@farthershore/cli 0.3.8 → 0.3.10

package/node_modules/@farther-shore/shared-types/dist/scope-matcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-matcher.js","sourceRoot":"","sources":["../src/scope-matcher.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,uEAAuE;AACvE,8EAA8E;AAC9E,EAAE;AACF,+DAA+D;AAC/D,EAAE;AACF,6BAA6B;AAC7B,EAAE;AACF,SAAS;AACT,EAAE;AACF,kDAAkD;AAClD,kCAAkC;AAClC,mDAAmD;AACnD,2BAA2B;AAC3B,EAAE;AACF,uEAAuE;AACvE,gDAAgD;AAChD,2EAA2E;AAC3E,EAAE;AACF,YAAY;AACZ,EAAE;AACF,8CAA8C;AAC9C,wEAAwE;AACxE,wDAAwD;AACxD,yEAAyE;AACzE,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,sEAAsE;AACtE,oEAAoE;AACpE,oBAAoB;AACpB,EAAE;AACF,uEAAuE;AACvE,qEAAqE;AACrE,sEAAsE;AACtE,0EAA0E;AAC1E,8EAA8E;AAS9E,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAEzC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,8BAA8B;IACzD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,EAAE,IAAI,EAAE,IAAiB,EAAE,eAAe,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAClE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAAC,OAAe;IAC7C,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC;IAEnC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACjD,GAAG,IAAI,IAAI,CAAC;YACZ,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC9B,GAAG,IAAI,OAAO,CAAC;YACf,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAW,CAAC;YAChC,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBACjC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,GAAG,IAAI,EAAE,CAAC;YACZ,CAAC;YACD,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;IACH,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;AAChC,CAAC;AAOD;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CACxB,KAAkB,EAClB,OAAqB;IAErB,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IACnE,MAAM,EAAE,GAAG,sBAAsB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACzD,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAC3B,MAA4C,EAC5C,OAAqB;IAErB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,WAAW;IAC5D,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS;QAC9B,IAAI,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/node_modules/@farther-shore/shared-types/dist/service-auth.d.ts

@@ -0,0 +1,70 @@
+export declare const SERVICE_JWT_ISSUER: "farthershore.internal";
+export declare const SERVICE_JWT_ALGORITHM: "EdDSA";
+export declare const SERVICE_JWT_CRYPTO_ALGORITHM: "Ed25519";
+export declare const SERVICE_JWT_DEFAULT_LIFETIME_SECONDS = 60;
+export declare const SERVICE_JWT_MAX_LIFETIME_SECONDS = 120;
+export declare const SERVICE_JWT_CLOCK_SKEW_SECONDS = 5;
+export declare const SERVICE_NAMES: readonly ["gateway", "core", "usage-consumer", "web-ui", "fs-admin"];
+export type ServiceName = (typeof SERVICE_NAMES)[number];
+export declare const SERVICE_JWT_SCOPE: {
+    readonly gatewayProjectRead: "gateway:project:read";
+    readonly usageWrite: "usage:write";
+    readonly authzDeniedWrite: "authz-denied:write";
+    readonly reservationAuthorize: "reservation:authorize";
+    readonly reservationFinalize: "reservation:finalize";
+    readonly internalCronRun: "internal:cron:run";
+    readonly personaManage: "persona:manage";
+};
+export type ServiceJwtScope = (typeof SERVICE_JWT_SCOPE)[keyof typeof SERVICE_JWT_SCOPE];
+export declare const SERVICE_JWT_SCOPES: ServiceJwtScope[];
+export type ServiceJwtClaims = {
+    iss: typeof SERVICE_JWT_ISSUER;
+    sub: ServiceName;
+    aud: ServiceName;
+    scope: string[];
+    iat: number;
+    exp: number;
+    jti: string;
+};
+export type ServiceJwtHeader = {
+    alg: typeof SERVICE_JWT_ALGORITHM;
+    typ: "JWT";
+    kid: string;
+};
+export type ServiceJwtPublicKey = {
+    service: ServiceName;
+    alg?: typeof SERVICE_JWT_ALGORITHM;
+    publicJwk: JsonWebKey;
+};
+export type SignServiceJwtInput = {
+    privateJwk: JsonWebKey;
+    kid: string;
+    sub: ServiceName;
+    aud: ServiceName;
+    scope: string[];
+    lifetimeSeconds?: number;
+    now?: Date | number;
+    jti?: string;
+};
+export type VerifyServiceJwtInput = {
+    token: string;
+    audience: ServiceName;
+    publicKeysByKid: Record<string, ServiceJwtPublicKey>;
+    allowedServices: ServiceName[];
+    requiredScopes: string[];
+    now?: Date | number;
+    issuer?: typeof SERVICE_JWT_ISSUER;
+    clockSkewSeconds?: number;
+    maxLifetimeSeconds?: number;
+};
+export declare class ServiceJwtError extends Error {
+    readonly code: "malformed" | "invalid_header" | "unknown_key" | "bad_signature" | "invalid_claims" | "expired" | "forbidden";
+    constructor(message: string, code: "malformed" | "invalid_header" | "unknown_key" | "bad_signature" | "invalid_claims" | "expired" | "forbidden");
+}
+export declare function signServiceJwt(input: SignServiceJwtInput): Promise<string>;
+export declare function verifyServiceJwt(input: VerifyServiceJwtInput): Promise<ServiceJwtClaims>;
+export declare function generateServiceJwtKeyPair(): Promise<{
+    privateJwk: JsonWebKey;
+    publicJwk: JsonWebKey;
+}>;
+//# sourceMappingURL=service-auth.d.ts.map

package/node_modules/@farther-shore/shared-types/dist/service-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-auth.d.ts","sourceRoot":"","sources":["../src/service-auth.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kBAAkB,EAAG,uBAAgC,CAAC;AACnE,eAAO,MAAM,qBAAqB,EAAG,OAAgB,CAAC;AACtD,eAAO,MAAM,4BAA4B,EAAG,SAAkB,CAAC;AAC/D,eAAO,MAAM,oCAAoC,KAAK,CAAC;AACvD,eAAO,MAAM,gCAAgC,MAAM,CAAC;AACpD,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAEhD,eAAO,MAAM,aAAa,sEAMhB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD,eAAO,MAAM,iBAAiB;;;;;;;;CAQpB,CAAC;AAEX,MAAM,MAAM,eAAe,GACzB,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE7D,eAAO,MAAM,kBAAkB,EAE1B,eAAe,EAAE,CAAC;AAEvB,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,OAAO,kBAAkB,CAAC;IAC/B,GAAG,EAAE,WAAW,CAAC;IACjB,GAAG,EAAE,WAAW,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,OAAO,qBAAqB,CAAC;IAClC,GAAG,EAAE,KAAK,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,WAAW,CAAC;IACrB,GAAG,CAAC,EAAE,OAAO,qBAAqB,CAAC;IACnC,SAAS,EAAE,UAAU,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,UAAU,EAAE,UAAU,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,WAAW,CAAC;IACjB,GAAG,EAAE,WAAW,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,WAAW,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACrD,eAAe,EAAE,WAAW,EAAE,CAAC;IAC/B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,GAAG,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,kBAAkB,CAAC;IACnC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,qBAAa,eAAgB,SAAQ,KAAK;aAGtB,IAAI,EAChB,WAAW,GACX,gBAAgB,GAChB,aAAa,GACb,eAAe,GACf,gBAAgB,GAChB,SAAS,GACT,WAAW;gBARf,OAAO,EAAE,MAAM,EACC,IAAI,EAChB,WAAW,GACX,gBAAgB,GAChB,aAAa,GACb,eAAe,GACf,gBAAgB,GAChB,SAAS,GACT,WAAW;CAKlB;AAKD,wBAAsB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CA8ChF;AAED,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,gBAAgB,CAAC,CA+C3B;AAED,wBAAsB,yBAAyB,IAAI,OAAO,CAAC;IACzD,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,UAAU,CAAC;CACvB,CAAC,CAYD"}

package/node_modules/@farther-shore/shared-types/dist/service-auth.js

@@ -0,0 +1,253 @@
+export const SERVICE_JWT_ISSUER = "farthershore.internal";
+export const SERVICE_JWT_ALGORITHM = "EdDSA";
+export const SERVICE_JWT_CRYPTO_ALGORITHM = "Ed25519";
+export const SERVICE_JWT_DEFAULT_LIFETIME_SECONDS = 60;
+export const SERVICE_JWT_MAX_LIFETIME_SECONDS = 120;
+export const SERVICE_JWT_CLOCK_SKEW_SECONDS = 5;
+export const SERVICE_NAMES = [
+    "gateway",
+    "core",
+    "usage-consumer",
+    "web-ui",
+    "fs-admin",
+];
+export const SERVICE_JWT_SCOPE = {
+    gatewayProjectRead: "gateway:project:read",
+    usageWrite: "usage:write",
+    authzDeniedWrite: "authz-denied:write",
+    reservationAuthorize: "reservation:authorize",
+    reservationFinalize: "reservation:finalize",
+    internalCronRun: "internal:cron:run",
+    personaManage: "persona:manage",
+};
+export const SERVICE_JWT_SCOPES = Object.values(SERVICE_JWT_SCOPE);
+export class ServiceJwtError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = "ServiceJwtError";
+    }
+}
+const importedPrivateKeys = new WeakMap();
+const importedPublicKeys = new WeakMap();
+export async function signServiceJwt(input) {
+    const lifetimeSeconds = input.lifetimeSeconds ?? SERVICE_JWT_DEFAULT_LIFETIME_SECONDS;
+    if (!Number.isInteger(lifetimeSeconds) ||
+        lifetimeSeconds <= 0 ||
+        lifetimeSeconds > SERVICE_JWT_MAX_LIFETIME_SECONDS) {
+        throw new ServiceJwtError("Invalid service JWT lifetime", "invalid_claims");
+    }
+    if (!input.kid.trim()) {
+        throw new ServiceJwtError("Service JWT kid is required", "invalid_header");
+    }
+    const issuedAt = toEpochSeconds(input.now ?? Date.now());
+    const header = {
+        alg: SERVICE_JWT_ALGORITHM,
+        typ: "JWT",
+        kid: input.kid,
+    };
+    const claims = {
+        iss: SERVICE_JWT_ISSUER,
+        sub: input.sub,
+        aud: input.aud,
+        scope: [...input.scope],
+        iat: issuedAt,
+        exp: issuedAt + lifetimeSeconds,
+        jti: input.jti ?? randomJti(),
+    };
+    validateServiceName(claims.sub, "sub");
+    validateServiceName(claims.aud, "aud");
+    validateScopes(claims.scope);
+    const encodedHeader = encodeJson(header);
+    const encodedPayload = encodeJson(claims);
+    const signingInput = `${encodedHeader}.${encodedPayload}`;
+    const key = await importPrivateKey(input.privateJwk);
+    const signature = await crypto.subtle.sign(SERVICE_JWT_CRYPTO_ALGORITHM, key, new TextEncoder().encode(signingInput));
+    return `${signingInput}.${base64UrlEncode(new Uint8Array(signature))}`;
+}
+export async function verifyServiceJwt(input) {
+    const parts = input.token.split(".");
+    if (parts.length !== 3 || parts.some((part) => part.length === 0)) {
+        throw new ServiceJwtError("Malformed service JWT", "malformed");
+    }
+    const [encodedHeader, encodedPayload, encodedSignature] = parts;
+    const header = parseHeader(encodedHeader);
+    const registeredKey = input.publicKeysByKid[header.kid];
+    if (!registeredKey) {
+        throw new ServiceJwtError("Unknown service JWT key", "unknown_key");
+    }
+    if (registeredKey.alg && registeredKey.alg !== SERVICE_JWT_ALGORITHM) {
+        throw new ServiceJwtError("Unsupported service JWT key alg", "unknown_key");
+    }
+    const key = await importPublicKey(registeredKey.publicJwk);
+    const signingInput = `${encodedHeader}.${encodedPayload}`;
+    const verified = await crypto.subtle.verify(SERVICE_JWT_CRYPTO_ALGORITHM, key, base64UrlDecode(encodedSignature), new TextEncoder().encode(signingInput));
+    if (!verified) {
+        throw new ServiceJwtError("Invalid service JWT signature", "bad_signature");
+    }
+    const claims = parseClaims(encodedPayload);
+    validateClaims(claims, {
+        audience: input.audience,
+        allowedServices: input.allowedServices,
+        requiredScopes: input.requiredScopes,
+        expectedService: registeredKey.service,
+        issuer: input.issuer ?? SERVICE_JWT_ISSUER,
+        now: toEpochSeconds(input.now ?? Date.now()),
+        clockSkewSeconds: input.clockSkewSeconds ?? SERVICE_JWT_CLOCK_SKEW_SECONDS,
+        maxLifetimeSeconds: input.maxLifetimeSeconds ?? SERVICE_JWT_MAX_LIFETIME_SECONDS,
+    });
+    return claims;
+}
+export async function generateServiceJwtKeyPair() {
+    const pair = await crypto.subtle.generateKey({
+        name: SERVICE_JWT_CRYPTO_ALGORITHM,
+    }, true, ["sign", "verify"]);
+    return {
+        privateJwk: await crypto.subtle.exportKey("jwk", pair.privateKey),
+        publicJwk: await crypto.subtle.exportKey("jwk", pair.publicKey),
+    };
+}
+function parseHeader(encodedHeader) {
+    const header = parseJsonObject(encodedHeader, "invalid_header");
+    if (header.alg !== SERVICE_JWT_ALGORITHM ||
+        header.typ !== "JWT" ||
+        typeof header.kid !== "string" ||
+        header.kid.length === 0) {
+        throw new ServiceJwtError("Invalid service JWT header", "invalid_header");
+    }
+    return header;
+}
+function parseClaims(encodedPayload) {
+    const payload = parseJsonObject(encodedPayload, "invalid_claims");
+    if (payload.iss !== SERVICE_JWT_ISSUER ||
+        typeof payload.sub !== "string" ||
+        typeof payload.aud !== "string" ||
+        !Array.isArray(payload.scope) ||
+        typeof payload.iat !== "number" ||
+        typeof payload.exp !== "number" ||
+        typeof payload.jti !== "string") {
+        throw new ServiceJwtError("Invalid service JWT claims", "invalid_claims");
+    }
+    return payload;
+}
+function validateClaims(claims, opts) {
+    validateServiceName(claims.sub, "sub");
+    validateServiceName(claims.aud, "aud");
+    validateScopes(claims.scope);
+    if (claims.iss !== opts.issuer) {
+        throw new ServiceJwtError("Invalid service JWT issuer", "invalid_claims");
+    }
+    if (claims.sub !== opts.expectedService) {
+        throw new ServiceJwtError("Service JWT key subject mismatch", "forbidden");
+    }
+    if (!opts.allowedServices.includes(claims.sub)) {
+        throw new ServiceJwtError("Service JWT service is not allowed", "forbidden");
+    }
+    if (claims.aud !== opts.audience) {
+        throw new ServiceJwtError("Invalid service JWT audience", "forbidden");
+    }
+    if (claims.iat > opts.now + opts.clockSkewSeconds) {
+        throw new ServiceJwtError("Service JWT issued in the future", "invalid_claims");
+    }
+    if (claims.exp + opts.clockSkewSeconds < opts.now) {
+        throw new ServiceJwtError("Service JWT expired", "expired");
+    }
+    if (claims.exp <= claims.iat) {
+        throw new ServiceJwtError("Invalid service JWT time window", "invalid_claims");
+    }
+    if (claims.exp - claims.iat > opts.maxLifetimeSeconds) {
+        throw new ServiceJwtError("Service JWT lifetime is too long", "invalid_claims");
+    }
+    if (claims.jti.trim().length === 0) {
+        throw new ServiceJwtError("Service JWT jti is required", "invalid_claims");
+    }
+    const grantedScopes = new Set(claims.scope);
+    for (const requiredScope of opts.requiredScopes) {
+        if (!grantedScopes.has(requiredScope)) {
+            throw new ServiceJwtError("Missing service JWT scope", "forbidden");
+        }
+    }
+}
+function validateServiceName(value, claimName) {
+    if (!SERVICE_NAMES.includes(value)) {
+        throw new ServiceJwtError(`Invalid service JWT ${claimName}`, "invalid_claims");
+    }
+}
+function validateScopes(scopes) {
+    if (!scopes.every((scope) => typeof scope === "string" && scope.length > 0)) {
+        throw new ServiceJwtError("Invalid service JWT scope", "invalid_claims");
+    }
+}
+function parseJsonObject(encoded, errorCode) {
+    try {
+        const parsed = JSON.parse(new TextDecoder().decode(base64UrlDecode(encoded)));
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+            throw new Error("not an object");
+        }
+        return parsed;
+    }
+    catch {
+        throw new ServiceJwtError("Invalid service JWT JSON", errorCode);
+    }
+}
+async function importPrivateKey(jwk) {
+    let cached = importedPrivateKeys.get(jwk);
+    if (!cached) {
+        cached = crypto.subtle.importKey("jwk", jwk, SERVICE_JWT_CRYPTO_ALGORITHM, false, ["sign"]);
+        importedPrivateKeys.set(jwk, cached);
+    }
+    return cached;
+}
+async function importPublicKey(jwk) {
+    let cached = importedPublicKeys.get(jwk);
+    if (!cached) {
+        cached = crypto.subtle.importKey("jwk", jwk, SERVICE_JWT_CRYPTO_ALGORITHM, false, ["verify"]);
+        importedPublicKeys.set(jwk, cached);
+    }
+    return cached;
+}
+function encodeJson(value) {
+    return base64UrlEncode(new TextEncoder().encode(JSON.stringify(value)));
+}
+function base64UrlEncode(bytes) {
+    let binary = "";
+    for (const byte of bytes) {
+        binary += String.fromCharCode(byte);
+    }
+    return btoa(binary)
+        .replaceAll("+", "-")
+        .replaceAll("/", "_")
+        .replaceAll("=", "");
+}
+function base64UrlDecode(value) {
+    const base64 = value.replaceAll("-", "+").replaceAll("_", "/");
+    const padded = base64.padEnd(base64.length + ((4 - (base64.length % 4)) % 4), "=");
+    try {
+        const binary = atob(padded);
+        const bytes = new Uint8Array(binary.length);
+        for (let i = 0; i < binary.length; i += 1) {
+            bytes[i] = binary.charCodeAt(i);
+        }
+        return bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
+    }
+    catch {
+        throw new ServiceJwtError("Invalid service JWT base64", "malformed");
+    }
+}
+function toEpochSeconds(value) {
+    const milliseconds = value instanceof Date ? value.getTime() : value;
+    return Math.floor(milliseconds / 1000);
+}
+function randomJti() {
+    if (typeof crypto.randomUUID === "function") {
+        return crypto.randomUUID();
+    }
+    const bytes = new Uint8Array(16);
+    crypto.getRandomValues(bytes);
+    bytes[6] = (bytes[6] & 0x0f) | 0x40;
+    bytes[8] = (bytes[8] & 0x3f) | 0x80;
+    const hex = Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0"));
+    return `${hex.slice(0, 4).join("")}-${hex.slice(4, 6).join("")}-${hex.slice(6, 8).join("")}-${hex.slice(8, 10).join("")}-${hex.slice(10).join("")}`;
+}
+//# sourceMappingURL=service-auth.js.map

package/node_modules/@farther-shore/shared-types/dist/service-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-auth.js","sourceRoot":"","sources":["../src/service-auth.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG,uBAAgC,CAAC;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAgB,CAAC;AACtD,MAAM,CAAC,MAAM,4BAA4B,GAAG,SAAkB,CAAC;AAC/D,MAAM,CAAC,MAAM,oCAAoC,GAAG,EAAE,CAAC;AACvD,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AACpD,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAEhD,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,SAAS;IACT,MAAM;IACN,gBAAgB;IAChB,QAAQ;IACR,UAAU;CACF,CAAC;AAIX,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,kBAAkB,EAAE,sBAAsB;IAC1C,UAAU,EAAE,aAAa;IACzB,gBAAgB,EAAE,oBAAoB;IACtC,oBAAoB,EAAE,uBAAuB;IAC7C,mBAAmB,EAAE,sBAAsB;IAC3C,eAAe,EAAE,mBAAmB;IACpC,aAAa,EAAE,gBAAgB;CACvB,CAAC;AAKX,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAC7C,iBAAiB,CACG,CAAC;AA+CvB,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAGtB;IAFlB,YACE,OAAe,EACC,IAOD;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QATC,SAAI,GAAJ,IAAI,CAOL;QAGf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAAkC,CAAC;AAC1E,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAAkC,CAAC;AAEzE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAA0B;IAC7D,MAAM,eAAe,GACnB,KAAK,CAAC,eAAe,IAAI,oCAAoC,CAAC;IAChE,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC;QAClC,eAAe,IAAI,CAAC;QACpB,eAAe,GAAG,gCAAgC,EAClD,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,8BAA8B,EAAE,gBAAgB,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,gBAAgB,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACzD,MAAM,MAAM,GAAqB;QAC/B,GAAG,EAAE,qBAAqB;QAC1B,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,KAAK,CAAC,GAAG;KACf,CAAC;IACF,MAAM,MAAM,GAAqB;QAC/B,GAAG,EAAE,kBAAkB;QACvB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QACvB,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,QAAQ,GAAG,eAAe;QAC/B,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,SAAS,EAAE;KAC9B,CAAC;IAEF,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE7B,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,GAAG,aAAa,IAAI,cAAc,EAAE,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACxC,4BAA4B,EAC5B,GAAG,EACH,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CACvC,CAAC;IAEF,OAAO,GAAG,YAAY,IAAI,eAAe,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAA4B;IAE5B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,eAAe,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,CAAC,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,GAAG,KAIzD,CAAC;IACF,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,eAAe,CAAC,yBAAyB,EAAE,aAAa,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,aAAa,CAAC,GAAG,IAAI,aAAa,CAAC,GAAG,KAAK,qBAAqB,EAAE,CAAC;QACrE,MAAM,IAAI,eAAe,CAAC,iCAAiC,EAAE,aAAa,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,GAAG,aAAa,IAAI,cAAc,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACzC,4BAA4B,EAC5B,GAAG,EACH,eAAe,CAAC,gBAAgB,CAAC,EACjC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CACvC,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,eAAe,CAAC,+BAA+B,EAAE,eAAe,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;IAC3C,cAAc,CAAC,MAAM,EAAE;QACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,eAAe,EAAE,aAAa,CAAC,OAAO;QACtC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,kBAAkB;QAC1C,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,gBAAgB,EACd,KAAK,CAAC,gBAAgB,IAAI,8BAA8B;QAC1D,kBAAkB,EAChB,KAAK,CAAC,kBAAkB,IAAI,gCAAgC;KAC/D,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAI7C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAC1C;QACE,IAAI,EAAE,4BAA4B;KACnC,EACD,IAAI,EACJ,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAC;IACF,OAAO;QACL,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC;QACjE,SAAS,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;KAChE,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,aAAqB;IACxC,MAAM,MAAM,GAAG,eAAe,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAChE,IACE,MAAM,CAAC,GAAG,KAAK,qBAAqB;QACpC,MAAM,CAAC,GAAG,KAAK,KAAK;QACpB,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;QAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EACvB,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,4BAA4B,EAAE,gBAAgB,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,MAA0B,CAAC;AACpC,CAAC;AAED,SAAS,WAAW,CAAC,cAAsB;IACzC,MAAM,OAAO,GAAG,eAAe,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAClE,IACE,OAAO,CAAC,GAAG,KAAK,kBAAkB;QAClC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAC/B,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7B,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAC/B,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAC/B,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAC/B,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,4BAA4B,EAAE,gBAAgB,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,OAA2B,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CACrB,MAAwB,EACxB,IASC;IAED,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE7B,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,eAAe,CAAC,4BAA4B,EAAE,gBAAgB,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,WAAW,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,eAAe,CAAC,oCAAoC,EAAE,WAAW,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,eAAe,CAAC,8BAA8B,EAAE,WAAW,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,gBAAgB,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,eAAe,CAAC,iCAAiC,EAAE,gBAAgB,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACtD,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,gBAAgB,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,gBAAgB,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,KAAK,MAAM,aAAa,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QAChD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,eAAe,CAAC,2BAA2B,EAAE,WAAW,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,SAAwB;IAClE,IAAI,CAAE,aAAmC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,eAAe,CACvB,uBAAuB,SAAS,EAAE,EAClC,gBAAgB,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,MAAiB;IACvC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,eAAe,CAAC,2BAA2B,EAAE,gBAAgB,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,OAAe,EACf,SAAkC;IAElC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAChC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CACnD,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,MAAiC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,0BAA0B,EAAE,SAAS,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAe;IAC7C,IAAI,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAC9B,KAAK,EACL,GAAG,EACH,4BAA4B,EAC5B,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;QACF,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAe;IAC5C,IAAI,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAC9B,KAAK,EACL,GAAG,EACH,4BAA4B,EAC5B,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;QACF,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,eAAe,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,eAAe,CAAC,KAAiB;IACxC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC;SAChB,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;SACpB,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;SACpB,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,4BAA4B,EAAE,WAAW,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAoB;IAC1C,MAAM,YAAY,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACrE,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACpC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5E,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACtJ,CAAC"}

package/node_modules/@farther-shore/shared-types/dist/web-ui.d.ts

@@ -0,0 +1,239 @@
+import type { ProductStatus, SubscriberStatus, BillingStrategy, AuthStrategy, SubscriptionOwnerType } from "./enums.js";
+import type { MeterDefinition } from "./metering.js";
+import type { BuilderPlan } from "./plans/projections.js";
+export type Product = {
+    id: string;
+    organizationId: string;
+    name: string;
+    displayName?: string | null;
+    description: string | null;
+    baseUrl: string;
+    portalHostname: string | null;
+    featuredPlanId?: string | null;
+    meters: MeterDefinition[];
+    billingStrategy: BillingStrategy;
+    status: ProductStatus;
+    authStrategy: AuthStrategy;
+    publishedRevisionId: string | null;
+    latestManifestRevisionId: string | null;
+    latestManifestRevisionNumber: number | null;
+    createdAt: string;
+    updatedAt: string;
+    plans: BuilderPlan[];
+    rateLimitConfig: RateLimitConfig | null;
+    logoUrl: string | null;
+    primaryColor: string | null;
+    environments?: ProductEnvironment[];
+    envBranchPrefix?: string | null;
+    githubRepoFullName?: string | null;
+};
+export type ProductEnvironment = {
+    id: string;
+    name: string;
+    branch: string;
+    subdomain: string;
+    runtimeHostname: string;
+    /** Portal hostname derived from core's DEV_PORTAL_BASE_DOMAIN. Optional
+     * for back-compat with older core builds that didn't return it. */
+    portalHostname?: string;
+    status: string;
+};
+export type PromoCodeKind = "percent_off" | "amount_off" | "free_months";
+export type PromoCode = {
+    id: string;
+    productId: string;
+    code: string;
+    kind: PromoCodeKind;
+    amount?: number | null;
+    durationMonths: number;
+    applicablePlanIds: string[];
+    maxRedemptions?: number | null;
+    redemptionCount: number;
+    activeFrom?: string | null;
+    activeUntil?: string | null;
+    status: "ACTIVE" | "ARCHIVED";
+    stripeCouponId?: string | null;
+    stripePromotionCodeId?: string | null;
+    createdAt: string;
+    updatedAt: string;
+};
+type RateLimitConfig = {
+    id: string;
+    productId: string;
+    windowSizeSeconds: number | null;
+    maxUnitsPerWindow: number | null;
+    maxUnitsPerMonth: number | null;
+};
+export type StripeStatus = {
+    connected: boolean;
+    accountId?: string;
+    chargesEnabled?: boolean;
+    cardPaymentsEnabled?: boolean;
+    isOverride?: boolean;
+};
+export type GitHubStatus = {
+    connected: boolean;
+    connectionType: "installation" | "user_token" | null;
+    accountLogin: string | null;
+    accountType: "User" | "Organization" | null;
+    connectedAt: string | null;
+};
+/**
+ * Builder-dashboard subscriber list item.
+ *
+ * `planId` is the LOGICAL `Plan.id` (paired with `planName = Plan.name`),
+ * surfaced so builders can see which of their defined plans each
+ * subscriber is on. Not the immutable `CompiledPlan.id`.
+ */
+export type Subscriber = {
+    id: string;
+    productId: string;
+    status: SubscriberStatus;
+    planId: string | null;
+    planName: string | null;
+    ownerType: SubscriptionOwnerType;
+    ownerOrganizationId: string | null;
+    ownerName: string | null;
+    createdAt: string;
+};
+export type ProductUsage = {
+    totalRequests30d: number;
+    activeConsumers: number;
+    totalApiKeys: number;
+    recentUsage: UsageEntry[];
+};
+type UsageEntry = {
+    date: string;
+    requests: number;
+    consumers: number;
+};
+/**
+ * Origin of a maker token.
+ * - `USER`: created by a human via the API Keys UI or the API.
+ * - `PLATFORM`: auto-created by the platform. Currently only used
+ *   for the per-product CI token (`ci-{product}` + `FARTHERSHORE_TOKEN`
+ *   repo secret, `purpose = "github.ci"`). This token is read-only
+ *   and powers the GitHub Actions compile-check step on the
+ *   product's repo. Deploys run through a separate path (the GitHub
+ *   push webhook), so revoking this token breaks the pre-merge
+ *   compile-check — not the deploy pipeline — but UIs should still
+ *   warn before revoke/rotate so developers don't lose the guardrail
+ *   silently.
+ */
+export type MakerTokenOrigin = "USER" | "PLATFORM";
+export type MakerToken = {
+    id: string;
+    organizationId: string;
+    name: string;
+    scopes: string[];
+    lastFour: string;
+    productId: string | null;
+    product?: {
+        id: string;
+        name: string;
+    } | null;
+    createdAt: string | null;
+    lastUsedAt: string | null;
+    revokedAt: string | null;
+    origin: MakerTokenOrigin;
+    /** Free-text hint for PLATFORM tokens describing what they power. */
+    purpose: string | null;
+    /** Only present on the create/rotate response — the raw bearer token. */
+    token?: string;
+};
+export type ProductManifestRevision = {
+    id: string;
+    productId: string;
+    organizationId: string;
+    revisionNumber: number;
+    manifestJson: unknown;
+    manifestVersion: string;
+    source: "MANAGEMENT_API" | "BROWSER_WIZARD";
+    submittedByType: "MAKER_TOKEN" | "USER";
+    submittedById: string;
+    createdAt: string;
+};
+export type ProductSubdomainAvailability = {
+    subdomain: string;
+    hostname: string;
+    portalHostname: string;
+    available: boolean;
+};
+export type CreateProductInput = {
+    name: string;
+    baseUrl?: string;
+    description?: string;
+    displayName?: string;
+    billingStrategy?: BillingStrategy;
+    meters?: MeterDefinition[];
+    envBranchPrefix?: string;
+};
+export type UpdateProductInput = {
+    displayName?: string;
+    baseUrl?: string;
+    description?: string;
+    featuredPlanId?: string | null;
+    logoUrl?: string | null;
+    primaryColor?: string | null;
+    meters?: MeterDefinition[];
+    billingStrategy?: BillingStrategy;
+    confirmBaseUrlChange?: boolean;
+    /** Required when changing billingStrategy -- maps old plan IDs to new plan IDs */
+    planMappings?: Record<string, string>;
+};
+export type CreatePromoCodeInput = {
+    code: string;
+    kind: PromoCodeKind;
+    amount?: number | null;
+    durationMonths: number;
+    applicablePlanIds?: string[];
+    maxRedemptions?: number | null;
+    activeFrom?: string | null;
+    activeUntil?: string | null;
+};
+export type UpdatePromoCodeInput = {
+    code?: string;
+    kind?: PromoCodeKind;
+    amount?: number | null;
+    durationMonths?: number;
+    applicablePlanIds?: string[];
+    maxRedemptions?: number | null;
+    activeFrom?: string | null;
+    activeUntil?: string | null;
+    status?: "ACTIVE" | "ARCHIVED";
+};
+export type BuilderOrganization = {
+    id: string;
+    type?: string | null;
+    name?: string | null;
+    slug?: string | null;
+};
+export type BuilderOrganizationMember = {
+    userId: string;
+    email: string | null;
+    displayName: string;
+    role: string;
+    createdAt: string;
+};
+export type BuilderInvitation = {
+    id: string;
+    email: string;
+    role: string;
+    status: string;
+    expiresAt: string;
+    organization?: BuilderOrganization;
+};
+export type GitHubConnection = {
+    id: string;
+    connectionType: string;
+    accountLogin: string;
+    accountType: string;
+    connectedAt: string;
+    connectedByUserId: string;
+    label: string | null;
+    isDefault: boolean;
+    productCount?: number;
+    tokenStatus?: string;
+};
+export {};
+//# sourceMappingURL=web-ui.d.ts.map

package/node_modules/@farther-shore/shared-types/dist/web-ui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-ui.d.ts","sourceRoot":"","sources":["../src/web-ui.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,qBAAqB,EACtB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAW1D,MAAM,MAAM,OAAO,GAAG;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,eAAe,EAAE,eAAe,CAAC;IACjC,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,YAAY,CAAC;IAC3B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,4BAA4B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,eAAe,EAAE,eAAe,GAAG,IAAI,CAAC;IACxC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACpC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB;uEACmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,YAAY,GAAG,aAAa,CAAC;AAEzE,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,KAAK,eAAe,GAAG;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,cAAc,GAAG,YAAY,GAAG,IAAI,CAAC;IACrD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAAC;IAC5C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,qBAAqB,CAAC;IACjC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,UAAU,CAAC;AAEnD,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,gBAAgB,CAAC;IACzB,qEAAqE;IACrE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,CAAC;IAC5C,eAAe,EAAE,aAAa,GAAG,MAAM,CAAC;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAMF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;CAChC,CAAC;AAMF,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,mBAAmB,CAAC;CACpC,CAAC;AAMF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC"}

package/node_modules/@farther-shore/shared-types/dist/web-ui.js

@@ -0,0 +1,6 @@
+// ---------------------------------------------------------------------------
+// Web-UI API contract types — response shapes and input DTOs used by the
+// builder dashboard (web-ui) and served by the core API.
+// ---------------------------------------------------------------------------
+export {};
+//# sourceMappingURL=web-ui.js.map

package/node_modules/@farther-shore/shared-types/dist/web-ui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-ui.js","sourceRoot":"","sources":["../src/web-ui.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,yEAAyE;AACzE,yDAAyD;AACzD,8EAA8E"}