@owlmeans/server-oidc-rp 0.1.18-rc.52 → 0.1.18-rc.53

package/README.md

@@ -13,7 +13,7 @@ registrations with the IAM gate.
 ## Installation
 
 ```bash
-bun add @owlmeans/server-oidc-rp@^0.1.18-rc.52
+bun add @owlmeans/server-oidc-rp@^0.1.18-rc.53
 ```
 
 ## Concepts
@@ -225,7 +225,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.46
+npx @owlmeans/agent-skills@^0.1.18-rc.47
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/server-oidc-rp",
-  "version": "0.1.18-rc.52",
-  "generatedAt": "2026-10-03T11:19:50.788Z",
+  "version": "0.1.18-rc.53",
+  "generatedAt": "2026-10-03T20:05:07.598Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/server-oidc-rp/SKILL.md

@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/server-oidc-rp
 
 **Layer:** Server
-**Install:** `"@owlmeans/server-oidc-rp": "^0.1.18-rc.52"` in `dependencies`
+**Install:** `"@owlmeans/server-oidc-rp": "^0.1.18-rc.53"` in `dependencies`
 
 ## Key Exports
 

package/build/gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAMvD,eAAO,MAAM,YAAY,WAAW,MAAM,KAAe,WAqBxD,CAAA"}
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAiBvD,eAAO,MAAM,YAAY,WAAW,MAAM,KAAe,WAqBxD,CAAA"}

package/build/gate.js

@@ -2,18 +2,27 @@ import { createLazyService } from '@owlmeans/context';
 import { OIDC_GATE } from '@owlmeans/oidc';
 import { AuthForbidden } from '@owlmeans/auth';
 import { createGateModel } from './model/gate.js';
+import { logger, logThrottle } from '@owlmeans/log';
+const log = logger('server-oidc-rp');
+/** A gate refusal: logged once a minute per route, reason and user — a hot route repeats it. */
+const forbidden = (alias, reason, params, userId) => {
+    if (logThrottle(`access.forbidden:${alias ?? ''}:${reason}:${userId ?? ''}`, 60_000)) {
+        log.warn('Access forbidden', { alias, reason, params, userId }, { event: 'access.forbidden' });
+    }
+    return new AuthForbidden(reason);
+};
 export const makeOidcGate = (alias = OIDC_GATE) => {
     const service = createLazyService(alias, {
         assert: async (req, _, params) => {
             await service.ready();
             const ctx = service.assertCtx();
             if (req.auth == null) {
-                throw new AuthForbidden('auth');
+                throw forbidden(req.alias, 'auth', params);
             }
             const model = createGateModel(ctx);
             const permissions = await model.loadPermissions(req.auth, params);
             if (permissions.length < 1) {
-                throw new AuthForbidden('permission');
+                throw forbidden(req.alias, 'permission', params, req.auth.userId);
             }
         }
     });

package/build/gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"gate.js","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAErD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEjD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAK,GAAW,SAAS,EAAe,EAAE;IACrE,MAAM,OAAO,GAAgB,iBAAiB,CAAc,KAAK,EAAE;QACjE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE;YAC/B,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;YACrB,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAmB,CAAA;YAEhD,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,CAAA;YACjC,CAAC;YAED,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;YAElC,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YAEjE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,aAAa,CAAC,YAAY,CAAC,CAAA;YACvC,CAAC;QACH,CAAC;KACF,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAErD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAEnD,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAA;AAEpC,gGAAgG;AAChG,MAAM,SAAS,GAAG,CAAC,KAAyB,EAAE,MAAc,EAAE,MAAgB,EAAE,MAAe,EAAiB,EAAE;IAChH,IAAI,WAAW,CAAC,oBAAoB,KAAK,IAAI,EAAE,IAAI,MAAM,IAAI,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAA;IAChG,CAAC;IACD,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,CAAA;AAClC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAK,GAAW,SAAS,EAAe,EAAE;IACrE,MAAM,OAAO,GAAgB,iBAAiB,CAAc,KAAK,EAAE;QACjE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE;YAC/B,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;YACrB,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAmB,CAAA;YAEhD,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAM,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;YAC5C,CAAC;YAED,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;YAElC,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YAEjE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACnE,CAAC;QACH,CAAC;KACF,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}

package/build/guard.d.ts

@@ -2,5 +2,11 @@ import type { OidcGuardOptions } from '@owlmeans/oidc';
 import type { Config, Context } from './types.js';
 export declare const appendOidcGuard: <C extends Config, T extends Context<C>>(context: T, opts?: OidcGuardOptions) => T;
 /** Server-local OIDC handlers for the shared OIDC protocols: the sign-in pair and the organization switch. */
-export declare const oidcEntrypoints: import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<any>[];
+export declare const oidcEntrypoints: (import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
+    body: import("@owlmeans/oidc").OIDCAuthInitParams;
+}, any>> | import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
+    body: import("@owlmeans/oidc").OIDCClientAuthPayload;
+}, any>> | import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
+    body: import("@owlmeans/oidc").OidcOrganizationSwitch;
+}, import("@owlmeans/auth").AuthToken>> | import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{}, import("@owlmeans/oidc").OidcOrganizationList>>)[];
 //# sourceMappingURL=guard.d.ts.map

package/build/guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAQjD,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,WAC3D,CAAC,SAAS,gBAAgB,MAKpC,CAAA;AAED,8GAA8G;AAC9G,eAAO,MAAM,eAAe,uEAK3B,CAAA"}
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAQjD,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,WAC3D,CAAC,SAAS,gBAAgB,MAKpC,CAAA;AAED,8GAA8G;AAC9G,eAAO,MAAM,eAAe;;;;;;iNAK3B,CAAA"}

package/build/model/gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../src/model/gate.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAqB,MAAM,aAAa,CAAA;AAErE,OAAO,KAAK,EAAE,SAAS,EAAyC,MAAM,YAAY,CAAA;AAKlF,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAG,SAgIhF,CAAA"}
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../src/model/gate.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAqB,MAAM,aAAa,CAAA;AAErE,OAAO,KAAK,EAAE,SAAS,EAAyC,MAAM,YAAY,CAAA;AAQlF,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAG,SAiIhF,CAAA"}

package/build/model/gate.js

@@ -2,6 +2,8 @@ import { AuthForbidden, AuthManagerError, AuthManagerUnsupported, AuthorizationE
 import { authService, DEFAULT_ALIAS } from '../consts.js';
 import { cache, managedId } from '../utils/cache.js';
 import { ResponseMode } from './consts.js';
+import { logger } from '@owlmeans/log';
+const log = logger('server-oidc-rp');
 export const createGateModel = (ctx) => {
     const model = {
         getClient: async (user) => {
@@ -50,7 +52,8 @@ export const createGateModel = (ctx) => {
                 if (response.status === 400) {
                     throw new AuthUnknown('invalid');
                 }
-                console.warn(await response.text());
+                // Never the response body: it is the token endpoint's answer to this user's request.
+                log.warn('Permission request failed at the token endpoint', { status: response.status });
                 return [];
             }
             const proofs = await response.json();

package/build/model/gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../src/model/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,GACvG,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAEzD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAEpD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAI1C,MAAM,CAAC,MAAM,eAAe,GAAG,CAAyC,GAAM,EAAa,EAAE;IAC3F,MAAM,KAAK,GAAc;QACvB,SAAS,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;YACtB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAoB,aAAa,CAAC,CAAA;YAC1D,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC;oBAC1B,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC;oBAC5B,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;iBAClE,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,gBAAgB,EAAE,CAAC;oBAClC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,UAAU,CACpC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAC1B,CAAC,IAAI,CAAC;wBACL,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE;wBACrD,KAAK,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE;qBACxC,CAAC,CAAA;oBACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACzB,MAAM,IAAI,WAAW,EAAE,CAAA;oBACzB,CAAC;oBACD,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;oBAE5C,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;gBAC9B,CAAC;gBACD,MAAM,CAAC,CAAA;YACT,CAAC;QACH,CAAC;QAED,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAO,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YACjE,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACnB,0FAA0F;gBAC1F,iFAAiF;gBACjF,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAA;YACxC,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;gBAC3B,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAA;YACnC,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;YAE1C,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;YACrC,MAAM,aAAa,GAAG,QAAQ,CAAC,cAAc,CAAA;YAE7C,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;gBAC1B,MAAM,IAAI,sBAAsB,CAAC,WAAW,CAAC,CAAA;YAC/C,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,WAAW,CACrC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,EACvC,MAAM,CACP,CAAA;YAED,OAAO,CAAC,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAA;YAEnD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,aAAa,EACb,MAAM,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAC5C,CAAA;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,IAAI,WAAW,CAAC,SAAS,CAAC,CAAA;gBAClC,CAAC;gBAED,OAAO,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;gBACnC,OAAO,EAAE,CAAA;YACX,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA0B,CAAA;YAE5D,OAAO,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;gBACrC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAA;gBACxD,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;gBAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAA;gBAC5E,OAAO,KAAK,IAAI,IAAI;uBACf,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAA;YAClE,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,cAAc,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CACpD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAC/D;QAED,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;YACxC,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAA;YACzC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAA;YAC5C,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;YAClE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAA;YAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;YAE9B,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAA;YAE9B,MAAM,OAAO,GAAG;gBACd,cAAc,EAAE,mCAAmC;gBACnD,eAAe,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBACnG,gBAAgB,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;aACnC,CAAA;YAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;QAC1C,CAAC;QAED,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;YACzC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAA;YAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;YACrC,MAAM,UAAU,GAAG;gBACjB,UAAU,EAAE,6CAA6C;gBACzD,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE;oBACpD,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;oBAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;oBAC/D,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;wBACb,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAA;oBAC7B,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;oBACvD,CAAC;oBACD,OAAO,MAAM,CAAA;gBACf,CAAC,EAAE,EAAc,CAAC;gBAClB,aAAa,EAAE,YAAY,CAAC,WAAW;aACZ,CAAA;YAE7B,OAAO,UAAU,CAAA;QACnB,CAAC;KACF,CAAA;IAED,OAAO,KAAK,CAAA;AACd,CAAC,CAAA"}
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../src/model/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,GACvG,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAEzD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAEpD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAEtC,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAA;AAEpC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAyC,GAAM,EAAa,EAAE;IAC3F,MAAM,KAAK,GAAc;QACvB,SAAS,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;YACtB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAoB,aAAa,CAAC,CAAA;YAC1D,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC;oBAC1B,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC;oBAC5B,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;iBAClE,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,gBAAgB,EAAE,CAAC;oBAClC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,UAAU,CACpC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAC1B,CAAC,IAAI,CAAC;wBACL,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE;wBACrD,KAAK,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE;qBACxC,CAAC,CAAA;oBACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACzB,MAAM,IAAI,WAAW,EAAE,CAAA;oBACzB,CAAC;oBACD,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;oBAE5C,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;gBAC9B,CAAC;gBACD,MAAM,CAAC,CAAA;YACT,CAAC;QACH,CAAC;QAED,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAO,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YACjE,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACnB,0FAA0F;gBAC1F,iFAAiF;gBACjF,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAA;YACxC,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;gBAC3B,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAA;YACnC,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;YAE1C,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;YACrC,MAAM,aAAa,GAAG,QAAQ,CAAC,cAAc,CAAA;YAE7C,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;gBAC1B,MAAM,IAAI,sBAAsB,CAAC,WAAW,CAAC,CAAA;YAC/C,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,WAAW,CACrC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,EACvC,MAAM,CACP,CAAA;YAED,OAAO,CAAC,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAA;YAEnD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,aAAa,EACb,MAAM,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAC5C,CAAA;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,IAAI,WAAW,CAAC,SAAS,CAAC,CAAA;gBAClC,CAAC;gBAED,qFAAqF;gBACrF,GAAG,CAAC,IAAI,CAAC,iDAAiD,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;gBACxF,OAAO,EAAE,CAAA;YACX,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA0B,CAAA;YAE5D,OAAO,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;gBACrC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAA;gBACxD,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;gBAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAA;gBAC5E,OAAO,KAAK,IAAI,IAAI;uBACf,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAA;YAClE,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,cAAc,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CACpD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAC/D;QAED,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;YACxC,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAA;YACzC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAA;YAC5C,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;YAClE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAA;YAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;YAE9B,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAA;YAE9B,MAAM,OAAO,GAAG;gBACd,cAAc,EAAE,mCAAmC;gBACnD,eAAe,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBACnG,gBAAgB,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;aACnC,CAAA;YAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;QAC1C,CAAC;QAED,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;YACzC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAA;YAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;YACrC,MAAM,UAAU,GAAG;gBACjB,UAAU,EAAE,6CAA6C;gBACzD,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE;oBACpD,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;oBAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;oBAC/D,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;wBACb,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAA;oBAC7B,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;oBACvD,CAAC;oBACD,OAAO,MAAM,CAAA;gBACf,CAAC,EAAE,EAAc,CAAC;gBAClB,aAAa,EAAE,YAAY,CAAC,WAAW;aACZ,CAAA;YAE7B,OAAO,UAAU,CAAA;QACnB,CAAC;KACF,CAAA;IAED,OAAO,KAAK,CAAA;AACd,CAAC,CAAA"}

package/build/wrapper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrapper.d.ts","sourceRoot":"","sources":["../src/wrapper.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAyC,kBAAkB,EAAqB,MAAM,gBAAgB,CAAA;AA+ClH,eAAO,MAAM,uBAAuB,QAAO,kBAuP1C,CAAA"}
+{"version":3,"file":"wrapper.d.ts","sourceRoot":"","sources":["../src/wrapper.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAyC,kBAAkB,EAAqB,MAAM,gBAAgB,CAAA;AAkDlH,eAAO,MAAM,uBAAuB,QAAO,kBA0P1C,CAAA"}

package/build/wrapper.js

@@ -1,4 +1,4 @@
-import { AuthenFailed, AuthorizationError, AuthRole, AuthUnavailable } from '@owlmeans/auth';
+import { AuthenFailed, AuthError, AuthorizationError, AuthRole, AuthUnavailable } from '@owlmeans/auth';
 import { EnvelopeKind, makeEnvelopeModel } from '@owlmeans/basic-envelope';
 import { createService } from '@owlmeans/context';
 import { ORGANIZATIONS_CLAIM, WRAPPED_OIDC } from '@owlmeans/oidc';
@@ -14,6 +14,8 @@ import { TRUSTED } from '@owlmeans/config';
 import { AUTH_SRV_KEY } from '@owlmeans/server-auth';
 import { trust } from '@owlmeans/auth-common/utils';
 import { AUTH_SESSION_MANAGER } from '@owlmeans/server-auth-session';
+import { logger } from '@owlmeans/log';
+const log = logger('server-oidc-rp');
 /** Provider errors which affirm that this access token is no longer usable. */
 const isInvalidProviderToken = (error) => {
     if (error == null || typeof error !== 'object')
@@ -260,7 +262,10 @@ export const makeOidcWrappingService = () => {
                     // browser session would turn a recoverable outage into forced reauthentication.
                     throw err;
                 }
-                console.error(err);
+                log.warn('OIDC session rejected; its record is dropped', {
+                    reason: err instanceof AuthError ? err.message : 'revalidation-failed', userId: user.userId,
+                    ...(err instanceof AuthError ? {} : { error: err }),
+                }, { event: 'auth.refused' });
                 await cache(ctx).delete(managedId(user.token));
                 if (thr) {
                     if (err instanceof AuthorizationError) {

package/build/wrapper.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrapper.js","sourceRoot":"","sources":["../src/wrapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAE5F,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEjD,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAClE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAG/D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAC7E,OAAO,IAAI,MAAM,OAAO,CAAA;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EACL,UAAU,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,gBAAgB,GAC3F,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAEhD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAA;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AAGpE,+EAA+E;AAC/E,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAW,EAAE;IACzD,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC5D,MAAM,SAAS,GAAG,KAIjB,CAAA;IACD,IAAI,SAAS,CAAC,KAAK,KAAK,eAAe,IAAI,SAAS,CAAC,KAAK,KAAK,eAAe;QAAE,OAAO,IAAI,CAAA;IAC3F,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC7E,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CACvC,SAAS,IAAI,IAAI;WACd,OAAO,SAAS,KAAK,QAAQ;WAC5B,SAAkD,CAAC,UAAU,EAAE,KAAK,KAAK,eAAe,CAC7F,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,CAAC,QAA6B,EAAS,EAAE;IAC9D,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAA;IAC/E,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAA;AACzC,CAAC,CAAA;AAED,sFAAsF;AACtF,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,MAAqB,EAAqB,EAAE,CAC3E,MAAM,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAA;AAE/F,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAuB,EAAE;IAC9D,MAAM,OAAO,GAAuB,aAAa,CAAqB,YAAY,EAAE;QAClF,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAmB,CAAA;YAChD,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAA;YACxD,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAA;YACvC,CAAC;YACD,MAAM,CAAC,EAAE,cAAc,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC3C,MAAM,QAAQ,GAAG,iBAAiB,CAAO,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YAC5E,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAA;YAE/B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;gBAC1D,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;oBAC7C,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAA;gBACxC,CAAC;gBACD,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBAEjD,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,oBAAoB,CAAC;oBAClD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAqB,oBAAoB,CAAC;oBACvD,CAAC,CAAC,IAAI,CAAA;gBACR,IAAI,eAAe,GAA+B,IAAI,CAAA;gBACtD,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;oBACpB,qFAAqF;oBACrF,qFAAqF;oBACrF,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI;wBAAE,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAA;oBACnE,IAAI,CAAC;wBACH,eAAe,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;oBACzD,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAA;oBAC/C,CAAC;oBACD,IAAI,eAAe,CAAC,KAAK,KAAK,QAAQ,IAAI,eAAe,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;wBAC9E,cAAc,CAAC,eAAe,CAAC,CAAA;oBACjC,CAAC;gBACH,CAAC;gBAED,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAoB,aAAa,CAAC,CAAA;gBAC1D,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAA;gBAC7D,IAAI,kBAAkB,IAAI,IAAI,EAAE,CAAC;oBAC/B,MAAM,IAAI,eAAe,CAAC,aAAa,CAAC,CAAA;gBAC1C,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;gBACvD,MAAM,oBAAoB,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,iBAAiB,KAAK,UAAU,CAAA;gBAEhF,IAAI,CAAC,oBAAoB,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;qBAC5E,GAAG,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC,OAAO,EAAE,IAAI,eAAe,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC9F,OAAO,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;gBAChC,CAAC;gBAED,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAA;gBAE7B,IAAI,GAAG,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC/C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAoC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;yBAC5F,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;oBAEtD,MAAM,cAAc,GAAG,iBAAiB,CAAkB,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAA;oBAC3F,MAAM,WAAW,GAAG,MAAM,KAAK,CAAkB,GAAG,EAAE,OAAO,EAAE,YAAY,CAAC,CAAA;oBAC5E,IAAI,CAAC,MAAM,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;wBAClD,MAAM,IAAI,YAAY,EAAE,CAAA;oBAC1B,CAAC;oBAED,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,EAAE,CAAA;oBAE5C,MAAM,WAAW,GAAS;wBACxB,GAAG,IAAI;wBACP,IAAI,EAAE,WAAW,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK;wBACxC,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM;wBACzC,SAAS,EAAE,WAAW,CAAC,SAAS;wBAChC,UAAU,EAAE,WAAW,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU;wBACrD,SAAS,EAAE,IAAI,IAAI,EAAE;qBACtB,CAAA;oBAED,IAAI,WAAW,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;wBACzC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;wBAC9C,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,SAAS,CAAA;wBACzC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;wBACxC,WAAW,CAAC,SAAS,GAAG,MAAM,CAAC,EAAE,CAAA;oBACnC,CAAC;oBAED,IAAI,OAAO,IAAI,IAAI,IAAI,CAAC,eAAe,EAAE,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC1G,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,WAAW,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;4BACzF,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAA;wBACzC,CAAC;wBACD,IAAI,UAA+B,CAAA;wBACnC,IAAI,CAAC;4BACH,UAAU,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC;gCAClC,EAAE,EAAE,WAAW,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ;gCACzE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;6BAC9F,CAAC,CAAA;wBACJ,CAAC;wBAAC,MAAM,CAAC;4BACP,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAA;wBAC/C,CAAC;wBACD,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ;4BAAE,cAAc,CAAC,UAAU,CAAC,CAAA;;4BACxD,WAAW,CAAC,oBAAoB,GAAG,UAAU,CAAC,OAAO,CAAA;oBAC5D,CAAC;oBAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;oBAElD,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,QAAkC,CAAA;oBAE1D,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAA;oBAEpD,OAAO,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;gBACjC,CAAC;qBAAM,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;oBAClC,IAAI,kBAAkB,IAAI,IAAI,EAAE,CAAC;wBAC/B,IAAI,QAAQ,GAAyB,MAAM,CAAC,OAA+B,CAAA;wBAE3E,8EAA8E;wBAC9E,mFAAmF;wBACnF,6EAA6E;wBAC7E,kFAAkF;wBAClF,mFAAmF;wBACnF,uEAAuE;wBACvE,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAA;wBACrC,IAAI,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;4BACzD,IAAI,QAAQ,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;gCACnC,yEAAyE;gCACzE,MAAM,IAAI,kBAAkB,CAAC,cAAc,CAAC,CAAA;4BAC9C,CAAC;4BACD,IAAI,CAAC;gCACH,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAkC,CAAyB,CAAA;4BAC7F,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,IAAI,sBAAsB,CAAC,KAAK,CAAC;oCAAE,MAAM,IAAI,kBAAkB,CAAC,cAAc,CAAC,CAAA;gCAC/E,IAAI,oBAAoB;oCAAE,MAAM,IAAI,eAAe,CAAC,cAAc,CAAC,CAAA;gCACnE,MAAM,KAAK,CAAA;4BACb,CAAC;wBACH,CAAC;6BAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC,sBAAsB,IAAI,IAAI,EAAE,CAAC;4BAC/D,gFAAgF;4BAChF,8EAA8E;4BAC9E,gFAAgF;4BAChF,iFAAiF;4BACjF,IAAI,MAAM,CAAA;4BACV,IAAI,CAAC;gCACH,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,QAAkC,EAAE,cAAc,CAAC,CAAA;4BACtF,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,IAAI,oBAAoB;oCAAE,MAAM,IAAI,eAAe,CAAC,oBAAoB,CAAC,CAAA;gCACzE,MAAM,KAAK,CAAA;4BACb,CAAC;4BACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gCACnB,MAAM,IAAI,kBAAkB,CAAC,cAAc,CAAC,CAAA;4BAC9C,CAAC;wBACH,CAAC;6BAAM,IAAI,oBAAoB,EAAE,CAAC;4BAChC,6EAA6E;4BAC7E,8EAA8E;4BAC9E,MAAM,IAAI,eAAe,CAAC,oBAAoB,CAAC,CAAA;wBACjD,CAAC;wBAED,IAAI,WAAW,GAAS;4BACtB,GAAG,IAAI;4BACP,SAAS,EAAE,IAAI,IAAI,EAAE;yBACtB,CAAA;wBAED,iFAAiF;wBACjF,iFAAiF;wBACjF,mFAAmF;wBACnF,IAAI,MAAM,GAAwC,QAAQ,CAAC,QAAQ,IAAI,IAAI;4BACzE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;4BAC9B,CAAC,CAAC,SAAS,CAAA;wBAEb,IAAI,oBAAoB,EAAE,CAAC;4BACzB,IAAI,OAAgC,CAAA;4BACpC,IAAI,CAAC;gCACH,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAkC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;4BAClF,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,8EAA8E;gCAC9E,gFAAgF;gCAChF,IAAI,sBAAsB,CAAC,KAAK,CAAC;oCAAE,MAAM,IAAI,kBAAkB,CAAC,cAAc,CAAC,CAAA;gCAC/E,MAAM,IAAI,eAAe,CAAC,eAAe,CAAC,CAAA;4BAC5C,CAAC;4BACD,IAAI,qBAAqB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;gCAC9D,MAAM,IAAI,kBAAkB,CAAC,aAAa,CAAC,CAAA;4BAC7C,CAAC;4BACD,MAAM,GAAG,OAAO,CAAA;wBAClB,CAAC;wBAED,MAAM,IAAI,GAAG,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;wBAE1F,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;4BAC1B,iFAAiF;4BACjF,oFAAoF;4BACpF,sDAAsD;4BACtD,MAAM,aAAa,GAAG,MAAM,IAAI,IAAI;gCAClC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;gCACnD,CAAC,CAAC,MAAM,CAAC,aAAa,CAAA;4BACxB,MAAM,MAAM,GAAG,aAAa,IAAI,IAAI;gCAClC,CAAC,CAAC,gBAAgB,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;gCAC/D,CAAC,CAAC,SAAS,CAAA;4BACb,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gCACnB,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAA;4BACxC,CAAC;4BAED,MAAM,CAAC,aAAa,GAAG,aAAa,CAAA;4BACpC,MAAM,CAAC,IAAI,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAA;4BACjC,MAAM,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;4BACxC,WAAW,GAAG,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;wBAC5D,CAAC;6BAAM,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;4BACxB,WAAW,CAAC,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAA;4BACpD,WAAW,CAAC,YAAY,GAAG,IAAI,CAAA;wBACjC,CAAC;wBAED,IAAI,OAAO,IAAI,IAAI,IAAI,eAAe,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;4BAC5D,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;gCAClF,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAA;4BACzC,CAAC;4BACD,IAAI,UAA+B,CAAA;4BACnC,IAAI,CAAC;gCACH,UAAU,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC;oCAClC,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ;oCAClE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;iCAC9F,CAAC,CAAA;4BACJ,CAAC;4BAAC,MAAM,CAAC;gCACP,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAA;4BAC/C,CAAC;4BACD,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ;gCAAE,cAAc,CAAC,UAAU,CAAC,CAAA;;gCACxD,WAAW,CAAC,oBAAoB,GAAG,UAAU,CAAC,OAAO,CAAA;wBAC5D,CAAC;wBAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;wBAElD,MAAM,CAAC,OAAO,GAAG,QAAkC,CAAA;wBAEnD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAA;wBAEpD,OAAO,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;oBACjC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;oBACnC,iFAAiF;oBACjF,gFAAgF;oBAChF,MAAM,GAAG,CAAA;gBACX,CAAC;gBACD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;gBAClB,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;gBAC9C,IAAI,GAAG,EAAE,CAAC;oBACR,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;wBACtC,MAAM,GAAG,CAAA;oBACX,CAAC;oBACD,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAA;gBACzC,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}
+{"version":3,"file":"wrapper.js","sourceRoot":"","sources":["../src/wrapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,kBAAkB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAEvG,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEjD,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAClE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAG/D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAC7E,OAAO,IAAI,MAAM,OAAO,CAAA;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EACL,UAAU,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,gBAAgB,GAC3F,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAEhD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAA;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AAEpE,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAEtC,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAA;AAEpC,+EAA+E;AAC/E,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAW,EAAE;IACzD,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC5D,MAAM,SAAS,GAAG,KAIjB,CAAA;IACD,IAAI,SAAS,CAAC,KAAK,KAAK,eAAe,IAAI,SAAS,CAAC,KAAK,KAAK,eAAe;QAAE,OAAO,IAAI,CAAA;IAC3F,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC7E,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CACvC,SAAS,IAAI,IAAI;WACd,OAAO,SAAS,KAAK,QAAQ;WAC5B,SAAkD,CAAC,UAAU,EAAE,KAAK,KAAK,eAAe,CAC7F,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,CAAC,QAA6B,EAAS,EAAE;IAC9D,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAA;IAC/E,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAA;AACzC,CAAC,CAAA;AAED,sFAAsF;AACtF,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,MAAqB,EAAqB,EAAE,CAC3E,MAAM,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAA;AAE/F,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAuB,EAAE;IAC9D,MAAM,OAAO,GAAuB,aAAa,CAAqB,YAAY,EAAE;QAClF,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAmB,CAAA;YAChD,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAA;YACxD,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAA;YACvC,CAAC;YACD,MAAM,CAAC,EAAE,cAAc,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC3C,MAAM,QAAQ,GAAG,iBAAiB,CAAO,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YAC5E,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAA;YAE/B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;gBAC1D,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;oBAC7C,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAA;gBACxC,CAAC;gBACD,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBAEjD,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,oBAAoB,CAAC;oBAClD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAqB,oBAAoB,CAAC;oBACvD,CAAC,CAAC,IAAI,CAAA;gBACR,IAAI,eAAe,GAA+B,IAAI,CAAA;gBACtD,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;oBACpB,qFAAqF;oBACrF,qFAAqF;oBACrF,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI;wBAAE,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAA;oBACnE,IAAI,CAAC;wBACH,eAAe,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;oBACzD,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAA;oBAC/C,CAAC;oBACD,IAAI,eAAe,CAAC,KAAK,KAAK,QAAQ,IAAI,eAAe,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;wBAC9E,cAAc,CAAC,eAAe,CAAC,CAAA;oBACjC,CAAC;gBACH,CAAC;gBAED,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAoB,aAAa,CAAC,CAAA;gBAC1D,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAA;gBAC7D,IAAI,kBAAkB,IAAI,IAAI,EAAE,CAAC;oBAC/B,MAAM,IAAI,eAAe,CAAC,aAAa,CAAC,CAAA;gBAC1C,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;gBACvD,MAAM,oBAAoB,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,iBAAiB,KAAK,UAAU,CAAA;gBAEhF,IAAI,CAAC,oBAAoB,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;qBAC5E,GAAG,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC,OAAO,EAAE,IAAI,eAAe,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC9F,OAAO,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;gBAChC,CAAC;gBAED,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAA;gBAE7B,IAAI,GAAG,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC/C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAoC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;yBAC5F,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;oBAEtD,MAAM,cAAc,GAAG,iBAAiB,CAAkB,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAA;oBAC3F,MAAM,WAAW,GAAG,MAAM,KAAK,CAAkB,GAAG,EAAE,OAAO,EAAE,YAAY,CAAC,CAAA;oBAC5E,IAAI,CAAC,MAAM,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;wBAClD,MAAM,IAAI,YAAY,EAAE,CAAA;oBAC1B,CAAC;oBAED,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,EAAE,CAAA;oBAE5C,MAAM,WAAW,GAAS;wBACxB,GAAG,IAAI;wBACP,IAAI,EAAE,WAAW,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK;wBACxC,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM;wBACzC,SAAS,EAAE,WAAW,CAAC,SAAS;wBAChC,UAAU,EAAE,WAAW,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU;wBACrD,SAAS,EAAE,IAAI,IAAI,EAAE;qBACtB,CAAA;oBAED,IAAI,WAAW,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;wBACzC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;wBAC9C,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,SAAS,CAAA;wBACzC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;wBACxC,WAAW,CAAC,SAAS,GAAG,MAAM,CAAC,EAAE,CAAA;oBACnC,CAAC;oBAED,IAAI,OAAO,IAAI,IAAI,IAAI,CAAC,eAAe,EAAE,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC1G,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,WAAW,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;4BACzF,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAA;wBACzC,CAAC;wBACD,IAAI,UAA+B,CAAA;wBACnC,IAAI,CAAC;4BACH,UAAU,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC;gCAClC,EAAE,EAAE,WAAW,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ;gCACzE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;6BAC9F,CAAC,CAAA;wBACJ,CAAC;wBAAC,MAAM,CAAC;4BACP,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAA;wBAC/C,CAAC;wBACD,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ;4BAAE,cAAc,CAAC,UAAU,CAAC,CAAA;;4BACxD,WAAW,CAAC,oBAAoB,GAAG,UAAU,CAAC,OAAO,CAAA;oBAC5D,CAAC;oBAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;oBAElD,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,QAAkC,CAAA;oBAE1D,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAA;oBAEpD,OAAO,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;gBACjC,CAAC;qBAAM,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;oBAClC,IAAI,kBAAkB,IAAI,IAAI,EAAE,CAAC;wBAC/B,IAAI,QAAQ,GAAyB,MAAM,CAAC,OAA+B,CAAA;wBAE3E,8EAA8E;wBAC9E,mFAAmF;wBACnF,6EAA6E;wBAC7E,kFAAkF;wBAClF,mFAAmF;wBACnF,uEAAuE;wBACvE,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAA;wBACrC,IAAI,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;4BACzD,IAAI,QAAQ,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;gCACnC,yEAAyE;gCACzE,MAAM,IAAI,kBAAkB,CAAC,cAAc,CAAC,CAAA;4BAC9C,CAAC;4BACD,IAAI,CAAC;gCACH,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAkC,CAAyB,CAAA;4BAC7F,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,IAAI,sBAAsB,CAAC,KAAK,CAAC;oCAAE,MAAM,IAAI,kBAAkB,CAAC,cAAc,CAAC,CAAA;gCAC/E,IAAI,oBAAoB;oCAAE,MAAM,IAAI,eAAe,CAAC,cAAc,CAAC,CAAA;gCACnE,MAAM,KAAK,CAAA;4BACb,CAAC;wBACH,CAAC;6BAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC,sBAAsB,IAAI,IAAI,EAAE,CAAC;4BAC/D,gFAAgF;4BAChF,8EAA8E;4BAC9E,gFAAgF;4BAChF,iFAAiF;4BACjF,IAAI,MAAM,CAAA;4BACV,IAAI,CAAC;gCACH,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,QAAkC,EAAE,cAAc,CAAC,CAAA;4BACtF,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,IAAI,oBAAoB;oCAAE,MAAM,IAAI,eAAe,CAAC,oBAAoB,CAAC,CAAA;gCACzE,MAAM,KAAK,CAAA;4BACb,CAAC;4BACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gCACnB,MAAM,IAAI,kBAAkB,CAAC,cAAc,CAAC,CAAA;4BAC9C,CAAC;wBACH,CAAC;6BAAM,IAAI,oBAAoB,EAAE,CAAC;4BAChC,6EAA6E;4BAC7E,8EAA8E;4BAC9E,MAAM,IAAI,eAAe,CAAC,oBAAoB,CAAC,CAAA;wBACjD,CAAC;wBAED,IAAI,WAAW,GAAS;4BACtB,GAAG,IAAI;4BACP,SAAS,EAAE,IAAI,IAAI,EAAE;yBACtB,CAAA;wBAED,iFAAiF;wBACjF,iFAAiF;wBACjF,mFAAmF;wBACnF,IAAI,MAAM,GAAwC,QAAQ,CAAC,QAAQ,IAAI,IAAI;4BACzE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;4BAC9B,CAAC,CAAC,SAAS,CAAA;wBAEb,IAAI,oBAAoB,EAAE,CAAC;4BACzB,IAAI,OAAgC,CAAA;4BACpC,IAAI,CAAC;gCACH,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAkC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;4BAClF,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,8EAA8E;gCAC9E,gFAAgF;gCAChF,IAAI,sBAAsB,CAAC,KAAK,CAAC;oCAAE,MAAM,IAAI,kBAAkB,CAAC,cAAc,CAAC,CAAA;gCAC/E,MAAM,IAAI,eAAe,CAAC,eAAe,CAAC,CAAA;4BAC5C,CAAC;4BACD,IAAI,qBAAqB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;gCAC9D,MAAM,IAAI,kBAAkB,CAAC,aAAa,CAAC,CAAA;4BAC7C,CAAC;4BACD,MAAM,GAAG,OAAO,CAAA;wBAClB,CAAC;wBAED,MAAM,IAAI,GAAG,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;wBAE1F,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;4BAC1B,iFAAiF;4BACjF,oFAAoF;4BACpF,sDAAsD;4BACtD,MAAM,aAAa,GAAG,MAAM,IAAI,IAAI;gCAClC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;gCACnD,CAAC,CAAC,MAAM,CAAC,aAAa,CAAA;4BACxB,MAAM,MAAM,GAAG,aAAa,IAAI,IAAI;gCAClC,CAAC,CAAC,gBAAgB,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;gCAC/D,CAAC,CAAC,SAAS,CAAA;4BACb,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gCACnB,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAA;4BACxC,CAAC;4BAED,MAAM,CAAC,aAAa,GAAG,aAAa,CAAA;4BACpC,MAAM,CAAC,IAAI,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAA;4BACjC,MAAM,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;4BACxC,WAAW,GAAG,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;wBAC5D,CAAC;6BAAM,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;4BACxB,WAAW,CAAC,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAA;4BACpD,WAAW,CAAC,YAAY,GAAG,IAAI,CAAA;wBACjC,CAAC;wBAED,IAAI,OAAO,IAAI,IAAI,IAAI,eAAe,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;4BAC5D,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;gCAClF,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAA;4BACzC,CAAC;4BACD,IAAI,UAA+B,CAAA;4BACnC,IAAI,CAAC;gCACH,UAAU,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC;oCAClC,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ;oCAClE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;iCAC9F,CAAC,CAAA;4BACJ,CAAC;4BAAC,MAAM,CAAC;gCACP,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAA;4BAC/C,CAAC;4BACD,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ;gCAAE,cAAc,CAAC,UAAU,CAAC,CAAA;;gCACxD,WAAW,CAAC,oBAAoB,GAAG,UAAU,CAAC,OAAO,CAAA;wBAC5D,CAAC;wBAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;wBAElD,MAAM,CAAC,OAAO,GAAG,QAAkC,CAAA;wBAEnD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAA;wBAEpD,OAAO,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;oBACjC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;oBACnC,iFAAiF;oBACjF,gFAAgF;oBAChF,MAAM,GAAG,CAAA;gBACX,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC,8CAA8C,EAAE;oBACvD,MAAM,EAAE,GAAG,YAAY,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;oBAC3F,GAAG,CAAC,GAAG,YAAY,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;iBACpD,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;gBAC7B,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;gBAC9C,IAAI,GAAG,EAAE,CAAC;oBACR,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;wBACtC,MAAM,GAAG,CAAA;oBACX,CAAC;oBACD,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAA;gBACzC,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/server-oidc-rp",
-  "version": "0.1.18-rc.52",
+  "version": "0.1.18-rc.53",
   "license": "MIT",
   "type": "module",
   "scripts": {
@@ -37,7 +37,7 @@
   },
   "devDependencies": {
     "@owlmeans/dep-config": "workspace:*",
-    "@owlmeans/test-auth": "^0.1.18-rc.43",
+    "@owlmeans/test-auth": "^0.1.18-rc.44",
     "@types/bun": "^1.4.0",
     "@types/node": "^26.1.0",
     "nodemon": "^3.1.14",
@@ -46,20 +46,21 @@
   "dependencies": {
     "@noble/hashes": "^1.5.0",
     "@owlmeans/auth": "^0.1.18-rc.38",
-    "@owlmeans/auth-common": "^0.1.18-rc.44",
-    "@owlmeans/basic-envelope": "^0.1.18-rc.43",
-    "@owlmeans/client-entrypoint": "^0.1.18-rc.44",
-    "@owlmeans/config": "^0.1.18-rc.41",
+    "@owlmeans/auth-common": "^0.1.18-rc.45",
+    "@owlmeans/basic-envelope": "^0.1.18-rc.44",
+    "@owlmeans/client-entrypoint": "^0.1.18-rc.45",
+    "@owlmeans/config": "^0.1.18-rc.42",
     "@owlmeans/context": "^0.1.18-rc.32",
-    "@owlmeans/did": "^0.1.18-rc.43",
+    "@owlmeans/did": "^0.1.18-rc.44",
     "@owlmeans/entrypoint": "^0.1.18-rc.39",
-    "@owlmeans/oidc": "^0.1.18-rc.52",
-    "@owlmeans/resource": "^0.1.18-rc.37",
+    "@owlmeans/log": "^0.1.18-rc.0",
+    "@owlmeans/oidc": "^0.1.18-rc.53",
+    "@owlmeans/resource": "^0.1.18-rc.38",
     "@owlmeans/route": "^0.1.18-rc.33",
-    "@owlmeans/server-api": "^0.1.18-rc.48",
-    "@owlmeans/server-auth": "^0.1.18-rc.51",
-    "@owlmeans/server-auth-session": "^0.1.18-rc.13",
-    "@owlmeans/server-context": "^0.1.18-rc.40",
+    "@owlmeans/server-api": "^0.1.18-rc.49",
+    "@owlmeans/server-auth": "^0.1.18-rc.52",
+    "@owlmeans/server-auth-session": "^0.1.18-rc.14",
+    "@owlmeans/server-context": "^0.1.18-rc.41",
     "@owlmeans/server-entrypoint": "^0.1.18-rc.38",
     "@scure/base": "^2.3.0",
     "dayjs": "^1.11.13",

package/src/gate.ts

@@ -4,6 +4,17 @@ import { OIDC_GATE } from '@owlmeans/oidc'
 import type { Config, Context } from './types.js'
 import { AuthForbidden } from '@owlmeans/auth'
 import { createGateModel } from './model/gate.js'
+import { logger, logThrottle } from '@owlmeans/log'
+
+const log = logger('server-oidc-rp')
+
+/** A gate refusal: logged once a minute per route, reason and user — a hot route repeats it. */
+const forbidden = (alias: string | undefined, reason: string, params: string[], userId?: string): AuthForbidden => {
+  if (logThrottle(`access.forbidden:${alias ?? ''}:${reason}:${userId ?? ''}`, 60_000)) {
+    log.warn('Access forbidden', { alias, reason, params, userId }, { event: 'access.forbidden' })
+  }
+  return new AuthForbidden(reason)
+}
 
 export const makeOidcGate = (alias: string = OIDC_GATE): GateService => {
   const service: GateService = createLazyService<GateService>(alias, {
@@ -12,7 +23,7 @@ export const makeOidcGate = (alias: string = OIDC_GATE): GateService => {
       const ctx = service.assertCtx<Config, Context>()
 
       if (req.auth == null) {
-        throw new AuthForbidden('auth')
+        throw forbidden(req.alias, 'auth', params)
       }
 
       const model = createGateModel(ctx)
@@ -20,7 +31,7 @@ export const makeOidcGate = (alias: string = OIDC_GATE): GateService => {
       const permissions = await model.loadPermissions(req.auth, params)
 
       if (permissions.length < 1) {
-        throw new AuthForbidden('permission')
+        throw forbidden(req.alias, 'permission', params, req.auth.userId)
       }
     }
   })

package/src/model/gate.ts

@@ -8,6 +8,9 @@ import type { GateModel, PermissionRequest, PermissionResponse } from './types.j
 import { ResponseMode } from './consts.js'
 import type { ClientEntrypoint } from '@owlmeans/client-entrypoint'
 import type { OidcProviderDescriptor } from '@owlmeans/oidc'
+import { logger } from '@owlmeans/log'
+
+const log = logger('server-oidc-rp')
 
 export const createGateModel = <C extends Config, T extends Context<C>>(ctx: T): GateModel => {
   const model: GateModel = {
@@ -74,7 +77,8 @@ export const createGateModel = <C extends Config, T extends Context<C>>(ctx: T):
           throw new AuthUnknown('invalid')
         }
 
-        console.warn(await response.text())
+        // Never the response body: it is the token endpoint's answer to this user's request.
+        log.warn('Permission request failed at the token endpoint', { status: response.status })
         return []
       }
 

package/src/wrapper.ts

@@ -1,4 +1,4 @@
-import { AuthenFailed, AuthorizationError, AuthRole, AuthUnavailable } from '@owlmeans/auth'
+import { AuthenFailed, AuthError, AuthorizationError, AuthRole, AuthUnavailable } from '@owlmeans/auth'
 import type { Auth, AuthCredentials } from '@owlmeans/auth'
 import { EnvelopeKind, makeEnvelopeModel } from '@owlmeans/basic-envelope'
 import { createService } from '@owlmeans/context'
@@ -22,6 +22,9 @@ import { AUTH_SRV_KEY } from '@owlmeans/server-auth'
 import { trust } from '@owlmeans/auth-common/utils'
 import { AUTH_SESSION_MANAGER } from '@owlmeans/server-auth-session'
 import type { AuthSessionDecision, AuthSessionManager } from '@owlmeans/server-auth-session'
+import { logger } from '@owlmeans/log'
+
+const log = logger('server-oidc-rp')
 
 /** Provider errors which affirm that this access token is no longer usable. */
 const isInvalidProviderToken = (error: unknown): boolean => {
@@ -282,7 +285,10 @@ export const makeOidcWrappingService = (): WrappedOIDCService => {
           // browser session would turn a recoverable outage into forced reauthentication.
           throw err
         }
-        console.error(err)
+        log.warn('OIDC session rejected; its record is dropped', {
+          reason: err instanceof AuthError ? err.message : 'revalidation-failed', userId: user.userId,
+          ...(err instanceof AuthError ? {} : { error: err }),
+        }, { event: 'auth.refused' })
         await cache(ctx).delete(managedId(user.token))
         if (thr) {
           if (err instanceof AuthorizationError) {