@nifrajs/web 5.5.0 → 5.6.0

package/dist/live/keyring.js

@@ -0,0 +1,260 @@
+/**
+ * The live keyring: AES-256-GCM grants under hourly per-process subkeys, and the HMAC tags and subject
+ * tags derived from the same secrets. Everything here is WebCrypto, so it runs unchanged on Bun, Node,
+ * Deno and Workers.
+ *
+ * Token: `base64url(kid || nonce || AES-256-GCM(JSON claims))`, with the 16-byte `kid` authenticated as
+ * associated data. `kid = secretId (4) || processId (8) || hour (4)`.
+ */
+const TEXT = new TextEncoder();
+const UTF8 = new TextDecoder("utf-8", { fatal: true });
+export const MIN_SECRET_BYTES = 32;
+export const MAX_SECRETS = 3;
+/** A grant token longer than this is refused before decoding, and never issued. */
+export const MAX_GRANT_CHARS = 10_240;
+export const MAX_KEYS_PER_FRAME = 64;
+/** The cache-tag charset: a letter, then up to 127 of `A-Z a-z 0-9 . _ : / -`. */
+export const KEY_PATTERN = /^[A-Za-z][A-Za-z0-9._:/-]{0,127}$/;
+export const SID_PATTERN = /^[0-9a-f]{32}$/;
+const KID_BYTES = 16;
+const NONCE_BYTES = 12;
+const GCM_TAG_BYTES = 16;
+const HOUR_MS = 3_600_000;
+const HOUR_SECONDS = 3600;
+const IAT_SKEW_SECONDS = 60;
+const SUBKEY_CACHE_SIZE = 1024;
+const TAG_BYTES = 16;
+/**
+ * Seals under one subkey before it refuses more. Random 96-bit nonces stay safe for about 2^32
+ * encryptions per key; an hourly per-process subkey at 10,000 grants a second sees 3.6e7.
+ */
+export const MAX_SEALS_PER_SUBKEY = 2 ** 31;
+const INFO_SECRET_ID = TEXT.encode("nifra live secret id v1");
+const INFO_GRANT = TEXT.encode("nifra live grant v1");
+const INFO_TAG = TEXT.encode("nifra live tag v1");
+const INFO_SUBJECT = TEXT.encode("nifra live subject v1");
+const NO_SALT = new Uint8Array(0);
+/** Synchronous boot checks: count and strength. Duplicate ids need derivation, see {@link createKeyring}. */
+export function assertLiveSecrets(secrets) {
+    if (secrets.length === 0)
+        throw new TypeError("[nifra/web] live: `secret` lists no secret");
+    if (secrets.length > MAX_SECRETS) {
+        throw new TypeError(`[nifra/web] live: \`secret\` lists ${secrets.length} secrets; at most ${MAX_SECRETS} are allowed, since every publish goes out under each one. Remove a demoted secret once grantTtl plus the renewal window has passed.`);
+    }
+    for (const secret of secrets) {
+        const length = typeof secret === "string" ? TEXT.encode(secret).length : -1;
+        if (length < MIN_SECRET_BYTES) {
+            throw new TypeError(`[nifra/web] live: every secret must be a string of at least ${MIN_SECRET_BYTES} bytes (256-bit). Generate one with: openssl rand -base64 32`);
+        }
+    }
+}
+/** Derive every key a secret needs. Rejects when two secrets share a `secretId`. */
+export async function createKeyring(options) {
+    assertLiveSecrets(options.secrets);
+    const appSalt = TEXT.encode(options.appId);
+    const processId = options.processId ?? crypto.getRandomValues(new Uint8Array(8));
+    if (processId.length !== 8)
+        throw new TypeError("[nifra/web] live: processId must be 8 bytes");
+    const derive = async (secret, index) => {
+        const base = await crypto.subtle.importKey("raw", TEXT.encode(secret), "HKDF", false, [
+            "deriveBits",
+            "deriveKey",
+        ]);
+        const id = new Uint8Array(await hkdf(base, NO_SALT, INFO_SECRET_ID, 32)).slice(0, 4);
+        const tagKey = await hmacKey(new Uint8Array(await hkdf(base, appSalt, INFO_TAG, 32)));
+        const subjectKey = await hmacKey(new Uint8Array(await hkdf(base, appSalt, INFO_SUBJECT, 32)));
+        return { index, base, id, idKey: readU32(id, 0), tagKey, subjectKey };
+    };
+    const [head, ...rest] = options.secrets;
+    const first = await derive(head, 0);
+    const entries = [first, ...(await Promise.all(rest.map((secret, i) => derive(secret, i + 1))))];
+    const byId = new Map();
+    for (const entry of entries) {
+        if (byId.has(entry.idKey)) {
+            throw new TypeError("[nifra/web] live: two configured secrets share a secret id; replace one of them (a repeated secret does this too)");
+        }
+        byId.set(entry.idKey, entry);
+    }
+    // Least recently used first: a hit is moved to the end. Only a kid that sealed or opened a grant
+    // is kept, so forged kids cannot push out the subkeys real grants use.
+    const subkeys = new Map();
+    const cachedSubkey = (name) => {
+        const cached = subkeys.get(name);
+        if (cached !== undefined) {
+            subkeys.delete(name);
+            subkeys.set(name, cached);
+        }
+        return cached;
+    };
+    const remember = (name, key) => {
+        if (subkeys.has(name))
+            return;
+        if (subkeys.size >= SUBKEY_CACHE_SIZE) {
+            const oldest = subkeys.keys().next().value;
+            if (oldest !== undefined)
+                subkeys.delete(oldest);
+        }
+        subkeys.set(name, key);
+    };
+    const deriveSubkey = (entry, kid) => crypto.subtle.deriveKey({ name: "HKDF", hash: "SHA-256", salt: kid, info: INFO_GRANT }, entry.base, { name: "AES-GCM", length: 256 }, false, ["encrypt", "decrypt"]);
+    const ttl = options.ttl;
+    const appId = options.appId;
+    const maxSeals = options.maxSealsPerSubkey ?? MAX_SEALS_PER_SUBKEY;
+    // The subkey `seal` uses changes with the hour, and only `seal` encrypts.
+    let sealHour = -1;
+    let seals = 0;
+    return {
+        appId,
+        ttl,
+        secretCount: entries.length,
+        secretIds: entries.map((entry) => entry.idKey),
+        async seal(input, nowMs) {
+            const iat = Math.floor(nowMs / 1000);
+            const hour = Math.floor(iat / HOUR_SECONDS);
+            if (hour !== sealHour) {
+                sealHour = hour;
+                seals = 0;
+            }
+            if (seals >= maxSeals)
+                return undefined;
+            seals++;
+            const claims = { v: 1, ...input, iat, exp: iat + ttl, aud: appId };
+            const kid = new Uint8Array(KID_BYTES);
+            kid.set(first.id, 0);
+            kid.set(processId, 4);
+            writeU32(kid, 12, hour);
+            const nonce = crypto.getRandomValues(new Uint8Array(NONCE_BYTES));
+            const name = latin1(kid);
+            let key = cachedSubkey(name);
+            if (key === undefined) {
+                key = deriveSubkey(first, kid);
+                remember(name, key);
+            }
+            const sealed = new Uint8Array(await crypto.subtle.encrypt({ name: "AES-GCM", iv: nonce, additionalData: kid, tagLength: GCM_TAG_BYTES * 8 }, await key, TEXT.encode(JSON.stringify(claims))));
+            const token = new Uint8Array(KID_BYTES + NONCE_BYTES + sealed.length);
+            token.set(kid, 0);
+            token.set(nonce, KID_BYTES);
+            token.set(sealed, KID_BYTES + NONCE_BYTES);
+            const encoded = toBase64Url(token);
+            return encoded.length > MAX_GRANT_CHARS ? undefined : encoded;
+        },
+        async open(token, nowMs) {
+            // Size and framing first, then the secret id and hour: none of these refusals costs any crypto.
+            if (typeof token !== "string" || token.length > MAX_GRANT_CHARS)
+                return undefined;
+            const bytes = fromBase64Url(token);
+            if (bytes === null || bytes.length < KID_BYTES + NONCE_BYTES + GCM_TAG_BYTES)
+                return undefined;
+            const entry = byId.get(readU32(bytes, 0));
+            if (entry === undefined)
+                return undefined;
+            const hour = readU32(bytes, 12);
+            const nowHour = Math.floor(nowMs / HOUR_MS);
+            if (hour !== nowHour && hour !== nowHour - 1)
+                return undefined;
+            const kid = bytes.slice(0, KID_BYTES);
+            const name = latin1(kid);
+            const cached = cachedSubkey(name);
+            const key = cached ?? deriveSubkey(entry, kid);
+            let plain;
+            try {
+                plain = await crypto.subtle.decrypt({
+                    name: "AES-GCM",
+                    iv: bytes.slice(KID_BYTES, KID_BYTES + NONCE_BYTES),
+                    additionalData: kid,
+                    tagLength: GCM_TAG_BYTES * 8,
+                }, await key, bytes.slice(KID_BYTES + NONCE_BYTES));
+            }
+            catch {
+                return undefined;
+            }
+            if (cached === undefined)
+                remember(name, key);
+            let claims;
+            try {
+                claims = JSON.parse(UTF8.decode(plain));
+            }
+            catch {
+                return undefined;
+            }
+            return validClaims(claims, appId, ttl, hour, Math.floor(nowMs / 1000))
+                ? { claims, secret: entry.index }
+                : undefined;
+        },
+        async tag(key, secret = 0) {
+            const tagKey = (entries[secret] ?? first).tagKey;
+            const mac = await crypto.subtle.sign("HMAC", tagKey, TEXT.encode(key));
+            return toBase64Url(new Uint8Array(mac).slice(0, TAG_BYTES));
+        },
+        subjectTags(subject) {
+            // A prefix per kind: no subject string can collide with the anonymous viewer's input.
+            const input = TEXT.encode(subject === null ? "a" : `s${subject}`);
+            return Promise.all(entries.map(async (entry) => toBase64Url(new Uint8Array(await crypto.subtle.sign("HMAC", entry.subjectKey, input)).slice(0, TAG_BYTES))));
+        },
+    };
+}
+function validClaims(value, appId, ttl, hour, nowSeconds) {
+    if (!isRecord(value))
+        return false;
+    const { v, sid, sub, path, frame, owners, s, r, iat, exp, aud } = value;
+    if (v !== 1 || aud !== appId)
+        return false;
+    if (typeof sid !== "string" || !SID_PATTERN.test(sid))
+        return false;
+    if (sub !== null && typeof sub !== "string")
+        return false;
+    if (typeof path !== "string" || typeof frame !== "string")
+        return false;
+    if (!isCount(s) || !isCount(r) || !isInteger(iat) || !isInteger(exp))
+        return false;
+    if (iat > nowSeconds + IAT_SKEW_SECONDS)
+        return false;
+    if (Math.floor(iat / HOUR_SECONDS) !== hour)
+        return false;
+    if (exp - iat !== ttl || exp <= nowSeconds)
+        return false;
+    if (!isRecord(owners))
+        return false;
+    let keys = 0;
+    for (const owner of Object.values(owners)) {
+        if (!isRecord(owner) || !isCount(owner.w) || !Array.isArray(owner.k))
+            return false;
+        for (const key of owner.k)
+            if (typeof key !== "string" || !KEY_PATTERN.test(key))
+                return false;
+        keys += owner.k.length;
+    }
+    return keys <= MAX_KEYS_PER_FRAME;
+}
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isInteger = (value) => typeof value === "number" && Number.isSafeInteger(value);
+const isCount = (value) => isInteger(value) && value >= 0;
+const hkdf = (base, salt, info, bytes) => crypto.subtle.deriveBits({ name: "HKDF", hash: "SHA-256", salt, info }, base, bytes * 8);
+const hmacKey = (raw) => crypto.subtle.importKey("raw", raw, { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+const view = (bytes) => new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+const readU32 = (bytes, at) => view(bytes).getUint32(at);
+const writeU32 = (bytes, at, value) => view(bytes).setUint32(at, value);
+const latin1 = (bytes) => {
+    let out = "";
+    for (const byte of bytes)
+        out += String.fromCharCode(byte);
+    return out;
+};
+export const toBase64Url = (bytes) => btoa(latin1(bytes)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+const BASE64URL_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+const BASE64URL_PATTERN = /^[A-Za-z0-9_-]+$/;
+/** Canonical encodings only: a second spelling of the same bytes is refused. */
+function fromBase64Url(s) {
+    if (s.length === 0 || s.length % 4 === 1 || !BASE64URL_PATTERN.test(s))
+        return null;
+    const remainder = s.length % 4;
+    const last = BASE64URL_ALPHABET.indexOf(s.charAt(s.length - 1));
+    if ((remainder === 2 && (last & 0x0f) !== 0) || (remainder === 3 && (last & 0x03) !== 0))
+        return null;
+    const bin = atob(s.replace(/-/g, "+").replace(/_/g, "/") + "=".repeat((4 - remainder) % 4));
+    const bytes = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        bytes[i] = bin.charCodeAt(i);
+    return bytes;
+}
+//# sourceMappingURL=keyring.js.map

package/dist/live/keyring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyring.js","sourceRoot":"","sources":["../../src/live/keyring.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAA;AAC9B,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AAEtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAClC,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAA;AAC5B,mFAAmF;AACnF,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAA;AACrC,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAA;AACpC,kFAAkF;AAClF,MAAM,CAAC,MAAM,WAAW,GAAG,mCAAmC,CAAA;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAgB,CAAA;AAE3C,MAAM,SAAS,GAAG,EAAE,CAAA;AACpB,MAAM,WAAW,GAAG,EAAE,CAAA;AACtB,MAAM,aAAa,GAAG,EAAE,CAAA;AACxB,MAAM,OAAO,GAAG,SAAS,CAAA;AACzB,MAAM,YAAY,GAAG,IAAI,CAAA;AACzB,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAC3B,MAAM,iBAAiB,GAAG,IAAI,CAAA;AAC9B,MAAM,SAAS,GAAG,EAAE,CAAA;AACpB;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAI,EAAE,CAAA;AAE3C,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAA;AAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAA;AACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;AACjD,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAA;AACzD,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAA;AA8EjC,6GAA6G;AAC7G,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAA;IAC3F,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CACjB,sCAAsC,OAAO,CAAC,MAAM,qBAAqB,WAAW,sIAAsI,CAC3N,CAAA;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC3E,IAAI,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAC9B,MAAM,IAAI,SAAS,CACjB,+DAA+D,gBAAgB,8DAA8D,CAC9I,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAuB;IACzD,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAChF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAA;IAC9F,MAAM,MAAM,GAAG,KAAK,EAAE,MAAc,EAAE,KAAa,EAAwB,EAAE;QAC3E,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE;YACpF,YAAY;YACZ,WAAW;SACZ,CAAC,CAAA;QACF,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACpF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;QACrF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;QAC7F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;IACvE,CAAC,CAAA;IACD,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAA;IACvC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACnC,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/F,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAA;IAC3C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,SAAS,CACjB,mHAAmH,CACpH,CAAA;QACH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IAC9B,CAAC;IAED,iGAAiG;IACjG,uEAAuE;IACvE,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAA;IACrD,MAAM,YAAY,GAAG,CAAC,IAAY,EAAkC,EAAE;QACpE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACpB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC3B,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IACD,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,GAAuB,EAAQ,EAAE;QAC/D,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAM;QAC7B,IAAI,OAAO,CAAC,IAAI,IAAI,iBAAiB,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAA;YAC1C,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAClD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACxB,CAAC,CAAA;IACD,MAAM,YAAY,GAAG,CAAC,KAAkB,EAAE,GAA4B,EAAsB,EAAE,CAC5F,MAAM,CAAC,MAAM,CAAC,SAAS,CACrB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,EAC9D,KAAK,CAAC,IAAI,EACV,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAA;IAEH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;IACvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,iBAAiB,IAAI,oBAAoB,CAAA;IAClE,0EAA0E;IAC1E,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAA;IACjB,IAAI,KAAK,GAAG,CAAC,CAAA;IAEb,OAAO;QACL,KAAK;QACL,GAAG;QACH,WAAW,EAAE,OAAO,CAAC,MAAM;QAC3B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK;YACrB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAA;YACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,CAAC,CAAA;YAC3C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,QAAQ,GAAG,IAAI,CAAA;gBACf,KAAK,GAAG,CAAC,CAAA;YACX,CAAC;YACD,IAAI,KAAK,IAAI,QAAQ;gBAAE,OAAO,SAAS,CAAA;YACvC,KAAK,EAAE,CAAA;YACP,MAAM,MAAM,GAAgB,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAA;YAC/E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAA;YACrC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YACpB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;YACrB,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;YACvB,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,CAAA;YACjE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;YACxB,IAAI,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YAC5B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;gBAC9B,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YACrB,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAC3B,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,GAAG,CAAC,EAAE,EACjF,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CACpC,CACF,CAAA;YACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;YACrE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YACjB,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;YAC3B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,CAAC,CAAA;YAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;YAClC,OAAO,OAAO,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAA;QAC/D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK;YACrB,gGAAgG;YAChG,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe;gBAAE,OAAO,SAAS,CAAA;YACjF,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;YAClC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa;gBAAE,OAAO,SAAS,CAAA;YAC9F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAA;YACzC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAA;YACzC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;YAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,CAAA;YAC3C,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAA;YAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;YACrC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;YACxB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YACjC,MAAM,GAAG,GAAG,MAAM,IAAI,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YAC9C,IAAI,KAAkB,CAAA;YACtB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACjC;oBACE,IAAI,EAAE,SAAS;oBACf,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,GAAG,WAAW,CAAC;oBACnD,cAAc,EAAE,GAAG;oBACnB,SAAS,EAAE,aAAa,GAAG,CAAC;iBAC7B,EACD,MAAM,GAAG,EACT,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,WAAW,CAAC,CACrC,CAAA;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,IAAI,MAAM,KAAK,SAAS;gBAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YAC7C,IAAI,MAAe,CAAA;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,OAAO,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;gBACpE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE;gBACjC,CAAC,CAAC,SAAS,CAAA;QACf,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC;YACvB,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,CAAA;YAChD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;YACtE,OAAO,WAAW,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;QAC7D,CAAC;QACD,WAAW,CAAC,OAAO;YACjB,sFAAsF;YACtF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAA;YACjE,OAAO,OAAO,CAAC,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAC1B,WAAW,CACT,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAC7E,CAAC,EACD,SAAS,CACV,CACF,CACF,CACF,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAClB,KAAc,EACd,KAAa,EACb,GAAW,EACX,IAAY,EACZ,UAAkB;IAElB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAClC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;IACvE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAA;IAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACnE,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACzD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACvE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IAClF,IAAI,GAAG,GAAG,UAAU,GAAG,gBAAgB;QAAE,OAAO,KAAK,CAAA;IACrD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACzD,IAAI,GAAG,GAAG,GAAG,KAAK,GAAG,IAAI,GAAG,IAAI,UAAU;QAAE,OAAO,KAAK,CAAA;IACxD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAA;IACnC,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;QAClF,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,CAAC;YAAE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAA;QAC9F,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;IACxB,CAAC;IACD,OAAO,IAAI,IAAI,kBAAkB,CAAA;AACnC,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAEtE,MAAM,SAAS,GAAG,CAAC,KAAc,EAAmB,EAAE,CACpD,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;AAE1D,MAAM,OAAO,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AAEnF,MAAM,IAAI,GAAG,CACX,IAAe,EACf,IAA6B,EAC7B,IAA6B,EAC7B,KAAa,EACS,EAAE,CACxB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;AAE1F,MAAM,OAAO,GAAG,CAAC,GAA4B,EAAsB,EAAE,CACnE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;AAEzF,MAAM,IAAI,GAAG,CAAC,KAAiB,EAAY,EAAE,CAC3C,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;AAEhE,MAAM,OAAO,GAAG,CAAC,KAAiB,EAAE,EAAU,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;AAEpF,MAAM,QAAQ,GAAG,CAAC,KAAiB,EAAE,EAAU,EAAE,KAAa,EAAQ,EAAE,CACtE,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;AAElC,MAAM,MAAM,GAAG,CAAC,KAAiB,EAAU,EAAE;IAC3C,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAC1D,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAiB,EAAU,EAAE,CACvD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAEhF,MAAM,kBAAkB,GAAG,kEAAkE,CAAA;AAC7F,MAAM,iBAAiB,GAAG,kBAAkB,CAAA;AAE5C,gFAAgF;AAChF,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnF,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAA;IAC/D,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACtF,OAAO,IAAI,CAAA;IACb,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC3F,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IACjE,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/live/read-capped.d.ts

@@ -0,0 +1,6 @@
+/**
+ * A request body as text, read only up to `max` bytes, or the status to refuse it with: 413 past the
+ * cap, declared or delivered; 400 for a malformed length or invalid UTF-8.
+ */
+export declare function readCapped(req: Request, max: number): Promise<string | 400 | 413>;
+//# sourceMappingURL=read-capped.d.ts.map

package/dist/live/read-capped.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-capped.d.ts","sourceRoot":"","sources":["../../src/live/read-capped.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,CA+BvF"}

package/dist/live/read-capped.js

@@ -0,0 +1,42 @@
+/**
+ * A request body as text, read only up to `max` bytes, or the status to refuse it with: 413 past the
+ * cap, declared or delivered; 400 for a malformed length or invalid UTF-8.
+ */
+export async function readCapped(req, max) {
+    const declared = req.headers.get("content-length");
+    if (declared !== null) {
+        if (!/^\d+$/.test(declared))
+            return 400;
+        if (Number(declared) > max)
+            return 413;
+    }
+    if (req.body === null)
+        return "";
+    const reader = req.body.getReader();
+    const chunks = [];
+    let total = 0;
+    for (;;) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        total += value.byteLength;
+        if (total > max) {
+            await Promise.allSettled([reader.cancel()]);
+            return 413;
+        }
+        chunks.push(value);
+    }
+    const bytes = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    try {
+        return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    }
+    catch {
+        return 400;
+    }
+}
+//# sourceMappingURL=read-capped.js.map

package/dist/live/read-capped.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-capped.js","sourceRoot":"","sources":["../../src/live/read-capped.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAY,EAAE,GAAW;IACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAClD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,GAAG,CAAA;QACvC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG;YAAE,OAAO,GAAG,CAAA;IACxC,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAChC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;IACnC,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAC3C,IAAI,IAAI;YAAE,MAAK;QACf,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;QACzB,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YAChB,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;YAC3C,OAAO,GAAG,CAAA;QACZ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IACnC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACxB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAA;IAC5B,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAA;IACZ,CAAC;AACH,CAAC"}

package/dist/live/revocations.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Stored revocations, checked on every use of a grant. An entry is kept for one grant lifetime plus
+ * clock skew: by then every grant issued before it has expired.
+ */
+import type { LiveRevocation } from "./bus.js";
+import type { GrantClaims } from "./keyring.js";
+/** Past this many stored entries, one global revocation replaces them all. */
+export declare const MAX_REVOCATIONS = 100000;
+/** How far clocks may disagree; a revocation is kept this much past the grant lifetime. */
+export declare const REVOCATION_SKEW_MS = 120000;
+/** What a load checks a grant against. */
+export interface RevocationCheck {
+    grantRevoked(claims: GrantClaims): boolean;
+    keyRevoked(key: string, claims: GrantClaims): boolean;
+}
+/** The stored revocations that bear on a few subjects and keys: what the Workers hub tells a load. */
+export interface RevocationSnapshot {
+    readonly floor: number;
+    readonly subjects: Readonly<Record<string, number>>;
+    readonly keys: Readonly<Record<string, number>>;
+    /** By `key + "\0" + subject`. */
+    readonly subjectKeys: Readonly<Record<string, number>>;
+}
+export declare class Revocations implements RevocationCheck {
+    private readonly ttlMs;
+    private readonly limit;
+    /** A grant issued below this seq is refused whole: `revokeAll`, or history this process lacks. */
+    floor: number;
+    private readonly subjects;
+    private readonly keys;
+    /** `key + "\0" + subject`; the key charset has no NUL. */
+    private readonly subjectKeys;
+    constructor(head: number, ttlMs: number, limit?: number);
+    apply(event: LiveRevocation & {
+        readonly seq: number;
+    }, nowMs: number): void;
+    /** Refuse every grant issued below `seq`; the stored entries are all older, so they go. */
+    raise(seq: number): void;
+    grantRevoked(claims: GrantClaims): boolean;
+    keyRevoked(key: string, claims: GrantClaims): boolean;
+    /** The entries for these subjects and keys, and every pairing of them. */
+    snapshot(subjects: readonly string[], keys: readonly string[]): RevocationSnapshot;
+    private prune;
+}
+/** {@link RevocationCheck} over a {@link RevocationSnapshot}: the same answers for what it covers. */
+export declare class RevocationView implements RevocationCheck {
+    private readonly snapshot;
+    constructor(snapshot: RevocationSnapshot);
+    grantRevoked(claims: GrantClaims): boolean;
+    keyRevoked(key: string, claims: GrantClaims): boolean;
+}
+//# sourceMappingURL=revocations.d.ts.map

package/dist/live/revocations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revocations.d.ts","sourceRoot":"","sources":["../../src/live/revocations.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAE/C,8EAA8E;AAC9E,eAAO,MAAM,eAAe,SAAU,CAAA;AACtC,2FAA2F;AAC3F,eAAO,MAAM,kBAAkB,SAAU,CAAA;AAOzC,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAA;IAC1C,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAA;CACtD;AAED,sGAAsG;AACtG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACnD,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC/C,iCAAiC;IACjC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CACvD;AAED,qBAAa,WAAY,YAAW,eAAe;IAU/C,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAVxB,kGAAkG;IAClG,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IACpD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA2B;IAChD,0DAA0D;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA2B;gBAGrD,IAAI,EAAE,MAAM,EACK,KAAK,EAAE,MAAM,EACb,KAAK,SAAkB;IAK1C,KAAK,CAAC,KAAK,EAAE,cAAc,GAAG;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAmB5E,2FAA2F;IAC3F,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAOxB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO;IAO1C,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO;IAOrD,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,kBAAkB;IAWlF,OAAO,CAAC,KAAK;CAUd;AAoBD,sGAAsG;AACtG,qBAAa,cAAe,YAAW,eAAe;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,kBAAkB;IAEzD,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO;IAO1C,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO;CAOtD"}

package/dist/live/revocations.js

@@ -0,0 +1,116 @@
+/** Past this many stored entries, one global revocation replaces them all. */
+export const MAX_REVOCATIONS = 100_000;
+/** How far clocks may disagree; a revocation is kept this much past the grant lifetime. */
+export const REVOCATION_SKEW_MS = 120_000;
+export class Revocations {
+    ttlMs;
+    limit;
+    /** A grant issued below this seq is refused whole: `revokeAll`, or history this process lacks. */
+    floor;
+    subjects = new Map();
+    keys = new Map();
+    /** `key + "\0" + subject`; the key charset has no NUL. */
+    subjectKeys = new Map();
+    constructor(head, ttlMs, limit = MAX_REVOCATIONS) {
+        this.ttlMs = ttlMs;
+        this.limit = limit;
+        this.floor = head;
+    }
+    apply(event, nowMs) {
+        this.prune(nowMs);
+        const stamp = { seq: event.seq, at: nowMs };
+        if (event.key === null) {
+            if (event.sub === null)
+                this.raise(event.seq);
+            else
+                renew(this.subjects, event.sub, stamp);
+        }
+        else if (event.sub === null) {
+            renew(this.keys, event.key, stamp);
+        }
+        else {
+            renew(this.subjectKeys, `${event.key}\0${event.sub}`, stamp);
+        }
+        if (this.subjects.size + this.keys.size + this.subjectKeys.size > this.limit) {
+            console.error(`[nifra/web] live: more than ${this.limit} stored revocations; every grant issued before now is refused instead`);
+            this.raise(event.seq);
+        }
+    }
+    /** Refuse every grant issued below `seq`; the stored entries are all older, so they go. */
+    raise(seq) {
+        if (seq > this.floor)
+            this.floor = seq;
+        this.subjects.clear();
+        this.keys.clear();
+        this.subjectKeys.clear();
+    }
+    grantRevoked(claims) {
+        return (claims.s < this.floor ||
+            (claims.sub !== null && above(this.subjects.get(claims.sub), claims.s)));
+    }
+    keyRevoked(key, claims) {
+        return (above(this.keys.get(key), claims.s) ||
+            (claims.sub !== null && above(this.subjectKeys.get(`${key}\0${claims.sub}`), claims.s)));
+    }
+    /** The entries for these subjects and keys, and every pairing of them. */
+    snapshot(subjects, keys) {
+        const pairs = [];
+        for (const key of keys)
+            for (const sub of subjects)
+                pairs.push(`${key}\0${sub}`);
+        return {
+            floor: this.floor,
+            subjects: pick(this.subjects, subjects),
+            keys: pick(this.keys, keys),
+            subjectKeys: pick(this.subjectKeys, pairs),
+        };
+    }
+    prune(nowMs) {
+        const horizon = nowMs - this.ttlMs - REVOCATION_SKEW_MS;
+        for (const map of [this.subjects, this.keys, this.subjectKeys]) {
+            // Insertion order is age order (see `renew`), so the stale entries are a prefix.
+            for (const [name, stamp] of map) {
+                if (stamp.at >= horizon)
+                    break;
+                map.delete(name);
+            }
+        }
+    }
+}
+const above = (stamp, s) => stamp !== undefined && stamp.seq > s;
+/** Built from entries, so a name such as `__proto__` is an own property like any other. */
+function pick(map, names) {
+    const out = [];
+    for (const name of names) {
+        const stamp = map.get(name);
+        if (stamp !== undefined)
+            out.push([name, stamp.seq]);
+    }
+    return Object.fromEntries(out);
+}
+/** Re-insert so the map stays in age order. */
+function renew(map, name, stamp) {
+    map.delete(name);
+    map.set(name, stamp);
+}
+/** {@link RevocationCheck} over a {@link RevocationSnapshot}: the same answers for what it covers. */
+export class RevocationView {
+    snapshot;
+    constructor(snapshot) {
+        this.snapshot = snapshot;
+    }
+    grantRevoked(claims) {
+        return (claims.s < this.snapshot.floor ||
+            (claims.sub !== null && stampAbove(this.snapshot.subjects, claims.sub, claims.s)));
+    }
+    keyRevoked(key, claims) {
+        return (stampAbove(this.snapshot.keys, key, claims.s) ||
+            (claims.sub !== null &&
+                stampAbove(this.snapshot.subjectKeys, `${key}\0${claims.sub}`, claims.s)));
+    }
+}
+function stampAbove(stamps, name, s) {
+    const seq = Object.hasOwn(stamps, name) ? stamps[name] : undefined;
+    return seq !== undefined && seq > s;
+}
+//# sourceMappingURL=revocations.js.map

package/dist/live/revocations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revocations.js","sourceRoot":"","sources":["../../src/live/revocations.ts"],"names":[],"mappings":"AAOA,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAA;AACtC,2FAA2F;AAC3F,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAA;AAsBzC,MAAM,OAAO,WAAW;IAUH;IACA;IAVnB,kGAAkG;IAClG,KAAK,CAAQ;IACI,QAAQ,GAAG,IAAI,GAAG,EAAiB,CAAA;IACnC,IAAI,GAAG,IAAI,GAAG,EAAiB,CAAA;IAChD,0DAA0D;IACzC,WAAW,GAAG,IAAI,GAAG,EAAiB,CAAA;IAEvD,YACE,IAAY,EACK,KAAa,EACb,QAAQ,eAAe;QADvB,UAAK,GAAL,KAAK,CAAQ;QACb,UAAK,GAAL,KAAK,CAAkB;QAExC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;IACnB,CAAC;IAED,KAAK,CAAC,KAAgD,EAAE,KAAa;QACnE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACjB,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;QAC3C,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YACvB,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI;gBAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;;gBACxC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAC7C,CAAC;aAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAA;QAC9D,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC7E,OAAO,CAAC,KAAK,CACX,+BAA+B,IAAI,CAAC,KAAK,uEAAuE,CACjH,CAAA;YACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACvB,CAAC;IACH,CAAC;IAED,2FAA2F;IAC3F,KAAK,CAAC,GAAW;QACf,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,GAAG,CAAA;QACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;QACrB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA;QACjB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAA;IAC1B,CAAC;IAED,YAAY,CAAC,MAAmB;QAC9B,OAAO,CACL,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK;YACrB,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CACxE,CAAA;IACH,CAAC;IAED,UAAU,CAAC,GAAW,EAAE,MAAmB;QACzC,OAAO,CACL,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YACnC,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CACxF,CAAA;IACH,CAAC;IAED,0EAA0E;IAC1E,QAAQ,CAAC,QAA2B,EAAE,IAAuB;QAC3D,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,KAAK,MAAM,GAAG,IAAI,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,GAAG,EAAE,CAAC,CAAA;QAChF,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC;YACvC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;YAC3B,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC;SAC3C,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,KAAa;QACzB,MAAM,OAAO,GAAG,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,kBAAkB,CAAA;QACvD,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/D,iFAAiF;YACjF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC;gBAChC,IAAI,KAAK,CAAC,EAAE,IAAI,OAAO;oBAAE,MAAK;gBAC9B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAClB,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,MAAM,KAAK,GAAG,CAAC,KAAwB,EAAE,CAAS,EAAW,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAA;AAEpG,2FAA2F;AAC3F,SAAS,IAAI,CAAC,GAAuB,EAAE,KAAwB;IAC7D,MAAM,GAAG,GAAuB,EAAE,CAAA;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC3B,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;AAChC,CAAC;AAED,+CAA+C;AAC/C,SAAS,KAAK,CAAC,GAAuB,EAAE,IAAY,EAAE,KAAY;IAChE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAChB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AACtB,CAAC;AAED,sGAAsG;AACtG,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,QAA4B;QAA5B,aAAQ,GAAR,QAAQ,CAAoB;IAAG,CAAC;IAE7D,YAAY,CAAC,MAAmB;QAC9B,OAAO,CACL,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK;YAC9B,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAClF,CAAA;IACH,CAAC;IAED,UAAU,CAAC,GAAW,EAAE,MAAmB;QACzC,OAAO,CACL,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;YAC7C,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI;gBAClB,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,GAAG,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAC5E,CAAA;IACH,CAAC;CACF;AAED,SAAS,UAAU,CAAC,MAAwC,EAAE,IAAY,EAAE,CAAS;IACnF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAClE,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,CAAA;AACrC,CAAC"}

package/dist/live/settings.d.ts

@@ -0,0 +1,14 @@
+/** Option checks `live()` and `liveHub()` share: an app and its hub must read the same options alike. */
+export declare const DEFAULT_TTL_SECONDS = 600;
+export declare const DEFAULT_MAX_SOCKETS = 10000;
+export declare const DEFAULT_RELOAD_RATE = 500;
+export declare const DEFAULT_APP_ID = "nifra";
+export declare function positive(value: number | undefined, fallback: number, name: string): number;
+/**
+ * At most an hour: a grant's subkey names the hour it was sealed in, and only that hour and the next
+ * open it, so a longer lifetime would end early.
+ */
+export declare function grantTtlOf(value: number | undefined): number;
+export declare function spreadFloorOf(value: number | undefined): number;
+export declare function appIdOf(value: string | undefined): string;
+//# sourceMappingURL=settings.d.ts.map

package/dist/live/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../src/live/settings.ts"],"names":[],"mappings":"AAAA,yGAAyG;AAEzG,eAAO,MAAM,mBAAmB,MAAM,CAAA;AACtC,eAAO,MAAM,mBAAmB,QAAS,CAAA;AACzC,eAAO,MAAM,mBAAmB,MAAM,CAAA;AACtC,eAAO,MAAM,cAAc,UAAU,CAAA;AAErC,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAM1F;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAQ5D;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAM/D;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAQzD"}

package/dist/live/settings.js

@@ -0,0 +1,38 @@
+/** Option checks `live()` and `liveHub()` share: an app and its hub must read the same options alike. */
+export const DEFAULT_TTL_SECONDS = 600;
+export const DEFAULT_MAX_SOCKETS = 10_000;
+export const DEFAULT_RELOAD_RATE = 500;
+export const DEFAULT_APP_ID = "nifra";
+export function positive(value, fallback, name) {
+    const resolved = value ?? fallback;
+    if (!Number.isSafeInteger(resolved) || resolved < 1) {
+        throw new TypeError(`[nifra/web] live: \`${name}\` must be a positive whole number`);
+    }
+    return resolved;
+}
+/**
+ * At most an hour: a grant's subkey names the hour it was sealed in, and only that hour and the next
+ * open it, so a longer lifetime would end early.
+ */
+export function grantTtlOf(value) {
+    const ttl = value ?? DEFAULT_TTL_SECONDS;
+    if (!Number.isSafeInteger(ttl) || ttl < 60 || ttl > 3600) {
+        throw new TypeError("[nifra/web] live: `grantTtl` must be a whole number of seconds from 60 to 3600");
+    }
+    return ttl;
+}
+export function spreadFloorOf(value) {
+    const floor = value ?? 0;
+    if (!Number.isSafeInteger(floor) || floor < 0 || floor > 5000) {
+        throw new TypeError("[nifra/web] live: `spreadFloor` must be a whole number of ms up to 5000");
+    }
+    return floor;
+}
+export function appIdOf(value) {
+    const appId = value ?? DEFAULT_APP_ID;
+    if (typeof appId !== "string" || appId === "" || appId.length > 128) {
+        throw new TypeError("[nifra/web] live: `appId` must be a non-empty string of at most 128 characters");
+    }
+    return appId;
+}
+//# sourceMappingURL=settings.js.map

package/dist/live/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/live/settings.ts"],"names":[],"mappings":"AAAA,yGAAyG;AAEzG,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAA;AACtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAA;AACzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAA;AACtC,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAA;AAErC,MAAM,UAAU,QAAQ,CAAC,KAAyB,EAAE,QAAgB,EAAE,IAAY;IAChF,MAAM,QAAQ,GAAG,KAAK,IAAI,QAAQ,CAAA;IAClC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CAAC,uBAAuB,IAAI,oCAAoC,CAAC,CAAA;IACtF,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAyB;IAClD,MAAM,GAAG,GAAG,KAAK,IAAI,mBAAmB,CAAA;IACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,EAAE,IAAI,GAAG,GAAG,IAAI,EAAE,CAAC;QACzD,MAAM,IAAI,SAAS,CACjB,gFAAgF,CACjF,CAAA;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,MAAM,KAAK,GAAG,KAAK,IAAI,CAAC,CAAA;IACxB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;QAC9D,MAAM,IAAI,SAAS,CAAC,yEAAyE,CAAC,CAAA;IAChG,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAyB;IAC/C,MAAM,KAAK,GAAG,KAAK,IAAI,cAAc,CAAA;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACpE,MAAM,IAAI,SAAS,CACjB,gFAAgF,CACjF,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/live-client.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Live refresh in the browser. The client entry of an app with `live` builds its router with this
+ * module's `fetchData`, so every route load is a live load that returns a grant beside its data, and
+ * attaches the router once it is mounted. One WebSocket per tab watches the grants of what is on
+ * screen - the page, and the target an intercept boundary holds - and a change to a key either read
+ * reloads it, keeping every owner whose keys did not change.
+ *
+ * A frame whose load returned no grant, and every frame while the socket is down, is polled instead.
+ *
+ * Query hooks that name live keys refetch on the same changes: each load carries a salted digest of
+ * every key it grants, and the client matches the keys the page's queries name against them.
+ */
+import { type ClientRouter, type FetchRouteData } from "./router.js";
+export interface LiveClientOptions {
+    /** The live socket, as `live({ path })` serves it. Default `/_nifra/live`. */
+    readonly path?: string;
+    /** The live load endpoint, as `live({ loadPath })` serves it. Default `/_nifra/live/load`. */
+    readonly loadPath?: string;
+    /**
+     * Sends every live load. Give one that adds an `Authorization` header when the app authenticates
+     * that way; cookies are sent by default.
+     */
+    readonly fetch?: (input: string, init: RequestInit) => Promise<Response>;
+    /** Route id to its layout ids, outermost first. The generated client entry passes its own table. */
+    readonly layoutIdsOf?: Readonly<Record<string, readonly string[]>>;
+}
+export interface LiveClient {
+    /** Pass as `createClientRouter({ fetchData })`: every route load goes through the live load endpoint. */
+    readonly fetchData: FetchRouteData;
+    /** Keep what `router` shows fresh. Returns a function that stops and closes the socket. */
+    attach(router: ClientRouter): () => void;
+}
+export declare function liveClient(options?: LiveClientOptions): LiveClient;
+//# sourceMappingURL=live-client.d.ts.map

package/dist/live-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-client.d.ts","sourceRoot":"","sources":["../src/live-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAaH,OAAO,EACL,KAAK,YAAY,EAEjB,KAAK,cAAc,EAOpB,MAAM,aAAa,CAAA;AAEpB,MAAM,WAAW,iBAAiB;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,8FAA8F;IAC9F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IACxE,oGAAoG;IACpG,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAA;CACnE;AAED,MAAM,WAAW,UAAU;IACzB,yGAAyG;IACzG,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAA;IAClC,2FAA2F;IAC3F,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,IAAI,CAAA;CACzC;AAkFD,wBAAgB,UAAU,CAAC,OAAO,GAAE,iBAAsB,GAAG,UAAU,CA2tBtE"}