@owlmeans/server-auth 0.1.18-rc.8 → 0.1.18

package/agent-meta/skills/supervisor-auth/SKILL.md

@@ -0,0 +1,128 @@
+---
+name: supervisor-auth
+description: PK-based supervisor authentication — a development-only login where a holder of one of the project's trusted private keys mints a token for any user id/email (registering them on first use), bypassing external IdPs. Primary use is end-to-end tests. Covers appendSupervisorAuth (server + web), the supervisor plugin, and the @owlmeans/test-ui helpers. Use when wiring or testing supervisor auth.
+user-invocable: false
+---
+<!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
+
+# PK-Based Supervisor Authentication
+
+**Layer:** Server (`@owlmeans/server-auth`) + Web (`@owlmeans/web-auth`) + Tests (`@owlmeans/test-ui`)
+
+A privileged, **development-only** auth path: a holder of one of the project's trusted private keys
+(the allowlisted "supervisors") signs a server challenge to mint a valid owlmeans token for an
+arbitrary user id / email — **without** Google/OIDC. Unknown users are **registered** on first use.
+The primary purpose is deterministic **end-to-end tests** that authenticate against real environments.
+
+It reuses the existing flow end-to-end: the plugin only **verifies the supervisor signature and
+resolves/registers the user**, then hands the mutated credential back to the auth manager's own
+model (which signs the credential envelope) and to the project's auth service (which exchanges it
+for the final `Ed25519BasicToken` bearer). No new token-minting code.
+
+## Type & payload
+
+- `AuthenticationType.Supervisor = 'pk-supervisor'` (in `@owlmeans/auth`).
+- Shared signed payload: `buildSupervisorPayload(challenge, userId, salt)` (in `@owlmeans/auth`) —
+  binds the signature to the **single-use server challenge** (replay protection), the target
+  `userId`, and a fresh client `salt`. The front-end packs `{ salt, signature }` (JSON) into
+  `AuthCredentials.credential`.
+
+## Server: `appendSupervisorAuth` (from `@owlmeans/server-auth/manager`)
+
+Call once on the **auth-manager** context (the one that serves `AUTHEN_INIT`/`AUTHEN_AUTHEN` and holds
+`AUTH_SRV_KEY`), beside other plugin appends (e.g. `appendOtpPlugin`).
+
+```ts
+import { appendSupervisorAuth } from '@owlmeans/server-auth/manager'
+
+appendSupervisorAuth(context, {
+  supervisors: ['master-key', 'super-user', 'shared-key'], // TRUSTED record `name`s allowed to sign
+  resolveUser: async (userId, ctx, { register }) => {        // find-or-create the target identity
+    // wire to your identity store; return { userId, profileId?, entitySlug?, role?, scopes? }
+  },
+  allowRegistration: true,        // default true
+  enabled: undefined,             // default: development only (cfg.debug.all || cfg.debug.supervisor)
+  acceptInternalTokens: true,     // default true — see below
+})
+```
+
+Options:
+- `supervisors` — TRUSTED-record `name`s authorized to sign. Default `['master','superuser']`. The
+  matching **public** key must be in the project's TRUSTED config; the **private** key is what the
+  front-end signs with. Pick aliases whose private keys you actually have (e.g. in `.env.dev.secrets`).
+- `resolveUser` — `(userId, context, { register }) => Promise<SupervisorUserResolution>`. Default:
+  trust the id as-is (`{ userId }`). Wire it to `@owlmeans/server-auth-identity`'s
+  `IdentityLinkingService` (`getLinkedProfile` / `linkProfile`) to find-or-create the person's
+  account and the deployment's own row (a new address registers a personal organization). `SupervisorUserResolution` is `{ userId }` plus optional `profileId`,
+  `entitySlug`, `role` and `scopes` — the organization value is a SLUG, the renameable public name
+  that a token carries, never the stable `entityId`. `profileId` defaults to `userId`, `scopes` to
+  the credential's own or `[ALL_SCOPES]`, and `role` to `AuthRole.User`.
+- `enabled` — force on/off. Default is development only. **Never enable in real production.**
+- `acceptInternalTokens` — when `true`, appends the internal `Ed25519BasicToken` guard
+  (`DEFAULT_GUARD`) as a coguard on every already-guarded backend entrypoint, so internal OwlMeans
+  tokens keep working where another guard (OIDC, say) is the primary one. The primary guard stays
+  first; the internal guard only matches an `Ed25519BasicToken` authorization header. Also exposed
+  standalone as `setupInternalTokenCoguard(entrypoints, guard?)`. Set `false` when the entrypoints
+  already use `DEFAULT_GUARD` as their primary guard.
+- `guard` — which guard alias `acceptInternalTokens` appends. Default `DEFAULT_GUARD` (`'auth'`).
+
+## Web: `appendSupervisorAuth` (from `@owlmeans/web-auth`)
+
+Call once on the web client context. Registers the self-contained login form plugin; the form renders
+at the standard typed route `SUPERVISOR_LOGIN_PATH` = `/authentication/login/pk-supervisor`.
+
+```ts
+import { appendSupervisorAuth } from '@owlmeans/web-auth'
+
+appendSupervisorAuth(context) // dev-only by default; or appendSupervisorAuth(context, { enabled })
+```
+
+The form (`data-testid="supervisor-auth-form"`, inputs `supervisor-user-id`, `supervisor-pk`, button
+`supervisor-submit`, error `supervisor-error`) fetches a challenge, signs it, exchanges it for a
+bearer, stores it, and redirects HOME — mirroring the Google plugin. (Alternatively, the side-effect
+import `@owlmeans/web-auth/auth/plugins` always-registers it.)
+
+The web append reads `cfg.debug.supervisor` alone; the server append accepts either
+`cfg.debug.all` or `cfg.debug.supervisor`. A deployment that wants the operator login therefore sets
+`debug.supervisor` — it is the flag both halves honour, and the only one that does not arrive by
+accident. The plugin is `restricted`, so `appendSupervisorAuth` also writes
+`cfg.security.auth.login.overrides` to make it offerable; `{ offer: false }` registers it without
+advertising it.
+
+## Tests: `@owlmeans/test-ui` helpers
+
+- `supervisorAuthHelper.authenticateViaSupervisorApi({ apiBaseUrl, userId, pk })` — drives the live API
+  (`/authentication/init` → sign → `/authentication/authenticate` → `/authenticate`) and returns the
+  final bearer. **No browser**; registers the user on first use. The "set a token directly via API" path.
+- `makePageHelper(page).loginViaSupervisorForm({ baseUrl, userId, pk })` — Playwright: drives the real login form
+  end-to-end (faithful path that exercises the plugin + registration).
+- `makePageHelper(page).loginViaDispatcher(baseUrl, token)` — inject a pregenerated bearer via the standard
+  `/dispatcher?token=` route (apps that override DISPATCHER, e.g. for a forced IdP, can't use this —
+  use the form).
+- `supervisorAuthHelper.pregenerateAuthToken({ userId, pk, scopes?, role?, profileId?, source?, ... })` — offline mint via
+  `@owlmeans/test-auth`'s `makeBearer`, using the project's **own** trusted signing key (lowest-level
+  primitive). No plugin, no registration.
+
+`makePageHelper(page).loginViaSupervisorForm` answers a cookie-consent dialog by default (`consent: 'accept'`): an
+OwlMeans app refuses to start an authentication flow until consent is answered, and the modal
+intercepts every click at the form underneath. Both browser helpers navigate with
+`waitUntil: 'domcontentloaded'` rather than Playwright's `load`, because `load` waits for every
+subresource and a tag manager or analytics beacon that never settles holds it open until timeout.
+
+## Security
+
+- Development/stage only. Gate on `cfg.debug`; never ship enabled to real production.
+- Anyone with a supervisor **private** key can impersonate/register any user — treat those keys as
+  highly sensitive.
+
+## Depends On
+- `@owlmeans/auth` (type + `buildSupervisorPayload` + `SupervisorCredentialPayload`),
+  `@owlmeans/basic-keys` (sign/verify), `@owlmeans/basic-ids` (the salt),
+  `@owlmeans/auth-common` (`DEFAULT_GUARD`, `TrustedRecord`), `@owlmeans/config` (`TRUSTED`).
+- Tests: `@owlmeans/test-ui` (the helpers above) over `@owlmeans/test-auth` (`makeBearer`).
+
+## Related
+
+`server-auth` (the plugin registry and the manager) · `web-auth` (the form package) ·
+`server-auth-identity` (what `resolveUser` should be wired to) · `login-methods` (why a
+`restricted` method has to be named in the configuration)

package/build/actions/service.d.ts

@@ -1,4 +1,8 @@
-import type { RefedEntrypointHandler } from '@owlmeans/server-entrypoint';
+import type { EntrypointProtocol } from '@owlmeans/entrypoint';
 import type { AuthToken } from '@owlmeans/auth';
-export declare const authenticate: RefedEntrypointHandler<AuthToken>;
+export declare const authenticate: (protocol: EntrypointProtocol<{
+    body: AuthToken;
+}, AuthToken>) => import("@owlmeans/server-entrypoint").BoundEntrypointHandler<EntrypointProtocol<{
+    body: AuthToken;
+}, AuthToken>>;
 //# sourceMappingURL=service.d.ts.map

package/build/actions/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/actions/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAS/C,eAAO,MAAM,YAAY,EAAE,sBAAsB,CAAC,SAAS,CAK1D,CAAA"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/actions/service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAM/C,eAAO,MAAM,YAAY,aAAc,kBAAkB,CAAC;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,EAAE,SAAS,CAAC;UAAvB,SAAS;cAKvE,CAAA"}

package/build/actions/service.js

@@ -1,7 +1,8 @@
-import { handleBody } from '@owlmeans/server-api';
+import { handlers } from '@owlmeans/server-api';
 import { assertContext } from '@owlmeans/context';
-export const authenticate = handleBody(async (payload, ctx) => {
-    const context = assertContext(ctx, 'authenticate');
-    return await context.auth().authenticate(payload);
+const api = handlers();
+export const authenticate = (protocol) => api.request(protocol, async (request, context) => {
+    const ctx = assertContext(context, 'authenticate');
+    return await ctx.auth().authenticate(request.body);
 });
 //# sourceMappingURL=service.js.map

package/build/actions/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/actions/service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAGjD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAKjD,MAAM,CAAC,MAAM,YAAY,GAAsC,UAAU,CACvE,KAAK,EAAE,OAAkB,EAAE,GAAG,EAAE,EAAE;IAChC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,cAAc,CAAY,CAAA;IAC7D,OAAO,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;AACnD,CAAC,CACF,CAAA"}
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/actions/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAG/C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAGjD,MAAM,GAAG,GAAG,QAAQ,EAAW,CAAA;AAE/B,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAA4D,EAAE,EAAE,CAC3F,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;IAC/C,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,cAAc,CAAY,CAAA;IAE7D,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;AACpD,CAAC,CAAC,CAAA"}

package/build/actions/types.local.d.ts

@@ -0,0 +1,6 @@
+import type { ServerConfig, ServerContext } from '@owlmeans/server-context';
+import { AuthServiceAppend } from '../types.js';
+export type Config = ServerConfig;
+export interface Context extends ServerContext<Config>, AuthServiceAppend {
+}
+//# sourceMappingURL=types.local.d.ts.map

package/build/actions/types.local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.local.d.ts","sourceRoot":"","sources":["../../src/actions/types.local.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAE/C,MAAM,MAAM,MAAM,GAAG,YAAY,CAAA;AAEjC,MAAM,WAAW,OAAQ,SAAQ,aAAa,CAAC,MAAM,CAAC,EAAE,iBAAiB;CAAG"}

package/build/actions/types.local.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.local.js.map

package/build/actions/types.local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.local.js","sourceRoot":"","sources":["../../src/actions/types.local.ts"],"names":[],"mappings":""}

package/build/entrypoints.d.ts

@@ -0,0 +1,5 @@
+import type { ServerProtocolEntrypoint } from '@owlmeans/server-entrypoint';
+import type { EntrypointProtocolDeclaration } from '@owlmeans/entrypoint';
+/** Server entrypoints required by the generic authentication service. */
+export declare const entrypoints: ServerProtocolEntrypoint<EntrypointProtocolDeclaration>[];
+//# sourceMappingURL=entrypoints.d.ts.map

package/build/entrypoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAA;AAE3E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAA;AAGzE,yEAAyE;AACzE,eAAO,MAAM,WAAW,EAAE,wBAAwB,CAAC,6BAA6B,CAAC,EAGhF,CAAA"}

package/build/entrypoints.js

@@ -0,0 +1,9 @@
+import { bind } from '@owlmeans/server-entrypoint';
+import { authProtocols } from '@owlmeans/auth-common';
+import { authenticate } from './actions/service.js';
+/** Server entrypoints required by the generic authentication service. */
+export const entrypoints = [
+    bind(authProtocols.dispatcher),
+    bind(authProtocols.dispatcherAuthenticate, authenticate(authProtocols.dispatcherAuthenticate)),
+];
+//# sourceMappingURL=entrypoints.js.map

package/build/entrypoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entrypoints.js","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAElD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAErD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAEnD,yEAAyE;AACzE,MAAM,CAAC,MAAM,WAAW,GAA8D;IACpF,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;IAC9B,IAAI,CAAC,aAAa,CAAC,sBAAsB,EAAE,YAAY,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC;CAC/F,CAAA"}

package/build/index.d.ts

@@ -1,6 +1,7 @@
 export type * from './types.js';
 export * from './model/index.js';
 export * from './consts.js';
-export * from './modules.js';
+export * from './entrypoints.js';
 export * from './service.js';
+export * from './re-captcha/index.js';
 //# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,mBAAmB,YAAY,CAAA;AAC/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAC/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,aAAa,CAAA;AAC3B,cAAc,kBAAkB,CAAA;AAChC,cAAc,cAAc,CAAA;AAC5B,cAAc,uBAAuB,CAAA"}

package/build/index.js

@@ -1,5 +1,6 @@
 export * from './model/index.js';
 export * from './consts.js';
-export * from './modules.js';
+export * from './entrypoints.js';
 export * from './service.js';
+export * from './re-captcha/index.js';
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,kBAAkB,CAAA;AAChC,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,kBAAkB,CAAA;AAChC,cAAc,aAAa,CAAA;AAC3B,cAAc,kBAAkB,CAAA;AAChC,cAAc,cAAc,CAAA;AAC5B,cAAc,uBAAuB,CAAA"}

package/build/manager/actions/authenticate.d.ts

@@ -0,0 +1,8 @@
+import type { AuthCredentials, AuthToken } from '@owlmeans/auth';
+import type { EntrypointProtocol } from '@owlmeans/entrypoint';
+export declare const authenticate: (protocol: EntrypointProtocol<{
+    body: AuthCredentials;
+}, AuthToken>) => import("@owlmeans/server-entrypoint").BoundEntrypointHandler<EntrypointProtocol<{
+    body: AuthCredentials;
+}, AuthToken>>;
+//# sourceMappingURL=authenticate.d.ts.map

package/build/manager/actions/authenticate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.d.ts","sourceRoot":"","sources":["../../../src/manager/actions/authenticate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAChE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAO9D,eAAO,MAAM,YAAY,aAAc,kBAAkB,CAAC;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,EAAE,SAAS,CAAC;UAA7B,eAAe;cAGhF,CAAA"}

package/build/manager/actions/authenticate.js

@@ -0,0 +1,5 @@
+import { handlers } from '@owlmeans/server-api';
+import { makeAuthModel } from '../model.js';
+const api = handlers();
+export const authenticate = (protocol) => api.body(protocol, async (body, context) => await makeAuthModel(context).authenticate(body));
+//# sourceMappingURL=authenticate.js.map

package/build/manager/actions/authenticate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.js","sourceRoot":"","sources":["../../../src/manager/actions/authenticate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAG3C,MAAM,GAAG,GAAG,QAAQ,EAAyB,CAAA;AAE7C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAkE,EAAE,EAAE,CACjG,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAC3C,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAChD,CAAA"}

package/build/manager/actions/index.d.ts

@@ -1,2 +1,4 @@
-export * from './manager.js';
+export * from './init.js';
+export * from './authenticate.js';
+export * from './rely.js';
 //# sourceMappingURL=index.d.ts.map

package/build/manager/actions/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/manager/actions/index.ts"],"names":[],"mappings":"AACA,cAAc,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/manager/actions/index.ts"],"names":[],"mappings":"AACA,cAAc,WAAW,CAAA;AACzB,cAAc,mBAAmB,CAAA;AACjC,cAAc,WAAW,CAAA"}

package/build/manager/actions/index.js

@@ -1,2 +1,4 @@
-export * from './manager.js';
+export * from './init.js';
+export * from './authenticate.js';
+export * from './rely.js';
 //# sourceMappingURL=index.js.map

package/build/manager/actions/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/manager/actions/index.ts"],"names":[],"mappings":"AACA,cAAc,cAAc,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/manager/actions/index.ts"],"names":[],"mappings":"AACA,cAAc,WAAW,CAAA;AACzB,cAAc,mBAAmB,CAAA;AACjC,cAAc,WAAW,CAAA"}

package/build/manager/actions/init.d.ts

@@ -0,0 +1,8 @@
+import type { AllowanceRequest, AllowanceResponse } from '@owlmeans/auth';
+import type { EntrypointProtocol } from '@owlmeans/entrypoint';
+export declare const authenticationInit: (protocol: EntrypointProtocol<{
+    body: AllowanceRequest;
+}, AllowanceResponse>) => import("@owlmeans/server-entrypoint").BoundEntrypointHandler<EntrypointProtocol<{
+    body: AllowanceRequest;
+}, AllowanceResponse>>;
+//# sourceMappingURL=init.d.ts.map

package/build/manager/actions/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/manager/actions/init.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAO9D,eAAO,MAAM,kBAAkB,aAAc,kBAAkB,CAAC;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,EAAE,iBAAiB,CAAC;UAAtC,gBAAgB;sBAGvF,CAAA"}

package/build/manager/actions/init.js

@@ -0,0 +1,5 @@
+import { handlers } from '@owlmeans/server-api';
+import { makeAuthModel } from '../model.js';
+const api = handlers();
+export const authenticationInit = (protocol) => api.body(protocol, async (body, context) => await makeAuthModel(context).init(body));
+//# sourceMappingURL=init.js.map

package/build/manager/actions/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/manager/actions/init.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAG3C,MAAM,GAAG,GAAG,QAAQ,EAAyB,CAAA;AAE7C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,QAA2E,EAAE,EAAE,CAChH,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAC3C,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACxC,CAAA"}

package/build/manager/actions/rely.d.ts

@@ -0,0 +1,8 @@
+import type { AuthToken } from '@owlmeans/auth';
+import type { EntrypointProtocol } from '@owlmeans/entrypoint';
+export declare const rely: (protocol: EntrypointProtocol<{
+    query: Partial<AuthToken>;
+}, undefined>) => import("@owlmeans/server-entrypoint").BoundEntrypointHandler<EntrypointProtocol<{
+    query: Partial<AuthToken>;
+}, undefined>>;
+//# sourceMappingURL=rely.d.ts.map

package/build/manager/actions/rely.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rely.d.ts","sourceRoot":"","sources":["../../../src/manager/actions/rely.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAK9D,eAAO,MAAM,IAAI,aAAc,kBAAkB,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;CAAE,EAAE,SAAS,CAAC;WAAhC,OAAO,CAAC,SAAS,CAAC;cAK5E,CAAA"}

package/build/manager/actions/rely.js

@@ -0,0 +1,7 @@
+import { makeAuthModel } from '../model.js';
+import { connection } from '@owlmeans/server-socket';
+export const rely = (protocol) => connection(protocol, 
+// @TODO Request will contain information is there requrest 
+// privileged or not (privileged request implies auth provider)
+async (conn, context, request) => await makeAuthModel(context).rely(conn, request.auth));
+//# sourceMappingURL=rely.js.map

package/build/manager/actions/rely.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rely.js","sourceRoot":"","sources":["../../../src/manager/actions/rely.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAEpD,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,QAAsE,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ;AACjH,4DAA4D;AAC5D,+DAA+D;AAC/D,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAC/B,MAAM,aAAa,CAAC,OAAgC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CACjF,CAAA"}

package/build/manager/consts.local.d.ts

@@ -0,0 +1,2 @@
+export declare const DEFAULT_SUPERVISORS: string[];
+//# sourceMappingURL=consts.local.d.ts.map

package/build/manager/consts.local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.local.d.ts","sourceRoot":"","sources":["../../src/manager/consts.local.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,UAA0B,CAAA"}

package/build/manager/consts.local.js

@@ -0,0 +1,2 @@
+export const DEFAULT_SUPERVISORS = ['master', 'superuser'];
+//# sourceMappingURL=consts.local.js.map

package/build/manager/consts.local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.local.js","sourceRoot":"","sources":["../../src/manager/consts.local.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA"}

package/build/manager/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/manager/context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AASvD,eAAO,MAAM,WAAW,GAAI,CAAC,SAAS,SAAS,EAAE,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,YAAW,OAAe,KAAG,CAsB9G,CAAA"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/manager/context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AASvD,eAAO,MAAM,WAAW,GAAI,CAAC,SAAS,SAAS,EAAE,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,cAAa,OAAO,KAAW,CAoB9G,CAAA"}

package/build/manager/context.js

@@ -20,7 +20,6 @@ export const makeContext = (cfg, customize = false) => {
     if (!customize && !context.hasResource(AUTH_CACHE)) {
         appendStaticResource(context, AUTH_CACHE);
     }
-    context.makeContext = (cfg => makeContext(cfg, customize));
     return context;
 };
 //# sourceMappingURL=context.js.map

package/build/manager/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/manager/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAEhE,MAAM,CAAC,MAAM,WAAW,GAAG,CAA+C,GAAM,EAAE,YAAqB,KAAK,EAAK,EAAE;IACjH,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAM,CAAA;IAE3C,eAAe,CAAO,OAAO,CAAC,CAAA;IAC9B,eAAe,CAAO,OAAO,CAAC,CAAA;IAC9B,mBAAmB,CAAO,OAAO,CAAC,CAAA;IAElC,OAAO,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC,CAAA;IAEpD,4CAA4C;IAC5C,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAA;IAC1D,CAAC;IAED,oBAAoB,CAAO,OAAO,CAAC,CAAA;IACnC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,oBAAoB,CAAO,OAAO,EAAE,UAAU,CAAC,CAAA;IACjD,CAAC;IAED,OAAO,CAAC,WAAW,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAA+B,CAAA;IAExF,OAAO,OAAY,CAAA;AACrB,CAAC,CAAA"}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/manager/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAEhE,MAAM,CAAC,MAAM,WAAW,GAAG,CAA+C,GAAM,EAAE,SAAS,GAAY,KAAK,EAAK,EAAE;IACjH,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAM,CAAA;IAE3C,eAAe,CAAO,OAAO,CAAC,CAAA;IAC9B,eAAe,CAAO,OAAO,CAAC,CAAA;IAC9B,mBAAmB,CAAO,OAAO,CAAC,CAAA;IAElC,OAAO,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC,CAAA;IAEpD,4CAA4C;IAC5C,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAA;IAC1D,CAAC;IAED,oBAAoB,CAAO,OAAO,CAAC,CAAA;IACnC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,oBAAoB,CAAO,OAAO,EAAE,UAAU,CAAC,CAAA;IACjD,CAAC;IAED,OAAO,OAAY,CAAA;AACrB,CAAC,CAAA"}

package/build/manager/entrypoints.d.ts

@@ -0,0 +1,9 @@
+/** Server entrypoints for the full authentication manager. */
+export declare const entrypoints: (import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<import("@owlmeans/entrypoint").OpenRequest, import("@owlmeans/entrypoint").OpenValue>> | import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
+    body: import("@owlmeans/auth").AllowanceRequest;
+}, import("@owlmeans/auth").AllowanceResponse>> | import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
+    body: import("@owlmeans/auth").AuthCredentials;
+}, import("@owlmeans/auth").AuthToken>> | import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
+    query: Partial<import("@owlmeans/auth").AuthToken>;
+}, undefined>>)[];
+//# sourceMappingURL=entrypoints.d.ts.map

package/build/manager/entrypoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../../src/manager/entrypoints.ts"],"names":[],"mappings":"AASA,8DAA8D;AAC9D,eAAO,MAAM,WAAW;;;;;;iBAMvB,CAAA"}

package/build/manager/entrypoints.js

@@ -0,0 +1,16 @@
+import { authProtocols } from '@owlmeans/auth-common';
+import { entrypoints as apiConfigBindings } from '@owlmeans/api-config-server';
+import { bind } from '@owlmeans/server-entrypoint';
+import { decorateEntrypoint } from '@owlmeans/entrypoint';
+import * as actions from './actions/index.js';
+import { DEFAULT_RELY } from './consts.js';
+const relyProtocol = decorateEntrypoint(authProtocols.rely, { guards: DEFAULT_RELY });
+/** Server entrypoints for the full authentication manager. */
+export const entrypoints = [
+    bind(authProtocols.authen, undefined, { intermediate: true }),
+    bind(authProtocols.init, actions.authenticationInit(authProtocols.init)),
+    bind(authProtocols.authenticate, actions.authenticate(authProtocols.authenticate)),
+    bind(relyProtocol, actions.rely(relyProtocol)),
+    ...apiConfigBindings,
+];
+//# sourceMappingURL=entrypoints.js.map

package/build/manager/entrypoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entrypoints.js","sourceRoot":"","sources":["../../src/manager/entrypoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,KAAK,OAAO,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,MAAM,YAAY,GAAG,kBAAkB,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAA;AAErF,8DAA8D;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC7D,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,kBAAkB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACxE,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IAClF,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9C,GAAG,iBAAiB;CACrB,CAAA"}

package/build/manager/exports.d.ts

@@ -4,8 +4,7 @@ export { addWebService } from '@owlmeans/client-config';
 export { service, TRUSTED } from '@owlmeans/config';
 export { AppType, assertContext } from '@owlmeans/context';
 export { klusterize } from '@owlmeans/kluster';
-export { elevate } from '@owlmeans/server-entrypoint';
-export { elevate as celevate, stab } from '@owlmeans/client-entrypoint';
+export { stab } from '@owlmeans/client-entrypoint';
 export type { RefedEntrypointHandler } from '@owlmeans/server-entrypoint';
 export { handleIntermediate, handleBody, handleRequest, handleParams } from '@owlmeans/server-api';
 export type { AbstractRequest, AbstractResponse } from '@owlmeans/entrypoint';

package/build/manager/exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../../src/manager/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AACvE,YAAY,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAClG,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAEzC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA"}
+{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../../src/manager/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAClD,YAAY,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAClG,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAEzC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA"}

package/build/manager/exports.js

@@ -3,8 +3,7 @@ export { addWebService } from '@owlmeans/client-config';
 export { service, TRUSTED } from '@owlmeans/config';
 export { AppType, assertContext } from '@owlmeans/context';
 export { klusterize } from '@owlmeans/kluster';
-export { elevate } from '@owlmeans/server-entrypoint';
-export { elevate as celevate, stab } from '@owlmeans/client-entrypoint';
+export { stab } from '@owlmeans/client-entrypoint';
 export { handleIntermediate, handleBody, handleRequest, handleParams } from '@owlmeans/server-api';
 export { backend } from '@owlmeans/route';
 export { AUTHEN, AUTHEN_AUTHEN, AUTHEN_INIT } from '@owlmeans/auth';

package/build/manager/exports.js.map

@@ -1 +1 @@
-{"version":3,"file":"exports.js","sourceRoot":"","sources":["../../src/manager/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAEvE,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAElG,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAEzC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA"}
+{"version":3,"file":"exports.js","sourceRoot":"","sources":["../../src/manager/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAElD,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAElG,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAEzC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA"}

package/build/manager/index.d.ts

@@ -1,5 +1,5 @@
 export type * from './types.js';
-export * from './modules.js';
+export * from './entrypoints.js';
 export * from './exports.js';
 export * from './context.js';
 export * from './main.js';

package/build/manager/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/manager/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAE/B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/manager/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAE/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA"}

package/build/manager/index.js

@@ -1,4 +1,4 @@
-export * from './modules.js';
+export * from './entrypoints.js';
 export * from './exports.js';
 export * from './context.js';
 export * from './main.js';

package/build/manager/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/manager/index.ts"],"names":[],"mappings":"AAEA,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/manager/index.ts"],"names":[],"mappings":"AAEA,cAAc,kBAAkB,CAAA;AAChC,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA"}

package/build/manager/main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/manager/main.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAEvD,eAAO,MAAM,IAAI,GAAU,CAAC,SAAS,SAAS,EAAE,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,kBAI9E,CAAA"}
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/manager/main.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAEvD,eAAO,MAAM,IAAI,GAAU,CAAC,SAAS,SAAS,EAAE,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,kBAI9E,CAAA"}

package/build/manager/main.js

@@ -1,6 +1,6 @@
-import { modules } from './modules.js';
+import { entrypoints } from './entrypoints.js';
 export const main = async (ctx) => {
-    ctx.registerEntrypoints(modules);
+    ctx.registerEntrypoints(entrypoints);
     await ctx.configure().init();
     await ctx.getApiServer().listen();
 };

package/build/manager/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/manager/main.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAGtC,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,EAAgD,GAAM,EAAE,EAAE;IACjF,GAAG,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAChC,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,CAAA;IAC5B,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,CAAA;AACnC,CAAC,CAAA"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/manager/main.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAG9C,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,EAAgD,GAAM,EAAE,EAAE;IACjF,GAAG,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAA;IACpC,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,CAAA;IAC5B,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,CAAA;AACnC,CAAC,CAAA"}

package/build/manager/model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/manager/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAgBlE,eAAO,MAAM,aAAa,GAAI,SAAS,UAAU,CAAC,SAAS,CAAC,KAAG,SA4E9D,CAAA"}
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/manager/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAwBlE,eAAO,MAAM,aAAa,YAAa,UAAU,CAAC,SAAS,CAAC,KAAG,SA6G9D,CAAA"}