@camstack/server 1.2.594 → 1.2.595

package/dist/api/trpc/ws-request-census.js

@@ -1,3 +1,4 @@
+"use strict";
 /**
  * The WebSocket plane of the transport census — hooked PER OPERATION.
  *
@@ -50,8 +51,13 @@
  * {@link UNKNOWN} instead: a call this instrument saw is never dropped for
  * want of a name.
  */
-import { extractClientIp, extractUserAgent } from './client-ip.js';
-import { BATCH_OVERFLOW_PROCEDURE, MAX_BATCH_PROCEDURES, UNKNOWN, } from './http-request-census.js';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WsCensusSession = exports.MAX_PENDING_WS_OPERATIONS = exports.WS_PATHLESS_PROCEDURE = void 0;
+exports.parseTrpcWsFrame = parseTrpcWsFrame;
+exports.attachWsCensusSession = attachWsCensusSession;
+exports.identifyWsCensusSession = identifyWsCensusSession;
+const client_ip_js_1 = require("./client-ip.js");
+const http_request_census_js_1 = require("./http-request-census.js");
 /** Keepalive frames the tRPC adapter answers before parsing. Not operations. */
 const KEEPALIVE_FRAMES = new Set(['PING', 'PONG']);
 /**
@@ -60,7 +66,7 @@ const KEEPALIVE_FRAMES = new Set(['PING', 'PONG']);
  * tRPC rejects such a frame, but it still ARRIVED, and a census that drops it
  * has a hole in the total the plane comparison rests on.
  */
-export const WS_PATHLESS_PROCEDURE = '(ws-no-path)';
+exports.WS_PATHLESS_PROCEDURE = '(ws-no-path)';
 /**
  * Operations held for a connection whose principal has not resolved yet.
  *
@@ -69,7 +75,7 @@ export const WS_PATHLESS_PROCEDURE = '(ws-no-path)';
  * without limit. Past it, operations are counted immediately under
  * {@link UNKNOWN} rather than dropped.
  */
-export const MAX_PENDING_WS_OPERATIONS = 128;
+exports.MAX_PENDING_WS_OPERATIONS = 128;
 const NO_OPERATIONS = { calls: [], subscriptions: [], stops: 0 };
 /**
  * Read the operations out of one raw client frame.
@@ -78,7 +84,7 @@ const NO_OPERATIONS = { calls: [], subscriptions: [], stops: 0 };
  * every one of them is a place where the count could be wrong in the direction
  * that exonerates this plane.
  */
-export function parseTrpcWsFrame(raw) {
+function parseTrpcWsFrame(raw) {
     const text = raw.trim();
     if (text.length === 0)
         return NO_OPERATIONS;
@@ -102,7 +108,7 @@ export function parseTrpcWsFrame(raw) {
         }
         if (method !== 'query' && method !== 'mutation' && method !== 'subscription')
             continue;
-        if (calls.length + subscriptions.length >= MAX_BATCH_PROCEDURES) {
+        if (calls.length + subscriptions.length >= http_request_census_js_1.MAX_BATCH_PROCEDURES) {
             overflowed = true;
             continue;
         }
@@ -113,7 +119,7 @@ export function parseTrpcWsFrame(raw) {
             calls.push(path);
     }
     if (overflowed)
-        calls.push(BATCH_OVERFLOW_PROCEDURE);
+        calls.push(http_request_census_js_1.BATCH_OVERFLOW_PROCEDURE);
     return { calls, subscriptions, stops };
 }
 function parseJsonSafely(text) {
@@ -128,12 +134,12 @@ function parseJsonSafely(text) {
 }
 function readPath(params) {
     if (typeof params !== 'object' || params === null)
-        return WS_PATHLESS_PROCEDURE;
+        return exports.WS_PATHLESS_PROCEDURE;
     const path = Reflect.get(params, 'path');
-    return typeof path === 'string' && path.length > 0 ? path : WS_PATHLESS_PROCEDURE;
+    return typeof path === 'string' && path.length > 0 ? path : exports.WS_PATHLESS_PROCEDURE;
 }
 /** One connection's census state: its identity, and anything held for it. */
-export class WsCensusSession {
+class WsCensusSession {
     census;
     userAgent;
     ip;
@@ -143,8 +149,8 @@ export class WsCensusSession {
     closed = false;
     constructor(census, req) {
         this.census = census;
-        this.userAgent = extractUserAgent(req);
-        this.ip = extractClientIp(req);
+        this.userAgent = (0, client_ip_js_1.extractUserAgent)(req);
+        this.ip = (0, client_ip_js_1.extractClientIp)(req);
     }
     /**
      * Count one raw client frame.
@@ -169,9 +175,9 @@ export class WsCensusSession {
             this.flushFrame(operations, this.principal);
             return;
         }
-        if (this.pending.length >= MAX_PENDING_WS_OPERATIONS) {
+        if (this.pending.length >= exports.MAX_PENDING_WS_OPERATIONS) {
             // Never dropped — attributed to the named bucket instead.
-            this.flushFrame(operations, UNKNOWN);
+            this.flushFrame(operations, http_request_census_js_1.UNKNOWN);
             return;
         }
         this.pending.push(operations);
@@ -188,7 +194,7 @@ export class WsCensusSession {
         if (this.closed)
             return;
         this.closed = true;
-        this.drain(this.principal ?? UNKNOWN);
+        this.drain(this.principal ?? http_request_census_js_1.UNKNOWN);
     }
     drain(principal) {
         if (this.pending.length === 0)
@@ -221,6 +227,7 @@ export class WsCensusSession {
         }
     }
 }
+exports.WsCensusSession = WsCensusSession;
 /**
  * Sessions by socket.
  *
@@ -236,7 +243,7 @@ const sessions = new WeakMap();
  * Registered from `main.ts` on the same `wss` `applyWSSHandler` is given. Both
  * listeners see every frame; ours only counts.
  */
-export function attachWsCensusSession(census, client, req, logger) {
+function attachWsCensusSession(census, client, req, logger) {
     census.observeWsConnection();
     const session = new WsCensusSession(census, req);
     sessions.set(client, session);
@@ -273,7 +280,7 @@ export function attachWsCensusSession(census, client, req, logger) {
  * harness or a future adapter that builds a context without a census session
  * does not have to know this exists.
  */
-export function identifyWsCensusSession(client, principal) {
+function identifyWsCensusSession(client, principal) {
     sessions.get(client)?.identify(principal);
 }
 /** Decode a `ws` frame payload to text. Returns `null` for a shape that cannot

package/dist/api/trpc/ws-slow-consumer-guard.js

@@ -1,14 +1,18 @@
-import { extractClientIp, extractUserAgent } from './client-ip.js';
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WsSlowConsumerGuard = exports.WS_SLOW_CONSUMER_POLL_MS = exports.WS_SLOW_CONSUMER_GRACE_MS = exports.WS_SLOW_CONSUMER_MAX_BUFFERED_BYTES = void 0;
+exports.wsConnectionFacts = wsConnectionFacts;
+const client_ip_js_1 = require("./client-ip.js");
 /** Queued bytes above which a client is a slow consumer. */
-export const WS_SLOW_CONSUMER_MAX_BUFFERED_BYTES = 16 * 1024 * 1024;
+exports.WS_SLOW_CONSUMER_MAX_BUFFERED_BYTES = 16 * 1024 * 1024;
 /** How long the queue may stay above the bound before the socket is terminated. */
-export const WS_SLOW_CONSUMER_GRACE_MS = 30_000;
+exports.WS_SLOW_CONSUMER_GRACE_MS = 30_000;
 /** How often every connection's queue is read. A getter per socket; free. */
-export const WS_SLOW_CONSUMER_POLL_MS = 5_000;
+exports.WS_SLOW_CONSUMER_POLL_MS = 5_000;
 /** WebSocket close code for a socket that was never closed cleanly. */
 const ABNORMAL_CLOSURE = 1006;
 const UNIDENTIFIED = '(unidentified)';
-export class WsSlowConsumerGuard {
+class WsSlowConsumerGuard {
     connections = new Set();
     bySocket = new WeakMap();
     logger;
@@ -19,9 +23,9 @@ export class WsSlowConsumerGuard {
     timer = null;
     constructor(options) {
         this.logger = options.logger;
-        this.maxBufferedBytes = options.maxBufferedBytes ?? WS_SLOW_CONSUMER_MAX_BUFFERED_BYTES;
-        this.graceMs = options.graceMs ?? WS_SLOW_CONSUMER_GRACE_MS;
-        this.pollMs = options.pollMs ?? WS_SLOW_CONSUMER_POLL_MS;
+        this.maxBufferedBytes = options.maxBufferedBytes ?? exports.WS_SLOW_CONSUMER_MAX_BUFFERED_BYTES;
+        this.graceMs = options.graceMs ?? exports.WS_SLOW_CONSUMER_GRACE_MS;
+        this.pollMs = options.pollMs ?? exports.WS_SLOW_CONSUMER_POLL_MS;
         this.now = options.now ?? (() => Date.now());
     }
     /** Watch one connection until it closes. */
@@ -138,6 +142,7 @@ export class WsSlowConsumerGuard {
         };
     }
 }
+exports.WsSlowConsumerGuard = WsSlowConsumerGuard;
 function safeCount(read) {
     try {
         return read();
@@ -151,10 +156,10 @@ function errorMessage(err) {
     return err instanceof Error ? err.message : String(err);
 }
 /** The facts a real `ws` upgrade request provides. */
-export function wsConnectionFacts(req) {
+function wsConnectionFacts(req) {
     return {
-        ip: extractClientIp(req),
-        userAgent: extractUserAgent(req),
+        ip: (0, client_ip_js_1.extractClientIp)(req),
+        userAgent: (0, client_ip_js_1.extractUserAgent)(req),
         bytesRead: () => req.socket.bytesRead,
         bytesWritten: () => req.socket.bytesWritten,
     };

package/dist/api/upload-auth.js

@@ -1,5 +1,9 @@
-import { checkScopeAccess } from './trpc/scope-access.js';
-export const UPLOAD_TRPC_PATH = 'addons.installPackage';
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UPLOAD_TRPC_PATH = void 0;
+exports.authorizeUploadRequest = authorizeUploadRequest;
+const scope_access_js_1 = require("./trpc/scope-access.js");
+exports.UPLOAD_TRPC_PATH = 'addons.installPackage';
 /**
  * Validate a `cst_*` scoped token via the `user-management` cap singleton.
  * Returns null when the singleton isn't mounted yet (boot race) or the
@@ -16,7 +20,7 @@ async function validateScopedTokenViaCap(addonRegistry, token) {
     return userMgmt.validateScopedToken({ token });
 }
 function isUploadAllowed(scoped) {
-    return checkScopeAccess(scoped.scopes, UPLOAD_TRPC_PATH).ok;
+    return (0, scope_access_js_1.checkScopeAccess)(scoped.scopes, exports.UPLOAD_TRPC_PATH).ok;
 }
 /**
  * Run the full upload auth chain. Returns `{ok: true}` on success, or the
@@ -24,7 +28,7 @@ function isUploadAllowed(scoped) {
  *   - 401 `Unauthorized` when no Authorization header is present,
  *   - 403 `Forbidden: <reason>` for any recognised-but-insufficient token.
  */
-export async function authorizeUploadRequest(args) {
+async function authorizeUploadRequest(args) {
     const { authHeader, authService, addonRegistry } = args;
     if (!authHeader) {
         return { ok: false, status: 401, error: 'Unauthorized' };
@@ -51,7 +55,7 @@ export async function authorizeUploadRequest(args) {
             return { ok: true };
         }
         else {
-            authReason = `scoped token lacks create access on '${UPLOAD_TRPC_PATH}'`;
+            authReason = `scoped token lacks create access on '${exports.UPLOAD_TRPC_PATH}'`;
         }
     }
     catch (err) {

package/dist/auth/addon-route-jwt-gate.js

@@ -1,3 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.gateAddonJwt = gateAddonJwt;
 /**
  * The JWT half of the `/addon/:addonId/*` gate — shared by the HTTP data-plane
  * branch and the addon-route branch so there is exactly ONE answer to "may this
@@ -11,7 +14,7 @@
  * the per-camera switches and notification snooze. A 60-second authorization
  * CODE and a 30-day refresh token passed the same way. See D103.
  */
-import { classifyBearerPrincipal, principalMayReachAddon, } from '@camstack/types';
+const types_1 = require("@camstack/types");
 function readScopes(raw) {
     return Array.isArray(raw) ? raw : [];
 }
@@ -24,8 +27,8 @@ function readScopes(raw) {
  * an admin-only route keeps the response it already had; nothing that is not a
  * session or an `oauth-access` token gets that far at all.
  */
-export function gateAddonJwt(input, logger) {
-    const principal = classifyBearerPrincipal(input.payload);
+function gateAddonJwt(input, logger) {
+    const principal = (0, types_1.classifyBearerPrincipal)(input.payload);
     const isAdmin = input.payload.isAdmin === true;
     if (principal.kind === 'not-a-credential') {
         logger.warn('addon route: refused a bearer that is not an API credential', {
@@ -39,7 +42,7 @@ export function gateAddonJwt(input, logger) {
         });
         return { ok: false, status: 403, error: 'Admin required' };
     }
-    const verdict = principalMayReachAddon({
+    const verdict = (0, types_1.principalMayReachAddon)({
         principal,
         scopes: readScopes(input.payload.scopes),
         isAdmin,

package/dist/auth/addon-route-share-gate.js

@@ -1,6 +1,11 @@
-export const SHARE_KIND_HEADER = 'x-camstack-share-kind';
-export const SHARE_DEVICES_HEADER = 'x-camstack-share-devices';
-export function gateAddonShareToken(input) {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SHARE_DEVICES_HEADER = exports.SHARE_KIND_HEADER = void 0;
+exports.gateAddonShareToken = gateAddonShareToken;
+exports.stripShareHeaders = stripShareHeaders;
+exports.SHARE_KIND_HEADER = 'x-camstack-share-kind';
+exports.SHARE_DEVICES_HEADER = 'x-camstack-share-devices';
+function gateAddonShareToken(input) {
     if (input.record === null)
         return { ok: false, status: 401, error: 'Invalid token' };
     const kind = input.record.scope.kind;
@@ -10,17 +15,17 @@ export function gateAddonShareToken(input) {
     return {
         ok: true,
         headers: {
-            [SHARE_KIND_HEADER]: kind,
-            [SHARE_DEVICES_HEADER]: input.record.scope.deviceIds.join(','),
+            [exports.SHARE_KIND_HEADER]: kind,
+            [exports.SHARE_DEVICES_HEADER]: input.record.scope.deviceIds.join(','),
         },
     };
 }
 /** The forwarded header set without any share header the client supplied. */
-export function stripShareHeaders(headers) {
+function stripShareHeaders(headers) {
     const out = {};
     for (const [key, value] of Object.entries(headers)) {
         const lower = key.toLowerCase();
-        if (lower === SHARE_KIND_HEADER || lower === SHARE_DEVICES_HEADER)
+        if (lower === exports.SHARE_KIND_HEADER || lower === exports.SHARE_DEVICES_HEADER)
             continue;
         out[key] = value;
     }

package/dist/auth/app-confirm-page.js

@@ -1,3 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.APP_CONFIRM_REFUSAL_CSP = exports.APP_CONFIRM_CSP = void 0;
+exports.appConfirmPage = appConfirmPage;
+exports.appConfirmRefusalPage = appConfirmRefusalPage;
 /**
  * The hub-rendered confirmation page of a native app sign-in (D858):
  * "Sign in the CamStack app as <username>?".
@@ -11,8 +16,8 @@
  * `location` the hub answers; Cancel is a plain link to the app with
  * `error=cancelled`.
  */
-import { appButton, appCancelLink, appErrorLine, appHint, appPageCsp, appParagraph, escapeHtml, renderAppPage, } from './app-page-shell.js';
-import { appStrings } from './app-page-strings.js';
+const app_page_shell_js_1 = require("./app-page-shell.js");
+const app_page_strings_js_1 = require("./app-page-strings.js");
 const PAGE_SCRIPT = `(function () {
   var btn = document.getElementById('go');
   var msg = document.getElementById('msg');
@@ -38,13 +43,13 @@ const PAGE_SCRIPT = `(function () {
   });
 })();`;
 /** The CSP: the shell's style and this page's one script by hash, same-origin requests, no framing, no form posts. */
-export const APP_CONFIRM_CSP = appPageCsp({ script: PAGE_SCRIPT });
+exports.APP_CONFIRM_CSP = (0, app_page_shell_js_1.appPageCsp)({ script: PAGE_SCRIPT });
 /** CSP of the refusal page: the shell's style only, nothing runs. */
-export const APP_CONFIRM_REFUSAL_CSP = appPageCsp();
+exports.APP_CONFIRM_REFUSAL_CSP = (0, app_page_shell_js_1.appPageCsp)();
 /** The confirmation page for `username`; `cancelHref` is the app callback carrying `error=cancelled`. */
-export function appConfirmPage(input) {
-    const t = appStrings(input.lang);
-    return renderAppPage({
+function appConfirmPage(input) {
+    const t = (0, app_page_strings_js_1.appStrings)(input.lang);
+    return (0, app_page_shell_js_1.renderAppPage)({
         lang: input.lang,
         title: t.confirm.title,
         heading: t.confirm.heading,
@@ -52,22 +57,22 @@ export function appConfirmPage(input) {
         script: PAGE_SCRIPT,
         scriptStrings: { 'confirm-expired': t.script.confirmExpired },
         body: [
-            `<p>${escapeHtml(t.confirm.signedInAsBefore)}<strong>${escapeHtml(input.username)}</strong>${escapeHtml(t.confirm.signedInAsAfter)}</p>`,
-            appHint(t.confirm.hint),
-            appButton(t.confirm.continueLabel, `id="go" data-confirm="${escapeHtml(input.token)}"`),
-            appErrorLine('msg'),
-            appCancelLink(input.cancelHref, t.confirm.cancel),
-            `<noscript><p class="error">${escapeHtml(t.confirm.noscript)}</p></noscript>`,
+            `<p>${(0, app_page_shell_js_1.escapeHtml)(t.confirm.signedInAsBefore)}<strong>${(0, app_page_shell_js_1.escapeHtml)(input.username)}</strong>${(0, app_page_shell_js_1.escapeHtml)(t.confirm.signedInAsAfter)}</p>`,
+            (0, app_page_shell_js_1.appHint)(t.confirm.hint),
+            (0, app_page_shell_js_1.appButton)(t.confirm.continueLabel, `id="go" data-confirm="${(0, app_page_shell_js_1.escapeHtml)(input.token)}"`),
+            (0, app_page_shell_js_1.appErrorLine)('msg'),
+            (0, app_page_shell_js_1.appCancelLink)(input.cancelHref, t.confirm.cancel),
+            `<noscript><p class="error">${(0, app_page_shell_js_1.escapeHtml)(t.confirm.noscript)}</p></noscript>`,
         ].join(''),
     });
 }
 /** A confirmation that is gone (expired, used, or opened in another browser): a sentence, nothing runs. */
-export function appConfirmRefusalPage(lang) {
-    const t = appStrings(lang).confirmExpired;
-    return renderAppPage({
+function appConfirmRefusalPage(lang) {
+    const t = (0, app_page_strings_js_1.appStrings)(lang).confirmExpired;
+    return (0, app_page_shell_js_1.renderAppPage)({
         lang,
         title: t.title,
         heading: t.title,
-        body: appParagraph(t.body) + appHint(t.hint),
+        body: (0, app_page_shell_js_1.appParagraph)(t.body) + (0, app_page_shell_js_1.appHint)(t.hint),
     });
 }

package/dist/auth/app-confirm-routes.js

@@ -1,3 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.APP_CONFIRM_PARAM = exports.APP_CONFIRM_PATH = void 0;
+exports.appConfirmCookie = appConfirmCookie;
+exports.registerAppConfirmRoutes = registerAppConfirmRoutes;
 /**
  * `/auth/app/confirm` - the last step of a native app sign-in (D858).
  *
@@ -8,20 +13,20 @@
  * the handoff code and answers `{ location }` at the app's scheme. Nothing is
  * minted without the POST, and the token is useless in any other browser.
  */
-import { appFlowLocation } from '@camstack/types';
-import { z } from 'zod';
-import { APP_CONFIRM_COOKIE, } from './app-confirmations.js';
-import { APP_CONFIRM_CSP, APP_CONFIRM_REFUSAL_CSP, appConfirmPage, appConfirmRefusalPage, } from './app-confirm-page.js';
-import { resolveAppPageLang } from './app-page-strings.js';
-import { clientKeyFromRequest } from './auth-rate-limit.js';
-import { readCookie } from './sso-finish-deps.js';
-export const APP_CONFIRM_PATH = '/auth/app/confirm';
+const types_1 = require("@camstack/types");
+const zod_1 = require("zod");
+const app_confirmations_js_1 = require("./app-confirmations.js");
+const app_confirm_page_js_1 = require("./app-confirm-page.js");
+const app_page_strings_js_1 = require("./app-page-strings.js");
+const auth_rate_limit_js_1 = require("./auth-rate-limit.js");
+const sso_finish_deps_js_1 = require("./sso-finish-deps.js");
+exports.APP_CONFIRM_PATH = '/auth/app/confirm';
 /** The query parameter carrying the token (masked in logged URLs). */
-export const APP_CONFIRM_PARAM = 'confirm';
+exports.APP_CONFIRM_PARAM = 'confirm';
 /** `Set-Cookie` for the browser binding: HttpOnly, Lax (the entry may come from a cross-site redirect chain). */
-export function appConfirmCookie(value, secure) {
+function appConfirmCookie(value, secure) {
     return [
-        `${APP_CONFIRM_COOKIE}=${value}`,
+        `${app_confirmations_js_1.APP_CONFIRM_COOKIE}=${value}`,
         'Path=/',
         'HttpOnly',
         'SameSite=Lax',
@@ -29,7 +34,7 @@ export function appConfirmCookie(value, secure) {
         ...(secure ? ['Secure'] : []),
     ].join('; ');
 }
-const ConfirmBodySchema = z.object({ confirm: z.string().min(1).max(256) });
+const ConfirmBodySchema = zod_1.z.object({ confirm: zod_1.z.string().min(1).max(256) });
 function noStore(reply) {
     reply.header('Cache-Control', 'no-store');
     reply.header('Referrer-Policy', 'no-referrer');
@@ -43,11 +48,11 @@ function mint(deps, confirmation) {
         state: app.state,
         authMethod: confirmation.authMethod,
     });
-    return appFlowLocation(app.redirect, { code: minted.code }, app.state);
+    return (0, types_1.appFlowLocation)(app.redirect, { code: minted.code }, app.state);
 }
-export function registerAppConfirmRoutes(fastify, deps) {
+function registerAppConfirmRoutes(fastify, deps) {
     const limited = (request, reply) => {
-        const client = clientKeyFromRequest(request, deps.network);
+        const client = (0, auth_rate_limit_js_1.clientKeyFromRequest)(request, deps.network);
         if (client === null)
             return false;
         const verdict = deps.limiter.check(`app-confirm:${client}`);
@@ -57,43 +62,43 @@ export function registerAppConfirmRoutes(fastify, deps) {
         void reply.status(429).send({ error: 'Too many attempts' });
         return true;
     };
-    fastify.get(APP_CONFIRM_PATH, async (request, reply) => {
+    fastify.get(exports.APP_CONFIRM_PATH, async (request, reply) => {
         noStore(reply);
         reply.type('text/html; charset=utf-8');
         if (limited(request, reply))
             return reply;
-        const token = request.query[APP_CONFIRM_PARAM];
+        const token = request.query[exports.APP_CONFIRM_PARAM];
         const confirmation = token === undefined
             ? null
-            : deps.confirmations.peek(token, readCookie(request.headers.cookie, APP_CONFIRM_COOKIE));
+            : deps.confirmations.peek(token, (0, sso_finish_deps_js_1.readCookie)(request.headers.cookie, app_confirmations_js_1.APP_CONFIRM_COOKIE));
         if (token === undefined || confirmation === null) {
             deps.logger.warn('App sign-in confirmation page refused', {
                 meta: { reason: 'unknown-expired-or-other-browser' },
             });
-            reply.header('Content-Security-Policy', APP_CONFIRM_REFUSAL_CSP);
+            reply.header('Content-Security-Policy', app_confirm_page_js_1.APP_CONFIRM_REFUSAL_CSP);
             return reply
                 .status(400)
-                .send(appConfirmRefusalPage(resolveAppPageLang({ acceptLanguage: request.headers['accept-language'] })));
+                .send((0, app_confirm_page_js_1.appConfirmRefusalPage)((0, app_page_strings_js_1.resolveAppPageLang)({ acceptLanguage: request.headers['accept-language'] })));
         }
-        reply.header('Content-Security-Policy', APP_CONFIRM_CSP);
-        return reply.send(appConfirmPage({
-            lang: resolveAppPageLang({
+        reply.header('Content-Security-Policy', app_confirm_page_js_1.APP_CONFIRM_CSP);
+        return reply.send((0, app_confirm_page_js_1.appConfirmPage)({
+            lang: (0, app_page_strings_js_1.resolveAppPageLang)({
                 lang: confirmation.app.lang,
                 acceptLanguage: request.headers['accept-language'],
             }),
             username: confirmation.username,
             token,
-            cancelHref: appFlowLocation(confirmation.app.redirect, { error: 'cancelled' }, confirmation.app.state),
+            cancelHref: (0, types_1.appFlowLocation)(confirmation.app.redirect, { error: 'cancelled' }, confirmation.app.state),
         }));
     });
-    fastify.post(APP_CONFIRM_PATH, async (request, reply) => {
+    fastify.post(exports.APP_CONFIRM_PATH, async (request, reply) => {
         noStore(reply);
         if (limited(request, reply))
             return reply;
         const body = ConfirmBodySchema.safeParse(request.body);
         if (!body.success)
             return reply.status(400).send({ error: 'Malformed confirmation.' });
-        const confirmation = deps.confirmations.consume(body.data.confirm, readCookie(request.headers.cookie, APP_CONFIRM_COOKIE));
+        const confirmation = deps.confirmations.consume(body.data.confirm, (0, sso_finish_deps_js_1.readCookie)(request.headers.cookie, app_confirmations_js_1.APP_CONFIRM_COOKIE));
         if (confirmation === null) {
             deps.logger.warn('App sign-in confirmation refused', {
                 meta: { reason: 'unknown-used-expired-or-other-browser' },

package/dist/auth/app-confirmations.js

@@ -1,4 +1,40 @@
-import { userError } from '@camstack/types';
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppConfirmations = exports.APP_CONFIRM_COOKIE = exports.APP_CONFIRM_TTL_MS = void 0;
+const types_1 = require("@camstack/types");
 /**
  * Pending "Sign in the CamStack app as <user>?" confirmations (D858).
  *
@@ -16,18 +52,18 @@ import { userError } from '@camstack/types';
  *
  * In-memory only: a hub restart simply means the person signs in again.
  */
-import * as crypto from 'node:crypto';
-export const APP_CONFIRM_TTL_MS = 120_000;
+const crypto = __importStar(require("node:crypto"));
+exports.APP_CONFIRM_TTL_MS = 120_000;
 const MAX_PENDING = 500;
 /** The cookie that binds a confirmation to the browser that finished the ceremony. */
-export const APP_CONFIRM_COOKIE = 'camstack_app_confirm';
+exports.APP_CONFIRM_COOKIE = 'camstack_app_confirm';
 const sha256 = (value) => crypto.createHash('sha256').update(value).digest('hex');
 function sameDigest(a, b) {
     const left = Buffer.from(a, 'utf8');
     const right = Buffer.from(b, 'utf8');
     return left.length === right.length && crypto.timingSafeEqual(left, right);
 }
-export class AppConfirmations {
+class AppConfirmations {
     now;
     /** Keyed by SHA-256(token). */
     pending = new Map();
@@ -38,13 +74,13 @@ export class AppConfirmations {
     create(confirmation) {
         this.prune();
         if (this.pending.size >= MAX_PENDING)
-            throw userError('server.app-confirmations-busy', undefined, 'Too many pending app confirmations');
+            throw (0, types_1.userError)('server.app-confirmations-busy', undefined, 'Too many pending app confirmations');
         const token = crypto.randomBytes(32).toString('base64url');
         const cookie = crypto.randomBytes(32).toString('base64url');
         this.pending.set(sha256(token), {
             ...confirmation,
             cookieHash: sha256(cookie),
-            expiresAt: this.now() + APP_CONFIRM_TTL_MS,
+            expiresAt: this.now() + exports.APP_CONFIRM_TTL_MS,
         });
         return { token, cookie };
     }
@@ -90,3 +126,4 @@ export class AppConfirmations {
                 this.pending.delete(key);
     }
 }
+exports.AppConfirmations = AppConfirmations;