@owlmeans/flow 0.1.18-rc.7 → 0.1.18

package/README.md

@@ -6,13 +6,13 @@ State machine for multi-step user flows, primarily used for OIDC authentication
 
 - Defines flow configurations as sequences of steps and transitions
 - `STD_OIDC_FLOW` is the standard OIDC authentication flow constant
-- `stdOidcFlow()` creates the preconfigured OIDC flow definition
+- `stdOidcFlow` is the preconfigured OIDC flow definition
 - Flows are started via `flowService.begin(flowAlias)` and progress through steps as the user authenticates
 
 ## Installation
 
 ```bash
-bun add @owlmeans/flow
+bun add @owlmeans/flow@^0.1.18
 ```
 
 ## Usage
@@ -20,14 +20,11 @@ bun add @owlmeans/flow
 Register the OIDC flow in app config:
 
 ```typescript
-import { STD_OIDC_FLOW, stdOidcFlow } from '@owlmeans/flow'
-
-// In app config (added as a config record)
-const appConfig = config(
-  AppType.Frontend,
-  'manager-web',
-  // ... other config
-  { [FLOW_RECORD]: [stdOidcFlow()] }
+import { flow, configureFlows, stdOidcFlow } from '@owlmeans/flow'
+
+const appConfig = configureFlows(
+  flow(config(AppType.Frontend, 'manager-web'), stdOidcFlow),
+  { defaultFlow: STD_OIDC_FLOW }
 )
 ```
 
@@ -47,17 +44,25 @@ await flowService.begin(STD_OIDC_FLOW)
 
 Constant: `'_oidc'` — alias for the standard OIDC flow.
 
-### `stdOidcFlow(): FlowConfig`
+### `stdOidcFlow: ShallowFlow`
+
+The pre-built standard OIDC authentication flow.
+
+### `flow(cfg, flow): C` / `configureFlows(cfg, config): C`
+
+Add a flow to an application config, and set the flow subsystem's own configuration on it.
+
+### `ShallowFlow`
 
-Returns a pre-built `FlowConfig` for the standard OIDC authentication flow.
+A flow declaration: `flow` (its alias), `initialStep`, and `steps` keyed by step name.
 
 ### `FlowConfig`
 
-A flow configuration object with `alias`, `steps: FlowStep[]`, and `transitions: FlowTransition[]`.
+The subsystem's configuration: `queryParam`, `services`, `modules`, `pathes`, `defaultFlow`.
 
 ### `FlowStep`
 
-A named step in a flow with optional `service` and `module` references.
+A named step: `index`, `step`, `service`, its `transitions`, and optional `path` / `module`.
 
 ### `FLOW_RECORD`
 
@@ -76,7 +81,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills
+npx @owlmeans/agent-skills@^0.1.18
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
-  "schemaVersion": 2,
+  "schemaVersion": 3,
   "package": "@owlmeans/flow",
-  "version": "0.1.18-rc.7",
-  "generatedAt": "2026-08-24T21:14:00.138Z",
+  "version": "0.1.18",
+  "generatedAt": "2026-10-28T00:31:34.765Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/flow/SKILL.md

@@ -1,46 +1,150 @@
 ---
 name: flow
-description: How to use @owlmeans/flow — state-machine / workflow execution framework with typed state, transitions, and flow definitions. Auto-invoked when importing from this package or implementing multi-step workflows.
+description: How to use @owlmeans/flow — a serializable step/transition state machine whose whole state collapses to one string. Auto-invoked when importing from this package, driving a multi-step workflow, or restoring one from a token.
 user-invocable: false
 ---
 <!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
 
 # @owlmeans/flow
 
-**Layer:** Core
-**Install:** `"@owlmeans/flow": "^0.1.18-rc.7"` in `dependencies`
+**Layer:** Cross-cutting domain
+**Install:** `"@owlmeans/flow": "^0.1.18"` in `dependencies`
 
-## Key Exports
+A flow is a set of named **steps**, each offering named **transitions** to other steps. What makes
+it worth using over a hand-rolled switch is that the whole live state — `flow`, `step`, `previous`,
+`service`, `entityId`, `payload`, `message`, `ok` — serializes to a single compact string and
+restores from it. That is what lets a workflow survive a redirect, a page load, or a process.
+
+## Key exports
 
 | Export | Description |
-|--------|-------------|
-| `Flow` types | Flow definition shape (states, transitions, payload) |
-| `FlowState` | State management primitives |
-| Errors | Flow execution errors |
-| Constants | Built-in state names, transition types |
-| Helpers | Flow construction and validation |
-| `flows` submodule | Built-in flow definitions |
-| i18n | Translatable error messages |
+|---|---|
+| `makeFlowModel(flow, provider?)` | Build a driver. `flow` is a `ShallowFlow` **object** (no provider needed) or a **string** — tried as a flow name first, then as a serialized token. |
+| `FlowModel` | `target` `entity` `enter` `steps` `state` `setState` `payload` `updatePayload` `step` `transitions` `transition` `next` `transit` `serialize` |
+| `ShallowFlow` / `FlowStep` / `FlowTransition` / `FlowState` / `FlowPayload` / `SerializedFlow` | The definition, the live state, and the compact shape the token encodes |
+| `Flow` | A `ShallowFlow` a provider resolved: it also carries the resolved `config` and the `prefabs` — one serialized entry state per initial step |
+| `FlowProvider` | `(flow: string) => Promise<Flow>` — resolves a flow by name |
+| `FlowConfig` / `WithFlowConfig` / `FlowConfigRecord` | `{ queryParam, services, modules, pathes, defaultFlow }`, the `flowConfig` field it sits on, and the config-record form of a definition |
+| `flow(cfg, flow)` · `configureFlows(cfg, config)` | Register a definition as a `FLOW_RECORD` config record / set `FlowConfig` |
+| `stdStabFlow`, `stdOidcFlow`, `stdOidpFlow`, `stdAuthFlow` (deprecated) | Built-in flows, with `StdAuthStep` / `OidcAuthStep` / `OidpAuthStep` naming their steps |
+| `STD_STAB_FLOW` `STD_OIDC_FLOW` `STD_OIDP_FLOW` `STD_AUTH_FLOW` | Their names — deliberately short, because every one of them is spent inside a URL |
+| `FLOW_RECORD` (`flow`) · `CFG_FLOW_PREFIX` (`flow`) · `TARGET_SERVICE` (`-`) · `FLOW_PLACEHOLDER` (`?`) · `FLOW_SEP` · `PAYLOAD_SEP` | Constants |
+| `FlowError`, `FlowUnsupported`, `FlowTargetError`, `UnknownFlow`, `FlowStepError`, `FlowStepMissconfigured`, `UnknownFlowStep`, `UnknownTransition` | The error family, all registered with `ResilientError` |
 
-## Usage
+## Defining a flow
 
-Define a flow with typed states, then drive it from `@owlmeans/client-flow` (cross-platform) or `@owlmeans/web-flow` (web):
+A definition is data, not a class. Each step carries an `index`, its own `step` name, the `service`
+it belongs to, and a map of transitions keyed by transition name:
 
 ```typescript
-import { Flow, FlowState } from '@owlmeans/flow'
-
-const onboardingFlow: Flow = {
-  alias: 'onboarding',
-  initial: 'welcome',
-  states: {
-    welcome: { on: { NEXT: 'profile' } },
-    profile: { on: { NEXT: 'done', BACK: 'welcome' } },
-    done: { type: 'final' }
-  }
+import type { ShallowFlow } from '@owlmeans/flow'
+
+export const onboardingFlow: ShallowFlow = {
+  flow: 'onboarding',
+  initialStep: 'welcome',
+  steps: {
+    welcome: {
+      index: 0,
+      step: 'welcome',
+      service: 'onboarding',
+      initial: true,
+      transitions: {
+        next: { transition: 'next', step: 'profile' },
+      },
+    },
+    profile: {
+      index: 1,
+      step: 'profile',
+      service: 'onboarding',
+      transitions: {
+        next: { transition: 'next', step: 'done' },
+        back: { transition: 'back', step: 'welcome', explicit: true, reversible: true },
+      },
+    },
+    done: { index: 2, step: 'done', service: 'onboarding', transitions: {} },
+  },
 }
 ```
 
-## Depends On
+## Driving it
+
+```typescript
+const model = await makeFlowModel(onboardingFlow)   // an object needs no provider
+model.transit('next', true)                          // → 'profile'
+const token = model.transit('next', true)            // → 'done'; returns the SERIALIZED state
+
+const restored = await makeFlowModel(token, provider)   // a token DOES need a provider
+restored.step().step   // 'done'
+```
+
+## Rules
+
+**`transit()` returns the serialized state, not the model.** It is the natural place to persist or
+hand off from — a caller that ignores the return and calls `serialize()` afterwards gets the same
+string, but the return is the signal that a transition is a checkpoint.
+
+**A string argument is a flow name FIRST and a token second.** `makeFlowModel` asks the provider,
+and only re-reads the string as a serialized token once the provider **throws**. A provider that
+returns `null`/`undefined` for an unknown name therefore breaks every restore — it must throw
+(`UnknownFlow` is what the built-ins raise).
+
+**Passing a `ShallowFlow` object needs no provider at all.** That is the server-friendly path: a
+runtime whose flows are code it declares itself needs no registry to start one, only to restore one.
+
+**`next()` answers with the first non-explicit outgoing transition**, and throws
+`UnknownFlowStep('next')` when the step offers none. It is what lets a driver advance without
+knowing the vocabulary, so mark every user-chosen or exceptional edge `explicit` — an unmarked
+second edge silently becomes reachable as the automatic answer.
+
+**`enter(step?)` only accepts a step marked `initial`**, and throws `FlowStepError('initial:<step>')`
+otherwise. That is what makes a flow's entry points an explicit part of its definition rather than
+whatever the caller happens to name.
+
+**`FlowPayload` holds flat scalars only** — `string | number | boolean | null | undefined`. Anything
+richer belongs in a record the payload points at. Payload is projected through the step's
+`payloadMap` on serialization, so an unmapped key does not survive a round trip and a step with no
+`payloadMap` at all carries no payload across.
+
+**`updatePayload` merges; `transit` also merges.** Neither replaces the payload, so a key set early
+in a flow keeps arriving at every later step whose `payloadMap` names it.
+
+**The live state is `flow` `step` `previous` `entityId` `service` `payload` `message` `ok`.**
+`service` is the target the flow is running *for*, set through `target()`; `entityId` is set through
+`entity()` and survives serialization even when it is explicitly `null`.
+
+**`reversible` is what keeps `previous`**, and is what a "back" transition needs to return to where
+it came from.
+
+## Where it runs
+
+Client drivers are `@owlmeans/client-flow` (`makeBasicFlowService`) and `@owlmeans/web-flow`
+(`makeFlowService`, which supplies the browser redirect the basic service refuses); they load
+definitions from `FLOW_RECORD` config records through the config resource and carry the serialized
+state in a query parameter (`FlowConfig.queryParam`, defaulting to `flow`).
+
+A step addresses its screen through `module` — the alias of the entrypoint the driver navigates to,
+which is why a step is portable between apps that mount it at different paths. `service`, `module`
+and `path` are plain strings, and a value prefixed with `$` is a reference resolved at load time
+against `FlowConfig.services` / `modules` / `pathes` — which is how one definition is reused by
+deployments that address different services. `TARGET_SERVICE` (`-`) in a step's `service` means
+"whatever the state's own target is" rather than a named one.
+
+A step with no `module` cannot be addressed, and the two client drivers raise
+`FlowStepMissconfigured` at different moments: `FlowClient.proceed` in `@owlmeans/client-flow`
+checks the step it is about to **enter**, before it transits; `FlowService.proceed` in
+`@owlmeans/web-flow` checks the step the model is **standing on**. Either way the step named in the
+error is the one missing the `module`.
+
+There is **no server-side driver in this package**. A server or worker builds models directly from
+`ShallowFlow` objects and supplies its own `FlowProvider` for restores — `@owlmeans/agent`'s
+`makeStaticFlowProvider` is the reference implementation of one.
+
+## Depends on
+
+`@owlmeans/auth`, `@owlmeans/config`, `@owlmeans/error`, `@owlmeans/i18n`, `@owlmeans/resource`,
+`@scure/base` (the token codec — base64url, no padding, over the JSON of `SerializedFlow`).
+
+## Related
 
-- `@owlmeans/error` — flow errors
-- `@owlmeans/i18n` — translatable error messages
+- [[client-flow]] — the client service and the runner a screen drives
+- [[web-flow]] — the browser half: the `flow` query parameter and cross-service redirects

package/build/flows/auth/consts.d.ts

@@ -0,0 +1,19 @@
+import type { ShallowFlow } from '../../types.js';
+export declare enum StdAuthStep {
+    Choice = "choice",
+    Signup = "signup",
+    Signin = "signin",
+    New = "new",
+    Existing = "existing",
+    Payment = "payment",
+    Success = "success",
+    Target = "target"
+}
+/**
+ * @TODO Actually this thing is kept here for the iteration when
+ * OwlMeans ID account may be used without owlmeans.net account.
+ *
+ * @deprecated
+ */
+export declare const stdAuthFlow: ShallowFlow;
+//# sourceMappingURL=consts.d.ts.map

package/build/flows/auth/consts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../../../src/flows/auth/consts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAGjD,oBAAY,WAAW;IACrB,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,MAAM,WAAW;CAClB;AAGD;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,WAuIzB,CAAA"}

package/build/flows/auth/consts.js

@@ -0,0 +1,146 @@
+import { STD_AUTH_FLOW } from '../../consts.js';
+export var StdAuthStep;
+(function (StdAuthStep) {
+    StdAuthStep["Choice"] = "choice";
+    StdAuthStep["Signup"] = "signup";
+    StdAuthStep["Signin"] = "signin";
+    StdAuthStep["New"] = "new";
+    StdAuthStep["Existing"] = "existing";
+    StdAuthStep["Payment"] = "payment";
+    StdAuthStep["Success"] = "success";
+    StdAuthStep["Target"] = "target";
+})(StdAuthStep || (StdAuthStep = {}));
+// OwlMeans Authentication Standard Flow 
+/**
+ * @TODO Actually this thing is kept here for the iteration when
+ * OwlMeans ID account may be used without owlmeans.net account.
+ *
+ * @deprecated
+ */
+export const stdAuthFlow = {
+    // naming - preserve space in serialized state
+    flow: STD_AUTH_FLOW,
+    initialStep: StdAuthStep.Choice,
+    steps: {
+        [StdAuthStep.Choice]: {
+            index: 0,
+            step: StdAuthStep.Choice,
+            service: '$auth',
+            initial: true,
+            module: '$auth.choice',
+            transitions: {
+                [StdAuthStep.Signup]: {
+                    transition: StdAuthStep.Signup,
+                    step: StdAuthStep.Signup,
+                    explicit: true,
+                    reversible: true
+                },
+                [StdAuthStep.Signin]: {
+                    transition: StdAuthStep.Signin,
+                    step: StdAuthStep.Signin,
+                    explicit: true,
+                    reversible: true
+                },
+            },
+        },
+        [StdAuthStep.Signup]: {
+            index: 1,
+            step: StdAuthStep.Signup,
+            service: '$auth',
+            module: '$auth.flow',
+            initial: true,
+            transitions: {
+                [StdAuthStep.New]: {
+                    transition: StdAuthStep.New,
+                    step: StdAuthStep.New,
+                    explicit: true,
+                    reversible: true,
+                },
+                [StdAuthStep.Existing]: {
+                    transition: StdAuthStep.Existing,
+                    step: StdAuthStep.Existing,
+                    explicit: true,
+                    reversible: true
+                },
+                [StdAuthStep.Signin]: {
+                    transition: StdAuthStep.Signin,
+                    step: StdAuthStep.Signin,
+                    explicit: true,
+                    reversible: true
+                },
+            }
+        },
+        [StdAuthStep.Signin]: {
+            index: 2,
+            step: StdAuthStep.Signin,
+            service: '$auth',
+            module: '$auth.flow',
+            initial: true,
+            transitions: {
+                [StdAuthStep.Target]: {
+                    transition: StdAuthStep.Target,
+                    step: StdAuthStep.Target,
+                }
+            }
+        },
+        [StdAuthStep.New]: {
+            index: 3,
+            step: StdAuthStep.New,
+            service: '$auth',
+            module: '$auth.flow',
+            initial: true,
+            transitions: {
+                [StdAuthStep.Payment]: {
+                    transition: StdAuthStep.Payment,
+                    step: StdAuthStep.Payment,
+                }
+            }
+        },
+        [StdAuthStep.Existing]: {
+            index: 4,
+            step: StdAuthStep.Existing,
+            service: '$auth',
+            module: '$auth.flow',
+            transitions: {
+                [StdAuthStep.Payment]: {
+                    transition: StdAuthStep.Payment,
+                    step: StdAuthStep.Payment,
+                }
+            }
+        },
+        [StdAuthStep.Payment]: {
+            index: 5,
+            step: StdAuthStep.Payment,
+            service: '$payment',
+            module: '$payment.plan',
+            transitions: {
+                [StdAuthStep.Success]: {
+                    transition: StdAuthStep.Success,
+                    step: StdAuthStep.Success,
+                }
+            }
+        },
+        [StdAuthStep.Success]: {
+            index: 6,
+            step: StdAuthStep.Success,
+            service: '$payment',
+            module: '$payment.success',
+            transitions: {
+                [StdAuthStep.Target]: {
+                    transition: StdAuthStep.Target,
+                    step: StdAuthStep.Target,
+                }
+            }
+        },
+        // @TODO This doesn't work anymore
+        // The auth dispatcher will require an additional step to proceed
+        [StdAuthStep.Target]: {
+            index: 7,
+            step: StdAuthStep.Target,
+            service: '$auth',
+            module: '$dispatcher',
+            transitions: {}
+        }
+    }
+};
+//# sourceMappingURL=consts.js.map

package/build/flows/auth/consts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.js","sourceRoot":"","sources":["../../../src/flows/auth/consts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAE/C,MAAM,CAAN,IAAY,WASX;AATD,WAAY,WAAW;IACrB,gCAAiB,CAAA;IACjB,gCAAiB,CAAA;IACjB,gCAAiB,CAAA;IACjB,0BAAW,CAAA;IACX,oCAAqB,CAAA;IACrB,kCAAmB,CAAA;IACnB,kCAAmB,CAAA;IACnB,gCAAiB,CAAA;AACnB,CAAC,EATW,WAAW,KAAX,WAAW,QAStB;AAED,yCAAyC;AACzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAgB;IACtC,8CAA8C;IAC9C,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,WAAW,CAAC,MAAM;IAE/B,KAAK,EAAE;QAEL,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE;YACpB,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,WAAW,CAAC,MAAM;YACxB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,cAAc;YACtB,WAAW,EAAE;gBACX,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE;oBACpB,UAAU,EAAE,WAAW,CAAC,MAAM;oBAC9B,IAAI,EAAE,WAAW,CAAC,MAAM;oBACxB,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,IAAI;iBACjB;gBACD,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE;oBACpB,UAAU,EAAE,WAAW,CAAC,MAAM;oBAC9B,IAAI,EAAE,WAAW,CAAC,MAAM;oBACxB,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,IAAI;iBACjB;aACF;SACF;QAED,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE;YACpB,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,WAAW,CAAC,MAAM;YACxB,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,IAAI;YACb,WAAW,EAAE;gBACX,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE;oBACjB,UAAU,EAAE,WAAW,CAAC,GAAG;oBAC3B,IAAI,EAAE,WAAW,CAAC,GAAG;oBACrB,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,IAAI;iBACjB;gBACD,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE;oBACtB,UAAU,EAAE,WAAW,CAAC,QAAQ;oBAChC,IAAI,EAAE,WAAW,CAAC,QAAQ;oBAC1B,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,IAAI;iBACjB;gBACD,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE;oBACpB,UAAU,EAAE,WAAW,CAAC,MAAM;oBAC9B,IAAI,EAAE,WAAW,CAAC,MAAM;oBACxB,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,IAAI;iBACjB;aACF;SACF;QAED,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE;YACpB,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,WAAW,CAAC,MAAM;YACxB,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,IAAI;YACb,WAAW,EAAE;gBACX,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE;oBACpB,UAAU,EAAE,WAAW,CAAC,MAAM;oBAC9B,IAAI,EAAE,WAAW,CAAC,MAAM;iBACzB;aACF;SACF;QAED,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE;YACjB,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,WAAW,CAAC,GAAG;YACrB,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,IAAI;YACb,WAAW,EAAE;gBACX,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE;oBACrB,UAAU,EAAE,WAAW,CAAC,OAAO;oBAC/B,IAAI,EAAE,WAAW,CAAC,OAAO;iBAC1B;aACF;SACF;QAED,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE;YACtB,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,WAAW,CAAC,QAAQ;YAC1B,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE;gBACX,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE;oBACrB,UAAU,EAAE,WAAW,CAAC,OAAO;oBAC/B,IAAI,EAAE,WAAW,CAAC,OAAO;iBAC1B;aACF;SACF;QAED,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,WAAW,CAAC,OAAO;YACzB,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,eAAe;YACvB,WAAW,EAAE;gBACX,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE;oBACrB,UAAU,EAAE,WAAW,CAAC,OAAO;oBAC/B,IAAI,EAAE,WAAW,CAAC,OAAO;iBAC1B;aACF;SACF;QAED,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,WAAW,CAAC,OAAO;YACzB,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,kBAAkB;YAC1B,WAAW,EAAE;gBACX,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE;oBACpB,UAAU,EAAE,WAAW,CAAC,MAAM;oBAC9B,IAAI,EAAE,WAAW,CAAC,MAAM;iBACzB;aACF;SACF;QAED,kCAAkC;QAClC,iEAAiE;QACjE,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE;YACpB,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,WAAW,CAAC,MAAM;YACxB,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,aAAa;YACrB,WAAW,EAAE,EAAE;SAChB;KAEF;CACF,CAAA"}

package/build/flows/index.d.ts

@@ -1,5 +1,5 @@
-export * from './auth.js';
-export * from './stab.js';
-export * from './oidc.js';
-export * from './oidp.js';
+export * from './auth/consts.js';
+export * from './stab/consts.js';
+export * from './oidc/consts.js';
+export * from './oidp/consts.js';
 //# sourceMappingURL=index.d.ts.map

package/build/flows/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/flows/index.ts"],"names":[],"mappings":"AACA,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/flows/index.ts"],"names":[],"mappings":"AACA,cAAc,kBAAkB,CAAA;AAChC,cAAc,kBAAkB,CAAA;AAChC,cAAc,kBAAkB,CAAA;AAChC,cAAc,kBAAkB,CAAA"}

package/build/flows/index.js

@@ -1,5 +1,5 @@
-export * from './auth.js';
-export * from './stab.js';
-export * from './oidc.js';
-export * from './oidp.js';
+export * from './auth/consts.js';
+export * from './stab/consts.js';
+export * from './oidc/consts.js';
+export * from './oidp/consts.js';
 //# sourceMappingURL=index.js.map

package/build/flows/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/flows/index.ts"],"names":[],"mappings":"AACA,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/flows/index.ts"],"names":[],"mappings":"AACA,cAAc,kBAAkB,CAAA;AAChC,cAAc,kBAAkB,CAAA;AAChC,cAAc,kBAAkB,CAAA;AAChC,cAAc,kBAAkB,CAAA"}

package/build/flows/oidc/consts.d.ts

@@ -0,0 +1,15 @@
+import type { ShallowFlow } from '../../types.js';
+export declare enum OidcAuthStep {
+    Dispatch = "dispatch",
+    Authen = "authen",
+    PostAuthen = "post-authen",
+    OrgChoice = "org-choice",
+    Payment = "payment",
+    Success = "success",
+    Target = "target",
+    Ephemeral = "ephemeral"
+}
+export declare const PURPOSE_PAYLOAD = "purpose";
+export declare const SIMPLIFIED_PAYLOAD = "simplified";
+export declare const stdOidcFlow: ShallowFlow;
+//# sourceMappingURL=consts.d.ts.map

package/build/flows/oidc/consts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../../../src/flows/oidc/consts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAIjD,oBAAY,YAAY;IACtB,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,UAAU,gBAAgB;IAC1B,SAAS,eAAe;IACxB,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,SAAS,cAAc;CACxB;AAED,eAAO,MAAM,eAAe,YAAY,CAAA;AACxC,eAAO,MAAM,kBAAkB,eAAe,CAAA;AAG9C,eAAO,MAAM,WAAW,EAAE,WA2IzB,CAAA"}

package/build/flows/oidc/consts.js

@@ -0,0 +1,147 @@
+import { STD_OIDC_FLOW, TARGET_SERVICE } from '../../consts.js';
+import { AUTH_QUERY } from '@owlmeans/auth';
+export var OidcAuthStep;
+(function (OidcAuthStep) {
+    OidcAuthStep["Dispatch"] = "dispatch";
+    OidcAuthStep["Authen"] = "authen";
+    OidcAuthStep["PostAuthen"] = "post-authen";
+    OidcAuthStep["OrgChoice"] = "org-choice";
+    OidcAuthStep["Payment"] = "payment";
+    OidcAuthStep["Success"] = "success";
+    OidcAuthStep["Target"] = "target";
+    OidcAuthStep["Ephemeral"] = "ephemeral";
+})(OidcAuthStep || (OidcAuthStep = {}));
+export const PURPOSE_PAYLOAD = 'purpose';
+export const SIMPLIFIED_PAYLOAD = 'simplified';
+// OwlMeans OIDC Based Auth Flow 
+export const stdOidcFlow = {
+    // naming - preserve space in serialized state
+    flow: STD_OIDC_FLOW,
+    initialStep: OidcAuthStep.Dispatch,
+    steps: {
+        [OidcAuthStep.Dispatch]: {
+            index: 0,
+            step: OidcAuthStep.Dispatch,
+            service: '$auth',
+            initial: true,
+            module: '$auth.choice',
+            transitions: {
+                [OidcAuthStep.Authen]: {
+                    transition: OidcAuthStep.Authen,
+                    step: OidcAuthStep.Authen,
+                },
+                [OidcAuthStep.Ephemeral]: {
+                    transition: OidcAuthStep.Ephemeral,
+                    step: OidcAuthStep.Ephemeral,
+                },
+            },
+            payloadMap: { [SIMPLIFIED_PAYLOAD]: 0 }
+        },
+        [OidcAuthStep.Authen]: {
+            index: 1,
+            step: OidcAuthStep.Authen,
+            service: '$iam',
+            module: '$iam.authen',
+            transitions: {
+                [OidcAuthStep.PostAuthen]: {
+                    transition: OidcAuthStep.PostAuthen,
+                    step: OidcAuthStep.PostAuthen,
+                },
+            },
+            payloadMap: { [SIMPLIFIED_PAYLOAD]: 0 }
+        },
+        [OidcAuthStep.PostAuthen]: {
+            index: 2,
+            step: OidcAuthStep.PostAuthen,
+            service: '$auth',
+            module: '$auth.flow-param',
+            transitions: {
+                [OidcAuthStep.OrgChoice]: {
+                    transition: OidcAuthStep.OrgChoice,
+                    step: OidcAuthStep.OrgChoice,
+                },
+                [OidcAuthStep.Payment]: {
+                    transition: OidcAuthStep.Payment,
+                    step: OidcAuthStep.Payment,
+                },
+                [OidcAuthStep.Target]: {
+                    transition: OidcAuthStep.Target,
+                    step: OidcAuthStep.Target,
+                },
+            },
+            payloadMap: {
+                [PURPOSE_PAYLOAD]: 0,
+                [SIMPLIFIED_PAYLOAD]: 1,
+            }
+        },
+        [OidcAuthStep.OrgChoice]: {
+            index: 3,
+            step: OidcAuthStep.OrgChoice,
+            service: '$auth',
+            module: '$auth.flow',
+            transitions: {
+                [OidcAuthStep.Payment]: {
+                    transition: OidcAuthStep.Payment,
+                    step: OidcAuthStep.Payment,
+                },
+                [OidcAuthStep.Target]: {
+                    transition: OidcAuthStep.Target,
+                    step: OidcAuthStep.Target,
+                },
+            },
+            payloadMap: {
+                [AUTH_QUERY]: 0,
+                [PURPOSE_PAYLOAD]: 1,
+                [SIMPLIFIED_PAYLOAD]: 1,
+            }
+        },
+        [OidcAuthStep.Payment]: {
+            index: 4,
+            step: OidcAuthStep.Payment,
+            service: '$payment',
+            module: '$payment.plan',
+            transitions: {
+                [OidcAuthStep.Success]: {
+                    transition: OidcAuthStep.Success,
+                    step: OidcAuthStep.Success,
+                }
+            },
+            payloadMap: { [SIMPLIFIED_PAYLOAD]: 0 }
+        },
+        [OidcAuthStep.Success]: {
+            index: 5,
+            step: OidcAuthStep.Success,
+            service: '$payment',
+            module: '$payment.success',
+            transitions: {
+                [OidcAuthStep.Target]: {
+                    transition: OidcAuthStep.Target,
+                    step: OidcAuthStep.Target,
+                }
+            },
+            payloadMap: { [SIMPLIFIED_PAYLOAD]: 0 }
+        },
+        [OidcAuthStep.Target]: {
+            index: 6,
+            step: OidcAuthStep.Target,
+            service: '$auth',
+            module: '$auth.flow',
+            transitions: {
+                [OidcAuthStep.Ephemeral]: {
+                    transition: OidcAuthStep.Ephemeral,
+                    step: OidcAuthStep.Ephemeral,
+                }
+            },
+            payloadMap: { [SIMPLIFIED_PAYLOAD]: 0 }
+        },
+        [OidcAuthStep.Ephemeral]: {
+            index: 7,
+            step: OidcAuthStep.Ephemeral,
+            service: TARGET_SERVICE,
+            module: '$dispatcher',
+            transitions: {},
+            payloadMap: { [SIMPLIFIED_PAYLOAD]: 0 }
+        }
+    }
+};
+//# sourceMappingURL=consts.js.map

package/build/flows/oidc/consts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.js","sourceRoot":"","sources":["../../../src/flows/oidc/consts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAE3C,MAAM,CAAN,IAAY,YASX;AATD,WAAY,YAAY;IACtB,qCAAqB,CAAA;IACrB,iCAAiB,CAAA;IACjB,0CAA0B,CAAA;IAC1B,wCAAwB,CAAA;IACxB,mCAAmB,CAAA;IACnB,mCAAmB,CAAA;IACnB,iCAAiB,CAAA;IACjB,uCAAuB,CAAA;AACzB,CAAC,EATW,YAAY,KAAZ,YAAY,QASvB;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAA;AACxC,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAA;AAE9C,iCAAiC;AACjC,MAAM,CAAC,MAAM,WAAW,GAAgB;IACtC,8CAA8C;IAC9C,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,YAAY,CAAC,QAAQ;IAElC,KAAK,EAAE;QAEL,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE;YACvB,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,YAAY,CAAC,QAAQ;YAC3B,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,cAAc;YACtB,WAAW,EAAE;gBACX,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE;oBACrB,UAAU,EAAE,YAAY,CAAC,MAAM;oBAC/B,IAAI,EAAE,YAAY,CAAC,MAAM;iBAC1B;gBACD,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE;oBACxB,UAAU,EAAE,YAAY,CAAC,SAAS;oBAClC,IAAI,EAAE,YAAY,CAAC,SAAS;iBAC7B;aACF;YACD,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE;SACxC;QAED,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE;YACrB,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,YAAY,CAAC,MAAM;YACzB,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,aAAa;YACrB,WAAW,EAAE;gBACX,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE;oBACzB,UAAU,EAAE,YAAY,CAAC,UAAU;oBACnC,IAAI,EAAE,YAAY,CAAC,UAAU;iBAC9B;aACF;YACD,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE;SACxC;QAED,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE;YACzB,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,YAAY,CAAC,UAAU;YAC7B,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,kBAAkB;YAC1B,WAAW,EAAE;gBACX,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE;oBACxB,UAAU,EAAE,YAAY,CAAC,SAAS;oBAClC,IAAI,EAAE,YAAY,CAAC,SAAS;iBAC7B;gBACD,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE;oBACtB,UAAU,EAAE,YAAY,CAAC,OAAO;oBAChC,IAAI,EAAE,YAAY,CAAC,OAAO;iBAC3B;gBACD,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE;oBACrB,UAAU,EAAE,YAAY,CAAC,MAAM;oBAC/B,IAAI,EAAE,YAAY,CAAC,MAAM;iBAC1B;aACF;YACD,UAAU,EAAE;gBACV,CAAC,eAAe,CAAC,EAAE,CAAC;gBACpB,CAAC,kBAAkB,CAAC,EAAE,CAAC;aACxB;SACF;QAED,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE;YACxB,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,YAAY,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE;gBACX,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE;oBACtB,UAAU,EAAE,YAAY,CAAC,OAAO;oBAChC,IAAI,EAAE,YAAY,CAAC,OAAO;iBAC3B;gBACD,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE;oBACrB,UAAU,EAAE,YAAY,CAAC,MAAM;oBAC/B,IAAI,EAAE,YAAY,CAAC,MAAM;iBAC1B;aACF;YACD,UAAU,EAAE;gBACV,CAAC,UAAU,CAAC,EAAE,CAAC;gBACf,CAAC,eAAe,CAAC,EAAE,CAAC;gBACpB,CAAC,kBAAkB,CAAC,EAAE,CAAC;aACxB;SACF;QAED,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE;YACtB,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,YAAY,CAAC,OAAO;YAC1B,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,eAAe;YACvB,WAAW,EAAE;gBACX,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE;oBACtB,UAAU,EAAE,YAAY,CAAC,OAAO;oBAChC,IAAI,EAAE,YAAY,CAAC,OAAO;iBAC3B;aACF;YACD,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE;SACxC;QAED,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE;YACtB,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,YAAY,CAAC,OAAO;YAC1B,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,kBAAkB;YAC1B,WAAW,EAAE;gBACX,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE;oBACrB,UAAU,EAAE,YAAY,CAAC,MAAM;oBAC/B,IAAI,EAAE,YAAY,CAAC,MAAM;iBAC1B;aACF;YACD,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE;SACxC;QAED,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE;YACrB,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,YAAY,CAAC,MAAM;YACzB,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE;gBACX,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE;oBACxB,UAAU,EAAE,YAAY,CAAC,SAAS;oBAClC,IAAI,EAAE,YAAY,CAAC,SAAS;iBAC7B;aACF;YACD,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE;SACxC;QAED,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE;YACxB,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,YAAY,CAAC,SAAS;YAC5B,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,aAAa;YACrB,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE;SACxC;KAEF;CACF,CAAA"}