@owlmeans/server-auth 0.1.18-rc.8 → 0.1.18

package/build/manager/supervisor.d.ts

@@ -1,53 +1,12 @@
-import type { AuthPayload } from '@owlmeans/auth';
-import type { AppConfig, AppContext } from './types.js';
-/**
- * What a `SupervisorUserResolver` returns: the identity the supervisor-minted
- * token will represent. Only `userId` is required - the rest default sensibly.
- */
-export interface SupervisorUserResolution extends Partial<Pick<AuthPayload, 'profileId' | 'entityId' | 'role' | 'scopes'>> {
-    userId: string;
-}
-/**
- * Find-or-create the target identity for a supervisor login. `register` reflects
- * `allowRegistration`; when false the resolver should only look existing users up.
- * Wire this to the project's identity store (e.g. `@owlmeans/server-auth-identity`).
- */
-export interface SupervisorUserResolver {
-    <C extends AppConfig, T extends AppContext<C>>(userId: string, context: T, opts: {
-        register: boolean;
-    }): Promise<SupervisorUserResolution>;
-}
-/** Resolved options handed to the plugin factory. */
-export interface SupervisorPluginOptions {
-    supervisors: string[];
-    allowRegistration: boolean;
-    resolveUser?: SupervisorUserResolver;
-}
-export interface SupervisorAuthOptions {
-    /** Trusted-record aliases authorized to act as supervisor. Default: master + superuser. */
-    supervisors?: string[];
-    /** Find-or-create the target user by id/email. Default: trust the id as-is. */
-    resolveUser?: SupervisorUserResolver;
-    /** Allow minting a token for an unknown user (registration). Default: true. */
-    allowRegistration?: boolean;
-    /** Force enable/disable. Default: development only (cfg.debug.all || cfg.debug.supervisor). */
-    enabled?: boolean;
-    /**
-     * Also accept internal owlmeans `Ed25519BasicToken`s even when another guard
-     * (e.g. OIDC) is the primary guard on protected modules. Default: true.
-     */
-    acceptInternalTokens?: boolean;
-    /** The internal-token guard to add as a coguard. Default: DEFAULT_GUARD ('auth'). */
-    guard?: string;
-}
+import type { AppConfig, AppContext, SupervisorAuthOptions } from './types.js';
 /**
  * Ensure the internal `Ed25519BasicToken` guard is accepted as a coguard on every
- * already-guarded backend module, so internal owlmeans tokens keep working even
+ * already-guarded backend entrypoint, so internal owlmeans tokens keep working even
  * when another guard (e.g. OIDC) is the primary guard. The primary guard stays
  * first; the internal guard is appended as a fallback (its `match` only fires for
  * an `Ed25519BasicToken` authorization header).
  */
-export declare const setupInternalTokenCoguard: (modules: Array<{
+export declare const setupInternalTokenCoguard: (entrypoints: Array<{
     guards?: string[];
 }>, guard?: string) => void;
 /**
@@ -56,7 +15,7 @@ export declare const setupInternalTokenCoguard: (modules: Array<{
  *
  * It registers the supervisor auth plugin (verifies a front-end signature against
  * the allowlisted trusted keys, then resolves/registers the target user) and -
- * unless disabled - makes protected modules also accept internal owlmeans tokens
+ * unless disabled - makes protected entrypoints also accept internal owlmeans tokens
  * (requirement: understand internal tokens even when OIDC is the primary guard).
  */
 export declare const appendSupervisorAuth: <C extends AppConfig, T extends AppContext<C>>(context: T, opts?: SupervisorAuthOptions) => T;

package/build/manager/supervisor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../../src/manager/supervisor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAEjD,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAIvD;;;GAGG;AACH,MAAM,WAAW,wBAAyB,SAAQ,OAAO,CAAC,IAAI,CAAC,WAAW,EACxE,WAAW,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC,CAAC;IAC9C,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,CAAC,CAAC,SAAS,SAAS,EAAE,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAC3C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,GACtD,OAAO,CAAC,wBAAwB,CAAC,CAAA;CACrC;AAED,qDAAqD;AACrD,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,iBAAiB,EAAE,OAAO,CAAA;IAC1B,WAAW,CAAC,EAAE,sBAAsB,CAAA;CACrC;AAED,MAAM,WAAW,qBAAqB;IACpC,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,sBAAsB,CAAA;IACpC,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,+FAA+F;IAC/F,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,qFAAqF;IACrF,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAOD;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,GACpC,SAAS,KAAK,CAAC;IAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,EAAE,QAAO,MAAsB,KACnE,IAMF,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,GAAI,CAAC,SAAS,SAAS,EAAE,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAC/E,SAAS,CAAC,EAAE,OAAO,qBAAqB,KACvC,CAyBF,CAAA"}
+{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../../src/manager/supervisor.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,qBAAqB,EAA2B,MAAM,YAAY,CAAA;AASvG;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,gBACvB,KAAK,CAAC;IAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,UAAS,MAAM,KACvD,IAMF,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,GAAI,CAAC,SAAS,SAAS,EAAE,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,WACtE,CAAC,SAAS,qBAAqB,KACvC,CAyBF,CAAA"}

package/build/manager/supervisor.js

@@ -2,17 +2,17 @@ import { AuthenticationType } from '@owlmeans/auth';
 import { DEFAULT_GUARD } from '@owlmeans/auth-common';
 import { registerPlugin } from './plugins/index.js';
 import { makeSupervisorPlugin } from './plugins/supervisor.js';
-const DEFAULT_SUPERVISORS = ['master', 'superuser'];
+import { DEFAULT_SUPERVISORS } from './consts.local.js';
 const isDevelopment = (context) => context.cfg.debug?.all === true || context.cfg.debug?.supervisor === true;
 /**
  * Ensure the internal `Ed25519BasicToken` guard is accepted as a coguard on every
- * already-guarded backend module, so internal owlmeans tokens keep working even
+ * already-guarded backend entrypoint, so internal owlmeans tokens keep working even
  * when another guard (e.g. OIDC) is the primary guard. The primary guard stays
  * first; the internal guard is appended as a fallback (its `match` only fires for
  * an `Ed25519BasicToken` authorization header).
  */
-export const setupInternalTokenCoguard = (modules, guard = DEFAULT_GUARD) => {
-    modules.forEach(module => {
+export const setupInternalTokenCoguard = (entrypoints, guard = DEFAULT_GUARD) => {
+    entrypoints.forEach(module => {
         if (module.guards != null && module.guards.length > 0 && !module.guards.includes(guard)) {
             module.guards.push(guard);
         }
@@ -24,7 +24,7 @@ export const setupInternalTokenCoguard = (modules, guard = DEFAULT_GUARD) => {
  *
  * It registers the supervisor auth plugin (verifies a front-end signature against
  * the allowlisted trusted keys, then resolves/registers the target user) and -
- * unless disabled - makes protected modules also accept internal owlmeans tokens
+ * unless disabled - makes protected entrypoints also accept internal owlmeans tokens
  * (requirement: understand internal tokens even when OIDC is the primary guard).
  */
 export const appendSupervisorAuth = (context, opts) => {

package/build/manager/supervisor.js.map

@@ -1 +1 @@
-{"version":3,"file":"supervisor.js","sourceRoot":"","sources":["../../src/manager/supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAErD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AA+C9D,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;AAEnD,MAAM,aAAa,GAAG,CAAC,OAAqE,EAAW,EAAE,CACvG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;AAE3E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,OAAqC,EAAE,QAAgB,aAAa,EAC9D,EAAE;IACR,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QACvB,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3B,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,OAAU,EAAE,IAA4B,EACrC,EAAE;IACL,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAA;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,MAAM,QAAQ,GAA4B;QACxC,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,mBAAmB;QACrD,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,IAAI,IAAI;QAClD,WAAW,EAAE,IAAI,EAAE,WAAW;KAC/B,CAAA;IAED,cAAc,CACZ,kBAAkB,CAAC,UAAU,EAC7B,CAAC,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,GAAuC,EAAE,QAAQ,CAAC,CAAyC,CACzH,CAAA;IAED,IAAI,IAAI,EAAE,oBAAoB,KAAK,KAAK,EAAE,CAAC;QACzC,yBAAyB,CACvB,OAAO,CAAC,WAAW,EAA6C,EAChE,IAAI,EAAE,KAAK,IAAI,aAAa,CAC7B,CAAA;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}
+{"version":3,"file":"supervisor.js","sourceRoot":"","sources":["../../src/manager/supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAGrD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAEvD,MAAM,aAAa,GAAG,CAAC,OAAqE,EAAW,EAAE,CACvG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;AAE3E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,WAAyC,EAAE,KAAK,GAAW,aAAa,EAClE,EAAE;IACR,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QAC3B,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3B,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,OAAU,EAAE,IAA4B,EACrC,EAAE;IACL,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAA;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,MAAM,QAAQ,GAA4B;QACxC,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,mBAAmB;QACrD,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,IAAI,IAAI;QAClD,WAAW,EAAE,IAAI,EAAE,WAAW;KAC/B,CAAA;IAED,cAAc,CACZ,kBAAkB,CAAC,UAAU,EAC7B,CAAC,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,GAAuC,EAAE,QAAQ,CAAC,CAAsB,CACtG,CAAA;IAED,IAAI,IAAI,EAAE,oBAAoB,KAAK,KAAK,EAAE,CAAC;QACzC,yBAAyB,CACvB,OAAO,CAAC,WAAW,EAA6C,EAChE,IAAI,EAAE,KAAK,IAAI,aAAa,CAC7B,CAAA;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}

package/build/manager/types.d.ts

@@ -1,4 +1,4 @@
-import type { AllowanceRequest, AllowanceResponse, Auth, AuthCredentials, AuthToken, RelyToken } from '@owlmeans/auth';
+import type { AllowanceRequest, AllowanceResponse, Auth, AuthCredentials, AuthToken, RelyToken, AuthPayload } from '@owlmeans/auth';
 import type { KlusterConfig } from '@owlmeans/kluster';
 import type { GuardService } from '@owlmeans/entrypoint';
 import type { ApiServerAppend } from '@owlmeans/server-api';
@@ -30,4 +30,44 @@ export interface RelyCarrier {
     source: RelyToken;
     rely: RelyToken;
 }
+/**
+ * What a `SupervisorUserResolver` returns: the identity the supervisor-minted
+ * token will represent. Only `userId` is required - the rest default sensibly.
+ */
+export interface SupervisorUserResolution extends Partial<Pick<AuthPayload, 'profileId' | 'entitySlug' | 'role' | 'scopes'>> {
+    userId: string;
+}
+/**
+ * Find-or-create the target identity for a supervisor login. `register` reflects
+ * `allowRegistration`; when false the resolver should only look existing users up.
+ * Wire this to the project's identity store (e.g. `@owlmeans/server-auth-identity`).
+ */
+export interface SupervisorUserResolver {
+    <C extends AppConfig, T extends AppContext<C>>(userId: string, context: T, opts: {
+        register: boolean;
+    }): Promise<SupervisorUserResolution>;
+}
+/** Resolved options handed to the plugin factory. */
+export interface SupervisorPluginOptions {
+    supervisors: string[];
+    allowRegistration: boolean;
+    resolveUser?: SupervisorUserResolver;
+}
+export interface SupervisorAuthOptions {
+    /** Trusted-record aliases authorized to act as supervisor. Default: master + superuser. */
+    supervisors?: string[];
+    /** Find-or-create the target user by id/email. Default: trust the id as-is. */
+    resolveUser?: SupervisorUserResolver;
+    /** Allow minting a token for an unknown user (registration). Default: true. */
+    allowRegistration?: boolean;
+    /** Force enable/disable. Default: development only (cfg.debug.all || cfg.debug.supervisor). */
+    enabled?: boolean;
+    /**
+     * Also accept internal owlmeans `Ed25519BasicToken`s even when another guard
+     * (e.g. OIDC) is the primary guard on protected entrypoints. Default: true.
+     */
+    acceptInternalTokens?: boolean;
+    /** The internal-token guard to add as a coguard. Default: DEFAULT_GUARD ('auth'). */
+    guard?: string;
+}
 //# sourceMappingURL=types.d.ts.map

package/build/manager/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/manager/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AACtH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAErE,MAAM,WAAW,SAAU,SAAQ,YAAY,EAAE,aAAa;IAC5D,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;CACvC;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAE/D,YAAY,EAAE,CAAC,UAAU,EAAE,eAAe,KAAK,OAAO,CAAC,SAAS,CAAC,CAAA;IAEjE,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,IAAI,GAAG,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAChE;AAED,MAAM,WAAW,UAAU,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,CAAE,SAAQ,aAAa,CAAC,CAAC,CAAC,EACjF,eAAe,EACf,oBAAoB;CAAI;AAE5B,MAAM,WAAW,WAAY,SAAQ,YAAY;CAChD;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,WAAW,CAAC,EAAE,UAAU,CAAA;IACxB,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACtE;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,SAAS,CAAC;IAClB,IAAI,EAAE,SAAS,CAAA;CAChB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/manager/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACnI,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAErE,MAAM,WAAW,SAAU,SAAQ,YAAY,EAAE,aAAa;IAC5D,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;CACvC;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAE/D,YAAY,EAAE,CAAC,UAAU,EAAE,eAAe,KAAK,OAAO,CAAC,SAAS,CAAC,CAAA;IAEjE,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,IAAI,GAAG,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAChE;AAED,MAAM,WAAW,UAAU,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,CAAE,SAAQ,aAAa,CAAC,CAAC,CAAC,EACjF,eAAe,EACf,oBAAoB;CAAI;AAE5B,MAAM,WAAW,WAAY,SAAQ,YAAY;CAChD;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,WAAW,CAAC,EAAE,UAAU,CAAA;IACxB,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACtE;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,SAAS,CAAC;IAClB,IAAI,EAAE,SAAS,CAAA;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAyB,SAAQ,OAAO,CAAC,IAAI,CAAC,WAAW,EACxE,WAAW,GAAG,YAAY,GAAG,MAAM,GAAG,QAAQ,CAAC,CAAC;IAChD,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,CAAC,CAAC,SAAS,SAAS,EAAE,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAC3C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,GACtD,OAAO,CAAC,wBAAwB,CAAC,CAAA;CACrC;AAED,qDAAqD;AACrD,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,iBAAiB,EAAE,OAAO,CAAA;IAC1B,WAAW,CAAC,EAAE,sBAAsB,CAAA;CACrC;AAED,MAAM,WAAW,qBAAqB;IACpC,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,sBAAsB,CAAA;IACpC,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,+FAA+F;IAC/F,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,qFAAqF;IACrF,KAAK,CAAC,EAAE,MAAM,CAAA;CACf"}

package/build/manager/types.local.d.ts

@@ -0,0 +1,4 @@
+import type { ServerConfig, ServerContext } from '@owlmeans/server-context';
+export type Config = ServerConfig;
+export type Context = ServerContext<Config>;
+//# sourceMappingURL=types.local.d.ts.map

package/build/manager/types.local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.local.d.ts","sourceRoot":"","sources":["../../src/manager/types.local.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAE3E,MAAM,MAAM,MAAM,GAAG,YAAY,CAAA;AAEjC,MAAM,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA"}

package/build/manager/types.local.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.local.js.map

package/build/manager/types.local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.local.js","sourceRoot":"","sources":["../../src/manager/types.local.ts"],"names":[],"mappings":""}

package/build/manager/utils/trusted.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trusted.d.ts","sourceRoot":"","sources":["../../../src/manager/utils/trusted.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,aAAa,CAAA;AAGxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAG1D,eAAO,MAAM,OAAO,GAAU,SAAS,UAAU,EAAE,WAAU,MAAqB,KAAG,OAAO,CAAC,CAAC,aAAa,EAAE,YAAY,CAAC,CAQzH,CAAA"}
+{"version":3,"file":"trusted.d.ts","sourceRoot":"","sources":["../../../src/manager/utils/trusted.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,aAAa,CAAA;AAGxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAG1D,eAAO,MAAM,OAAO,YAAmB,UAAU,aAAY,MAAM,KAAkB,OAAO,CAAC,CAAC,aAAa,EAAE,YAAY,CAAC,CAQzH,CAAA"}

package/build/manager/utils/trusted.js.map

@@ -1 +1 @@
-{"version":3,"file":"trusted.js","sourceRoot":"","sources":["../../../src/manager/utils/trusted.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAA;AAEnD,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,EAAE,OAAmB,EAAE,WAAmB,YAAY,EAA0C,EAAE;IAC5H,MAAM,OAAO,GAAG,MAAM,KAAK,CAAwB,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IAE9E,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,WAAW,CAAC,gEAAgE,QAAQ,EAAE,CAAC,CAAA;IACnG,CAAC;IAED,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;AACpC,CAAC,CAAA"}
+{"version":3,"file":"trusted.js","sourceRoot":"","sources":["../../../src/manager/utils/trusted.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAA;AAEnD,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,EAAE,OAAmB,EAAE,QAAQ,GAAW,YAAY,EAA0C,EAAE;IAC5H,MAAM,OAAO,GAAG,MAAM,KAAK,CAAwB,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IAE9E,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,WAAW,CAAC,gEAAgE,QAAQ,EAAE,CAAC,CAAA;IACnG,CAAC;IAED,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;AACpC,CAAC,CAAA"}

package/build/model/rely/consumer.d.ts

@@ -1,3 +1,5 @@
+import type { RelyToken } from '@owlmeans/auth';
+import type { EnvelopeModel } from '@owlmeans/basic-envelope';
 import type { RelyOptions } from './types.js';
-export declare const makeConsumerRely: (opts?: RelyOptions) => import("@owlmeans/basic-envelope").EnvelopeModel<import("@owlmeans/auth").RelyToken>;
+export declare const makeConsumerRely: (opts?: RelyOptions) => EnvelopeModel<RelyToken>;
 //# sourceMappingURL=consumer.d.ts.map

package/build/model/rely/consumer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"consumer.d.ts","sourceRoot":"","sources":["../../../src/model/rely/consumer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,eAAO,MAAM,gBAAgB,GAAI,OAAO,WAAW,yFAOlD,CAAA"}
+{"version":3,"file":"consumer.d.ts","sourceRoot":"","sources":["../../../src/model/rely/consumer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,eAAO,MAAM,gBAAgB,UAAW,WAAW,KAAG,aAAa,CAAC,SAAS,CAO5E,CAAA"}

package/build/model/rely/consumer.js.map

@@ -1 +1 @@
-{"version":3,"file":"consumer.js","sourceRoot":"","sources":["../../../src/model/rely/consumer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAGzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAkB,EAAE,EAAE;IACrD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAA;IAC3B,OAAO,GAAG,CAAC,GAAG,CAAA;IACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAEf,OAAO,KAAK,CAAA;AACd,CAAC,CAAA"}
+{"version":3,"file":"consumer.js","sourceRoot":"","sources":["../../../src/model/rely/consumer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAKzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAkB,EAA4B,EAAE;IAC/E,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAA;IAC3B,OAAO,GAAG,CAAC,GAAG,CAAA;IACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAEf,OAAO,KAAK,CAAA;AACd,CAAC,CAAA"}

package/build/model/rely/peer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"peer.d.ts","sourceRoot":"","sources":["../../../src/model/rely/peer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAI7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAG7C,eAAO,MAAM,aAAa,GAAI,OAAO,WAAW,KAAG,aAAa,CAAC,SAAS,CAyBzE,CAAA"}
+{"version":3,"file":"peer.d.ts","sourceRoot":"","sources":["../../../src/model/rely/peer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAI7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAW7C,eAAO,MAAM,aAAa,UAAW,WAAW,KAAG,aAAa,CAAC,SAAS,CAyBzE,CAAA"}

package/build/model/rely/peer.js

@@ -3,6 +3,13 @@ import { makeEnvelopeModel } from '@owlmeans/basic-envelope';
 import { createRandomPrefix, createIdOfLength, IdStyle } from '@owlmeans/basic-ids';
 import { base58 } from '@scure/base';
 import { RELY_CALL_TIMEOUT } from '@owlmeans/auth-common';
+const toNumber = (bytes) => {
+    let pinInt = 0n;
+    for (let i = bytes.length - 1; i >= 0; i--) {
+        pinInt = (pinInt << 8n) | BigInt(bytes[i]);
+    }
+    return pinInt.toString();
+};
 export const makeRelyModel = (opts) => {
     const envelope = makeEnvelopeModel(RELY_3RD);
     const pinLength = opts?.pinLength ?? 6;
@@ -26,11 +33,4 @@ export const makeRelyModel = (opts) => {
     }, opts?.liveTime ?? RELY_CALL_TIMEOUT * 1000);
     return envelope;
 };
-const toNumber = (bytes) => {
-    let pinInt = 0n;
-    for (let i = bytes.length - 1; i >= 0; i--) {
-        pinInt = (pinInt << 8n) | BigInt(bytes[i]);
-    }
-    return pinInt.toString();
-};
 //# sourceMappingURL=peer.js.map

package/build/model/rely/peer.js.map

@@ -1 +1 @@
-{"version":3,"file":"peer.js","sourceRoot":"","sources":["../../../src/model/rely/peer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AACnF,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAEzD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAkB,EAA4B,EAAE;IAC5E,MAAM,QAAQ,GAAG,iBAAiB,CAAY,QAAQ,CAAC,CAAA;IAEvD,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,CAAC,CAAA;IACtC,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,CAAC,CAAA;IAC1C,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,EAAE,CAAA;IAC3C,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,EAAE,CAAA;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAA;IAC3C,MAAM,QAAQ,GAAG,WAAW,CAAA;IAC5B,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC,CAAA;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IACvC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAA;IACzD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAA;IAEjD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;IACtD,QAAQ,CAAC,IAAI,CAAC;QACZ,GAAG;QACH,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC;QACrD,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC;QAC1D,KAAK,EAAE,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC;KACrD,EAAE,IAAI,EAAE,QAAQ,IAAI,iBAAiB,GAAG,IAAI,CAAC,CAAA;IAE9C,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAC,KAAiB,EAAU,EAAE;IAC7C,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAA;AAC1B,CAAC,CAAA"}
+{"version":3,"file":"peer.js","sourceRoot":"","sources":["../../../src/model/rely/peer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AACnF,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAEzD,MAAM,QAAQ,GAAG,CAAC,KAAiB,EAAU,EAAE;IAC7C,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAA;AAC1B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAkB,EAA4B,EAAE;IAC5E,MAAM,QAAQ,GAAG,iBAAiB,CAAY,QAAQ,CAAC,CAAA;IAEvD,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,CAAC,CAAA;IACtC,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,CAAC,CAAA;IAC1C,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,EAAE,CAAA;IAC3C,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,EAAE,CAAA;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAA;IAC3C,MAAM,QAAQ,GAAG,WAAW,CAAA;IAC5B,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC,CAAA;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IACvC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAA;IACzD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAA;IAEjD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;IACtD,QAAQ,CAAC,IAAI,CAAC;QACZ,GAAG;QACH,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC;QACrD,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC;QAC1D,KAAK,EAAE,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC;KACrD,EAAE,IAAI,EAAE,QAAQ,IAAI,iBAAiB,GAAG,IAAI,CAAC,CAAA;IAE9C,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAA"}

package/build/model/rely/provider.d.ts

@@ -1,3 +1,5 @@
+import type { RelyToken } from '@owlmeans/auth';
+import type { EnvelopeModel } from '@owlmeans/basic-envelope';
 import type { RelyOptions } from './types.js';
-export declare const makeProviderRely: (opts?: RelyOptions) => import("@owlmeans/basic-envelope").EnvelopeModel<import("@owlmeans/auth").RelyToken>;
+export declare const makeProviderRely: (opts?: RelyOptions) => EnvelopeModel<RelyToken>;
 //# sourceMappingURL=provider.d.ts.map

package/build/model/rely/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../../src/model/rely/provider.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,eAAO,MAAM,gBAAgB,GAAI,OAAO,WAAW,yFAIlD,CAAA"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../../src/model/rely/provider.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,eAAO,MAAM,gBAAgB,UAAW,WAAW,KAAG,aAAa,CAAC,SAAS,CAI5E,CAAA"}

package/build/model/rely/provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../src/model/rely/provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAGzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAkB,EAAE,EAAE;IACrD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IAEjC,OAAO,KAAK,CAAA;AACd,CAAC,CAAA"}
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../src/model/rely/provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAKzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAkB,EAA4B,EAAE;IAC/E,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IAEjC,OAAO,KAAK,CAAA;AACd,CAAC,CAAA"}

package/build/re-captcha/guard.d.ts

@@ -0,0 +1,12 @@
+import type { GuardService } from '@owlmeans/entrypoint';
+/**
+ * The guard of a route a reCAPTCHA-proven guest may call once (`RECAPTCHA_GUARD`):
+ * `Authorization: RE-CAPTCHA <token>`, the token the auth manager's reCAPTCHA plugin issued.
+ *
+ * Every check of `ReCaptchaTokenHelper.inspect`, then the spend — a token admits one request. The
+ * request's `auth` is a guest (`GUEST_ID`, role Guest, `[AUTH_SCOPE]`, type ReCaptcha) with an empty
+ * `token`: whatever reads an authorization downstream may log it. A refused token is no credential at
+ * all, so the request is unauthenticated (401).
+ */
+export declare const makeReCaptchaGuard: (alias?: string) => GuardService;
+//# sourceMappingURL=guard.d.ts.map

package/build/re-captcha/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/re-captcha/guard.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAqC,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAI3F;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,WAAW,MAAM,KAAqB,YAkCpE,CAAA"}

package/build/re-captcha/guard.js

@@ -0,0 +1,43 @@
+import { AUTH_SCOPE, AuthenticationType, AuthRole, GUEST_ID, RECAPTCHA_GUARD } from '@owlmeans/auth';
+import { extractAuthToken } from '@owlmeans/auth-common/utils';
+import { createService } from '@owlmeans/context';
+import { reCaptchaTokenOf } from './token.js';
+/**
+ * The guard of a route a reCAPTCHA-proven guest may call once (`RECAPTCHA_GUARD`):
+ * `Authorization: RE-CAPTCHA <token>`, the token the auth manager's reCAPTCHA plugin issued.
+ *
+ * Every check of `ReCaptchaTokenHelper.inspect`, then the spend — a token admits one request. The
+ * request's `auth` is a guest (`GUEST_ID`, role Guest, `[AUTH_SCOPE]`, type ReCaptcha) with an empty
+ * `token`: whatever reads an authorization downstream may log it. A refused token is no credential at
+ * all, so the request is unauthenticated (401).
+ */
+export const makeReCaptchaGuard = (alias = RECAPTCHA_GUARD) => {
+    const service = createService(alias, {
+        match: async (req) => req != null && extractAuthToken(req, AuthenticationType.ReCaptcha) != null,
+        handle: async (req, res) => {
+            const context = service.assertCtx();
+            const tokens = reCaptchaTokenOf(context);
+            const guest = await tokens.inspect(req);
+            if (guest == null || !await tokens.spend(guest)) {
+                return false;
+            }
+            const auth = {
+                token: '',
+                type: AuthenticationType.ReCaptcha,
+                role: AuthRole.Guest,
+                userId: GUEST_ID,
+                scopes: [AUTH_SCOPE],
+                isUser: false,
+                source: context.cfg.service,
+                createdAt: new Date(),
+                expiresAt: guest.expiresAt,
+            };
+            res.resolve(auth);
+            return true;
+        },
+        /** Server-side guard: it verifies what arrives, it never produces a credential. */
+        authenticated: async () => null,
+    });
+    return service;
+};
+//# sourceMappingURL=guard.js.map

package/build/re-captcha/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/re-captcha/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAEpG,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAGjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAE7C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAK,GAAW,eAAe,EAAgB,EAAE;IAClF,MAAM,OAAO,GAAiB,aAAa,CAAe,KAAK,EAAE;QAC/D,KAAK,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE,CAAC,GAAG,IAAI,IAAI,IAAI,gBAAgB,CAAC,GAAG,EAAE,kBAAkB,CAAC,SAAS,CAAC,IAAI,IAAI;QAE9F,MAAM,EAAE,KAAK,EAAK,GAAoB,EAAE,GAA2B,EAAE,EAAE;YACrE,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAmB,CAAA;YACpD,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;YAExC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YACvC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,OAAO,KAAU,CAAA;YACnB,CAAC;YAED,MAAM,IAAI,GAAS;gBACjB,KAAK,EAAE,EAAE;gBACT,IAAI,EAAE,kBAAkB,CAAC,SAAS;gBAClC,IAAI,EAAE,QAAQ,CAAC,KAAK;gBACpB,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,CAAC,UAAU,CAAC;gBACpB,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO;gBAC3B,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAA;YACD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAEjB,OAAO,IAAS,CAAA;QAClB,CAAC;QAED,mFAAmF;QACnF,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;KAChC,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}

package/build/re-captcha/index.d.ts

@@ -0,0 +1,4 @@
+export type * from './types.js';
+export * from './token.js';
+export * from './guard.js';
+//# sourceMappingURL=index.d.ts.map

package/build/re-captcha/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/re-captcha/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAC/B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA"}

package/build/re-captcha/index.js

@@ -0,0 +1,3 @@
+export * from './token.js';
+export * from './guard.js';
+//# sourceMappingURL=index.js.map

package/build/re-captcha/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/re-captcha/index.ts"],"names":[],"mappings":"AACA,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA"}

package/build/re-captcha/token.d.ts

@@ -0,0 +1,6 @@
+import type { Context } from '../types.local.js';
+import type { ReCaptchaTokenHelper } from './types.js';
+export declare const makeReCaptchaTokenHelper: (context: Context) => ReCaptchaTokenHelper;
+/** The reCAPTCHA token checks of a context — built once per context. */
+export declare const reCaptchaTokenOf: (target: Context) => ReCaptchaTokenHelper;
+//# sourceMappingURL=token.d.ts.map

package/build/re-captcha/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../src/re-captcha/token.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAU,OAAO,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,KAAK,EAAoC,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAIxF,eAAO,MAAM,wBAAwB,YAAa,OAAO,KAAG,oBAoE3D,CAAA;AAED,wEAAwE;AACxE,eAAO,MAAM,gBAAgB,2CAA+C,CAAA"}

package/build/re-captcha/token.js

@@ -0,0 +1,74 @@
+import { AuthenticationType, AuthRole, AuthUnavailable, GUEST_ID } from '@owlmeans/auth';
+import { extractAuthToken, trust } from '@owlmeans/auth-common/utils';
+import { EnvelopeKind, makeEnvelopeModel } from '@owlmeans/basic-envelope';
+import { TRUSTED } from '@owlmeans/config';
+import { memoHelper } from '@owlmeans/context';
+import { logger } from '@owlmeans/log';
+import { RecordExists } from '@owlmeans/resource';
+import { AUTH_CACHE, AUTH_SRV_KEY, AUTHEN_TIMEFRAME } from '../consts.js';
+const log = logger('server-auth:re-captcha');
+export const makeReCaptchaTokenHelper = (context) => {
+    const refuse = (reason) => {
+        log.debug('reCAPTCHA token refused', { reason }, { event: 'auth.refused' });
+        return null;
+    };
+    const verify = async (token) => {
+        let envelope;
+        try {
+            envelope = makeEnvelopeModel(token, EnvelopeKind.Token);
+        }
+        catch {
+            return refuse('token');
+        }
+        if (envelope.type() !== AuthenticationType.ReCaptcha) {
+            return refuse('type');
+        }
+        // A guest token lives no longer than its spend record does, so it can never be spent twice.
+        const ttl = envelope.envelope.ttl;
+        if (ttl == null || ttl > AUTHEN_TIMEFRAME) {
+            return refuse('ttl');
+        }
+        const signer = await trust(context, TRUSTED, AUTH_SRV_KEY);
+        // Signature and expiry: an envelope past `dt + ttl` does not verify.
+        if (!await envelope.verify(signer.key)) {
+            return refuse('signature');
+        }
+        const credential = envelope.message();
+        if (credential == null || typeof credential !== 'object') {
+            return refuse('token');
+        }
+        if (credential.credential !== signer.user.id) {
+            return refuse('issuer');
+        }
+        if (credential.type !== AuthenticationType.ReCaptcha || credential.role !== AuthRole.Guest
+            || credential.userId !== GUEST_ID) {
+            return refuse('guest');
+        }
+        if (typeof credential.challenge !== 'string' || credential.challenge === '') {
+            return refuse('challenge');
+        }
+        return { credential, challenge: credential.challenge, expiresAt: new Date(envelope.envelope.dt + ttl) };
+    };
+    const inspect = async (req) => {
+        const token = extractAuthToken(req, AuthenticationType.ReCaptcha);
+        return token == null || token === '' ? null : await verify(token);
+    };
+    const spend = async (guest) => {
+        try {
+            await context.resource(AUTH_CACHE)
+                .create({ id: guest.challenge }, { ttl: AUTHEN_TIMEFRAME / 1000 });
+        }
+        catch (error) {
+            if (error instanceof RecordExists || error?.type === RecordExists.typeName) {
+                log.debug('reCAPTCHA token refused', { reason: 'spent' }, { event: 'auth.refused' });
+                return false;
+            }
+            throw new AuthUnavailable('auth-cache');
+        }
+        return true;
+    };
+    return { inspect, verify, spend };
+};
+/** The reCAPTCHA token checks of a context — built once per context. */
+export const reCaptchaTokenOf = memoHelper.oncePer(makeReCaptchaTokenHelper);
+//# sourceMappingURL=token.js.map

package/build/re-captcha/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/re-captcha/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAExF,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAA;AACrE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE1E,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEjD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAKzE,MAAM,GAAG,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAA;AAE5C,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,OAAgB,EAAwB,EAAE;IACjF,MAAM,MAAM,GAAG,CAAC,MAAc,EAAQ,EAAE;QACtC,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAC3E,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,KAAK,EAAE,KAAa,EAAkC,EAAE;QACrE,IAAI,QAAwC,CAAA;QAC5C,IAAI,CAAC;YACH,QAAQ,GAAG,iBAAiB,CAAkB,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAA;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;QACxB,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,kBAAkB,CAAC,SAAS,EAAE,CAAC;YACrD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAA;QACvB,CAAC;QACD,4FAA4F;QAC5F,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAA;QACjC,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,GAAG,gBAAgB,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;QACtB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAkB,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAA;QAC3E,qEAAqE;QACrE,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,OAAO,MAAM,CAAC,WAAW,CAAC,CAAA;QAC5B,CAAC;QAED,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,EAAmB,CAAA;QACtD,IAAI,UAAU,IAAI,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACzD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;QACxB,CAAC;QACD,IAAI,UAAU,CAAC,UAAU,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC7C,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAA;QACzB,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,KAAK,kBAAkB,CAAC,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK;eACrF,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;QACxB,CAAC;QACD,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,IAAI,UAAU,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;YAC5E,OAAO,MAAM,CAAC,WAAW,CAAC,CAAA;QAC5B,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,CAAA;IACzG,CAAC,CAAA;IAED,MAAM,OAAO,GAAG,KAAK,EAAE,GAAqB,EAAkC,EAAE;QAC9E,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAA;QAEjE,OAAO,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAA;IACnE,CAAC,CAAA;IAED,MAAM,KAAK,GAAG,KAAK,EAAE,KAAqB,EAAoB,EAAE;QAC9D,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,QAAQ,CAAsB,UAAU,CAAC;iBACpD,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,gBAAgB,GAAG,IAAI,EAAE,CAAC,CAAA;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,YAAY,IAAK,KAAkC,EAAE,IAAI,KAAK,YAAY,CAAC,QAAQ,EAAE,CAAC;gBACzG,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;gBACpF,OAAO,KAAK,CAAA;YACd,CAAC;YACD,MAAM,IAAI,eAAe,CAAC,YAAY,CAAC,CAAA;QACzC,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AACnC,CAAC,CAAA;AAED,wEAAwE;AACxE,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAA"}

package/build/re-captcha/types.d.ts

@@ -0,0 +1,44 @@
+import type { AuthCredentials } from '@owlmeans/auth';
+import type { AbstractRequest } from '@owlmeans/entrypoint';
+/** A reCAPTCHA guest token that passed every check but the spend. */
+export interface ReCaptchaGuest {
+    /**
+     * The credential the auth manager signed: `GUEST_ID`, role Guest, type ReCaptcha, stamped with
+     * the auth service record's id. It names nobody.
+     */
+    credential: AuthCredentials;
+    /** The server-issued challenge the token carries — the key it is spent under in `AUTH_CACHE`. */
+    challenge: string;
+    /** When the token stops being accepted. */
+    expiresAt: Date;
+}
+/** Anything that carries request headers: an entrypoint request, or a raw Fastify request. */
+export interface ReCaptchaCarrier extends Partial<Pick<AbstractRequest, 'headers'>> {
+}
+/**
+ * The checks of a reCAPTCHA guest token (`Authorization: RE-CAPTCHA <token>`), bound to the context
+ * whose `TRUSTED` record `AUTH_SRV_KEY` signed it and whose `AUTH_CACHE` spends it.
+ */
+export interface ReCaptchaTokenHelper {
+    /**
+     * The guest a request carries, checked WITHOUT spending: envelope type, signature by the auth
+     * service key, TTL (at most `AUTHEN_TIMEFRAME`), the auth record's stamp, type ReCaptcha, role
+     * Guest, `GUEST_ID`, a server-issued challenge. Made for a pre-parse check (before a body is read);
+     * the route itself still needs the guard, which spends.
+     *
+     * @returns `null` for a request without such a header or with a token that fails a check.
+     * @throws {SyntaxError} when the context has no `AUTH_SRV_KEY` trusted record (a configuration fault).
+     */
+    inspect: (req: ReCaptchaCarrier) => Promise<ReCaptchaGuest | null>;
+    /** {@link inspect} for a bare token (the value after `RE-CAPTCHA `). */
+    verify: (token: string) => Promise<ReCaptchaGuest | null>;
+    /**
+     * Spend the token: an atomic create-once of its challenge in `AUTH_CACHE` (Redis `SET NX` in a
+     * backend context), under the same key a bearer exchange and the IAM finalizer claim.
+     *
+     * @returns `false` when the token was spent before.
+     * @throws {AuthUnavailable} when the cache cannot answer.
+     */
+    spend: (guest: ReCaptchaGuest) => Promise<boolean>;
+}
+//# sourceMappingURL=types.d.ts.map

package/build/re-captcha/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/re-captcha/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAE3D,qEAAqE;AACrE,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,UAAU,EAAE,eAAe,CAAA;IAC3B,iGAAiG;IACjG,SAAS,EAAE,MAAM,CAAA;IACjB,2CAA2C;IAC3C,SAAS,EAAE,IAAI,CAAA;CAChB;AAED,8FAA8F;AAC9F,MAAM,WAAW,gBAAiB,SAAQ,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;CAAG;AAEtF;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;OAQG;IACH,OAAO,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;IAClE,wEAAwE;IACxE,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;IACzD;;;;;;OAMG;IACH,KAAK,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CACnD"}

package/build/re-captcha/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/re-captcha/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/re-captcha/types.ts"],"names":[],"mappings":""}

package/build/service.d.ts

@@ -1,7 +1,6 @@
-import type { ServerContext, ServerConfig } from '@owlmeans/server-context';
+import type { ServerContext } from '@owlmeans/server-context';
 import type { AuthServiceAppend, AuthService } from './types.js';
-type Config = ServerConfig;
+import type { Config } from './types.local.js';
 export declare const makeAuthService: (alias?: string) => AuthService;
 export declare const appendAuthService: <C extends Config, T extends ServerContext<C>>(ctx: T, alias?: string) => T & AuthServiceAppend;
-export {};
 //# sourceMappingURL=service.d.ts.map

package/build/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAG3E,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAa,MAAM,YAAY,CAAA;AAU3E,KAAK,MAAM,GAAG,YAAY,CAAA;AAG1B,eAAO,MAAM,eAAe,GAAI,QAAO,MAAsB,KAAG,WA4F/D,CAAA;AAED,eAAO,MAAM,iBAAiB,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,EAC5E,KAAK,CAAC,EAAE,QAAO,MAAsB,KACpC,CAAC,GAAG,iBAaN,CAAA"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAG7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAa,MAAM,YAAY,CAAA;AAa3E,OAAO,KAAK,EAAE,MAAM,EAAW,MAAM,kBAAkB,CAAA;AAKvD,eAAO,MAAM,eAAe,WAAW,MAAM,KAAmB,WAqM/D,CAAA;AAED,eAAO,MAAM,iBAAiB,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,OACvE,CAAC,UAAS,MAAM,KACpB,CAAC,GAAG,iBAiBN,CAAA"}