@probemap/shared 0.1.0

package/dist/protocol/trace-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-context.js","sourceRoot":"","sources":["../../src/protocol/trace-context.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAC/D,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAEhD,MAAM,WAAW,GAAG,4EAA4E,CAAC;AACjG,MAAM,cAAc,GAAG,iBAAiB,CAAC;AACzC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAqBxC,SAAS,UAAU,CAAC,MAAoB,EAAE,IAAY;IACpD,IAAI,KAAK,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QACxD,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;IACvC,CAAC;IAED,MAAM,MAAM,GAAG,MAAuD,CAAC;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,MAAc,EAAE,OAAO,GAAG,IAAI;IAC/E,IACE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QACpB,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EACnB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,MAAM,OAAO,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA+B;IAChE,OAAO;QACL,CAAC,kBAAkB,CAAC,EAAE,iBAAiB,CACrC,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,OAAO,CAChB;QACD,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC,SAAS;QAC5C,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC,SAAS;QAC5C,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KACpF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAoB;IACpD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,8DAA8D,CAAC,IAAI,CAC/E,WAAW,IAAI,EAAE,CAClB,CAAC;IAEF,IACE,SAAS,KAAK,SAAS;QACvB,SAAS,KAAK,SAAS;QACvB,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC;QAC5B,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC;QAC5B,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnD,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QACjB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EACtB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,SAAS;QACT,SAAS;QACT,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,OAAO,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE;QAChC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE;QACrC,OAAO,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;KACpD,CAAC;AACJ,CAAC"}

package/dist/protocol/version.d.ts

@@ -0,0 +1,11 @@
+export declare const PROTOCOL_VERSION: "1.0.0";
+export declare const PROTOCOL_MAJOR_VERSION = 1;
+export declare class IncompatibleProtocolVersionError extends Error {
+    readonly receivedVersion: string;
+    readonly supportedMajorVersion: number;
+    constructor(receivedVersion: string);
+}
+export declare function getProtocolMajor(version: string): number | undefined;
+export declare function isProtocolCompatible(version: string): boolean;
+export declare function assertProtocolCompatible(version: string): void;
+//# sourceMappingURL=version.d.ts.map

package/dist/protocol/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/protocol/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB,EAAG,OAAgB,CAAC;AACjD,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAIxC,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,SAAgB,eAAe,EAAE,MAAM,CAAC;IACxC,SAAgB,qBAAqB,EAAE,MAAM,CAAC;IAE9C,YAAmB,eAAe,EAAE,MAAM,EAQzC;CACF;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKpE;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAI9D"}

package/dist/protocol/version.js

@@ -0,0 +1,28 @@
+export const PROTOCOL_VERSION = "1.0.0";
+export const PROTOCOL_MAJOR_VERSION = 1;
+const semanticVersionPattern = /^(?<major>0|[1-9]\d*)\.(?<minor>0|[1-9]\d*)\.(?<patch>0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?$/;
+export class IncompatibleProtocolVersionError extends Error {
+    receivedVersion;
+    supportedMajorVersion;
+    constructor(receivedVersion) {
+        super(`Unsupported ProbeMap protocol version "${receivedVersion}". ` +
+            `This collector accepts protocol major ${PROTOCOL_MAJOR_VERSION}.`);
+        this.name = "IncompatibleProtocolVersionError";
+        this.receivedVersion = receivedVersion;
+        this.supportedMajorVersion = PROTOCOL_MAJOR_VERSION;
+    }
+}
+export function getProtocolMajor(version) {
+    const match = semanticVersionPattern.exec(version);
+    const value = match?.groups?.major;
+    return value === undefined ? undefined : Number(value);
+}
+export function isProtocolCompatible(version) {
+    return getProtocolMajor(version) === PROTOCOL_MAJOR_VERSION;
+}
+export function assertProtocolCompatible(version) {
+    if (!isProtocolCompatible(version)) {
+        throw new IncompatibleProtocolVersionError(version);
+    }
+}
+//# sourceMappingURL=version.js.map

package/dist/protocol/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/protocol/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAgB,CAAC;AACjD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC,MAAM,sBAAsB,GAAG,wFAAwF,CAAC;AAExH,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IACzC,eAAe,CAAS;IACxB,qBAAqB,CAAS;IAE9C,YAAmB,eAAuB;QACxC,KAAK,CACH,0CAA0C,eAAe,KAAK;YAC5D,yCAAyC,sBAAsB,GAAG,CACrE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;QAC/C,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,qBAAqB,GAAG,sBAAsB,CAAC;IACtD,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC;IAEnC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,gBAAgB,CAAC,OAAO,CAAC,KAAK,sBAAsB,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,gCAAgC,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/security/auth.d.ts

@@ -0,0 +1,120 @@
+import { z } from "zod";
+export declare const authModeSchema: z.ZodEnum<{
+    disabled: "disabled";
+    optional: "optional";
+    required: "required";
+}>;
+export declare const authScopes: readonly ["ingest", "read", "admin", "changes:write", "source:read", "experiments:create", "experiments:run", "runner:lease", "runner:report", "onboarding:manage", "onboarding:write", "onboarding:read", "conformance:submit", "offline_access"];
+export declare const authScopeSchema: z.ZodEnum<{
+    admin: "admin";
+    "changes:write": "changes:write";
+    "conformance:submit": "conformance:submit";
+    "experiments:create": "experiments:create";
+    "experiments:run": "experiments:run";
+    ingest: "ingest";
+    offline_access: "offline_access";
+    "onboarding:manage": "onboarding:manage";
+    "onboarding:read": "onboarding:read";
+    "onboarding:write": "onboarding:write";
+    read: "read";
+    "runner:lease": "runner:lease";
+    "runner:report": "runner:report";
+    "source:read": "source:read";
+}>;
+export declare const credentialKindSchema: z.ZodEnum<{
+    api_key: "api_key";
+    browser_token: "browser_token";
+    dpop: "dpop";
+    local: "local";
+    service_credential: "service_credential";
+}>;
+export declare const authPrincipalSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        api_key: "api_key";
+        browser_token: "browser_token";
+        dpop: "dpop";
+        local: "local";
+        service_credential: "service_credential";
+    }>;
+    tenantId: z.ZodOptional<z.ZodUUID>;
+    projectId: z.ZodOptional<z.ZodUUID>;
+    environmentId: z.ZodOptional<z.ZodUUID>;
+    credentialId: z.ZodOptional<z.ZodUUID>;
+    scopes: z.ZodArray<z.ZodEnum<{
+        admin: "admin";
+        "changes:write": "changes:write";
+        "conformance:submit": "conformance:submit";
+        "experiments:create": "experiments:create";
+        "experiments:run": "experiments:run";
+        ingest: "ingest";
+        offline_access: "offline_access";
+        "onboarding:manage": "onboarding:manage";
+        "onboarding:read": "onboarding:read";
+        "onboarding:write": "onboarding:write";
+        read: "read";
+        "runner:lease": "runner:lease";
+        "runner:report": "runner:report";
+        "source:read": "source:read";
+    }>>;
+    expiresAt: z.ZodOptional<z.ZodISODateTime>;
+}, z.core.$strict>;
+export declare const tenantBootstrapSchema: z.ZodObject<{
+    tenant: z.ZodObject<{
+        id: z.ZodOptional<z.ZodUUID>;
+        slug: z.ZodString;
+        name: z.ZodString;
+    }, z.core.$strict>;
+    adminKeyName: z.ZodDefault<z.ZodString>;
+}, z.core.$strict>;
+export declare const credentialCreateSchema: z.ZodObject<{
+    name: z.ZodString;
+    projectId: z.ZodOptional<z.ZodUUID>;
+    scopes: z.ZodArray<z.ZodEnum<{
+        admin: "admin";
+        "changes:write": "changes:write";
+        "conformance:submit": "conformance:submit";
+        "experiments:create": "experiments:create";
+        "experiments:run": "experiments:run";
+        ingest: "ingest";
+        offline_access: "offline_access";
+        "onboarding:manage": "onboarding:manage";
+        "onboarding:read": "onboarding:read";
+        "onboarding:write": "onboarding:write";
+        read: "read";
+        "runner:lease": "runner:lease";
+        "runner:report": "runner:report";
+        "source:read": "source:read";
+    }>>;
+    expiresAt: z.ZodOptional<z.ZodISODateTime>;
+}, z.core.$strict>;
+export declare const credentialListQuerySchema: z.ZodObject<{
+    projectId: z.ZodOptional<z.ZodUUID>;
+    includeRevoked: z.ZodDefault<z.ZodCodec<z.ZodString, z.ZodBoolean>>;
+}, z.core.$strict>;
+export declare const browserTokenCreateSchema: z.ZodObject<{
+    projectId: z.ZodUUID;
+    ttlSeconds: z.ZodDefault<z.ZodNumber>;
+    origin: z.ZodOptional<z.ZodURL>;
+}, z.core.$strict>;
+export declare const authAuditListQuerySchema: z.ZodObject<{
+    projectId: z.ZodOptional<z.ZodUUID>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strict>;
+export declare const credentialIdParamsSchema: z.ZodObject<{
+    id: z.ZodUUID;
+}, z.core.$strict>;
+export type AuthMode = z.infer<typeof authModeSchema>;
+export type AuthScope = z.infer<typeof authScopeSchema>;
+export type AuthPrincipal = z.infer<typeof authPrincipalSchema>;
+export type TenantBootstrapInput = z.infer<typeof tenantBootstrapSchema>;
+export type CredentialCreateInput = z.infer<typeof credentialCreateSchema>;
+export type BrowserTokenCreateInput = z.infer<typeof browserTokenCreateSchema>;
+export type ProbeAuth = {
+    token: string;
+    getToken?: never;
+} | {
+    token?: never;
+    getToken: () => string | Promise<string>;
+};
+export declare function resolveProbeAuthToken(auth?: ProbeAuth): Promise<string | undefined>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/security/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/security/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,cAAc;;;;EAA+C,CAAC;AAC3E,eAAO,MAAM,UAAU,YACrB,QAAQ,EACR,MAAM,EACN,OAAO,EACP,eAAe,EACf,aAAa,EACb,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,CACR,CAAC;AACX,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;EAAqB,CAAC;AAClD,eAAO,MAAM,oBAAoB;;;;;;EAA8E,CAAC;AAEhH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAQ9B,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;kBAOhC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;kBAiBjC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;kBAGpC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;kBAInC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;kBAGnC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;kBAAmC,CAAC;AAEzE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACzE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC3E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE/E,MAAM,MAAM,SAAS,GACjB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,KAAK,CAAA;CAAE,GACnC;IAAE,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CAAE,CAAC;AAEhE,wBAAsB,qBAAqB,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAMzF"}

package/dist/security/auth.js

@@ -0,0 +1,80 @@
+import { z } from "zod";
+export const authModeSchema = z.enum(["disabled", "optional", "required"]);
+export const authScopes = [
+    "ingest",
+    "read",
+    "admin",
+    "changes:write",
+    "source:read",
+    "experiments:create",
+    "experiments:run",
+    "runner:lease",
+    "runner:report",
+    "onboarding:manage",
+    "onboarding:write",
+    "onboarding:read",
+    "conformance:submit",
+    "offline_access",
+];
+export const authScopeSchema = z.enum(authScopes);
+export const credentialKindSchema = z.enum(["api_key", "service_credential", "browser_token", "dpop", "local"]);
+export const authPrincipalSchema = z.strictObject({
+    kind: credentialKindSchema,
+    tenantId: z.uuid().optional(),
+    projectId: z.uuid().optional(),
+    environmentId: z.uuid().optional(),
+    credentialId: z.uuid().optional(),
+    scopes: z.array(authScopeSchema).min(1).max(authScopes.length),
+    expiresAt: z.iso.datetime({ offset: true }).optional(),
+});
+export const tenantBootstrapSchema = z.strictObject({
+    tenant: z.strictObject({
+        id: z.uuid().optional(),
+        slug: z.string().min(2).max(128).regex(/^[a-z0-9]+(?:[a-z0-9-]*[a-z0-9])?$/u),
+        name: z.string().min(1).max(256),
+    }),
+    adminKeyName: z.string().min(1).max(128).default("initial-admin"),
+});
+export const credentialCreateSchema = z.strictObject({
+    name: z.string().min(1).max(128),
+    projectId: z.uuid().optional(),
+    scopes: z.array(authScopeSchema).min(1).max(authScopes.length),
+    expiresAt: z.iso.datetime({ offset: true }).optional(),
+}).superRefine((credential, context) => {
+    if (new Set(credential.scopes).size !== credential.scopes.length)
+        context.addIssue({ code: "custom", path: ["scopes"], message: "Credential scopes must be unique." });
+    if (credential.scopes.includes("admin") && credential.projectId !== undefined) {
+        context.addIssue({ code: "custom", path: ["scopes"], message: "Admin credentials must be tenant-scoped, not project-scoped." });
+    }
+    const privilegedProjectScopes = ["changes:write", "source:read", "experiments:create", "experiments:run", "runner:lease", "runner:report", "onboarding:write", "onboarding:read", "conformance:submit"];
+    if (credential.scopes.some((scope) => privilegedProjectScopes.includes(scope)) && credential.projectId === undefined) {
+        context.addIssue({ code: "custom", path: ["projectId"], message: "Change Debug and Runner credentials must be project-scoped." });
+    }
+    if (credential.scopes.includes("admin") && credential.scopes.some((scope) => privilegedProjectScopes.includes(scope))) {
+        context.addIssue({ code: "custom", path: ["scopes"], message: "Admin and privileged Change Debug scopes must use separate credentials." });
+    }
+});
+export const credentialListQuerySchema = z.strictObject({
+    projectId: z.uuid().optional(),
+    includeRevoked: z.stringbool().default(false),
+});
+export const browserTokenCreateSchema = z.strictObject({
+    projectId: z.uuid(),
+    ttlSeconds: z.number().int().min(30).max(900).default(300),
+    origin: z.url().optional(),
+});
+export const authAuditListQuerySchema = z.strictObject({
+    projectId: z.uuid().optional(),
+    limit: z.coerce.number().int().min(1).max(500).default(100),
+});
+export const credentialIdParamsSchema = z.strictObject({ id: z.uuid() });
+export async function resolveProbeAuthToken(auth) {
+    const token = auth === undefined ? undefined : "token" in auth && auth.token !== undefined ? auth.token : await auth.getToken();
+    const normalized = token?.trim();
+    if (normalized === "" || normalized === undefined)
+        return undefined;
+    if (normalized.length > 8_192 || /[\r\n]/u.test(normalized))
+        throw new Error("ProbeMap auth token contains invalid header characters or exceeds the safe limit.");
+    return normalized;
+}
+//# sourceMappingURL=auth.js.map

package/dist/security/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/security/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,QAAQ;IACR,MAAM;IACN,OAAO;IACP,eAAe;IACf,aAAa;IACb,oBAAoB;IACpB,iBAAiB;IACjB,cAAc;IACd,eAAe;IACf,mBAAmB;IACnB,kBAAkB;IAClB,iBAAiB;IACjB,oBAAoB;IACpB,gBAAgB;CACR,CAAC;AACX,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAClD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEhH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,YAAY,CAAC;IAChD,IAAI,EAAE,oBAAoB;IAC1B,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC9B,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;IAC9D,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,YAAY,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC;QACrB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,qCAAqC,CAAC;QAC7E,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACjC,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;CAClE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;IAC9D,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE;IACrC,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;IACvK,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC9E,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,8DAA8D,EAAE,CAAC,CAAC;IAClI,CAAC;IACD,MAAM,uBAAuB,GAAgB,CAAC,eAAe,EAAE,aAAa,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;IACrN,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACrH,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,6DAA6D,EAAE,CAAC,CAAC;IACpI,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACtH,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,yEAAyE,EAAE,CAAC,CAAC;IAC7I,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC9B,cAAc,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC9C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,YAAY,CAAC;IACrD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC1D,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,YAAY,CAAC;IACrD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;CAC5D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAazE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAgB;IAC1D,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IAChI,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IACjC,IAAI,UAAU,KAAK,EAAE,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACpE,IAAI,UAAU,CAAC,MAAM,GAAG,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;IAClK,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/serialization/safe-snapshot.d.ts

@@ -0,0 +1,2 @@
+export declare function safeSnapshot(value: unknown): unknown;
+//# sourceMappingURL=safe-snapshot.d.ts.map

package/dist/serialization/safe-snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-snapshot.d.ts","sourceRoot":"","sources":["../../src/serialization/safe-snapshot.ts"],"names":[],"mappings":"AAyDA,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAMpD"}

package/dist/serialization/safe-snapshot.js

@@ -0,0 +1,67 @@
+const maxDepth = 12;
+const maxArrayItems = 2_000;
+const maxObjectKeys = 500;
+function snapshot(value, depth, seen) {
+    if (value === null || typeof value === "string" || typeof value === "boolean")
+        return value;
+    if (typeof value === "number")
+        return Number.isFinite(value) ? value : String(value);
+    if (typeof value === "bigint" || typeof value === "symbol" || typeof value === "function") {
+        return String(value);
+    }
+    if (value === undefined)
+        return null;
+    if (depth >= maxDepth)
+        return "[MaxDepth]";
+    if (value instanceof Date) {
+        return Number.isNaN(value.getTime()) ? "Invalid Date" : value.toISOString();
+    }
+    if (value instanceof Error) {
+        return { name: value.name, message: value.message, stack: value.stack ?? null };
+    }
+    if (typeof value !== "object")
+        return String(value);
+    if (seen.has(value))
+        return "[Circular]";
+    seen.add(value);
+    try {
+        if (Array.isArray(value)) {
+            return value.slice(0, maxArrayItems).map((item) => snapshot(item, depth + 1, seen));
+        }
+        if (value instanceof Map) {
+            return [...value.entries()]
+                .slice(0, maxObjectKeys)
+                .map(([key, item]) => [snapshot(key, depth + 1, seen), snapshot(item, depth + 1, seen)]);
+        }
+        if (value instanceof Set) {
+            return [...value.values()]
+                .slice(0, maxArrayItems)
+                .map((item) => snapshot(item, depth + 1, seen));
+        }
+        if (ArrayBuffer.isView(value)) {
+            return Array.from(new Uint8Array(value.buffer, value.byteOffset, value.byteLength)).slice(0, maxArrayItems);
+        }
+        const result = {};
+        for (const key of Object.keys(value).slice(0, maxObjectKeys)) {
+            try {
+                result[key] = snapshot(value[key], depth + 1, seen);
+            }
+            catch {
+                result[key] = "[Unserializable]";
+            }
+        }
+        return result;
+    }
+    finally {
+        seen.delete(value);
+    }
+}
+export function safeSnapshot(value) {
+    try {
+        return snapshot(value, 0, new WeakSet());
+    }
+    catch {
+        return "[Unserializable]";
+    }
+}
+//# sourceMappingURL=safe-snapshot.js.map

package/dist/serialization/safe-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-snapshot.js","sourceRoot":"","sources":["../../src/serialization/safe-snapshot.ts"],"names":[],"mappings":"AAAA,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa,EAAE,IAAqB;IACpE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5F,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAC1F,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,KAAK,IAAI,QAAQ;QAAE,OAAO,YAAY,CAAC;IAC3C,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAC9E,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAEzC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,KAAK,YAAY,GAAG,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;iBACxB,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;iBACvB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,KAAK,YAAY,GAAG,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;iBACvB,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;iBACvB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CACvF,CAAC,EACD,aAAa,CACd,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;YACnF,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC;YACnC,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "@probemap/shared",
+  "version": "0.1.0",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "zod": "4.4.3"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run --passWithNoTests"
+  }
+}