@cotal-ai/auth 0.0.0 → 0.11.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/callout.d.ts

@@ -0,0 +1,108 @@
+import type { JWTVerifyGetKey, CryptoKey } from "jose";
+import { type ValidatedUserToken } from "./token.js";
+/** The one subject the callout serves (ADR-26). */
+export declare const AUTH_CALLOUT_SUBJECT = "$SYS.REQ.USER.AUTH";
+/** The trust material of the dedicated auth-callout account. */
+export interface CalloutAuth {
+    /** The auth account: operator-signed JWT carrying `authorization { auth_users, allowed_accounts, xkey }`. */
+    account: {
+        pub: string;
+        seed: string;
+        signingSeed: string;
+        signingPub: string;
+        jwt: string;
+    };
+    /** The callout service's own connection creds (the sole `auth_users` entry). */
+    calloutCreds: string;
+    /** Shared, deny-all sentinel creds agents present alongside their bearer. Powerless by design. */
+    sentinelCreds: string;
+    /** The callout curve keypair (xkey). The seed stays with the callout service only. */
+    xkey: {
+        seed: string;
+        pub: string;
+    };
+}
+/** EXACTLY what minting the callout account requires — a deliberate capability boundary (the
+ *  auth-provider seam passes this, never the whole space bundle): the operator seed signs the new
+ *  account into the trust chain; the data-account PUB is what `allowed_accounts` re-binds into. */
+export interface CalloutProvisionInput {
+    space: string;
+    /** The space operator's signing seed — only the operator can sign a new account. */
+    operatorSeed: string;
+    /** The data account callout responses may bind users into (public key only). */
+    accountPub: string;
+}
+/** Generate the dedicated auth-callout account for a space: account + signing key, the callout
+ *  service user, the deny-all sentinel, and the xkey — `authorization` wired so the server seals
+ *  requests and lets responses bind users into the data account. */
+export declare function createCalloutAuth(input: CalloutProvisionInput): Promise<CalloutAuth>;
+/** The minimal connection surface the callout needs — structurally satisfied by a nats.js
+ *  `NatsConnection` without this package depending on a transport. */
+export interface CalloutConnection {
+    subscribe(subject: string, opts?: {
+        queue?: string;
+    }): AsyncIterable<CalloutMsg>;
+}
+export interface CalloutMsg {
+    data: Uint8Array;
+    headers?: {
+        get(key: string): string | undefined;
+    };
+    respond(data: Uint8Array): unknown;
+}
+export interface StartAuthCalloutOpts {
+    /** The callout xkey SEED — MANDATORY. No xkey, no service (fail startup, never plaintext). */
+    xkeySeed: string;
+    /** The auth account (response issuer): its pub + the signing seed the response is signed with. */
+    authAccount: {
+        pub: string;
+        signingSeed: string;
+    };
+    /** The data account users are bound into: its pub + the signing seed that mints user JWTs. */
+    dataAccount: {
+        pub: string;
+        signingSeed: string;
+    };
+    /** The space — enforced as the bearer's audience. */
+    space: string;
+    /** Pinned bearer verification: the key resolver (pinned JWKS/local key) + exact issuer. */
+    token: {
+        key: JWTVerifyGetKey | CryptoKey;
+        issuer: string;
+    };
+    /** The spawn-ledger hook: THROW to deny. Client-supplied actor claims are only as good as this
+     *  server-side check — the flip wires the manager's authenticated spawn ledger in here. */
+    authorizeActor: (t: ValidatedUserToken) => void | Promise<void>;
+    /** Allow-list of trusted nats-server ids (`server_id.id`) — the tightest request-provenance pin:
+     *  a request whose server id is not listed is dropped (no response). STRONGLY RECOMMENDED for any
+     *  hardened / multi-server deploy. When omitted, the ONLY barrier left is NATS $SYS system-subject
+     *  isolation (no in-account user can publish `$SYS.REQ.USER.AUTH`, and the callout user is even
+     *  explicitly pub-denied it) — the app-layer `iss === server_id.id` + `N…`-prefix check is NOT
+     *  independently sufficient, since an attacker who could reach the subject could present their own
+     *  `createServer()` key and matching sealing xkey. That isolation holds single-broker, so omitting
+     *  the list is safe today; startup logs a WARNING so the over-trust is never silent. */
+    expectedServerIds?: string[];
+    /** Permission builder for a validated principal (the flip feeds core's `permissionsFor` via a thin
+     *  `@cotal-ai/auth` adapter). `connId` is the client-chosen inbox nonce (`req.connect_opts.name`), NOT
+     *  the NATS-minted `req.user_nkey` — the builder scopes the private reply inbox `_INBOX_<connId>.>` on
+     *  it. The client picks and passes this nonce because neither it nor this callout knows the per-connect
+     *  nkey pre-connect; core's `assertInboxConnId` rejects a nonce with subject metacharacters, so it
+     *  cannot widen the grant. An absent/invalid nonce makes the builder throw → a signed deny. */
+    permissionsFor: (t: ValidatedUserToken, connId: string) => Record<string, unknown>;
+    /** Diagnostics sink (default: console.error). Never carries bearer contents. */
+    log?: (line: string) => void;
+    /** Audit hook fired on each successful mint, BEFORE the response is sent — the minted user JWT
+     *  plus its principal and bound expiry. For metering/audit and for asserting the revocation lever
+     *  (the mint's `exp` is bound to the bearer's, so broker access dies with the bearer). */
+    onMint?: (info: {
+        jwt: string;
+        principal: string;
+        exp: number;
+    }) => void;
+}
+/** Serve the auth callout on an existing (auth-account) connection. Resolves setup synchronously —
+ *  throws on missing/invalid xkey or signing material; returns the running service. */
+export declare function startAuthCallout(nc: CalloutConnection, opts: StartAuthCalloutOpts): {
+    done: Promise<void>;
+};
+//# sourceMappingURL=callout.d.ts.map

package/dist/callout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"callout.d.ts","sourceRoot":"","sources":["../src/callout.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACvD,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAExE,mDAAmD;AACnD,eAAO,MAAM,oBAAoB,uBAAuB,CAAC;AAazD,gEAAgE;AAChE,MAAM,WAAW,WAAW;IAC1B,6GAA6G;IAC7G,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7F,gFAAgF;IAChF,YAAY,EAAE,MAAM,CAAC;IACrB,kGAAkG;IAClG,aAAa,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACrC;AAED;;mGAEmG;AACnG,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,YAAY,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;oEAEoE;AACpE,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,CAgD1F;AAED;sEACsE;AACtE,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;CAClF;AACD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IACnD,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,8FAA8F;IAC9F,QAAQ,EAAE,MAAM,CAAC;IACjB,kGAAkG;IAClG,WAAW,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,8FAA8F;IAC9F,WAAW,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,2FAA2F;IAC3F,KAAK,EAAE;QAAE,GAAG,EAAE,eAAe,GAAG,SAAS,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D;+FAC2F;IAC3F,cAAc,EAAE,CAAC,CAAC,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE;;;;;;;4FAOwF;IACxF,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;mGAK+F;IAC/F,cAAc,EAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnF,gFAAgF;IAChF,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B;;8FAE0F;IAC1F,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAC1E;AAED;uFACuF;AACvF,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,oBAAoB,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAiI3G"}

package/dist/callout.js

@@ -0,0 +1,219 @@
+/**
+ * Plane-2 auth-callout bridge (ADR-26, operator mode) — the server-side service that turns a
+ * validated user bearer into a scoped, short-lived NATS user JWT at connect time.
+ *
+ * Operator-mode topology (the sentinel pattern):
+ *  - a DEDICATED auth account quarantines callout traffic ({@link createCalloutAuth}): the callout
+ *    service is its only privileged user, plus a shared deny-all "sentinel" user whose creds
+ *    agents present alongside the real bearer in `auth_token`;
+ *  - the auth account's JWT carries `authorization { auth_users, allowed_accounts, xkey }`, so the
+ *    server routes connects landing there to `$SYS.REQ.USER.AUTH` and lets the response re-bind
+ *    the client into the DATA account (`issuer_account` + a user JWT signed by the data account's
+ *    signing key);
+ *  - the **xkey is mandatory**: {@link startAuthCallout} refuses to start without one, and drops
+ *    any request that arrives unsealed or whose signed `server_id.xkey` doesn't match the sealing
+ *    header key — without this the bearer crosses the auth path in cleartext (TLS protects the
+ *    transport, not this payload).
+ *
+ * Fail-closed at every step: protocol-shape violations (bad seal, bad signature, key mismatch)
+ * get NO response (the server denies on timeout — we cannot authenticate the peer, so we do not
+ * talk to it); authenticated-but-invalid bearers get a signed, sealed ERROR response; only a fully
+ * validated principal gets a mint. The minted user JWT's expiry is BOUND to the bearer's, so
+ * broker access dies with the token (the v1 revocation lever — nats-server disconnects clients at
+ * user-JWT expiry).
+ */
+import { Algorithms, decode, encodeAccount, encodeAuthorizationResponse, encodeUser, fmtCreds, } from "@nats-io/jwt";
+import { createAccount, createCurve, fromCurveSeed, fromPublic, fromSeed } from "@nats-io/nkeys";
+import { assertInboxConnId, newIdentity, principalKey, principalTags, token } from "@cotal-ai/core";
+import { validateUserToken } from "./token.js";
+/** The one subject the callout serves (ADR-26). */
+export const AUTH_CALLOUT_SUBJECT = "$SYS.REQ.USER.AUTH";
+/** Header carrying the server's public curve key on sealed callout requests. */
+const SERVER_XKEY_HEADER = "Nats-Server-Xkey";
+// The auth account is a quarantine: no JetStream, unlimited conns (every callout-mode connect
+// transits it). Mirrors core's account limits shape (which is module-private there on purpose —
+// the auth account is this package's concern, not part of the wire standard).
+const AUTH_ACCOUNT_LIMITS = {
+    subs: -1, conn: -1, leaf: -1, imports: -1, exports: -1,
+    data: -1, payload: -1, wildcards: true, mem_storage: 0, disk_storage: 0,
+};
+/** Generate the dedicated auth-callout account for a space: account + signing key, the callout
+ *  service user, the deny-all sentinel, and the xkey — `authorization` wired so the server seals
+ *  requests and lets responses bind users into the data account. */
+export async function createCalloutAuth(input) {
+    if (!input.operatorSeed)
+        throw new Error("createCalloutAuth: the operator signing seed is required - a stripped space bundle cannot sign a new account");
+    if (!input.accountPub)
+        throw new Error("createCalloutAuth: the data account public key is required");
+    const okp = fromSeed(new TextEncoder().encode(input.operatorSeed));
+    const akp = createAccount();
+    const askp = createAccount();
+    const xkp = createCurve();
+    const callout = newIdentity();
+    const sentinel = newIdentity();
+    const accountJwt = await encodeAccount(`AUTH_${token(input.space)}`, akp, {
+        limits: { ...AUTH_ACCOUNT_LIMITS },
+        signing_keys: [askp.getPublicKey()],
+        authorization: {
+            auth_users: [callout.id],
+            allowed_accounts: [input.accountPub],
+            xkey: xkp.getPublicKey(),
+        },
+    }, { signer: okp });
+    const dec = (u) => new TextDecoder().decode(u);
+    const signer = askp;
+    // The callout user: subscribe ONLY the callout subject; publish everywhere it might need to send
+    // a reply (server-chosen inbox) EXCEPT the callout subject itself — denying pub on
+    // $SYS.REQ.USER.AUTH means even a leaked callout cred cannot inject a forged auth request into
+    // its own service (defense-in-depth behind the iss/server-id provenance check in the handler).
+    // The sentinel: deny-all both ways — it exists only so a connect can carry a bearer; any
+    // capability here would be pre-auth surface.
+    const calloutJwt = await encodeUser("callout", fromPublic(callout.id), fromPublic(akp.getPublicKey()), {
+        sub: { allow: [AUTH_CALLOUT_SUBJECT] },
+        pub: { allow: [">"], deny: [AUTH_CALLOUT_SUBJECT] },
+    }, { signer });
+    const sentinelJwt = await encodeUser("sentinel", fromPublic(sentinel.id), fromPublic(akp.getPublicKey()), {
+        sub: { deny: [">"] },
+        pub: { deny: [">"] },
+    }, { signer });
+    return {
+        account: { pub: akp.getPublicKey(), seed: dec(akp.getSeed()), signingSeed: dec(askp.getSeed()), signingPub: askp.getPublicKey(), jwt: accountJwt },
+        calloutCreds: dec(fmtCreds(calloutJwt, fromSeed(new TextEncoder().encode(callout.seed)))),
+        sentinelCreds: dec(fmtCreds(sentinelJwt, fromSeed(new TextEncoder().encode(sentinel.seed)))),
+        xkey: { seed: dec(xkp.getSeed()), pub: xkp.getPublicKey() },
+    };
+}
+/** Serve the auth callout on an existing (auth-account) connection. Resolves setup synchronously —
+ *  throws on missing/invalid xkey or signing material; returns the running service. */
+export function startAuthCallout(nc, opts) {
+    if (!opts.xkeySeed)
+        throw new Error("auth callout: xkey seed is required - refusing to start a callout that would receive bearer tokens unsealed");
+    const xkp = fromCurveSeed(new TextEncoder().encode(opts.xkeySeed)); // throws on non-curve seeds
+    const responseSigner = fromSeed(new TextEncoder().encode(opts.authAccount.signingSeed));
+    const userSigner = fromSeed(new TextEncoder().encode(opts.dataAccount.signingSeed));
+    if (!opts.space)
+        throw new Error("auth callout: space is required");
+    const log = opts.log ?? ((l) => console.error(l));
+    const enc = (s) => new TextEncoder().encode(s);
+    const dec = (u) => new TextDecoder().decode(u);
+    if (!opts.expectedServerIds?.length)
+        log("auth callout: WARNING - no expectedServerIds allow-list set; request provenance rests on $SYS system-subject isolation alone (safe single-broker, but set expectedServerIds for hardened/multi-server deploys)");
+    const sub = nc.subscribe(AUTH_CALLOUT_SUBJECT, { queue: "cotal-auth-callout" });
+    const done = (async () => {
+        for await (const msg of sub) {
+            // ---- authenticate the REQUEST itself; shape violations get NO response ----
+            const serverXkey = msg.headers?.get(SERVER_XKEY_HEADER);
+            if (!serverXkey) {
+                log("auth callout: dropped an UNSEALED request (no Nats-Server-Xkey header) - check the account xkey config");
+                continue;
+            }
+            let claims;
+            try {
+                const plain = xkp.open(msg.data, serverXkey);
+                if (plain === null)
+                    throw new Error("xkey open failed");
+                claims = decode(dec(plain)); // ed25519 signature verified in decode()
+            }
+            catch (e) {
+                log(`auth callout: dropped an undecryptable/unverifiable request (${e instanceof Error ? e.message : String(e)})`);
+                continue;
+            }
+            const req = claims.nats;
+            if (!req?.user_nkey || !req.server_id?.id) {
+                log("auth callout: dropped a request without user_nkey/server_id");
+                continue;
+            }
+            // Request provenance — prove nats-server sent this, not an in-account publisher. `decode()`
+            // verified the signature against the embedded `iss`, but that alone accepts ANY self-signed
+            // JWT; without pinning, a holder of callout creds could publish a sealed forged request to a
+            // reply subject it controls and be minted a data-account JWT. So: the issuer must be the
+            // request's own server id AND a server-prefixed (`N…`) nkey, and — when configured — one of
+            // the trusted server ids.
+            const issuer = claims.iss;
+            if (issuer !== req.server_id.id || !req.server_id.id.startsWith("N")) {
+                log("auth callout: dropped a request whose issuer is not its own server identity (forgery guard)");
+                continue;
+            }
+            if (opts.expectedServerIds && !opts.expectedServerIds.includes(req.server_id.id)) {
+                log(`auth callout: dropped a request from an untrusted server id ${req.server_id.id}`);
+                continue;
+            }
+            if (req.server_id.xkey !== serverXkey) {
+                // The signed payload must vouch for the key that sealed it — otherwise a relay could
+                // re-seal someone else's request under its own key.
+                log("auth callout: dropped a request whose signed server_id.xkey != sealing header key");
+                continue;
+            }
+            const respond = async (data) => {
+                const resp = await encodeAuthorizationResponse(fromPublic(req.user_nkey), fromPublic(req.server_id.id), responseSigner, { ...data, issuer_account: opts.authAccount.pub }, { algorithm: Algorithms.v2 });
+                msg.respond(xkp.seal(enc(resp), serverXkey));
+            };
+            // ---- validate the bearer; failures are authenticated denials (signed error response) ----
+            try {
+                const bearer = req.connect_opts?.auth_token;
+                if (!bearer)
+                    throw new Error("no user token presented (auth_token empty)");
+                const validated = await validateUserToken(bearer, {
+                    key: opts.token.key,
+                    issuer: opts.token.issuer,
+                    audience: opts.space,
+                });
+                await opts.authorizeActor(validated);
+                // The private reply-inbox (`_INBOX_<connId>.>`) must scope on a token the CLIENT knows pre-connect
+                // — but under the callout the connection nkey (`req.user_nkey`) is minted per-connect by NATS, so
+                // the client cannot set its `inboxPrefix` to match it. So the client picks its own random inbox
+                // nonce and passes it as the connection `name`; we scope the grant on THAT (empirically: a scoped
+                // `_INBOX_<nonce>.>` round-trips through the rebind, and the nonce is a per-connection secret, the
+                // same security model as NATS's default random mux inbox). core's `assertInboxConnId` (via
+                // permissionsFor) rejects a nonce carrying subject metacharacters, so a client cannot widen the
+                // grant to `_INBOX_>.>`; a missing/garbled name throws → this becomes a signed deny (fail-closed).
+                // Validate the nonce HERE, at the boundary where untrusted client input enters — not inside the
+                // injected permissionsFor hook (which could be any implementation). assertInboxConnId throws on a
+                // missing/wildcard name → the catch below turns it into a signed deny (fail-closed).
+                const inboxNonce = assertInboxConnId(req.connect_opts?.name ?? "");
+                const perms = opts.permissionsFor(validated, inboxNonce);
+                // Stamp the principal into the minted JWT so the live identity is recoverable server-side: the
+                // connection's `user_nkey` is a per-connect ephemeral the SERVER generated, not the principal,
+                // so CONNZ-based attribution (the membership feed, live eviction) needs owner+actor carried
+                // here. What actually surfaces in CONNZ for a CALLOUT connection (proven live, nats-server
+                // 2.10/2.14) is the JWT `name` as `authorized_user` — the principal NAME-form — NOT the `tags`
+                // (those surface for static mints; see core's `principalFromConnz`). We set BOTH via core's
+                // single sources for shape-consistency with the static path, but attribution reads
+                // `authorized_user` here. The name is the principal name-form (JetStream-safe), a stable label.
+                const { key, name } = principalKey(validated.owner, validated.act.actor);
+                const userJwt = await encodeUser(name, fromPublic(req.user_nkey), fromPublic(opts.dataAccount.pub), { ...perms, tags: principalTags(validated.owner, validated.act.actor) }, { signer: userSigner, exp: validated.exp });
+                opts.onMint?.({ jwt: userJwt, principal: key, exp: validated.exp });
+                await respond({ jwt: userJwt });
+            }
+            catch (e) {
+                const reason = e instanceof Error ? e.message : String(e);
+                log(`auth callout: denied ${req.user_nkey}: ${reason}`);
+                try {
+                    // The deny response MUST always encode: a denied connect that can't be answered TIMES OUT
+                    // instead of getting a legible signed refusal, which breaks the fail-closed "refuse, never
+                    // hang" contract. The auth-response JWT claim encoder is Latin1-limited (btoa-style — a
+                    // non-ASCII char like the em-dash in many of our throw messages raises "Invalid character"),
+                    // so coerce the reason to ASCII at this boundary. It is a human-readable hint, not a security
+                    // token, so lossy folding (em-dash → "-", smart quotes → ASCII, else "?") is fine.
+                    await respond({ error: asciiFold(reason) });
+                }
+                catch (re) {
+                    log(`auth callout: failed to send deny response: ${re instanceof Error ? re.message : String(re)}`);
+                }
+            }
+        }
+    })();
+    return { done };
+}
+/** Fold a string to ASCII so the Latin1-limited auth-response encoder can always send it (a denied
+ *  connect must get a legible signed refusal, never hang). Common Unicode punctuation maps to its ASCII
+ *  stand-in; anything else outside 0x20–0x7E becomes "?". Used only for the human-readable deny reason. */
+function asciiFold(s) {
+    return s
+        .replace(/[‐-―]/g, "-") // hyphens/dashes incl. em-dash
+        .replace(/[‘’‛]/g, "'") // single smart quotes
+        .replace(/[“”‟]/g, '"') // double smart quotes
+        .replace(/…/g, "...") // ellipsis
+        .replace(/[^\x20-\x7E]/g, "?"); // any remaining non-ASCII-printable
+}
+//# sourceMappingURL=callout.js.map

package/dist/callout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"callout.js","sourceRoot":"","sources":["../src/callout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EACL,UAAU,EACV,MAAM,EACN,aAAa,EACb,2BAA2B,EAC3B,UAAU,EACV,QAAQ,GAET,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEpG,OAAO,EAAE,iBAAiB,EAA2B,MAAM,YAAY,CAAC;AAExE,mDAAmD;AACnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAEzD,gFAAgF;AAChF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAE9C,8FAA8F;AAC9F,gGAAgG;AAChG,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG;IAC1B,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC;CAC/D,CAAC;AAyBX;;oEAEoE;AACpE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAA4B;IAClE,IAAI,CAAC,KAAK,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,8GAA8G,CAAC,CAAC;IACzJ,IAAI,CAAC,KAAK,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACrG,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,MAAM,UAAU,GAAG,MAAM,aAAa,CACpC,QAAQ,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAC5B,GAAG,EACH;QACE,MAAM,EAAE,EAAE,GAAG,mBAAmB,EAAE;QAClC,YAAY,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,aAAa,EAAE;YACb,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,gBAAgB,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;YACpC,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE;SACzB;KACF,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IAEF,MAAM,GAAG,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC;IACpB,iGAAiG;IACjG,mFAAmF;IACnF,+FAA+F;IAC/F,+FAA+F;IAC/F,yFAAyF;IACzF,6CAA6C;IAC7C,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE;QACrG,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,oBAAoB,CAAC,EAAE;QACtC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,oBAAoB,CAAC,EAAE;KACpD,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACf,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE;QACxG,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE;QACpB,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE;KACrB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEf,OAAO;QACL,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;QAClJ,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzF,aAAa,EAAE,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5F,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,YAAY,EAAE,EAAE;KAC5D,CAAC;AACJ,CAAC;AAmDD;uFACuF;AACvF,MAAM,UAAU,gBAAgB,CAAC,EAAqB,EAAE,IAA0B;IAChF,IAAI,CAAC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6GAA6G,CAAC,CAAC;IACnJ,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,4BAA4B;IAChG,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;IACxF,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM;QACjC,GAAG,CAAC,gNAAgN,CAAC,CAAC;IAExN,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAEhF,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE;QACvB,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YAC5B,8EAA8E;YAC9E,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC;YACxD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,GAAG,CAAC,wGAAwG,CAAC,CAAC;gBAC9G,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBAC7C,IAAI,KAAK,KAAK,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBACxD,MAAM,GAAG,MAAM,CAAuB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,yCAAyC;YAC9F,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,gEAAgE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACnH,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAI,MAA0C,CAAC,IAAI,CAAC;YAC7D,IAAI,CAAC,GAAG,EAAE,SAAS,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC;gBAC1C,GAAG,CAAC,6DAA6D,CAAC,CAAC;gBACnE,SAAS;YACX,CAAC;YACD,4FAA4F;YAC5F,4FAA4F;YAC5F,6FAA6F;YAC7F,yFAAyF;YACzF,4FAA4F;YAC5F,0BAA0B;YAC1B,MAAM,MAAM,GAAI,MAA2B,CAAC,GAAG,CAAC;YAChD,IAAI,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrE,GAAG,CAAC,6FAA6F,CAAC,CAAC;gBACnG,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;gBACjF,GAAG,CAAC,+DAA+D,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvF,SAAS;YACX,CAAC;YACD,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACtC,qFAAqF;gBACrF,oDAAoD;gBACpD,GAAG,CAAC,mFAAmF,CAAC,CAAC;gBACzF,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,EAAE,IAAsC,EAAE,EAAE;gBAC/D,MAAM,IAAI,GAAG,MAAM,2BAA2B,CAC5C,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EACzB,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAC5B,cAAc,EACd,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,EACjD,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,CAC7B,CAAC;gBACF,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;YAC/C,CAAC,CAAC;YAEF,4FAA4F;YAC5F,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC;gBAC5C,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAC3E,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE;oBAChD,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG;oBACnB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;oBACzB,QAAQ,EAAE,IAAI,CAAC,KAAK;iBACrB,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;gBACrC,mGAAmG;gBACnG,kGAAkG;gBAClG,gGAAgG;gBAChG,kGAAkG;gBAClG,mGAAmG;gBACnG,2FAA2F;gBAC3F,gGAAgG;gBAChG,mGAAmG;gBACnG,gGAAgG;gBAChG,kGAAkG;gBAClG,qFAAqF;gBACrF,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;gBACnE,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBACzD,+FAA+F;gBAC/F,+FAA+F;gBAC/F,4FAA4F;gBAC5F,2FAA2F;gBAC3F,+FAA+F;gBAC/F,4FAA4F;gBAC5F,mFAAmF;gBACnF,gGAAgG;gBAChG,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACzE,MAAM,OAAO,GAAG,MAAM,UAAU,CAC9B,IAAI,EACJ,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EACzB,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAChC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EACvE,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAC3C,CAAC;gBACF,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;gBACpE,MAAM,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC1D,GAAG,CAAC,wBAAwB,GAAG,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC,CAAC;gBACxD,IAAI,CAAC;oBACH,0FAA0F;oBAC1F,2FAA2F;oBAC3F,wFAAwF;oBACxF,6FAA6F;oBAC7F,8FAA8F;oBAC9F,mFAAmF;oBACnF,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC9C,CAAC;gBAAC,OAAO,EAAE,EAAE,CAAC;oBACZ,GAAG,CAAC,+CAA+C,EAAE,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACtG,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAEL,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED;;2GAE2G;AAC3G,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC;SACL,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,+BAA+B;SACtD,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,sBAAsB;SAC7C,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,sBAAsB;SAC7C,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,WAAW;SAChC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,oCAAoC;AACxE,CAAC"}

package/dist/commands.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=commands.d.ts.map

package/dist/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":""}