@gjermundgaraba/clankerauth 0.28.0 → 0.29.0

package/README.md

@@ -16,7 +16,7 @@ clankerauth logout
 
 The sign-ins are kept in `$XDG_CONFIG_HOME/clankerauth/sign-ins.json`, `~/.config/clankerauth/sign-ins.json` by default, readable by their owner alone: one per resource, each with its own issuer, so signing in at a second issuer leaves the first's alone. A file the command cannot read, such as one another version wrote, counts as signed out and the next `login` replaces it. A `login` to a resource already signed in to replaces that sign-in and revokes it. A command refreshes an access token as it is about to expire and saves the rotated refresh token, so a sign-in lasts while it is used at least every 30 days; when the issuer refuses a refresh, the error names the `login` that asks for the same scopes again. Every change to the file holds its lock, so commands and programs running at once refresh an expired sign-in once, and `logout` revokes the refresh token that is current. `logout` revokes every sign-in and deletes the file, and `logout <url>` the one whose resource that URL is under alone.
 
-Administration commands act at the issuer of the one administration sign-in kept. Signed in to administration at several issuers, name one with `CLANKERAUTH_URL`, its origin; a value that is no URL is refused.
+Administration commands act at the issuer of the one administration sign-in kept. Signed in to administration at several issuers, name one with `CLANKERAUTH_URL`, its origin; a value that names no origin, such as a `mailto:` URL, is refused.
 
 Unattended, such as in a container with no browser or disk to keep a sign-in on, the commands take an administration key, an API key granted on the issuer's origin root, from `CLANKERAUTH_TOKEN` instead, and then act at the issuer `CLANKERAUTH_URL` names, which they require. No sign-in is read or written. The owner creates the key once, signed in:
 
@@ -28,7 +28,7 @@ CLANKERAUTH_URL=https://clankerauth.home.example CLANKERAUTH_TOKEN=clankerauth_
   clankerauth list-api-keys
 ```
 
-The issuer checks the key on every request, so disabling or deleting it ends its access at once. With `clankerauth:write` it may create and delete administration keys too, itself among them.
+What the key may do, and when a change to it applies, is in [the issuer's README](../../README.md#administer-unattended-with-an-api-key).
 
 ## Tokens for other commands
 

package/dist/main.mjs

@@ -10,7 +10,7 @@ import * as Credentials from "@gjermundgaraba/clankerauth-sdk/credentials";
 import * as Action from "@gjermundgaraba/effect-actions/Action";
 import * as Authentication from "@gjermundgaraba/effect-actions/Authentication";
 import { HttpApiSchema, HttpApiSecurity } from "effect/http-api";
-//#region ../../packages/admin-api/dist/index.js
+// ../../packages/admin-api/dist/index.js
 /**
 * This issuer's own fault: a failed query, an unreadable row, an unexpected provider failure.
 * The schema defines the public response; the diagnostic cause reaches logs, never a caller.
@@ -398,11 +398,9 @@ const OwnerHttp = ActionHttp.make(Administration, {
 	prefix: "/api/owner",
 	authentication: OwnerToken
 });
-//#endregion
-//#region package.json
-var version = "0.28.0";
-//#endregion
-//#region src/main.ts
+// package.json
+var version = "0.29.0";
+// src/main.ts
 const refused = (error) => new CliError.UserError({
 	cause: error,
 	userMessage: error.message
@@ -437,15 +435,15 @@ const notSignedIn = new CliError.UserError({
 	cause: "not signed in",
 	userMessage: "Not signed in: run `clankerauth login <url>` first."
 });
-const issuerNamed = Config.option(Config.String("CLANKERAUTH_URL")).pipe(Effect.mapError(refused), Effect.flatMap((named) => Option.exists(named, (url) => !URL.canParse(url)) ? Effect.fail(new CliError.UserError({
+const issuerNamed = Config.option(Config.String("CLANKERAUTH_URL")).pipe(Effect.mapError(refused), Effect.map(Option.map((url) => URL.parse(url)?.origin ?? "null")), Effect.flatMap((origin) => Option.contains(origin, "null") ? Effect.fail(new CliError.UserError({
 	cause: "CLANKERAUTH_URL",
-	userMessage: "CLANKERAUTH_URL is no URL: set it to the issuer's origin, its CLANKERAUTH_BASE_URL."
-})) : Effect.succeed(named)));
+	userMessage: "CLANKERAUTH_URL is no issuer URL: set it to the issuer's origin, its CLANKERAUTH_BASE_URL."
+})) : Effect.succeed(origin)));
 const administrationSignIn = Effect.gen(function* () {
 	const named = yield* issuerNamed;
 	const kept = (yield* Credentials.list().pipe(Effect.mapError(refused))).filter((signIn) => signIn.resource === administrationIdentifier(signIn.url)).filter((signIn) => Option.match(named, {
 		onNone: () => true,
-		onSome: (url) => new URL(url).origin === signIn.url
+		onSome: (origin) => origin === signIn.url
 	}));
 	const [only, ...others] = kept;
 	if (only === void 0) return yield* notSignedIn;
@@ -464,10 +462,9 @@ const administrationTarget = Effect.gen(function* () {
 		cause: "CLANKERAUTH_URL",
 		userMessage: "CLANKERAUTH_TOKEN is set without CLANKERAUTH_URL: set it to the issuer's origin, its CLANKERAUTH_BASE_URL."
 	});
-	const url = new URL(named.value).origin;
 	return {
-		url,
-		resource: administrationIdentifier(url)
+		url: named.value,
+		resource: administrationIdentifier(named.value)
 	};
 });
 const tokenCommand = Command.make("token", { url: urlArgument("An address under the resource whose token to print, such as the application's URL; administration by default") }, ({ url }) => Effect.gen(function* () {
@@ -490,5 +487,4 @@ const cli = Command.make("clankerauth").pipe(Command.withDescription("Administer
 	...administration
 ]));
 Command.run(cli, { version }).pipe(Effect.provide(FetchHttpClient.layer), Effect.provide(NodeServices.layer), ActionCli.logToStderr, NodeRuntime.runMain);
-//#endregion
 export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gjermundgaraba/clankerauth",
-  "version": "0.28.0",
+  "version": "0.29.0",
   "description": "The clankerauth command line: sign in to an issuer as its owner and administer it over HTTP.",
   "license": "MIT",
   "repository": {
@@ -19,19 +19,19 @@
     "access": "public"
   },
   "dependencies": {
-    "@effect/platform-node": "4.0.5",
-    "@effect/platform-node-shared": "4.0.5",
-    "@gjermundgaraba/clankerauth-sdk": "0.28.0",
-    "@gjermundgaraba/effect-actions": "0.19.0",
-    "effect": "4.0.5"
+    "@effect/platform-node": "4.0.6",
+    "@effect/platform-node-shared": "4.0.6",
+    "@gjermundgaraba/clankerauth-sdk": "0.29.0",
+    "@gjermundgaraba/effect-actions": "0.20.0",
+    "effect": "4.0.6"
   },
   "devDependencies": {
-    "@gjermundgaraba/clankerauth-admin-api": "0.28.0",
-    "@gjermundgaraba/clankerauth-dev": "0.28.0",
+    "@gjermundgaraba/clankerauth-admin-api": "0.29.0",
+    "@gjermundgaraba/clankerauth-dev": "0.29.0",
     "@types/node": "26.6.5",
     "typescript": "7.0.2",
-    "vite": "npm:@voidzero-dev/vite-plus-core@1.3.0",
-    "vite-plus": "1.3.0"
+    "vite": "npm:@voidzero-dev/vite-plus-core@1.4.0",
+    "vite-plus": "1.4.0"
   },
   "engines": {
     "node": ">=26"