@iveri/contracts 0.38.0 → 0.39.0

package/dist/cjs/api/conduit/endpoint.type.d.ts

@@ -1,75 +0,0 @@
-import type { IsoDateTime } from '../../type/iso-date-time.type.js';
-import type { Nullable } from '../../type/nil.type.js';
-import type { Paginated } from '../../type/paginated.type.js';
-import type { UUID } from '../../type/uuid.type.js';
-/**
- * One endpoint on the wire.
- *
- * Carries `hasSigningSecret`, never the secret. Not a masked value, not a last-four hint — the
- * field simply does not exist, so no future change can accidentally start populating it.
- */
-export interface Endpoint {
-    id: UUID;
-    name: string;
-    description: Nullable<string>;
-    /** The path segment providers post to. */
-    ingressToken: string;
-    /**
-     * Path to register with the provider. Relative on purpose — the public origin is a tunnel or
-     * a load balancer this service cannot see, so the caller prepends its own.
-     */
-    ingressPath: string;
-    providerKey: Nullable<string>;
-    /** Whether a signing secret is configured. The secret itself is never returned. */
-    hasSigningSecret: boolean;
-    /** Whether a handshake verify token is configured. */
-    hasVerifyToken: boolean;
-    /** Inactive endpoints answer 410 Gone. */
-    isActive: boolean;
-    createdAt: IsoDateTime;
-    updatedAt: IsoDateTime;
-}
-/**
- * `GET /api/v1/endpoint`. Offset-paginated, unlike captures: endpoints are a small, slow-moving
- * collection a customer renders as numbered pages.
- */
-export type EndpointsPage = Paginated<Endpoint>;
-/** `POST /api/v1/endpoint`. */
-export interface CreateEndpointBody {
-    name: string;
-    description?: Nullable<string>;
-    providerKey?: Nullable<string>;
-    signingSecret?: Nullable<string>;
-    verifyToken?: Nullable<string>;
-}
-/**
- * `PATCH /api/v1/endpoint/:id`.
- *
- * **Secret fields have three states, not two.** Omitting one leaves the stored secret untouched;
- * sending `null` deletes it. A form must therefore never send `''` or `null` where the user
- * meant "I did not change this" — that silently wipes a working signing secret, and the next
- * webhook verifies as `MISSING_SECRET` with nothing to say why.
- */
-export interface UpdateEndpointBody {
-    name?: string;
-    description?: Nullable<string>;
-    providerKey?: Nullable<string>;
-    signingSecret?: Nullable<string>;
-    verifyToken?: Nullable<string>;
-    isActive?: boolean;
-}
-/** Query for `GET /api/v1/endpoint`. */
-export interface GetEndpointsQuery {
-    limit?: number;
-    offset?: number;
-    /**
-     * Case-insensitive partial match on the endpoint name.
-     *
-     * The panel renders endpoints as a filter dropdown, which takes one page — so past that page a
-     * workspace cannot select the rest at all, and a `<select>` holding the first hundred names
-     * looks exactly like one holding every name. `%` and `_` are matched literally rather than as
-     * wildcards, so a search matches what the operator typed.
-     */
-    search?: string;
-}
-//# sourceMappingURL=endpoint.type.d.ts.map

package/dist/cjs/api/conduit/endpoint.type.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"endpoint.type.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/endpoint.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACrB,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,0CAA0C;IAC1C,YAAY,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,mFAAmF;IACnF,gBAAgB,EAAE,OAAO,CAAC;IAE1B,sDAAsD;IACtD,cAAc,EAAE,OAAO,CAAC;IAExB,0CAA0C;IAC1C,QAAQ,EAAE,OAAO,CAAC;IAElB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEhD,+BAA+B;AAC/B,MAAM,WAAW,kBAAkB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,wCAAwC;AACxC,MAAM,WAAW,iBAAiB;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/dist/cjs/api/conduit/endpoint.type.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=endpoint.type.js.map

package/dist/cjs/api/conduit/endpoint.type.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"endpoint.type.js","sourceRoot":"","sources":["../../../../src/api/conduit/endpoint.type.ts"],"names":[],"mappings":""}

package/dist/cjs/api/conduit/handshake-kind.enum.d.ts

@@ -1,22 +0,0 @@
-/**
- * How a provider proves the endpoint is really ours before it will send anything.
- *
- * **Handshakes work in inspect mode, deliberately.** Meta will not save a callback URL that
- * does not echo `hub.challenge`, and Slack will not save one that does not echo `challenge` —
- * so without this, the local developer tool could never be registered with the provider at all,
- * and there would be nothing to capture. It is the one piece of ingress behaviour that is not
- * "store and acknowledge".
- */
-export declare enum HandshakeKind {
-    /**
-     * Provider sends `GET ?mode=subscribe&verify_token=…&challenge=…` and expects the challenge
-     * echoed back as the plain-text body. Meta (WhatsApp, Messenger, Instagram).
-     */
-    QUERY_ECHO = "query-echo",
-    /**
-     * Provider sends a JSON body carrying a trigger field and a challenge, and expects the
-     * challenge echoed in a JSON response. Slack (`type: url_verification`).
-     */
-    JSON_ECHO = "json-echo"
-}
-//# sourceMappingURL=handshake-kind.enum.d.ts.map

package/dist/cjs/api/conduit/handshake-kind.enum.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"handshake-kind.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/handshake-kind.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,oBAAY,aAAa;IACrB;;;OAGG;IACH,UAAU,eAAe;IAEzB;;;OAGG;IACH,SAAS,cAAc;CAC1B"}

package/dist/cjs/api/conduit/handshake-kind.enum.js

@@ -1,26 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.HandshakeKind = void 0;
-/**
- * How a provider proves the endpoint is really ours before it will send anything.
- *
- * **Handshakes work in inspect mode, deliberately.** Meta will not save a callback URL that
- * does not echo `hub.challenge`, and Slack will not save one that does not echo `challenge` —
- * so without this, the local developer tool could never be registered with the provider at all,
- * and there would be nothing to capture. It is the one piece of ingress behaviour that is not
- * "store and acknowledge".
- */
-var HandshakeKind;
-(function (HandshakeKind) {
-    /**
-     * Provider sends `GET ?mode=subscribe&verify_token=…&challenge=…` and expects the challenge
-     * echoed back as the plain-text body. Meta (WhatsApp, Messenger, Instagram).
-     */
-    HandshakeKind["QUERY_ECHO"] = "query-echo";
-    /**
-     * Provider sends a JSON body carrying a trigger field and a challenge, and expects the
-     * challenge echoed in a JSON response. Slack (`type: url_verification`).
-     */
-    HandshakeKind["JSON_ECHO"] = "json-echo";
-})(HandshakeKind || (exports.HandshakeKind = HandshakeKind = {}));
-//# sourceMappingURL=handshake-kind.enum.js.map

package/dist/cjs/api/conduit/handshake-kind.enum.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handshake-kind.enum.js","sourceRoot":"","sources":["../../../../src/api/conduit/handshake-kind.enum.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;GAQG;AACH,IAAY,aAYX;AAZD,WAAY,aAAa;IACrB;;;OAGG;IACH,0CAAyB,CAAA;IAEzB;;;OAGG;IACH,wCAAuB,CAAA;AAC3B,CAAC,EAZW,aAAa,6BAAb,aAAa,QAYxB"}

package/dist/cjs/api/conduit/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC"}

package/dist/cjs/api/conduit/index.js

@@ -1,38 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./capture.type.js"), exports);
-__exportStar(require("./connection-verification-verdict.enum.js"), exports);
-__exportStar(require("./connection.type.js"), exports);
-__exportStar(require("./connector-auth-type.enum.js"), exports);
-__exportStar(require("./connector.type.js"), exports);
-__exportStar(require("./delivery-status.enum.js"), exports);
-__exportStar(require("./delivery.type.js"), exports);
-__exportStar(require("./destination.type.js"), exports);
-__exportStar(require("./dispatch-status.enum.js"), exports);
-__exportStar(require("./dispatch.type.js"), exports);
-__exportStar(require("./endpoint.type.js"), exports);
-__exportStar(require("./handshake-kind.enum.js"), exports);
-__exportStar(require("./match-operator.enum.js"), exports);
-__exportStar(require("./provider.type.js"), exports);
-__exportStar(require("./replay.type.js"), exports);
-__exportStar(require("./route.type.js"), exports);
-__exportStar(require("./signature-algorithm.enum.js"), exports);
-__exportStar(require("./signature-encoding.enum.js"), exports);
-__exportStar(require("./signature-header-scheme.enum.js"), exports);
-__exportStar(require("./signature-verdict.enum.js"), exports);
-__exportStar(require("./signature.type.js"), exports);
-//# sourceMappingURL=index.js.map

package/dist/cjs/api/conduit/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,4EAA0D;AAC1D,uDAAqC;AACrC,gEAA8C;AAC9C,sDAAoC;AACpC,4DAA0C;AAC1C,qDAAmC;AACnC,wDAAsC;AACtC,4DAA0C;AAC1C,qDAAmC;AACnC,qDAAmC;AACnC,2DAAyC;AACzC,2DAAyC;AACzC,qDAAmC;AACnC,mDAAiC;AACjC,kDAAgC;AAChC,gEAA8C;AAC9C,+DAA6C;AAC7C,oEAAkD;AAClD,8DAA4C;AAC5C,sDAAoC"}

package/dist/cjs/api/conduit/match-operator.enum.d.ts

@@ -1,22 +0,0 @@
-/**
- * How one header or body matcher compares.
- *
- * Four operators, and the list is short on purpose. A routing rule is declarative data, never
- * code, and every operator added here is a step toward an expression language — the moment a
- * rule can express arbitrary logic we own the customer's bugs and can never change the
- * evaluator.
- *
- * `EXISTS` earns its place because "this field is present at all" is the most common real
- * condition and cannot be written with the other three.
- */
-export declare enum MatchOperator {
-    /** Exact string comparison, case-sensitive. */
-    EQUALS = "equals",
-    /** Substring. Deliberately not a regular expression. */
-    CONTAINS = "contains",
-    /** Value starts with the operand. Enough for `application/json; charset=utf-8`. */
-    STARTS_WITH = "starts-with",
-    /** The field is present, whatever its value. The operand is ignored. */
-    EXISTS = "exists"
-}
-//# sourceMappingURL=match-operator.enum.d.ts.map

package/dist/cjs/api/conduit/match-operator.enum.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"match-operator.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/match-operator.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,oBAAY,aAAa;IACrB,+CAA+C;IAC/C,MAAM,WAAW;IAEjB,wDAAwD;IACxD,QAAQ,aAAa;IAErB,mFAAmF;IACnF,WAAW,gBAAgB;IAE3B,wEAAwE;IACxE,MAAM,WAAW;CACpB"}

package/dist/cjs/api/conduit/match-operator.enum.js

@@ -1,26 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MatchOperator = void 0;
-/**
- * How one header or body matcher compares.
- *
- * Four operators, and the list is short on purpose. A routing rule is declarative data, never
- * code, and every operator added here is a step toward an expression language — the moment a
- * rule can express arbitrary logic we own the customer's bugs and can never change the
- * evaluator.
- *
- * `EXISTS` earns its place because "this field is present at all" is the most common real
- * condition and cannot be written with the other three.
- */
-var MatchOperator;
-(function (MatchOperator) {
-    /** Exact string comparison, case-sensitive. */
-    MatchOperator["EQUALS"] = "equals";
-    /** Substring. Deliberately not a regular expression. */
-    MatchOperator["CONTAINS"] = "contains";
-    /** Value starts with the operand. Enough for `application/json; charset=utf-8`. */
-    MatchOperator["STARTS_WITH"] = "starts-with";
-    /** The field is present, whatever its value. The operand is ignored. */
-    MatchOperator["EXISTS"] = "exists";
-})(MatchOperator || (exports.MatchOperator = MatchOperator = {}));
-//# sourceMappingURL=match-operator.enum.js.map

package/dist/cjs/api/conduit/match-operator.enum.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"match-operator.enum.js","sourceRoot":"","sources":["../../../../src/api/conduit/match-operator.enum.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;GAUG;AACH,IAAY,aAYX;AAZD,WAAY,aAAa;IACrB,+CAA+C;IAC/C,kCAAiB,CAAA;IAEjB,wDAAwD;IACxD,sCAAqB,CAAA;IAErB,mFAAmF;IACnF,4CAA2B,CAAA;IAE3B,wEAAwE;IACxE,kCAAiB,CAAA;AACrB,CAAC,EAZW,aAAa,6BAAb,aAAa,QAYxB"}

package/dist/cjs/api/conduit/provider.type.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider.type.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/provider.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAE/E,mFAAmF;AACnF,eAAO,MAAM,yBAAyB,WAAW,CAAC;AAElD,+FAA+F;AAC/F,eAAO,MAAM,8BAA8B,gBAAgB,CAAC;AAE5D;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAC9B,SAAS,EAAE,kBAAkB,CAAC;IAC9B,QAAQ,EAAE,iBAAiB,CAAC;IAE5B,6EAA6E;IAC7E,UAAU,EAAE,MAAM,CAAC;IAEnB,YAAY,EAAE,qBAAqB,CAAC;IAEpC,uFAAuF;IACvF,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE/B,4EAA4E;IAC5E,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE/B,6FAA6F;IAC7F,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEtC,2EAA2E;IAC3E,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE/B,2DAA2D;IAC3D,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE5C;;;;OAIG;IACH,qBAAqB,EAAE,MAAM,CAAC;CACjC;AAED,iGAAiG;AACjG,MAAM,WAAW,sBAAsB;IACnC,SAAS,EAAE,kBAAkB,CAAC;IAC9B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,qBAAqB,CAAC;IACpC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,yBAAyB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7C,qBAAqB,EAAE,MAAM,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAC9B,IAAI,EAAE,aAAa,CAAC;IAIpB,4EAA4E;IAC5E,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEjC,oGAAoG;IACpG,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEnC,6DAA6D;IAC7D,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE5B,gFAAgF;IAChF,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAI/B,iEAAiE;IACjE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE/B,+DAA+D;IAC/D,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE/B,mEAAmE;IACnE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACpC;AAED,iGAAiG;AACjG,MAAM,WAAW,sBAAsB;IACnC,IAAI,EAAE,aAAa,CAAC;IACpB,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACrC;AAED,wDAAwD;AACxD,MAAM,WAAW,QAAQ;IACrB,6EAA6E;IAC7E,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEnB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,6CAA6C;IAC7C,SAAS,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAEvC,oDAAoD;IACpD,SAAS,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAEvC;;;OAGG;IACH,SAAS,EAAE,OAAO,CAAC;IAEnB,2BAA2B;IAC3B,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEjC,2BAA2B;IAC3B,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC1B,KAAK,EAAE,QAAQ,EAAE,CAAC;CACrB;AAED,+BAA+B;AAC/B,MAAM,WAAW,kBAAkB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,SAAS,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAC7C,SAAS,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;CAChD;AAED,oCAAoC;AACpC,MAAM,WAAW,kBAAkB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE/B,gEAAgE;IAChE,SAAS,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAE7C,+DAA+D;IAC/D,SAAS,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;CAChD"}

package/dist/cjs/api/conduit/provider.type.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SIGNED_PAYLOAD_TIMESTAMP_TOKEN = exports.SIGNED_PAYLOAD_BODY_TOKEN = void 0;
-/** Required in `signedPayloadTemplate`; substituted with the raw request bytes. */
-exports.SIGNED_PAYLOAD_BODY_TOKEN = '{body}';
-/** Optional in `signedPayloadTemplate`; substituted with the timestamp exactly as received. */
-exports.SIGNED_PAYLOAD_TIMESTAMP_TOKEN = '{timestamp}';
-//# sourceMappingURL=provider.type.js.map

package/dist/cjs/api/conduit/provider.type.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider.type.js","sourceRoot":"","sources":["../../../../src/api/conduit/provider.type.ts"],"names":[],"mappings":";;;AASA,mFAAmF;AACtE,QAAA,yBAAyB,GAAG,QAAQ,CAAC;AAElD,+FAA+F;AAClF,QAAA,8BAA8B,GAAG,aAAa,CAAC"}

package/dist/cjs/api/conduit/replay.type.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"replay.type.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/replay.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,iDAAiD;AACjD,MAAM,WAAW,MAAM;IACnB,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IAEf,0FAA0F;IAC1F,QAAQ,EAAE,OAAO,CAAC;IAElB,2FAA2F;IAC3F,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEjC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IAE7D,wCAAwC;IACxC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEtC,qBAAqB,EAAE,OAAO,CAAC;IAE/B;;;OAGG;IACH,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE/B,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjC,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IACxB,KAAK,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,yCAAyC;AACzC,MAAM,WAAW,iBAAiB;IAC9B,SAAS,EAAE,MAAM,CAAC;IAElB,wCAAwC;IACxC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE1B,sFAAsF;IACtF,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3C;;;;OAIG;IACH,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACjC"}

package/dist/cjs/api/conduit/replay.type.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=replay.type.js.map

package/dist/cjs/api/conduit/replay.type.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"replay.type.js","sourceRoot":"","sources":["../../../../src/api/conduit/replay.type.ts"],"names":[],"mappings":""}

package/dist/cjs/api/conduit/route.type.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"route.type.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/route.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D,yCAAyC;AACzC,MAAM,WAAW,aAAa;IAC1B,sFAAsF;IACtF,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;IACxB,6CAA6C;IAC7C,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC3B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,WAAW;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;IACxB,6CAA6C;IAC7C,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC3B;AAED,+EAA+E;AAC/E,MAAM,WAAW,kBAAmB,SAAQ,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC;IACpE,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CACzB;AAED,2EAA2E;AAC3E,MAAM,WAAW,gBAAiB,SAAQ,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;IAChE,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,KAAK;IAClB,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,iCAAiC;IACjC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE3B,iCAAiC;IACjC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,+BAA+B;IAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEzB;;;;;OAKG;IACH,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,6FAA6F;IAC7F,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,YAAY,EAAE,WAAW,EAAE,CAAC;IAE5B,8BAA8B;IAC9B,cAAc,EAAE,IAAI,EAAE,CAAC;IAEvB,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;;;OAKG;IACH,WAAW,EAAE,OAAO,CAAC;IAErB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED,4FAA4F;AAC5F,MAAM,WAAW,UAAU;IACvB,KAAK,EAAE,KAAK,EAAE,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAClB;AAED,6BAA6B;AAC7B,MAAM,WAAW,eAAe;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,UAAU,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,cAAc,CAAC,EAAE,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAChD,YAAY,CAAC,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC5C,cAAc,EAAE,IAAI,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5B,WAAW,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;CACnC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,UAAU,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,cAAc,CAAC,EAAE,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAChD,YAAY,CAAC,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB"}

package/dist/cjs/api/conduit/route.type.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=route.type.js.map

package/dist/cjs/api/conduit/route.type.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"route.type.js","sourceRoot":"","sources":["../../../../src/api/conduit/route.type.ts"],"names":[],"mappings":""}

package/dist/cjs/api/conduit/signature-algorithm.enum.d.ts

@@ -1,17 +0,0 @@
-/**
- * Hash backing a provider's HMAC.
- *
- * `SHA1` is here because Meta still sends `x-hub-signature` alongside the SHA-256 header and
- * some older integrations only have that one. It is **not** a recommendation — a manifest using
- * it is verifying what the provider actually sends, which is the only useful thing a diagnostic
- * can do. Nothing in Conduit ever *chooses* SHA-1.
- *
- * Values are the strings `node:crypto` expects, so no lookup table stands between the manifest
- * and `createHmac` — one fewer place for a typo to become "signature mismatch".
- */
-export declare enum SignatureAlgorithm {
-    SHA1 = "sha1",
-    SHA256 = "sha256",
-    SHA512 = "sha512"
-}
-//# sourceMappingURL=signature-algorithm.enum.d.ts.map

package/dist/cjs/api/conduit/signature-algorithm.enum.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signature-algorithm.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/signature-algorithm.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,oBAAY,kBAAkB;IAC1B,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,MAAM,WAAW;CACpB"}

package/dist/cjs/api/conduit/signature-algorithm.enum.js

@@ -1,21 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SignatureAlgorithm = void 0;
-/**
- * Hash backing a provider's HMAC.
- *
- * `SHA1` is here because Meta still sends `x-hub-signature` alongside the SHA-256 header and
- * some older integrations only have that one. It is **not** a recommendation — a manifest using
- * it is verifying what the provider actually sends, which is the only useful thing a diagnostic
- * can do. Nothing in Conduit ever *chooses* SHA-1.
- *
- * Values are the strings `node:crypto` expects, so no lookup table stands between the manifest
- * and `createHmac` — one fewer place for a typo to become "signature mismatch".
- */
-var SignatureAlgorithm;
-(function (SignatureAlgorithm) {
-    SignatureAlgorithm["SHA1"] = "sha1";
-    SignatureAlgorithm["SHA256"] = "sha256";
-    SignatureAlgorithm["SHA512"] = "sha512";
-})(SignatureAlgorithm || (exports.SignatureAlgorithm = SignatureAlgorithm = {}));
-//# sourceMappingURL=signature-algorithm.enum.js.map

package/dist/cjs/api/conduit/signature-algorithm.enum.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signature-algorithm.enum.js","sourceRoot":"","sources":["../../../../src/api/conduit/signature-algorithm.enum.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;GAUG;AACH,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC1B,mCAAa,CAAA;IACb,uCAAiB,CAAA;IACjB,uCAAiB,CAAA;AACrB,CAAC,EAJW,kBAAkB,kCAAlB,kBAAkB,QAI7B"}

package/dist/cjs/api/conduit/signature-encoding.enum.d.ts

@@ -1,13 +0,0 @@
-/**
- * How the computed digest is rendered before comparison.
- *
- * Getting this wrong is one of the two most common causes of a webhook signature that "should
- * work but doesn't" — the digest is right and the string is not. Naming it in the manifest is
- * what lets the diagnostic show the caller both encodings of the same digest rather than a bare
- * "mismatch".
- */
-export declare enum SignatureEncoding {
-    HEX = "hex",
-    BASE64 = "base64"
-}
-//# sourceMappingURL=signature-encoding.enum.d.ts.map

package/dist/cjs/api/conduit/signature-encoding.enum.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signature-encoding.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/signature-encoding.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,oBAAY,iBAAiB;IACzB,GAAG,QAAQ;IACX,MAAM,WAAW;CACpB"}

package/dist/cjs/api/conduit/signature-encoding.enum.js

@@ -1,17 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SignatureEncoding = void 0;
-/**
- * How the computed digest is rendered before comparison.
- *
- * Getting this wrong is one of the two most common causes of a webhook signature that "should
- * work but doesn't" — the digest is right and the string is not. Naming it in the manifest is
- * what lets the diagnostic show the caller both encodings of the same digest rather than a bare
- * "mismatch".
- */
-var SignatureEncoding;
-(function (SignatureEncoding) {
-    SignatureEncoding["HEX"] = "hex";
-    SignatureEncoding["BASE64"] = "base64";
-})(SignatureEncoding || (exports.SignatureEncoding = SignatureEncoding = {}));
-//# sourceMappingURL=signature-encoding.enum.js.map

package/dist/cjs/api/conduit/signature-encoding.enum.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signature-encoding.enum.js","sourceRoot":"","sources":["../../../../src/api/conduit/signature-encoding.enum.ts"],"names":[],"mappings":";;;AAAA;;;;;;;GAOG;AACH,IAAY,iBAGX;AAHD,WAAY,iBAAiB;IACzB,gCAAW,CAAA;IACX,sCAAiB,CAAA;AACrB,CAAC,EAHW,iBAAiB,iCAAjB,iBAAiB,QAG5B"}

package/dist/cjs/api/conduit/signature-header-scheme.enum.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signature-header-scheme.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/signature-header-scheme.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,oBAAY,qBAAqB;IAC7B,MAAM,WAAW;IACjB,cAAc,mBAAmB;CACpC"}

package/dist/cjs/api/conduit/signature-header-scheme.enum.js

@@ -1,23 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SignatureHeaderScheme = void 0;
-/**
- * How the signature is packed into its header.
- *
- * Two shapes cover every provider we have met:
- *
- * - `DIRECT` — the header *is* the signature, optionally behind a prefix:
- *   `x-hub-signature-256: sha256=a1b2…`
- * - `KEY_VALUE_LIST` — a comma-separated list the signature is one entry of, because the
- *   provider also ships a timestamp in the same header:
- *   `stripe-signature: t=1737031234,v1=a1b2…`
- *
- * Modelling the packing separately from the digest is what keeps "add TikTok" a manifest rather
- * than a code change.
- */
-var SignatureHeaderScheme;
-(function (SignatureHeaderScheme) {
-    SignatureHeaderScheme["DIRECT"] = "direct";
-    SignatureHeaderScheme["KEY_VALUE_LIST"] = "key-value-list";
-})(SignatureHeaderScheme || (exports.SignatureHeaderScheme = SignatureHeaderScheme = {}));
-//# sourceMappingURL=signature-header-scheme.enum.js.map

package/dist/cjs/api/conduit/signature-header-scheme.enum.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signature-header-scheme.enum.js","sourceRoot":"","sources":["../../../../src/api/conduit/signature-header-scheme.enum.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;GAaG;AACH,IAAY,qBAGX;AAHD,WAAY,qBAAqB;IAC7B,0CAAiB,CAAA;IACjB,0DAAiC,CAAA;AACrC,CAAC,EAHW,qBAAqB,qCAArB,qBAAqB,QAGhC"}

package/dist/cjs/api/conduit/signature-verdict.enum.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signature-verdict.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/signature-verdict.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,oBAAY,gBAAgB;IACxB,wFAAwF;IACxF,KAAK,UAAU;IAEf;;;;;;OAMG;IACH,OAAO,YAAY;IAEnB,wFAAwF;IACxF,WAAW,gBAAgB;IAE3B,gFAAgF;IAChF,UAAU,eAAe;IAEzB,yFAAyF;IACzF,cAAc,mBAAmB;IAEjC,iGAAiG;IACjG,iBAAiB,sBAAsB;IAEvC;;;OAGG;IACH,mBAAmB,wBAAwB;IAE3C;;;;;OAKG;IACH,0BAA0B,+BAA+B;CAC5D"}

package/dist/cjs/api/conduit/signature-verdict.enum.js

@@ -1,54 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SignatureVerdict = void 0;
-/**
- * The outcome of a signature check.
- *
- * **Not a boolean, and that is the entire point of the feature.** "Invalid" is the least useful
- * thing you can tell someone whose webhook is failing: the interesting cases are all the ways
- * verification could not even run. Six of these eight are "we did not check", each for a
- * different and separately fixable reason, and collapsing them into `false` is what makes
- * webhook debugging take an afternoon.
- *
- * Stored on every capture so the list view can be filtered by it, and returned by the
- * diagnostic alongside the evidence.
- *
- * A UI must not colour all six red. Only {@link SignatureVerdict.INVALID} and
- * {@link SignatureVerdict.TIMESTAMP_OUT_OF_TOLERANCE} indicate something wrong; the other five
- * "could not verify" verdicts mean nobody configured verification, and painting those as
- * failures sends people to debug a provider that is behaving correctly.
- */
-var SignatureVerdict;
-(function (SignatureVerdict) {
-    /** Computed digest matched the received one, and any timestamp was inside tolerance. */
-    SignatureVerdict["VALID"] = "valid";
-    /**
-     * Everything needed was present and the digests differ.
-     *
-     * The only verdict that suggests something is actually wrong — and even then, usually with
-     * the secret or the manifest rather than with the request. The diagnostic's hints exist for
-     * this case.
-     */
-    SignatureVerdict["INVALID"] = "invalid";
-    /** The endpoint names no provider, so there is no manifest describing what to check. */
-    SignatureVerdict["NO_PROVIDER"] = "no-provider";
-    /** The manifest describes no signature scheme — this provider signs nothing. */
-    SignatureVerdict["NOT_SIGNED"] = "not-signed";
-    /** No signing secret is configured on the endpoint. Nothing to compute a digest with. */
-    SignatureVerdict["MISSING_SECRET"] = "missing-secret";
-    /** The manifest's header is absent from the request. Often the provider is not who you think. */
-    SignatureVerdict["MISSING_SIGNATURE"] = "missing-signature";
-    /**
-     * The header is present but does not parse — a `key-value-list` without the expected key, or
-     * a prefix that is not there. Distinct from `INVALID` because no digest was ever compared.
-     */
-    SignatureVerdict["MALFORMED_SIGNATURE"] = "malformed-signature";
-    /**
-     * Digest matched, but the signed timestamp is outside the provider's replay window.
-     *
-     * Separate from both `VALID` and `INVALID` on purpose: the signature is genuine, so this is
-     * either a replay or a clock-skew problem, and those have opposite fixes.
-     */
-    SignatureVerdict["TIMESTAMP_OUT_OF_TOLERANCE"] = "timestamp-out-of-tolerance";
-})(SignatureVerdict || (exports.SignatureVerdict = SignatureVerdict = {}));
-//# sourceMappingURL=signature-verdict.enum.js.map

package/dist/cjs/api/conduit/signature-verdict.enum.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signature-verdict.enum.js","sourceRoot":"","sources":["../../../../src/api/conduit/signature-verdict.enum.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,IAAY,gBAsCX;AAtCD,WAAY,gBAAgB;IACxB,wFAAwF;IACxF,mCAAe,CAAA;IAEf;;;;;;OAMG;IACH,uCAAmB,CAAA;IAEnB,wFAAwF;IACxF,+CAA2B,CAAA;IAE3B,gFAAgF;IAChF,6CAAyB,CAAA;IAEzB,yFAAyF;IACzF,qDAAiC,CAAA;IAEjC,iGAAiG;IACjG,2DAAuC,CAAA;IAEvC;;;OAGG;IACH,+DAA2C,CAAA;IAE3C;;;;;OAKG;IACH,6EAAyD,CAAA;AAC7D,CAAC,EAtCW,gBAAgB,gCAAhB,gBAAgB,QAsC3B"}

package/dist/cjs/api/conduit/signature.type.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signature.type.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/signature.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,+DAA+D;AAC/D,MAAM,WAAW,mBAAmB;IAChC,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC;IAEf,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;IAEjB,yEAAyE;IACzE,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAChC,OAAO,EAAE,gBAAgB,CAAC;IAE1B,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAEhB,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,SAAS,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACxC,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACtC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE7B,sEAAsE;IACtE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEjC,0CAA0C;IAC1C,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEpC,oDAAoD;IACpD,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEpC;;;OAGG;IACH,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEvC,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE1C,+EAA+E;IAC/E,UAAU,EAAE,MAAM,CAAC;IAEnB,cAAc,EAAE,MAAM,CAAC;IAEvB,SAAS,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAEzC;;;;OAIG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;CACnB"}

package/dist/cjs/api/conduit/signature.type.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=signature.type.js.map

package/dist/cjs/api/conduit/signature.type.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signature.type.js","sourceRoot":"","sources":["../../../../src/api/conduit/signature.type.ts"],"names":[],"mappings":""}

package/dist/cjs/api/identity/access-token-payload.interface.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"access-token-payload.interface.d.ts","sourceRoot":"","sources":["../../../../src/api/identity/access-token-payload.interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,kBAAkB;IAC/B;;;;;OAKG;IACH,GAAG,EAAE,IAAI,CAAC;IAEV;;;;;OAKG;IACH,EAAE,EAAE,aAAa,CAAC;IAElB,qGAAqG;IACrG,GAAG,EAAE,IAAI,CAAC;IAEV,qGAAqG;IACrG,KAAK,EAAE,cAAc,EAAE,CAAC;IAExB,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,8FAA8F;IAC9F,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/cjs/api/identity/access-token-payload.interface.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=access-token-payload.interface.js.map

package/dist/cjs/api/identity/access-token-payload.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"access-token-payload.interface.js","sourceRoot":"","sources":["../../../../src/api/identity/access-token-payload.interface.ts"],"names":[],"mappings":""}

package/dist/cjs/api/identity/auth.type.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.type.d.ts","sourceRoot":"","sources":["../../../../src/api/identity/auth.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE5D,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACvB,UAAU,EAAE,MAAM,CAAC;IAEnB,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAC;IAEnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,0BAA0B;AAC1B,MAAM,WAAW,SAAS;IACtB;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,oDAAoD;AACpD,MAAM,WAAW,gBAAgB;IAC7B,YAAY,EAAE,MAAM,CAAC;CACxB;AAED,iGAAiG;AACjG,MAAM,WAAW,oBAAoB;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,+EAA+E;AAC/E,MAAM,WAAW,UAAU;IACvB,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;;;;;OAQG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB,mEAAmE;IACnE,gBAAgB,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,YAAY;IACzB,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,gBAAgB,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,SAAS;IACtB,qCAAqC;IACrC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEvB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxB,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5B,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE3B;;;;;;OAMG;IACH,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAExB;;;;;;OAMG;IACH,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE5B,QAAQ,EAAE,IAAI,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,YAAY,CAAC;IAE3B,qCAAqC;IACrC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAE7C,SAAS,EAAE,MAAM,EAAE,CAAC;IAEpB,gEAAgE;IAChE,WAAW,EAAE,cAAc,EAAE,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IACxB,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,UAAU,CAAC;CACtB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,iBAAiB;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC5B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,aAAa;IAC1B,MAAM,EAAE,IAAI,CAAC;IAEb,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;IAEpB,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC/B"}

package/dist/cjs/api/identity/auth.type.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=auth.type.js.map

package/dist/cjs/api/identity/auth.type.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.type.js","sourceRoot":"","sources":["../../../../src/api/identity/auth.type.ts"],"names":[],"mappings":""}

package/dist/cjs/api/identity/index.d.ts

@@ -1,6 +0,0 @@
-export * from './access-token-payload.interface.js';
-export * from './auth.type.js';
-export * from './membership-status.enum.js';
-export * from './principal-type.enum.js';
-export * from './tenant-status.enum.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/cjs/api/identity/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/identity/index.ts"],"names":[],"mappings":"AAAA,cAAc,qCAAqC,CAAC;AACpD,cAAc,gBAAgB,CAAC;AAC/B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC"}

package/dist/cjs/api/identity/index.js

@@ -1,22 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./access-token-payload.interface.js"), exports);
-__exportStar(require("./auth.type.js"), exports);
-__exportStar(require("./membership-status.enum.js"), exports);
-__exportStar(require("./principal-type.enum.js"), exports);
-__exportStar(require("./tenant-status.enum.js"), exports);
-//# sourceMappingURL=index.js.map

package/dist/cjs/api/identity/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/identity/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sEAAoD;AACpD,iDAA+B;AAC/B,8DAA4C;AAC5C,2DAAyC;AACzC,0DAAwC"}

package/dist/cjs/api/identity/membership-status.enum.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"membership-status.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/identity/membership-status.enum.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,oBAAY,gBAAgB;IACxB,mEAAmE;IACnE,OAAO,YAAY;IAEnB,wBAAwB;IACxB,MAAM,WAAW;IAEjB,4FAA4F;IAC5F,SAAS,cAAc;CAC1B"}

package/dist/cjs/api/identity/membership-status.enum.js

@@ -1,20 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MembershipStatus = void 0;
-/**
- * A user's standing inside their tenant.
- *
- * Lives on the membership rather than the user because it is a statement about access, not
- * about identity — and keeping the two apart is what stops "deactivate this person" and
- * "delete this account" from becoming the same operation.
- */
-var MembershipStatus;
-(function (MembershipStatus) {
-    /** Invited but has not set a password yet. Cannot authenticate. */
-    MembershipStatus["INVITED"] = "INVITED";
-    /** Normal operation. */
-    MembershipStatus["ACTIVE"] = "ACTIVE";
-    /** Access revoked without deleting anything. Reversible; existing sessions stop working. */
-    MembershipStatus["SUSPENDED"] = "SUSPENDED";
-})(MembershipStatus || (exports.MembershipStatus = MembershipStatus = {}));
-//# sourceMappingURL=membership-status.enum.js.map

package/dist/cjs/api/identity/membership-status.enum.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"membership-status.enum.js","sourceRoot":"","sources":["../../../../src/api/identity/membership-status.enum.ts"],"names":[],"mappings":";;;AAAA;;;;;;GAMG;AACH,IAAY,gBASX;AATD,WAAY,gBAAgB;IACxB,mEAAmE;IACnE,uCAAmB,CAAA;IAEnB,wBAAwB;IACxB,qCAAiB,CAAA;IAEjB,4FAA4F;IAC5F,2CAAuB,CAAA;AAC3B,CAAC,EATW,gBAAgB,gCAAhB,gBAAgB,QAS3B"}

package/dist/cjs/api/identity/principal-type.enum.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"principal-type.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/identity/principal-type.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,oBAAY,aAAa;IACrB,qEAAqE;IACrE,IAAI,SAAS;IAEb,4FAA4F;IAC5F,OAAO,YAAY;CACtB"}