@naylence/runtime 0.3.4 → 0.3.5-test.0

package/dist/esm/src/naylence/fame/grants/grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/grants/grant.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yBAAyB,GAAG,aAAsB,CAAC;AAahE,MAAM,UAAU,OAAO,CAAC,SAAkB;IACxC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,SAAoC,CAAC;IACnD,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,SAAkB,EAClB,OAAO,GAAG,sBAAsB;IAEhC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC"}

package/dist/esm/src/naylence/fame/grants/http-connection-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-connection-grant.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/grants/http-connection-grant.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EAGrB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,MAAM,0BAA0B,GAAG,qBAA8B,CAAC;AACzE,MAAM,CAAC,MAAM,6BAA6B,GAAG,wBAAiC,CAAC;AAyB/E,MAAM,UAAU,qBAAqB,CACnC,SAAkB;IAElB,OAAO,CACL,iBAAiB,CAAC,SAAS,CAAC;QAC3B,SAA0C,CAAC,IAAI;YAC9C,0BAA0B;QAC5B,OAAQ,SAA0C,CAAC,GAAG,KAAK,QAAQ,CACpE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,SAAkC;IAElC,MAAM,IAAI,GACR,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;QAChC,CAAC,CAAC,SAAS,CAAC,IAAI;QAChB,CAAC,CAAC,0BAA0B,CAAC;IACjC,IAAI,IAAI,KAAK,0BAA0B,EAAE,CAAC;QACxC,MAAM,IAAI,SAAS,CACjB,sCAAsC,0BAA0B,gBAAgB,IAAI,GAAG,CACxF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GACX,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QACnE,CAAC,CAAC,SAAS,CAAC,OAAO;QACnB,CAAC,CAAC,yBAAyB,CAAC;IAEhC,qBAAqB,CACnB,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAC/B,iDAAiD,CAClD,CAAC;IAEF,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC;IAC/B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,SAAS,CACjB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,sBAAsB,CACvC,SAAS,CAAC,IAA2C,CACtD,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,OAAO;QACP,GAAG,EAAE,QAAQ;QACb,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAA8B;IAE9B,MAAM,UAAU,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACvD,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,GAAG,EAAE,UAAU,CAAC,GAAG;QACnB,IAAI,EAAE,UAAU,CAAC,IAAI;KACqB,CAAC;AAC/C,CAAC"}

package/dist/esm/src/naylence/fame/grants/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/grants/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,WAAW,EACX,OAAO,GAGR,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,GAGlB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,EAK7B,0BAA0B,EAC1B,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,+BAA+B,EAK/B,0BAA0B,EAC1B,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,iCAAiC,CAAC"}

package/dist/esm/src/naylence/fame/grants/websocket-connection-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocket-connection-grant.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/grants/websocket-connection-grant.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EAGrB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,MAAM,+BAA+B,GAC1C,0BAAmC,CAAC;AAyBtC,MAAM,UAAU,0BAA0B,CACxC,SAAkB;IAElB,OAAO,CACL,iBAAiB,CAAC,SAAS,CAAC;QAC3B,SAA+C,CAAC,IAAI;YACnD,+BAA+B;QACjC,CAAC,OAAQ,SAA+C,CAAC,GAAG,KAAK,QAAQ;YACvE,OAAQ,SAA+C,CAAC,GAAG;gBACzD,WAAW,CAAC,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,SAAuC;IAEvC,MAAM,IAAI,GACR,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;QAChC,CAAC,CAAC,SAAS,CAAC,IAAI;QAChB,CAAC,CAAC,+BAA+B,CAAC;IACtC,IAAI,IAAI,KAAK,+BAA+B,EAAE,CAAC;QAC7C,MAAM,IAAI,SAAS,CACjB,2CAA2C,+BAA+B,gBAAgB,IAAI,GAAG,CAClG,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GACX,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QACnE,CAAC,CAAC,SAAS,CAAC,OAAO;QACnB,CAAC,CAAC,yBAAyB,CAAC;IAEhC,qBAAqB,CACnB,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAC/B,sDAAsD,CACvD,CAAC;IAEF,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC;IAC/B,IACE,QAAQ,KAAK,SAAS;QACtB,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,EAC9D,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAA6B;QACrC,IAAI;QACJ,OAAO;KACR,CAAC;IAEF,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC;IACtB,CAAC;IAED,MAAM,UAAU,GAAG,sBAAsB,CACvC,SAAS,CAAC,IAA2C,CACtD,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,KAAmC;IAEnC,MAAM,UAAU,GAAG,iCAAiC,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAiC;QAC3C,IAAI,EAAE,oBAAoB;KAC3B,CAAC;IAEF,IAAI,UAAU,CAAC,GAAG,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAChC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/esm/src/naylence/fame/http/jwks-api-router.js

@@ -0,0 +1,137 @@
+/**
+ * JWKS (JSON Web Key Set) API router for Express
+ *
+ * Provides /.well-known/jwks.json endpoint for public key discovery
+ * Used by OAuth2/JWT token verification
+ */
+import express from 'express';
+import { getLogger } from '../util/logging.js';
+const logger = getLogger('naylence.fame.http.jwks_api_router');
+const DEFAULT_PREFIX = '';
+const ENV_VAR_KEY_TYPES = 'FAME_JWKS_KEY_TYPES';
+function coerceString(value) {
+    if (typeof value !== 'string') {
+        return undefined;
+    }
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+function coerceStringArray(value) {
+    if (Array.isArray(value)) {
+        const normalized = value
+            .map((entry) => coerceString(entry))
+            .filter((entry) => entry !== undefined);
+        return normalized.length > 0 ? normalized : undefined;
+    }
+    const text = coerceString(value);
+    if (text) {
+        return text
+            .split(/[\s,]+/)
+            .map((entry) => entry.trim())
+            .filter((entry) => entry.length > 0);
+    }
+    return undefined;
+}
+function normalizeCreateJwksRouterOptions(options) {
+    if (!options) {
+        return {};
+    }
+    const descriptor = options;
+    const prefix = coerceString(descriptor.prefix) ?? coerceString(descriptor.prefix);
+    const keyTypes = coerceStringArray(descriptor.keyTypes) ??
+        coerceStringArray(descriptor.key_types);
+    const getJwksJson = descriptor.getJwksJson ??
+        (typeof descriptor.get_jwks_json === 'function'
+            ? descriptor.get_jwks_json
+            : undefined);
+    const cryptoProvider = descriptor.cryptoProvider ??
+        descriptor.crypto_provider;
+    return {
+        getJwksJson,
+        cryptoProvider,
+        prefix,
+        keyTypes: keyTypes ?? undefined,
+    };
+}
+/**
+ * Get allowed key types from environment variable or parameter
+ */
+function getAllowedKeyTypes(paramKeyTypes) {
+    // Environment variable takes priority
+    const envKeyTypes = process.env[ENV_VAR_KEY_TYPES];
+    if (envKeyTypes) {
+        // Split by comma or space and strip whitespace
+        return envKeyTypes
+            .split(/[,\s]+/)
+            .map((kty) => kty.trim())
+            .filter((kty) => kty.length > 0);
+    }
+    // Fallback to parameter
+    return paramKeyTypes ?? null;
+}
+/**
+ * Filter JWKS keys by allowed key types
+ */
+function filterKeysByType(jwksData, allowedTypes) {
+    // If no filtering is configured, return original data
+    if (!allowedTypes || allowedTypes.length === 0) {
+        return jwksData;
+    }
+    const filteredKeys = jwksData.keys.filter((key) => {
+        const kty = key.kty;
+        return kty && allowedTypes.includes(kty);
+    });
+    return { ...jwksData, keys: filteredKeys };
+}
+/**
+ * Create an Express router that exposes JWKS at /.well-known/jwks.json
+ *
+ * @param options - Router configuration options
+ * @returns Express router with JWKS endpoint
+ *
+ * @example
+ * ```typescript
+ * import express from 'express';
+ * import { createJwksRouter } from '@naylence/runtime';
+ *
+ * const app = express();
+ * const cryptoProvider = new MyCryptoProvider();
+ * app.use(createJwksRouter({ cryptoProvider }));
+ * ```
+ */
+export function createJwksRouter(options = {}) {
+    const router = express.Router();
+    const { getJwksJson, cryptoProvider, prefix = DEFAULT_PREFIX, keyTypes, } = normalizeCreateJwksRouterOptions(options);
+    // Get JWKS data
+    let jwks;
+    if (getJwksJson) {
+        jwks = getJwksJson();
+    }
+    else if (cryptoProvider?.getJwks) {
+        const providerJwks = cryptoProvider.getJwks();
+        if (!providerJwks) {
+            throw new Error('Crypto provider returned null JWKS');
+        }
+        jwks = providerJwks;
+    }
+    else {
+        throw new Error('Either getJwksJson or cryptoProvider must be provided');
+    }
+    const allowedKeyTypes = getAllowedKeyTypes(keyTypes);
+    logger.debug('jwks_router_created', {
+        prefix: prefix || '/',
+        key_types: allowedKeyTypes,
+        total_keys: jwks.keys.length,
+    });
+    // JWKS endpoint
+    router.get(`${prefix}/.well-known/jwks.json`, (_req, res) => {
+        const filteredJwks = filterKeysByType(jwks, allowedKeyTypes);
+        logger.debug('jwks_served', {
+            total_keys: jwks.keys.length,
+            filtered_keys: filteredJwks.keys.length,
+        });
+        res.json(filteredJwks);
+    });
+    return router;
+}
+//# sourceMappingURL=jwks-api-router.js.map

package/dist/esm/src/naylence/fame/http/jwks-api-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwks-api-router.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/http/jwks-api-router.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,OAAwB,MAAM,SAAS,CAAC;AAE/C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,MAAM,GAAG,SAAS,CAAC,oCAAoC,CAAC,CAAC;AAE/D,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAkChD,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,KAAK;aACrB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;aACnC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QAC3D,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,IAAI;aACR,KAAK,CAAC,QAAQ,CAAC;aACf,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gCAAgC,CACvC,OAA4C;IAE5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAAG,OACM,CAAC;IAE1B,MAAM,MAAM,GACV,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,MAAa,CAAC,CAAC;IAC5E,MAAM,QAAQ,GACZ,iBAAiB,CAAC,UAAU,CAAC,QAAQ,CAAC;QACtC,iBAAiB,CAAE,UAAkB,CAAC,SAAS,CAAC,CAAC;IAEnD,MAAM,WAAW,GACf,UAAU,CAAC,WAAW;QACtB,CAAC,OAAQ,UAAkB,CAAC,aAAa,KAAK,UAAU;YACtD,CAAC,CAAG,UAAkB,CAAC,aAEnB;YACJ,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjB,MAAM,cAAc,GAClB,UAAU,CAAC,cAAc;QACvB,UAAkB,CAAC,eAA8C,CAAC;IAEtE,OAAO;QACL,WAAW;QACX,cAAc;QACd,MAAM;QACN,QAAQ,EAAE,QAAQ,IAAI,SAAS;KAChC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,aAAwB;IAClD,sCAAsC;IACtC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACnD,IAAI,WAAW,EAAE,CAAC;QAChB,+CAA+C;QAC/C,OAAO,WAAW;aACf,KAAK,CAAC,QAAQ,CAAC;aACf,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;aACxB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,wBAAwB;IACxB,OAAO,aAAa,IAAI,IAAI,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CACvB,QAAkD,EAClD,YAA6B;IAE7B,sDAAsD;IACtD,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QAChD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAyB,CAAC;QAC1C,OAAO,GAAG,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAmC,EAAE;IAErC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,MAAM,EACJ,WAAW,EACX,cAAc,EACd,MAAM,GAAG,cAAc,EACvB,QAAQ,GACT,GAAG,gCAAgC,CAAC,OAAO,CAAC,CAAC;IAE9C,gBAAgB;IAChB,IAAI,IAA8C,CAAC;IACnD,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,GAAG,WAAW,EAAE,CAAC;IACvB,CAAC;SAAM,IAAI,cAAc,EAAE,OAAO,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,EAAE,CAAC;QAC9C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,GAAG,YAAwD,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAErD,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;QAClC,MAAM,EAAE,MAAM,IAAI,GAAG;QACrB,SAAS,EAAE,eAAe;QAC1B,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;KAC7B,CAAC,CAAC;IAEH,gBAAgB;IAChB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,wBAAwB,EAAE,CAAC,IAAa,EAAE,GAAQ,EAAE,EAAE;QACxE,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAE7D,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE;YAC1B,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;YAC5B,aAAa,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM;SACxC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/esm/src/naylence/fame/http/oauth2-server-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-server-cli.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/http/oauth2-server-cli.ts"],"names":[],"mappings":";AACA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAE1C,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;IAC5B,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/esm/src/naylence/fame/http/oauth2-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-server.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/http/oauth2-server.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,MAAM,GAAG,SAAS,CAAC,kCAAkC,CAAC,CAAC;AAE7D,MAAM,gBAAgB,GAAG,UAAU,CAAC;AACpC,MAAM,gBAAgB,GAAG,UAAU,CAAC;AACpC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAE3C,MAAM,YAAY,GAAG,SAAS,CAAC;AAC/B,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B;;GAEG;AACH,SAAS,WAAW;IAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,WAAW,EAAE,CAAC;IAC/D,IAAI,QAAQ,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACrC,OAAO,QAAQ,CAAC,QAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB;IAC9B,gDAAgD;IAChD,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAC5C,yDAAyD,CAC1D,CAAC;IACF,OAAO,qBAAqB,CAAC,MAAM,EAAE,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,aAAa;IACb,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEhD,sBAAsB;IACtB,MAAM,cAAc,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAEjD,cAAc;IACd,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACrD,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IAC9C,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,CAAC,CAAC;IAE3C,wBAAwB;IACxB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,IAAI;IACjB,gBAAgB;IAChB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE1B,oBAAoB;IACpB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,YAAY,CAAC;IAC3D,MAAM,IAAI,GAAG,QAAQ,CACnB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,EACrD,EAAE,CACH,CAAC;IAEF,0CAA0C;IAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;YACzC,KAAK,EAAE,2DAA2D;SACnE,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,aAAa;IACb,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;QACpC,IAAI;QACJ,IAAI;QACJ,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;KAC7B,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IAE9B,eAAe;IACf,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;QAC1B,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;YACnC,IAAI;YACJ,IAAI;YACJ,SAAS,EAAE;gBACT,KAAK,EAAE,cAAc;gBACrB,IAAI,EAAE,wBAAwB;gBAC9B,aAAa,EAAE,mCAAmC;gBAClD,MAAM,EAAE,SAAS;aAClB;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,oBAAoB;IACpB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4BAA4B;AAC5B,OAAO,EAAE,IAAI,EAAE,CAAC"}

package/dist/esm/src/naylence/fame/http/oauth2-token-router.js

@@ -0,0 +1,308 @@
+/**
+ * OAuth2 client credentials grant flow router for Express
+ *
+ * Provides /oauth/token endpoint for local development and testing
+ * Implements OAuth2 client credentials grant with JWT token issuance
+ */
+import express from 'express';
+import { JWTTokenIssuer } from '../security/auth/jwt-token-issuer.js';
+import { getLogger } from '../util/logging.js';
+const logger = getLogger('naylence.fame.http.oauth2_token_router');
+const DEFAULT_PREFIX = '/oauth';
+const ENV_VAR_CLIENT_ID = 'FAME_JWT_CLIENT_ID';
+const ENV_VAR_CLIENT_SECRET = 'FAME_JWT_CLIENT_SECRET';
+const ENV_VAR_ALLOWED_SCOPES = 'FAME_JWT_ALLOWED_SCOPES';
+const ENV_VAR_JWT_ISSUER = 'FAME_JWT_ISSUER';
+const ENV_VAR_JWT_ALGORITHM = 'FAME_JWT_ALGORITHM';
+const ENV_VAR_JWT_AUDIENCE = 'FAME_JWT_AUDIENCE';
+const DEFAULT_JWT_ALGORITHM = 'EdDSA';
+function coerceString(value) {
+    if (typeof value !== 'string') {
+        return undefined;
+    }
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+function coerceNumber(value) {
+    if (typeof value === 'number' && Number.isFinite(value)) {
+        return value;
+    }
+    if (typeof value === 'string' && value.trim().length > 0) {
+        const parsed = Number(value);
+        if (!Number.isNaN(parsed)) {
+            return parsed;
+        }
+    }
+    return undefined;
+}
+function coerceStringArray(value) {
+    if (Array.isArray(value)) {
+        const entries = value
+            .map((entry) => coerceString(entry))
+            .filter((entry) => entry !== undefined);
+        return entries.length > 0 ? entries : undefined;
+    }
+    const text = coerceString(value);
+    if (text) {
+        const entries = text
+            .split(/[\s,]+/)
+            .map((entry) => entry.trim())
+            .filter((entry) => entry.length > 0);
+        return entries.length > 0 ? entries : undefined;
+    }
+    return undefined;
+}
+function normalizeCreateOAuth2TokenRouterOptions(options) {
+    const descriptor = options;
+    const cryptoProvider = descriptor.cryptoProvider ??
+        descriptor.crypto_provider;
+    const prefix = coerceString(descriptor.prefix) ?? coerceString(descriptor.prefix);
+    const issuer = coerceString(descriptor.issuer) ?? coerceString(descriptor.issuer);
+    const audience = coerceString(descriptor.audience) ??
+        coerceString(descriptor.audience);
+    const allowedScopes = coerceStringArray(descriptor.allowedScopes) ??
+        coerceStringArray(descriptor.allowed_scopes);
+    const algorithm = coerceString(descriptor.algorithm) ??
+        coerceString(descriptor.algorithm);
+    const tokenTtlSec = coerceNumber(descriptor.tokenTtlSec) ??
+        coerceNumber(descriptor.token_ttl_sec);
+    return {
+        cryptoProvider,
+        prefix,
+        issuer,
+        audience,
+        allowedScopes,
+        algorithm,
+        tokenTtlSec,
+    };
+}
+/**
+ * Parse Basic Auth header
+ */
+function parseBasicAuth(authHeader) {
+    if (!authHeader || !authHeader.startsWith('Basic ')) {
+        return null;
+    }
+    try {
+        const base64Credentials = authHeader.substring(6);
+        const credentials = Buffer.from(base64Credentials, 'base64').toString('utf-8');
+        const [clientId, clientSecret] = credentials.split(':');
+        if (!clientId || !clientSecret) {
+            return null;
+        }
+        return { clientId, clientSecret };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Get configured client credentials from environment
+ */
+function getConfiguredClientCredentials() {
+    const clientId = process.env[ENV_VAR_CLIENT_ID];
+    const clientSecret = process.env[ENV_VAR_CLIENT_SECRET];
+    if (!clientId || !clientSecret) {
+        throw new Error(`Server configuration error: ${ENV_VAR_CLIENT_ID} and ${ENV_VAR_CLIENT_SECRET} must be set`);
+    }
+    return { clientId, clientSecret };
+}
+/**
+ * Verify client credentials
+ */
+function verifyClientCredentials(requestCreds, configuredCreds) {
+    return (requestCreds.clientId === configuredCreds.clientId &&
+        requestCreds.clientSecret === configuredCreds.clientSecret);
+}
+/**
+ * Parse and validate allowed scopes from environment or config
+ */
+function getAllowedScopes(configScopes) {
+    const envScopes = process.env[ENV_VAR_ALLOWED_SCOPES];
+    if (envScopes) {
+        return envScopes
+            .replace(/,/g, ' ')
+            .split(/\s+/)
+            .map((s) => s.trim())
+            .filter((s) => s.length > 0);
+    }
+    return configScopes ?? ['node.connect'];
+}
+/**
+ * Validate requested scope and return granted scopes
+ */
+function validateScope(requestedScope, allowedScopes) {
+    if (!requestedScope) {
+        return allowedScopes;
+    }
+    const requestedScopes = requestedScope.split(/\s+/);
+    const grantedScopes = requestedScopes.filter((scope) => allowedScopes.includes(scope));
+    return grantedScopes.length > 0 ? grantedScopes : allowedScopes;
+}
+/**
+ * Create an Express router that implements OAuth2 client credentials grant
+ *
+ * @param options - Router configuration options
+ * @returns Express router with OAuth2 token endpoint
+ *
+ * Environment Variables:
+ *   FAME_JWT_CLIENT_ID: OAuth2 client identifier
+ *   FAME_JWT_CLIENT_SECRET: OAuth2 client secret
+ *   FAME_JWT_ISSUER: JWT issuer claim (optional)
+ *   FAME_JWT_AUDIENCE: JWT audience claim (optional)
+ *   FAME_JWT_ALGORITHM: JWT signing algorithm (optional, default: EdDSA)
+ *   FAME_JWT_ALLOWED_SCOPES: Allowed scopes (optional, default: node.connect)
+ *
+ * @example
+ * ```typescript
+ * import express from 'express';
+ * import { createOAuth2TokenRouter } from '@naylence/runtime';
+ *
+ * const app = express();
+ * app.use(express.urlencoded({ extended: true }));
+ *
+ * const cryptoProvider = new MyCryptoProvider();
+ * app.use(createOAuth2TokenRouter({ cryptoProvider }));
+ * ```
+ */
+export function createOAuth2TokenRouter(options) {
+    const router = express.Router();
+    const { cryptoProvider, prefix = DEFAULT_PREFIX, issuer, audience, tokenTtlSec, allowedScopes: configAllowedScopes, algorithm: configAlgorithm, } = normalizeCreateOAuth2TokenRouterOptions(options);
+    if (!cryptoProvider) {
+        throw new Error('cryptoProvider is required to create OAuth2 token router');
+    }
+    // Resolve configuration with environment variable priority
+    const defaultIssuer = process.env[ENV_VAR_JWT_ISSUER] ?? issuer ?? 'https://auth.fame.fabric';
+    const defaultAudience = process.env[ENV_VAR_JWT_AUDIENCE] ?? audience ?? 'fame-fabric';
+    const algorithm = process.env[ENV_VAR_JWT_ALGORITHM] ??
+        configAlgorithm ??
+        DEFAULT_JWT_ALGORITHM;
+    const allowedScopes = getAllowedScopes(configAllowedScopes);
+    const resolvedTokenTtlSec = tokenTtlSec ?? 3600;
+    logger.debug('oauth2_router_created', {
+        prefix,
+        issuer: defaultIssuer,
+        audience: defaultAudience,
+        algorithm,
+        allowedScopes,
+        tokenTtlSec: resolvedTokenTtlSec,
+    });
+    // Token endpoint
+    router.post(`${prefix}/token`, async (req, res, next) => {
+        try {
+            const { grant_type, client_id, client_secret, scope, audience: reqAudience, } = req.body;
+            // Validate grant type
+            if (grant_type !== 'client_credentials') {
+                res.status(400).json({
+                    error: 'unsupported_grant_type',
+                    error_description: 'Only client_credentials grant type is supported',
+                });
+                return;
+            }
+            // Get configured credentials
+            let configuredCreds;
+            try {
+                configuredCreds = getConfiguredClientCredentials();
+            }
+            catch (error) {
+                logger.error('oauth2_config_error', {
+                    error: error.message,
+                });
+                res.status(500).json({
+                    error: 'server_error',
+                    error_description: 'Server configuration error',
+                });
+                return;
+            }
+            // Extract client credentials from request
+            let requestCreds = null;
+            // Try Basic Auth first
+            const authHeader = req.headers.authorization;
+            if (authHeader) {
+                requestCreds = parseBasicAuth(authHeader);
+            }
+            // Fall back to form parameters
+            if (!requestCreds && client_id && client_secret) {
+                requestCreds = { clientId: client_id, clientSecret: client_secret };
+            }
+            if (!requestCreds) {
+                res.status(401).set('WWW-Authenticate', 'Basic').json({
+                    error: 'invalid_client',
+                    error_description: 'Client credentials are required',
+                });
+                return;
+            }
+            // Verify client credentials
+            if (!verifyClientCredentials(requestCreds, configuredCreds)) {
+                logger.warning('oauth2_invalid_credentials', {
+                    clientId: requestCreds.clientId,
+                });
+                res.status(401).set('WWW-Authenticate', 'Basic').json({
+                    error: 'invalid_client',
+                    error_description: 'Invalid client credentials',
+                });
+                return;
+            }
+            // Validate and determine granted scopes
+            const grantedScopes = validateScope(scope, allowedScopes);
+            // Get crypto provider keys
+            if (!cryptoProvider.signingPrivatePem ||
+                !cryptoProvider.signatureKeyId) {
+                logger.error('oauth2_missing_keys', {
+                    hasPrivateKey: !!cryptoProvider.signingPrivatePem,
+                    hasKeyId: !!cryptoProvider.signatureKeyId,
+                });
+                res.status(500).json({
+                    error: 'server_error',
+                    error_description: 'Server cryptographic configuration error',
+                });
+                return;
+            }
+            // Create token issuer
+            const tokenIssuer = new JWTTokenIssuer({
+                signingKeyPem: cryptoProvider.signingPrivatePem,
+                kid: cryptoProvider.signatureKeyId,
+                issuer: defaultIssuer,
+                algorithm,
+                ttlSec: resolvedTokenTtlSec,
+                audience: defaultAudience,
+            });
+            // Build JWT claims
+            const claims = {
+                sub: requestCreds.clientId,
+                client_id: requestCreds.clientId,
+                scope: grantedScopes.join(' '),
+            };
+            // Add audience claim
+            if (reqAudience) {
+                claims.aud = reqAudience;
+            }
+            else if (defaultAudience) {
+                claims.aud = defaultAudience;
+            }
+            // Issue the token (async)
+            const accessToken = await tokenIssuer.issue(claims);
+            logger.debug('oauth2_token_issued', {
+                clientId: requestCreds.clientId,
+                scopes: grantedScopes,
+                algorithm,
+            });
+            // Return token response
+            const response = {
+                access_token: accessToken,
+                token_type: 'Bearer',
+                expires_in: resolvedTokenTtlSec,
+            };
+            if (grantedScopes.length > 0) {
+                response.scope = grantedScopes.join(' ');
+            }
+            res.json(response);
+        }
+        catch (error) {
+            logger.error('oauth2_token_error', { error: error.message });
+            next(error);
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=oauth2-token-router.js.map

package/dist/esm/src/naylence/fame/http/oauth2-token-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-token-router.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/http/oauth2-token-router.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,OAKN,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,MAAM,GAAG,SAAS,CAAC,wCAAwC,CAAC,CAAC;AAEnE,MAAM,cAAc,GAAG,QAAQ,CAAC;AAEhC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAC/C,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AACvD,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AACzD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAC7C,MAAM,qBAAqB,GAAG,oBAAoB,CAAC;AACnD,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AAEjD,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAiEtC,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,KAAK;aAClB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;aACnC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QAC3D,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,OAAO,GAAG,IAAI;aACjB,KAAK,CAAC,QAAQ,CAAC;aACf,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,uCAAuC,CAC9C,OAAuC;IAEvC,MAAM,UAAU,GAAG,OACM,CAAC;IAE1B,MAAM,cAAc,GAClB,UAAU,CAAC,cAAc;QACvB,UAAkB,CAAC,eAA8C,CAAC;IAEtE,MAAM,MAAM,GACV,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,YAAY,CAAE,UAAkB,CAAC,MAAM,CAAC,CAAC;IAE9E,MAAM,MAAM,GACV,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,YAAY,CAAE,UAAkB,CAAC,MAAM,CAAC,CAAC;IAE9E,MAAM,QAAQ,GACZ,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC;QACjC,YAAY,CAAE,UAAkB,CAAC,QAAQ,CAAC,CAAC;IAE7C,MAAM,aAAa,GACjB,iBAAiB,CAAC,UAAU,CAAC,aAAa,CAAC;QAC3C,iBAAiB,CAAE,UAAkB,CAAC,cAAc,CAAC,CAAC;IAExD,MAAM,SAAS,GACb,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC;QAClC,YAAY,CAAE,UAAkB,CAAC,SAAS,CAAC,CAAC;IAE9C,MAAM,WAAW,GACf,YAAY,CAAC,UAAU,CAAC,WAAW,CAAC;QACpC,YAAY,CAAE,UAAkB,CAAC,aAAa,CAAC,CAAC;IAElD,OAAO;QACL,cAAc;QACd,MAAM;QACN,MAAM;QACN,QAAQ;QACR,aAAa;QACb,SAAS;QACT,WAAW;KACZ,CAAC;AACJ,CAAC;AAOD;;GAEG;AACH,SAAS,cAAc,CACrB,UAA8B;IAE9B,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,iBAAiB,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC,QAAQ,CACnE,OAAO,CACR,CAAC;QACF,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAExD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,8BAA8B;IACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAExD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,+BAA+B,iBAAiB,QAAQ,qBAAqB,cAAc,CAC5F,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAC9B,YAA+B,EAC/B,eAAkC;IAElC,OAAO,CACL,YAAY,CAAC,QAAQ,KAAK,eAAe,CAAC,QAAQ;QAClD,YAAY,CAAC,YAAY,KAAK,eAAe,CAAC,YAAY,CAC3D,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,YAAuB;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACtD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS;aACb,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;aAClB,KAAK,CAAC,KAAK,CAAC;aACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,YAAY,IAAI,CAAC,cAAc,CAAC,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CACpB,cAAkC,EAClC,aAAuB;IAEvB,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACrD,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC9B,CAAC;IAEF,OAAO,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAuC;IAEvC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,MAAM,EACJ,cAAc,EACd,MAAM,GAAG,cAAc,EACvB,MAAM,EACN,QAAQ,EACR,WAAW,EACX,aAAa,EAAE,mBAAmB,EAClC,SAAS,EAAE,eAAe,GAC3B,GAAG,uCAAuC,CAAC,OAAO,CAAC,CAAC;IAErD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IAED,2DAA2D;IAC3D,MAAM,aAAa,GACjB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,MAAM,IAAI,0BAA0B,CAAC;IAC1E,MAAM,eAAe,GACnB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,QAAQ,IAAI,aAAa,CAAC;IACjE,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QAClC,eAAe;QACf,qBAAqB,CAAC;IACxB,MAAM,aAAa,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAC5D,MAAM,mBAAmB,GAAG,WAAW,IAAI,IAAI,CAAC;IAEhD,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;QACpC,MAAM;QACN,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE,eAAe;QACzB,SAAS;QACT,aAAa;QACb,WAAW,EAAE,mBAAmB;KACjC,CAAC,CAAC;IAEH,iBAAiB;IACjB,MAAM,CAAC,IAAI,CACT,GAAG,MAAM,QAAQ,EACjB,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACxD,IAAI,CAAC;YACH,MAAM,EACJ,UAAU,EACV,SAAS,EACT,aAAa,EACb,KAAK,EACL,QAAQ,EAAE,WAAW,GACtB,GAAG,GAAG,CAAC,IAAI,CAAC;YAEb,sBAAsB;YACtB,IAAI,UAAU,KAAK,oBAAoB,EAAE,CAAC;gBACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,wBAAwB;oBAC/B,iBAAiB,EACf,iDAAiD;iBACpD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,6BAA6B;YAC7B,IAAI,eAAkC,CAAC;YACvC,IAAI,CAAC;gBACH,eAAe,GAAG,8BAA8B,EAAE,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;oBAClC,KAAK,EAAG,KAAe,CAAC,OAAO;iBAChC,CAAC,CAAC;gBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,cAAc;oBACrB,iBAAiB,EAAE,4BAA4B;iBAChD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,0CAA0C;YAC1C,IAAI,YAAY,GAA6B,IAAI,CAAC;YAElD,uBAAuB;YACvB,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;YAC7C,IAAI,UAAU,EAAE,CAAC;gBACf,YAAY,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;YAC5C,CAAC;YAED,+BAA+B;YAC/B,IAAI,CAAC,YAAY,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;gBAChD,YAAY,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;YACtE,CAAC;YAED,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;oBACpD,KAAK,EAAE,gBAAgB;oBACvB,iBAAiB,EAAE,iCAAiC;iBACrD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,4BAA4B;YAC5B,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,CAAC;gBAC5D,MAAM,CAAC,OAAO,CAAC,4BAA4B,EAAE;oBAC3C,QAAQ,EAAE,YAAY,CAAC,QAAQ;iBAChC,CAAC,CAAC;gBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;oBACpD,KAAK,EAAE,gBAAgB;oBACvB,iBAAiB,EAAE,4BAA4B;iBAChD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,wCAAwC;YACxC,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YAE1D,2BAA2B;YAC3B,IACE,CAAC,cAAc,CAAC,iBAAiB;gBACjC,CAAC,cAAc,CAAC,cAAc,EAC9B,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;oBAClC,aAAa,EAAE,CAAC,CAAC,cAAc,CAAC,iBAAiB;oBACjD,QAAQ,EAAE,CAAC,CAAC,cAAc,CAAC,cAAc;iBAC1C,CAAC,CAAC;gBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,cAAc;oBACrB,iBAAiB,EAAE,0CAA0C;iBAC9D,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,sBAAsB;YACtB,MAAM,WAAW,GAAG,IAAI,cAAc,CAAC;gBACrC,aAAa,EAAE,cAAc,CAAC,iBAAiB;gBAC/C,GAAG,EAAE,cAAc,CAAC,cAAc;gBAClC,MAAM,EAAE,aAAa;gBACrB,SAAS;gBACT,MAAM,EAAE,mBAAmB;gBAC3B,QAAQ,EAAE,eAAe;aAC1B,CAAC,CAAC;YAEH,mBAAmB;YACnB,MAAM,MAAM,GAA4B;gBACtC,GAAG,EAAE,YAAY,CAAC,QAAQ;gBAC1B,SAAS,EAAE,YAAY,CAAC,QAAQ;gBAChC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;aAC/B,CAAC;YAEF,qBAAqB;YACrB,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,CAAC,GAAG,GAAG,WAAW,CAAC;YAC3B,CAAC;iBAAM,IAAI,eAAe,EAAE,CAAC;gBAC3B,MAAM,CAAC,GAAG,GAAG,eAAe,CAAC;YAC/B,CAAC;YAED,0BAA0B;YAC1B,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAEpD,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;gBAClC,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,MAAM,EAAE,aAAa;gBACrB,SAAS;aACV,CAAC,CAAC;YAEH,wBAAwB;YACxB,MAAM,QAAQ,GAAkB;gBAC9B,YAAY,EAAE,WAAW;gBACzB,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,mBAAmB;aAChC,CAAC;YAEF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,QAAQ,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,CAAC;YAED,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/esm/src/naylence/fame/http/openid-configuration-router.js

@@ -0,0 +1,142 @@
+/**
+ * OpenID Connect Discovery configuration router for Express
+ *
+ * Provides /.well-known/openid-configuration endpoint for OAuth2/OIDC client auto-discovery
+ */
+import express from 'express';
+import { getLogger } from '../util/logging.js';
+const logger = getLogger('naylence.fame.http.openid_configuration_router');
+const DEFAULT_PREFIX = '';
+const ENV_VAR_JWT_ISSUER = 'FAME_JWT_ISSUER';
+const ENV_VAR_ALLOWED_SCOPES = 'FAME_JWT_ALLOWED_SCOPES';
+const ENV_VAR_JWT_ALGORITHM = 'FAME_JWT_ALGORITHM';
+const DEFAULT_JWT_ALGORITHM = 'EdDSA';
+function coerceString(value) {
+    if (typeof value !== 'string') {
+        return undefined;
+    }
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+function coerceStringArray(value) {
+    if (Array.isArray(value)) {
+        const entries = value
+            .map((entry) => coerceString(entry))
+            .filter((entry) => entry !== undefined);
+        return entries.length > 0 ? entries : undefined;
+    }
+    const text = coerceString(value);
+    if (text) {
+        const entries = text
+            .split(/[\s,]+/)
+            .map((entry) => entry.trim())
+            .filter((entry) => entry.length > 0);
+        return entries.length > 0 ? entries : undefined;
+    }
+    return undefined;
+}
+function normalizeOpenIDConfigurationRouterOptions(options) {
+    if (!options) {
+        return {};
+    }
+    const descriptor = options;
+    const prefix = coerceString(descriptor.prefix) ?? coerceString(descriptor.prefix);
+    const issuer = coerceString(descriptor.issuer) ?? coerceString(descriptor.issuer);
+    const baseUrl = coerceString(descriptor.baseUrl) ??
+        coerceString(descriptor.base_url);
+    const tokenEndpointPath = coerceString(descriptor.tokenEndpointPath) ??
+        coerceString(descriptor.token_endpoint_path);
+    const jwksEndpointPath = coerceString(descriptor.jwksEndpointPath) ??
+        coerceString(descriptor.jwks_endpoint_path);
+    const allowedScopes = coerceStringArray(descriptor.allowedScopes) ??
+        coerceStringArray(descriptor.allowed_scopes);
+    const algorithm = coerceString(descriptor.algorithm) ??
+        coerceString(descriptor.algorithm);
+    return {
+        prefix,
+        issuer,
+        baseUrl,
+        tokenEndpointPath,
+        jwksEndpointPath,
+        allowedScopes,
+        algorithm,
+    };
+}
+/**
+ * Parse allowed scopes from environment or config
+ */
+function getAllowedScopes(configScopes) {
+    const envScopes = process.env[ENV_VAR_ALLOWED_SCOPES];
+    if (envScopes) {
+        return envScopes
+            .replace(/,/g, ' ')
+            .split(/\s+/)
+            .map((s) => s.trim())
+            .filter((s) => s.length > 0);
+    }
+    return configScopes ?? ['node.connect'];
+}
+/**
+ * Create an Express router that implements OpenID Connect Discovery
+ *
+ * @param options - Router configuration options
+ * @returns Express router with OpenID configuration endpoint
+ *
+ * Environment Variables:
+ *   FAME_JWT_ISSUER: JWT issuer claim (optional)
+ *   FAME_JWT_ALLOWED_SCOPES: Allowed scopes (optional, default: node.connect)
+ *   FAME_JWT_ALGORITHM: JWT signing algorithm (optional, default: EdDSA)
+ *
+ * @example
+ * ```typescript
+ * import express from 'express';
+ * import { createOpenIDConfigurationRouter } from '@naylence/runtime';
+ *
+ * const app = express();
+ * app.use(createOpenIDConfigurationRouter({
+ *   issuer: 'https://auth.example.com',
+ * }));
+ * ```
+ */
+export function createOpenIDConfigurationRouter(options = {}) {
+    const router = express.Router();
+    const { prefix = DEFAULT_PREFIX, issuer, baseUrl, tokenEndpointPath = '/oauth/token', jwksEndpointPath = '/.well-known/jwks.json', allowedScopes: configAllowedScopes, algorithm: configAlgorithm, } = normalizeOpenIDConfigurationRouterOptions(options);
+    // Resolve configuration with environment variable priority
+    const defaultIssuer = process.env[ENV_VAR_JWT_ISSUER] ?? issuer ?? 'https://auth.fame.fabric';
+    const defaultBaseUrl = baseUrl ?? defaultIssuer;
+    const algorithm = process.env[ENV_VAR_JWT_ALGORITHM] ??
+        configAlgorithm ??
+        DEFAULT_JWT_ALGORITHM;
+    const allowedScopes = getAllowedScopes(configAllowedScopes);
+    logger.debug('openid_config_router_created', {
+        prefix: prefix || '/',
+        issuer: defaultIssuer,
+        baseUrl: defaultBaseUrl,
+        algorithm,
+        allowedScopes,
+    });
+    // OpenID Connect Discovery endpoint
+    router.get(`${prefix}/.well-known/openid-configuration`, (_req, res) => {
+        // Construct absolute URLs for endpoints
+        const tokenEndpoint = `${defaultBaseUrl.replace(/\/$/, '')}${tokenEndpointPath}`;
+        const jwksUri = `${defaultBaseUrl.replace(/\/$/, '')}${jwksEndpointPath}`;
+        const config = {
+            issuer: defaultIssuer,
+            token_endpoint: tokenEndpoint,
+            jwks_uri: jwksUri,
+            scopes_supported: allowedScopes,
+            response_types_supported: ['token'],
+            grant_types_supported: ['client_credentials'],
+            token_endpoint_auth_methods_supported: [
+                'client_secret_basic',
+                'client_secret_post',
+            ],
+            subject_types_supported: ['public'],
+            id_token_signing_alg_values_supported: [algorithm],
+        };
+        logger.debug('openid_config_served', { config });
+        res.json(config);
+    });
+    return router;
+}
+//# sourceMappingURL=openid-configuration-router.js.map

package/dist/esm/src/naylence/fame/http/openid-configuration-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openid-configuration-router.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/http/openid-configuration-router.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,OAAwB,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,MAAM,GAAG,SAAS,CAAC,gDAAgD,CAAC,CAAC;AAE3E,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAC7C,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AACzD,MAAM,qBAAqB,GAAG,oBAAoB,CAAC;AAEnD,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAoEtC,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,KAAK;aAClB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;aACnC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QAC3D,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,OAAO,GAAG,IAAI;aACjB,KAAK,CAAC,QAAQ,CAAC;aACf,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,yCAAyC,CAChD,OAA2D;IAE3D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAAG,OACM,CAAC;IAE1B,MAAM,MAAM,GACV,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,YAAY,CAAE,UAAkB,CAAC,MAAM,CAAC,CAAC;IAE9E,MAAM,MAAM,GACV,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,YAAY,CAAE,UAAkB,CAAC,MAAM,CAAC,CAAC;IAE9E,MAAM,OAAO,GACX,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC;QAChC,YAAY,CAAE,UAAkB,CAAC,QAAQ,CAAC,CAAC;IAE7C,MAAM,iBAAiB,GACrB,YAAY,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAC1C,YAAY,CAAE,UAAkB,CAAC,mBAAmB,CAAC,CAAC;IAExD,MAAM,gBAAgB,GACpB,YAAY,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACzC,YAAY,CAAE,UAAkB,CAAC,kBAAkB,CAAC,CAAC;IAEvD,MAAM,aAAa,GACjB,iBAAiB,CAAC,UAAU,CAAC,aAAa,CAAC;QAC3C,iBAAiB,CAAE,UAAkB,CAAC,cAAc,CAAC,CAAC;IAExD,MAAM,SAAS,GACb,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC;QAClC,YAAY,CAAE,UAAkB,CAAC,SAAS,CAAC,CAAC;IAE9C,OAAO;QACL,MAAM;QACN,MAAM;QACN,OAAO;QACP,iBAAiB;QACjB,gBAAgB;QAChB,aAAa;QACb,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,YAAuB;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACtD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS;aACb,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;aAClB,KAAK,CAAC,KAAK,CAAC;aACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,YAAY,IAAI,CAAC,cAAc,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,+BAA+B,CAC7C,UAAkD,EAAE;IAEpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,MAAM,EACJ,MAAM,GAAG,cAAc,EACvB,MAAM,EACN,OAAO,EACP,iBAAiB,GAAG,cAAc,EAClC,gBAAgB,GAAG,wBAAwB,EAC3C,aAAa,EAAE,mBAAmB,EAClC,SAAS,EAAE,eAAe,GAC3B,GAAG,yCAAyC,CAAC,OAAO,CAAC,CAAC;IAEvD,2DAA2D;IAC3D,MAAM,aAAa,GACjB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,MAAM,IAAI,0BAA0B,CAAC;IAC1E,MAAM,cAAc,GAAG,OAAO,IAAI,aAAa,CAAC;IAChD,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QAClC,eAAe;QACf,qBAAqB,CAAC;IACxB,MAAM,aAAa,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAE5D,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;QAC3C,MAAM,EAAE,MAAM,IAAI,GAAG;QACrB,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,cAAc;QACvB,SAAS;QACT,aAAa;KACd,CAAC,CAAC;IAEH,oCAAoC;IACpC,MAAM,CAAC,GAAG,CACR,GAAG,MAAM,mCAAmC,EAC5C,CAAC,IAAa,EAAE,GAAQ,EAAE,EAAE;QAC1B,wCAAwC;QACxC,MAAM,aAAa,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,iBAAiB,EAAE,CAAC;QACjF,MAAM,OAAO,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,gBAAgB,EAAE,CAAC;QAE1E,MAAM,MAAM,GAAwB;YAClC,MAAM,EAAE,aAAa;YACrB,cAAc,EAAE,aAAa;YAC7B,QAAQ,EAAE,OAAO;YACjB,gBAAgB,EAAE,aAAa;YAC/B,wBAAwB,EAAE,CAAC,OAAO,CAAC;YACnC,qBAAqB,EAAE,CAAC,oBAAoB,CAAC;YAC7C,qCAAqC,EAAE;gBACrC,qBAAqB;gBACrB,oBAAoB;aACrB;YACD,uBAAuB,EAAE,CAAC,QAAQ,CAAC;YACnC,qCAAqC,EAAE,CAAC,SAAS,CAAC;SACnD,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAEjD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/esm/src/naylence/fame/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/naylence/fame/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AAEpC,YAAY;AACZ,OAAO,EACL,yCAAyC,EACzC,oCAAoC,GACrC,MAAM,gDAAgD,CAAC;AASxD,YAAY;AACZ,OAAO,EAAE,uCAAuC,EAAE,MAAM,sCAAsC,CAAC"}