@nervur-org/dock 0.5.0 → 0.6.0

package/dist/beings/envoy.js

@@ -1,211 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// The envoy base: what every envoy is and no envoy has alone. An envoy is
-// a being of the org's standing in for a ward she does not run, an account
-// at a thing that speaks no Quo, and the trunk's envoy chapter says the
-// seven things she is. This is those seven as one class an author extends,
-// so that a vendor's envoy is her asks out, her signature and her decoding,
-// and nothing else.
-//
-// Two gates, one credential, one way out, one way in, one memory, one way
-// back. `credential` and `forget` are the owner's; `deliver`, for an envoy
-// that is called in, is the owner's too, and the daemon asks it with the
-// vendor's raw bytes and headers. What an occupant may ask is the class's
-// asks out, gated by `occupant` or by her own reading of the notes.
-//
-// Nothing here knows a vendor's name. The signature is `verify`, the
-// vocabulary is `decode`, and what a delivery wakes is `wake`, each a
-// method the class fills; the base keeps the discipline around them: the
-// bytes checked before anything is parsed, the id kept bounded so a retry
-// lands once, `{ ok }` answered before the wake goes out, a wake that meets
-// silence written down and never retried.
-import { Being, isSilence, isWord, wordOf } from 'nervur';
-// The two gates. The owner is the ward's ask pointer, `{ id: 'OWNER' }`,
-// which is how the daemon asks `deliver` and how the root places a
-// credential; an occupant is anyone holding a standing at her.
-export const owner = (_rec, asker) => asker.id === 'OWNER';
-export const occupant = (rec) => rec !== undefined;
-// The third gate: who may place what the vendor gave this account. WORLDS
-// has placing an envoy as an ask on home, shown by the gate to the org's
-// presences and to its model, with the box never logged into for it, so
-// this cannot be the owner alone. It is the owner or an occupant whose
-// note says she may, placed with her standing the way every other note is,
-// and it is never a default: an org that marked nobody has the root's
-// shell and nothing else, which is where this began.
-export const places = (rec, asker) => asker.id === 'OWNER' || rec?.notes.credential === true;
-// A credential as a form, for a class that wants one. `at` is never among
-// the fields and cannot be: it is where this box sends the org's key, so a
-// form that set it would be a form that points the box at anywhere and
-// makes it fetch there with the account's own secret. Where a vendor
-// answers is the class's, since the class is the thing that speaks that
-// vendor, and only the owner may name another.
-export const CREDENTIAL = (properties, required) => ({
-    description: 'what the vendor gave this account: kept in her cells, and never shown again',
-    input: { type: 'object', properties, required },
-    for: places,
-});
-const SEEN = 200;
-const FRESH = 5 * 60_000;
-export class Envoy extends Being {
-    static cells = { credential: null, about: {}, seen: [], unwoken: [] };
-    static asks = {
-        credential: { description: 'what the vendor gave the account: kept in her cells, never shown', input: { type: 'object' }, for: places },
-        forget: { description: 'forget the credential', input: { type: 'object' }, for: places },
-    };
-    // The one ask in, for an envoy the vendor calls: a class that is called
-    // in spreads it into her asks, `{ ...Envoy.asks, ...Envoy.IN, ...hers }`,
-    // and a one-way envoy shows no deliver at all.
-    static IN = {
-        deliver: { description: 'the vendor delivers: its raw bytes and headers, from the daemon as the owner', input: { type: 'object', properties: { body: { type: 'string' }, headers: { type: 'object' } }, required: ['body', 'headers'] }, for: owner },
-    };
-    // 1. Her credential is in her cells, and she gets it herself. The owner
-    // places what the vendor gave, values only; `check` is the class's word
-    // on what it must hold, a reason or null.
-    check(c) {
-        for (const [k, v] of Object.entries(c))
-            if (typeof v !== 'string' || v === '')
-                return `${k} is a non-empty string`;
-        return Object.keys(c).length ? null : 'a credential has at least one field';
-    }
-    // Where the vendor answers, as the class that speaks that vendor knows
-    // it. A class that leaves it null has an owner who must name one once.
-    static at = null;
-    credential(args, asker) {
-        // `at` is the one field a form may not carry. From anyone but the
-        // owner it is dropped rather than refused, since a human pasting a key
-        // has said nothing about it either way, and what stands is the one
-        // already placed or the class's own.
-        const { at: named, ...rest } = args;
-        const at = asker.id === 'OWNER' && typeof named === 'string' ? named : (this.held?.at ?? this.constructor.at);
-        const c = { ...rest, ...(typeof at === 'string' ? { at } : {}) };
-        const why = this.check(c);
-        if (why)
-            return { error: why };
-        this.cells.credential = c;
-        return { kept: true };
-    }
-    forget() {
-        this.cells.credential = null;
-        return { kept: false };
-    }
-    get held() {
-        return this.cells.credential ?? null;
-    }
-    // 2. Her asks out are the vendor's surface, narrowed: one fetch, from
-    // `at` in her credential with `key` as the bearer, the answer as values.
-    // The class reshapes what it heard and passes nothing through raw.
-    async out(path, init = {}) {
-        const c = this.held;
-        if (!c || typeof c.at !== 'string')
-            return { ok: false, status: 0, body: { error: 'no credential: the owner has not placed one' } };
-        let r;
-        try {
-            r = await fetch(`${c.at}${path}`, {
-                method: init.method ?? (init.body ? 'POST' : 'GET'),
-                headers: { ...(typeof c.key === 'string' ? { authorization: `Bearer ${c.key}` } : {}), ...(init.body ? { 'content-type': 'application/json' } : {}), ...(init.headers ?? {}) },
-                ...(init.body ? { body: JSON.stringify(init.body) } : {}),
-            });
-        }
-        catch {
-            return { ok: false, status: 0, body: { error: 'the vendor is unreachable' } };
-        }
-        const v = (await r.json().catch(() => ({})));
-        const body = v !== null && typeof v === 'object' && !Array.isArray(v) ? v : {};
-        return { ok: r.ok, status: r.status, body };
-    }
-    // The vendor's no, as an error object in her own words.
-    refused(h) {
-        return h.status === 0 ? h.body : { error: `the vendor refused: ${h.status}${typeof h.body.message === 'string' ? ` ${h.body.message}` : ''}` };
-    }
-    // 4. Her cells are what the vendor told her: the map from the vendor's id
-    // to whom it is about, written when she asked out, read when called in.
-    remember(vendorId, by, more = {}) {
-        this.cells.about[vendorId] = { by, ...more };
-    }
-    recall(vendorId) {
-        const m = this.cells.about;
-        return Object.hasOwn(m, vendorId) ? m[vendorId] : undefined;
-    }
-    // 3. `deliver` is her one ask in. The daemon asks it as the owner with
-    // the raw body and the headers; an empty body is a redirect landing,
-    // the query in the headers under `:query`. The signature is checked
-    // before anything is parsed; a delivery she has seen is `{ ok }` at once
-    // and wakes nobody twice; and 6, `{ ok }` goes back before the wake.
-    async deliver(args) {
-        const body = typeof args.body === 'string' ? args.body : '';
-        const headers = (args.headers && typeof args.headers === 'object' && !Array.isArray(args.headers) ? args.headers : {});
-        if (body === '')
-            return this.landed(headers[':query'] ?? '', headers);
-        if (!(await this.verify(body, headers)))
-            return { error: 'bad signature' };
-        const d = this.decode(body, headers);
-        if ('error' in d)
-            return d;
-        const seen = this.cells.seen;
-        const mark = `${d.kind}:${d.id}`;
-        if (seen.includes(mark))
-            return { ok: true };
-        seen.push(mark);
-        while (seen.length > SEEN)
-            seen.shift();
-        void this.#wake(d);
-        return { ok: true };
-    }
-    // The class's word on the vendor's signature, over the bytes as sent.
-    verify(_body, _headers) {
-        return false;
-    }
-    // The class's reading of the vendor's vocabulary.
-    decode(_body, _headers) {
-        return { error: 'not called in' };
-    }
-    // Where a redirect lands: an OAuth code in the query, for a class that
-    // begins its account that way. The base takes nothing from it.
-    landed(_query, _headers) {
-        return { ok: true };
-    }
-    // A signature over text with a shared secret, hex, the shape most
-    // vendors sign in: here once so a class writes the vendor's framing only.
-    async hmac(secret, text) {
-        const key = await crypto.subtle.importKey('raw', new TextEncoder().encode(secret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
-        return [...new Uint8Array(await crypto.subtle.sign('HMAC', key, new TextEncoder().encode(text)))].map((x) => x.toString(16).padStart(2, '0')).join('');
-    }
-    // Whether a vendor's timestamp is within five minutes of now, in seconds
-    // or in milliseconds, since vendors sign in either and a class should
-    // not have to know which.
-    fresh(ts) {
-        const t = Number(ts);
-        if (!Number.isFinite(t))
-            return false;
-        const ms = t < 1e11 ? t * 1000 : t;
-        return Math.abs(Date.now() - ms) <= FRESH;
-    }
-    // 5. Her way back is a standing placed like any other, `to:<id>` for the
-    // occupant a vendor id was remembered for, handed to her at the knock.
-    // A delivery is one ask on it, in her own words, said by `wake`; the
-    // being woken cannot tell it from a clock.
-    wake(_d, _about) {
-        return null;
-    }
-    async #wake(d) {
-        const about = d.about === null ? undefined : this.recall(d.about);
-        const w = this.wake(d, about);
-        if (!w)
-            return;
-        const unwoken = this.cells.unwoken;
-        // a wake the class shaped wrong is written down, never dropped on the floor
-        if (typeof w.method !== 'string' || !w.method || w.args === null || typeof w.args !== 'object')
-            return void unwoken.push({ id: d.id, kind: d.kind, why: 'a wake is { method, args }' });
-        const back = about ? this.standings[`to:${about.by}`] : undefined;
-        if (!back)
-            return void unwoken.push({ id: d.id, kind: d.kind, why: about ? `no way back to ${about.by}` : 'about nobody she remembers' });
-        const out = await back.ask(w.method, w.args);
-        if (isSilence(out) || out === undefined)
-            unwoken.push({ id: d.id, kind: d.kind, why: 'silence' });
-        else if (isWord(out))
-            unwoken.push({ id: d.id, kind: d.kind, why: wordOf(out) });
-    }
-    // What she could not wake, for the device's own code and a suite.
-    get unwoken() {
-        return this.cells.unwoken;
-    }
-}

package/dist/dock/console.d.ts

@@ -1,6 +0,0 @@
-import { Carrier } from '../beings/carry.ts';
-import type { Asker, OccupantRecord } from 'nervur';
-export declare const CONSOLE = "console";
-export declare class Console extends Carrier {
-    static carries(occupant: OccupantRecord | undefined, _asker: Asker): boolean;
-}

package/dist/dock/console.js

@@ -1,20 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// The box, as one being. A device has no surface of its own, so a box that
-// has joined no world has nothing to draw: the Console is that page and only
-// that. She carries the faculties her harbor stood, showing each one's asks
-// as her own, and the ordinary screen draws her exactly as it draws a
-// world's user being, through one avatar holding one standing.
-//
-// She exists because a fresh install otherwise asks for location and
-// notifications in its manifest and shows nothing that ever asks for them,
-// which is a store reviewer's first question and a human's second.
-//
-// She carries for whoever the harbor's root let in, and for nobody else: the
-// root is the box, and it invites the one avatar its own screen runs.
-import { Carrier } from '../beings/carry.js';
-export const CONSOLE = 'console';
-export class Console extends Carrier {
-    static carries(occupant, _asker) {
-        return occupant !== undefined;
-    }
-}

package/dist/dock/dialers.js

@@ -1,75 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// The box's dialers: `dialers`, one faculty of the dock ward, standing for
-// the sockets this box holds open to other harbors' `quo.` routes. A Mac
-// behind NAT, a phone on the mobile network, a droplet dialing home: each
-// is a dialer, and what it dials is a row in her cells, placed once by the
-// root with `keep` the way a schedule is placed on the clock and an agent
-// on the agents faculty, in no file.
-//
-// A row is one URL, the `quo.` route of the harbor dialed. She holds the
-// socket from her birth on, as every faculty holds what the box holds: one
-// line per row, announcing this harbor's wards on open, binding the far
-// side's pks, reconnecting with backoff when the line drops, and closed
-// when the row is dropped or the box goes down. The dialer itself is the
-// library's, written on the standard socket surface, so this faculty holds
-// on every terrain that has a socket; the daemon hands her the harbor to
-// dial for, as it hands the agents faculty how to run a row.
-import { OWNER } from 'nervur';
-import { dial } from 'nervur/harbor';
-import { Faculty } from './faculty.js';
-// The name the dock ward holds her under.
-export const DIALERS = 'dialers';
-// The root and nobody else: a line held open is the device's own to place.
-const root = (_occ, asker) => asker.id === OWNER;
-const URL_ = { type: 'object', properties: { url: { type: 'string' } }, required: ['url'] };
-export class Dialers extends Faculty {
-    static cells = { watched: {}, minted: 0, dialers: {} };
-    static asks = {
-        keep: { description: 'hold a socket to that quo. route, from now and from every boot, until it is dropped', input: URL_, for: root },
-        drop: { description: 'close the socket to that route and forget it', input: URL_, for: root },
-        list: { description: 'every route she dials, and whether the line is open now', input: { type: 'object' }, for: root },
-    };
-    harbor;
-    open = new Map();
-    get rows() {
-        return this.cells.dialers;
-    }
-    // Every row dialed, once the daemon has handed the harbor to dial for.
-    start(harbor) {
-        this.harbor = harbor;
-        for (const row of Object.values(this.rows))
-            this.#dial(row.url);
-    }
-    #dial(url) {
-        if (!this.harbor || this.open.has(url))
-            return;
-        this.open.set(url, dial(this.harbor, url));
-    }
-    keep(args) {
-        const url = args.url;
-        if (typeof url !== 'string' || !/^https?:\/\/\S+$/.test(url))
-            return { error: 'url is the quo. route of the harbor dialed, over http or https' };
-        const clean = url.replace(/\/$/, '');
-        this.rows[clean] = { url: clean };
-        this.#dial(clean);
-        return { kept: clean };
-    }
-    drop(args) {
-        const url = typeof args.url === 'string' ? args.url.replace(/\/$/, '') : '';
-        if (!this.rows[url])
-            return { error: 'no such route' };
-        this.open.get(url)?.close();
-        this.open.delete(url);
-        delete this.rows[url];
-        return { dropped: url };
-    }
-    list() {
-        return { dialers: Object.keys(this.rows).map((url) => ({ url, open: this.open.get(url)?.socket !== null && this.open.has(url) })) };
-    }
-    // The device puts the box down: every line closes, the rows stay.
-    close() {
-        for (const d of this.open.values())
-            d.close();
-        this.open.clear();
-    }
-}

package/dist/dock/faculty.d.ts

@@ -1,24 +0,0 @@
-import { Being } from 'nervur';
-import type { Asker, JsonObject } from 'nervur';
-export type Watched = {
-    by: string;
-    method: string;
-    args: JsonObject;
-};
-export type Woke = {
-    id: string;
-    by: string;
-    out: unknown;
-};
-export declare class Faculty extends Being {
-    static cells: JsonObject;
-    watch(args: JsonObject, asker: Asker): Promise<JsonObject>;
-    protected welcomed(_id: string): Promise<void>;
-    protected woke(round?: (w: Watched) => JsonObject, only?: string): Promise<Woke[] | null>;
-    get watching(): Record<string, Watched>;
-}
-export declare const settled: () => Promise<void>;
-export declare function join(b: Being, name: string, watch?: {
-    method: string;
-    args?: JsonObject;
-}, id?: string): Promise<string | null>;

package/dist/dock/faculty.js

@@ -1,142 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// A faculty: one being of the dock ward, standing for one thing the box can
-// do. She is a being and nothing else, so what is here is not a second kind
-// of object but the two moves every faculty shares.
-//
-// Out: whoever holds a standing at her asks her methods, and the occupant's
-// notes say what that caller is, a prefix on a store, an account at a
-// vendor. Her own cells say what the thing is.
-//
-// Back: `watch` is the one subscribe verb every faculty has. A being who
-// wants waking mints an invitation and hands it over, this takes it as a
-// standing, and from then on she is asked at her own door as the occupant
-// she named. `occupants.remove` on her side is the whole of unsubscribe: the
-// next wake hears `removed` and the row goes.
-//
-// She holds what the box holds and begins holding it at birth: the
-// connection, the interval, the worker, the route are opened in her
-// constructor, and she is born whether or not the thing is reachable,
-// answering an error object while it is not.
-import { Being, isInvitation, isSilence, isWord, wordOf } from 'nervur';
-export class Faculty extends Being {
-    static cells = { watched: {}, minted: 0 };
-    // Someone wants waking. She hands the invitation she minted and says what
-    // to ask her; this knocks it, takes it under an id of this being's own,
-    // and files it. The id never crosses: it is this side's name for the
-    // relation, and the caller's name for the same relation is her own.
-    //
-    // The empty ask is the knock, because every being answers one and asking
-    // for a named ask would make every subscriber owe a method she does not
-    // otherwise need.
-    async watch(args, asker) {
-        const inv = args.invitation;
-        if (!isInvitation(inv) || typeof args.method !== 'string')
-            return { error: 'an invitation and a method' };
-        const extra = args.args;
-        if (extra !== undefined && (extra === null || typeof extra !== 'object' || Array.isArray(extra)))
-            return { error: 'args is one object' };
-        const out = await this.knock(inv);
-        if (isSilence(out) || isWord(out))
-            return { error: 'no way back' };
-        const cells = this.cells;
-        const id = await this.take(`wake:${(cells.minted += 1)}`, inv);
-        if (id === null)
-            return { error: 'not taken' };
-        cells.watched[id] = { by: asker.id ?? '', method: args.method, args: extra ?? {} };
-        await this.welcomed(id);
-        return { watching: id };
-    }
-    // Somebody new is filed, and the answer to her `watch` waits for this. A
-    // faculty that owes a new subscriber something at once says it here: the
-    // timer wakes her, learns when she is next due and arms the box for it, so
-    // a being born long after the box was up is not waiting for a round nobody
-    // scheduled. Most faculties owe nothing, and this is why they say nothing.
-    async welcomed(_id) { }
-    // One round of waking. Each subscriber is asked what she asked to be
-    // asked, with whatever this round adds. A subscriber who removed the
-    // occupant says `removed` once, and her row goes with the standing; there
-    // is nothing to retry and nothing to remember.
-    //
-    // `only` is one subscriber of the round's own choosing, named by this
-    // being's own id for the relation, and it is the same round down to one
-    // row: a faculty that wakes somebody just filed learns exactly what a full
-    // round would have learned about her.
-    //
-    // `dropped` is this being herself: her ward took her out, so the standings
-    // she holds reach nobody. Null says so, and whoever holds the interval puts
-    // it down rather than waking an empty room for as long as the box is up.
-    async woke(round = (w) => w.args, only) {
-        const cells = this.cells;
-        const out = [];
-        for (const [id, w] of Object.entries(cells.watched)) {
-            if (only !== undefined && id !== only)
-                continue;
-            const said = await this.standings[id]?.ask(w.method, round(w));
-            if (said === undefined || (isWord(said) && wordOf(said) === 'dropped'))
-                return null;
-            if (isWord(said) && wordOf(said) === 'removed') {
-                this.standings.remove(id);
-                delete cells.watched[id];
-                continue;
-            }
-            out.push({ id, by: w.by, out: said });
-        }
-        return out;
-    }
-    // Who is waiting, by this being's own id for the relation. For a device's
-    // own code and for a suite; it crosses no door.
-    get watching() {
-        return this.cells.watched;
-    }
-}
-// The three moves a being makes at every birth to hold what her box lends.
-// A standing points at a being and not at a box, so one she wakes up holding
-// names a being on the box she was on when it was made; a restart and a
-// migration are the same silent event to her, so she does these again every
-// time she is constructed and is always pointed at the box she is on.
-//
-// `watch` says she wants waking too: her ward mints the occupant, the
-// faculty takes the standing it makes, and from then on the wake arrives at
-// her door under the id she chose.
-// Every join in flight on this box. A being takes what her box lends at her
-// birth, and birth is synchronous while taking a standing is not, so a
-// harbor that answered "up" before they landed would be a box whose first
-// tick woke nobody and whose first ring reached no platform. The terrain
-// waits on this once, after its wards are hosted; nothing else reads it, and
-// a join that fails leaves nothing behind but a being who asks again.
-const flight = new Set();
-export const settled = async () => {
-    while (flight.size) {
-        const now = [...flight];
-        await Promise.allSettled(now);
-        for (const p of now)
-            flight.delete(p);
-    }
-};
-export function join(b, name, watch, id = name) {
-    const p = joining(b, name, watch, id);
-    flight.add(p);
-    void p.catch(() => { });
-    return p;
-}
-async function joining(b, name, watch, id) {
-    // One turn, before anything is asked. A being is called at her door and
-    // holds her stance from her first line, but her ward sets that door after
-    // her constructor returns, so a stance call made inside it reaches a being
-    // her ward does not hold yet and is answered as one taken out. Every
-    // faculty relation is made at birth, so the wait belongs here rather than
-    // in each of them.
-    await Promise.resolve();
-    b.standings.remove(id);
-    b.occupants.remove(`${id}:wake`);
-    const got = await b.lend(name, id);
-    if (got === null)
-        return null;
-    if (!watch)
-        return got;
-    const back = await b.invite(`${id}:wake`);
-    if (!back)
-        return got;
-    await b.standings[id]?.ask('watch', { invitation: back, method: watch.method, ...(watch.args ? { args: watch.args } : {}) });
-    return got;
-}

package/dist/dock/grants.js

@@ -1,99 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// The box's grants: `grants`, one faculty of the dock ward. A bearer to an
-// identity in a world, honoured on every route alike. A route says the
-// grammar a caller speaks, forms, tools or JSON, and a grant says who the
-// caller is; no route holds a table of its own. She spans every world the
-// box hosts, and a grant maps a token to an identity and nothing else: the
-// credential is the invitation the avatar knocked with, spent once, and a
-// grant only remembers which avatar a client speaks through. No secret of
-// Quo's is ever here.
-//
-// Her tokens are her cells, kept by the dock ward's partition like every
-// faculty's and by no file of her own, so a box has one place its state is
-// and the harbor's one secret wraps them. Issuing, refreshing and revoking
-// are the routes' to call on her in this process, as the daemon mints a
-// nonce on `local`: none is an ask, none crosses a door, and she answers
-// nothing at hers.
-//
-// A grant is issued by whoever finished a way in: the OAuth exchange on the
-// model side, or the api route trading an invitation straight for tokens.
-// An access token lives an hour and a refresh token thirty days, and
-// refresh rotates. Revocation is the user being removing the occupant,
-// and the route that hears `removed` asks for the grants to go with it.
-import { Faculty } from './faculty.js';
-// The name the dock ward holds her under.
-export const GRANTS = 'grants';
-export const ACCESS_TTL = 60 * 60 * 1000; // an access token, one hour
-export const REFRESH_TTL = 30 * 24 * 60 * 60 * 1000; // a refresh token, thirty days
-// A token is a string the far side offers, and a bare lookup would find
-// `__proto__` and hand back an object with no identity. Own keys only.
-const own = (rec, key) => (Object.hasOwn(rec, key) ? rec[key] : undefined);
-// Thirty-two random bytes as base64url, from the web crypto and the base64
-// every runtime has, so nothing of node stands in a file a tab bundles or a
-// worker imports. `Buffer` is not among those: a worker has one only when a
-// deploy asks for node's shims, and the box's grants are the same code on
-// every terrain.
-const token = () => {
-    const bytes = globalThis.crypto.getRandomValues(new Uint8Array(32));
-    let binary = '';
-    for (const b of bytes)
-        binary += String.fromCharCode(b);
-    return btoa(binary).replaceAll('+', '-').replaceAll('/', '_').replaceAll('=', '');
-};
-export class Grants extends Faculty {
-    static cells = { ...Faculty.cells, access: {}, refresh: {} };
-    static asks = {};
-    // The ward's save, set by whoever holds her ward: a token issued is a
-    // cell written, and the routes answer with a token the partition keeps.
-    persist = async () => { };
-    // The clock, a suite's to move.
-    now = () => Date.now();
-    get kept() {
-        return this.cells;
-    }
-    async issue(identity, ward, client) {
-        const access_token = token(), refresh_token = token();
-        this.kept.access[access_token] = { identity, ward, client, exp: this.now() + ACCESS_TTL };
-        this.kept.refresh[refresh_token] = { identity, ward, client, exp: this.now() + REFRESH_TTL };
-        this.sweep();
-        await this.persist();
-        return { access_token, token_type: 'Bearer', expires_in: ACCESS_TTL / 1000, refresh_token, scope: 'nervur' };
-    }
-    // Rotated: the old one is gone with the new one's birth. Null is a token
-    // nobody issued, or one that died.
-    async refresh(refresh_token) {
-        const r = own(this.kept.refresh, refresh_token);
-        if (!r || r.exp < this.now())
-            return null;
-        delete this.kept.refresh[refresh_token];
-        return this.issue(r.identity, r.ward, r.client);
-    }
-    // The bearer on a request, to an identity in a world. Null is a stranger,
-    // or a token that died; a route tells the two apart by whether the
-    // request offered one at all.
-    bearer(req) {
-        const g = own(this.kept.access, offered(req));
-        return g && g.exp >= this.now() && typeof g.identity === 'string' ? { identity: g.identity, ward: g.ward } : null;
-    }
-    // Every grant an identity holds in a world, gone: the box's half of
-    // revocation. The other half is the user being removing the occupant.
-    async revoke(identity, ward) {
-        for (const k of ['access', 'refresh'])
-            for (const [t, g] of Object.entries(this.kept[k]))
-                if (g.identity === identity && g.ward === ward)
-                    delete this.kept[k][t];
-        await this.persist();
-    }
-    sweep() {
-        const now = this.now();
-        for (const k of ['access', 'refresh'])
-            for (const [t, g] of Object.entries(this.kept[k]))
-                if (!(g.exp >= now))
-                    delete this.kept[k][t];
-    }
-}
-// What a request offered as its bearer, or nothing.
-export const offered = (req) => {
-    const h = req.headers.get('authorization') ?? '';
-    return h.startsWith('Bearer ') ? h.slice(7) : '';
-};

package/dist/dock/index.d.ts

@@ -1,41 +0,0 @@
-import type { Harbor, Lend } from 'nervur/harbor';
-import { Faculty } from './faculty.ts';
-import { Console } from './console.ts';
-import { Local } from './local.ts';
-import { Location } from './location.ts';
-import { Notifications } from './notifications.ts';
-import { Push } from './push.ts';
-import { Timer } from './timer.ts';
-export { Console, CONSOLE } from './console.ts';
-export { Faculty, join, settled, type Watched, type Woke } from './faculty.ts';
-export { Local, LOCAL } from './local.ts';
-export { Location, type Where } from './location.ts';
-export { Notifications } from './notifications.ts';
-export { Push, isToken, bellOf, banner, sealBanner, SEAL, type Token, type Ring, type Line } from './push.ts';
-export { Timer } from './timer.ts';
-export { webPush, mintVapid, publicOf, type Vapid } from './webpush.ts';
-export { apnsPush, pkcs8, HOSTS, type Apns } from './apns.ts';
-export { fcmPush, isAccount, DOORS, type Account, type Doors } from './fcm.ts';
-export { handedTo, ringing, routed } from './service.ts';
-export declare const LOCATION = "location";
-export declare const NOTIFICATIONS = "notifications";
-export declare const PUSH = "push";
-export declare const TIMER = "timer";
-export declare const FACULTIES: Record<string, string>;
-export declare const FACULTY_CLASSES: {
-    Console: typeof Console;
-    Local: typeof Local;
-    Location: typeof Location;
-    Notifications: typeof Notifications;
-    Push: typeof Push;
-    Timer: typeof Timer;
-};
-export declare const DOCK = "dock";
-export declare function stand(harbor: Harbor, lent?: Record<string, string>): Promise<Lend>;
-export type Rooted = {
-    ask(method?: string, args?: Record<string, unknown>): Promise<unknown>;
-    save?(): Promise<void>;
-};
-export declare function standOn(ward: Rooted, lent?: Record<string, string>): Promise<Lend>;
-export declare function lending(ward: Rooted): Lend;
-export declare function facultyOf<F extends Faculty>(harbor: Harbor, name: string): F | undefined;