@naylence/runtime 0.3.3 → 0.3.5-test.0

package/dist/cjs/naylence/fame/http/jwks-api-router.js

@@ -1,97 +0,0 @@
-"use strict";
-/**
- * JWKS (JSON Web Key Set) API router for Express
- *
- * Provides /.well-known/jwks.json endpoint for public key discovery
- * Used by OAuth2/JWT token verification
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createJwksRouter = createJwksRouter;
-const tslib_1 = require("tslib");
-const express_1 = tslib_1.__importDefault(require("express"));
-const logging_js_1 = require("../util/logging.js");
-const logger = (0, logging_js_1.getLogger)('naylence.fame.http.jwks_api_router');
-const DEFAULT_PREFIX = '';
-const ENV_VAR_KEY_TYPES = 'FAME_JWKS_KEY_TYPES';
-/**
- * Get allowed key types from environment variable or parameter
- */
-function getAllowedKeyTypes(paramKeyTypes) {
-    // Environment variable takes priority
-    const envKeyTypes = process.env[ENV_VAR_KEY_TYPES];
-    if (envKeyTypes) {
-        // Split by comma or space and strip whitespace
-        return envKeyTypes
-            .split(/[,\s]+/)
-            .map((kty) => kty.trim())
-            .filter((kty) => kty.length > 0);
-    }
-    // Fallback to parameter
-    return paramKeyTypes ?? null;
-}
-/**
- * Filter JWKS keys by allowed key types
- */
-function filterKeysByType(jwksData, allowedTypes) {
-    // If no filtering is configured, return original data
-    if (!allowedTypes || allowedTypes.length === 0) {
-        return jwksData;
-    }
-    const filteredKeys = jwksData.keys.filter((key) => {
-        const kty = key.kty;
-        return kty && allowedTypes.includes(kty);
-    });
-    return { ...jwksData, keys: filteredKeys };
-}
-/**
- * Create an Express router that exposes JWKS at /.well-known/jwks.json
- *
- * @param options - Router configuration options
- * @returns Express router with JWKS endpoint
- *
- * @example
- * ```typescript
- * import express from 'express';
- * import { createJwksRouter } from '@naylence/runtime';
- *
- * const app = express();
- * const cryptoProvider = new MyCryptoProvider();
- * app.use(createJwksRouter({ cryptoProvider }));
- * ```
- */
-function createJwksRouter(options = {}) {
-    const router = express_1.default.Router();
-    const { getJwksJson, cryptoProvider, prefix = DEFAULT_PREFIX, keyTypes, } = options;
-    // Get JWKS data
-    let jwks;
-    if (getJwksJson) {
-        jwks = getJwksJson();
-    }
-    else if (cryptoProvider?.getJwks) {
-        const providerJwks = cryptoProvider.getJwks();
-        if (!providerJwks) {
-            throw new Error('Crypto provider returned null JWKS');
-        }
-        jwks = providerJwks;
-    }
-    else {
-        throw new Error('Either getJwksJson or cryptoProvider must be provided');
-    }
-    const allowedKeyTypes = getAllowedKeyTypes(keyTypes);
-    logger.debug('jwks_router_created', {
-        prefix: prefix || '/',
-        key_types: allowedKeyTypes,
-        total_keys: jwks.keys.length,
-    });
-    // JWKS endpoint
-    router.get(`${prefix}/.well-known/jwks.json`, (_req, res) => {
-        const filteredJwks = filterKeysByType(jwks, allowedKeyTypes);
-        logger.debug('jwks_served', {
-            total_keys: jwks.keys.length,
-            filtered_keys: filteredJwks.keys.length,
-        });
-        res.json(filteredJwks);
-    });
-    return router;
-}
-//# sourceMappingURL=jwks-api-router.js.map

package/dist/cjs/naylence/fame/http/jwks-api-router.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwks-api-router.js","sourceRoot":"","sources":["../../../../../src/naylence/fame/http/jwks-api-router.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AA0FH,4CA+CC;;AAvID,8DAA+C;AAE/C,mDAA+C;AAE/C,MAAM,MAAM,GAAG,IAAA,sBAAS,EAAC,oCAAoC,CAAC,CAAC;AAE/D,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AA2BhD;;GAEG;AACH,SAAS,kBAAkB,CAAC,aAAwB;IAClD,sCAAsC;IACtC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACnD,IAAI,WAAW,EAAE,CAAC;QAChB,+CAA+C;QAC/C,OAAO,WAAW;aACf,KAAK,CAAC,QAAQ,CAAC;aACf,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;aACxB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,wBAAwB;IACxB,OAAO,aAAa,IAAI,IAAI,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CACvB,QAAkD,EAClD,YAA6B;IAE7B,sDAAsD;IACtD,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QAChD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAyB,CAAC;QAC1C,OAAO,GAAG,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,gBAAgB,CAC9B,UAAmC,EAAE;IAErC,MAAM,MAAM,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,MAAM,EACJ,WAAW,EACX,cAAc,EACd,MAAM,GAAG,cAAc,EACvB,QAAQ,GACT,GAAG,OAAO,CAAC;IAEZ,gBAAgB;IAChB,IAAI,IAA8C,CAAC;IACnD,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,GAAG,WAAW,EAAE,CAAC;IACvB,CAAC;SAAM,IAAI,cAAc,EAAE,OAAO,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,EAAE,CAAC;QAC9C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,GAAG,YAAwD,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAErD,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;QAClC,MAAM,EAAE,MAAM,IAAI,GAAG;QACrB,SAAS,EAAE,eAAe;QAC1B,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;KAC7B,CAAC,CAAC;IAEH,gBAAgB;IAChB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,wBAAwB,EAAE,CAAC,IAAa,EAAE,GAAQ,EAAE,EAAE;QACxE,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAE7D,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE;YAC1B,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;YAC5B,aAAa,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM;SACxC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cjs/naylence/fame/http/oauth2-server-cli.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth2-server-cli.js","sourceRoot":"","sources":["../../../../../src/naylence/fame/http/oauth2-server-cli.ts"],"names":[],"mappings":";;AACA;;;GAGG;;AAEH,yDAA0C;AAE1C,IAAA,uBAAI,GAAE,CAAC,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;IAC5B,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/cjs/naylence/fame/http/oauth2-server.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth2-server.js","sourceRoot":"","sources":["../../../../../src/naylence/fame/http/oauth2-server.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;;;;;;;;GAqBG;;AA6CH,8BAqBC;AA6DQ,oBAAI;;AA7Hb,8DAA8B;AAE9B,qEAAmE;AACnE,6DAAwD;AACxD,qFAAmF;AACnF,mDAAyD;AAEzD,MAAM,MAAM,GAAG,IAAA,sBAAS,EAAC,kCAAkC,CAAC,CAAC;AAE7D,MAAM,gBAAgB,GAAG,UAAU,CAAC;AACpC,MAAM,gBAAgB,GAAG,UAAU,CAAC;AACpC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAE3C,MAAM,YAAY,GAAG,SAAS,CAAC;AAC/B,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B;;GAEG;AACH,SAAS,WAAW;IAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,WAAW,EAAE,CAAC;IAC/D,IAAI,QAAQ,IAAI,QAAQ,IAAI,qBAAQ,EAAE,CAAC;QACrC,OAAO,qBAAQ,CAAC,QAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,qBAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB;IAC9B,gDAAgD;IAChD,MAAM,EAAE,qBAAqB,EAAE,GAAG,gEAChC,yDAAyD,GAC1D,CAAC;IACF,OAAO,qBAAqB,CAAC,MAAM,EAAE,CAAC;AACxC,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,SAAS;IAC7B,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;IAEtB,aAAa;IACb,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEhD,sBAAsB;IACtB,MAAM,cAAc,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAEjD,cAAc;IACd,GAAG,CAAC,GAAG,CAAC,IAAA,gDAAuB,EAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACrD,GAAG,CAAC,GAAG,CAAC,IAAA,qCAAgB,EAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IAC9C,GAAG,CAAC,GAAG,CAAC,IAAA,gEAA+B,GAAE,CAAC,CAAC;IAE3C,wBAAwB;IACxB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,IAAI;IACjB,gBAAgB;IAChB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE1B,oBAAoB;IACpB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,YAAY,CAAC;IAC3D,MAAM,IAAI,GAAG,QAAQ,CACnB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,EACrD,EAAE,CACH,CAAC;IAEF,0CAA0C;IAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;YACzC,KAAK,EAAE,2DAA2D;SACnE,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,aAAa;IACb,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;QACpC,IAAI;QACJ,IAAI;QACJ,QAAQ,EAAE,qBAAQ,CAAC,QAAQ,CAAC;KAC7B,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IAE9B,eAAe;IACf,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;QAC1B,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;YACnC,IAAI;YACJ,IAAI;YACJ,SAAS,EAAE;gBACT,KAAK,EAAE,cAAc;gBACrB,IAAI,EAAE,wBAAwB;gBAC9B,aAAa,EAAE,mCAAmC;gBAClD,MAAM,EAAE,SAAS;aAClB;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,oBAAoB;IACpB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cjs/naylence/fame/http/oauth2-token-router.js

@@ -1,248 +0,0 @@
-"use strict";
-/**
- * OAuth2 client credentials grant flow router for Express
- *
- * Provides /oauth/token endpoint for local development and testing
- * Implements OAuth2 client credentials grant with JWT token issuance
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createOAuth2TokenRouter = createOAuth2TokenRouter;
-const tslib_1 = require("tslib");
-const express_1 = tslib_1.__importDefault(require("express"));
-const jwt_token_issuer_js_1 = require("../security/auth/jwt-token-issuer.js");
-const logging_js_1 = require("../util/logging.js");
-const logger = (0, logging_js_1.getLogger)('naylence.fame.http.oauth2_token_router');
-const DEFAULT_PREFIX = '/oauth';
-const ENV_VAR_CLIENT_ID = 'FAME_JWT_CLIENT_ID';
-const ENV_VAR_CLIENT_SECRET = 'FAME_JWT_CLIENT_SECRET';
-const ENV_VAR_ALLOWED_SCOPES = 'FAME_JWT_ALLOWED_SCOPES';
-const ENV_VAR_JWT_ISSUER = 'FAME_JWT_ISSUER';
-const ENV_VAR_JWT_ALGORITHM = 'FAME_JWT_ALGORITHM';
-const ENV_VAR_JWT_AUDIENCE = 'FAME_JWT_AUDIENCE';
-const DEFAULT_JWT_ALGORITHM = 'EdDSA';
-/**
- * Parse Basic Auth header
- */
-function parseBasicAuth(authHeader) {
-    if (!authHeader || !authHeader.startsWith('Basic ')) {
-        return null;
-    }
-    try {
-        const base64Credentials = authHeader.substring(6);
-        const credentials = Buffer.from(base64Credentials, 'base64').toString('utf-8');
-        const [clientId, clientSecret] = credentials.split(':');
-        if (!clientId || !clientSecret) {
-            return null;
-        }
-        return { clientId, clientSecret };
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Get configured client credentials from environment
- */
-function getConfiguredClientCredentials() {
-    const clientId = process.env[ENV_VAR_CLIENT_ID];
-    const clientSecret = process.env[ENV_VAR_CLIENT_SECRET];
-    if (!clientId || !clientSecret) {
-        throw new Error(`Server configuration error: ${ENV_VAR_CLIENT_ID} and ${ENV_VAR_CLIENT_SECRET} must be set`);
-    }
-    return { clientId, clientSecret };
-}
-/**
- * Verify client credentials
- */
-function verifyClientCredentials(requestCreds, configuredCreds) {
-    return (requestCreds.clientId === configuredCreds.clientId &&
-        requestCreds.clientSecret === configuredCreds.clientSecret);
-}
-/**
- * Parse and validate allowed scopes from environment or config
- */
-function getAllowedScopes(configScopes) {
-    const envScopes = process.env[ENV_VAR_ALLOWED_SCOPES];
-    if (envScopes) {
-        return envScopes
-            .replace(/,/g, ' ')
-            .split(/\s+/)
-            .map((s) => s.trim())
-            .filter((s) => s.length > 0);
-    }
-    return configScopes ?? ['node.connect'];
-}
-/**
- * Validate requested scope and return granted scopes
- */
-function validateScope(requestedScope, allowedScopes) {
-    if (!requestedScope) {
-        return allowedScopes;
-    }
-    const requestedScopes = requestedScope.split(/\s+/);
-    const grantedScopes = requestedScopes.filter((scope) => allowedScopes.includes(scope));
-    return grantedScopes.length > 0 ? grantedScopes : allowedScopes;
-}
-/**
- * Create an Express router that implements OAuth2 client credentials grant
- *
- * @param options - Router configuration options
- * @returns Express router with OAuth2 token endpoint
- *
- * Environment Variables:
- *   FAME_JWT_CLIENT_ID: OAuth2 client identifier
- *   FAME_JWT_CLIENT_SECRET: OAuth2 client secret
- *   FAME_JWT_ISSUER: JWT issuer claim (optional)
- *   FAME_JWT_AUDIENCE: JWT audience claim (optional)
- *   FAME_JWT_ALGORITHM: JWT signing algorithm (optional, default: EdDSA)
- *   FAME_JWT_ALLOWED_SCOPES: Allowed scopes (optional, default: node.connect)
- *
- * @example
- * ```typescript
- * import express from 'express';
- * import { createOAuth2TokenRouter } from '@naylence/runtime';
- *
- * const app = express();
- * app.use(express.urlencoded({ extended: true }));
- *
- * const cryptoProvider = new MyCryptoProvider();
- * app.use(createOAuth2TokenRouter({ cryptoProvider }));
- * ```
- */
-function createOAuth2TokenRouter(options) {
-    const router = express_1.default.Router();
-    const { cryptoProvider, prefix = DEFAULT_PREFIX, issuer, audience, tokenTtlSec = 3600, allowedScopes: configAllowedScopes, algorithm: configAlgorithm, } = options;
-    // Resolve configuration with environment variable priority
-    const defaultIssuer = process.env[ENV_VAR_JWT_ISSUER] ?? issuer ?? 'https://auth.fame.fabric';
-    const defaultAudience = process.env[ENV_VAR_JWT_AUDIENCE] ?? audience ?? 'fame-fabric';
-    const algorithm = process.env[ENV_VAR_JWT_ALGORITHM] ??
-        configAlgorithm ??
-        DEFAULT_JWT_ALGORITHM;
-    const allowedScopes = getAllowedScopes(configAllowedScopes);
-    logger.debug('oauth2_router_created', {
-        prefix,
-        issuer: defaultIssuer,
-        audience: defaultAudience,
-        algorithm,
-        allowedScopes,
-        tokenTtlSec,
-    });
-    // Token endpoint
-    router.post(`${prefix}/token`, async (req, res, next) => {
-        try {
-            const { grant_type, client_id, client_secret, scope, audience: reqAudience, } = req.body;
-            // Validate grant type
-            if (grant_type !== 'client_credentials') {
-                res.status(400).json({
-                    error: 'unsupported_grant_type',
-                    error_description: 'Only client_credentials grant type is supported',
-                });
-                return;
-            }
-            // Get configured credentials
-            let configuredCreds;
-            try {
-                configuredCreds = getConfiguredClientCredentials();
-            }
-            catch (error) {
-                logger.error('oauth2_config_error', {
-                    error: error.message,
-                });
-                res.status(500).json({
-                    error: 'server_error',
-                    error_description: 'Server configuration error',
-                });
-                return;
-            }
-            // Extract client credentials from request
-            let requestCreds = null;
-            // Try Basic Auth first
-            const authHeader = req.headers.authorization;
-            if (authHeader) {
-                requestCreds = parseBasicAuth(authHeader);
-            }
-            // Fall back to form parameters
-            if (!requestCreds && client_id && client_secret) {
-                requestCreds = { clientId: client_id, clientSecret: client_secret };
-            }
-            if (!requestCreds) {
-                res.status(401).set('WWW-Authenticate', 'Basic').json({
-                    error: 'invalid_client',
-                    error_description: 'Client credentials are required',
-                });
-                return;
-            }
-            // Verify client credentials
-            if (!verifyClientCredentials(requestCreds, configuredCreds)) {
-                logger.warning('oauth2_invalid_credentials', {
-                    clientId: requestCreds.clientId,
-                });
-                res.status(401).set('WWW-Authenticate', 'Basic').json({
-                    error: 'invalid_client',
-                    error_description: 'Invalid client credentials',
-                });
-                return;
-            }
-            // Validate and determine granted scopes
-            const grantedScopes = validateScope(scope, allowedScopes);
-            // Get crypto provider keys
-            if (!cryptoProvider.signingPrivatePem ||
-                !cryptoProvider.signatureKeyId) {
-                logger.error('oauth2_missing_keys', {
-                    hasPrivateKey: !!cryptoProvider.signingPrivatePem,
-                    hasKeyId: !!cryptoProvider.signatureKeyId,
-                });
-                res.status(500).json({
-                    error: 'server_error',
-                    error_description: 'Server cryptographic configuration error',
-                });
-                return;
-            }
-            // Create token issuer
-            const tokenIssuer = new jwt_token_issuer_js_1.JWTTokenIssuer({
-                signingKeyPem: cryptoProvider.signingPrivatePem,
-                kid: cryptoProvider.signatureKeyId,
-                issuer: defaultIssuer,
-                algorithm,
-                ttlSec: tokenTtlSec,
-                audience: defaultAudience,
-            });
-            // Build JWT claims
-            const claims = {
-                sub: requestCreds.clientId,
-                client_id: requestCreds.clientId,
-                scope: grantedScopes.join(' '),
-            };
-            // Add audience claim
-            if (reqAudience) {
-                claims.aud = reqAudience;
-            }
-            else if (defaultAudience) {
-                claims.aud = defaultAudience;
-            }
-            // Issue the token (async)
-            const accessToken = await tokenIssuer.issue(claims);
-            logger.debug('oauth2_token_issued', {
-                clientId: requestCreds.clientId,
-                scopes: grantedScopes,
-                algorithm,
-            });
-            // Return token response
-            const response = {
-                access_token: accessToken,
-                token_type: 'Bearer',
-                expires_in: tokenTtlSec,
-            };
-            if (grantedScopes.length > 0) {
-                response.scope = grantedScopes.join(' ');
-            }
-            res.json(response);
-        }
-        catch (error) {
-            logger.error('oauth2_token_error', { error: error.message });
-            next(error);
-        }
-    });
-    return router;
-}
-//# sourceMappingURL=oauth2-token-router.js.map

package/dist/cjs/naylence/fame/http/oauth2-token-router.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth2-token-router.js","sourceRoot":"","sources":["../../../../../src/naylence/fame/http/oauth2-token-router.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAwMH,0DAmLC;;AAzXD,8DAKiB;AAEjB,8EAAsE;AACtE,mDAA+C;AAE/C,MAAM,MAAM,GAAG,IAAA,sBAAS,EAAC,wCAAwC,CAAC,CAAC;AAEnE,MAAM,cAAc,GAAG,QAAQ,CAAC;AAEhC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAC/C,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AACvD,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AACzD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAC7C,MAAM,qBAAqB,GAAG,oBAAoB,CAAC;AACnD,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AAEjD,MAAM,qBAAqB,GAAG,OAAO,CAAC;AA4DtC;;GAEG;AACH,SAAS,cAAc,CACrB,UAA8B;IAE9B,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,iBAAiB,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC,QAAQ,CACnE,OAAO,CACR,CAAC;QACF,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAExD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,8BAA8B;IACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAExD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,+BAA+B,iBAAiB,QAAQ,qBAAqB,cAAc,CAC5F,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAC9B,YAA+B,EAC/B,eAAkC;IAElC,OAAO,CACL,YAAY,CAAC,QAAQ,KAAK,eAAe,CAAC,QAAQ;QAClD,YAAY,CAAC,YAAY,KAAK,eAAe,CAAC,YAAY,CAC3D,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,YAAuB;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACtD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS;aACb,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;aAClB,KAAK,CAAC,KAAK,CAAC;aACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,YAAY,IAAI,CAAC,cAAc,CAAC,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CACpB,cAAkC,EAClC,aAAuB;IAEvB,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACrD,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC9B,CAAC;IAEF,OAAO,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,SAAgB,uBAAuB,CACrC,OAAuC;IAEvC,MAAM,MAAM,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,MAAM,EACJ,cAAc,EACd,MAAM,GAAG,cAAc,EACvB,MAAM,EACN,QAAQ,EACR,WAAW,GAAG,IAAI,EAClB,aAAa,EAAE,mBAAmB,EAClC,SAAS,EAAE,eAAe,GAC3B,GAAG,OAAO,CAAC;IAEZ,2DAA2D;IAC3D,MAAM,aAAa,GACjB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,MAAM,IAAI,0BAA0B,CAAC;IAC1E,MAAM,eAAe,GACnB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,QAAQ,IAAI,aAAa,CAAC;IACjE,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QAClC,eAAe;QACf,qBAAqB,CAAC;IACxB,MAAM,aAAa,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAE5D,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;QACpC,MAAM;QACN,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE,eAAe;QACzB,SAAS;QACT,aAAa;QACb,WAAW;KACZ,CAAC,CAAC;IAEH,iBAAiB;IACjB,MAAM,CAAC,IAAI,CACT,GAAG,MAAM,QAAQ,EACjB,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACxD,IAAI,CAAC;YACH,MAAM,EACJ,UAAU,EACV,SAAS,EACT,aAAa,EACb,KAAK,EACL,QAAQ,EAAE,WAAW,GACtB,GAAG,GAAG,CAAC,IAAI,CAAC;YAEb,sBAAsB;YACtB,IAAI,UAAU,KAAK,oBAAoB,EAAE,CAAC;gBACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,wBAAwB;oBAC/B,iBAAiB,EACf,iDAAiD;iBACpD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,6BAA6B;YAC7B,IAAI,eAAkC,CAAC;YACvC,IAAI,CAAC;gBACH,eAAe,GAAG,8BAA8B,EAAE,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;oBAClC,KAAK,EAAG,KAAe,CAAC,OAAO;iBAChC,CAAC,CAAC;gBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,cAAc;oBACrB,iBAAiB,EAAE,4BAA4B;iBAChD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,0CAA0C;YAC1C,IAAI,YAAY,GAA6B,IAAI,CAAC;YAElD,uBAAuB;YACvB,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;YAC7C,IAAI,UAAU,EAAE,CAAC;gBACf,YAAY,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;YAC5C,CAAC;YAED,+BAA+B;YAC/B,IAAI,CAAC,YAAY,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;gBAChD,YAAY,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;YACtE,CAAC;YAED,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;oBACpD,KAAK,EAAE,gBAAgB;oBACvB,iBAAiB,EAAE,iCAAiC;iBACrD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,4BAA4B;YAC5B,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,CAAC;gBAC5D,MAAM,CAAC,OAAO,CAAC,4BAA4B,EAAE;oBAC3C,QAAQ,EAAE,YAAY,CAAC,QAAQ;iBAChC,CAAC,CAAC;gBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;oBACpD,KAAK,EAAE,gBAAgB;oBACvB,iBAAiB,EAAE,4BAA4B;iBAChD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,wCAAwC;YACxC,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YAE1D,2BAA2B;YAC3B,IACE,CAAC,cAAc,CAAC,iBAAiB;gBACjC,CAAC,cAAc,CAAC,cAAc,EAC9B,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;oBAClC,aAAa,EAAE,CAAC,CAAC,cAAc,CAAC,iBAAiB;oBACjD,QAAQ,EAAE,CAAC,CAAC,cAAc,CAAC,cAAc;iBAC1C,CAAC,CAAC;gBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,cAAc;oBACrB,iBAAiB,EAAE,0CAA0C;iBAC9D,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,sBAAsB;YACtB,MAAM,WAAW,GAAG,IAAI,oCAAc,CAAC;gBACrC,aAAa,EAAE,cAAc,CAAC,iBAAiB;gBAC/C,GAAG,EAAE,cAAc,CAAC,cAAc;gBAClC,MAAM,EAAE,aAAa;gBACrB,SAAS;gBACT,MAAM,EAAE,WAAW;gBACnB,QAAQ,EAAE,eAAe;aAC1B,CAAC,CAAC;YAEH,mBAAmB;YACnB,MAAM,MAAM,GAA4B;gBACtC,GAAG,EAAE,YAAY,CAAC,QAAQ;gBAC1B,SAAS,EAAE,YAAY,CAAC,QAAQ;gBAChC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;aAC/B,CAAC;YAEF,qBAAqB;YACrB,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,CAAC,GAAG,GAAG,WAAW,CAAC;YAC3B,CAAC;iBAAM,IAAI,eAAe,EAAE,CAAC;gBAC3B,MAAM,CAAC,GAAG,GAAG,eAAe,CAAC;YAC/B,CAAC;YAED,0BAA0B;YAC1B,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAEpD,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;gBAClC,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,MAAM,EAAE,aAAa;gBACrB,SAAS;aACV,CAAC,CAAC;YAEH,wBAAwB;YACxB,MAAM,QAAQ,GAAkB;gBAC9B,YAAY,EAAE,WAAW;gBACzB,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,WAAW;aACxB,CAAC;YAEF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,QAAQ,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,CAAC;YAED,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cjs/naylence/fame/http/openid-configuration-router.js

@@ -1,95 +0,0 @@
-"use strict";
-/**
- * OpenID Connect Discovery configuration router for Express
- *
- * Provides /.well-known/openid-configuration endpoint for OAuth2/OIDC client auto-discovery
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createOpenIDConfigurationRouter = createOpenIDConfigurationRouter;
-const tslib_1 = require("tslib");
-const express_1 = tslib_1.__importDefault(require("express"));
-const logging_js_1 = require("../util/logging.js");
-const logger = (0, logging_js_1.getLogger)('naylence.fame.http.openid_configuration_router');
-const DEFAULT_PREFIX = '';
-const ENV_VAR_JWT_ISSUER = 'FAME_JWT_ISSUER';
-const ENV_VAR_ALLOWED_SCOPES = 'FAME_JWT_ALLOWED_SCOPES';
-const ENV_VAR_JWT_ALGORITHM = 'FAME_JWT_ALGORITHM';
-const DEFAULT_JWT_ALGORITHM = 'EdDSA';
-/**
- * Parse allowed scopes from environment or config
- */
-function getAllowedScopes(configScopes) {
-    const envScopes = process.env[ENV_VAR_ALLOWED_SCOPES];
-    if (envScopes) {
-        return envScopes
-            .replace(/,/g, ' ')
-            .split(/\s+/)
-            .map((s) => s.trim())
-            .filter((s) => s.length > 0);
-    }
-    return configScopes ?? ['node.connect'];
-}
-/**
- * Create an Express router that implements OpenID Connect Discovery
- *
- * @param options - Router configuration options
- * @returns Express router with OpenID configuration endpoint
- *
- * Environment Variables:
- *   FAME_JWT_ISSUER: JWT issuer claim (optional)
- *   FAME_JWT_ALLOWED_SCOPES: Allowed scopes (optional, default: node.connect)
- *   FAME_JWT_ALGORITHM: JWT signing algorithm (optional, default: EdDSA)
- *
- * @example
- * ```typescript
- * import express from 'express';
- * import { createOpenIDConfigurationRouter } from '@naylence/runtime';
- *
- * const app = express();
- * app.use(createOpenIDConfigurationRouter({
- *   issuer: 'https://auth.example.com',
- * }));
- * ```
- */
-function createOpenIDConfigurationRouter(options = {}) {
-    const router = express_1.default.Router();
-    const { prefix = DEFAULT_PREFIX, issuer, baseUrl, tokenEndpointPath = '/oauth/token', jwksEndpointPath = '/.well-known/jwks.json', allowedScopes: configAllowedScopes, algorithm: configAlgorithm, } = options;
-    // Resolve configuration with environment variable priority
-    const defaultIssuer = process.env[ENV_VAR_JWT_ISSUER] ?? issuer ?? 'https://auth.fame.fabric';
-    const defaultBaseUrl = baseUrl ?? defaultIssuer;
-    const algorithm = process.env[ENV_VAR_JWT_ALGORITHM] ??
-        configAlgorithm ??
-        DEFAULT_JWT_ALGORITHM;
-    const allowedScopes = getAllowedScopes(configAllowedScopes);
-    logger.debug('openid_config_router_created', {
-        prefix: prefix || '/',
-        issuer: defaultIssuer,
-        baseUrl: defaultBaseUrl,
-        algorithm,
-        allowedScopes,
-    });
-    // OpenID Connect Discovery endpoint
-    router.get(`${prefix}/.well-known/openid-configuration`, (_req, res) => {
-        // Construct absolute URLs for endpoints
-        const tokenEndpoint = `${defaultBaseUrl.replace(/\/$/, '')}${tokenEndpointPath}`;
-        const jwksUri = `${defaultBaseUrl.replace(/\/$/, '')}${jwksEndpointPath}`;
-        const config = {
-            issuer: defaultIssuer,
-            token_endpoint: tokenEndpoint,
-            jwks_uri: jwksUri,
-            scopes_supported: allowedScopes,
-            response_types_supported: ['token'],
-            grant_types_supported: ['client_credentials'],
-            token_endpoint_auth_methods_supported: [
-                'client_secret_basic',
-                'client_secret_post',
-            ],
-            subject_types_supported: ['public'],
-            id_token_signing_alg_values_supported: [algorithm],
-        };
-        logger.debug('openid_config_served', { config });
-        res.json(config);
-    });
-    return router;
-}
-//# sourceMappingURL=openid-configuration-router.js.map

package/dist/cjs/naylence/fame/http/openid-configuration-router.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"openid-configuration-router.js","sourceRoot":"","sources":["../../../../../src/naylence/fame/http/openid-configuration-router.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AA6GH,0EA+DC;;AA1KD,8DAA+C;AAC/C,mDAA+C;AAE/C,MAAM,MAAM,GAAG,IAAA,sBAAS,EAAC,gDAAgD,CAAC,CAAC;AAE3E,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAC7C,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AACzD,MAAM,qBAAqB,GAAG,oBAAoB,CAAC;AAEnD,MAAM,qBAAqB,GAAG,OAAO,CAAC;AA0DtC;;GAEG;AACH,SAAS,gBAAgB,CAAC,YAAuB;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACtD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS;aACb,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;aAClB,KAAK,CAAC,KAAK,CAAC;aACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,YAAY,IAAI,CAAC,cAAc,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,+BAA+B,CAC7C,UAAkD,EAAE;IAEpD,MAAM,MAAM,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,MAAM,EACJ,MAAM,GAAG,cAAc,EACvB,MAAM,EACN,OAAO,EACP,iBAAiB,GAAG,cAAc,EAClC,gBAAgB,GAAG,wBAAwB,EAC3C,aAAa,EAAE,mBAAmB,EAClC,SAAS,EAAE,eAAe,GAC3B,GAAG,OAAO,CAAC;IAEZ,2DAA2D;IAC3D,MAAM,aAAa,GACjB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,MAAM,IAAI,0BAA0B,CAAC;IAC1E,MAAM,cAAc,GAAG,OAAO,IAAI,aAAa,CAAC;IAChD,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QAClC,eAAe;QACf,qBAAqB,CAAC;IACxB,MAAM,aAAa,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAE5D,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;QAC3C,MAAM,EAAE,MAAM,IAAI,GAAG;QACrB,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,cAAc;QACvB,SAAS;QACT,aAAa;KACd,CAAC,CAAC;IAEH,oCAAoC;IACpC,MAAM,CAAC,GAAG,CACR,GAAG,MAAM,mCAAmC,EAC5C,CAAC,IAAa,EAAE,GAAQ,EAAE,EAAE;QAC1B,wCAAwC;QACxC,MAAM,aAAa,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,iBAAiB,EAAE,CAAC;QACjF,MAAM,OAAO,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,gBAAgB,EAAE,CAAC;QAE1E,MAAM,MAAM,GAAwB;YAClC,MAAM,EAAE,aAAa;YACrB,cAAc,EAAE,aAAa;YAC7B,QAAQ,EAAE,OAAO;YACjB,gBAAgB,EAAE,aAAa;YAC/B,wBAAwB,EAAE,CAAC,OAAO,CAAC;YACnC,qBAAqB,EAAE,CAAC,oBAAoB,CAAC;YAC7C,qCAAqC,EAAE;gBACrC,qBAAqB;gBACrB,oBAAoB;aACrB;YACD,uBAAuB,EAAE,CAAC,QAAQ,CAAC;YACnC,qCAAqC,EAAE,CAAC,SAAS,CAAC;SACnD,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAEjD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cjs/naylence/fame/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/naylence/fame/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;AAEH,+DAAqC;AACrC,4DAAkC;AAClC,0DAAgC;AAChC,8DAAoC;AACpC,8DAAoC;AACpC,6DAAmC;AACnC,0DAAgC;AAChC,+DAAqC;AACrC,gEAAsC;AACtC,6DAAmC;AACnC,4DAAkC;AAClC,4DAAkC;AAClC,8DAAoC;AAEpC,YAAY;AACZ,qGAGwD;AAFtD,+JAAA,yCAAyC,OAAA;AACzC,0JAAA,oCAAoC,OAAA;AAUtC,YAAY;AACZ,iFAA+F;AAAtF,mJAAA,uCAAuC,OAAA"}

package/dist/cjs/naylence/fame/node/admission/admission-client-factory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admission-client-factory.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/node/admission/admission-client-factory.ts"],"names":[],"mappings":";;;AACA,+CAI2B;AAGd,QAAA,kCAAkC,GAAG,wBAAwB,CAAC;AAO3E,MAAsB,sBAEpB,SAAQ,iCAA2C;IAM5C,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAGvC,MAA2C,EAC3C,UAAiC,EAAE;QAEnC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,MAAM,IAAA,wBAAc,EACjC,0CAAkC,EAClC,MAAM,EACN,OAAO,CACR,CAAC;YAEF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAqB,EACxC,0CAAkC,EAClC,IAAI,EACJ,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAxCD,wDAwCC"}

package/dist/cjs/naylence/fame/node/admission/admission-client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admission-client.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/node/admission/admission-client.ts"],"names":[],"mappings":""}

package/dist/cjs/naylence/fame/node/admission/admission-profile-factory.js

@@ -1,157 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AdmissionProfileFactory = exports.FACTORY_META = void 0;
-const factory_1 = require("@naylence/factory");
-const grant_js_1 = require("../../grants/grant.js");
-const logging_js_1 = require("../../util/logging.js");
-const admission_client_factory_js_1 = require("./admission-client-factory.js");
-const logger = (0, logging_js_1.getLogger)('naylence.fame.node.admission.admission_profile_factory');
-const ENV_VAR_IS_ROOT = 'FAME_ROOT';
-const ENV_VAR_JWT_AUDIENCE = 'FAME_JWT_AUDIENCE';
-const ENV_VAR_ADMISSION_TOKEN_URL = 'FAME_ADMISSION_TOKEN_URL';
-const ENV_VAR_ADMISSION_CLIENT_ID = 'FAME_ADMISSION_CLIENT_ID';
-const ENV_VAR_ADMISSION_CLIENT_SECRET = 'FAME_ADMISSION_CLIENT_SECRET';
-const ENV_VAR_DIRECT_ADMISSION_URL = 'FAME_DIRECT_ADMISSION_URL';
-const ENV_VAR_ADMISSION_SERVICE_URL = 'FAME_ADMISSION_SERVICE_URL';
-const PROFILE_NAME_WELCOME = 'welcome';
-const PROFILE_NAME_DIRECT = 'direct';
-const PROFILE_NAME_DIRECT_HTTP = 'direct-http';
-const PROFILE_NAME_OPEN = 'open';
-const PROFILE_NAME_NOOP = 'noop';
-const PROFILE_NAME_NONE = 'none';
-const WELCOME_SERVICE_PROFILE = {
-    type: 'WelcomeServiceClient',
-    is_root: factory_1.Expressions.env(ENV_VAR_IS_ROOT, 'false'),
-    url: factory_1.Expressions.env(ENV_VAR_ADMISSION_SERVICE_URL),
-    supported_transports: ['websocket'],
-    supportedTransports: ['websocket'],
-    auth: {
-        type: 'BearerTokenHeaderAuth',
-        token_provider: {
-            type: 'OAuth2ClientCredentialsTokenProvider',
-            token_url: factory_1.Expressions.env(ENV_VAR_ADMISSION_TOKEN_URL),
-            client_id: factory_1.Expressions.env(ENV_VAR_ADMISSION_CLIENT_ID),
-            client_secret: factory_1.Expressions.env(ENV_VAR_ADMISSION_CLIENT_SECRET),
-            scopes: ['node.connect'],
-            audience: factory_1.Expressions.env(ENV_VAR_JWT_AUDIENCE),
-        },
-    },
-};
-const DIRECT_PROFILE = {
-    type: 'DirectAdmissionClient',
-    connection_grants: [
-        {
-            type: 'WebSocketConnectionGrant',
-            purpose: grant_js_1.GRANT_PURPOSE_NODE_ATTACH,
-            url: factory_1.Expressions.env(ENV_VAR_DIRECT_ADMISSION_URL),
-            auth: {
-                type: 'WebSocketSubprotocolAuth',
-                token_provider: {
-                    type: 'OAuth2ClientCredentialsTokenProvider',
-                    token_url: factory_1.Expressions.env(ENV_VAR_ADMISSION_TOKEN_URL),
-                    client_id: factory_1.Expressions.env(ENV_VAR_ADMISSION_CLIENT_ID),
-                    client_secret: factory_1.Expressions.env(ENV_VAR_ADMISSION_CLIENT_SECRET),
-                    scopes: ['node.connect'],
-                    audience: factory_1.Expressions.env(ENV_VAR_JWT_AUDIENCE),
-                },
-            },
-            ttl: 0,
-            durable: false,
-        },
-    ],
-};
-const DIRECT_HTTP_PROFILE = {
-    type: 'DirectAdmissionClient',
-    connection_grants: [
-        {
-            type: 'HttpConnectionGrant',
-            purpose: grant_js_1.GRANT_PURPOSE_NODE_ATTACH,
-            url: factory_1.Expressions.env(ENV_VAR_DIRECT_ADMISSION_URL),
-            auth: {
-                type: 'BearerTokenHeaderAuth',
-                token_provider: {
-                    type: 'OAuth2ClientCredentialsTokenProvider',
-                    token_url: factory_1.Expressions.env(ENV_VAR_ADMISSION_TOKEN_URL),
-                    client_id: factory_1.Expressions.env(ENV_VAR_ADMISSION_CLIENT_ID),
-                    client_secret: factory_1.Expressions.env(ENV_VAR_ADMISSION_CLIENT_SECRET),
-                    scopes: ['node.connect'],
-                    audience: factory_1.Expressions.env(ENV_VAR_JWT_AUDIENCE),
-                },
-            },
-            ttl: 0,
-            durable: false,
-        },
-    ],
-};
-const OPEN_PROFILE = {
-    type: 'DirectAdmissionClient',
-    connection_grants: [
-        {
-            type: 'WebSocketConnectionGrant',
-            purpose: grant_js_1.GRANT_PURPOSE_NODE_ATTACH,
-            url: factory_1.Expressions.env(ENV_VAR_DIRECT_ADMISSION_URL),
-            auth: {
-                type: 'NoAuth',
-            },
-            ttl: 0,
-            durable: false,
-        },
-    ],
-};
-const NOOP_PROFILE = {
-    type: 'NoopAdmissionClient',
-    auto_accept_logicals: true,
-};
-const PROFILE_MAP = {
-    [PROFILE_NAME_WELCOME]: WELCOME_SERVICE_PROFILE,
-    [PROFILE_NAME_DIRECT]: DIRECT_PROFILE,
-    [PROFILE_NAME_DIRECT_HTTP]: DIRECT_HTTP_PROFILE,
-    [PROFILE_NAME_OPEN]: OPEN_PROFILE,
-    [PROFILE_NAME_NOOP]: NOOP_PROFILE,
-    [PROFILE_NAME_NONE]: NOOP_PROFILE,
-};
-exports.FACTORY_META = {
-    base: admission_client_factory_js_1.ADMISSION_CLIENT_FACTORY_BASE_TYPE,
-    key: 'AdmissionProfile',
-};
-class AdmissionProfileFactory extends admission_client_factory_js_1.AdmissionClientFactory {
-    constructor() {
-        super(...arguments);
-        this.type = 'AdmissionProfile';
-    }
-    async create(config) {
-        const normalized = normalizeConfig(config);
-        const profileConfig = resolveProfileConfig(normalized.profile);
-        logger.debug('enabling_admission_profile', { profile: normalized.profile });
-        return admission_client_factory_js_1.AdmissionClientFactory.createAdmissionClient(profileConfig);
-    }
-}
-exports.AdmissionProfileFactory = AdmissionProfileFactory;
-function normalizeConfig(config) {
-    if (!config) {
-        return { profile: PROFILE_NAME_DIRECT };
-    }
-    const candidate = config;
-    const profileValue = typeof candidate.profile === 'string' && candidate.profile.trim().length > 0
-        ? candidate.profile
-        : typeof candidate.profile_name === 'string' &&
-            candidate.profile_name.trim().length > 0
-            ? candidate.profile_name
-            : typeof candidate.profileName === 'string' &&
-                candidate.profileName.trim().length > 0
-                ? candidate.profileName
-                : PROFILE_NAME_DIRECT;
-    return { profile: profileValue.toLowerCase() };
-}
-function resolveProfileConfig(profileName) {
-    const profile = PROFILE_MAP[profileName];
-    if (!profile) {
-        throw new Error(`Unknown admission profile: ${profileName}`);
-    }
-    return deepClone(profile);
-}
-function deepClone(value) {
-    return JSON.parse(JSON.stringify(value));
-}
-exports.default = AdmissionProfileFactory;
-//# sourceMappingURL=admission-profile-factory.js.map

package/dist/cjs/naylence/fame/node/admission/admission-profile-factory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admission-profile-factory.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/node/admission/admission-profile-factory.ts"],"names":[],"mappings":";;;AAAA,+CAAgD;AAChD,oDAAkE;AAClE,sDAAkD;AAClD,+EAIuC;AAGvC,MAAM,MAAM,GAAG,IAAA,sBAAS,EACtB,wDAAwD,CACzD,CAAC;AAOF,MAAM,eAAe,GAAG,WAAW,CAAC;AACpC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AACjD,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAC/D,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAC/D,MAAM,+BAA+B,GAAG,8BAA8B,CAAC;AACvE,MAAM,4BAA4B,GAAG,2BAA2B,CAAC;AACjE,MAAM,6BAA6B,GAAG,4BAA4B,CAAC;AAEnE,MAAM,oBAAoB,GAAG,SAAS,CAAC;AACvC,MAAM,mBAAmB,GAAG,QAAQ,CAAC;AACrC,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAC/C,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC,MAAM,uBAAuB,GAAoB;IAC/C,IAAI,EAAE,sBAAsB;IAC5B,OAAO,EAAE,qBAAW,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC;IAClD,GAAG,EAAE,qBAAW,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACnD,oBAAoB,EAAE,CAAC,WAAW,CAAC;IACnC,mBAAmB,EAAE,CAAC,WAAW,CAAC;IAClC,IAAI,EAAE;QACJ,IAAI,EAAE,uBAAuB;QAC7B,cAAc,EAAE;YACd,IAAI,EAAE,sCAAsC;YAC5C,SAAS,EAAE,qBAAW,CAAC,GAAG,CAAC,2BAA2B,CAAC;YACvD,SAAS,EAAE,qBAAW,CAAC,GAAG,CAAC,2BAA2B,CAAC;YACvD,aAAa,EAAE,qBAAW,CAAC,GAAG,CAAC,+BAA+B,CAAC;YAC/D,MAAM,EAAE,CAAC,cAAc,CAAC;YACxB,QAAQ,EAAE,qBAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC;SAChD;KACF;CACF,CAAC;AAEF,MAAM,cAAc,GAAoB;IACtC,IAAI,EAAE,uBAAuB;IAC7B,iBAAiB,EAAE;QACjB;YACE,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,oCAAyB;YAClC,GAAG,EAAE,qBAAW,CAAC,GAAG,CAAC,4BAA4B,CAAC;YAClD,IAAI,EAAE;gBACJ,IAAI,EAAE,0BAA0B;gBAChC,cAAc,EAAE;oBACd,IAAI,EAAE,sCAAsC;oBAC5C,SAAS,EAAE,qBAAW,CAAC,GAAG,CAAC,2BAA2B,CAAC;oBACvD,SAAS,EAAE,qBAAW,CAAC,GAAG,CAAC,2BAA2B,CAAC;oBACvD,aAAa,EAAE,qBAAW,CAAC,GAAG,CAAC,+BAA+B,CAAC;oBAC/D,MAAM,EAAE,CAAC,cAAc,CAAC;oBACxB,QAAQ,EAAE,qBAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC;iBAChD;aACF;YACD,GAAG,EAAE,CAAC;YACN,OAAO,EAAE,KAAK;SACf;KACF;CACF,CAAC;AAEF,MAAM,mBAAmB,GAAoB;IAC3C,IAAI,EAAE,uBAAuB;IAC7B,iBAAiB,EAAE;QACjB;YACE,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,oCAAyB;YAClC,GAAG,EAAE,qBAAW,CAAC,GAAG,CAAC,4BAA4B,CAAC;YAClD,IAAI,EAAE;gBACJ,IAAI,EAAE,uBAAuB;gBAC7B,cAAc,EAAE;oBACd,IAAI,EAAE,sCAAsC;oBAC5C,SAAS,EAAE,qBAAW,CAAC,GAAG,CAAC,2BAA2B,CAAC;oBACvD,SAAS,EAAE,qBAAW,CAAC,GAAG,CAAC,2BAA2B,CAAC;oBACvD,aAAa,EAAE,qBAAW,CAAC,GAAG,CAAC,+BAA+B,CAAC;oBAC/D,MAAM,EAAE,CAAC,cAAc,CAAC;oBACxB,QAAQ,EAAE,qBAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC;iBAChD;aACF;YACD,GAAG,EAAE,CAAC;YACN,OAAO,EAAE,KAAK;SACf;KACF;CACF,CAAC;AAEF,MAAM,YAAY,GAAoB;IACpC,IAAI,EAAE,uBAAuB;IAC7B,iBAAiB,EAAE;QACjB;YACE,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,oCAAyB;YAClC,GAAG,EAAE,qBAAW,CAAC,GAAG,CAAC,4BAA4B,CAAC;YAClD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;aACf;YACD,GAAG,EAAE,CAAC;YACN,OAAO,EAAE,KAAK;SACf;KACF;CACF,CAAC;AAEF,MAAM,YAAY,GAAoB;IACpC,IAAI,EAAE,qBAAqB;IAC3B,oBAAoB,EAAE,IAAI;CAC3B,CAAC;AAEF,MAAM,WAAW,GAAoC;IACnD,CAAC,oBAAoB,CAAC,EAAE,uBAAuB;IAC/C,CAAC,mBAAmB,CAAC,EAAE,cAAc;IACrC,CAAC,wBAAwB,CAAC,EAAE,mBAAmB;IAC/C,CAAC,iBAAiB,CAAC,EAAE,YAAY;IACjC,CAAC,iBAAiB,CAAC,EAAE,YAAY;IACjC,CAAC,iBAAiB,CAAC,EAAE,YAAY;CAClC,CAAC;AAEW,QAAA,YAAY,GAAG;IAC1B,IAAI,EAAE,gEAAkC;IACxC,GAAG,EAAE,kBAAkB;CACf,CAAC;AAEX,MAAa,uBAAwB,SAAQ,oDAA8C;IAA3F;;QACkB,SAAI,GAAG,kBAAkB,CAAC;IAY5C,CAAC;IAVQ,KAAK,CAAC,MAAM,CACjB,MAAgE;QAEhE,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,oBAAoB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAE/D,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;QAE5E,OAAO,oDAAsB,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;IACrE,CAAC;CACF;AAbD,0DAaC;AAMD,SAAS,eAAe,CACtB,MAA2E;IAE3E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,SAAS,GAAG,MAA0D,CAAC;IAC7E,MAAM,YAAY,GAChB,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC1E,CAAC,CAAC,SAAS,CAAC,OAAO;QACnB,CAAC,CAAC,OAAO,SAAS,CAAC,YAAY,KAAK,QAAQ;YACxC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAC1C,CAAC,CAAC,SAAS,CAAC,YAAY;YACxB,CAAC,CAAC,OAAO,SAAS,CAAC,WAAW,KAAK,QAAQ;gBACvC,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;gBACzC,CAAC,CAAC,SAAS,CAAC,WAAW;gBACvB,CAAC,CAAC,mBAAmB,CAAC;IAE9B,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,oBAAoB,CAAC,WAAmB;IAC/C,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,8BAA8B,WAAW,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,SAAS,CAAI,KAAQ;IAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAChD,CAAC;AAED,kBAAe,uBAAuB,CAAC"}