@endge/core 1.2.13 → 2.0.0

package/dist/model/modules/security/endge-auth.d.ts

@@ -1,29 +1,39 @@
 import { EndgeBootContext } from '../../../domain/types/kernel/bootstrap.types';
+import { AuthProfileSchema, OidcBrowserSessionOptions } from '../../../domain/types/auth/auth-profile.types';
 import { EndgeModule } from '../../../domain/entities/endge/EndgeModule';
 import { AuthAdapterRegistry } from './auth/AuthAdapterRegistry';
 import { AuthProfileRegistry } from './auth/AuthProfileRegistry';
 import { AuthRequestResolver } from './auth/AuthRequestResolver';
 import { AuthSessionManager } from './auth/AuthSessionManager';
+import { OidcBrowserSession_Service } from '../../services/auth/OidcBrowserSession_Service';
+import { AuthInteractionRequiredError } from './auth/AuthInteractionRequiredError';
+export type AuthInteractionRequiredListener = (error: AuthInteractionRequiredError) => void;
 /** Единый lifecycle owner runtime auth profile sessions и request authentication. */
 export declare class EndgeAuth extends EndgeModule {
     readonly adapters: AuthAdapterRegistry;
     readonly profiles: AuthProfileRegistry;
     readonly session: AuthSessionManager;
     readonly requests: AuthRequestResolver;
-    private _credentialResolver;
     private _signal;
+    private _storageNamespace;
     private _abortController;
     private _detachHostAbort;
     private _unregisterDiagnosticsContext;
     private readonly _store;
+    private readonly _interactionRequiredListeners;
     /** Собирает auth subsystem и регистрирует встроенные adapters один раз. */
     constructor();
-    /** Подключает host credential port и безопасные context providers. */
+    /** Subscribes a host application to requests that require an interactive OIDC flow. */
+    onInteractionRequired(listener: AuthInteractionRequiredListener): () => void;
+    /** Подключает storage namespace и безопасные context providers. */
     setup(ctx: EndgeBootContext): void;
     /** Валидирует Domain profiles и восстанавливает session default runtime profile. */
     build(): void;
     /** Сбрасывает runtime state, не удаляя persisted browser session. */
     reset(): void;
+    /** Создаёт OIDC browser source из resolved persisted profile. */
+    createOidcSessionSource(profileInput: AuthProfileSchema | string, options: Pick<OidcBrowserSessionOptions, 'redirectUri' | 'popupRedirectUri' | 'postLogoutRedirectUri' | 'flow'>): OidcBrowserSession_Service;
     private _resolvePublicValue;
     private _diagnosticsAttributes;
+    private _publishInteractionRequired;
 }

package/dist/model/services/auth/OidcBrowserSession_Service.d.ts

@@ -0,0 +1,26 @@
+import { AuthSessionSource, AuthSessionSourceResolveOptions, AuthTokenSet, OidcBrowserSessionOptions } from '../../../domain/types/auth/auth-profile.types';
+/** Общий browser OIDC runtime для popup и redirect Authorization Code + PKCE flows. */
+export declare class OidcBrowserSession_Service implements AuthSessionSource {
+    readonly options: OidcBrowserSessionOptions;
+    private readonly _userStore;
+    private readonly _manager;
+    constructor(options: OidcBrowserSessionOptions);
+    /** Возвращает сохранённого пользователя без запуска интерактивного flow. */
+    hasSession(): Promise<boolean>;
+    /** Открывает внешний OIDC login в popup и сохраняет полученную session. */
+    loginPopup(): Promise<AuthTokenSet>;
+    /** Завершает callback в отдельном popup без загрузки Domain. */
+    static completeStoredPopupCallback(url?: string): Promise<void>;
+    /** Перенаправляет текущую вкладку на внешний OIDC login. */
+    loginRedirect(): Promise<never>;
+    /** Завершает redirect callback и сохраняет session. */
+    completeRedirectCallback(url?: string): Promise<AuthTokenSet>;
+    /** Завершает popup callback; результат передаётся opener через oidc-client-ts. */
+    completePopupCallback(url?: string): Promise<void>;
+    /** Возвращает актуальную session, используя refresh token только при необходимости. */
+    resolveToken(options: AuthSessionSourceResolveOptions): Promise<AuthTokenSet | null>;
+    /** Возвращает claims и при наличии endpoint дополняет их OIDC userinfo. */
+    loadUserInfo(): Promise<Record<string, unknown> | null>;
+    /** Завершает provider session выбранным host flow и всегда удаляет local user. */
+    logout(): Promise<void>;
+}

package/dist/model/services/compiler/component-sfc/component-sfc-interactions.d.ts

@@ -0,0 +1,12 @@
+import { RComponentDependencies, RComponentDiagnostic } from '../../../../domain/types/component/component-core.types';
+import { RComponentSFC_AST_Attribute } from '../../../../domain/types/component/sfc/ast.types';
+import { RComponentSFC_IR_EventModifier, RComponentSFC_IR_InteractionGroup } from '../../../../domain/types/component/sfc/ir.types';
+import { ComponentSFCPortManifest } from '../../../../domain/types/component/sfc/ports.types';
+export interface ComponentSFCInteractionCompileContext {
+    props: string[];
+    locals: string[];
+}
+/** Detects statically invalid passive/prevent combinations in shared trigger descriptors. */
+export declare function hasComponentSFCPassivePreventConflict(source: string, suffixes?: readonly RComponentSFC_IR_EventModifier[]): boolean;
+/** Compiles one source-owned `:on` annotation into renderer-neutral rules. */
+export declare function compileComponentSFCInteractionAnnotation(attribute: RComponentSFC_AST_Attribute, manifest: ComponentSFCPortManifest | null, context: ComponentSFCInteractionCompileContext, dependencies: RComponentDependencies, diagnostics: RComponentDiagnostic[]): RComponentSFC_IR_InteractionGroup | null;

package/dist/test/component-sfc-interactions.bench.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/component-sfc-interactions.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/security/auth-profile-serializer.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/security/auth-test-helpers.d.ts

@@ -10,4 +10,3 @@ export declare class MemoryStorage implements Storage {
 }
 export declare function authProfile(overrides?: Partial<AuthProfileSchema>): AuthProfileSchema;
 export declare function tokenSet(overrides?: Partial<AuthTokenSet>): AuthTokenSet;
-export declare function jwt(claims: Record<string, unknown>): string;

package/dist/test/security/oidc-browser-session.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/tools/component-sfc-edit-trigger.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tools/component-sfc-edit-trigger.d.ts

@@ -0,0 +1,11 @@
+import { ComponentSFCInteractionTrigger, ComponentSFCInteractionTriggerEvent, ComponentSFCInteractionTriggerPlatform } from '../domain/types/component/sfc/ir.types';
+/** Normalizes the shared `edit-on` / `on` trigger value. */
+export declare function normalizeComponentSFCInteractionTriggers(value: unknown): ComponentSFCInteractionTrigger[];
+/** Проверяет один нормализованный trigger без зависимости от DOM и конкретного renderer-а. */
+export declare function matchesComponentSFCInteractionTrigger(trigger: ComponentSFCInteractionTrigger, event: ComponentSFCInteractionTriggerEvent, platform: ComponentSFCInteractionTriggerPlatform): boolean;
+/** Приводит browser platform label к стабильным значениям edit-on контракта. */
+export declare function resolveComponentSFCInteractionTriggerPlatform(value: unknown): ComponentSFCInteractionTriggerPlatform;
+/** Backward-compatible editable wrappers. */
+export declare const normalizeComponentSFCEditTriggers: typeof normalizeComponentSFCInteractionTriggers;
+export declare const matchesComponentSFCEditTrigger: typeof matchesComponentSFCInteractionTrigger;
+export declare const resolveComponentSFCEditTriggerPlatform: typeof resolveComponentSFCInteractionTriggerPlatform;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@endge/core",
-  "version": "1.2.13",
+  "version": "2.0.0",
   "private": false,
   "license": "Apache-2.0",
   "type": "module",
@@ -23,12 +23,13 @@
     "build": "vite build",
     "preview": "vite preview",
     "test": "vitest",
+    "bench:interactions": "vitest bench src/test/component-sfc-interactions.bench.ts",
     "typecheck": "vue-tsc --noEmit"
   },
   "dependencies": {
     "@babel/parser": "^7.27.2",
     "@babel/types": "^7.27.1",
-    "@endge/utils": "^0.24.8",
+    "@endge/utils": "^0.24.9",
     "@vue/compiler-dom": "^3.5.24",
     "@vue/compiler-sfc": "^3.5.24",
     "axios": "^1.13.2",
@@ -36,6 +37,7 @@
     "graphql": "^16.12.0",
     "lodash": "^4.17.21",
     "mitt": "^3.0.1",
+    "oidc-client-ts": "^3.5.0",
     "postcss": "^8.5.6",
     "postcss-scss": "^4.0.9",
     "postcss-selector-parser": "^7.1.0",
@@ -44,8 +46,8 @@
     "yaml": "^2.8.1"
   },
   "peerDependencies": {
-    "@endge/raph": "^3.0.6",
-    "@endge/utils": "^0.24.8",
+    "@endge/raph": "^3.0.7",
+    "@endge/utils": "^0.24.9",
     "@primevue/themes": "^4.0.0-rc.1",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.1",

package/dist/model/modules/security/auth/adapters/KeycloakAuthAdapter.d.ts

@@ -1,25 +0,0 @@
-import { AuthAdapterContext, AuthProfileAdapter, AuthProfileSchema, AuthTokenSet } from '../../../../../domain/types/auth/auth-profile.types';
-import { KeycloakAuthTransportFactory } from '../../../../../domain/types/auth/auth-runtime.types';
-/** Keycloak password-grant adapter без владения storage или application state. */
-export declare class KeycloakAuthAdapter implements AuthProfileAdapter {
-    private readonly _resolvePublicValue;
-    private readonly _createTransport;
-    private readonly _now;
-    readonly id = "keycloak";
-    readonly label = "Keycloak";
-    constructor(_resolvePublicValue: (raw: unknown) => string, _createTransport?: KeycloakAuthTransportFactory, _now?: () => number);
-    /** Проверяет строгий persisted contract Keycloak profile. */
-    validate(profile: AuthProfileSchema): void;
-    /** Выполняет interactive или service password grant. */
-    authenticate(context: AuthAdapterContext): Promise<AuthTokenSet>;
-    /** Обновляет Keycloak session. */
-    refresh(context: AuthAdapterContext): Promise<AuthTokenSet>;
-    /** Завершает Keycloak session при наличии refresh token. */
-    logout(context: AuthAdapterContext): Promise<void>;
-    /** Загружает OIDC userinfo. */
-    loadUserInfo(context: AuthAdapterContext): Promise<Record<string, unknown> | null>;
-    /** Собирает resolved public config без чтения credential material. */
-    private _config;
-    private _transport;
-    private _requireToken;
-}

package/dist/model/services/auth/KeycloakAuthClient.d.ts

@@ -1,21 +0,0 @@
-import { AuthTokenSet } from '../../../domain/types/auth/auth-profile.types';
-import { KeycloakAuthTransport, KeycloakTokenResponse, KeycloakTransportConfig } from '../../../domain/types/auth/auth-runtime.types';
-import { AxiosInstance } from 'axios';
-/** Преобразует transport response Keycloak в runtime token set. */
-export declare function mapKeycloakTokenResponse(data: KeycloakTokenResponse, now?: number, previous?: AuthTokenSet): AuthTokenSet;
-/** Axios transport для стандартных Keycloak OIDC endpoints. */
-export declare class KeycloakAuthClient implements KeycloakAuthTransport {
-    private readonly _http;
-    private readonly _tokenPath;
-    private readonly _logoutPath;
-    private readonly _userinfoPath;
-    constructor(config: KeycloakTransportConfig, http?: AxiosInstance);
-    /** Выполняет password grant. */
-    passwordGrant(payload: Record<string, string>, signal?: AbortSignal): Promise<KeycloakTokenResponse>;
-    /** Обновляет access token через refresh token. */
-    refreshGrant(payload: Record<string, string>, signal?: AbortSignal): Promise<KeycloakTokenResponse>;
-    /** Завершает Keycloak session. */
-    logout(payload: Record<string, string>, signal?: AbortSignal): Promise<void>;
-    /** Загружает OIDC userinfo текущей session. */
-    getUserInfo(accessToken: string, signal?: AbortSignal): Promise<Record<string, unknown>>;
-}