@downcity/city 0.2.205 → 0.2.211

package/bin/federation/auth/key-schema.d.ts

@@ -0,0 +1,275 @@
+/**
+ * Federation 用户 token 签名密钥表。
+ *
+ * Federation 使用该系统表持久化 Ed25519 Key Ring。私钥只在服务端签发路径读取，
+ * 对外 JWKS 仅返回 public_jwk，避免产品后端获得签发能力。
+ */
+/** Federation SQLite 签名密钥表。 */
+export declare const sqlite_federation_auth_keys: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
+    name: "federation_auth_keys";
+    schema: undefined;
+    columns: {
+        key_id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "key_id";
+            tableName: "federation_auth_keys";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        algorithm: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "algorithm";
+            tableName: "federation_auth_keys";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        public_jwk: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "public_jwk";
+            tableName: "federation_auth_keys";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        private_jwk: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "private_jwk";
+            tableName: "federation_auth_keys";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        status: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "status";
+            tableName: "federation_auth_keys";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        created_at: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "created_at";
+            tableName: "federation_auth_keys";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        retired_at: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "retired_at";
+            tableName: "federation_auth_keys";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+    };
+    dialect: "sqlite";
+}>;
+/** Federation Postgres 签名密钥表。 */
+export declare const pg_federation_auth_keys: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "federation_auth_keys";
+    schema: undefined;
+    columns: {
+        key_id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "key_id";
+            tableName: "federation_auth_keys";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        algorithm: import("drizzle-orm/pg-core").PgColumn<{
+            name: "algorithm";
+            tableName: "federation_auth_keys";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        public_jwk: import("drizzle-orm/pg-core").PgColumn<{
+            name: "public_jwk";
+            tableName: "federation_auth_keys";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        private_jwk: import("drizzle-orm/pg-core").PgColumn<{
+            name: "private_jwk";
+            tableName: "federation_auth_keys";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        status: import("drizzle-orm/pg-core").PgColumn<{
+            name: "status";
+            tableName: "federation_auth_keys";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        created_at: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "federation_auth_keys";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        retired_at: import("drizzle-orm/pg-core").PgColumn<{
+            name: "retired_at";
+            tableName: "federation_auth_keys";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+//# sourceMappingURL=key-schema.d.ts.map

package/bin/federation/auth/key-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-schema.d.ts","sourceRoot":"","sources":["../../../src/federation/auth/key-schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,+BAA+B;AAC/B,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAetC,CAAC;AAEH,iCAAiC;AACjC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAelC,CAAC"}

package/bin/federation/auth/key-schema.js

@@ -0,0 +1,44 @@
+/**
+ * Federation 用户 token 签名密钥表。
+ *
+ * Federation 使用该系统表持久化 Ed25519 Key Ring。私钥只在服务端签发路径读取，
+ * 对外 JWKS 仅返回 public_jwk，避免产品后端获得签发能力。
+ */
+import { pgTable, text as pgText } from "drizzle-orm/pg-core";
+import { sqliteTable, text as sqliteText } from "drizzle-orm/sqlite-core";
+const FEDERATION_AUTH_KEY_TABLE = "federation_auth_keys";
+/** Federation SQLite 签名密钥表。 */
+export const sqlite_federation_auth_keys = sqliteTable(FEDERATION_AUTH_KEY_TABLE, {
+    /** JWT protected header 使用的密钥 ID。 */
+    key_id: sqliteText("key_id").primaryKey(),
+    /** JOSE 签名算法，当前固定为 EdDSA。 */
+    algorithm: sqliteText("algorithm").notNull(),
+    /** 可公开发布的 Ed25519 Public JWK JSON。 */
+    public_jwk: sqliteText("public_jwk").notNull(),
+    /** 仅 Federation 签发路径可读的 Ed25519 Private JWK JSON。 */
+    private_jwk: sqliteText("private_jwk").notNull(),
+    /** 密钥生命周期状态。 */
+    status: sqliteText("status").notNull(),
+    /** 密钥创建时间。 */
+    created_at: sqliteText("created_at").notNull(),
+    /** 密钥停止签发时间；active 状态使用空字符串。 */
+    retired_at: sqliteText("retired_at").notNull(),
+});
+/** Federation Postgres 签名密钥表。 */
+export const pg_federation_auth_keys = pgTable(FEDERATION_AUTH_KEY_TABLE, {
+    /** JWT protected header 使用的密钥 ID。 */
+    key_id: pgText("key_id").primaryKey(),
+    /** JOSE 签名算法，当前固定为 EdDSA。 */
+    algorithm: pgText("algorithm").notNull(),
+    /** 可公开发布的 Ed25519 Public JWK JSON。 */
+    public_jwk: pgText("public_jwk").notNull(),
+    /** 仅 Federation 签发路径可读的 Ed25519 Private JWK JSON。 */
+    private_jwk: pgText("private_jwk").notNull(),
+    /** 密钥生命周期状态。 */
+    status: pgText("status").notNull(),
+    /** 密钥创建时间。 */
+    created_at: pgText("created_at").notNull(),
+    /** 密钥停止签发时间；active 状态使用空字符串。 */
+    retired_at: pgText("retired_at").notNull(),
+});
+//# sourceMappingURL=key-schema.js.map

package/bin/federation/auth/key-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-schema.js","sourceRoot":"","sources":["../../../src/federation/auth/key-schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1E,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AAEzD,+BAA+B;AAC/B,MAAM,CAAC,MAAM,2BAA2B,GAAG,WAAW,CAAC,yBAAyB,EAAE;IAChF,qCAAqC;IACrC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE;IACzC,6BAA6B;IAC7B,SAAS,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IAC5C,sCAAsC;IACtC,UAAU,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAC9C,qDAAqD;IACrD,WAAW,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IAChD,gBAAgB;IAChB,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IACtC,cAAc;IACd,UAAU,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAC9C,gCAAgC;IAChC,UAAU,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CAC/C,CAAC,CAAC;AAEH,iCAAiC;AACjC,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,EAAE;IACxE,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE;IACrC,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACxC,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAC1C,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IAC5C,gBAAgB;IAChB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAClC,cAAc;IACd,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAC1C,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CAC3C,CAAC,CAAC"}

package/bin/federation/auth/types.d.ts

@@ -47,6 +47,10 @@ export interface UserTokenPayload {
      * token 受众。
      */
     aud: "downcity:user";
+    /**
+     * 签发该 token 的 Federation 稳定 issuer。
+     */
+    iss: string;
     /**
      * token 所属 City ID。
      */
@@ -55,6 +59,10 @@ export interface UserTokenPayload {
      * token 所属用户 ID。
      */
     user_id: string;
+    /**
+     * JWT 标准主体字段，与 user_id 保持一致。
+     */
+    sub: string;
     /**
      * 业务元数据。
      */
@@ -66,7 +74,59 @@ export interface UserTokenPayload {
     /**
      * 过期时间。
      */
-    exp?: number;
+    exp: number;
+    /**
+     * token 唯一 ID，用于审计与后续撤销扩展。
+     */
+    jti: string;
+}
+/** Federation 签名密钥生命周期状态。 */
+export type FederationAuthKeyStatus = "active" | "retired" | "revoked";
+/** Federation 数据库中的 Ed25519 签名密钥记录。 */
+export interface FederationAuthKeyRecord extends Record<string, unknown> {
+    /** JWT protected header 使用的密钥 ID。 */
+    key_id: string;
+    /** JOSE 签名算法，当前固定为 EdDSA。 */
+    algorithm: "EdDSA";
+    /** 可公开发布的 Ed25519 Public JWK JSON。 */
+    public_jwk: string;
+    /** 仅 Federation 签发路径可读的 Ed25519 Private JWK JSON。 */
+    private_jwk: string;
+    /** 当前密钥生命周期状态。 */
+    status: FederationAuthKeyStatus;
+    /** 密钥创建时间。 */
+    created_at: string;
+    /** 密钥停止签发时间；active 状态为空字符串。 */
+    retired_at: string;
+}
+/** Federation 对外发布的 JSON Web Key。 */
+export interface FederationPublicJwk extends Record<string, unknown> {
+    /** 密钥类型，Ed25519 固定为 OKP。 */
+    kty: "OKP";
+    /** 椭圆曲线，固定为 Ed25519。 */
+    crv: "Ed25519";
+    /** JOSE 签名算法。 */
+    alg: "EdDSA";
+    /** 公钥用途，固定用于签名验证。 */
+    use: "sig";
+    /** JWT protected header 对应的密钥 ID。 */
+    kid: string;
+    /** Ed25519 公钥的 Base64URL 编码。 */
+    x: string;
+}
+/** Federation JWKS 响应。 */
+export interface FederationJwks {
+    /** 当前可用于验签的 active 与 retired 公钥。 */
+    keys: FederationPublicJwk[];
+}
+/** Federation 公共发现信息。 */
+export interface FederationDiscovery {
+    /** Federation 首次启动后保持稳定的 issuer。 */
+    issuer: string;
+    /** 当前 Federation 的公开 JWKS 地址。 */
+    jwks_uri: string;
+    /** user_token 必须包含的 audience。 */
+    user_token_audience: "downcity:user";
 }
 /**
  * City 返回给管理端的发 token 结果。
@@ -86,9 +146,7 @@ export interface UserTokenIssueResult {
     user_id: string;
     /**
      * token 过期时间。
-     *
-     * 未设置 ttl 时省略。
      */
-    expires_at?: string;
+    expires_at: string;
 }
 //# sourceMappingURL=types.d.ts.map

package/bin/federation/auth/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/federation/auth/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnC;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,GAAG,EAAE,eAAe,CAAC;IAErB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/federation/auth/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnC;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,GAAG,EAAE,eAAe,CAAC;IAErB;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;CACb;AAED,6BAA6B;AAC7B,MAAM,MAAM,uBAAuB,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAEvE,uCAAuC;AACvC,MAAM,WAAW,uBAAwB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACtE,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IAEf,6BAA6B;IAC7B,SAAS,EAAE,OAAO,CAAC;IAEnB,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;IAEnB,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;IAEpB,kBAAkB;IAClB,MAAM,EAAE,uBAAuB,CAAC;IAEhC,cAAc;IACd,UAAU,EAAE,MAAM,CAAC;IAEnB,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qCAAqC;AACrC,MAAM,WAAW,mBAAoB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAClE,4BAA4B;IAC5B,GAAG,EAAE,KAAK,CAAC;IAEX,wBAAwB;IACxB,GAAG,EAAE,SAAS,CAAC;IAEf,iBAAiB;IACjB,GAAG,EAAE,OAAO,CAAC;IAEb,qBAAqB;IACrB,GAAG,EAAE,KAAK,CAAC;IAEX,qCAAqC;IACrC,GAAG,EAAE,MAAM,CAAC;IAEZ,gCAAgC;IAChC,CAAC,EAAE,MAAM,CAAC;CACX;AAED,0BAA0B;AAC1B,MAAM,WAAW,cAAc;IAC7B,oCAAoC;IACpC,IAAI,EAAE,mBAAmB,EAAE,CAAC;CAC7B;AAED,yBAAyB;AACzB,MAAM,WAAW,mBAAmB;IAClC,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAC;IAEf,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IAEjB,iCAAiC;IACjC,mBAAmB,EAAE,eAAe,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB"}

package/bin/federation/auth/user-token-authority.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Federation user_token 签发与本地验签模块。
+ *
+ * 使用 Ed25519 Compact JWT：Federation Key Ring 私钥只负责签发，公开 JWK 只负责验签。
+ * token 保留 `ub_` 前缀用于快速识别 Downcity 用户凭证。
+ */
+import { type JWTPayload } from "jose";
+import { FederationKeyStore } from "./federation-key-store.js";
+import type { CreateUserTokenInput, UserTokenPayload } from "./types.js";
+/** Federation 内部 user_token 权威。 */
+export declare class UserTokenAuthority {
+    private readonly key_store;
+    private readonly issuer;
+    constructor(key_store: FederationKeyStore, issuer: string);
+    /** 使用当前 active 私钥签发 user_token。 */
+    sign(input: CreateUserTokenInput): Promise<string>;
+    /** 使用 Federation Key Ring 在服务端本地验证 user_token。 */
+    verify(token: string): Promise<UserTokenPayload>;
+}
+/** 将 token TTL 统一解析为秒并限制最大有效期。 */
+export declare function parse_user_token_ttl(ttl?: string | number): number;
+/** 去掉 Downcity token 前缀并拒绝空 token。 */
+export declare function normalize_user_token(token: string): string;
+/** 从已通过 JOSE 校验的 payload 构造公共 user token 载荷。 */
+export declare function read_user_token_payload(payload: JWTPayload): UserTokenPayload;
+//# sourceMappingURL=user-token-authority.d.ts.map

package/bin/federation/auth/user-token-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-token-authority.d.ts","sourceRoot":"","sources":["../../../src/federation/auth/user-token-authority.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,MAAM,CAAC;AAEd,OAAO,EAAE,kBAAkB,EAAwB,MAAM,2BAA2B,CAAC;AACrF,OAAO,KAAK,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAMzE,mCAAmC;AACnC,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,SAAS,EAAE,kBAAkB,EAC7B,MAAM,EAAE,MAAM;IAGjC,mCAAmC;IAC7B,IAAI,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC;IA6BxD,kDAAkD;IAC5C,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA0BvD;AAED,kCAAkC;AAClC,wBAAgB,oBAAoB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CA4BlE;AAED,sCAAsC;AACtC,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAK1D;AAED,gDAAgD;AAChD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,UAAU,GAAG,gBAAgB,CAyB7E"}

package/bin/federation/auth/user-token-authority.js

@@ -0,0 +1,179 @@
+/**
+ * Federation user_token 签发与本地验签模块。
+ *
+ * 使用 Ed25519 Compact JWT：Federation Key Ring 私钥只负责签发，公开 JWK 只负责验签。
+ * token 保留 `ub_` 前缀用于快速识别 Downcity 用户凭证。
+ */
+import { SignJWT, decodeProtectedHeader, importJWK, jwtVerify, } from "jose";
+import { httpError, randomSecret } from "../../utils/helpers.js";
+import { USER_TOKEN_ALGORITHM } from "./federation-key-store.js";
+const USER_TOKEN_AUDIENCE = "downcity:user";
+const DEFAULT_USER_TOKEN_TTL_SECONDS = 7 * 24 * 60 * 60;
+const MAX_USER_TOKEN_TTL_SECONDS = 30 * 24 * 60 * 60;
+/** Federation 内部 user_token 权威。 */
+export class UserTokenAuthority {
+    key_store;
+    issuer;
+    constructor(key_store, issuer) {
+        this.key_store = key_store;
+        this.issuer = issuer;
+    }
+    /** 使用当前 active 私钥签发 user_token。 */
+    async sign(input) {
+        validate_sign_input(input);
+        const ttl_seconds = parse_user_token_ttl(input.ttl);
+        const now = Math.floor(Date.now() / 1000);
+        const signing_key = await this.key_store.ensure_active_key();
+        const private_jwk = JSON.parse(signing_key.private_jwk);
+        const private_key = await importJWK(private_jwk, USER_TOKEN_ALGORITHM);
+        const jwt = await new SignJWT({
+            user_id: input.user_id,
+            city_id: input.city_id,
+            metadata: input.metadata ?? {},
+        })
+            .setProtectedHeader({
+            alg: USER_TOKEN_ALGORITHM,
+            typ: "JWT",
+            kid: signing_key.key_id,
+        })
+            .setIssuer(this.issuer)
+            .setAudience(USER_TOKEN_AUDIENCE)
+            .setSubject(input.user_id)
+            .setIssuedAt(now)
+            .setExpirationTime(now + ttl_seconds)
+            .setJti(`token_${randomSecret(16)}`)
+            .sign(private_key);
+        return `ub_${jwt}`;
+    }
+    /** 使用 Federation Key Ring 在服务端本地验证 user_token。 */
+    async verify(token) {
+        const jwt = normalize_user_token(token);
+        let key_id = "";
+        try {
+            const header = decodeProtectedHeader(jwt);
+            if (header.alg !== USER_TOKEN_ALGORITHM) {
+                throw httpError(401, "Invalid user token algorithm");
+            }
+            key_id = typeof header.kid === "string" ? header.kid : "";
+            if (!key_id)
+                throw httpError(401, "Unknown token signing key");
+            const key_record = await this.key_store.get_verification_key(key_id);
+            if (!key_record)
+                throw httpError(401, "Unknown token signing key");
+            const public_jwk = JSON.parse(key_record.public_jwk);
+            const public_key = await importJWK(public_jwk, USER_TOKEN_ALGORITHM);
+            const result = await jwtVerify(jwt, public_key, {
+                algorithms: [USER_TOKEN_ALGORITHM],
+                audience: USER_TOKEN_AUDIENCE,
+                issuer: this.issuer,
+            });
+            return read_user_token_payload(result.payload);
+        }
+        catch (error) {
+            if (is_http_error(error))
+                throw error;
+            throw map_jose_error(error, key_id);
+        }
+    }
+}
+/** 将 token TTL 统一解析为秒并限制最大有效期。 */
+export function parse_user_token_ttl(ttl) {
+    if (ttl === undefined)
+        return DEFAULT_USER_TOKEN_TTL_SECONDS;
+    let seconds;
+    if (typeof ttl === "number" && Number.isFinite(ttl) && ttl > 0) {
+        seconds = ttl;
+    }
+    else if (typeof ttl === "string") {
+        const match = ttl.match(/^(\d+)(s|m|h|d)$/);
+        if (!match)
+            throw new TypeError(`Invalid ttl: ${ttl}`);
+        const value = Number(match[1]);
+        const multiplier = {
+            s: 1,
+            m: 60,
+            h: 60 * 60,
+            d: 24 * 60 * 60,
+        }[match[2]];
+        seconds = value * multiplier;
+    }
+    else {
+        throw new TypeError("ttl must be a positive number of seconds or a string like 1h");
+    }
+    if (!Number.isSafeInteger(seconds) || seconds <= 0) {
+        throw new TypeError("ttl must resolve to a positive integer number of seconds");
+    }
+    if (seconds > MAX_USER_TOKEN_TTL_SECONDS) {
+        throw new TypeError("ttl cannot exceed 30d");
+    }
+    return seconds;
+}
+/** 去掉 Downcity token 前缀并拒绝空 token。 */
+export function normalize_user_token(token) {
+    const value = String(token ?? "").trim();
+    const jwt = value.startsWith("ub_") ? value.slice(3) : value;
+    if (!jwt)
+        throw httpError(401, "Invalid user token");
+    return jwt;
+}
+/** 从已通过 JOSE 校验的 payload 构造公共 user token 载荷。 */
+export function read_user_token_payload(payload) {
+    const user_id = read_required_claim(payload.user_id ?? payload.sub, "user_id");
+    const subject = read_required_claim(payload.sub, "sub");
+    const city_id = read_required_claim(payload.city_id, "city_id");
+    const issuer = read_required_claim(payload.iss, "iss");
+    const token_id = read_required_claim(payload.jti, "jti");
+    if (user_id !== subject)
+        throw httpError(401, "Invalid user token subject");
+    if (typeof payload.iat !== "number" || typeof payload.exp !== "number") {
+        throw httpError(401, "Invalid user token timestamps");
+    }
+    const metadata = payload.metadata;
+    if (metadata !== undefined && (!metadata || typeof metadata !== "object" || Array.isArray(metadata))) {
+        throw httpError(401, "Invalid user token metadata");
+    }
+    return {
+        aud: USER_TOKEN_AUDIENCE,
+        iss: issuer,
+        city_id,
+        user_id,
+        sub: subject,
+        metadata: metadata ?? {},
+        iat: payload.iat,
+        exp: payload.exp,
+        jti: token_id,
+    };
+}
+function validate_sign_input(input) {
+    if (!input || typeof input.city_id !== "string" || !input.city_id.trim()) {
+        throw new TypeError("city_id is required");
+    }
+    if (typeof input.user_id !== "string" || !input.user_id.trim()) {
+        throw new TypeError("user_id is required");
+    }
+}
+function read_required_claim(value, claim) {
+    if (typeof value !== "string" || !value.trim()) {
+        throw httpError(401, `Invalid user token ${claim}`);
+    }
+    return value;
+}
+function is_http_error(error) {
+    return error instanceof Error
+        && typeof error.statusCode === "number";
+}
+function map_jose_error(error, key_id) {
+    const code = error && typeof error === "object"
+        ? String(error.code ?? "")
+        : "";
+    if (code === "ERR_JWT_EXPIRED")
+        return httpError(401, "User token expired");
+    if (code === "ERR_JWT_CLAIM_VALIDATION_FAILED") {
+        return httpError(401, "Invalid user token claims");
+    }
+    if (code === "ERR_JWS_SIGNATURE_VERIFICATION_FAILED") {
+        return httpError(401, "Invalid user token signature");
+    }
+    return httpError(401, key_id ? "Invalid user token" : "Unknown token signing key");
+}
+//# sourceMappingURL=user-token-authority.js.map

package/bin/federation/auth/user-token-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-token-authority.js","sourceRoot":"","sources":["../../../src/federation/auth/user-token-authority.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,OAAO,EACP,qBAAqB,EACrB,SAAS,EACT,SAAS,GAEV,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAsB,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGrF,MAAM,mBAAmB,GAAG,eAAwB,CAAC;AACrD,MAAM,8BAA8B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACxD,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAErD,mCAAmC;AACnC,MAAM,OAAO,kBAAkB;IAEV;IACA;IAFnB,YACmB,SAA6B,EAC7B,MAAc;QADd,cAAS,GAAT,SAAS,CAAoB;QAC7B,WAAM,GAAN,MAAM,CAAQ;IAC9B,CAAC;IAEJ,mCAAmC;IACnC,KAAK,CAAC,IAAI,CAAC,KAA2B;QACpC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAA4B,CAAC;QACnF,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;QAEvE,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;SAC/B,CAAC;aACC,kBAAkB,CAAC;YAClB,GAAG,EAAE,oBAAoB;YACzB,GAAG,EAAE,KAAK;YACV,GAAG,EAAE,WAAW,CAAC,MAAM;SACxB,CAAC;aACD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;aACtB,WAAW,CAAC,mBAAmB,CAAC;aAChC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;aACzB,WAAW,CAAC,GAAG,CAAC;aAChB,iBAAiB,CAAC,GAAG,GAAG,WAAW,CAAC;aACpC,MAAM,CAAC,SAAS,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;aACnC,IAAI,CAAC,WAAW,CAAC,CAAC;QAErB,OAAO,MAAM,GAAG,EAAE,CAAC;IACrB,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,GAAG,KAAK,oBAAoB,EAAE,CAAC;gBACxC,MAAM,SAAS,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,MAAM;gBAAE,MAAM,SAAS,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;YAE/D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;YACrE,IAAI,CAAC,UAAU;gBAAE,MAAM,SAAS,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;YACnE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAA4B,CAAC;YAChF,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE;gBAC9C,UAAU,EAAE,CAAC,oBAAoB,CAAC;gBAClC,QAAQ,EAAE,mBAAmB;gBAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,OAAO,uBAAuB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,aAAa,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YACtC,MAAM,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;CACF;AAED,kCAAkC;AAClC,MAAM,UAAU,oBAAoB,CAAC,GAAqB;IACxD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,8BAA8B,CAAC;IAE7D,IAAI,OAAe,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAC/D,OAAO,GAAG,GAAG,CAAC;IAChB,CAAC;SAAM,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,UAAU,GAAG;YACjB,CAAC,EAAE,CAAC;YACJ,CAAC,EAAE,EAAE;YACL,CAAC,EAAE,EAAE,GAAG,EAAE;YACV,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;SAChB,CAAC,KAAK,CAAC,CAAC,CAA0B,CAAC,CAAC;QACrC,OAAO,GAAG,KAAK,GAAG,UAAU,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,SAAS,CAAC,0DAA0D,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,OAAO,GAAG,0BAA0B,EAAE,CAAC;QACzC,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,IAAI,CAAC,GAAG;QAAE,MAAM,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACrD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,uBAAuB,CAAC,OAAmB;IACzD,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,OAAO,KAAK,OAAO;QAAE,MAAM,SAAS,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAC5E,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACvE,MAAM,SAAS,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACrG,MAAM,SAAS,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IACtD,CAAC;IACD,OAAO;QACL,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,MAAM;QACX,OAAO;QACP,OAAO;QACP,GAAG,EAAE,OAAO;QACZ,QAAQ,EAAG,QAAgD,IAAI,EAAE;QACjE,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,QAAQ;KACd,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAA2B;IACtD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/D,MAAM,IAAI,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,KAAa;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,SAAS,CAAC,GAAG,EAAE,sBAAsB,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK;WACxB,OAAQ,KAAkC,CAAC,UAAU,KAAK,QAAQ,CAAC;AAC1E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,MAAc;IACpD,MAAM,IAAI,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC7C,CAAC,CAAC,MAAM,CAAE,KAA4B,CAAC,IAAI,IAAI,EAAE,CAAC;QAClD,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,IAAI,KAAK,iBAAiB;QAAE,OAAO,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC5E,IAAI,IAAI,KAAK,iCAAiC,EAAE,CAAC;QAC/C,OAAO,SAAS,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,IAAI,KAAK,uCAAuC,EAAE,CAAC;QACrD,OAAO,SAAS,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;AACrF,CAAC"}

package/bin/federation/federation-init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"federation-init.d.ts","sourceRoot":"","sources":["../../src/federation/federation-init.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAqC,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE7F,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG5C,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAEzD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,qBAAqB;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,qBAAqB;IACrB,MAAM,EAAE;QAAE,OAAO,EAAE,QAAQ,CAAA;KAAE,CAAC;IAC9B,iBAAiB;IACjB,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACrC,iBAAiB;IACjB,UAAU,EAAE,SAAS,CAAC;IACtB,UAAU;IACV,aAAa,EAAE,aAAa,CAAC;CAC9B;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,iBAAiB;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY;IACZ,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,oBAAoB;IACpB,aAAa,EAAE,MAAM,OAAO,CAAC;QAAE,IAAI,EAAE;YAAE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;gBAAE,OAAO,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,GAAG,SAAS,CAAC,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;IACtH,8BAA8B;IAC9B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAyD/B"}
+{"version":3,"file":"federation-init.d.ts","sourceRoot":"","sources":["../../src/federation/federation-init.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAqC,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE7F,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAKxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAK5C,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAEzD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,qBAAqB;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,qBAAqB;IACrB,MAAM,EAAE;QAAE,OAAO,EAAE,QAAQ,CAAA;KAAE,CAAC;IAC9B,iBAAiB;IACjB,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACrC,iBAAiB;IACjB,UAAU,EAAE,SAAS,CAAC;IACtB,UAAU;IACV,aAAa,EAAE,aAAa,CAAC;CAC9B;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,iBAAiB;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY;IACZ,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,oBAAoB;IACpB,aAAa,EAAE,MAAM,OAAO,CAAC;QAAE,IAAI,EAAE;YAAE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;gBAAE,OAAO,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,GAAG,SAAS,CAAC,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;IACtH,8BAA8B;IAC9B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAsF/B"}