@qlever-llc/trellis 0.10.2 → 0.10.3-rc.4

package/script/npm/src/_dnt.polyfills.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"_dnt.polyfills.d.ts","sourceRoot":"","sources":["../../../src/_dnt.polyfills.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,KAAK;QACb,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB;CACF;AAED,OAAO,EAAE,CAAC;AAgBV,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd;;;;WAIG;QACH,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;KAC5C;CACF;AAED,OAAO,EAAE,CAAC;AACV;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAgC,KAAK,GAAG,EAAE,MAAM,UAAU,CAAC;AAGlE,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,UAAU;QAClB;;;;;;;;;;;;;;WAcG;QACH,GAAG,EAAE,MAAM,CAAC;QACZ;;;;;;;;;;;;WAYG;QACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,GAAG,GAAG,SAAS,GAAG,MAAM,CAAC;QACtE;;;;;;;;WAQG;QACH,IAAI,EAAE,OAAO,CAAC;QAEd;;;;;;;;;;;;WAYG;QACH,QAAQ,EAAE,MAAM,CAAC;QAEjB;;;;;;;;;;;;WAYG;QACH,OAAO,EAAE,MAAM,CAAC;KACjB;CACF;AAED,KAAK,WAAW,GAAG,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;AACpD,KAAK,UAAU,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;AACnD,UAAU,0BAA0B;IAClC,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;CACxD;AACD,UAAU,0BAA0B;IAClC,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,CAAC;CACtC;AACD,UAAU,kBACR,SAAQ,0BAA0B,EAAE,0BAA0B;CAC/D;AAiBD,eAAO,IAAI,6BAA6B,EA2BnC,0BAA0B,CAAC;AAMhC,eAAO,IAAI,6BAA6B,EA4DnC,0BAA0B,CAAC;AAMhC,eAAO,IAAI,oBAAoB,EAoB1B,kBAAkB,CAAC"}

package/script/npm/src/_dnt.shims.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"_dnt.shims.d.ts","sourceRoot":"","sources":["../../../src/_dnt.shims.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAKvC,eAAO,MAAM,aAAa;;CAA2C,CAAC"}

package/script/npm/src/auth/browser/login.d.ts

@@ -1,34 +0,0 @@
-import { type AuthStartResponse, type BindResponse, type BindSuccessResponse } from "../schemas.js";
-import type { SessionKeyHandle } from "./session.js";
-export type { AuthStartFlowResponse, AuthStartRequest, AuthStartResponse, BindResponse, BindSuccessResponse, ContractApproval, SentinelCreds, } from "../schemas.js";
-export type AuthConfig = {
-    authUrl: string;
-};
-export declare function buildLoginUrl(config: AuthConfig, provider: string | undefined, redirectTo: string, handle: SessionKeyHandle, contract: Record<string, unknown>, context?: unknown): Promise<string>;
-export declare function buildLoginUrl(args: {
-    authUrl: string;
-    provider?: string;
-    redirectTo: string;
-    handle: SessionKeyHandle;
-    contract: Record<string, unknown>;
-    context?: unknown;
-}): Promise<string>;
-export declare function buildLoginUrl(args: {
-    config: AuthConfig;
-    provider?: string;
-    redirectTo: string;
-    handle: SessionKeyHandle;
-    contract: Record<string, unknown>;
-    context?: unknown;
-}): Promise<string>;
-export declare function startAuthRequest(args: {
-    authUrl: string;
-    provider?: string;
-    redirectTo: string;
-    handle: SessionKeyHandle;
-    contract: Record<string, unknown>;
-    context?: unknown;
-}): Promise<AuthStartResponse>;
-export declare function isBindSuccessResponse(response: BindResponse): response is BindSuccessResponse;
-export declare function bindFlow(config: AuthConfig, handle: SessionKeyHandle, flowId: string): Promise<BindResponse>;
-//# sourceMappingURL=login.d.ts.map

package/script/npm/src/auth/browser/login.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../../src/auth/browser/login.ts"],"names":[],"mappings":"AAKA,OAAO,EAGL,KAAK,iBAAiB,EAEtB,KAAK,YAAY,EAEjB,KAAK,mBAAmB,EAEzB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGrD,YAAY,EACV,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,GACd,MAAM,eAAe,CAAC;AAEvB,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AA2BF,wBAAsB,aAAa,CACjC,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,gBAAgB,EACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,MAAM,CAAC,CAAC;AACnB,wBAAsB,aAAa,CACjC,IAAI,EAAE;IACJ,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GACA,OAAO,CAAC,MAAM,CAAC,CAAC;AACnB,wBAAsB,aAAa,CACjC,IAAI,EAAE;IACJ,MAAM,EAAE,UAAU,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GACA,OAAO,CAAC,MAAM,CAAC,CAAC;AA0CnB,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAqD7B;AA0ED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,YAAY,GACrB,QAAQ,IAAI,mBAAmB,CAEjC;AAED,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,YAAY,CAAC,CAwBvB"}

package/script/npm/src/auth/browser/login.js

@@ -1,147 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildLoginUrl = buildLoginUrl;
-exports.startAuthRequest = startAuthRequest;
-exports.isBindSuccessResponse = isBindSuccessResponse;
-exports.bindFlow = bindFlow;
-const value_1 = require("typebox/value");
-const mod_js_1 = require("../../contract_support/mod.js");
-const schemas_js_1 = require("../schemas.js");
-const session_js_1 = require("./session.js");
-function contextRecord(value) {
-    if (!value || typeof value !== "object" || Array.isArray(value)) {
-        return undefined;
-    }
-    return value;
-}
-async function buildLoginUrl(argsOrConfig, provider, redirectTo, handle, contract, context) {
-    const resolved = isNestedBuildLoginUrlArgs(argsOrConfig)
-        ? argsOrConfig
-        : isFlatBuildLoginUrlArgs(argsOrConfig)
-            ? {
-                config: { authUrl: argsOrConfig.authUrl },
-                provider: argsOrConfig.provider,
-                redirectTo: argsOrConfig.redirectTo,
-                handle: argsOrConfig.handle,
-                contract: argsOrConfig.contract,
-                context: argsOrConfig.context,
-            }
-            : buildLoginUrlArgsFromPositional(argsOrConfig, provider, redirectTo, handle, contract, context);
-    const response = await startAuthRequest({
-        authUrl: resolved.config.authUrl,
-        provider: resolved.provider,
-        redirectTo: resolved.redirectTo,
-        handle: resolved.handle,
-        contract: resolved.contract,
-        context: resolved.context,
-    });
-    if (response.status !== "flow_started") {
-        throw new Error("Auth request completed without starting a browser flow");
-    }
-    return response.loginUrl;
-}
-async function startAuthRequest(args) {
-    const context = contextRecord(args.context);
-    const contractDigest = isTrellisContractV1(args.contract)
-        ? (0, mod_js_1.digestContractManifest)(args.contract)
-        : undefined;
-    const sig = await (0, session_js_1.oauthInitSig)(args.handle, args.redirectTo, context, args.provider, contractDigest ?? args.contract);
-    const request = value_1.Value.Parse(schemas_js_1.AuthStartRequestSchema, {
-        redirectTo: args.redirectTo,
-        sessionKey: (0, session_js_1.getPublicSessionKey)(args.handle),
-        sig,
-        ...(contractDigest ? { contractDigest } : { contract: args.contract }),
-        ...(args.provider ? { provider: args.provider } : {}),
-        ...(context ? { context } : {}),
-    });
-    let response = await fetch(`${args.authUrl}/auth/requests`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify(request),
-    });
-    if (await authStartNeedsManifest(response)) {
-        const fullSig = await (0, session_js_1.oauthInitSig)(args.handle, args.redirectTo, context, args.provider, args.contract);
-        response = await fetch(`${args.authUrl}/auth/requests`, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({
-                ...request,
-                sig: fullSig,
-                contract: args.contract,
-            }),
-        });
-    }
-    if (!response.ok) {
-        const text = await response.text();
-        throw new Error(`Auth request failed: ${response.status} ${text}`);
-    }
-    return value_1.Value.Parse(schemas_js_1.AuthStartResponseSchema, await response.json());
-}
-async function authStartNeedsManifest(response) {
-    if (response.ok || response.status !== 409)
-        return false;
-    const clone = response.clone();
-    let payload;
-    try {
-        payload = await clone.json();
-    }
-    catch {
-        payload = undefined;
-    }
-    if (payload && typeof payload === "object") {
-        const record = payload;
-        return record.reason === "manifest_required" ||
-            record.code === "manifest_required" ||
-            record.error === "manifest_required" ||
-            record.message === "manifest_required";
-    }
-    return (await response.clone().text()).includes("manifest_required");
-}
-function buildLoginUrlArgsFromPositional(config, provider, redirectTo, handle, contract, context) {
-    if (redirectTo === undefined || handle === undefined || contract === undefined) {
-        throw new TypeError("buildLoginUrl requires redirectTo, handle, and contract");
-    }
-    return {
-        config,
-        provider,
-        redirectTo,
-        handle,
-        contract,
-        context,
-    };
-}
-function isTrellisContractV1(contract) {
-    return contract.format === "trellis.contract.v1" &&
-        typeof contract.id === "string" &&
-        typeof contract.displayName === "string" &&
-        typeof contract.description === "string" &&
-        typeof contract.kind === "string";
-}
-function isNestedBuildLoginUrlArgs(value) {
-    return "config" in value;
-}
-function isFlatBuildLoginUrlArgs(value) {
-    return "authUrl" in value && "redirectTo" in value && "handle" in value &&
-        "contract" in value;
-}
-function isBindSuccessResponse(response) {
-    return response.status === "bound";
-}
-async function bindFlow(config, handle, flowId) {
-    const sessionKey = (0, session_js_1.getPublicSessionKey)(handle);
-    const sig = await (0, session_js_1.bindFlowSig)(handle, flowId);
-    const response = await fetch(`${config.authUrl}/auth/flow/${encodeURIComponent(flowId)}/bind`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ sessionKey, sig }),
-    });
-    if (!response.ok) {
-        const text = await response.text();
-        throw new Error(`Bind failed: ${response.status} ${text}`);
-    }
-    const payload = await response.json();
-    if (payload && typeof payload === "object" && payload.status === "expired") {
-        throw new Error("Bind failed: expired");
-    }
-    return value_1.Value.Parse(schemas_js_1.BindResponseSchema, payload);
-}

package/script/npm/src/auth/browser/portal.d.ts

@@ -1,11 +0,0 @@
-import { type PortalFlowState } from "../protocol.js";
-import type { ApprovalDecision } from "../schemas.js";
-import type { AuthConfig } from "./login.js";
-export type { PortalFlowState } from "../protocol.js";
-export type { ApprovalDecision } from "../schemas.js";
-export declare function portalFlowIdFromUrl(url: URL): string | null;
-export declare function fetchPortalFlowState(config: AuthConfig, flowId: string): Promise<PortalFlowState>;
-export declare function portalProviderLoginUrl(config: AuthConfig, providerId: string, flowId: string): string;
-export declare function submitPortalApproval(config: AuthConfig, flowId: string, decision: ApprovalDecision): Promise<PortalFlowState>;
-export declare function portalRedirectLocation(state: PortalFlowState | null): string | null;
-//# sourceMappingURL=portal.d.ts.map

package/script/npm/src/auth/browser/portal.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"portal.d.ts","sourceRoot":"","sources":["../../../../../src/auth/browser/portal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAyB,MAAM,gBAAgB,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG7C,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAMtD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,IAAI,CAE3D;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,eAAe,CAAC,CAY1B;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,GACb,MAAM,CAKR;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAAC,eAAe,CAAC,CAkB1B;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,eAAe,GAAG,IAAI,GAC5B,MAAM,GAAG,IAAI,CAIf"}

package/script/npm/src/auth/browser/portal.js

@@ -1,44 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.portalFlowIdFromUrl = portalFlowIdFromUrl;
-exports.fetchPortalFlowState = fetchPortalFlowState;
-exports.portalProviderLoginUrl = portalProviderLoginUrl;
-exports.submitPortalApproval = submitPortalApproval;
-exports.portalRedirectLocation = portalRedirectLocation;
-const protocol_js_1 = require("../protocol.js");
-const value_1 = require("typebox/value");
-function authBaseUrl(config) {
-    return config.authUrl.replace(/\/$/, "");
-}
-function portalFlowIdFromUrl(url) {
-    return url.searchParams.get("flowId");
-}
-async function fetchPortalFlowState(config, flowId) {
-    const response = await fetch(`${authBaseUrl(config)}/auth/flow/${encodeURIComponent(flowId)}`);
-    if (!response.ok) {
-        throw new Error(`Failed to load portal flow (${response.status})`);
-    }
-    return value_1.Value.Parse(protocol_js_1.PortalFlowStateSchema, await response.json());
-}
-function portalProviderLoginUrl(config, providerId, flowId) {
-    const base = `${authBaseUrl(config)}/auth/login/${encodeURIComponent(providerId)}`;
-    return `${base}?flowId=${encodeURIComponent(flowId)}`;
-}
-async function submitPortalApproval(config, flowId, decision) {
-    const response = await fetch(`${authBaseUrl(config)}/auth/flow/${encodeURIComponent(flowId)}/approval`, {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ approved: decision === "approved" }),
-    });
-    if (!response.ok) {
-        throw new Error(`Approval request failed (${response.status})`);
-    }
-    return value_1.Value.Parse(protocol_js_1.PortalFlowStateSchema, await response.json());
-}
-function portalRedirectLocation(state) {
-    if (state?.status === "redirect")
-        return state.location;
-    if (state?.status === "approval_denied")
-        return state.returnLocation ?? null;
-    return null;
-}

package/script/npm/src/auth/browser/session.d.ts

@@ -1,29 +0,0 @@
-export type SessionKeyHandle = {
-    privateKey: CryptoKey;
-    publicKey: CryptoKey;
-    publicKeyRaw: Uint8Array;
-    sessionKey: string;
-    persistence?: SessionKeyPersistenceMode;
-    expiresAt?: number;
-};
-export type SessionKeyPersistenceMode = "temporary" | "remembered";
-export type SessionKeyOptions = {
-    /** Defaults to remembered IndexedDB storage. */
-    persistence?: SessionKeyPersistenceMode;
-    /** Expiry for remembered keys, as epoch milliseconds or a Date. */
-    expiresAt?: number | Date;
-    /** Relative expiry for remembered keys. Ignored when expiresAt is set. */
-    ttlMs?: number;
-};
-export declare function generateSessionKey(options?: SessionKeyOptions): Promise<SessionKeyHandle>;
-export declare function loadSessionKey(options?: Pick<SessionKeyOptions, "persistence">): Promise<SessionKeyHandle | null>;
-export declare function getOrCreateSessionKey(options?: SessionKeyOptions): Promise<SessionKeyHandle>;
-export declare function signBytes(handle: SessionKeyHandle, data: Uint8Array): Promise<Uint8Array>;
-export declare function getPublicSessionKey(handle: SessionKeyHandle): string;
-export declare function oauthInitSig(handle: SessionKeyHandle, redirectTo: string, context?: unknown, provider?: string, contract?: Record<string, unknown> | string): Promise<string>;
-export declare function bindFlowSig(handle: SessionKeyHandle, flowId: string): Promise<string>;
-export declare function natsConnectSigForIat(handle: SessionKeyHandle, iat: number, contractDigest: string): Promise<string>;
-export declare function createRpcProof(handle: SessionKeyHandle, subject: string, payload: Uint8Array, requestId: string, iat: number): Promise<string>;
-export declare function clearSessionKey(options?: Pick<SessionKeyOptions, "persistence">): Promise<void>;
-export declare function hasSessionKey(options?: Pick<SessionKeyOptions, "persistence">): Promise<boolean>;
-//# sourceMappingURL=session.d.ts.map

package/script/npm/src/auth/browser/session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../../../src/auth/browser/session.ts"],"names":[],"mappings":"AAgBA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,UAAU,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,WAAW,GAAG,YAAY,CAAC;AAEnE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,gDAAgD;IAChD,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAWF,wBAAsB,kBAAkB,CACtC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CA8B3B;AAED,wBAAsB,cAAc,CAClC,OAAO,GAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAM,GACnD,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAalC;AAED,wBAAsB,qBAAqB,CACzC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CAI3B;AAED,wBAAsB,SAAS,CAC7B,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,UAAU,CAAC,CAOrB;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAEpE;AAED,wBAAsB,YAAY,CAChC,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,OAAO,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAC1C,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,wBAAsB,WAAW,CAC/B,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,gBAAgB,EACxB,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,wBAAsB,cAAc,CAClC,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,wBAAsB,eAAe,CACnC,OAAO,GAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAM,GACnD,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAsB,aAAa,CACjC,OAAO,GAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAM,GACnD,OAAO,CAAC,OAAO,CAAC,CAIlB"}

package/script/npm/src/auth/browser/session.js

@@ -1,122 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.generateSessionKey = generateSessionKey;
-exports.loadSessionKey = loadSessionKey;
-exports.getOrCreateSessionKey = getOrCreateSessionKey;
-exports.signBytes = signBytes;
-exports.getPublicSessionKey = getPublicSessionKey;
-exports.oauthInitSig = oauthInitSig;
-exports.bindFlowSig = bindFlowSig;
-exports.natsConnectSigForIat = natsConnectSigForIat;
-exports.createRpcProof = createRpcProof;
-exports.clearSessionKey = clearSessionKey;
-exports.hasSessionKey = hasSessionKey;
-const utils_js_1 = require("../utils.js");
-const proof_js_1 = require("../proof.js");
-const session_auth_js_1 = require("../session_auth.js");
-const storage_js_1 = require("./storage.js");
-let temporarySessionKey = null;
-function resolveExpiresAt(options) {
-    if (options.expiresAt instanceof Date)
-        return options.expiresAt.getTime();
-    if (typeof options.expiresAt === "number")
-        return options.expiresAt;
-    if (typeof options.ttlMs === "number")
-        return Date.now() + options.ttlMs;
-    return undefined;
-}
-async function generateSessionKey(options = {}) {
-    const persistence = options.persistence ?? "remembered";
-    const expiresAt = resolveExpiresAt(options);
-    const keyPair = await crypto.subtle.generateKey({ name: "Ed25519" }, false, ["sign", "verify"]);
-    const publicKeyRaw = new Uint8Array(await crypto.subtle.exportKey("raw", keyPair.publicKey));
-    const sessionKey = (0, utils_js_1.base64urlEncode)(publicKeyRaw);
-    const handle = {
-        privateKey: keyPair.privateKey,
-        publicKey: keyPair.publicKey,
-        publicKeyRaw,
-        sessionKey,
-        persistence,
-        ...(expiresAt === undefined ? {} : { expiresAt }),
-    };
-    if (persistence === "temporary") {
-        temporarySessionKey = handle;
-    }
-    else {
-        await (0, storage_js_1.storeKeyPair)(keyPair, publicKeyRaw, { expiresAt });
-    }
-    return handle;
-}
-async function loadSessionKey(options = {}) {
-    const persistence = options.persistence ?? "remembered";
-    if (persistence === "temporary")
-        return temporarySessionKey;
-    const stored = await (0, storage_js_1.loadKeyPair)();
-    if (!stored)
-        return null;
-    return {
-        privateKey: stored.privateKey,
-        publicKey: stored.publicKey,
-        publicKeyRaw: stored.publicKeyRaw,
-        sessionKey: (0, utils_js_1.base64urlEncode)(stored.publicKeyRaw),
-        persistence: "remembered",
-        ...(stored.expiresAt === undefined ? {} : { expiresAt: stored.expiresAt }),
-    };
-}
-async function getOrCreateSessionKey(options = {}) {
-    const existing = await loadSessionKey(options);
-    if (existing)
-        return existing;
-    return await generateSessionKey(options);
-}
-async function signBytes(handle, data) {
-    const sig = await crypto.subtle.sign({ name: "Ed25519" }, handle.privateKey, (0, utils_js_1.toArrayBuffer)(data));
-    return new Uint8Array(sig);
-}
-function getPublicSessionKey(handle) {
-    return handle.sessionKey;
-}
-async function oauthInitSig(handle, redirectTo, context, provider, contract) {
-    const canonicalContext = (0, utils_js_1.canonicalizeJsonValue)(context ?? null);
-    const payload = contract === undefined
-        ? `${redirectTo}:${canonicalContext}`
-        : `${redirectTo}:${provider ?? ""}:${(0, utils_js_1.canonicalizeJsonValue)(contract)}:${canonicalContext}`;
-    const digest = await (0, utils_js_1.sha256)((0, utils_js_1.utf8)(`oauth-init:${payload}`));
-    const sig = await signBytes(handle, digest);
-    return (0, utils_js_1.base64urlEncode)(sig);
-}
-async function bindFlowSig(handle, flowId) {
-    const digest = await (0, utils_js_1.sha256)((0, utils_js_1.utf8)(`bind-flow:${flowId}`));
-    const sig = await signBytes(handle, digest);
-    return (0, utils_js_1.base64urlEncode)(sig);
-}
-async function natsConnectSigForIat(handle, iat, contractDigest) {
-    const digest = await (0, utils_js_1.sha256)((0, utils_js_1.utf8)(`nats-connect:${(0, session_auth_js_1.buildNatsConnectSignaturePayload)(iat, contractDigest)}`));
-    const sig = await signBytes(handle, digest);
-    return (0, utils_js_1.base64urlEncode)(sig);
-}
-async function createRpcProof(handle, subject, payload, requestId, iat) {
-    const payloadHash = await (0, utils_js_1.sha256)(payload);
-    return await (0, proof_js_1.createProof)(handle.privateKey, {
-        sessionKey: handle.sessionKey,
-        subject,
-        payloadHash,
-        iat,
-        requestId,
-    });
-}
-async function clearSessionKey(options = {}) {
-    const persistence = options.persistence;
-    if (persistence === undefined || persistence === "temporary") {
-        temporarySessionKey = null;
-    }
-    if (persistence === undefined || persistence === "remembered") {
-        await (0, storage_js_1.deleteKeyPair)();
-    }
-}
-async function hasSessionKey(options = {}) {
-    const persistence = options.persistence ?? "remembered";
-    if (persistence === "temporary")
-        return temporarySessionKey !== null;
-    return await (0, storage_js_1.hasKeyPair)();
-}

package/script/npm/src/auth/browser/storage.d.ts

@@ -1,17 +0,0 @@
-export type StoredKeyPair = {
-    id: string;
-    privateKey: CryptoKey;
-    publicKey: CryptoKey;
-    publicKeyRaw: Uint8Array;
-    createdAt: number;
-    persistence?: "remembered";
-    expiresAt?: number;
-};
-export type StoredKeyPairOptions = {
-    expiresAt?: number;
-};
-export declare function storeKeyPair(keyPair: CryptoKeyPair, publicKeyRaw: Uint8Array, options?: StoredKeyPairOptions): Promise<void>;
-export declare function loadKeyPair(): Promise<StoredKeyPair | null>;
-export declare function deleteKeyPair(): Promise<void>;
-export declare function hasKeyPair(): Promise<boolean>;
-//# sourceMappingURL=storage.d.ts.map

package/script/npm/src/auth/browser/storage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../../../src/auth/browser/storage.ts"],"names":[],"mappings":"AAqBA,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,UAAU,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,YAAY,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,wBAAsB,YAAY,CAChC,OAAO,EAAE,aAAa,EACtB,YAAY,EAAE,UAAU,EACxB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAoBjE;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAYnD;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAGnD"}

package/script/npm/src/auth/browser/storage.js

@@ -1,79 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.storeKeyPair = storeKeyPair;
-exports.loadKeyPair = loadKeyPair;
-exports.deleteKeyPair = deleteKeyPair;
-exports.hasKeyPair = hasKeyPair;
-const DB_NAME = "trellis-auth";
-const DB_VERSION = 1;
-const STORE_NAME = "keys";
-const KEY_ID = "trellis-session-key";
-function openDB() {
-    return new Promise((resolve, reject) => {
-        const request = indexedDB.open(DB_NAME, DB_VERSION);
-        request.onerror = () => reject(request.error);
-        request.onsuccess = () => resolve(request.result);
-        request.onupgradeneeded = () => {
-            const db = request.result;
-            if (!db.objectStoreNames.contains(STORE_NAME)) {
-                db.createObjectStore(STORE_NAME, { keyPath: "id" });
-            }
-        };
-    });
-}
-async function storeKeyPair(keyPair, publicKeyRaw, options = {}) {
-    const db = await openDB();
-    return new Promise((resolve, reject) => {
-        const tx = db.transaction(STORE_NAME, "readwrite");
-        const store = tx.objectStore(STORE_NAME);
-        const record = {
-            id: KEY_ID,
-            privateKey: keyPair.privateKey,
-            publicKey: keyPair.publicKey,
-            publicKeyRaw,
-            createdAt: Date.now(),
-            persistence: "remembered",
-            ...(options.expiresAt === undefined
-                ? {}
-                : { expiresAt: options.expiresAt }),
-        };
-        const request = store.put(record);
-        request.onerror = () => reject(request.error);
-        request.onsuccess = () => resolve();
-        tx.oncomplete = () => db.close();
-    });
-}
-async function loadKeyPair() {
-    const db = await openDB();
-    return new Promise((resolve, reject) => {
-        const tx = db.transaction(STORE_NAME, "readwrite");
-        const store = tx.objectStore(STORE_NAME);
-        const request = store.get(KEY_ID);
-        request.onerror = () => reject(request.error);
-        request.onsuccess = () => {
-            const result = request.result;
-            if (result?.expiresAt !== undefined && result.expiresAt <= Date.now()) {
-                store.delete(KEY_ID);
-                resolve(null);
-                return;
-            }
-            resolve(result ?? null);
-        };
-        tx.oncomplete = () => db.close();
-    });
-}
-async function deleteKeyPair() {
-    const db = await openDB();
-    return new Promise((resolve, reject) => {
-        const tx = db.transaction(STORE_NAME, "readwrite");
-        const store = tx.objectStore(STORE_NAME);
-        const request = store.delete(KEY_ID);
-        request.onerror = () => reject(request.error);
-        request.onsuccess = () => resolve();
-        tx.oncomplete = () => db.close();
-    });
-}
-async function hasKeyPair() {
-    const keyPair = await loadKeyPair();
-    return keyPair !== null;
-}

package/script/npm/src/auth/browser.d.ts

@@ -1,14 +0,0 @@
-/**
- * @module
- * Browser-based authentication utilities for session-key based authentication.
- * Uses WebCrypto API and IndexedDB for secure key storage.
- */
-import "../_dnt.polyfills.js";
-export { type AuthConfig, type AuthStartFlowResponse, type AuthStartRequest, type AuthStartResponse, bindFlow, type BindResponse, type BindSuccessResponse, buildLoginUrl, isBindSuccessResponse, type SentinelCreds, startAuthRequest, } from "./browser/login.js";
-export { type ApprovalDecision, fetchPortalFlowState, portalFlowIdFromUrl, type PortalFlowState, type PortalFlowState as BrowserPortalFlowState, portalProviderLoginUrl, portalRedirectLocation, submitPortalApproval, } from "./browser/portal.js";
-export { bindFlowSig, clearSessionKey, createRpcProof, generateSessionKey, getOrCreateSessionKey, getPublicSessionKey, hasSessionKey, loadSessionKey, natsConnectSigForIat, type SessionKeyHandle, type SessionKeyOptions, type SessionKeyPersistenceMode, signBytes, } from "./browser/session.js";
-export { deleteKeyPair, hasKeyPair } from "./browser/storage.js";
-export { approvalCapabilityKeys, type ApprovalDecision as ApprovalDecisionData, ApprovalDecisionSchema, type AuthStartFlowResponse as AuthStartFlowResponseData, AuthStartFlowResponseSchema, type AuthStartRequest as AuthStartRequestData, AuthStartRequestSchema, type AuthStartResponse as AuthStartResponseData, AuthStartResponseSchema, type BindResponse as BindResponseData, BindResponseSchema, type BindSuccessResponse as BindSuccessResponseData, BindSuccessResponseSchema, type ClientTransportEndpoints as ClientTransportEndpointsData, ClientTransportEndpointsSchema, type ClientTransports as ClientTransportsData, ClientTransportsSchema, type ContractApproval as ContractApprovalData, type ContractApprovalCapability as ContractApprovalCapabilityData, ContractApprovalSchema, type NatsAuthTokenV1 as NatsAuthTokenV1Data, NatsAuthTokenV1Schema, type SentinelCreds as SentinelCredsData, SentinelCredsSchema, } from "./schemas.js";
-export type { NatsAuthTokenV1 } from "./types.js";
-export { base64urlDecode, base64urlEncode, sha256, toArrayBuffer, utf8, } from "./utils.js";
-//# sourceMappingURL=browser.d.ts.map

package/script/npm/src/auth/browser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../../../src/auth/browser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,sBAAsB,CAAC;AAG9B,OAAO,EACL,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,QAAQ,EACR,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,aAAa,EACb,qBAAqB,EACrB,KAAK,aAAa,EAClB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,gBAAgB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,IAAI,sBAAsB,EAC9C,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,SAAS,GACV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,sBAAsB,EACtB,KAAK,qBAAqB,IAAI,yBAAyB,EACvD,2BAA2B,EAC3B,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,sBAAsB,EACtB,KAAK,iBAAiB,IAAI,qBAAqB,EAC/C,uBAAuB,EACvB,KAAK,YAAY,IAAI,gBAAgB,EACrC,kBAAkB,EAClB,KAAK,mBAAmB,IAAI,uBAAuB,EACnD,yBAAyB,EACzB,KAAK,wBAAwB,IAAI,4BAA4B,EAC7D,8BAA8B,EAC9B,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,sBAAsB,EACtB,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,KAAK,0BAA0B,IAAI,8BAA8B,EACjE,sBAAsB,EACtB,KAAK,eAAe,IAAI,mBAAmB,EAC3C,qBAAqB,EACrB,KAAK,aAAa,IAAI,iBAAiB,EACvC,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EACL,eAAe,EACf,eAAe,EACf,MAAM,EACN,aAAa,EACb,IAAI,GACL,MAAM,YAAY,CAAC"}

package/script/npm/src/auth/browser.js

@@ -1,53 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.utf8 = exports.toArrayBuffer = exports.sha256 = exports.base64urlEncode = exports.base64urlDecode = exports.SentinelCredsSchema = exports.NatsAuthTokenV1Schema = exports.ContractApprovalSchema = exports.ClientTransportsSchema = exports.ClientTransportEndpointsSchema = exports.BindSuccessResponseSchema = exports.BindResponseSchema = exports.AuthStartResponseSchema = exports.AuthStartRequestSchema = exports.AuthStartFlowResponseSchema = exports.ApprovalDecisionSchema = exports.approvalCapabilityKeys = exports.hasKeyPair = exports.deleteKeyPair = exports.signBytes = exports.natsConnectSigForIat = exports.loadSessionKey = exports.hasSessionKey = exports.getPublicSessionKey = exports.getOrCreateSessionKey = exports.generateSessionKey = exports.createRpcProof = exports.clearSessionKey = exports.bindFlowSig = exports.submitPortalApproval = exports.portalRedirectLocation = exports.portalProviderLoginUrl = exports.portalFlowIdFromUrl = exports.fetchPortalFlowState = exports.startAuthRequest = exports.isBindSuccessResponse = exports.buildLoginUrl = exports.bindFlow = void 0;
-/**
- * @module
- * Browser-based authentication utilities for session-key based authentication.
- * Uses WebCrypto API and IndexedDB for secure key storage.
- */
-require("../_dnt.polyfills.js");
-var login_js_1 = require("./browser/login.js");
-Object.defineProperty(exports, "bindFlow", { enumerable: true, get: function () { return login_js_1.bindFlow; } });
-Object.defineProperty(exports, "buildLoginUrl", { enumerable: true, get: function () { return login_js_1.buildLoginUrl; } });
-Object.defineProperty(exports, "isBindSuccessResponse", { enumerable: true, get: function () { return login_js_1.isBindSuccessResponse; } });
-Object.defineProperty(exports, "startAuthRequest", { enumerable: true, get: function () { return login_js_1.startAuthRequest; } });
-var portal_js_1 = require("./browser/portal.js");
-Object.defineProperty(exports, "fetchPortalFlowState", { enumerable: true, get: function () { return portal_js_1.fetchPortalFlowState; } });
-Object.defineProperty(exports, "portalFlowIdFromUrl", { enumerable: true, get: function () { return portal_js_1.portalFlowIdFromUrl; } });
-Object.defineProperty(exports, "portalProviderLoginUrl", { enumerable: true, get: function () { return portal_js_1.portalProviderLoginUrl; } });
-Object.defineProperty(exports, "portalRedirectLocation", { enumerable: true, get: function () { return portal_js_1.portalRedirectLocation; } });
-Object.defineProperty(exports, "submitPortalApproval", { enumerable: true, get: function () { return portal_js_1.submitPortalApproval; } });
-var session_js_1 = require("./browser/session.js");
-Object.defineProperty(exports, "bindFlowSig", { enumerable: true, get: function () { return session_js_1.bindFlowSig; } });
-Object.defineProperty(exports, "clearSessionKey", { enumerable: true, get: function () { return session_js_1.clearSessionKey; } });
-Object.defineProperty(exports, "createRpcProof", { enumerable: true, get: function () { return session_js_1.createRpcProof; } });
-Object.defineProperty(exports, "generateSessionKey", { enumerable: true, get: function () { return session_js_1.generateSessionKey; } });
-Object.defineProperty(exports, "getOrCreateSessionKey", { enumerable: true, get: function () { return session_js_1.getOrCreateSessionKey; } });
-Object.defineProperty(exports, "getPublicSessionKey", { enumerable: true, get: function () { return session_js_1.getPublicSessionKey; } });
-Object.defineProperty(exports, "hasSessionKey", { enumerable: true, get: function () { return session_js_1.hasSessionKey; } });
-Object.defineProperty(exports, "loadSessionKey", { enumerable: true, get: function () { return session_js_1.loadSessionKey; } });
-Object.defineProperty(exports, "natsConnectSigForIat", { enumerable: true, get: function () { return session_js_1.natsConnectSigForIat; } });
-Object.defineProperty(exports, "signBytes", { enumerable: true, get: function () { return session_js_1.signBytes; } });
-var storage_js_1 = require("./browser/storage.js");
-Object.defineProperty(exports, "deleteKeyPair", { enumerable: true, get: function () { return storage_js_1.deleteKeyPair; } });
-Object.defineProperty(exports, "hasKeyPair", { enumerable: true, get: function () { return storage_js_1.hasKeyPair; } });
-var schemas_js_1 = require("./schemas.js");
-Object.defineProperty(exports, "approvalCapabilityKeys", { enumerable: true, get: function () { return schemas_js_1.approvalCapabilityKeys; } });
-Object.defineProperty(exports, "ApprovalDecisionSchema", { enumerable: true, get: function () { return schemas_js_1.ApprovalDecisionSchema; } });
-Object.defineProperty(exports, "AuthStartFlowResponseSchema", { enumerable: true, get: function () { return schemas_js_1.AuthStartFlowResponseSchema; } });
-Object.defineProperty(exports, "AuthStartRequestSchema", { enumerable: true, get: function () { return schemas_js_1.AuthStartRequestSchema; } });
-Object.defineProperty(exports, "AuthStartResponseSchema", { enumerable: true, get: function () { return schemas_js_1.AuthStartResponseSchema; } });
-Object.defineProperty(exports, "BindResponseSchema", { enumerable: true, get: function () { return schemas_js_1.BindResponseSchema; } });
-Object.defineProperty(exports, "BindSuccessResponseSchema", { enumerable: true, get: function () { return schemas_js_1.BindSuccessResponseSchema; } });
-Object.defineProperty(exports, "ClientTransportEndpointsSchema", { enumerable: true, get: function () { return schemas_js_1.ClientTransportEndpointsSchema; } });
-Object.defineProperty(exports, "ClientTransportsSchema", { enumerable: true, get: function () { return schemas_js_1.ClientTransportsSchema; } });
-Object.defineProperty(exports, "ContractApprovalSchema", { enumerable: true, get: function () { return schemas_js_1.ContractApprovalSchema; } });
-Object.defineProperty(exports, "NatsAuthTokenV1Schema", { enumerable: true, get: function () { return schemas_js_1.NatsAuthTokenV1Schema; } });
-Object.defineProperty(exports, "SentinelCredsSchema", { enumerable: true, get: function () { return schemas_js_1.SentinelCredsSchema; } });
-var utils_js_1 = require("./utils.js");
-Object.defineProperty(exports, "base64urlDecode", { enumerable: true, get: function () { return utils_js_1.base64urlDecode; } });
-Object.defineProperty(exports, "base64urlEncode", { enumerable: true, get: function () { return utils_js_1.base64urlEncode; } });
-Object.defineProperty(exports, "sha256", { enumerable: true, get: function () { return utils_js_1.sha256; } });
-Object.defineProperty(exports, "toArrayBuffer", { enumerable: true, get: function () { return utils_js_1.toArrayBuffer; } });
-Object.defineProperty(exports, "utf8", { enumerable: true, get: function () { return utils_js_1.utf8; } });