@lgriffin/esi.ts 9.7.0 → 10.2.0

package/dist/auth/pkce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../src/auth/pkce.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,oEAAoE;IACpE,YAAY,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,aAAa,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,kEAAkE;AAClE,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,qDAAqD;AACrD,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,yDAAyD;AACzD,wBAAgB,gBAAgB,IAAI,QAAQ,CAO3C;AAED,oDAAoD;AACpD,wBAAgB,aAAa,IAAI,MAAM,CAEtC"}

package/dist/auth/storage/FileTokenStorage.d.mts

@@ -0,0 +1,44 @@
+import type { ITokenStorage, StoredToken } from '../types.mjs';
+export interface FileTokenStorageOptions {
+    /**
+     * POSIX permission bits for the token file. Defaults to `0o600` (owner
+     * read/write only). Ignored on platforms without POSIX modes.
+     */
+    mode?: number;
+}
+/**
+ * JSON-file {@link ITokenStorage} for single-process applications.
+ *
+ * Writes go to a sibling temporary file that is renamed over the target, so a
+ * crash mid-write leaves the previous file intact. Writes are serialised
+ * within the process. Two processes sharing one file are not supported: each
+ * would rotate refresh tokens the other cannot see.
+ */
+export declare class FileTokenStorage implements ITokenStorage {
+    private readonly filePath;
+    private readonly mode;
+    private cache;
+    private loading;
+    /** Bumped by invalidate() so a read that began earlier cannot repopulate the cache. */
+    private loadGeneration;
+    private writeChain;
+    constructor(filePath: string, options?: FileTokenStorageOptions);
+    /** Absolute path of the backing file. */
+    get path(): string;
+    get(characterId: number): Promise<StoredToken | null>;
+    set(characterId: number, token: StoredToken): Promise<void>;
+    delete(characterId: number): Promise<void>;
+    list(): Promise<StoredToken[]>;
+    /** Drop the in-memory copy so the next call re-reads the file. */
+    invalidate(): void;
+    /**
+     * Load once; overlapping first calls share the same read so none of them
+     * clobbers another's map. A read that started before invalidate() still
+     * resolves for its own callers but neither becomes the cache nor clears a
+     * newer in-flight read.
+     */
+    private load;
+    private readFile;
+    private persist;
+}
+//# sourceMappingURL=FileTokenStorage.d.ts.map

package/dist/auth/storage/FileTokenStorage.d.ts

@@ -0,0 +1,44 @@
+import type { ITokenStorage, StoredToken } from '../types';
+export interface FileTokenStorageOptions {
+    /**
+     * POSIX permission bits for the token file. Defaults to `0o600` (owner
+     * read/write only). Ignored on platforms without POSIX modes.
+     */
+    mode?: number;
+}
+/**
+ * JSON-file {@link ITokenStorage} for single-process applications.
+ *
+ * Writes go to a sibling temporary file that is renamed over the target, so a
+ * crash mid-write leaves the previous file intact. Writes are serialised
+ * within the process. Two processes sharing one file are not supported: each
+ * would rotate refresh tokens the other cannot see.
+ */
+export declare class FileTokenStorage implements ITokenStorage {
+    private readonly filePath;
+    private readonly mode;
+    private cache;
+    private loading;
+    /** Bumped by invalidate() so a read that began earlier cannot repopulate the cache. */
+    private loadGeneration;
+    private writeChain;
+    constructor(filePath: string, options?: FileTokenStorageOptions);
+    /** Absolute path of the backing file. */
+    get path(): string;
+    get(characterId: number): Promise<StoredToken | null>;
+    set(characterId: number, token: StoredToken): Promise<void>;
+    delete(characterId: number): Promise<void>;
+    list(): Promise<StoredToken[]>;
+    /** Drop the in-memory copy so the next call re-reads the file. */
+    invalidate(): void;
+    /**
+     * Load once; overlapping first calls share the same read so none of them
+     * clobbers another's map. A read that started before invalidate() still
+     * resolves for its own callers but neither becomes the cache nor clears a
+     * newer in-flight read.
+     */
+    private load;
+    private readFile;
+    private persist;
+}
+//# sourceMappingURL=FileTokenStorage.d.ts.map

package/dist/auth/storage/FileTokenStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileTokenStorage.d.ts","sourceRoot":"","sources":["../../../src/auth/storage/FileTokenStorage.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAkC3D,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,qBAAa,gBAAiB,YAAW,aAAa;IACpD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,KAAK,CAAyC;IACtD,OAAO,CAAC,OAAO,CAAkD;IACjE,uFAAuF;IACvF,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,UAAU,CAAoC;gBAE1C,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,uBAA4B;IAKnE,yCAAyC;IACzC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAMrD,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3D,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO1C,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAQpC,kEAAkE;IAClE,UAAU,IAAI,IAAI;IAMlB;;;;;OAKG;IACH,OAAO,CAAC,IAAI;YAiBE,QAAQ;IAqBtB,OAAO,CAAC,OAAO;CAqBhB"}

package/dist/auth/storage/MemoryTokenStorage.d.mts

@@ -0,0 +1,18 @@
+import type { ITokenStorage, StoredToken } from '../types.mjs';
+/**
+ * In-memory {@link ITokenStorage}. Tokens live only as long as the process.
+ * Useful for tests, CLIs that log in on every run, and as a cache in front of
+ * a durable store.
+ */
+export declare class MemoryTokenStorage implements ITokenStorage {
+    private readonly tokens;
+    constructor(initial?: readonly StoredToken[]);
+    get(characterId: number): Promise<StoredToken | null>;
+    set(characterId: number, token: StoredToken): Promise<void>;
+    delete(characterId: number): Promise<void>;
+    list(): Promise<StoredToken[]>;
+    /** Remove every token. */
+    clear(): void;
+    get size(): number;
+}
+//# sourceMappingURL=MemoryTokenStorage.d.ts.map

package/dist/auth/storage/MemoryTokenStorage.d.ts

@@ -0,0 +1,18 @@
+import type { ITokenStorage, StoredToken } from '../types';
+/**
+ * In-memory {@link ITokenStorage}. Tokens live only as long as the process.
+ * Useful for tests, CLIs that log in on every run, and as a cache in front of
+ * a durable store.
+ */
+export declare class MemoryTokenStorage implements ITokenStorage {
+    private readonly tokens;
+    constructor(initial?: readonly StoredToken[]);
+    get(characterId: number): Promise<StoredToken | null>;
+    set(characterId: number, token: StoredToken): Promise<void>;
+    delete(characterId: number): Promise<void>;
+    list(): Promise<StoredToken[]>;
+    /** Remove every token. */
+    clear(): void;
+    get size(): number;
+}
+//# sourceMappingURL=MemoryTokenStorage.d.ts.map

package/dist/auth/storage/MemoryTokenStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MemoryTokenStorage.d.ts","sourceRoot":"","sources":["../../../src/auth/storage/MemoryTokenStorage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE3D;;;;GAIG;AACH,qBAAa,kBAAmB,YAAW,aAAa;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;gBAE7C,OAAO,GAAE,SAAS,WAAW,EAAO;IAShD,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAOrD,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAK3D,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK1C,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAS9B,0BAA0B;IAC1B,KAAK,IAAI,IAAI;IAIb,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/auth/types.d.mts

@@ -0,0 +1,42 @@
+/**
+ * A character's SSO credentials as held by an {@link ITokenStorage}.
+ *
+ * Timestamps are epoch milliseconds so the record is JSON-safe and can be
+ * compared against `Date.now()` without parsing.
+ */
+export interface StoredToken {
+    /** EVE character id, decoded from the access token's `sub` claim. */
+    characterId: number;
+    /** Character name, decoded from the access token's `name` claim. */
+    characterName: string;
+    /** Current bearer token for ESI requests. */
+    accessToken: string;
+    /** Refresh token as of the last SSO exchange; SSO rotates it on every use. */
+    refreshToken: string;
+    /** When `accessToken` expires, in epoch milliseconds. */
+    expiresAt: number;
+    /** Scopes granted to this token, decoded from the `scp` claim. */
+    scopes: string[];
+    /** The `owner` claim: changes if the character is transferred between accounts. */
+    ownerHash?: string;
+    /** When this record was last written, in epoch milliseconds. */
+    updatedAt: number;
+    /**
+     * Set when SSO rejected the refresh token as invalid. The manager stops
+     * contacting SSO for this character until it is added again.
+     */
+    revokedAt?: number;
+}
+/**
+ * Persistence contract for {@link StoredToken} records, keyed by character id.
+ *
+ * Implementations must return copies rather than shared references and must
+ * tolerate `get`/`delete` for ids they have never seen.
+ */
+export interface ITokenStorage {
+    get(characterId: number): Promise<StoredToken | null>;
+    set(characterId: number, token: StoredToken): Promise<void>;
+    delete(characterId: number): Promise<void>;
+    list(): Promise<StoredToken[]>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/auth/types.d.ts

@@ -0,0 +1,42 @@
+/**
+ * A character's SSO credentials as held by an {@link ITokenStorage}.
+ *
+ * Timestamps are epoch milliseconds so the record is JSON-safe and can be
+ * compared against `Date.now()` without parsing.
+ */
+export interface StoredToken {
+    /** EVE character id, decoded from the access token's `sub` claim. */
+    characterId: number;
+    /** Character name, decoded from the access token's `name` claim. */
+    characterName: string;
+    /** Current bearer token for ESI requests. */
+    accessToken: string;
+    /** Refresh token as of the last SSO exchange; SSO rotates it on every use. */
+    refreshToken: string;
+    /** When `accessToken` expires, in epoch milliseconds. */
+    expiresAt: number;
+    /** Scopes granted to this token, decoded from the `scp` claim. */
+    scopes: string[];
+    /** The `owner` claim: changes if the character is transferred between accounts. */
+    ownerHash?: string;
+    /** When this record was last written, in epoch milliseconds. */
+    updatedAt: number;
+    /**
+     * Set when SSO rejected the refresh token as invalid. The manager stops
+     * contacting SSO for this character until it is added again.
+     */
+    revokedAt?: number;
+}
+/**
+ * Persistence contract for {@link StoredToken} records, keyed by character id.
+ *
+ * Implementations must return copies rather than shared references and must
+ * tolerate `get`/`delete` for ids they have never seen.
+ */
+export interface ITokenStorage {
+    get(characterId: number): Promise<StoredToken | null>;
+    set(characterId: number, token: StoredToken): Promise<void>;
+    delete(characterId: number): Promise<void>;
+    list(): Promise<StoredToken[]>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/auth/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,qEAAqE;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,aAAa,EAAE,MAAM,CAAC;IACtB,6CAA6C;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,YAAY,EAAE,MAAM,CAAC;IACrB,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACtD,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;CAChC"}