@camstack/server 1.2.592 → 1.2.594

package/dist/api/trpc/ws-request-census.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * The WebSocket plane of the transport census — hooked PER OPERATION.
  *
@@ -51,13 +50,8 @@
  * {@link UNKNOWN} instead: a call this instrument saw is never dropped for
  * want of a name.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.WsCensusSession = exports.MAX_PENDING_WS_OPERATIONS = exports.WS_PATHLESS_PROCEDURE = void 0;
-exports.parseTrpcWsFrame = parseTrpcWsFrame;
-exports.attachWsCensusSession = attachWsCensusSession;
-exports.identifyWsCensusSession = identifyWsCensusSession;
-const client_ip_js_1 = require("./client-ip.js");
-const http_request_census_js_1 = require("./http-request-census.js");
+import { extractClientIp, extractUserAgent } from './client-ip.js';
+import { BATCH_OVERFLOW_PROCEDURE, MAX_BATCH_PROCEDURES, UNKNOWN, } from './http-request-census.js';
 /** Keepalive frames the tRPC adapter answers before parsing. Not operations. */
 const KEEPALIVE_FRAMES = new Set(['PING', 'PONG']);
 /**
@@ -66,7 +60,7 @@ const KEEPALIVE_FRAMES = new Set(['PING', 'PONG']);
  * tRPC rejects such a frame, but it still ARRIVED, and a census that drops it
  * has a hole in the total the plane comparison rests on.
  */
-exports.WS_PATHLESS_PROCEDURE = '(ws-no-path)';
+export const WS_PATHLESS_PROCEDURE = '(ws-no-path)';
 /**
  * Operations held for a connection whose principal has not resolved yet.
  *
@@ -75,7 +69,7 @@ exports.WS_PATHLESS_PROCEDURE = '(ws-no-path)';
  * without limit. Past it, operations are counted immediately under
  * {@link UNKNOWN} rather than dropped.
  */
-exports.MAX_PENDING_WS_OPERATIONS = 128;
+export const MAX_PENDING_WS_OPERATIONS = 128;
 const NO_OPERATIONS = { calls: [], subscriptions: [], stops: 0 };
 /**
  * Read the operations out of one raw client frame.
@@ -84,7 +78,7 @@ const NO_OPERATIONS = { calls: [], subscriptions: [], stops: 0 };
  * every one of them is a place where the count could be wrong in the direction
  * that exonerates this plane.
  */
-function parseTrpcWsFrame(raw) {
+export function parseTrpcWsFrame(raw) {
     const text = raw.trim();
     if (text.length === 0)
         return NO_OPERATIONS;
@@ -108,7 +102,7 @@ function parseTrpcWsFrame(raw) {
         }
         if (method !== 'query' && method !== 'mutation' && method !== 'subscription')
             continue;
-        if (calls.length + subscriptions.length >= http_request_census_js_1.MAX_BATCH_PROCEDURES) {
+        if (calls.length + subscriptions.length >= MAX_BATCH_PROCEDURES) {
             overflowed = true;
             continue;
         }
@@ -119,7 +113,7 @@ function parseTrpcWsFrame(raw) {
             calls.push(path);
     }
     if (overflowed)
-        calls.push(http_request_census_js_1.BATCH_OVERFLOW_PROCEDURE);
+        calls.push(BATCH_OVERFLOW_PROCEDURE);
     return { calls, subscriptions, stops };
 }
 function parseJsonSafely(text) {
@@ -134,12 +128,12 @@ function parseJsonSafely(text) {
 }
 function readPath(params) {
     if (typeof params !== 'object' || params === null)
-        return exports.WS_PATHLESS_PROCEDURE;
+        return WS_PATHLESS_PROCEDURE;
     const path = Reflect.get(params, 'path');
-    return typeof path === 'string' && path.length > 0 ? path : exports.WS_PATHLESS_PROCEDURE;
+    return typeof path === 'string' && path.length > 0 ? path : WS_PATHLESS_PROCEDURE;
 }
 /** One connection's census state: its identity, and anything held for it. */
-class WsCensusSession {
+export class WsCensusSession {
     census;
     userAgent;
     ip;
@@ -149,8 +143,8 @@ class WsCensusSession {
     closed = false;
     constructor(census, req) {
         this.census = census;
-        this.userAgent = (0, client_ip_js_1.extractUserAgent)(req);
-        this.ip = (0, client_ip_js_1.extractClientIp)(req);
+        this.userAgent = extractUserAgent(req);
+        this.ip = extractClientIp(req);
     }
     /**
      * Count one raw client frame.
@@ -175,9 +169,9 @@ class WsCensusSession {
             this.flushFrame(operations, this.principal);
             return;
         }
-        if (this.pending.length >= exports.MAX_PENDING_WS_OPERATIONS) {
+        if (this.pending.length >= MAX_PENDING_WS_OPERATIONS) {
             // Never dropped — attributed to the named bucket instead.
-            this.flushFrame(operations, http_request_census_js_1.UNKNOWN);
+            this.flushFrame(operations, UNKNOWN);
             return;
         }
         this.pending.push(operations);
@@ -194,7 +188,7 @@ class WsCensusSession {
         if (this.closed)
             return;
         this.closed = true;
-        this.drain(this.principal ?? http_request_census_js_1.UNKNOWN);
+        this.drain(this.principal ?? UNKNOWN);
     }
     drain(principal) {
         if (this.pending.length === 0)
@@ -227,7 +221,6 @@ class WsCensusSession {
         }
     }
 }
-exports.WsCensusSession = WsCensusSession;
 /**
  * Sessions by socket.
  *
@@ -243,7 +236,7 @@ const sessions = new WeakMap();
  * Registered from `main.ts` on the same `wss` `applyWSSHandler` is given. Both
  * listeners see every frame; ours only counts.
  */
-function attachWsCensusSession(census, client, req, logger) {
+export function attachWsCensusSession(census, client, req, logger) {
     census.observeWsConnection();
     const session = new WsCensusSession(census, req);
     sessions.set(client, session);
@@ -280,7 +273,7 @@ function attachWsCensusSession(census, client, req, logger) {
  * harness or a future adapter that builds a context without a census session
  * does not have to know this exists.
  */
-function identifyWsCensusSession(client, principal) {
+export function identifyWsCensusSession(client, principal) {
     sessions.get(client)?.identify(principal);
 }
 /** Decode a `ws` frame payload to text. Returns `null` for a shape that cannot

package/dist/api/trpc/ws-slow-consumer-guard.js

@@ -1,18 +1,14 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.WsSlowConsumerGuard = exports.WS_SLOW_CONSUMER_POLL_MS = exports.WS_SLOW_CONSUMER_GRACE_MS = exports.WS_SLOW_CONSUMER_MAX_BUFFERED_BYTES = void 0;
-exports.wsConnectionFacts = wsConnectionFacts;
-const client_ip_js_1 = require("./client-ip.js");
+import { extractClientIp, extractUserAgent } from './client-ip.js';
 /** Queued bytes above which a client is a slow consumer. */
-exports.WS_SLOW_CONSUMER_MAX_BUFFERED_BYTES = 16 * 1024 * 1024;
+export const WS_SLOW_CONSUMER_MAX_BUFFERED_BYTES = 16 * 1024 * 1024;
 /** How long the queue may stay above the bound before the socket is terminated. */
-exports.WS_SLOW_CONSUMER_GRACE_MS = 30_000;
+export const WS_SLOW_CONSUMER_GRACE_MS = 30_000;
 /** How often every connection's queue is read. A getter per socket; free. */
-exports.WS_SLOW_CONSUMER_POLL_MS = 5_000;
+export const WS_SLOW_CONSUMER_POLL_MS = 5_000;
 /** WebSocket close code for a socket that was never closed cleanly. */
 const ABNORMAL_CLOSURE = 1006;
 const UNIDENTIFIED = '(unidentified)';
-class WsSlowConsumerGuard {
+export class WsSlowConsumerGuard {
     connections = new Set();
     bySocket = new WeakMap();
     logger;
@@ -23,9 +19,9 @@ class WsSlowConsumerGuard {
     timer = null;
     constructor(options) {
         this.logger = options.logger;
-        this.maxBufferedBytes = options.maxBufferedBytes ?? exports.WS_SLOW_CONSUMER_MAX_BUFFERED_BYTES;
-        this.graceMs = options.graceMs ?? exports.WS_SLOW_CONSUMER_GRACE_MS;
-        this.pollMs = options.pollMs ?? exports.WS_SLOW_CONSUMER_POLL_MS;
+        this.maxBufferedBytes = options.maxBufferedBytes ?? WS_SLOW_CONSUMER_MAX_BUFFERED_BYTES;
+        this.graceMs = options.graceMs ?? WS_SLOW_CONSUMER_GRACE_MS;
+        this.pollMs = options.pollMs ?? WS_SLOW_CONSUMER_POLL_MS;
         this.now = options.now ?? (() => Date.now());
     }
     /** Watch one connection until it closes. */
@@ -142,7 +138,6 @@ class WsSlowConsumerGuard {
         };
     }
 }
-exports.WsSlowConsumerGuard = WsSlowConsumerGuard;
 function safeCount(read) {
     try {
         return read();
@@ -156,10 +151,10 @@ function errorMessage(err) {
     return err instanceof Error ? err.message : String(err);
 }
 /** The facts a real `ws` upgrade request provides. */
-function wsConnectionFacts(req) {
+export function wsConnectionFacts(req) {
     return {
-        ip: (0, client_ip_js_1.extractClientIp)(req),
-        userAgent: (0, client_ip_js_1.extractUserAgent)(req),
+        ip: extractClientIp(req),
+        userAgent: extractUserAgent(req),
         bytesRead: () => req.socket.bytesRead,
         bytesWritten: () => req.socket.bytesWritten,
     };

package/dist/api/upload-auth.js

@@ -1,9 +1,5 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.UPLOAD_TRPC_PATH = void 0;
-exports.authorizeUploadRequest = authorizeUploadRequest;
-const scope_access_js_1 = require("./trpc/scope-access.js");
-exports.UPLOAD_TRPC_PATH = 'addons.installPackage';
+import { checkScopeAccess } from './trpc/scope-access.js';
+export const UPLOAD_TRPC_PATH = 'addons.installPackage';
 /**
  * Validate a `cst_*` scoped token via the `user-management` cap singleton.
  * Returns null when the singleton isn't mounted yet (boot race) or the
@@ -20,7 +16,7 @@ async function validateScopedTokenViaCap(addonRegistry, token) {
     return userMgmt.validateScopedToken({ token });
 }
 function isUploadAllowed(scoped) {
-    return (0, scope_access_js_1.checkScopeAccess)(scoped.scopes, exports.UPLOAD_TRPC_PATH).ok;
+    return checkScopeAccess(scoped.scopes, UPLOAD_TRPC_PATH).ok;
 }
 /**
  * Run the full upload auth chain. Returns `{ok: true}` on success, or the
@@ -28,7 +24,7 @@ function isUploadAllowed(scoped) {
  *   - 401 `Unauthorized` when no Authorization header is present,
  *   - 403 `Forbidden: <reason>` for any recognised-but-insufficient token.
  */
-async function authorizeUploadRequest(args) {
+export async function authorizeUploadRequest(args) {
     const { authHeader, authService, addonRegistry } = args;
     if (!authHeader) {
         return { ok: false, status: 401, error: 'Unauthorized' };
@@ -55,7 +51,7 @@ async function authorizeUploadRequest(args) {
             return { ok: true };
         }
         else {
-            authReason = `scoped token lacks create access on '${exports.UPLOAD_TRPC_PATH}'`;
+            authReason = `scoped token lacks create access on '${UPLOAD_TRPC_PATH}'`;
         }
     }
     catch (err) {

package/dist/auth/addon-route-jwt-gate.js

@@ -1,6 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.gateAddonJwt = gateAddonJwt;
 /**
  * The JWT half of the `/addon/:addonId/*` gate — shared by the HTTP data-plane
  * branch and the addon-route branch so there is exactly ONE answer to "may this
@@ -14,7 +11,7 @@ exports.gateAddonJwt = gateAddonJwt;
  * the per-camera switches and notification snooze. A 60-second authorization
  * CODE and a 30-day refresh token passed the same way. See D103.
  */
-const types_1 = require("@camstack/types");
+import { classifyBearerPrincipal, principalMayReachAddon, } from '@camstack/types';
 function readScopes(raw) {
     return Array.isArray(raw) ? raw : [];
 }
@@ -27,8 +24,8 @@ function readScopes(raw) {
  * an admin-only route keeps the response it already had; nothing that is not a
  * session or an `oauth-access` token gets that far at all.
  */
-function gateAddonJwt(input, logger) {
-    const principal = (0, types_1.classifyBearerPrincipal)(input.payload);
+export function gateAddonJwt(input, logger) {
+    const principal = classifyBearerPrincipal(input.payload);
     const isAdmin = input.payload.isAdmin === true;
     if (principal.kind === 'not-a-credential') {
         logger.warn('addon route: refused a bearer that is not an API credential', {
@@ -42,7 +39,7 @@ function gateAddonJwt(input, logger) {
         });
         return { ok: false, status: 403, error: 'Admin required' };
     }
-    const verdict = (0, types_1.principalMayReachAddon)({
+    const verdict = principalMayReachAddon({
         principal,
         scopes: readScopes(input.payload.scopes),
         isAdmin,

package/dist/auth/addon-route-share-gate.js

@@ -1,11 +1,6 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SHARE_DEVICES_HEADER = exports.SHARE_KIND_HEADER = void 0;
-exports.gateAddonShareToken = gateAddonShareToken;
-exports.stripShareHeaders = stripShareHeaders;
-exports.SHARE_KIND_HEADER = 'x-camstack-share-kind';
-exports.SHARE_DEVICES_HEADER = 'x-camstack-share-devices';
-function gateAddonShareToken(input) {
+export const SHARE_KIND_HEADER = 'x-camstack-share-kind';
+export const SHARE_DEVICES_HEADER = 'x-camstack-share-devices';
+export function gateAddonShareToken(input) {
     if (input.record === null)
         return { ok: false, status: 401, error: 'Invalid token' };
     const kind = input.record.scope.kind;
@@ -15,17 +10,17 @@ function gateAddonShareToken(input) {
     return {
         ok: true,
         headers: {
-            [exports.SHARE_KIND_HEADER]: kind,
-            [exports.SHARE_DEVICES_HEADER]: input.record.scope.deviceIds.join(','),
+            [SHARE_KIND_HEADER]: kind,
+            [SHARE_DEVICES_HEADER]: input.record.scope.deviceIds.join(','),
         },
     };
 }
 /** The forwarded header set without any share header the client supplied. */
-function stripShareHeaders(headers) {
+export function stripShareHeaders(headers) {
     const out = {};
     for (const [key, value] of Object.entries(headers)) {
         const lower = key.toLowerCase();
-        if (lower === exports.SHARE_KIND_HEADER || lower === exports.SHARE_DEVICES_HEADER)
+        if (lower === SHARE_KIND_HEADER || lower === SHARE_DEVICES_HEADER)
             continue;
         out[key] = value;
     }

package/dist/auth/app-confirm-page.js

@@ -1,8 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.APP_CONFIRM_REFUSAL_CSP = exports.APP_CONFIRM_CSP = void 0;
-exports.appConfirmPage = appConfirmPage;
-exports.appConfirmRefusalPage = appConfirmRefusalPage;
 /**
  * The hub-rendered confirmation page of a native app sign-in (D858):
  * "Sign in the CamStack app as <username>?".
@@ -16,8 +11,8 @@ exports.appConfirmRefusalPage = appConfirmRefusalPage;
  * `location` the hub answers; Cancel is a plain link to the app with
  * `error=cancelled`.
  */
-const app_page_shell_js_1 = require("./app-page-shell.js");
-const app_page_strings_js_1 = require("./app-page-strings.js");
+import { appButton, appCancelLink, appErrorLine, appHint, appPageCsp, appParagraph, escapeHtml, renderAppPage, } from './app-page-shell.js';
+import { appStrings } from './app-page-strings.js';
 const PAGE_SCRIPT = `(function () {
   var btn = document.getElementById('go');
   var msg = document.getElementById('msg');
@@ -43,13 +38,13 @@ const PAGE_SCRIPT = `(function () {
   });
 })();`;
 /** The CSP: the shell's style and this page's one script by hash, same-origin requests, no framing, no form posts. */
-exports.APP_CONFIRM_CSP = (0, app_page_shell_js_1.appPageCsp)({ script: PAGE_SCRIPT });
+export const APP_CONFIRM_CSP = appPageCsp({ script: PAGE_SCRIPT });
 /** CSP of the refusal page: the shell's style only, nothing runs. */
-exports.APP_CONFIRM_REFUSAL_CSP = (0, app_page_shell_js_1.appPageCsp)();
+export const APP_CONFIRM_REFUSAL_CSP = appPageCsp();
 /** The confirmation page for `username`; `cancelHref` is the app callback carrying `error=cancelled`. */
-function appConfirmPage(input) {
-    const t = (0, app_page_strings_js_1.appStrings)(input.lang);
-    return (0, app_page_shell_js_1.renderAppPage)({
+export function appConfirmPage(input) {
+    const t = appStrings(input.lang);
+    return renderAppPage({
         lang: input.lang,
         title: t.confirm.title,
         heading: t.confirm.heading,
@@ -57,22 +52,22 @@ function appConfirmPage(input) {
         script: PAGE_SCRIPT,
         scriptStrings: { 'confirm-expired': t.script.confirmExpired },
         body: [
-            `<p>${(0, app_page_shell_js_1.escapeHtml)(t.confirm.signedInAsBefore)}<strong>${(0, app_page_shell_js_1.escapeHtml)(input.username)}</strong>${(0, app_page_shell_js_1.escapeHtml)(t.confirm.signedInAsAfter)}</p>`,
-            (0, app_page_shell_js_1.appHint)(t.confirm.hint),
-            (0, app_page_shell_js_1.appButton)(t.confirm.continueLabel, `id="go" data-confirm="${(0, app_page_shell_js_1.escapeHtml)(input.token)}"`),
-            (0, app_page_shell_js_1.appErrorLine)('msg'),
-            (0, app_page_shell_js_1.appCancelLink)(input.cancelHref, t.confirm.cancel),
-            `<noscript><p class="error">${(0, app_page_shell_js_1.escapeHtml)(t.confirm.noscript)}</p></noscript>`,
+            `<p>${escapeHtml(t.confirm.signedInAsBefore)}<strong>${escapeHtml(input.username)}</strong>${escapeHtml(t.confirm.signedInAsAfter)}</p>`,
+            appHint(t.confirm.hint),
+            appButton(t.confirm.continueLabel, `id="go" data-confirm="${escapeHtml(input.token)}"`),
+            appErrorLine('msg'),
+            appCancelLink(input.cancelHref, t.confirm.cancel),
+            `<noscript><p class="error">${escapeHtml(t.confirm.noscript)}</p></noscript>`,
         ].join(''),
     });
 }
 /** A confirmation that is gone (expired, used, or opened in another browser): a sentence, nothing runs. */
-function appConfirmRefusalPage(lang) {
-    const t = (0, app_page_strings_js_1.appStrings)(lang).confirmExpired;
-    return (0, app_page_shell_js_1.renderAppPage)({
+export function appConfirmRefusalPage(lang) {
+    const t = appStrings(lang).confirmExpired;
+    return renderAppPage({
         lang,
         title: t.title,
         heading: t.title,
-        body: (0, app_page_shell_js_1.appParagraph)(t.body) + (0, app_page_shell_js_1.appHint)(t.hint),
+        body: appParagraph(t.body) + appHint(t.hint),
     });
 }

package/dist/auth/app-confirm-routes.js

@@ -1,8 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.APP_CONFIRM_PARAM = exports.APP_CONFIRM_PATH = void 0;
-exports.appConfirmCookie = appConfirmCookie;
-exports.registerAppConfirmRoutes = registerAppConfirmRoutes;
 /**
  * `/auth/app/confirm` - the last step of a native app sign-in (D858).
  *
@@ -13,20 +8,20 @@ exports.registerAppConfirmRoutes = registerAppConfirmRoutes;
  * the handoff code and answers `{ location }` at the app's scheme. Nothing is
  * minted without the POST, and the token is useless in any other browser.
  */
-const types_1 = require("@camstack/types");
-const zod_1 = require("zod");
-const app_confirmations_js_1 = require("./app-confirmations.js");
-const app_confirm_page_js_1 = require("./app-confirm-page.js");
-const app_page_strings_js_1 = require("./app-page-strings.js");
-const auth_rate_limit_js_1 = require("./auth-rate-limit.js");
-const sso_finish_deps_js_1 = require("./sso-finish-deps.js");
-exports.APP_CONFIRM_PATH = '/auth/app/confirm';
+import { appFlowLocation } from '@camstack/types';
+import { z } from 'zod';
+import { APP_CONFIRM_COOKIE, } from './app-confirmations.js';
+import { APP_CONFIRM_CSP, APP_CONFIRM_REFUSAL_CSP, appConfirmPage, appConfirmRefusalPage, } from './app-confirm-page.js';
+import { resolveAppPageLang } from './app-page-strings.js';
+import { clientKeyFromRequest } from './auth-rate-limit.js';
+import { readCookie } from './sso-finish-deps.js';
+export const APP_CONFIRM_PATH = '/auth/app/confirm';
 /** The query parameter carrying the token (masked in logged URLs). */
-exports.APP_CONFIRM_PARAM = 'confirm';
+export const APP_CONFIRM_PARAM = 'confirm';
 /** `Set-Cookie` for the browser binding: HttpOnly, Lax (the entry may come from a cross-site redirect chain). */
-function appConfirmCookie(value, secure) {
+export function appConfirmCookie(value, secure) {
     return [
-        `${app_confirmations_js_1.APP_CONFIRM_COOKIE}=${value}`,
+        `${APP_CONFIRM_COOKIE}=${value}`,
         'Path=/',
         'HttpOnly',
         'SameSite=Lax',
@@ -34,7 +29,7 @@ function appConfirmCookie(value, secure) {
         ...(secure ? ['Secure'] : []),
     ].join('; ');
 }
-const ConfirmBodySchema = zod_1.z.object({ confirm: zod_1.z.string().min(1).max(256) });
+const ConfirmBodySchema = z.object({ confirm: z.string().min(1).max(256) });
 function noStore(reply) {
     reply.header('Cache-Control', 'no-store');
     reply.header('Referrer-Policy', 'no-referrer');
@@ -48,11 +43,11 @@ function mint(deps, confirmation) {
         state: app.state,
         authMethod: confirmation.authMethod,
     });
-    return (0, types_1.appFlowLocation)(app.redirect, { code: minted.code }, app.state);
+    return appFlowLocation(app.redirect, { code: minted.code }, app.state);
 }
-function registerAppConfirmRoutes(fastify, deps) {
+export function registerAppConfirmRoutes(fastify, deps) {
     const limited = (request, reply) => {
-        const client = (0, auth_rate_limit_js_1.clientKeyFromRequest)(request, deps.network);
+        const client = clientKeyFromRequest(request, deps.network);
         if (client === null)
             return false;
         const verdict = deps.limiter.check(`app-confirm:${client}`);
@@ -62,43 +57,43 @@ function registerAppConfirmRoutes(fastify, deps) {
         void reply.status(429).send({ error: 'Too many attempts' });
         return true;
     };
-    fastify.get(exports.APP_CONFIRM_PATH, async (request, reply) => {
+    fastify.get(APP_CONFIRM_PATH, async (request, reply) => {
         noStore(reply);
         reply.type('text/html; charset=utf-8');
         if (limited(request, reply))
             return reply;
-        const token = request.query[exports.APP_CONFIRM_PARAM];
+        const token = request.query[APP_CONFIRM_PARAM];
         const confirmation = token === undefined
             ? null
-            : deps.confirmations.peek(token, (0, sso_finish_deps_js_1.readCookie)(request.headers.cookie, app_confirmations_js_1.APP_CONFIRM_COOKIE));
+            : deps.confirmations.peek(token, readCookie(request.headers.cookie, APP_CONFIRM_COOKIE));
         if (token === undefined || confirmation === null) {
             deps.logger.warn('App sign-in confirmation page refused', {
                 meta: { reason: 'unknown-expired-or-other-browser' },
             });
-            reply.header('Content-Security-Policy', app_confirm_page_js_1.APP_CONFIRM_REFUSAL_CSP);
+            reply.header('Content-Security-Policy', APP_CONFIRM_REFUSAL_CSP);
             return reply
                 .status(400)
-                .send((0, app_confirm_page_js_1.appConfirmRefusalPage)((0, app_page_strings_js_1.resolveAppPageLang)({ acceptLanguage: request.headers['accept-language'] })));
+                .send(appConfirmRefusalPage(resolveAppPageLang({ acceptLanguage: request.headers['accept-language'] })));
         }
-        reply.header('Content-Security-Policy', app_confirm_page_js_1.APP_CONFIRM_CSP);
-        return reply.send((0, app_confirm_page_js_1.appConfirmPage)({
-            lang: (0, app_page_strings_js_1.resolveAppPageLang)({
+        reply.header('Content-Security-Policy', APP_CONFIRM_CSP);
+        return reply.send(appConfirmPage({
+            lang: resolveAppPageLang({
                 lang: confirmation.app.lang,
                 acceptLanguage: request.headers['accept-language'],
             }),
             username: confirmation.username,
             token,
-            cancelHref: (0, types_1.appFlowLocation)(confirmation.app.redirect, { error: 'cancelled' }, confirmation.app.state),
+            cancelHref: appFlowLocation(confirmation.app.redirect, { error: 'cancelled' }, confirmation.app.state),
         }));
     });
-    fastify.post(exports.APP_CONFIRM_PATH, async (request, reply) => {
+    fastify.post(APP_CONFIRM_PATH, async (request, reply) => {
         noStore(reply);
         if (limited(request, reply))
             return reply;
         const body = ConfirmBodySchema.safeParse(request.body);
         if (!body.success)
             return reply.status(400).send({ error: 'Malformed confirmation.' });
-        const confirmation = deps.confirmations.consume(body.data.confirm, (0, sso_finish_deps_js_1.readCookie)(request.headers.cookie, app_confirmations_js_1.APP_CONFIRM_COOKIE));
+        const confirmation = deps.confirmations.consume(body.data.confirm, readCookie(request.headers.cookie, APP_CONFIRM_COOKIE));
         if (confirmation === null) {
             deps.logger.warn('App sign-in confirmation refused', {
                 meta: { reason: 'unknown-used-expired-or-other-browser' },

package/dist/auth/app-confirmations.js

@@ -1,40 +1,4 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AppConfirmations = exports.APP_CONFIRM_COOKIE = exports.APP_CONFIRM_TTL_MS = void 0;
-const types_1 = require("@camstack/types");
+import { userError } from '@camstack/types';
 /**
  * Pending "Sign in the CamStack app as <user>?" confirmations (D858).
  *
@@ -52,18 +16,18 @@ const types_1 = require("@camstack/types");
  *
  * In-memory only: a hub restart simply means the person signs in again.
  */
-const crypto = __importStar(require("node:crypto"));
-exports.APP_CONFIRM_TTL_MS = 120_000;
+import * as crypto from 'node:crypto';
+export const APP_CONFIRM_TTL_MS = 120_000;
 const MAX_PENDING = 500;
 /** The cookie that binds a confirmation to the browser that finished the ceremony. */
-exports.APP_CONFIRM_COOKIE = 'camstack_app_confirm';
+export const APP_CONFIRM_COOKIE = 'camstack_app_confirm';
 const sha256 = (value) => crypto.createHash('sha256').update(value).digest('hex');
 function sameDigest(a, b) {
     const left = Buffer.from(a, 'utf8');
     const right = Buffer.from(b, 'utf8');
     return left.length === right.length && crypto.timingSafeEqual(left, right);
 }
-class AppConfirmations {
+export class AppConfirmations {
     now;
     /** Keyed by SHA-256(token). */
     pending = new Map();
@@ -74,13 +38,13 @@ class AppConfirmations {
     create(confirmation) {
         this.prune();
         if (this.pending.size >= MAX_PENDING)
-            throw (0, types_1.userError)('server.app-confirmations-busy', undefined, 'Too many pending app confirmations');
+            throw userError('server.app-confirmations-busy', undefined, 'Too many pending app confirmations');
         const token = crypto.randomBytes(32).toString('base64url');
         const cookie = crypto.randomBytes(32).toString('base64url');
         this.pending.set(sha256(token), {
             ...confirmation,
             cookieHash: sha256(cookie),
-            expiresAt: this.now() + exports.APP_CONFIRM_TTL_MS,
+            expiresAt: this.now() + APP_CONFIRM_TTL_MS,
         });
         return { token, cookie };
     }
@@ -126,4 +90,3 @@ class AppConfirmations {
                 this.pending.delete(key);
     }
 }
-exports.AppConfirmations = AppConfirmations;