npm - @forgezero/runtime - Versions diffs - 0.1.0 - Mend

@forgezero/runtime 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (96) hide show

package/LICENSE +21 -0
package/README.md +89 -0
package/contracts/foundry.toml +9 -0
package/contracts/src/ColdVault.sol +206 -0
package/contracts/src/DepositFactory.sol +202 -0
package/contracts/src/DepositProxy.sol +72 -0
package/contracts/src/IERC20.sol +7 -0
package/contracts/src/MockTokens.sol +32 -0
package/contracts/src/SafeTransferLib.sol +31 -0
package/contracts/test/Custody.t.sol +361 -0
package/contracts/test/Vectors.t.sol +45 -0
package/dist/audit.d.ts +265 -0
package/dist/audit.js +291 -0
package/dist/backup.d.ts +243 -0
package/dist/backup.js +302 -0
package/dist/calendar.d.ts +136 -0
package/dist/calendar.js +129 -0
package/dist/compliance.d.ts +172 -0
package/dist/compliance.js +168 -0
package/dist/finance/binance.d.ts +27 -0
package/dist/finance/binance.js +452 -0
package/dist/finance/chain-addresses.d.ts +130 -0
package/dist/finance/chain-addresses.js +462 -0
package/dist/finance/chain-deposits.d.ts +193 -0
package/dist/finance/chain-deposits.js +596 -0
package/dist/finance/chain-reconcile.d.ts +112 -0
package/dist/finance/chain-reconcile.js +76 -0
package/dist/finance/chain-withdrawals.d.ts +223 -0
package/dist/finance/chain-withdrawals.js +631 -0
package/dist/finance/chain.d.ts +116 -0
package/dist/finance/chain.js +316 -0
package/dist/finance/commission.d.ts +155 -0
package/dist/finance/commission.js +419 -0
package/dist/finance/custody.d.ts +68 -0
package/dist/finance/custody.js +107 -0
package/dist/finance/derive.d.ts +115 -0
package/dist/finance/derive.js +116 -0
package/dist/finance/discounts.d.ts +98 -0
package/dist/finance/discounts.js +90 -0
package/dist/finance/ledger.d.ts +221 -0
package/dist/finance/ledger.js +308 -0
package/dist/finance/market.d.ts +209 -0
package/dist/finance/market.js +112 -0
package/dist/finance/money.d.ts +118 -0
package/dist/finance/money.js +176 -0
package/dist/finance/rates.d.ts +178 -0
package/dist/finance/rates.js +292 -0
package/dist/finance/storage.d.ts +113 -0
package/dist/finance/storage.js +226 -0
package/dist/finance/tax.d.ts +132 -0
package/dist/finance/tax.js +291 -0
package/dist/finance/transfers.d.ts +153 -0
package/dist/finance/transfers.js +292 -0
package/dist/finance/venues.d.ts +190 -0
package/dist/finance/venues.js +251 -0
package/dist/identity.d.ts +115 -0
package/dist/identity.js +111 -0
package/dist/importers.d.ts +87 -0
package/dist/importers.js +250 -0
package/dist/jobs.d.ts +171 -0
package/dist/jobs.js +250 -0
package/dist/notify-templates.d.ts +11 -0
package/dist/notify-templates.js +254 -0
package/dist/notify.d.ts +172 -0
package/dist/notify.js +122 -0
package/dist/openssh.d.ts +36 -0
package/dist/openssh.js +106 -0
package/dist/otpauth.d.ts +57 -0
package/dist/otpauth.js +223 -0
package/dist/outbox.d.ts +234 -0
package/dist/outbox.js +236 -0
package/dist/passkey.d.ts +120 -0
package/dist/passkey.js +105 -0
package/dist/phrase.d.ts +87 -0
package/dist/phrase.js +87 -0
package/dist/pipeline.d.ts +137 -0
package/dist/pipeline.js +121 -0
package/dist/queue.d.ts +243 -0
package/dist/queue.js +246 -0
package/dist/schema-typebox.d.ts +24 -0
package/dist/schema-typebox.js +201 -0
package/dist/schema.d.ts +134 -0
package/dist/schema.js +169 -0
package/dist/serial.d.ts +54 -0
package/dist/serial.js +40 -0
package/dist/slip10.d.ts +37 -0
package/dist/slip10.js +74 -0
package/dist/snp.d.ts +115 -0
package/dist/snp.js +109 -0
package/dist/ssh-agent.d.ts +70 -0
package/dist/ssh-agent.js +141 -0
package/dist/ssh-cert.d.ts +73 -0
package/dist/ssh-cert.js +111 -0
package/dist/totp.d.ts +104 -0
package/dist/totp.js +143 -0
package/package.json +248 -0

package/dist/notify-templates.js ADDED Viewed

@@ -0,0 +1,254 @@
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined")
+    return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+// src/notify.ts
+class NotifyError extends Error {
+  code;
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "NotifyError";
+  }
+}
+var CHANNELS = ["email"];
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+function assertHeaderSafe(value, field) {
+  if (/[\r\n]/.test(value)) {
+    throw new NotifyError("HEADER_INJECTION", `${field} contains a line break. A newline in a header ends it and starts another.`);
+  }
+}
+function defineTemplate(spec) {
+  return spec;
+}
+function render(spec, data) {
+  const missing = spec.data.filter((key) => data[key] === undefined || data[key] === null);
+  if (missing.length > 0) {
+    throw new NotifyError("MISSING_DATA", `Template "${spec.key}" needs ${missing.join(", ")}. Rendering without them would send a message with a blank where the value should be.`);
+  }
+  const raw = Object.fromEntries(spec.data.map((key) => [key, String(data[key])]));
+  const escaped = Object.fromEntries(spec.data.map((key) => [key, escapeHtml(raw[key])]));
+  const subject = spec.subject(raw);
+  assertHeaderSafe(subject, `Subject of "${spec.key}"`);
+  return {
+    subject,
+    text: spec.text(raw),
+    html: spec.html(escaped)
+  };
+}
+function preview(spec) {
+  if (!spec.sample) {
+    throw new NotifyError("MISSING_DATA", `Template "${spec.key}" declares no sample to preview.`);
+  }
+  return render(spec, spec.sample);
+}
+function createNotifier(options) {
+  const registry = new Map;
+  for (const spec of options.templates) {
+    if (registry.has(spec.key)) {
+      throw new NotifyError("DUPLICATE_TEMPLATE", `Two templates share the key "${spec.key}".`);
+    }
+    registry.set(spec.key, spec);
+  }
+  async function deliver(notification) {
+    const spec = registry.get(notification.template);
+    if (!spec) {
+      throw new NotifyError("UNKNOWN_TEMPLATE", `No template named "${notification.template}".`);
+    }
+    assertHeaderSafe(notification.to, "Recipient");
+    if (!spec.transactional && options.allows) {
+      const allowed = await options.allows(notification.to, spec.key);
+      if (!allowed)
+        return null;
+    }
+    const rendered = render(spec, notification.data);
+    await options.transport.send({ to: notification.to, ...rendered, realm: notification.realm });
+    return rendered;
+  }
+  return {
+    templates: registry,
+    template: (key) => registry.get(key),
+    send(notification) {
+      deliver(notification).catch((error) => options.onError?.(error, notification));
+    },
+    sendOrThrow: (notification) => deliver(notification),
+    render: (template, data) => {
+      const spec = registry.get(template);
+      if (!spec)
+        throw new NotifyError("UNKNOWN_TEMPLATE", `No template named "${template}".`);
+      return render(spec, data);
+    }
+  };
+}
+function layout(args) {
+  const brand = escapeHtml(args.brand ?? "ForgeZero");
+  return `<!doctype html>
+<html><body style="margin:0;padding:0;background:#0b0d10;color:#e6e8eb;font-family:ui-sans-serif,system-ui,-apple-system,'Segoe UI',sans-serif">
+<table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="background:#0b0d10;padding:32px 16px">
+<tr><td align="center">
+<table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="max-width:520px;background:#14171c;border:1px solid #232830;border-radius:12px">
+<tr><td style="padding:28px 28px 8px">
+<div style="font-size:13px;letter-spacing:.14em;text-transform:uppercase;color:#8b93a1">${brand}</div>
+<h1 style="margin:12px 0 0;font-size:20px;line-height:1.3;font-weight:600;color:#f2f4f7">${args.title}</h1>
+</td></tr>
+<tr><td style="padding:12px 28px 28px;font-size:15px;line-height:1.6;color:#c3c9d4">${args.body}</td></tr>
+</table>
+${args.footer ? `<div style="max-width:520px;margin:16px auto 0;font-size:12px;line-height:1.5;color:#6b7280">${args.footer}</div>` : ""}
+</td></tr></table>
+</body></html>`;
+}
+var codeBlock = (code) => `<div style="margin:20px 0;padding:16px;background:#0b0d10;border:1px solid #232830;border-radius:8px;text-align:center;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:28px;letter-spacing:.32em;color:#f2f4f7">${code}</div>`;
+var button = (label, href) => `<div style="margin:24px 0"><a href="${href}" style="display:inline-block;padding:12px 20px;background:#e6e8eb;color:#0b0d10;border-radius:8px;font-weight:600;font-size:15px;text-decoration:none">${label}</a></div>`;
+var VERSION = "0.1.0";
+// src/notify-templates.ts
+var FOOTER = "ForgeZero sent this because somebody asked to. If it was not you, nothing has changed yet — but tell us.";
+var signInCode = defineTemplate({
+  key: "auth.sign-in-code",
+  channel: "email",
+  transactional: true,
+  data: ["code", "minutes"],
+  sample: { code: "418302", minutes: "10" },
+  subject: (data) => `${data.code} is your ForgeZero sign-in code`,
+  text: (data) => `${data.code} is your sign-in code. It expires in ${data.minutes} minutes.
+If you did not try to sign in, someone has your email address and is trying to use it. The code alone will not let them in.`,
+  html: (data) => layout({
+    title: "Your sign-in code",
+    body: codeBlock(data.code) + `<p style="margin:0">Expires in ${data.minutes} minutes.</p>` + `<p style="margin:16px 0 0;color:#8b93a1">If you did not try to sign in, someone has your email address and is trying to use it. The code alone will not let them in.</p>`,
+    footer: FOOTER
+  })
+});
+var invitation = defineTemplate({
+  key: "onboarding.invitation",
+  channel: "email",
+  transactional: true,
+  data: ["inviter", "organisation", "link", "days"],
+  sample: {
+    inviter: "Aravind",
+    organisation: "AltPilot",
+    link: "https://forgezero.net/invite?token=abc",
+    days: "7"
+  },
+  subject: (data) => `${data.inviter} invited you to ${data.organisation} on ForgeZero`,
+  text: (data) => `${data.inviter} invited you to join ${data.organisation} on ForgeZero.
+${data.link}
+The link works once and expires in ${data.days} days.`,
+  html: (data) => layout({
+    title: `Join ${data.organisation}`,
+    body: `<p style="margin:0">${data.inviter} invited you to ForgeZero.</p>` + button("Accept the invitation", data.link) + `<p style="margin:0;color:#8b93a1">This link works once and expires in ${data.days} days.</p>`,
+    footer: FOOTER
+  })
+});
+var custodianEnrolment = defineTemplate({
+  key: "custody.enrolment",
+  channel: "email",
+  transactional: true,
+  data: ["organisation", "link", "threshold", "total"],
+  sample: {
+    organisation: "ForgeZero",
+    link: "https://forgezero.net/custody/ceremony",
+    threshold: "2",
+    total: "3"
+  },
+  subject: () => "You have been named a custodian",
+  text: (data) => `You are one of ${data.total} custodians for ${data.organisation}. Any ${data.threshold} of you can unlock the vault; fewer cannot.
+Enrol here: ${data.link}
+You will create a passkey and write down a recovery phrase. Both open your share — either one is enough, so losing the passkey is not losing access.`,
+  html: (data) => layout({
+    title: "You have been named a custodian",
+    body: `<p style="margin:0">You are one of ${data.total} custodians for ${data.organisation}. Any ${data.threshold} of you together can unlock the vault; fewer cannot.</p>` + button("Enrol as a custodian", data.link) + `<p style="margin:0;color:#8b93a1">You will create a passkey and write down a recovery phrase. Either one opens your share, so losing the passkey does not lock you out.</p>`,
+    footer: FOOTER
+  })
+});
+var ceremonyProposed = defineTemplate({
+  key: "custody.ceremony-proposed",
+  channel: "email",
+  transactional: true,
+  data: ["proposer", "change", "link", "needed"],
+  sample: {
+    proposer: "Aravind",
+    change: "Add a fourth custodian",
+    link: "https://forgezero.net/custody/ceremony",
+    needed: "2"
+  },
+  subject: () => "A custodian change needs your approval",
+  text: (data) => `${data.proposer} proposed: ${data.change}
+It needs ${data.needed} custodian approvals before it takes effect.
+${data.link}
+If you did not expect this, do not approve it. A change to the custodian set changes who can open the vault.`,
+  html: (data) => layout({
+    title: "A custodian change needs your approval",
+    body: `<p style="margin:0">${data.proposer} proposed:</p>` + `<p style="margin:12px 0;padding:12px;background:#0b0d10;border-left:2px solid #3d4757;color:#f2f4f7">${data.change}</p>` + `<p style="margin:0">It takes ${data.needed} approvals before it takes effect.</p>` + button("Review the proposal", data.link) + `<p style="margin:0;color:#8b93a1">If you did not expect this, do not approve it. A change to the custodian set changes who can open the vault.</p>`,
+    footer: FOOTER
+  })
+});
+var newDevice = defineTemplate({
+  key: "security.new-device",
+  channel: "email",
+  transactional: true,
+  data: ["device", "location", "at"],
+  sample: { device: "Chrome on Linux", location: "Chennai, IN", at: "2026-07-31 14:02 UTC" },
+  subject: () => "New sign-in to your ForgeZero account",
+  text: (data) => `A new device signed in.
+  ${data.device}
+  ${data.location}
+  ${data.at}
+If this was you, nothing to do. If not, sign in and revoke the session — then re-run the ceremony if you are a custodian.`,
+  html: (data) => layout({
+    title: "New sign-in to your account",
+    body: `<table role="presentation" cellpadding="0" cellspacing="0" style="margin:0 0 16px;font-size:15px;color:#c3c9d4">` + `<tr><td style="padding:2px 16px 2px 0;color:#8b93a1">Device</td><td>${data.device}</td></tr>` + `<tr><td style="padding:2px 16px 2px 0;color:#8b93a1">Location</td><td>${data.location}</td></tr>` + `<tr><td style="padding:2px 16px 2px 0;color:#8b93a1">When</td><td>${data.at}</td></tr>` + `</table>` + `<p style="margin:0;color:#8b93a1">If this was not you, sign in and revoke the session. If you are a custodian, re-run the ceremony afterwards.</p>`,
+    footer: FOOTER
+  })
+});
+var vaultLocked = defineTemplate({
+  key: "custody.vault-locked",
+  channel: "email",
+  transactional: true,
+  data: ["reason", "threshold", "link"],
+  sample: { reason: "The API process restarted", threshold: "2", link: "https://forgezero.net/custody/unlock" },
+  subject: () => "The vault is locked",
+  text: (data) => `The vault is locked: ${data.reason}
+Until ${data.threshold} custodians unlock it, secrets cannot be read and deployments that need them will fail.
+${data.link}`,
+  html: (data) => layout({
+    title: "The vault is locked",
+    body: `<p style="margin:0">${data.reason}</p>` + `<p style="margin:16px 0 0">Until ${data.threshold} custodians unlock it, secrets cannot be read and any deployment that needs one will fail.</p>` + button("Unlock the vault", data.link),
+    footer: FOOTER
+  })
+});
+var TEMPLATES = [
+  signInCode,
+  invitation,
+  custodianEnrolment,
+  ceremonyProposed,
+  newDevice,
+  vaultLocked
+];
+export {
+  vaultLocked,
+  signInCode,
+  newDevice,
+  invitation,
+  escapeHtml,
+  custodianEnrolment,
+  ceremonyProposed,
+  TEMPLATES
+};

package/dist/notify.d.ts ADDED Viewed

@@ -0,0 +1,172 @@
+/**
+ * The message, as opposed to the transport.
+ *
+ * `@forgezero/providers/email` can deliver an email. It has nothing to say about
+ * what the email contains, and that gap is where the bugs live: templates
+ * written inline in handlers cannot be previewed, cannot be tested, and get
+ * their escaping wrong exactly once — after which a user with an apostrophe in
+ * their name receives mail addressed to `O&#39;Brien`, or worse, a display name
+ * containing a `<script>` tag arrives intact.
+ *
+ * ## Three refusals that are the point of the package
+ *
+ * 1. **Missing data is an error, not an empty string.** A template that says
+ *    "Your code is {{code}}" rendered without `code` must not send "Your code
+ *    is ". That email is delivered, looks fine in the logs, and is useless. The
+ *    render throws instead.
+ *
+ * 2. **Escaping depends on the part.** The same value is HTML-escaped in the
+ *    HTML body and left alone in the text body. A single escaping pass applied
+ *    to both is how plaintext mail ends up full of `&amp;`.
+ *
+ * 3. **A newline in a subject is refused.** A CR or LF in a header value ends
+ *    the header and starts another — a display name carried into a subject line
+ *    is a header-injection vector, and the recipient list is the header an
+ *    attacker wants.
+ *
+ * ## Why text as well as HTML
+ *
+ * Not politeness. Some clients render only text, and an HTML-only message is a
+ * strong spam signal at most large mailbox providers — the deliverability cost
+ * lands on exactly the messages that must arrive, which are the security ones.
+ * A template must therefore declare both, and the type system enforces it.
+ */
+export declare class NotifyError extends Error {
+    readonly code: 'UNKNOWN_TEMPLATE' | 'MISSING_DATA' | 'HEADER_INJECTION' | 'NO_CHANNEL' | 'DUPLICATE_TEMPLATE';
+    constructor(code: 'UNKNOWN_TEMPLATE' | 'MISSING_DATA' | 'HEADER_INJECTION' | 'NO_CHANNEL' | 'DUPLICATE_TEMPLATE', message: string);
+}
+export declare const CHANNELS: readonly ["email"];
+export type Channel = (typeof CHANNELS)[number];
+/**
+ * A rendered message, ready for a transport.
+ *
+ * Deliberately not an `EmailMessage`: this package renders, the provider sends,
+ * and keeping the shapes separate is what lets a second channel arrive without
+ * every template gaining email-specific fields.
+ */
+export interface Rendered {
+    subject: string;
+    html: string;
+    text: string;
+}
+/**
+ * What a template declares.
+ *
+ * `data` is a list of the keys it requires. Naming them is what turns "renders
+ * an empty string" into a thrown error, and it is also what lets `preview()`
+ * produce a sample without a caller supplying one.
+ */
+export interface TemplateSpec<K extends string = string> {
+    key: string;
+    channel: Channel;
+    /** Keys the body needs. A render missing any of them is refused. */
+    data: readonly K[];
+    subject: (data: Record<K, string>) => string;
+    text: (data: Record<K, string>) => string;
+    html: (data: Record<K, string>) => string;
+    /** Sample values, so a template can be previewed and tested without a caller. */
+    sample?: Record<K, string>;
+    /**
+     * Mark a message as one a user cannot unsubscribe from.
+     *
+     * Security mail — a sign-in code, a new-device alert — is transactional and
+     * must ignore marketing preferences. Getting this backwards in either
+     * direction is a legal problem in one direction and a lockout in the other.
+     */
+    transactional?: boolean;
+}
+/**
+ * Escape for HTML text content and double-quoted attributes.
+ *
+ * `&` first, or the ampersands introduced by the later replacements get escaped
+ * a second time and the output shows `&amp;lt;`. This ordering bug is common
+ * enough that the test suite asserts against it directly.
+ */
+export declare function escapeHtml(value: string): string;
+/**
+ * Refuse a value that would break out of a header.
+ *
+ * A bare CR or LF terminates the header and begins a new one, so a display name
+ * carried into a subject can add `Bcc:`. Sanitising by stripping would hide the
+ * attempt; throwing surfaces it where it can be logged.
+ */
+export declare function assertHeaderSafe(value: string, field: string): void;
+export declare function defineTemplate<K extends string>(spec: TemplateSpec<K>): TemplateSpec<K>;
+/**
+ * Render one template.
+ *
+ * Every required key is checked before any function runs, so the error names
+ * *all* the missing keys rather than only the first — a caller fixing one at a
+ * time across four round trips is a worse experience than one honest list.
+ */
+export declare function render<K extends string>(spec: TemplateSpec<K>, data: Partial<Record<K, string | number>>): Rendered;
+/** Render with the sample values, for a preview screen or a snapshot test. */
+export declare function preview<K extends string>(spec: TemplateSpec<K>): Rendered;
+export interface Transport {
+    send(message: {
+        to: string;
+        subject: string;
+        html: string;
+        text: string;
+        realm?: string;
+    }): Promise<unknown>;
+}
+export interface NotifierOptions {
+    templates: readonly TemplateSpec<never>[] | readonly TemplateSpec<string>[];
+    transport: Transport;
+    /**
+     * Whether this recipient still wants non-transactional mail.
+     *
+     * Consulted only for templates that are not `transactional`, so a preference
+     * check can never suppress a sign-in code. The default allows everything,
+     * because a project without preferences should not have to model them.
+     */
+    allows?: (to: string, template: string) => boolean | Promise<boolean>;
+    /** Delivery failures land here. Never thrown at the caller — see `send`. */
+    onError?: (error: unknown, notification: Notification) => void;
+}
+export interface Notification {
+    to: string;
+    template: string;
+    data: Record<string, unknown>;
+    realm?: string;
+}
+/**
+ * The `Notifier` face that `@forgezero/access/effects` expects, plus the parts
+ * a handler needs directly.
+ *
+ * `send` never rejects. It is called from an effect, and an effect that throws
+ * takes down a request that has already succeeded — the user's password is
+ * changed and they see a 500 because the confirmation email bounced.
+ * `sendOrThrow` exists for the handful of places where delivery IS the operation
+ * (sending a sign-in code and reporting success is a lie if it did not send).
+ */
+export declare function createNotifier(options: NotifierOptions): {
+    templates: Map<string, TemplateSpec<string>>;
+    template: (key: string) => TemplateSpec<string> | undefined;
+    /** Fire and forget. Reports through `onError`, never at the caller. */
+    send(notification: Notification): void;
+    /** For the cases where sending IS the operation and a failure must surface. */
+    sendOrThrow: (notification: Notification) => Promise<Rendered | null>;
+    /** Render without sending — a preview screen, or a test. */
+    render: (template: string, data: Record<string, unknown>) => Rendered;
+};
+export type Notifier = ReturnType<typeof createNotifier>;
+/**
+ * One wrapper, so a template author writes the message and not the boilerplate.
+ *
+ * Table-based and inline-styled on purpose. Several widely used mail clients
+ * still strip `<style>` blocks and support neither flexbox nor grid, so the
+ * modern layout that looks correct in a browser preview arrives as a single
+ * unstyled column — and the preview is the only place anyone ever checks.
+ */
+export declare function layout(args: {
+    title: string;
+    body: string;
+    footer?: string;
+    brand?: string;
+}): string;
+/** A code shown as digits a human can read aloud without losing their place. */
+export declare const codeBlock: (code: string) => string;
+export declare const button: (label: string, href: string) => string;
+export declare const VERSION = "0.1.0";

package/dist/notify.js ADDED Viewed

@@ -0,0 +1,122 @@
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined")
+    return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+// src/notify.ts
+class NotifyError extends Error {
+  code;
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "NotifyError";
+  }
+}
+var CHANNELS = ["email"];
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+function assertHeaderSafe(value, field) {
+  if (/[\r\n]/.test(value)) {
+    throw new NotifyError("HEADER_INJECTION", `${field} contains a line break. A newline in a header ends it and starts another.`);
+  }
+}
+function defineTemplate(spec) {
+  return spec;
+}
+function render(spec, data) {
+  const missing = spec.data.filter((key) => data[key] === undefined || data[key] === null);
+  if (missing.length > 0) {
+    throw new NotifyError("MISSING_DATA", `Template "${spec.key}" needs ${missing.join(", ")}. Rendering without them would send a message with a blank where the value should be.`);
+  }
+  const raw = Object.fromEntries(spec.data.map((key) => [key, String(data[key])]));
+  const escaped = Object.fromEntries(spec.data.map((key) => [key, escapeHtml(raw[key])]));
+  const subject = spec.subject(raw);
+  assertHeaderSafe(subject, `Subject of "${spec.key}"`);
+  return {
+    subject,
+    text: spec.text(raw),
+    html: spec.html(escaped)
+  };
+}
+function preview(spec) {
+  if (!spec.sample) {
+    throw new NotifyError("MISSING_DATA", `Template "${spec.key}" declares no sample to preview.`);
+  }
+  return render(spec, spec.sample);
+}
+function createNotifier(options) {
+  const registry = new Map;
+  for (const spec of options.templates) {
+    if (registry.has(spec.key)) {
+      throw new NotifyError("DUPLICATE_TEMPLATE", `Two templates share the key "${spec.key}".`);
+    }
+    registry.set(spec.key, spec);
+  }
+  async function deliver(notification) {
+    const spec = registry.get(notification.template);
+    if (!spec) {
+      throw new NotifyError("UNKNOWN_TEMPLATE", `No template named "${notification.template}".`);
+    }
+    assertHeaderSafe(notification.to, "Recipient");
+    if (!spec.transactional && options.allows) {
+      const allowed = await options.allows(notification.to, spec.key);
+      if (!allowed)
+        return null;
+    }
+    const rendered = render(spec, notification.data);
+    await options.transport.send({ to: notification.to, ...rendered, realm: notification.realm });
+    return rendered;
+  }
+  return {
+    templates: registry,
+    template: (key) => registry.get(key),
+    send(notification) {
+      deliver(notification).catch((error) => options.onError?.(error, notification));
+    },
+    sendOrThrow: (notification) => deliver(notification),
+    render: (template, data) => {
+      const spec = registry.get(template);
+      if (!spec)
+        throw new NotifyError("UNKNOWN_TEMPLATE", `No template named "${template}".`);
+      return render(spec, data);
+    }
+  };
+}
+function layout(args) {
+  const brand = escapeHtml(args.brand ?? "ForgeZero");
+  return `<!doctype html>
+<html><body style="margin:0;padding:0;background:#0b0d10;color:#e6e8eb;font-family:ui-sans-serif,system-ui,-apple-system,'Segoe UI',sans-serif">
+<table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="background:#0b0d10;padding:32px 16px">
+<tr><td align="center">
+<table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="max-width:520px;background:#14171c;border:1px solid #232830;border-radius:12px">
+<tr><td style="padding:28px 28px 8px">
+<div style="font-size:13px;letter-spacing:.14em;text-transform:uppercase;color:#8b93a1">${brand}</div>
+<h1 style="margin:12px 0 0;font-size:20px;line-height:1.3;font-weight:600;color:#f2f4f7">${args.title}</h1>
+</td></tr>
+<tr><td style="padding:12px 28px 28px;font-size:15px;line-height:1.6;color:#c3c9d4">${args.body}</td></tr>
+</table>
+${args.footer ? `<div style="max-width:520px;margin:16px auto 0;font-size:12px;line-height:1.5;color:#6b7280">${args.footer}</div>` : ""}
+</td></tr></table>
+</body></html>`;
+}
+var codeBlock = (code) => `<div style="margin:20px 0;padding:16px;background:#0b0d10;border:1px solid #232830;border-radius:8px;text-align:center;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:28px;letter-spacing:.32em;color:#f2f4f7">${code}</div>`;
+var button = (label, href) => `<div style="margin:24px 0"><a href="${href}" style="display:inline-block;padding:12px 20px;background:#e6e8eb;color:#0b0d10;border-radius:8px;font-weight:600;font-size:15px;text-decoration:none">${label}</a></div>`;
+var VERSION = "0.1.0";
+export {
+  render,
+  preview,
+  layout,
+  escapeHtml,
+  defineTemplate,
+  createNotifier,
+  codeBlock,
+  button,
+  assertHeaderSafe,
+  VERSION,
+  NotifyError,
+  CHANNELS
+};

package/dist/openssh.d.ts ADDED Viewed

@@ -0,0 +1,36 @@
+export declare class OpenSshError extends Error {
+    readonly code: 'BAD_KEY' | 'BAD_COMMENT' | 'BAD_BLOB';
+    constructor(code: 'BAD_KEY' | 'BAD_COMMENT' | 'BAD_BLOB', message: string);
+}
+/** The blob inside an authorized_keys line: name, then the 32-byte key. */
+export declare function publicKeyBlob(publicKey: Uint8Array): Uint8Array;
+/**
+ * One `authorized_keys` line.
+ *
+ * A comment with a newline in it would end the line early and turn the rest
+ * into a second entry — which on a file that grants login is a way to append an
+ * attacker's key by naming one. Refused rather than stripped, so nobody
+ * discovers their comment was silently rewritten.
+ */
+export declare function authorizedKey(publicKey: Uint8Array, comment?: string): string;
+/**
+ * The SHA-256 fingerprint `ssh-keygen -l` prints.
+ *
+ * Base64 of the digest with padding STRIPPED, which is what OpenSSH does — a
+ * fingerprint carrying `=` matches nothing an operator compares it against.
+ */
+export declare function fingerprint(publicKey: Uint8Array): string;
+/** The signature blob an SSH agent returns: name, then the 64-byte signature. */
+export declare function signatureBlob(signature: Uint8Array): Uint8Array;
+/**
+ * Read a public key back out of an `authorized_keys` line.
+ *
+ * Used to confirm what was stored is what a server will accept, and to reject a
+ * pasted key of the wrong type before it is sealed. The algorithm is checked
+ * INSIDE the blob rather than from the prefix, because that is the one sshd
+ * reads.
+ */
+export declare function parseAuthorizedKey(line: string): {
+    publicKey: Uint8Array;
+    comment: string;
+};