAK;AAClC,MAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,uBAAuB,wCAAwC,CAAA;AACrF,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,MAAM,IAAI,uBAAA;AAAA,MACR;AAAA,KAEF;AAAA,EACF;AAEA,EAAA,eAAe,QAAA,CAAS,UAAkB,KAAA,EAAoE;AAC5G,IAAA,MAAM,OAAA,GAAU,MAAM,aAAA,EAAc;AACpC,IAAA,MAAM,IAAA,GAAO,IAAI,eAAA,CAAgB;AAAA,MAC/B,UAAA,EAAY,iDAAA;AAAA,MACZ,aAAA,EAAe,OAAA;AAAA,MACf,kBAAA,EAAoB,sCAAA;AAAA,MACpB;AAAA,KACD,CAAA;AACD,IAAA,IAAI,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,KAAK,CAAA;AAClC,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,GAAG,MAAM,CAAA,aAAA,CAAA;AAC1B,MAAA,MAAM,OAAA,GAAkC,EAAE,cAAA,EAAgB,mCAAA,EAAoC;AAC9F,MAAA,IAAI,OAAA,CAAQ,IAAA,EAAM,OAAA,CAAQ,IAAA,GAAO,MAAM,eAAA,CAAgB,MAAM,MAAA,EAAO,EAAG,EAAE,MAAA,EAAQ,MAAA,EAAQ,GAAA,EAAK,QAAA,EAAU,KAAK,CAAA;AAC7G,MAAA,GAAA,GAAM,MAAM,UAAU,QAAA,EAAU,EAAE,QAAQ,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,IAAA,EAAM,CAAA;AAAA,IACzE,SAAS,CAAA,EAAG;AACV,MAAA,MAAM,IAAI,sBAAA,CAAuB,CAAA,EAAG,MAAM,CAAA,cAAA,EAAiB,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,IACzG;AACA,IAAA,IAAI,OAAmG,EAAC;AACxG,IAAA,IAAI;AACF,MAAA,IAAA,GAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,IACzB,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,IAAI,GAAA,CAAI,MAAA,IAAU,GAAA,EAAK,MAAM,IAAI,sBAAA,CAAuB,CAAA,EAAG,MAAM,CAAA,UAAA,EAAa,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAC1F,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,IAAM,CAAC,KAAK,YAAA,EAAc;AACjC,MAAA,MAAM,IAAA,GAAO,KAAK,iBAAA,IAAqB,EAAA;AACvC,MAAA,MAAM,OAAO,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA,GAAI,KAAK,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAC,CAAA,CAAE,IAAA,EAAK,GAAI,KAAK,KAAA,IAAS,kBAAA;AAC1F,MAAA,MAAM,IAAI,mBAAA,CAAoB,CAAA,2BAAA,EAA8B,QAAQ,CAAA,EAAA,EAAK,IAAA,IAAQ,IAAA,CAAK,KAAA,IAAS,GAAA,CAAI,MAAM,CAAA,CAAA,EAAI,IAAA,EAAM,IAAI,MAAM,CAAA;AAAA,IAC/H;AACA,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,GAAA,KAAQ,GAAI,CAAA;AACtC,IAAA,MAAM,MAAM,MAAA,CAAO,IAAA,CAAK,YAAY,CAAA,IAAK,MAAA,IAAU,KAAK,UAAA,IAAc,GAAA,CAAA;AACtE,IAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,YAAA,EAAc,GAAA,EAAI;AAAA,EACzC;AAEA,EAAA,MAAM,MAAA,GAAuB;AAAA,IAC3B,MAAM,WAAA,CAAY,EAAE,UAAU,KAAA,EAAO,MAAA,EAAQ,KAAI,EAAG;AAClD,MAAA,MAAM,SAAS,MAAM,MAAA,CAAO,IAAI,EAAE,QAAA,EAAU,OAAO,CAAA;AACnD,MAAA,IAAI,CAAC,QAAQ,IAAA,EAAM,OAAO,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,MAAM,CAAA,CAAA,EAAG;AAC9D,MAAA,OAAO,EAAE,aAAA,EAAe,CAAA,KAAA,EAAQ,MAAM,CAAA,CAAA,EAAI,MAAM,MAAM,eAAA,CAAgB,MAAM,MAAA,IAAU,EAAE,MAAA,EAAQ,KAAK,MAAA,EAAQ,GAAA,EAAK,CAAA,EAAE;AAAA,IACtH,CAAA;AAAA,IACA,MAAM,GAAA,CAAI,EAAE,QAAA,EAAU,OAAM,EAAG;AAC7B,MAAA,MAAM,GAAA,GAAM,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,SAAS,EAAE,CAAA,CAAA;AACtC,MAAA,MAAM,GAAA,GAAM,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AACzB,MAAA,IAAI,GAAA,IAAO,IAAI,GAAA,GAAM,cAAA,GAAiB,KAAI,GAAI,GAAA,SAAa,GAAA,CAAI,KAAA;AAC/D,MAAA,MAAM,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,GAAG,CAAA;AAChC,MAAA,IAAI,SAAS,OAAO,OAAA;AACpB,MAAA,MAAM,IAAI,QAAA,CAAS,QAAA,EAAU,KAAK,CAAA,CAC/B,IAAA,CAAK,CAAC,CAAA,KAAM;AACX,QAAA,KAAA,CAAM,GAAA,CAAI,KAAK,CAAC,CAAA;AAChB,QAAA,OAAO,CAAA,CAAE,KAAA;AAAA,MACX,CAAC,CAAA,CACA,OAAA,CAAQ,MAAM,QAAA,CAAS,MAAA,CAAO,GAAG,CAAC,CAAA;AACrC,MAAA,QAAA,CAAS,GAAA,CAAI,KAAK,CAAC,CAAA;AACnB,MAAA,OAAO,CAAA;AAAA,IACT;AAAA,GACF;AACA,EAAA,OAAO,MAAA;AACT;AAEA,IAAI,MAAA,GAA8B,IAAA;AAE3B,SAAS,YAAY,IAAA,EAA6D;AACvF,EAAA,MAAA,KAAW,kBAAA,EAAmB;AAC9B,EAAA,OAAO,MAAA,CAAO,IAAI,IAAI,CAAA;AACxB;AC1LA,IAAM,eAAA,GAA4C,CAAC,OAAA,EAAS,SAAA,EAAW,SAAS,MAAM,CAAA;AAa/E,IAAM,qBAAA,GAAwB;AAE9B,IAAM,aAAA,GAAgB;AA8EtB,SAAS,qBAAqB,OAAA,EAAgD;AACnF,EAAA,MAAM;AAAA,IACJ,MAAA;AAAA,IACA,QAAA;AAAA,IACA,iBAAiB,EAAA,GAAK,EAAA;AAAA,IACtB,iBAAA,GAAoB,EAAA;AAAA,IACpB,SAAA,GAAY,KAAA;AAAA,IACZ,WAAA,GAAc,KAAA;AAAA,IACd,gBAAA,GAAmB,EAAA;AAAA,IACnB,GAAA,GAAM,MAAM,IAAA,CAAK,GAAA;AAAI,GACvB,GAAI,OAAA;AACJ,EAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,WAAA,IAAe,uBAAA,CAAwB,GAAG,CAAA;AACtE,EAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,SAAS,sCAAsC,CAAA;AACtE,EAAA,IAAI,CAAC,QAAA,EAAU,MAAM,IAAI,SAAS,qDAAqD,CAAA;AAEvF,EAAA,IAAI,YAAA,GAA0C,IAAA;AAC9C,EAAA,MAAM,QAAA,GAAW,CAAC,OAAA,KAChB,eAAA,CAAgB;AAAA,IACd,OAAA;AAAA,IACA,SAAA;AAAA,IACA,GAAI,OAAA,CAAQ,MAAA,GAAS,EAAE,MAAA,EAAQ,IAAA,KAAS,EAAC;AAAA,IACzC,GAAI,QAAQ,oBAAA,KAAyB,MAAA,GAAY,EAAE,oBAAA,EAAsB,OAAA,CAAQ,oBAAA,EAAqB,GAAI;AAAC,GAC5G,CAAA;AAEH,EAAA,eAAe,IAAA,GAA2B;AACxC,IAAA,YAAA,KAAA,CAAkB,YAAY;AAC5B,MAAA,IAAI,OAAA,CAAQ,OAAA,EAAS,OAAO,QAAA,CAAS,QAAQ,OAAO,CAAA;AACpD,MAAA,MAAM,GAAA,GAAM,GAAG,MAAM,CAAA,iCAAA,CAAA;AACrB,MAAA,IAAI,GAAA;AACJ,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,GAAG,CAAA;AAC/B,QAAA,IAAI,CAAC,IAAI,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,SAAA,EAAY,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AACrD,QAAA,GAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,MACxB,SAAS,KAAA,EAAO;AAEd,QAAA,MAAM,IAAI,oBAAA,CAAqB,CAAA,EAAG,GAAG,CAAA,EAAA,EAAK,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,MACpG;AACA,MAAA,IAAI,GAAA,CAAI,WAAW,MAAA,EAAQ;AACzB,QAAA,MAAM,IAAI,SAAS,CAAA,UAAA,EAAa,MAAM,QAAQ,GAAG,CAAA,MAAA,EAAS,GAAA,CAAI,MAAM,CAAA,+BAAA,CAA4B,CAAA;AAAA,MAClG;AACA,MAAA,IAAI,CAAC,IAAI,QAAA,EAAU,MAAM,IAAI,QAAA,CAAS,CAAA,EAAG,GAAG,CAAA,kBAAA,CAAoB,CAAA;AAChE,MAAA,OAAO,QAAA,CAAS,IAAI,QAAQ,CAAA;AAAA,IAC9B,CAAA,GAAG,CAAE,KAAA,CAAM,CAAC,GAAA,KAAQ;AAClB,MAAA,YAAA,GAAe,IAAA;AACf,MAAA,MAAM,GAAA;AAAA,IACR,CAAC,CAAA;AACD,IAAA,OAAO,YAAA;AAAA,EACT;AACA,EAAA,IAAI,QAAQ,MAAA,EAAQ,KAAK,IAAA,EAAK,CAAE,MAAM,MAAM;AAAA,EAAC,CAAC,CAAA;AAE9C,EAAA,OAAO;AAAA,IACL,MAAM,MAAA,CAAO,KAAA,EAAO,IAAA,GAAO,EAAC,EAAG;AAC7B,MAAA,IAAI,MAAA;AACJ,MAAA,IAAI;AACF,QAAA,MAAA,GAASA,sBAAsB,KAAK,CAAA;AAAA,MACtC,CAAA,CAAA,MAAQ;AACN,QAAA,MAAM,IAAI,SAAS,qBAAqB,CAAA;AAAA,MAC1C;AACA,MAAA,IAAI,CAAC,MAAA,CAAO,GAAA,EAAK,MAAM,IAAI,SAAS,oDAA+C,CAAA;AACnF,MAAA,IAAI,OAAO,GAAA,KAAQ,YAAA,EAAc,MAAM,IAAI,SAAS,gCAAgC,CAAA;AAEpF,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,EAAK;AACzB,MAAA,IAAI,OAAA;AACJ,MAAA,IAAI;AACF,QAAA,CAAC,EAAE,OAAA,EAAQ,GAAI,MAAMC,UAAU,KAAA,EAAO,YAAY,KAAA,CAAM,MAAA,CAAO,MAAA,CAAO,GAAA,EAAM,MAAA,CAAO,GAAA,IAAO,OAAO,CAAA,EAAG;AAAA,UAClG,MAAA;AAAA,UACA,QAAA;AAAA,UACA,UAAA,EAAY,YAAA;AAAA,UACZ,cAAA,EAAgB,iBAAA;AAAA,UAChB,cAAA,EAAgB,CAAC,KAAA,EAAO,KAAA,EAAO,OAAO,KAAK;AAAA,SAC5C,CAAA;AAAA,MACH,SAAS,CAAA,EAAG;AAEV,QAAA,IAAI,CAAA,YAAa,sBAAsB,MAAM,CAAA;AAC7C,QAAA,MAAM,IAAI,QAAA,CAAS,CAAA,iBAAA,EAAoB,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,MACrF;AAIA,MAAA,IAAI,QAAA,IAAY,OAAA,EAAS,MAAM,IAAI,SAAS,gCAAgC,CAAA;AAC5E,MAAA,IAAI,OAAA,IAAW,OAAA,EAAS,MAAM,IAAI,SAAS,6BAA6B,CAAA;AAExE,MAAA,MAAM,OAAO,OAAA,CAAQ,cAAA;AACrB,MAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,CAAC,eAAA,CAAgB,QAAA,CAAS,IAAqB,CAAA,EAAG;AAChF,QAAA,MAAM,IAAI,QAAA,CAAS,CAAA,wCAAA,EAA2C,KAAK,SAAA,CAAU,IAAI,CAAC,CAAA,CAAA,CAAG,CAAA;AAAA,MACvF;AACA,MAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,GAAO,OAAA,CAAQ,GAAA;AACxC,MAAA,IAAI,WAAW,cAAA,EAAgB;AAC7B,QAAA,MAAM,IAAI,QAAA,CAAS,CAAA,gBAAA,EAAmB,QAAQ,CAAA,oBAAA,EAAuB,cAAc,CAAA,aAAA,CAAe,CAAA;AAAA,MACpG;AACA,MAAA,IAAI,OAAO,OAAA,CAAQ,GAAA,KAAQ,QAAA,IAAY,OAAA,CAAQ,QAAQ,EAAA,EAAI,MAAM,IAAI,QAAA,CAAS,mBAAmB,CAAA;AAEjG,MAAA,MAAM,MAAA,GAAS,OAAO,OAAA,CAAQ,KAAA,KAAU,QAAA,GAAW,OAAA,CAAQ,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,CAAO,OAAO,IAAI,EAAC;AAC/F,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,KAAU,MAAA,GAAY,EAAC,GAAI,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA,GAAI,IAAA,CAAK,KAAA,GAAQ,CAAC,KAAK,KAAK,CAAA;AACrG,MAAA,MAAM,OAAA,GAAU,SAAS,MAAA,CAAO,CAAC,MAAM,CAAC,MAAA,CAAO,QAAA,CAAS,CAAC,CAAC,CAAA;AAC1D,MAAA,IAAI,OAAA,CAAQ,MAAA,EAAQ,MAAM,IAAI,QAAA,CAAS,sBAAsB,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAIjF,MAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,KAAQ,MAAA,GAAY,IAAI,OAAA,CAAQ,GAAA;AACpD,MAAA,IAAI,OAAO,QAAQ,QAAA,IAAY,CAAC,OAAO,SAAA,CAAU,GAAG,CAAA,IAAK,GAAA,GAAM,CAAA,EAAG;AAChE,QAAA,MAAM,IAAI,SAAS,CAAA,+BAAA,EAAkC,IAAA,CAAK,UAAU,OAAA,CAAQ,GAAG,CAAC,CAAA,CAAA,CAAG,CAAA;AAAA,MACrF;AACA,MAAA,IAAI,MAAM,qBAAA,EAAuB;AAC/B,QAAA,MAAM,IAAI,QAAA,CAAS,CAAA,sBAAA,EAAyB,GAAG,CAAA,8CAAA,EAAiD,qBAAqB,CAAA,6BAAA,CAA0B,CAAA;AAAA,MACjJ;AAIA,MAAA,MAAM,GAAA,GAAM,QAAQ,GAAA,KAAQ,MAAA,GAAY,OAAO,SAAA,CAAU,OAAA,CAAQ,KAAK,CAAC,CAAA;AACvE,MAAA,MAAM,SAAS,OAAA,CAAQ,GAAA;AACvB,MAAA,MAAM,GAAA,GAAM,MAAA,IAAU,OAAO,MAAA,CAAO,GAAA,KAAQ,QAAA,IAAY,MAAA,CAAO,GAAA,GAAM,EAAE,GAAA,EAAK,MAAA,CAAO,GAAA,EAAI,GAAI,IAAA;AAG3F,MAAA,IAAI,GAAA,EAAK;AACP,QAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,OAAO,MAAM,IAAI,SAAS,gEAAgE,CAAA;AAC1G,QAAA,MAAM,eAAA,CAAgB,IAAA,CAAK,IAAA,CAAK,KAAA,EAAO;AAAA,UACrC,MAAA,EAAQ,KAAK,IAAA,CAAK,MAAA;AAAA,UAClB,GAAA,EAAK,KAAK,IAAA,CAAK,GAAA;AAAA,UACf,MAAA,EAAQ,KAAA;AAAA,UACR,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAA,EAAQ,WAAA;AAAA,UACR,YAAA,EAAc,gBAAA;AAAA,UACd;AAAA,SACD,CAAA;AAAA,MACH,WAAW,WAAA,EAAa;AACtB,QAAA,MAAM,IAAI,QAAA,CAAS,MAAA,KAAW,MAAA,GAAY,uEAAkE,mEAAmE,CAAA;AAAA,MACjL;AAIA,MAAA,MAAM,QAAQ,CAAC,CAAA,KAAgB,OAAO,CAAA,KAAM,QAAA,IAAY,IAAI,CAAA,GAAI,IAAA;AAChE,MAAA,MAAM,QAAA,GACJ,IAAA,KAAS,MAAA,GACL,KAAA,CAAM,QAAQ,SAAS,CAAA,IAAK,KAAA,CAAM,OAAA,CAAQ,GAAG,CAAA,GAC7C,KAAA,CAAM,OAAA,CAAQ,SAAS,KAAK,OAAA,CAAQ,GAAA;AAC1C,MAAA,IAAI,QAAA,KAAa,IAAA,EAAM,MAAM,IAAI,SAAS,kDAAkD,CAAA;AAC5F,MAAA,OAAO;AAAA,QACL,WAAW,OAAA,CAAQ,GAAA;AAAA,QACnB,IAAA;AAAA,QACA,QAAA;AAAA,QACA,GAAA,EAAK,OAAO,OAAA,CAAQ,GAAA,KAAQ,YAAY,OAAA,CAAQ,GAAA,GAAM,QAAQ,GAAA,GAAM,IAAA;AAAA,QACpE,GAAA;AAAA,QACA,OAAA,EAAS,GAAA;AAAA,QACT,GAAA;AAAA,QACA,MAAA;AAAA,QACA,KAAK,OAAA,CAAQ,GAAA;AAAA,QACb,GAAA,EAAK,MAAA,CAAO,OAAA,CAAQ,GAAG;AAAA,OACzB;AAAA,IACF;AAAA,GACF;AACF;AAEA,SAAS,SAAA,CAAU,KAAc,KAAA,EAA4B;AAC3D,EAAA,IAAI,QAAQ,aAAA,EAAe,MAAM,IAAI,QAAA,CAAS,CAAA,yCAAA,EAA4C,aAAa,CAAA,CAAE,CAAA;AACzG,EAAA,MAAM,IAAA,GAAO,GAAA;AACb,EAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,OAAO,IAAA,CAAK,GAAA,KAAQ,QAAA,IAAY,IAAA,CAAK,GAAA,KAAQ,EAAA,EAAI;AACxF,IAAA,MAAM,IAAI,QAAA,CAAS,CAAA,mBAAA,EAAsB,KAAK,CAAA,mBAAA,CAAqB,CAAA;AAAA,EACrE;AACA,EAAA,OAAO,KAAK,GAAA,KAAQ,MAAA,GAAY,EAAE,GAAA,EAAK,IAAA,CAAK,KAAI,GAAI,EAAE,GAAA,EAAK,IAAA,CAAK,KAAK,GAAA,EAAK,SAAA,CAAU,KAAK,GAAA,EAAK,KAAA,GAAQ,CAAC,CAAA,EAAE;AAC3G","file":"index.js","sourcesContent":["/**\n * F084.157 — DPoP (RFC 9449): a bound ticket works only for whoever holds the key\n * (broberg-id-F087.16, joint design #2572/#2574).\n *\n * A DPoP-bound ticket carries `cnf.jkt`, the thumbprint of the caller's public\n * key. With every request the caller signs a short PROOF (method, URL, time, a\n * hash of the ticket) with the matching private key. A ticket copied out of a log\n * is useless on another machine: it has the ticket, not the key.\n *\n * THE RULE THAT MAKES IT PROTECTION (agreed with broberg-id, (A) in #2574): once a\n * receiver verifies with this version, a ticket WITH cnf.jkt needs a valid proof —\n * also while DPoP is otherwise optional. `requireDpop` only decides whether\n * UNBOUND tickets are still accepted. Were bound tickets accepted without a proof\n * during the rollout, a stolen bound ticket would work as bearer the whole time.\n *\n * Not here yet: server nonces (RFC 9449 §8). The jti replay store covers replay\n * inside the iat window.\n */\nimport {\n  SignJWT,\n  calculateJwkThumbprint,\n  decodeProtectedHeader,\n  exportJWK,\n  generateKeyPair,\n  importJWK,\n  jwtVerify,\n  type JWK,\n} from \"jose\";\nimport { SsoError } from \"./client.js\";\n\n/** One process's DPoP key. The private half cannot be exported. */\nexport interface DpopKey {\n  privateKey: CryptoKey;\n  publicJwk: JWK;\n  /** RFC 7638 thumbprint — what BID puts in the ticket's cnf.jkt. */\n  jkt: string;\n}\n\n/** A fresh ES256 key pair, private key non-extractable, never written anywhere. */\nexport async function createDpopKey(): Promise<DpopKey> {\n  const { privateKey, publicKey } = await generateKeyPair(\"ES256\", { extractable: false });\n  const jwk = await exportJWK(publicKey); // a public key is always exportable\n  const publicJwk: JWK = { kty: jwk.kty, crv: jwk.crv, x: jwk.x, y: jwk.y };\n  return { privateKey, publicJwk, jkt: await calculateJwkThumbprint(publicJwk) };\n}\n\nconst enc = new TextEncoder();\nconst b64url = (bytes: ArrayBuffer) =>\n  btoa(String.fromCharCode(...new Uint8Array(bytes))).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n\n/** `ath`: base64url(SHA-256(ticket)) — ties a proof to one ticket. */\nexport async function accessTokenHash(ticket: string): Promise<string> {\n  return b64url(await crypto.subtle.digest(\"SHA-256\", enc.encode(ticket)));\n}\n\n/** RFC 9449 §4.3: htu is compared without query and fragment. */\nexport function normalizeHtu(url: string): string {\n  const u = new URL(url);\n  return `${u.protocol}//${u.host}${u.pathname}`;\n}\n\n/** Sign one proof. Pass `ticket` when calling a resource server (adds ath); omit it for BID's token endpoint. */\nexport async function createDpopProof(\n  key: DpopKey,\n  opts: { method: string; url: string; ticket?: string; now?: () => number },\n): Promise<string> {\n  const payload: Record<string, unknown> = {\n    jti: crypto.randomUUID(),\n    htm: opts.method.toUpperCase(),\n    htu: normalizeHtu(opts.url),\n    iat: Math.floor((opts.now?.() ?? Date.now()) / 1000),\n  };\n  if (opts.ticket !== undefined) payload.ath = await accessTokenHash(opts.ticket);\n  return new SignJWT(payload).setProtectedHeader({ typ: \"dpop+jwt\", alg: \"ES256\", jwk: key.publicJwk }).sign(key.privateKey);\n}\n\n/**\n * Remembers which proofs were already used. The default is in-memory, which\n * holds on ONE machine: a receiver running on two machines must pass a shared\n * store, or a proof replayed against the other machine inside the window passes.\n */\nexport interface ReplayStore {\n  /** Record `key`; resolve true if it was already recorded within `ttlMs`. */\n  seen(key: string, ttlMs: number): Promise<boolean>;\n}\n\nexport function createMemoryReplayStore(now: () => number = () => Date.now()): ReplayStore {\n  const entries = new Map<string, number>();\n  return {\n    async seen(key, ttlMs) {\n      const t = now();\n      for (const [k, until] of entries) if (until <= t) entries.delete(k);\n      if (entries.has(key)) return true;\n      entries.set(key, t + ttlMs);\n      return false;\n    },\n  };\n}\n\nexport interface VerifyProofOptions {\n  method: string;\n  /** The receiver's PUBLIC URL for this request (behind a proxy the process sees an internal one). */\n  url: string;\n  ticket: string;\n  jkt: string;\n  replay: ReplayStore;\n  iatWindowSec: number;\n  now: () => number;\n}\n\nconst ASYMMETRIC = new Set([\"ES256\", \"ES384\", \"ES512\", \"EdDSA\", \"PS256\", \"PS384\", \"PS512\", \"RS256\", \"RS384\", \"RS512\"]);\n\n/** Throws SsoError naming the first thing that is wrong. */\nexport async function verifyDpopProof(proof: string, o: VerifyProofOptions): Promise<void> {\n  let header;\n  try {\n    header = decodeProtectedHeader(proof);\n  } catch {\n    throw new SsoError(\"DPoP proof is not a JWS\");\n  }\n  if (header.typ !== \"dpop+jwt\") throw new SsoError(`DPoP proof has typ ${JSON.stringify(header.typ)}, not \"dpop+jwt\"`);\n  if (!header.alg || !ASYMMETRIC.has(header.alg)) throw new SsoError(`DPoP proof alg ${JSON.stringify(header.alg)} is not an accepted asymmetric algorithm`);\n  const jwk = header.jwk as JWK | undefined;\n  if (!jwk || typeof jwk !== \"object\") throw new SsoError(\"DPoP proof carries no jwk\");\n  if (\"d\" in jwk) throw new SsoError(\"DPoP proof jwk contains a private key\");\n\n  let payload;\n  try {\n    const key = await importJWK(jwk, header.alg);\n    ({ payload } = await jwtVerify(proof, key, { typ: \"dpop+jwt\", algorithms: [header.alg] }));\n  } catch (e) {\n    throw new SsoError(`DPoP proof signature rejected: ${e instanceof Error ? e.message : String(e)}`);\n  }\n\n  if ((await calculateJwkThumbprint(jwk)) !== o.jkt) throw new SsoError(\"DPoP proof key does not match the ticket's cnf.jkt\");\n  if (payload.htm !== o.method.toUpperCase()) throw new SsoError(`DPoP proof is for ${JSON.stringify(payload.htm)}, the request is ${o.method.toUpperCase()}`);\n  let htu: string;\n  try {\n    htu = normalizeHtu(String(payload.htu));\n  } catch {\n    throw new SsoError(\"DPoP proof htu is not a URL\");\n  }\n  if (htu !== normalizeHtu(o.url)) throw new SsoError(`DPoP proof is for ${htu}, the request is ${normalizeHtu(o.url)}`);\n  const nowSec = Math.floor(o.now() / 1000);\n  if (typeof payload.iat !== \"number\" || Math.abs(nowSec - payload.iat) > o.iatWindowSec) {\n    throw new SsoError(`DPoP proof iat is outside ±${o.iatWindowSec}s`);\n  }\n  if (payload.ath !== (await accessTokenHash(o.ticket))) throw new SsoError(\"DPoP proof ath does not match this ticket\");\n  if (typeof payload.jti !== \"string\" || payload.jti === \"\") throw new SsoError(\"DPoP proof has no jti\");\n  if (await o.replay.seen(`${o.jkt}:${payload.jti}`, o.iatWindowSec * 2 * 1000)) {\n    throw new SsoError(\"DPoP proof was already used (jti replay)\");\n  }\n}\n","/**\n * F084.154 — fetch a BrobergID ticket WITHOUT a key (broberg-id-F087.10/.11).\n *\n * The sending half of F084.153: a workload proves who it is with the identity its\n * platform already gives it, and BID exchanges that for a short-lived ticket\n * (RFC 8693 token exchange). No secret is stored anywhere.\n *\n *   Fly.io          POST unix:/.fly/api  /v1/tokens/oidc  {aud: issuer}\n *   GitHub Actions  GET  $ACTIONS_ID_TOKEN_REQUEST_URL&audience=issuer\n *                   (needs `permissions: id-token: write` in the workflow)\n *   then            POST {issuer}/oauth2/token  grant_type=…token-exchange\n *\n * Reference implementation: broberg-id/.github/workflows/ticket-probe.yml.\n * The ticket itself is never logged or put in an error message.\n */\nimport { existsSync } from \"node:fs\";\nimport { request } from \"node:http\";\nimport { createDpopKey, createDpopProof, type DpopKey } from \"./dpop.js\";\n\nexport const DEFAULT_ISSUER = \"https://id.broberg.ai\";\nconst FLY_SOCKET = \"/.fly/api\";\n\n/** No platform identity to exchange: not on Fly, not in a GitHub Actions job with id-token: write. */\nexport class NoWorkloadIdentityError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"NoWorkloadIdentityError\";\n  }\n}\n\n/**\n * BID refused the exchange. `code` is BID's own error name (the part of\n * error_description before the colon, e.g. `no_rule_for_audience`), `status` the\n * HTTP status. A 4xx is PERMANENT for this request — fix the rule, do not retry.\n */\nexport class TicketExchangeError extends Error {\n  constructor(message: string, readonly code: string, readonly status: number) {\n    super(message);\n    this.name = \"TicketExchangeError\";\n  }\n}\n\n/** BID or the platform could not be reached, or answered 5xx. TRANSIENT — retry later. */\nexport class TicketUnavailableError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"TicketUnavailableError\";\n  }\n}\n\nexport interface TicketClientOptions {\n  issuer?: string;\n  /** Renew this many seconds before exp. Default 30. */\n  renewBeforeSec?: number;\n  /** Injectable for tests. */\n  env?: Record<string, string | undefined>;\n  fetchImpl?: typeof fetch;\n  now?: () => number;\n  /** Ask Fly's machine API for an OIDC token. Default: POST over the /.fly/api unix socket. */\n  flyOidc?: (aud: string) => Promise<string>;\n  /** Whether the Fly socket is present. Default: checks /.fly/api. */\n  onFly?: () => boolean;\n  /**\n   * F084.157 — ask BID for DPoP-BOUND tickets. One ES256 key per client\n   * (non-extractable, never stored); every call then needs a proof, which\n   * `authHeaders` makes. Default false: bearer tickets, exactly as before.\n   */\n  dpop?: boolean;\n}\n\n/** Headers for one call to a receiver. With `dpop`, `authorization` is `DPoP <ticket>` and `dpop` is the proof. */\nexport interface TicketAuthHeaders {\n  authorization: string;\n  dpop?: string;\n}\n\nexport interface TicketClient {\n  /** A ticket for `audience` (BID's short name, e.g. \"discovery\"), from cache while it is fresh. */\n  get(opts: { audience: string; scope?: string }): Promise<string>;\n  /**\n   * F084.157 — the headers for ONE request to a receiver: a ticket plus, with\n   * `dpop`, a fresh proof bound to this method and URL (use it once). Without\n   * `dpop`: `{ authorization: \"Bearer <ticket>\" }`.\n   */\n  authHeaders(opts: { audience: string; scope?: string; method: string; url: string }): Promise<TicketAuthHeaders>;\n}\n\nfunction flyOidcOverSocket(aud: string): Promise<string> {\n  return new Promise((resolve, reject) => {\n    const body = JSON.stringify({ aud });\n    const req = request(\n      { socketPath: FLY_SOCKET, path: \"/v1/tokens/oidc\", method: \"POST\", headers: { \"content-type\": \"application/json\", \"content-length\": Buffer.byteLength(body) } },\n      (res) => {\n        let data = \"\";\n        res.setEncoding(\"utf8\");\n        res.on(\"data\", (c) => (data += c));\n        res.on(\"end\", () => {\n          if ((res.statusCode ?? 0) >= 200 && (res.statusCode ?? 0) < 300) resolve(data.trim());\n          else reject(new TicketUnavailableError(`Fly OIDC answered ${res.statusCode}`));\n        });\n      },\n    );\n    req.on(\"error\", (e) => reject(new TicketUnavailableError(`Fly OIDC socket: ${e.message}`)));\n    req.end(body);\n  });\n}\n\n/** Seconds since the epoch at which a JWT expires, or null if it cannot be read. */\nfunction jwtExp(token: string): number | null {\n  try {\n    const payload = JSON.parse(Buffer.from(token.split(\".\")[1] ?? \"\", \"base64url\").toString(\"utf8\"));\n    return typeof payload.exp === \"number\" ? payload.exp : null;\n  } catch {\n    return null;\n  }\n}\n\nexport function createTicketClient(options: TicketClientOptions = {}): TicketClient {\n  const issuer = (options.issuer ?? DEFAULT_ISSUER).replace(/\\/+$/, \"\");\n  const renewBeforeSec = options.renewBeforeSec ?? 30;\n  const env = options.env ?? process.env;\n  const fetchImpl = options.fetchImpl ?? fetch;\n  const now = options.now ?? (() => Date.now());\n  const flyOidc = options.flyOidc ?? flyOidcOverSocket;\n  const onFly = options.onFly ?? (() => !!env.FLY_APP_NAME && existsSync(FLY_SOCKET));\n\n  const cache = new Map<string, { token: string; exp: number }>();\n  const inFlight = new Map<string, Promise<string>>();\n  let dpopKey: Promise<DpopKey> | null = null;\n  const ownKey = () => (dpopKey ??= createDpopKey());\n\n  async function platformToken(): Promise<string> {\n    if (onFly()) return flyOidc(issuer);\n    const url = env.ACTIONS_ID_TOKEN_REQUEST_URL;\n    const bearer = env.ACTIONS_ID_TOKEN_REQUEST_TOKEN;\n    if (url && bearer) {\n      let res: Response;\n      try {\n        res = await fetchImpl(`${url}&audience=${encodeURIComponent(issuer)}`, { headers: { authorization: `Bearer ${bearer}` } });\n      } catch (e) {\n        throw new TicketUnavailableError(`GitHub OIDC endpoint unreachable: ${e instanceof Error ? e.message : String(e)}`);\n      }\n      if (!res.ok) throw new TicketUnavailableError(`GitHub OIDC endpoint answered ${res.status}`);\n      const { value } = (await res.json()) as { value?: string };\n      if (!value) throw new TicketUnavailableError(\"GitHub OIDC endpoint returned no token\");\n      return value;\n    }\n    throw new NoWorkloadIdentityError(\n      \"No workload identity to exchange for a ticket: not on a Fly machine (FLY_APP_NAME + /.fly/api) and not in a GitHub Actions job \" +\n        \"(ACTIONS_ID_TOKEN_REQUEST_URL/_TOKEN — add `permissions: id-token: write`). A Mac session keeps using its session key.\",\n    );\n  }\n\n  async function exchange(audience: string, scope: string | undefined): Promise<{ token: string; exp: number }> {\n    const subject = await platformToken();\n    const form = new URLSearchParams({\n      grant_type: \"urn:ietf:params:oauth:grant-type:token-exchange\",\n      subject_token: subject,\n      subject_token_type: \"urn:ietf:params:oauth:token-type:jwt\",\n      audience,\n    });\n    if (scope) form.set(\"scope\", scope);\n    let res: Response;\n    try {\n      const tokenUrl = `${issuer}/oauth2/token`;\n      const headers: Record<string, string> = { \"content-type\": \"application/x-www-form-urlencoded\" };\n      if (options.dpop) headers.dpop = await createDpopProof(await ownKey(), { method: \"POST\", url: tokenUrl, now });\n      res = await fetchImpl(tokenUrl, { method: \"POST\", headers, body: form });\n    } catch (e) {\n      throw new TicketUnavailableError(`${issuer} unreachable: ${e instanceof Error ? e.message : String(e)}`);\n    }\n    let body: { access_token?: string; expires_in?: number; error?: string; error_description?: string } = {};\n    try {\n      body = (await res.json()) as typeof body;\n    } catch {\n      /* a non-JSON answer is handled by the status checks below */\n    }\n    if (res.status >= 500) throw new TicketUnavailableError(`${issuer} answered ${res.status}`);\n    if (!res.ok || !body.access_token) {\n      const desc = body.error_description ?? \"\";\n      const code = desc.includes(\":\") ? desc.slice(0, desc.indexOf(\":\")).trim() : body.error ?? \"exchange_refused\";\n      throw new TicketExchangeError(`BID refused the ticket for ${audience}: ${desc || body.error || res.status}`, code, res.status);\n    }\n    const nowSec = Math.floor(now() / 1000);\n    const exp = jwtExp(body.access_token) ?? nowSec + (body.expires_in ?? 300);\n    return { token: body.access_token, exp };\n  }\n\n  const client: TicketClient = {\n    async authHeaders({ audience, scope, method, url }) {\n      const ticket = await client.get({ audience, scope });\n      if (!options.dpop) return { authorization: `Bearer ${ticket}` };\n      return { authorization: `DPoP ${ticket}`, dpop: await createDpopProof(await ownKey(), { method, url, ticket, now }) };\n    },\n    async get({ audience, scope }) {\n      const key = `${audience} ${scope ?? \"\"}`;\n      const hit = cache.get(key);\n      if (hit && hit.exp - renewBeforeSec > now() / 1000) return hit.token;\n      const pending = inFlight.get(key);\n      if (pending) return pending;\n      const p = exchange(audience, scope)\n        .then((t) => {\n          cache.set(key, t);\n          return t.token;\n        })\n        .finally(() => inFlight.delete(key));\n      inFlight.set(key, p);\n      return p;\n    },\n  };\n  return client;\n}\n\nlet shared: TicketClient | null = null;\n/** A ticket from the process-wide client (one cache per process). */\nexport function fetchTicket(opts: { audience: string; scope?: string }): Promise<string> {\n  shared ??= createTicketClient();\n  return shared.get(opts);\n}\n","/**\n * F084.153 — verify a BrobergID ticket LOCALLY (broberg-id-F087.4).\n *\n * A ticket is how one service or agent proves who it is to another without a\n * shared secret: BrobergID signs a short-lived JWT, the receiver checks it\n * against BID's PUBLIC keys. Nothing secret lives at the receiver.\n *\n * Format: broberg-id docs/features/F087.1-identitetsmodel.md §3 (draft, 8/10).\n *   iss = the issuer · aud = the receiver's URL · scope = space-separated\n *   sub = client_id = the caller · principal_type = human | service | agent\n *   F084.159 — a USER ticket (BID F087.37): an app swapped its user's BID login\n *   for a ticket to one receiver. sub = the USER, client_id/azp = the app,\n *   principal_type = user. The app is mandatory there and never read from sub.\n *   org · act {sub} only on delegation (RFC 8693) · exp/iat/jti\n *\n * This is deliberately NOT a method on createSsoClient: a service that only\n * RECEIVES tickets is not a login client — it has no client_id, no redirect,\n * no session. It needs the issuer, its own audience, and the key set.\n *\n * TWO FAILURES, TWO ANSWERS — keep them apart in the caller:\n *   JwksUnavailableError → we could not ask BID right now. Answer 503 and let\n *                           the caller retry; the ticket may be perfectly valid.\n *   SsoError             → the ticket is not acceptable. Answer 401/403.\n * A known key is served from cache, so a ticket signed with it verifies while\n * BID is briefly unreachable.\n */\nimport { decodeProtectedHeader, jwtVerify, type JWTPayload } from \"jose\";\nimport { ALLOWED_ALGS, SsoError } from \"./client.js\";\nimport { createJwksCache, JwksUnavailableError, type JwksCache } from \"./jwks.js\";\nimport { createMemoryReplayStore, verifyDpopProof, type ReplayStore } from \"./dpop.js\";\n\nexport type PrincipalType = \"human\" | \"service\" | \"agent\" | \"user\";\nconst PRINCIPAL_TYPES: readonly PrincipalType[] = [\"human\", \"service\", \"agent\", \"user\"];\n\n/**\n * F084.156 — one link of an RFC 8693 delegation chain. `act` is the next link\n * outward: agent-b acting for agent-a acting for user-1 reads\n * `{ sub: \"agent-a\", act: { sub: \"user-1\" } }`. `act.sub` alone is the old shape.\n */\nexport interface TicketActor {\n  sub: string;\n  act?: TicketActor;\n}\n\n/** The newest ticket format version this package understands (BID sets `ver`). */\nexport const TICKET_FORMAT_VERSION = 1;\n/** Delegation deeper than this is refused rather than shortened. */\nexport const MAX_ACT_DEPTH = 5;\n\n/** What a verified ticket tells the receiver — a small, typed principal, never the raw payload. */\nexport interface TicketPrincipal {\n  /** Who is calling: the ticket's `sub` — a client id such as `svc-trail`, or on a user ticket the USER's id. */\n  principal: string;\n  type: PrincipalType;\n  /**\n   * The client the ticket was issued to. Machine tickets: `client_id`, falling back to `sub`.\n   * User tickets: `client_id`, falling back to `azp` — never `sub`, which is the user.\n   */\n  clientId: string;\n  /** The organisation, when BID stated one. */\n  org: string | null;\n  /** On delegation: who the caller is acting for (RFC 8693 `act`), the WHOLE chain. */\n  act: TicketActor | null;\n  /** The ticket format version (`ver`); 0 for a ticket issued before BID set one. */\n  version: number;\n  /**\n   * F084.156 — the DPoP key thumbprint when the ticket is sender-constrained.\n   * Since 0.16.0 (F084.157) a ticket with cnf.jkt is only accepted together with\n   * a valid DPoP proof for that key — see `verify(token, { dpop })`.\n   */\n  cnf: { jkt: string } | null;\n  scopes: string[];\n  /** Seconds since the epoch. */\n  exp: number;\n  jti: string;\n}\n\nexport interface TicketVerifierOptions {\n  /** BID's issuer, exactly as it signs `iss` — e.g. `https://id.broberg.ai`. */\n  issuer: string;\n  /** THIS receiver's audience — its own URL, e.g. `https://discovery.broberg.ai`. */\n  audience: string;\n  /** The key set URL. Omitted: read once from the issuer's discovery document. */\n  jwksUri?: string;\n  /**\n   * The longest lifetime (exp − iat) a ticket may claim. BID issues 5 min\n   * (service) and 15 min (agent); anything longer was not minted by the policy\n   * we were told about, so it is refused rather than trusted for longer.\n   */\n  maxLifetimeSec?: number;\n  /** Seconds of clock skew to allow on exp/iat. Default 30. */\n  clockToleranceSec?: number;\n  /** Fetch the key set at construction, so the first caller does not wait. */\n  warmUp?: boolean;\n  fetchImpl?: typeof fetch;\n  minRefetchIntervalMs?: number;\n  /**\n   * F084.157 — refuse UNBOUND tickets (bearer). Off by default during the\n   * rollout. A BOUND ticket (cnf.jkt) needs a valid proof either way.\n   */\n  requireDpop?: boolean;\n  /** Where used proof ids are remembered. Default in-memory — ONE machine only; share one across machines. */\n  replayStore?: ReplayStore;\n  /** How far a proof's iat may be from now. Default 60 s. */\n  dpopIatWindowSec?: number;\n  /** Injectable clock for the DPoP checks (ms). */\n  now?: () => number;\n}\n\n/** The DPoP half of a request: the `DPoP` header, and the method + PUBLIC URL the receiver was called on. */\nexport interface DpopRequest {\n  proof: string | null | undefined;\n  method: string;\n  url: string;\n}\n\nexport interface TicketVerifier {\n  /**\n   * Verify a ticket; with `scope`, also require that scope to be granted. Pass\n   * `dpop` with the request's DPoP header, method and public URL — a bound ticket\n   * is refused without it.\n   */\n  verify(token: string, options?: { scope?: string | string[]; dpop?: DpopRequest }): Promise<TicketPrincipal>;\n}\n\nexport function createTicketVerifier(options: TicketVerifierOptions): TicketVerifier {\n  const {\n    issuer,\n    audience,\n    maxLifetimeSec = 15 * 60,\n    clockToleranceSec = 30,\n    fetchImpl = fetch,\n    requireDpop = false,\n    dpopIatWindowSec = 60,\n    now = () => Date.now(),\n  } = options;\n  const replayStore = options.replayStore ?? createMemoryReplayStore(now);\n  if (!issuer) throw new SsoError(\"createTicketVerifier needs an issuer\");\n  if (!audience) throw new SsoError(\"createTicketVerifier needs this receiver's audience\");\n\n  let cachePromise: Promise<JwksCache> | null = null;\n  const cacheFor = (jwksUri: string) =>\n    createJwksCache({\n      jwksUri,\n      fetchImpl,\n      ...(options.warmUp ? { warmUp: true } : {}),\n      ...(options.minRefetchIntervalMs !== undefined ? { minRefetchIntervalMs: options.minRefetchIntervalMs } : {}),\n    });\n\n  async function keys(): Promise<JwksCache> {\n    cachePromise ??= (async () => {\n      if (options.jwksUri) return cacheFor(options.jwksUri);\n      const url = `${issuer}/.well-known/openid-configuration`;\n      let doc: { issuer?: string; jwks_uri?: string };\n      try {\n        const res = await fetchImpl(url);\n        if (!res.ok) throw new Error(`answered ${res.status}`);\n        doc = (await res.json()) as typeof doc;\n      } catch (cause) {\n        // Reached nothing usable: transient, the same class a key-set outage gets.\n        throw new JwksUnavailableError(`${url}: ${cause instanceof Error ? cause.message : String(cause)}`);\n      }\n      if (doc.issuer !== issuer) {\n        throw new SsoError(`issuer is ${issuer} but ${url} says ${doc.issuer} — they must match exactly`);\n      }\n      if (!doc.jwks_uri) throw new SsoError(`${url} names no jwks_uri`);\n      return cacheFor(doc.jwks_uri);\n    })().catch((err) => {\n      cachePromise = null; // a later call retries instead of caching the failure\n      throw err;\n    });\n    return cachePromise;\n  }\n  if (options.warmUp) void keys().catch(() => {});\n\n  return {\n    async verify(token, opts = {}) {\n      let header;\n      try {\n        header = decodeProtectedHeader(token);\n      } catch {\n        throw new SsoError(\"ticket is not a JWS\");\n      }\n      if (!header.kid) throw new SsoError(\"ticket has no kid — cannot pick a signing key\");\n      if (header.typ === \"logout+jwt\") throw new SsoError(\"a logout token is not a ticket\");\n\n      const cache = await keys();\n      let payload: JWTPayload;\n      try {\n        ({ payload } = await jwtVerify(token, async () => cache.getKey(header.kid!, header.alg ?? \"EdDSA\"), {\n          issuer,\n          audience,\n          algorithms: ALLOWED_ALGS,\n          clockTolerance: clockToleranceSec,\n          requiredClaims: [\"exp\", \"iat\", \"jti\", \"sub\"],\n        }));\n      } catch (e) {\n        // A key-set outage must surface as itself (→ 503), never as \"rejected\".\n        if (e instanceof JwksUnavailableError) throw e;\n        throw new SsoError(`ticket rejected: ${e instanceof Error ? e.message : String(e)}`);\n      }\n\n      // An ID token or a logout token must never pass as a ticket. They carry\n      // no principal_type; a logout token carries events, an ID token a nonce.\n      if (\"events\" in payload) throw new SsoError(\"a logout token is not a ticket\");\n      if (\"nonce\" in payload) throw new SsoError(\"an ID token is not a ticket\");\n\n      const type = payload.principal_type;\n      if (typeof type !== \"string\" || !PRINCIPAL_TYPES.includes(type as PrincipalType)) {\n        throw new SsoError(`ticket has no valid principal_type (got ${JSON.stringify(type)})`);\n      }\n      const lifetime = payload.exp! - payload.iat!;\n      if (lifetime > maxLifetimeSec) {\n        throw new SsoError(`ticket claims a ${lifetime}s lifetime; at most ${maxLifetimeSec}s is accepted`);\n      }\n      if (typeof payload.sub !== \"string\" || payload.sub === \"\") throw new SsoError(\"ticket has no sub\");\n\n      const scopes = typeof payload.scope === \"string\" ? payload.scope.split(\" \").filter(Boolean) : [];\n      const required = opts.scope === undefined ? [] : Array.isArray(opts.scope) ? opts.scope : [opts.scope];\n      const missing = required.filter((s) => !scopes.includes(s));\n      if (missing.length) throw new SsoError(`ticket lacks scope ${missing.join(\", \")}`);\n\n      // F084.156 — ver: unknown future formats are refused by name, never read\n      // with today's rules.\n      const ver = payload.ver === undefined ? 0 : payload.ver;\n      if (typeof ver !== \"number\" || !Number.isInteger(ver) || ver < 0) {\n        throw new SsoError(`ticket has an invalid ver (got ${JSON.stringify(payload.ver)})`);\n      }\n      if (ver > TICKET_FORMAT_VERSION) {\n        throw new SsoError(`ticket format version ${ver} is newer than this @broberg/sso understands (${TICKET_FORMAT_VERSION}) — upgrade @broberg/sso`);\n      }\n      // The whole chain, or a refusal. 0.14.2 kept only act.sub, cutting a chain\n      // to its first link, and read a malformed act as \"no delegation\" — both in\n      // the direction where the caller looks like it acts for fewer people.\n      const act = payload.act === undefined ? null : readActor(payload.act, 1);\n      const cnfRaw = payload.cnf as { jkt?: unknown } | undefined;\n      const cnf = cnfRaw && typeof cnfRaw.jkt === \"string\" && cnfRaw.jkt ? { jkt: cnfRaw.jkt } : null;\n      // F084.157 — a bound ticket needs its proof, always; requireDpop only\n      // decides about unbound ones (and then a cnf it cannot read is refused too).\n      if (cnf) {\n        if (!opts.dpop?.proof) throw new SsoError(\"ticket is DPoP-bound (cnf.jkt) but no DPoP proof was presented\");\n        await verifyDpopProof(opts.dpop.proof, {\n          method: opts.dpop.method,\n          url: opts.dpop.url,\n          ticket: token,\n          jkt: cnf.jkt,\n          replay: replayStore,\n          iatWindowSec: dpopIatWindowSec,\n          now,\n        });\n      } else if (requireDpop) {\n        throw new SsoError(cnfRaw !== undefined ? \"ticket has a cnf without a string jkt — DPoP is required here\" : \"this receiver requires DPoP; the ticket is not bound (no cnf.jkt)\");\n      }\n      // F084.159 — on a user ticket sub is the USER. Falling back to it would turn a\n      // user id into an app id, so a receiver that requires clientId === \"trail-clipper\"\n      // could be satisfied by a user who happens to be called that.\n      const named = (v: unknown) => (typeof v === \"string\" && v ? v : null);\n      const clientId =\n        type === \"user\"\n          ? named(payload.client_id) ?? named(payload.azp)\n          : named(payload.client_id) ?? payload.sub;\n      if (clientId === null) throw new SsoError(\"a user ticket names no app (no client_id or azp)\");\n      return {\n        principal: payload.sub,\n        type: type as PrincipalType,\n        clientId,\n        org: typeof payload.org === \"string\" && payload.org ? payload.org : null,\n        act,\n        version: ver,\n        cnf,\n        scopes,\n        exp: payload.exp!,\n        jti: String(payload.jti),\n      };\n    },\n  };\n}\n\nfunction readActor(raw: unknown, depth: number): TicketActor {\n  if (depth > MAX_ACT_DEPTH) throw new SsoError(`ticket's delegation chain is deeper than ${MAX_ACT_DEPTH}`);\n  const link = raw as { sub?: unknown; act?: unknown } | null;\n  if (!link || typeof link !== \"object\" || typeof link.sub !== \"string\" || link.sub === \"\") {\n    throw new SsoError(`ticket's act (link ${depth}) has no string sub`);\n  }\n  return link.act === undefined ? { sub: link.sub } : { sub: link.sub, act: readActor(link.act, depth + 1) };\n}\n"]}
+{"version":3,"sources":["../src/dpop.ts","../src/fetch-ticket.ts","../src/ticket.ts"],"names":["decodeProtectedHeader","jwtVerify"],"mappings":";;;;;;AAuCA,eAAsB,aAAA,GAAkC;AACtD,EAAA,MAAM,EAAE,UAAA,EAAY,SAAA,EAAU,GAAI,MAAM,gBAAgB,OAAA,EAAS,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AACvF,EAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,SAAS,CAAA;AACrC,EAAA,MAAM,SAAA,GAAiB,EAAE,GAAA,EAAK,GAAA,CAAI,GAAA,EAAK,GAAA,EAAK,GAAA,CAAI,GAAA,EAAK,CAAA,EAAG,GAAA,CAAI,CAAA,EAAG,CAAA,EAAG,IAAI,CAAA,EAAE;AACxE,EAAA,OAAO,EAAE,UAAA,EAAY,SAAA,EAAW,KAAK,MAAM,sBAAA,CAAuB,SAAS,CAAA,EAAE;AAC/E;AAEA,IAAM,GAAA,GAAM,IAAI,WAAA,EAAY;AAC5B,IAAM,MAAA,GAAS,CAAC,KAAA,KACd,IAAA,CAAK,OAAO,YAAA,CAAa,GAAG,IAAI,UAAA,CAAW,KAAK,CAAC,CAAC,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAG/G,eAAsB,gBAAgB,MAAA,EAAiC;AACrE,EAAA,OAAO,MAAA,CAAO,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,WAAW,GAAA,CAAI,MAAA,CAAO,MAAM,CAAC,CAAC,CAAA;AACzE;AAGO,SAAS,aAAa,GAAA,EAAqB;AAChD,EAAA,MAAM,CAAA,GAAI,IAAI,GAAA,CAAI,GAAG,CAAA;AACrB,EAAA,OAAO,CAAA,EAAG,EAAE,QAAQ,CAAA,EAAA,EAAK,EAAE,IAAI,CAAA,EAAG,EAAE,QAAQ,CAAA,CAAA;AAC9C;AAGA,eAAsB,eAAA,CACpB,KACA,IAAA,EACiB;AACjB,EAAA,MAAM,OAAA,GAAmC;AAAA,IACvC,GAAA,EAAK,OAAO,UAAA,EAAW;AAAA,IACvB,GAAA,EAAK,IAAA,CAAK,MAAA,CAAO,WAAA,EAAY;AAAA,IAC7B,GAAA,EAAK,YAAA,CAAa,IAAA,CAAK,GAAG,CAAA;AAAA,IAC1B,GAAA,EAAK,KAAK,KAAA,CAAA,CAAO,IAAA,CAAK,OAAM,IAAK,IAAA,CAAK,GAAA,EAAI,IAAK,GAAI;AAAA,GACrD;AACA,EAAA,IAAI,IAAA,CAAK,WAAW,MAAA,EAAW,OAAA,CAAQ,MAAM,MAAM,eAAA,CAAgB,KAAK,MAAM,CAAA;AAC9E,EAAA,OAAO,IAAI,OAAA,CAAQ,OAAO,CAAA,CAAE,kBAAA,CAAmB,EAAE,GAAA,EAAK,UAAA,EAAY,GAAA,EAAK,OAAA,EAAS,KAAK,GAAA,CAAI,SAAA,EAAW,CAAA,CAAE,IAAA,CAAK,IAAI,UAAU,CAAA;AAC3H;AAYO,SAAS,uBAAA,CAAwB,GAAA,GAAoB,MAAM,IAAA,CAAK,KAAI,EAAgB;AACzF,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAoB;AACxC,EAAA,OAAO;AAAA,IACL,MAAM,IAAA,CAAK,GAAA,EAAK,KAAA,EAAO;AACrB,MAAA,MAAM,IAAI,GAAA,EAAI;AACd,MAAA,KAAA,MAAW,CAAC,CAAA,EAAG,KAAK,CAAA,IAAK,OAAA,MAAa,KAAA,IAAS,CAAA,EAAG,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA;AAClE,MAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA,EAAG,OAAO,IAAA;AAC7B,MAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,CAAA,GAAI,KAAK,CAAA;AAC1B,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,GACF;AACF;AAaA,IAAM,UAAA,mBAAa,IAAI,GAAA,CAAI,CAAC,SAAS,OAAA,EAAS,OAAA,EAAS,OAAA,EAAS,OAAA,EAAS,OAAA,EAAS,OAAA,EAAS,OAAA,EAAS,OAAA,EAAS,OAAO,CAAC,CAAA;AAGrH,eAAsB,eAAA,CAAgB,OAAe,CAAA,EAAsC;AACzF,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,sBAAsB,KAAK,CAAA;AAAA,EACtC,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,SAAS,yBAAyB,CAAA;AAAA,EAC9C;AACA,EAAA,IAAI,MAAA,CAAO,GAAA,KAAQ,UAAA,EAAY,MAAM,IAAI,QAAA,CAAS,CAAA,mBAAA,EAAsB,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,GAAG,CAAC,CAAA,gBAAA,CAAkB,CAAA;AACpH,EAAA,IAAI,CAAC,MAAA,CAAO,GAAA,IAAO,CAAC,UAAA,CAAW,GAAA,CAAI,OAAO,GAAG,CAAA,EAAG,MAAM,IAAI,SAAS,CAAA,eAAA,EAAkB,IAAA,CAAK,UAAU,MAAA,CAAO,GAAG,CAAC,CAAA,wCAAA,CAA0C,CAAA;AACzJ,EAAA,MAAM,MAAM,MAAA,CAAO,GAAA;AACnB,EAAA,IAAI,CAAC,OAAO,OAAO,GAAA,KAAQ,UAAU,MAAM,IAAI,SAAS,2BAA2B,CAAA;AACnF,EAAA,IAAI,GAAA,IAAO,GAAA,EAAK,MAAM,IAAI,SAAS,uCAAuC,CAAA;AAE1E,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,GAAA,EAAK,OAAO,GAAG,CAAA;AAC3C,IAAA,CAAC,EAAE,OAAA,EAAQ,GAAI,MAAM,UAAU,KAAA,EAAO,GAAA,EAAK,EAAE,GAAA,EAAK,YAAY,UAAA,EAAY,CAAC,MAAA,CAAO,GAAG,GAAG,CAAA;AAAA,EAC1F,SAAS,CAAA,EAAG;AACV,IAAA,MAAM,IAAI,QAAA,CAAS,CAAA,+BAAA,EAAkC,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,EACnG;AAEA,EAAA,IAAK,MAAM,uBAAuB,GAAG,CAAA,KAAO,EAAE,GAAA,EAAK,MAAM,IAAI,QAAA,CAAS,oDAAoD,CAAA;AAC1H,EAAA,IAAI,OAAA,CAAQ,QAAQ,CAAA,CAAE,MAAA,CAAO,aAAY,EAAG,MAAM,IAAI,QAAA,CAAS,CAAA,kBAAA,EAAqB,KAAK,SAAA,CAAU,OAAA,CAAQ,GAAG,CAAC,CAAA,iBAAA,EAAoB,EAAE,MAAA,CAAO,WAAA,EAAa,CAAA,CAAE,CAAA;AAC3J,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,YAAA,CAAa,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,EACxC,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,SAAS,6BAA6B,CAAA;AAAA,EAClD;AACA,EAAA,IAAI,GAAA,KAAQ,YAAA,CAAa,CAAA,CAAE,GAAG,GAAG,MAAM,IAAI,QAAA,CAAS,CAAA,kBAAA,EAAqB,GAAG,CAAA,iBAAA,EAAoB,YAAA,CAAa,CAAA,CAAE,GAAG,CAAC,CAAA,CAAE,CAAA;AACrH,EAAA,MAAM,SAAS,IAAA,CAAK,KAAA,CAAM,CAAA,CAAE,GAAA,KAAQ,GAAI,CAAA;AACxC,EAAA,IAAI,OAAO,OAAA,CAAQ,GAAA,KAAQ,QAAA,IAAY,IAAA,CAAK,GAAA,CAAI,MAAA,GAAS,OAAA,CAAQ,GAAG,CAAA,GAAI,CAAA,CAAE,YAAA,EAAc;AACtF,IAAA,MAAM,IAAI,QAAA,CAAS,CAAA,8BAAA,EAA8B,CAAA,CAAE,YAAY,CAAA,CAAA,CAAG,CAAA;AAAA,EACpE;AACA,EAAA,IAAI,OAAA,CAAQ,GAAA,KAAS,MAAM,eAAA,CAAgB,CAAA,CAAE,MAAM,CAAA,EAAI,MAAM,IAAI,QAAA,CAAS,2CAA2C,CAAA;AACrH,EAAA,IAAI,OAAO,OAAA,CAAQ,GAAA,KAAQ,QAAA,IAAY,OAAA,CAAQ,QAAQ,EAAA,EAAI,MAAM,IAAI,QAAA,CAAS,uBAAuB,CAAA;AACrG,EAAA,IAAI,MAAM,CAAA,CAAE,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,CAAE,GAAG,CAAA,CAAA,EAAI,OAAA,CAAQ,GAAG,CAAA,CAAA,EAAI,CAAA,CAAE,YAAA,GAAe,CAAA,GAAI,GAAI,CAAA,EAAG;AAC7E,IAAA,MAAM,IAAI,SAAS,0CAA0C,CAAA;AAAA,EAC/D;AACF;;;ACrIO,IAAM,cAAA,GAAiB;AAC9B,IAAM,UAAA,GAAa,WAAA;AAGZ,IAAM,uBAAA,GAAN,cAAsC,KAAA,CAAM;AAAA,EACjD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,yBAAA;AAAA,EACd;AACF;AAOO,IAAM,mBAAA,GAAN,cAAkC,KAAA,CAAM;AAAA,EAC7C,WAAA,CAAY,OAAA,EAA0B,IAAA,EAAuB,MAAA,EAAgB;AAC3E,IAAA,KAAA,CAAM,OAAO,CAAA;AADuB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAuB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAE3D,IAAA,IAAA,CAAK,IAAA,GAAO,qBAAA;AAAA,EACd;AAAA,EAHsC,IAAA;AAAA,EAAuB,MAAA;AAI/D;AAGO,IAAM,sBAAA,GAAN,cAAqC,KAAA,CAAM;AAAA,EAChD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AAAA,EACd;AACF;AAuCA,SAAS,kBAAkB,GAAA,EAA8B;AACvD,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,EAAE,KAAK,CAAA;AACnC,IAAA,MAAM,GAAA,GAAM,OAAA;AAAA,MACV,EAAE,UAAA,EAAY,UAAA,EAAY,IAAA,EAAM,iBAAA,EAAmB,QAAQ,MAAA,EAAQ,OAAA,EAAS,EAAE,cAAA,EAAgB,oBAAoB,gBAAA,EAAkB,MAAA,CAAO,UAAA,CAAW,IAAI,GAAE,EAAE;AAAA,MAC9J,CAAC,GAAA,KAAQ;AACP,QAAA,IAAI,IAAA,GAAO,EAAA;AACX,QAAA,GAAA,CAAI,YAAY,MAAM,CAAA;AACtB,QAAA,GAAA,CAAI,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAO,QAAQ,CAAE,CAAA;AACjC,QAAA,GAAA,CAAI,EAAA,CAAG,OAAO,MAAM;AAClB,UAAA,IAAA,CAAK,GAAA,CAAI,UAAA,IAAc,CAAA,KAAM,GAAA,IAAA,CAAQ,GAAA,CAAI,UAAA,IAAc,CAAA,IAAK,GAAA,EAAK,OAAA,CAAQ,IAAA,CAAK,IAAA,EAAM,CAAA;AAAA,sBACxE,IAAI,sBAAA,CAAuB,qBAAqB,GAAA,CAAI,UAAU,EAAE,CAAC,CAAA;AAAA,QAC/E,CAAC,CAAA;AAAA,MACH;AAAA,KACF;AACA,IAAA,GAAA,CAAI,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAM,MAAA,CAAO,IAAI,sBAAA,CAAuB,CAAA,iBAAA,EAAoB,CAAA,CAAE,OAAO,CAAA,CAAE,CAAC,CAAC,CAAA;AAC1F,IAAA,GAAA,CAAI,IAAI,IAAI,CAAA;AAAA,EACd,CAAC,CAAA;AACH;AAGA,SAAS,OAAO,KAAA,EAA8B;AAC5C,EAAA,IAAI;AACF,IAAA,MAAM,UAAU,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,IAAA,CAAK,MAAM,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,KAAK,EAAA,EAAI,WAAW,CAAA,CAAE,QAAA,CAAS,MAAM,CAAC,CAAA;AAC/F,IAAA,OAAO,OAAO,OAAA,CAAQ,GAAA,KAAQ,QAAA,GAAW,QAAQ,GAAA,GAAM,IAAA;AAAA,EACzD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAMA,eAAe,kBAAA,CAAmB,GAAA,EAAe,MAAA,EAAgB,MAAA,EAAgB,GAAA,EAA4D;AAC3I,EAAA,IAAI,OAAmG,EAAC;AACxG,EAAA,IAAI;AACF,IAAA,IAAA,GAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,IAAI,GAAA,CAAI,MAAA,IAAU,GAAA,EAAK,MAAM,IAAI,sBAAA,CAAuB,CAAA,EAAG,MAAM,CAAA,UAAA,EAAa,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAC1F,EAAA,IAAI,CAAC,GAAA,CAAI,EAAA,IAAM,CAAC,KAAK,YAAA,EAAc;AACjC,IAAA,MAAM,IAAA,GAAO,KAAK,iBAAA,IAAqB,EAAA;AACvC,IAAA,MAAM,OAAO,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA,GAAI,KAAK,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAC,CAAA,CAAE,IAAA,EAAK,GAAI,KAAK,KAAA,IAAS,kBAAA;AAC1F,IAAA,MAAM,IAAI,mBAAA,CAAoB,CAAA,2BAAA,EAA8B,MAAM,CAAA,EAAA,EAAK,IAAA,IAAQ,IAAA,CAAK,KAAA,IAAS,GAAA,CAAI,MAAM,CAAA,CAAA,EAAI,IAAA,EAAM,IAAI,MAAM,CAAA;AAAA,EAC7H;AACA,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,GAAA,KAAQ,GAAI,CAAA;AACtC,EAAA,MAAM,MAAM,MAAA,CAAO,IAAA,CAAK,YAAY,CAAA,IAAK,MAAA,IAAU,KAAK,UAAA,IAAc,GAAA,CAAA;AACtE,EAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,YAAA,EAAc,GAAA,EAAI;AACzC;AAEO,SAAS,kBAAA,CAAmB,OAAA,GAA+B,EAAC,EAAiB;AAClF,EAAA,MAAM,UAAU,OAAA,CAAQ,MAAA,IAAU,cAAA,EAAgB,OAAA,CAAQ,QAAQ,EAAE,CAAA;AACpE,EAAA,MAAM,cAAA,GAAiB,QAAQ,cAAA,IAAkB,EAAA;AACjD,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,IAAO,OAAA,CAAQ,GAAA;AACnC,EAAA,MAAM,SAAA,GAAY,QAAQ,SAAA,IAAa,KAAA;AACvC,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,KAAQ,MAAM,KAAK,GAAA,EAAI,CAAA;AAC3C,EAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,IAAW,iBAAA;AACnC,EAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,KAAU,MAAM,CAAC,CAAC,GAAA,CAAI,YAAA,IAAgB,UAAA,CAAW,UAAU,CAAA,CAAA;AAEjF,EAAA,MAAM,KAAA,uBAAY,GAAA,EAA4C;AAC9D,EAAA,MAAM,QAAA,uBAAe,GAAA,EAA6B;AAClD,EAAA,IAAI,OAAA,GAAmC,IAAA;AACvC,EAAA,MAAM,MAAA,GAAS,MAAO,OAAA,KAAY,aAAA,EAAc;AAEhD,EAAA,eAAe,aAAA,GAAiC;AAC9C,IAAA,IAAI,KAAA,EAAM,EAAG,OAAO,OAAA,CAAQ,MAAM,CAAA;AAClC,IAAA,MAAM,MAAM,GAAA,CAAI,4BAAA;AAChB,IAAA,MAAM,SAAS,GAAA,CAAI,8BAAA;AACnB,IAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,MAAA,IAAI,GAAA;AACJ,MAAA,IAAI;AACF,QAAA,GAAA,GAAM,MAAM,SAAA,CAAU,CAAA,EAAG,GAAG,CAAA,UAAA,EAAa,mBAAmB,MAAM,CAAC,CAAA,CAAA,EAAI,EAAE,SAAS,EAAE,aAAA,EAAe,UAAU,MAAM,CAAA,CAAA,IAAM,CAAA;AAAA,MAC3H,SAAS,CAAA,EAAG;AACV,QAAA,MAAM,IAAI,sBAAA,CAAuB,CAAA,kCAAA,EAAqC,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,MACpH;AACA,MAAA,IAAI,CAAC,IAAI,EAAA,EAAI,MAAM,IAAI,sBAAA,CAAuB,CAAA,8BAAA,EAAiC,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAC3F,MAAA,MAAM,EAAE,KAAA,EAAM,GAAK,MAAM,IAAI,IAAA,EAAK;AAClC,MAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,uBAAuB,wCAAwC,CAAA;AACrF,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,MAAM,IAAI,uBAAA;AAAA,MACR;AAAA,KAEF;AAAA,EACF;AAEA,EAAA,eAAe,QAAA,CAAS,UAAkB,KAAA,EAAoE;AAC5G,IAAA,MAAM,OAAA,GAAU,MAAM,aAAA,EAAc;AACpC,IAAA,MAAM,IAAA,GAAO,IAAI,eAAA,CAAgB;AAAA,MAC/B,UAAA,EAAY,iDAAA;AAAA,MACZ,aAAA,EAAe,OAAA;AAAA,MACf,kBAAA,EAAoB,sCAAA;AAAA,MACpB;AAAA,KACD,CAAA;AACD,IAAA,IAAI,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,KAAK,CAAA;AAClC,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,GAAG,MAAM,CAAA,aAAA,CAAA;AAC1B,MAAA,MAAM,OAAA,GAAkC,EAAE,cAAA,EAAgB,mCAAA,EAAoC;AAC9F,MAAA,IAAI,OAAA,CAAQ,IAAA,EAAM,OAAA,CAAQ,IAAA,GAAO,MAAM,eAAA,CAAgB,MAAM,MAAA,EAAO,EAAG,EAAE,MAAA,EAAQ,MAAA,EAAQ,GAAA,EAAK,QAAA,EAAU,KAAK,CAAA;AAC7G,MAAA,GAAA,GAAM,MAAM,UAAU,QAAA,EAAU,EAAE,QAAQ,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,IAAA,EAAM,CAAA;AAAA,IACzE,SAAS,CAAA,EAAG;AACV,MAAA,MAAM,IAAI,sBAAA,CAAuB,CAAA,EAAG,MAAM,CAAA,cAAA,EAAiB,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,IACzG;AACA,IAAA,OAAO,kBAAA,CAAmB,GAAA,EAAK,MAAA,EAAQ,QAAA,EAAU,GAAG,CAAA;AAAA,EACtD;AAEA,EAAA,MAAM,MAAA,GAAuB;AAAA,IAC3B,MAAM,WAAA,CAAY,EAAE,UAAU,KAAA,EAAO,MAAA,EAAQ,KAAI,EAAG;AAClD,MAAA,MAAM,SAAS,MAAM,MAAA,CAAO,IAAI,EAAE,QAAA,EAAU,OAAO,CAAA;AACnD,MAAA,IAAI,CAAC,QAAQ,IAAA,EAAM,OAAO,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,MAAM,CAAA,CAAA,EAAG;AAC9D,MAAA,OAAO,EAAE,aAAA,EAAe,CAAA,KAAA,EAAQ,MAAM,CAAA,CAAA,EAAI,MAAM,MAAM,eAAA,CAAgB,MAAM,MAAA,IAAU,EAAE,MAAA,EAAQ,KAAK,MAAA,EAAQ,GAAA,EAAK,CAAA,EAAE;AAAA,IACtH,CAAA;AAAA,IACA,MAAM,GAAA,CAAI,EAAE,QAAA,EAAU,OAAM,EAAG;AAC7B,MAAA,MAAM,GAAA,GAAM,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,SAAS,EAAE,CAAA,CAAA;AACtC,MAAA,MAAM,GAAA,GAAM,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AACzB,MAAA,IAAI,GAAA,IAAO,IAAI,GAAA,GAAM,cAAA,GAAiB,KAAI,GAAI,GAAA,SAAa,GAAA,CAAI,KAAA;AAC/D,MAAA,MAAM,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,GAAG,CAAA;AAChC,MAAA,IAAI,SAAS,OAAO,OAAA;AACpB,MAAA,MAAM,IAAI,QAAA,CAAS,QAAA,EAAU,KAAK,CAAA,CAC/B,IAAA,CAAK,CAAC,CAAA,KAAM;AACX,QAAA,KAAA,CAAM,GAAA,CAAI,KAAK,CAAC,CAAA;AAChB,QAAA,OAAO,CAAA,CAAE,KAAA;AAAA,MACX,CAAC,CAAA,CACA,OAAA,CAAQ,MAAM,QAAA,CAAS,MAAA,CAAO,GAAG,CAAC,CAAA;AACrC,MAAA,QAAA,CAAS,GAAA,CAAI,KAAK,CAAC,CAAA;AACnB,MAAA,OAAO,CAAA;AAAA,IACT;AAAA,GACF;AACA,EAAA,OAAO,MAAA;AACT;AAEA,IAAI,MAAA,GAA8B,IAAA;AAE3B,SAAS,YAAY,IAAA,EAA6D;AACvF,EAAA,MAAA,KAAW,kBAAA,EAAmB;AAC9B,EAAA,OAAO,MAAA,CAAO,IAAI,IAAI,CAAA;AACxB;AAkCA,eAAsB,kBAAkB,IAAA,EAAyE;AAC/G,EAAA,MAAM,UAAU,IAAA,CAAK,MAAA,IAAU,cAAA,EAAgB,OAAA,CAAQ,QAAQ,EAAE,CAAA;AACjE,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,QAAA;AACrC,EAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,mBAAA,CAAoB,wFAAA,EAA0F,qBAAqB,CAAC,CAAA;AAC3J,EAAA,MAAM,SAAA,GAAY,KAAK,SAAA,IAAa,KAAA;AACpC,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,GAAA,KAAQ,MAAM,KAAK,GAAA,EAAI,CAAA;AACxC,EAAA,MAAM,IAAA,GAAO,IAAI,eAAA,CAAgB;AAAA,IAC/B,UAAA,EAAY,iDAAA;AAAA,IACZ,eAAe,IAAA,CAAK,YAAA;AAAA,IACpB,kBAAA,EAAoB;AAAA,GACrB,CAAA;AACD,EAAA,IAAI,KAAK,QAAA,EAAU,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,KAAK,QAAQ,CAAA;AACrD,EAAA,IAAI,KAAK,QAAA,EAAU,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,KAAK,QAAQ,CAAA;AACrD,EAAA,IAAI,KAAK,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,KAAK,KAAK,CAAA;AAC5C,EAAA,MAAM,QAAA,GAAW,GAAG,MAAM,CAAA,aAAA,CAAA;AAC1B,EAAA,MAAM,OAAA,GAAkC,EAAE,cAAA,EAAgB,mCAAA,EAAoC;AAC9F,EAAA,IAAI,KAAK,YAAA,EAAc;AAGrB,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,MAAA,EAAS,IAAA,CAAK,CAAA,EAAG,mBAAmB,IAAA,CAAK,QAAQ,CAAC,CAAA,CAAA,EAAI,kBAAA,CAAmB,IAAA,CAAK,YAAY,CAAC,EAAE,CAAC,CAAA,CAAA;AAAA,EACxH,CAAA,MAAO;AACL,IAAA,IAAA,CAAK,GAAA,CAAI,WAAA,EAAa,IAAA,CAAK,QAAQ,CAAA;AAAA,EACrC;AACA,EAAA,IAAI,IAAA,CAAK,OAAA,EAAS,OAAA,CAAQ,IAAA,GAAO,MAAM,eAAA,CAAgB,IAAA,CAAK,OAAA,EAAS,EAAE,MAAA,EAAQ,MAAA,EAAQ,GAAA,EAAK,QAAA,EAAU,KAAK,CAAA;AAC3G,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,MAAM,UAAU,QAAA,EAAU,EAAE,QAAQ,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,IAAA,EAAM,CAAA;AAAA,EACzE,SAAS,CAAA,EAAG;AACV,IAAA,MAAM,IAAI,sBAAA,CAAuB,CAAA,EAAG,MAAM,CAAA,cAAA,EAAiB,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,EACzG;AACA,EAAA,OAAO,kBAAA,CAAmB,GAAA,EAAK,MAAA,EAAQ,MAAA,EAAQ,GAAG,CAAA;AACpD;ACnQA,IAAM,eAAA,GAA4C,CAAC,OAAA,EAAS,SAAA,EAAW,SAAS,MAAM,CAAA;AAa/E,IAAM,qBAAA,GAAwB;AAE9B,IAAM,aAAA,GAAgB;AA8EtB,SAAS,qBAAqB,OAAA,EAAgD;AACnF,EAAA,MAAM;AAAA,IACJ,MAAA;AAAA,IACA,QAAA;AAAA,IACA,iBAAiB,EAAA,GAAK,EAAA;AAAA,IACtB,iBAAA,GAAoB,EAAA;AAAA,IACpB,SAAA,GAAY,KAAA;AAAA,IACZ,WAAA,GAAc,KAAA;AAAA,IACd,gBAAA,GAAmB,EAAA;AAAA,IACnB,GAAA,GAAM,MAAM,IAAA,CAAK,GAAA;AAAI,GACvB,GAAI,OAAA;AACJ,EAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,WAAA,IAAe,uBAAA,CAAwB,GAAG,CAAA;AACtE,EAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,SAAS,sCAAsC,CAAA;AACtE,EAAA,IAAI,CAAC,QAAA,EAAU,MAAM,IAAI,SAAS,qDAAqD,CAAA;AAEvF,EAAA,IAAI,YAAA,GAA0C,IAAA;AAC9C,EAAA,MAAM,QAAA,GAAW,CAAC,OAAA,KAChB,eAAA,CAAgB;AAAA,IACd,OAAA;AAAA,IACA,SAAA;AAAA,IACA,GAAI,OAAA,CAAQ,MAAA,GAAS,EAAE,MAAA,EAAQ,IAAA,KAAS,EAAC;AAAA,IACzC,GAAI,QAAQ,oBAAA,KAAyB,MAAA,GAAY,EAAE,oBAAA,EAAsB,OAAA,CAAQ,oBAAA,EAAqB,GAAI;AAAC,GAC5G,CAAA;AAEH,EAAA,eAAe,IAAA,GAA2B;AACxC,IAAA,YAAA,KAAA,CAAkB,YAAY;AAC5B,MAAA,IAAI,OAAA,CAAQ,OAAA,EAAS,OAAO,QAAA,CAAS,QAAQ,OAAO,CAAA;AACpD,MAAA,MAAM,GAAA,GAAM,GAAG,MAAM,CAAA,iCAAA,CAAA;AACrB,MAAA,IAAI,GAAA;AACJ,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,GAAG,CAAA;AAC/B,QAAA,IAAI,CAAC,IAAI,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,SAAA,EAAY,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AACrD,QAAA,GAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,MACxB,SAAS,KAAA,EAAO;AAEd,QAAA,MAAM,IAAI,oBAAA,CAAqB,CAAA,EAAG,GAAG,CAAA,EAAA,EAAK,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,MACpG;AACA,MAAA,IAAI,GAAA,CAAI,WAAW,MAAA,EAAQ;AACzB,QAAA,MAAM,IAAI,SAAS,CAAA,UAAA,EAAa,MAAM,QAAQ,GAAG,CAAA,MAAA,EAAS,GAAA,CAAI,MAAM,CAAA,+BAAA,CAA4B,CAAA;AAAA,MAClG;AACA,MAAA,IAAI,CAAC,IAAI,QAAA,EAAU,MAAM,IAAI,QAAA,CAAS,CAAA,EAAG,GAAG,CAAA,kBAAA,CAAoB,CAAA;AAChE,MAAA,OAAO,QAAA,CAAS,IAAI,QAAQ,CAAA;AAAA,IAC9B,CAAA,GAAG,CAAE,KAAA,CAAM,CAAC,GAAA,KAAQ;AAClB,MAAA,YAAA,GAAe,IAAA;AACf,MAAA,MAAM,GAAA;AAAA,IACR,CAAC,CAAA;AACD,IAAA,OAAO,YAAA;AAAA,EACT;AACA,EAAA,IAAI,QAAQ,MAAA,EAAQ,KAAK,IAAA,EAAK,CAAE,MAAM,MAAM;AAAA,EAAC,CAAC,CAAA;AAE9C,EAAA,OAAO;AAAA,IACL,MAAM,MAAA,CAAO,KAAA,EAAO,IAAA,GAAO,EAAC,EAAG;AAC7B,MAAA,IAAI,MAAA;AACJ,MAAA,IAAI;AACF,QAAA,MAAA,GAASA,sBAAsB,KAAK,CAAA;AAAA,MACtC,CAAA,CAAA,MAAQ;AACN,QAAA,MAAM,IAAI,SAAS,qBAAqB,CAAA;AAAA,MAC1C;AACA,MAAA,IAAI,CAAC,MAAA,CAAO,GAAA,EAAK,MAAM,IAAI,SAAS,oDAA+C,CAAA;AACnF,MAAA,IAAI,OAAO,GAAA,KAAQ,YAAA,EAAc,MAAM,IAAI,SAAS,gCAAgC,CAAA;AAEpF,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,EAAK;AACzB,MAAA,IAAI,OAAA;AACJ,MAAA,IAAI;AACF,QAAA,CAAC,EAAE,OAAA,EAAQ,GAAI,MAAMC,UAAU,KAAA,EAAO,YAAY,KAAA,CAAM,MAAA,CAAO,MAAA,CAAO,GAAA,EAAM,MAAA,CAAO,GAAA,IAAO,OAAO,CAAA,EAAG;AAAA,UAClG,MAAA;AAAA,UACA,QAAA;AAAA,UACA,UAAA,EAAY,YAAA;AAAA,UACZ,cAAA,EAAgB,iBAAA;AAAA,UAChB,cAAA,EAAgB,CAAC,KAAA,EAAO,KAAA,EAAO,OAAO,KAAK;AAAA,SAC5C,CAAA;AAAA,MACH,SAAS,CAAA,EAAG;AAEV,QAAA,IAAI,CAAA,YAAa,sBAAsB,MAAM,CAAA;AAC7C,QAAA,MAAM,IAAI,QAAA,CAAS,CAAA,iBAAA,EAAoB,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,MACrF;AAIA,MAAA,IAAI,QAAA,IAAY,OAAA,EAAS,MAAM,IAAI,SAAS,gCAAgC,CAAA;AAC5E,MAAA,IAAI,OAAA,IAAW,OAAA,EAAS,MAAM,IAAI,SAAS,6BAA6B,CAAA;AAExE,MAAA,MAAM,OAAO,OAAA,CAAQ,cAAA;AACrB,MAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,CAAC,eAAA,CAAgB,QAAA,CAAS,IAAqB,CAAA,EAAG;AAChF,QAAA,MAAM,IAAI,QAAA,CAAS,CAAA,wCAAA,EAA2C,KAAK,SAAA,CAAU,IAAI,CAAC,CAAA,CAAA,CAAG,CAAA;AAAA,MACvF;AACA,MAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,GAAO,OAAA,CAAQ,GAAA;AACxC,MAAA,IAAI,WAAW,cAAA,EAAgB;AAC7B,QAAA,MAAM,IAAI,QAAA,CAAS,CAAA,gBAAA,EAAmB,QAAQ,CAAA,oBAAA,EAAuB,cAAc,CAAA,aAAA,CAAe,CAAA;AAAA,MACpG;AACA,MAAA,IAAI,OAAO,OAAA,CAAQ,GAAA,KAAQ,QAAA,IAAY,OAAA,CAAQ,QAAQ,EAAA,EAAI,MAAM,IAAI,QAAA,CAAS,mBAAmB,CAAA;AAEjG,MAAA,MAAM,MAAA,GAAS,OAAO,OAAA,CAAQ,KAAA,KAAU,QAAA,GAAW,OAAA,CAAQ,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,CAAO,OAAO,IAAI,EAAC;AAC/F,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,KAAU,MAAA,GAAY,EAAC,GAAI,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA,GAAI,IAAA,CAAK,KAAA,GAAQ,CAAC,KAAK,KAAK,CAAA;AACrG,MAAA,MAAM,OAAA,GAAU,SAAS,MAAA,CAAO,CAAC,MAAM,CAAC,MAAA,CAAO,QAAA,CAAS,CAAC,CAAC,CAAA;AAC1D,MAAA,IAAI,OAAA,CAAQ,MAAA,EAAQ,MAAM,IAAI,QAAA,CAAS,sBAAsB,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAIjF,MAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,KAAQ,MAAA,GAAY,IAAI,OAAA,CAAQ,GAAA;AACpD,MAAA,IAAI,OAAO,QAAQ,QAAA,IAAY,CAAC,OAAO,SAAA,CAAU,GAAG,CAAA,IAAK,GAAA,GAAM,CAAA,EAAG;AAChE,QAAA,MAAM,IAAI,SAAS,CAAA,+BAAA,EAAkC,IAAA,CAAK,UAAU,OAAA,CAAQ,GAAG,CAAC,CAAA,CAAA,CAAG,CAAA;AAAA,MACrF;AACA,MAAA,IAAI,MAAM,qBAAA,EAAuB;AAC/B,QAAA,MAAM,IAAI,QAAA,CAAS,CAAA,sBAAA,EAAyB,GAAG,CAAA,8CAAA,EAAiD,qBAAqB,CAAA,6BAAA,CAA0B,CAAA;AAAA,MACjJ;AAIA,MAAA,MAAM,GAAA,GAAM,QAAQ,GAAA,KAAQ,MAAA,GAAY,OAAO,SAAA,CAAU,OAAA,CAAQ,KAAK,CAAC,CAAA;AACvE,MAAA,MAAM,SAAS,OAAA,CAAQ,GAAA;AACvB,MAAA,MAAM,GAAA,GAAM,MAAA,IAAU,OAAO,MAAA,CAAO,GAAA,KAAQ,QAAA,IAAY,MAAA,CAAO,GAAA,GAAM,EAAE,GAAA,EAAK,MAAA,CAAO,GAAA,EAAI,GAAI,IAAA;AAG3F,MAAA,IAAI,GAAA,EAAK;AACP,QAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,OAAO,MAAM,IAAI,SAAS,gEAAgE,CAAA;AAC1G,QAAA,MAAM,eAAA,CAAgB,IAAA,CAAK,IAAA,CAAK,KAAA,EAAO;AAAA,UACrC,MAAA,EAAQ,KAAK,IAAA,CAAK,MAAA;AAAA,UAClB,GAAA,EAAK,KAAK,IAAA,CAAK,GAAA;AAAA,UACf,MAAA,EAAQ,KAAA;AAAA,UACR,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAA,EAAQ,WAAA;AAAA,UACR,YAAA,EAAc,gBAAA;AAAA,UACd;AAAA,SACD,CAAA;AAAA,MACH,WAAW,WAAA,EAAa;AACtB,QAAA,MAAM,IAAI,QAAA,CAAS,MAAA,KAAW,MAAA,GAAY,uEAAkE,mEAAmE,CAAA;AAAA,MACjL;AAIA,MAAA,MAAM,QAAQ,CAAC,CAAA,KAAgB,OAAO,CAAA,KAAM,QAAA,IAAY,IAAI,CAAA,GAAI,IAAA;AAChE,MAAA,MAAM,QAAA,GACJ,IAAA,KAAS,MAAA,GACL,KAAA,CAAM,QAAQ,SAAS,CAAA,IAAK,KAAA,CAAM,OAAA,CAAQ,GAAG,CAAA,GAC7C,KAAA,CAAM,OAAA,CAAQ,SAAS,KAAK,OAAA,CAAQ,GAAA;AAC1C,MAAA,IAAI,QAAA,KAAa,IAAA,EAAM,MAAM,IAAI,SAAS,kDAAkD,CAAA;AAC5F,MAAA,OAAO;AAAA,QACL,WAAW,OAAA,CAAQ,GAAA;AAAA,QACnB,IAAA;AAAA,QACA,QAAA;AAAA,QACA,GAAA,EAAK,OAAO,OAAA,CAAQ,GAAA,KAAQ,YAAY,OAAA,CAAQ,GAAA,GAAM,QAAQ,GAAA,GAAM,IAAA;AAAA,QACpE,GAAA;AAAA,QACA,OAAA,EAAS,GAAA;AAAA,QACT,GAAA;AAAA,QACA,MAAA;AAAA,QACA,KAAK,OAAA,CAAQ,GAAA;AAAA,QACb,GAAA,EAAK,MAAA,CAAO,OAAA,CAAQ,GAAG;AAAA,OACzB;AAAA,IACF;AAAA,GACF;AACF;AAEA,SAAS,SAAA,CAAU,KAAc,KAAA,EAA4B;AAC3D,EAAA,IAAI,QAAQ,aAAA,EAAe,MAAM,IAAI,QAAA,CAAS,CAAA,yCAAA,EAA4C,aAAa,CAAA,CAAE,CAAA;AACzG,EAAA,MAAM,IAAA,GAAO,GAAA;AACb,EAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,OAAO,IAAA,CAAK,GAAA,KAAQ,QAAA,IAAY,IAAA,CAAK,GAAA,KAAQ,EAAA,EAAI;AACxF,IAAA,MAAM,IAAI,QAAA,CAAS,CAAA,mBAAA,EAAsB,KAAK,CAAA,mBAAA,CAAqB,CAAA;AAAA,EACrE;AACA,EAAA,OAAO,KAAK,GAAA,KAAQ,MAAA,GAAY,EAAE,GAAA,EAAK,IAAA,CAAK,KAAI,GAAI,EAAE,GAAA,EAAK,IAAA,CAAK,KAAK,GAAA,EAAK,SAAA,CAAU,KAAK,GAAA,EAAK,KAAA,GAAQ,CAAC,CAAA,EAAE;AAC3G","file":"index.js","sourcesContent":["/**\n * F084.157 — DPoP (RFC 9449): a bound ticket works only for whoever holds the key\n * (broberg-id-F087.16, joint design #2572/#2574).\n *\n * A DPoP-bound ticket carries `cnf.jkt`, the thumbprint of the caller's public\n * key. With every request the caller signs a short PROOF (method, URL, time, a\n * hash of the ticket) with the matching private key. A ticket copied out of a log\n * is useless on another machine: it has the ticket, not the key.\n *\n * THE RULE THAT MAKES IT PROTECTION (agreed with broberg-id, (A) in #2574): once a\n * receiver verifies with this version, a ticket WITH cnf.jkt needs a valid proof —\n * also while DPoP is otherwise optional. `requireDpop` only decides whether\n * UNBOUND tickets are still accepted. Were bound tickets accepted without a proof\n * during the rollout, a stolen bound ticket would work as bearer the whole time.\n *\n * Not here yet: server nonces (RFC 9449 §8). The jti replay store covers replay\n * inside the iat window.\n */\nimport {\n  SignJWT,\n  calculateJwkThumbprint,\n  decodeProtectedHeader,\n  exportJWK,\n  generateKeyPair,\n  importJWK,\n  jwtVerify,\n  type JWK,\n} from \"jose\";\nimport { SsoError } from \"./client.js\";\n\n/** One process's DPoP key. The private half cannot be exported. */\nexport interface DpopKey {\n  privateKey: CryptoKey;\n  publicJwk: JWK;\n  /** RFC 7638 thumbprint — what BID puts in the ticket's cnf.jkt. */\n  jkt: string;\n}\n\n/** A fresh ES256 key pair, private key non-extractable, never written anywhere. */\nexport async function createDpopKey(): Promise<DpopKey> {\n  const { privateKey, publicKey } = await generateKeyPair(\"ES256\", { extractable: false });\n  const jwk = await exportJWK(publicKey); // a public key is always exportable\n  const publicJwk: JWK = { kty: jwk.kty, crv: jwk.crv, x: jwk.x, y: jwk.y };\n  return { privateKey, publicJwk, jkt: await calculateJwkThumbprint(publicJwk) };\n}\n\nconst enc = new TextEncoder();\nconst b64url = (bytes: ArrayBuffer) =>\n  btoa(String.fromCharCode(...new Uint8Array(bytes))).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n\n/** `ath`: base64url(SHA-256(ticket)) — ties a proof to one ticket. */\nexport async function accessTokenHash(ticket: string): Promise<string> {\n  return b64url(await crypto.subtle.digest(\"SHA-256\", enc.encode(ticket)));\n}\n\n/** RFC 9449 §4.3: htu is compared without query and fragment. */\nexport function normalizeHtu(url: string): string {\n  const u = new URL(url);\n  return `${u.protocol}//${u.host}${u.pathname}`;\n}\n\n/** Sign one proof. Pass `ticket` when calling a resource server (adds ath); omit it for BID's token endpoint. */\nexport async function createDpopProof(\n  key: DpopKey,\n  opts: { method: string; url: string; ticket?: string; now?: () => number },\n): Promise<string> {\n  const payload: Record<string, unknown> = {\n    jti: crypto.randomUUID(),\n    htm: opts.method.toUpperCase(),\n    htu: normalizeHtu(opts.url),\n    iat: Math.floor((opts.now?.() ?? Date.now()) / 1000),\n  };\n  if (opts.ticket !== undefined) payload.ath = await accessTokenHash(opts.ticket);\n  return new SignJWT(payload).setProtectedHeader({ typ: \"dpop+jwt\", alg: \"ES256\", jwk: key.publicJwk }).sign(key.privateKey);\n}\n\n/**\n * Remembers which proofs were already used. The default is in-memory, which\n * holds on ONE machine: a receiver running on two machines must pass a shared\n * store, or a proof replayed against the other machine inside the window passes.\n */\nexport interface ReplayStore {\n  /** Record `key`; resolve true if it was already recorded within `ttlMs`. */\n  seen(key: string, ttlMs: number): Promise<boolean>;\n}\n\nexport function createMemoryReplayStore(now: () => number = () => Date.now()): ReplayStore {\n  const entries = new Map<string, number>();\n  return {\n    async seen(key, ttlMs) {\n      const t = now();\n      for (const [k, until] of entries) if (until <= t) entries.delete(k);\n      if (entries.has(key)) return true;\n      entries.set(key, t + ttlMs);\n      return false;\n    },\n  };\n}\n\nexport interface VerifyProofOptions {\n  method: string;\n  /** The receiver's PUBLIC URL for this request (behind a proxy the process sees an internal one). */\n  url: string;\n  ticket: string;\n  jkt: string;\n  replay: ReplayStore;\n  iatWindowSec: number;\n  now: () => number;\n}\n\nconst ASYMMETRIC = new Set([\"ES256\", \"ES384\", \"ES512\", \"EdDSA\", \"PS256\", \"PS384\", \"PS512\", \"RS256\", \"RS384\", \"RS512\"]);\n\n/** Throws SsoError naming the first thing that is wrong. */\nexport async function verifyDpopProof(proof: string, o: VerifyProofOptions): Promise<void> {\n  let header;\n  try {\n    header = decodeProtectedHeader(proof);\n  } catch {\n    throw new SsoError(\"DPoP proof is not a JWS\");\n  }\n  if (header.typ !== \"dpop+jwt\") throw new SsoError(`DPoP proof has typ ${JSON.stringify(header.typ)}, not \"dpop+jwt\"`);\n  if (!header.alg || !ASYMMETRIC.has(header.alg)) throw new SsoError(`DPoP proof alg ${JSON.stringify(header.alg)} is not an accepted asymmetric algorithm`);\n  const jwk = header.jwk as JWK | undefined;\n  if (!jwk || typeof jwk !== \"object\") throw new SsoError(\"DPoP proof carries no jwk\");\n  if (\"d\" in jwk) throw new SsoError(\"DPoP proof jwk contains a private key\");\n\n  let payload;\n  try {\n    const key = await importJWK(jwk, header.alg);\n    ({ payload } = await jwtVerify(proof, key, { typ: \"dpop+jwt\", algorithms: [header.alg] }));\n  } catch (e) {\n    throw new SsoError(`DPoP proof signature rejected: ${e instanceof Error ? e.message : String(e)}`);\n  }\n\n  if ((await calculateJwkThumbprint(jwk)) !== o.jkt) throw new SsoError(\"DPoP proof key does not match the ticket's cnf.jkt\");\n  if (payload.htm !== o.method.toUpperCase()) throw new SsoError(`DPoP proof is for ${JSON.stringify(payload.htm)}, the request is ${o.method.toUpperCase()}`);\n  let htu: string;\n  try {\n    htu = normalizeHtu(String(payload.htu));\n  } catch {\n    throw new SsoError(\"DPoP proof htu is not a URL\");\n  }\n  if (htu !== normalizeHtu(o.url)) throw new SsoError(`DPoP proof is for ${htu}, the request is ${normalizeHtu(o.url)}`);\n  const nowSec = Math.floor(o.now() / 1000);\n  if (typeof payload.iat !== \"number\" || Math.abs(nowSec - payload.iat) > o.iatWindowSec) {\n    throw new SsoError(`DPoP proof iat is outside ±${o.iatWindowSec}s`);\n  }\n  if (payload.ath !== (await accessTokenHash(o.ticket))) throw new SsoError(\"DPoP proof ath does not match this ticket\");\n  if (typeof payload.jti !== \"string\" || payload.jti === \"\") throw new SsoError(\"DPoP proof has no jti\");\n  if (await o.replay.seen(`${o.jkt}:${payload.jti}`, o.iatWindowSec * 2 * 1000)) {\n    throw new SsoError(\"DPoP proof was already used (jti replay)\");\n  }\n}\n","/**\n * F084.154 — fetch a BrobergID ticket WITHOUT a key (broberg-id-F087.10/.11).\n *\n * The sending half of F084.153: a workload proves who it is with the identity its\n * platform already gives it, and BID exchanges that for a short-lived ticket\n * (RFC 8693 token exchange). No secret is stored anywhere.\n *\n *   Fly.io          POST unix:/.fly/api  /v1/tokens/oidc  {aud: issuer}\n *   GitHub Actions  GET  $ACTIONS_ID_TOKEN_REQUEST_URL&audience=issuer\n *                   (needs `permissions: id-token: write` in the workflow)\n *   then            POST {issuer}/oauth2/token  grant_type=…token-exchange\n *\n * Reference implementation: broberg-id/.github/workflows/ticket-probe.yml.\n * The ticket itself is never logged or put in an error message.\n */\nimport { existsSync } from \"node:fs\";\nimport { request } from \"node:http\";\nimport { createDpopKey, createDpopProof, type DpopKey } from \"./dpop.js\";\n\nexport const DEFAULT_ISSUER = \"https://id.broberg.ai\";\nconst FLY_SOCKET = \"/.fly/api\";\n\n/** No platform identity to exchange: not on Fly, not in a GitHub Actions job with id-token: write. */\nexport class NoWorkloadIdentityError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"NoWorkloadIdentityError\";\n  }\n}\n\n/**\n * BID refused the exchange. `code` is BID's own error name (the part of\n * error_description before the colon, e.g. `no_rule_for_audience`), `status` the\n * HTTP status. A 4xx is PERMANENT for this request — fix the rule, do not retry.\n */\nexport class TicketExchangeError extends Error {\n  constructor(message: string, readonly code: string, readonly status: number) {\n    super(message);\n    this.name = \"TicketExchangeError\";\n  }\n}\n\n/** BID or the platform could not be reached, or answered 5xx. TRANSIENT — retry later. */\nexport class TicketUnavailableError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"TicketUnavailableError\";\n  }\n}\n\nexport interface TicketClientOptions {\n  issuer?: string;\n  /** Renew this many seconds before exp. Default 30. */\n  renewBeforeSec?: number;\n  /** Injectable for tests. */\n  env?: Record<string, string | undefined>;\n  fetchImpl?: typeof fetch;\n  now?: () => number;\n  /** Ask Fly's machine API for an OIDC token. Default: POST over the /.fly/api unix socket. */\n  flyOidc?: (aud: string) => Promise<string>;\n  /** Whether the Fly socket is present. Default: checks /.fly/api. */\n  onFly?: () => boolean;\n  /**\n   * F084.157 — ask BID for DPoP-BOUND tickets. One ES256 key per client\n   * (non-extractable, never stored); every call then needs a proof, which\n   * `authHeaders` makes. Default false: bearer tickets, exactly as before.\n   */\n  dpop?: boolean;\n}\n\n/** Headers for one call to a receiver. With `dpop`, `authorization` is `DPoP <ticket>` and `dpop` is the proof. */\nexport interface TicketAuthHeaders {\n  authorization: string;\n  dpop?: string;\n}\n\nexport interface TicketClient {\n  /** A ticket for `audience` (BID's short name, e.g. \"discovery\"), from cache while it is fresh. */\n  get(opts: { audience: string; scope?: string }): Promise<string>;\n  /**\n   * F084.157 — the headers for ONE request to a receiver: a ticket plus, with\n   * `dpop`, a fresh proof bound to this method and URL (use it once). Without\n   * `dpop`: `{ authorization: \"Bearer <ticket>\" }`.\n   */\n  authHeaders(opts: { audience: string; scope?: string; method: string; url: string }): Promise<TicketAuthHeaders>;\n}\n\nfunction flyOidcOverSocket(aud: string): Promise<string> {\n  return new Promise((resolve, reject) => {\n    const body = JSON.stringify({ aud });\n    const req = request(\n      { socketPath: FLY_SOCKET, path: \"/v1/tokens/oidc\", method: \"POST\", headers: { \"content-type\": \"application/json\", \"content-length\": Buffer.byteLength(body) } },\n      (res) => {\n        let data = \"\";\n        res.setEncoding(\"utf8\");\n        res.on(\"data\", (c) => (data += c));\n        res.on(\"end\", () => {\n          if ((res.statusCode ?? 0) >= 200 && (res.statusCode ?? 0) < 300) resolve(data.trim());\n          else reject(new TicketUnavailableError(`Fly OIDC answered ${res.statusCode}`));\n        });\n      },\n    );\n    req.on(\"error\", (e) => reject(new TicketUnavailableError(`Fly OIDC socket: ${e.message}`)));\n    req.end(body);\n  });\n}\n\n/** Seconds since the epoch at which a JWT expires, or null if it cannot be read. */\nfunction jwtExp(token: string): number | null {\n  try {\n    const payload = JSON.parse(Buffer.from(token.split(\".\")[1] ?? \"\", \"base64url\").toString(\"utf8\"));\n    return typeof payload.exp === \"number\" ? payload.exp : null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Read BID's answer to a token exchange — ONE reader for machine and user tickets,\n * so the two cannot drift on what a refusal or an outage looks like.\n */\nasync function readTicketResponse(res: Response, issuer: string, target: string, now: () => number): Promise<{ token: string; exp: number }> {\n  let body: { access_token?: string; expires_in?: number; error?: string; error_description?: string } = {};\n  try {\n    body = (await res.json()) as typeof body;\n  } catch {\n    /* a non-JSON answer is handled by the status checks below */\n  }\n  if (res.status >= 500) throw new TicketUnavailableError(`${issuer} answered ${res.status}`);\n  if (!res.ok || !body.access_token) {\n    const desc = body.error_description ?? \"\";\n    const code = desc.includes(\":\") ? desc.slice(0, desc.indexOf(\":\")).trim() : body.error ?? \"exchange_refused\";\n    throw new TicketExchangeError(`BID refused the ticket for ${target}: ${desc || body.error || res.status}`, code, res.status);\n  }\n  const nowSec = Math.floor(now() / 1000);\n  const exp = jwtExp(body.access_token) ?? nowSec + (body.expires_in ?? 300);\n  return { token: body.access_token, exp };\n}\n\nexport function createTicketClient(options: TicketClientOptions = {}): TicketClient {\n  const issuer = (options.issuer ?? DEFAULT_ISSUER).replace(/\\/+$/, \"\");\n  const renewBeforeSec = options.renewBeforeSec ?? 30;\n  const env = options.env ?? process.env;\n  const fetchImpl = options.fetchImpl ?? fetch;\n  const now = options.now ?? (() => Date.now());\n  const flyOidc = options.flyOidc ?? flyOidcOverSocket;\n  const onFly = options.onFly ?? (() => !!env.FLY_APP_NAME && existsSync(FLY_SOCKET));\n\n  const cache = new Map<string, { token: string; exp: number }>();\n  const inFlight = new Map<string, Promise<string>>();\n  let dpopKey: Promise<DpopKey> | null = null;\n  const ownKey = () => (dpopKey ??= createDpopKey());\n\n  async function platformToken(): Promise<string> {\n    if (onFly()) return flyOidc(issuer);\n    const url = env.ACTIONS_ID_TOKEN_REQUEST_URL;\n    const bearer = env.ACTIONS_ID_TOKEN_REQUEST_TOKEN;\n    if (url && bearer) {\n      let res: Response;\n      try {\n        res = await fetchImpl(`${url}&audience=${encodeURIComponent(issuer)}`, { headers: { authorization: `Bearer ${bearer}` } });\n      } catch (e) {\n        throw new TicketUnavailableError(`GitHub OIDC endpoint unreachable: ${e instanceof Error ? e.message : String(e)}`);\n      }\n      if (!res.ok) throw new TicketUnavailableError(`GitHub OIDC endpoint answered ${res.status}`);\n      const { value } = (await res.json()) as { value?: string };\n      if (!value) throw new TicketUnavailableError(\"GitHub OIDC endpoint returned no token\");\n      return value;\n    }\n    throw new NoWorkloadIdentityError(\n      \"No workload identity to exchange for a ticket: not on a Fly machine (FLY_APP_NAME + /.fly/api) and not in a GitHub Actions job \" +\n        \"(ACTIONS_ID_TOKEN_REQUEST_URL/_TOKEN — add `permissions: id-token: write`). A Mac session keeps using its session key.\",\n    );\n  }\n\n  async function exchange(audience: string, scope: string | undefined): Promise<{ token: string; exp: number }> {\n    const subject = await platformToken();\n    const form = new URLSearchParams({\n      grant_type: \"urn:ietf:params:oauth:grant-type:token-exchange\",\n      subject_token: subject,\n      subject_token_type: \"urn:ietf:params:oauth:token-type:jwt\",\n      audience,\n    });\n    if (scope) form.set(\"scope\", scope);\n    let res: Response;\n    try {\n      const tokenUrl = `${issuer}/oauth2/token`;\n      const headers: Record<string, string> = { \"content-type\": \"application/x-www-form-urlencoded\" };\n      if (options.dpop) headers.dpop = await createDpopProof(await ownKey(), { method: \"POST\", url: tokenUrl, now });\n      res = await fetchImpl(tokenUrl, { method: \"POST\", headers, body: form });\n    } catch (e) {\n      throw new TicketUnavailableError(`${issuer} unreachable: ${e instanceof Error ? e.message : String(e)}`);\n    }\n    return readTicketResponse(res, issuer, audience, now);\n  }\n\n  const client: TicketClient = {\n    async authHeaders({ audience, scope, method, url }) {\n      const ticket = await client.get({ audience, scope });\n      if (!options.dpop) return { authorization: `Bearer ${ticket}` };\n      return { authorization: `DPoP ${ticket}`, dpop: await createDpopProof(await ownKey(), { method, url, ticket, now }) };\n    },\n    async get({ audience, scope }) {\n      const key = `${audience} ${scope ?? \"\"}`;\n      const hit = cache.get(key);\n      if (hit && hit.exp - renewBeforeSec > now() / 1000) return hit.token;\n      const pending = inFlight.get(key);\n      if (pending) return pending;\n      const p = exchange(audience, scope)\n        .then((t) => {\n          cache.set(key, t);\n          return t.token;\n        })\n        .finally(() => inFlight.delete(key));\n      inFlight.set(key, p);\n      return p;\n    },\n  };\n  return client;\n}\n\nlet shared: TicketClient | null = null;\n/** A ticket from the process-wide client (one cache per process). */\nexport function fetchTicket(opts: { audience: string; scope?: string }): Promise<string> {\n  shared ??= createTicketClient();\n  return shared.get(opts);\n}\n\nexport interface ExchangeUserTokenOptions {\n  issuer?: string;\n  /** The app that holds the user's token — it must be the token's own client (BID refuses otherwise). */\n  clientId: string;\n  /** A confidential app proves itself with its secret (Basic). A public app (an extension) omits it. */\n  clientSecret?: string;\n  /** The user's BID access token. Never logged, never in an error. */\n  subjectToken: string;\n  /** The receiver as a URL (RFC 8707) … */\n  resource?: string;\n  /** … or as BID's short name. One of the two is required. */\n  audience?: string;\n  /** Space-separated; never more than BID's rule for (client, receiver) allows. */\n  scope?: string;\n  /** Bind the ticket to this key (DPoP). The receiver then needs a proof per call. */\n  dpopKey?: DpopKey;\n  fetchImpl?: typeof fetch;\n  now?: () => number;\n}\n\n/**\n * F084.179 — exchange a USER's BID login for a ticket to ONE receiver (BID F087.37).\n *\n * Same ticket format as the machines' (`ver` 1), with `principal_type: \"user\"`,\n * `sub` = the user and `client_id` = this app, so the receiver checks it with\n * createTicketVerifier. Not cached: the ticket is per user, and a cache would\n * have to be keyed on the user's token. When it expires, exchange again.\n *\n * Refusals (4xx) are TicketExchangeError with BID's own code — e.g.\n * `subject_token_inactive` (the login ended: «log ud» means log out),\n * `client_mismatch` (the token belongs to another app), `no_rule_for_audience`.\n */\nexport async function exchangeUserToken(opts: ExchangeUserTokenOptions): Promise<{ token: string; exp: number }> {\n  const issuer = (opts.issuer ?? DEFAULT_ISSUER).replace(/\\/+$/, \"\");\n  const target = opts.resource ?? opts.audience;\n  if (!target) throw new TicketExchangeError(\"exchangeUserToken needs a receiver: resource (its URL) or audience (BID's name for it)\", \"malformed_request\", 0);\n  const fetchImpl = opts.fetchImpl ?? fetch;\n  const now = opts.now ?? (() => Date.now());\n  const form = new URLSearchParams({\n    grant_type: \"urn:ietf:params:oauth:grant-type:token-exchange\",\n    subject_token: opts.subjectToken,\n    subject_token_type: \"urn:ietf:params:oauth:token-type:access_token\",\n  });\n  if (opts.resource) form.set(\"resource\", opts.resource);\n  if (opts.audience) form.set(\"audience\", opts.audience);\n  if (opts.scope) form.set(\"scope\", opts.scope);\n  const tokenUrl = `${issuer}/oauth2/token`;\n  const headers: Record<string, string> = { \"content-type\": \"application/x-www-form-urlencoded\" };\n  if (opts.clientSecret) {\n    // Form-encoded before base64 (RFC 6749 §2.3.1), exactly like introspectToken and\n    // client.embedded — a secret with \":\" or \"%\" must not mean two different things.\n    headers.authorization = `Basic ${btoa(`${encodeURIComponent(opts.clientId)}:${encodeURIComponent(opts.clientSecret)}`)}`;\n  } else {\n    form.set(\"client_id\", opts.clientId);\n  }\n  if (opts.dpopKey) headers.dpop = await createDpopProof(opts.dpopKey, { method: \"POST\", url: tokenUrl, now });\n  let res: Response;\n  try {\n    res = await fetchImpl(tokenUrl, { method: \"POST\", headers, body: form });\n  } catch (e) {\n    throw new TicketUnavailableError(`${issuer} unreachable: ${e instanceof Error ? e.message : String(e)}`);\n  }\n  return readTicketResponse(res, issuer, target, now);\n}\n","/**\n * F084.153 — verify a BrobergID ticket LOCALLY (broberg-id-F087.4).\n *\n * A ticket is how one service or agent proves who it is to another without a\n * shared secret: BrobergID signs a short-lived JWT, the receiver checks it\n * against BID's PUBLIC keys. Nothing secret lives at the receiver.\n *\n * Format: broberg-id docs/features/F087.1-identitetsmodel.md §3 (draft, 8/10).\n *   iss = the issuer · aud = the receiver's URL · scope = space-separated\n *   sub = client_id = the caller · principal_type = human | service | agent\n *   F084.159 — a USER ticket (BID F087.37): an app swapped its user's BID login\n *   for a ticket to one receiver. sub = the USER, client_id/azp = the app,\n *   principal_type = user. The app is mandatory there and never read from sub.\n *   org · act {sub} only on delegation (RFC 8693) · exp/iat/jti\n *\n * This is deliberately NOT a method on createSsoClient: a service that only\n * RECEIVES tickets is not a login client — it has no client_id, no redirect,\n * no session. It needs the issuer, its own audience, and the key set.\n *\n * TWO FAILURES, TWO ANSWERS — keep them apart in the caller:\n *   JwksUnavailableError → we could not ask BID right now. Answer 503 and let\n *                           the caller retry; the ticket may be perfectly valid.\n *   SsoError             → the ticket is not acceptable. Answer 401/403.\n * A known key is served from cache, so a ticket signed with it verifies while\n * BID is briefly unreachable.\n */\nimport { decodeProtectedHeader, jwtVerify, type JWTPayload } from \"jose\";\nimport { ALLOWED_ALGS, SsoError } from \"./client.js\";\nimport { createJwksCache, JwksUnavailableError, type JwksCache } from \"./jwks.js\";\nimport { createMemoryReplayStore, verifyDpopProof, type ReplayStore } from \"./dpop.js\";\n\nexport type PrincipalType = \"human\" | \"service\" | \"agent\" | \"user\";\nconst PRINCIPAL_TYPES: readonly PrincipalType[] = [\"human\", \"service\", \"agent\", \"user\"];\n\n/**\n * F084.156 — one link of an RFC 8693 delegation chain. `act` is the next link\n * outward: agent-b acting for agent-a acting for user-1 reads\n * `{ sub: \"agent-a\", act: { sub: \"user-1\" } }`. `act.sub` alone is the old shape.\n */\nexport interface TicketActor {\n  sub: string;\n  act?: TicketActor;\n}\n\n/** The newest ticket format version this package understands (BID sets `ver`). */\nexport const TICKET_FORMAT_VERSION = 1;\n/** Delegation deeper than this is refused rather than shortened. */\nexport const MAX_ACT_DEPTH = 5;\n\n/** What a verified ticket tells the receiver — a small, typed principal, never the raw payload. */\nexport interface TicketPrincipal {\n  /** Who is calling: the ticket's `sub` — a client id such as `svc-trail`, or on a user ticket the USER's id. */\n  principal: string;\n  type: PrincipalType;\n  /**\n   * The client the ticket was issued to. Machine tickets: `client_id`, falling back to `sub`.\n   * User tickets: `client_id`, falling back to `azp` — never `sub`, which is the user.\n   */\n  clientId: string;\n  /** The organisation, when BID stated one. */\n  org: string | null;\n  /** On delegation: who the caller is acting for (RFC 8693 `act`), the WHOLE chain. */\n  act: TicketActor | null;\n  /** The ticket format version (`ver`); 0 for a ticket issued before BID set one. */\n  version: number;\n  /**\n   * F084.156 — the DPoP key thumbprint when the ticket is sender-constrained.\n   * Since 0.16.0 (F084.157) a ticket with cnf.jkt is only accepted together with\n   * a valid DPoP proof for that key — see `verify(token, { dpop })`.\n   */\n  cnf: { jkt: string } | null;\n  scopes: string[];\n  /** Seconds since the epoch. */\n  exp: number;\n  jti: string;\n}\n\nexport interface TicketVerifierOptions {\n  /** BID's issuer, exactly as it signs `iss` — e.g. `https://id.broberg.ai`. */\n  issuer: string;\n  /** THIS receiver's audience — its own URL, e.g. `https://discovery.broberg.ai`. */\n  audience: string;\n  /** The key set URL. Omitted: read once from the issuer's discovery document. */\n  jwksUri?: string;\n  /**\n   * The longest lifetime (exp − iat) a ticket may claim. BID issues 5 min\n   * (service) and 15 min (agent); anything longer was not minted by the policy\n   * we were told about, so it is refused rather than trusted for longer.\n   */\n  maxLifetimeSec?: number;\n  /** Seconds of clock skew to allow on exp/iat. Default 30. */\n  clockToleranceSec?: number;\n  /** Fetch the key set at construction, so the first caller does not wait. */\n  warmUp?: boolean;\n  fetchImpl?: typeof fetch;\n  minRefetchIntervalMs?: number;\n  /**\n   * F084.157 — refuse UNBOUND tickets (bearer). Off by default during the\n   * rollout. A BOUND ticket (cnf.jkt) needs a valid proof either way.\n   */\n  requireDpop?: boolean;\n  /** Where used proof ids are remembered. Default in-memory — ONE machine only; share one across machines. */\n  replayStore?: ReplayStore;\n  /** How far a proof's iat may be from now. Default 60 s. */\n  dpopIatWindowSec?: number;\n  /** Injectable clock for the DPoP checks (ms). */\n  now?: () => number;\n}\n\n/** The DPoP half of a request: the `DPoP` header, and the method + PUBLIC URL the receiver was called on. */\nexport interface DpopRequest {\n  proof: string | null | undefined;\n  method: string;\n  url: string;\n}\n\nexport interface TicketVerifier {\n  /**\n   * Verify a ticket; with `scope`, also require that scope to be granted. Pass\n   * `dpop` with the request's DPoP header, method and public URL — a bound ticket\n   * is refused without it.\n   */\n  verify(token: string, options?: { scope?: string | string[]; dpop?: DpopRequest }): Promise<TicketPrincipal>;\n}\n\nexport function createTicketVerifier(options: TicketVerifierOptions): TicketVerifier {\n  const {\n    issuer,\n    audience,\n    maxLifetimeSec = 15 * 60,\n    clockToleranceSec = 30,\n    fetchImpl = fetch,\n    requireDpop = false,\n    dpopIatWindowSec = 60,\n    now = () => Date.now(),\n  } = options;\n  const replayStore = options.replayStore ?? createMemoryReplayStore(now);\n  if (!issuer) throw new SsoError(\"createTicketVerifier needs an issuer\");\n  if (!audience) throw new SsoError(\"createTicketVerifier needs this receiver's audience\");\n\n  let cachePromise: Promise<JwksCache> | null = null;\n  const cacheFor = (jwksUri: string) =>\n    createJwksCache({\n      jwksUri,\n      fetchImpl,\n      ...(options.warmUp ? { warmUp: true } : {}),\n      ...(options.minRefetchIntervalMs !== undefined ? { minRefetchIntervalMs: options.minRefetchIntervalMs } : {}),\n    });\n\n  async function keys(): Promise<JwksCache> {\n    cachePromise ??= (async () => {\n      if (options.jwksUri) return cacheFor(options.jwksUri);\n      const url = `${issuer}/.well-known/openid-configuration`;\n      let doc: { issuer?: string; jwks_uri?: string };\n      try {\n        const res = await fetchImpl(url);\n        if (!res.ok) throw new Error(`answered ${res.status}`);\n        doc = (await res.json()) as typeof doc;\n      } catch (cause) {\n        // Reached nothing usable: transient, the same class a key-set outage gets.\n        throw new JwksUnavailableError(`${url}: ${cause instanceof Error ? cause.message : String(cause)}`);\n      }\n      if (doc.issuer !== issuer) {\n        throw new SsoError(`issuer is ${issuer} but ${url} says ${doc.issuer} — they must match exactly`);\n      }\n      if (!doc.jwks_uri) throw new SsoError(`${url} names no jwks_uri`);\n      return cacheFor(doc.jwks_uri);\n    })().catch((err) => {\n      cachePromise = null; // a later call retries instead of caching the failure\n      throw err;\n    });\n    return cachePromise;\n  }\n  if (options.warmUp) void keys().catch(() => {});\n\n  return {\n    async verify(token, opts = {}) {\n      let header;\n      try {\n        header = decodeProtectedHeader(token);\n      } catch {\n        throw new SsoError(\"ticket is not a JWS\");\n      }\n      if (!header.kid) throw new SsoError(\"ticket has no kid — cannot pick a signing key\");\n      if (header.typ === \"logout+jwt\") throw new SsoError(\"a logout token is not a ticket\");\n\n      const cache = await keys();\n      let payload: JWTPayload;\n      try {\n        ({ payload } = await jwtVerify(token, async () => cache.getKey(header.kid!, header.alg ?? \"EdDSA\"), {\n          issuer,\n          audience,\n          algorithms: ALLOWED_ALGS,\n          clockTolerance: clockToleranceSec,\n          requiredClaims: [\"exp\", \"iat\", \"jti\", \"sub\"],\n        }));\n      } catch (e) {\n        // A key-set outage must surface as itself (→ 503), never as \"rejected\".\n        if (e instanceof JwksUnavailableError) throw e;\n        throw new SsoError(`ticket rejected: ${e instanceof Error ? e.message : String(e)}`);\n      }\n\n      // An ID token or a logout token must never pass as a ticket. They carry\n      // no principal_type; a logout token carries events, an ID token a nonce.\n      if (\"events\" in payload) throw new SsoError(\"a logout token is not a ticket\");\n      if (\"nonce\" in payload) throw new SsoError(\"an ID token is not a ticket\");\n\n      const type = payload.principal_type;\n      if (typeof type !== \"string\" || !PRINCIPAL_TYPES.includes(type as PrincipalType)) {\n        throw new SsoError(`ticket has no valid principal_type (got ${JSON.stringify(type)})`);\n      }\n      const lifetime = payload.exp! - payload.iat!;\n      if (lifetime > maxLifetimeSec) {\n        throw new SsoError(`ticket claims a ${lifetime}s lifetime; at most ${maxLifetimeSec}s is accepted`);\n      }\n      if (typeof payload.sub !== \"string\" || payload.sub === \"\") throw new SsoError(\"ticket has no sub\");\n\n      const scopes = typeof payload.scope === \"string\" ? payload.scope.split(\" \").filter(Boolean) : [];\n      const required = opts.scope === undefined ? [] : Array.isArray(opts.scope) ? opts.scope : [opts.scope];\n      const missing = required.filter((s) => !scopes.includes(s));\n      if (missing.length) throw new SsoError(`ticket lacks scope ${missing.join(\", \")}`);\n\n      // F084.156 — ver: unknown future formats are refused by name, never read\n      // with today's rules.\n      const ver = payload.ver === undefined ? 0 : payload.ver;\n      if (typeof ver !== \"number\" || !Number.isInteger(ver) || ver < 0) {\n        throw new SsoError(`ticket has an invalid ver (got ${JSON.stringify(payload.ver)})`);\n      }\n      if (ver > TICKET_FORMAT_VERSION) {\n        throw new SsoError(`ticket format version ${ver} is newer than this @broberg/sso understands (${TICKET_FORMAT_VERSION}) — upgrade @broberg/sso`);\n      }\n      // The whole chain, or a refusal. 0.14.2 kept only act.sub, cutting a chain\n      // to its first link, and read a malformed act as \"no delegation\" — both in\n      // the direction where the caller looks like it acts for fewer people.\n      const act = payload.act === undefined ? null : readActor(payload.act, 1);\n      const cnfRaw = payload.cnf as { jkt?: unknown } | undefined;\n      const cnf = cnfRaw && typeof cnfRaw.jkt === \"string\" && cnfRaw.jkt ? { jkt: cnfRaw.jkt } : null;\n      // F084.157 — a bound ticket needs its proof, always; requireDpop only\n      // decides about unbound ones (and then a cnf it cannot read is refused too).\n      if (cnf) {\n        if (!opts.dpop?.proof) throw new SsoError(\"ticket is DPoP-bound (cnf.jkt) but no DPoP proof was presented\");\n        await verifyDpopProof(opts.dpop.proof, {\n          method: opts.dpop.method,\n          url: opts.dpop.url,\n          ticket: token,\n          jkt: cnf.jkt,\n          replay: replayStore,\n          iatWindowSec: dpopIatWindowSec,\n          now,\n        });\n      } else if (requireDpop) {\n        throw new SsoError(cnfRaw !== undefined ? \"ticket has a cnf without a string jkt — DPoP is required here\" : \"this receiver requires DPoP; the ticket is not bound (no cnf.jkt)\");\n      }\n      // F084.159 — on a user ticket sub is the USER. Falling back to it would turn a\n      // user id into an app id, so a receiver that requires clientId === \"trail-clipper\"\n      // could be satisfied by a user who happens to be called that.\n      const named = (v: unknown) => (typeof v === \"string\" && v ? v : null);\n      const clientId =\n        type === \"user\"\n          ? named(payload.client_id) ?? named(payload.azp)\n          : named(payload.client_id) ?? payload.sub;\n      if (clientId === null) throw new SsoError(\"a user ticket names no app (no client_id or azp)\");\n      return {\n        principal: payload.sub,\n        type: type as PrincipalType,\n        clientId,\n        org: typeof payload.org === \"string\" && payload.org ? payload.org : null,\n        act,\n        version: ver,\n        cnf,\n        scopes,\n        exp: payload.exp!,\n        jti: String(payload.jti),\n      };\n    },\n  };\n}\n\nfunction readActor(raw: unknown, depth: number): TicketActor {\n  if (depth > MAX_ACT_DEPTH) throw new SsoError(`ticket's delegation chain is deeper than ${MAX_ACT_DEPTH}`);\n  const link = raw as { sub?: unknown; act?: unknown } | null;\n  if (!link || typeof link !== \"object\" || typeof link.sub !== \"string\" || link.sub === \"\") {\n    throw new SsoError(`ticket's act (link ${depth}) has no string sub`);\n  }\n  return link.act === undefined ? { sub: link.sub } : { sub: link.sub, act: readActor(link.act, depth + 1) };\n}\n"]}

package/dist/{session-qvhMg3ID.d.cts → session-AgUJ6U_7.d.cts}

@@ -107,9 +107,18 @@ type EmbeddedStart = {
     error: EmbeddedError;
 };
 /** After a code: signed in (the same result as completeLogin), a second factor, or an error. */
+/** F084.179 — BID offers to create a passkey (BID F084.178) when the user has none. */
+interface EmbeddedPasskeySetup {
+    setupId: string;
+    /** Show it in an `<iframe allow="publickey-credentials-create">`. Always on the issuer's own origin. */
+    frameUrl: string;
+    /** Seconds the offer lives. */
+    expiresIn: number;
+}
 type EmbeddedStep = {
     kind: "done";
     result: LoginResult;
+    passkeySetup?: EmbeddedPasskeySetup;
 } | {
     kind: "second_factor";
     methods: ("totp" | "sms")[];
@@ -728,4 +737,4 @@ declare function cookieHeader(name: string, value: string, opts: {
 }): string;
 declare function readCookie(header: string | null | undefined, name: string): string | undefined;
 
-export { sealEmbeddedFlow as $, AVATAR_TYPES as A, type BeginLoginOptions as B, type CreateSsoClientOptions as C, DEFAULT_SESSION_MAX_AGE as D, EMBEDDED_FLOW_MAX_AGE as E, SsoAvatarRejectedError as F, type SsoClaims as G, SsoConfigError as H, type IntrospectOptions as I, type JwksCache as J, SsoError as K, type LoginResult as L, MAX_AVATAR_BYTES as M, SsoInsufficientScopeError as N, SsoIntrospectionUnavailableError as O, SsoReauthError as P, SsoTokenInactiveError as Q, type TokenSet as R, type SsoClient as S, type TokenStore as T, cookieHeader as U, createJwksCache as V, createSsoClient as W, loadSsoConfig as X, memoryTokenStore as Y, openEmbeddedFlow as Z, readCookie as _, type SsoConfig as a, signSession as a0, signValue as a1, verifySession as a2, verifyValue as a3, type SessionPayload as b, type AddressOwnership as c, type BidProfile as d, type Discovery as e, type EmbeddedClient as f, type EmbeddedError as g, type EmbeddedFlow as h, type EmbeddedStart as i, type EmbeddedStartInput as j, type EmbeddedStep as k, type EmbeddedTerms as l, type IntrospectedToken as m, type InvitationOutcome as n, type InvitationResult as o, type InviteUsersInput as p, type JwksCacheOptions as q, JwksError as r, JwksUnavailableError as s, JwksUnknownKeyError as t, type LoginStart as u, type LogoutToken as v, MAX_INVITATIONS as w, type MigrationState as x, type MigrationStatus as y, SsoAppApiError as z };
+export { readCookie as $, AVATAR_TYPES as A, type BeginLoginOptions as B, type CreateSsoClientOptions as C, DEFAULT_SESSION_MAX_AGE as D, EMBEDDED_FLOW_MAX_AGE as E, SsoAppApiError as F, SsoAvatarRejectedError as G, type SsoClaims as H, type IntrospectOptions as I, type JwksCache as J, SsoConfigError as K, type LoginResult as L, MAX_AVATAR_BYTES as M, SsoError as N, SsoInsufficientScopeError as O, SsoIntrospectionUnavailableError as P, SsoReauthError as Q, SsoTokenInactiveError as R, type SsoClient as S, type TokenStore as T, type TokenSet as U, cookieHeader as V, createJwksCache as W, createSsoClient as X, loadSsoConfig as Y, memoryTokenStore as Z, openEmbeddedFlow as _, type SsoConfig as a, sealEmbeddedFlow as a0, signSession as a1, signValue as a2, verifySession as a3, verifyValue as a4, type SessionPayload as b, type AddressOwnership as c, type BidProfile as d, type Discovery as e, type EmbeddedClient as f, type EmbeddedError as g, type EmbeddedFlow as h, type EmbeddedPasskeySetup as i, type EmbeddedStart as j, type EmbeddedStartInput as k, type EmbeddedStep as l, type EmbeddedTerms as m, type IntrospectedToken as n, type InvitationOutcome as o, type InvitationResult as p, type InviteUsersInput as q, type JwksCacheOptions as r, JwksError as s, JwksUnavailableError as t, JwksUnknownKeyError as u, type LoginStart as v, type LogoutToken as w, MAX_INVITATIONS as x, type MigrationState as y, type MigrationStatus as z };

package/dist/{session-qvhMg3ID.d.ts → session-AgUJ6U_7.d.ts}

@@ -107,9 +107,18 @@ type EmbeddedStart = {
     error: EmbeddedError;
 };
 /** After a code: signed in (the same result as completeLogin), a second factor, or an error. */
+/** F084.179 — BID offers to create a passkey (BID F084.178) when the user has none. */
+interface EmbeddedPasskeySetup {
+    setupId: string;
+    /** Show it in an `<iframe allow="publickey-credentials-create">`. Always on the issuer's own origin. */
+    frameUrl: string;
+    /** Seconds the offer lives. */
+    expiresIn: number;
+}
 type EmbeddedStep = {
     kind: "done";
     result: LoginResult;
+    passkeySetup?: EmbeddedPasskeySetup;
 } | {
     kind: "second_factor";
     methods: ("totp" | "sms")[];
@@ -728,4 +737,4 @@ declare function cookieHeader(name: string, value: string, opts: {
 }): string;
 declare function readCookie(header: string | null | undefined, name: string): string | undefined;
 
-export { sealEmbeddedFlow as $, AVATAR_TYPES as A, type BeginLoginOptions as B, type CreateSsoClientOptions as C, DEFAULT_SESSION_MAX_AGE as D, EMBEDDED_FLOW_MAX_AGE as E, SsoAvatarRejectedError as F, type SsoClaims as G, SsoConfigError as H, type IntrospectOptions as I, type JwksCache as J, SsoError as K, type LoginResult as L, MAX_AVATAR_BYTES as M, SsoInsufficientScopeError as N, SsoIntrospectionUnavailableError as O, SsoReauthError as P, SsoTokenInactiveError as Q, type TokenSet as R, type SsoClient as S, type TokenStore as T, cookieHeader as U, createJwksCache as V, createSsoClient as W, loadSsoConfig as X, memoryTokenStore as Y, openEmbeddedFlow as Z, readCookie as _, type SsoConfig as a, signSession as a0, signValue as a1, verifySession as a2, verifyValue as a3, type SessionPayload as b, type AddressOwnership as c, type BidProfile as d, type Discovery as e, type EmbeddedClient as f, type EmbeddedError as g, type EmbeddedFlow as h, type EmbeddedStart as i, type EmbeddedStartInput as j, type EmbeddedStep as k, type EmbeddedTerms as l, type IntrospectedToken as m, type InvitationOutcome as n, type InvitationResult as o, type InviteUsersInput as p, type JwksCacheOptions as q, JwksError as r, JwksUnavailableError as s, JwksUnknownKeyError as t, type LoginStart as u, type LogoutToken as v, MAX_INVITATIONS as w, type MigrationState as x, type MigrationStatus as y, SsoAppApiError as z };
+export { readCookie as $, AVATAR_TYPES as A, type BeginLoginOptions as B, type CreateSsoClientOptions as C, DEFAULT_SESSION_MAX_AGE as D, EMBEDDED_FLOW_MAX_AGE as E, SsoAppApiError as F, SsoAvatarRejectedError as G, type SsoClaims as H, type IntrospectOptions as I, type JwksCache as J, SsoConfigError as K, type LoginResult as L, MAX_AVATAR_BYTES as M, SsoError as N, SsoInsufficientScopeError as O, SsoIntrospectionUnavailableError as P, SsoReauthError as Q, SsoTokenInactiveError as R, type SsoClient as S, type TokenStore as T, type TokenSet as U, cookieHeader as V, createJwksCache as W, createSsoClient as X, loadSsoConfig as Y, memoryTokenStore as Z, openEmbeddedFlow as _, type SsoConfig as a, sealEmbeddedFlow as a0, signSession as a1, signValue as a2, verifySession as a3, verifyValue as a4, type SessionPayload as b, type AddressOwnership as c, type BidProfile as d, type Discovery as e, type EmbeddedClient as f, type EmbeddedError as g, type EmbeddedFlow as h, type EmbeddedPasskeySetup as i, type EmbeddedStart as j, type EmbeddedStartInput as k, type EmbeddedStep as l, type EmbeddedTerms as m, type IntrospectedToken as n, type InvitationOutcome as o, type InvitationResult as p, type InviteUsersInput as q, type JwksCacheOptions as r, JwksError as s, JwksUnavailableError as t, JwksUnknownKeyError as u, type LoginStart as v, type LogoutToken as w, MAX_INVITATIONS as x, type MigrationState as y, type MigrationStatus as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@broberg/sso",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "description": "The thin client for BrobergID — send a user to central login, verify the ID token against JWKS, keep a local session. Public client + PKCE only: no passwords, no passkeys, no client secret can live in an app.",
   "type": "module",
   "license": "MIT",