@robelest/convex-auth 0.0.4-preview.25 → 0.0.4-preview.28

package/dist/server/utils.js

@@ -1,140 +0,0 @@
-import { Cv } from "@robelest/fx/convex";
-import { generateRandomString as generateRandomString$1 } from "@oslojs/crypto/random";
-import { sha256 as sha256$1 } from "@oslojs/crypto/sha2";
-import { decodeBase64urlIgnorePadding, encodeBase64urlNoPadding, encodeHexLowerCase } from "@oslojs/encoding";
-
-//#region src/server/utils.ts
-/**
-* Require an environment variable to be set, throwing at config time if missing.
-*
-* Uses `Cv.error()` directly since this is a synchronous guard
-* called inline in many expressions — not suitable for Fx pipeline wrapping.
-*/
-/** @internal */
-function requireEnv(name) {
-	const value = process.env[name];
-	if (value === void 0) throw Cv.error({
-		code: "MISSING_ENV_VAR",
-		message: `Missing environment variable \`${name}\``
-	});
-	return value;
-}
-/** @internal */
-function normalizeUrl(url) {
-	return url.replace(/\/$/, "");
-}
-/** @internal */
-function siteUrlsFromEnv() {
-	const primaryUrl = normalizeUrl(requireEnv("SITE_URL"));
-	const secondaryUrls = process.env.SECONDARY_URL?.split(",").map((url) => url.trim()).filter((url) => url.length > 0).map(normalizeUrl) ?? [];
-	return {
-		primaryUrl,
-		allowedUrls: [...new Set([primaryUrl, ...secondaryUrls])]
-	};
-}
-/** @internal */
-function isLocalHost(host) {
-	if (host === void 0) return false;
-	const raw = host.includes("://") ? host : `http://${host}`;
-	let url;
-	try {
-		url = new URL(raw);
-	} catch {
-		return false;
-	}
-	return url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "::1";
-}
-/** @internal */
-const TOKEN_SUB_CLAIM_DIVIDER = "|";
-/** @internal */
-const REFRESH_TOKEN_DIVIDER = "|";
-/** @internal */
-async function sha256(input) {
-	return encodeHexLowerCase(sha256$1(new TextEncoder().encode(input)));
-}
-/** @internal */
-function generateRandomString(length, alphabet) {
-	return generateRandomString$1({ read(bytes) {
-		crypto.getRandomValues(bytes);
-	} }, alphabet, length);
-}
-/** @internal */
-function errorMessage(error) {
-	return error instanceof Error ? error.message : String(error);
-}
-/** @internal */
-function logError(error) {
-	logWithLevel(LOG_LEVELS.ERROR, error instanceof Error ? error.message + "\n" + error.stack?.replace("\\n", "\n") : error);
-}
-/** @internal */
-const LOG_LEVELS = {
-	ERROR: "ERROR",
-	WARN: "WARN",
-	INFO: "INFO",
-	DEBUG: "DEBUG"
-};
-/** @internal */
-function logWithLevel(level, ...args) {
-	const configuredLogLevel = LOG_LEVELS[process.env.AUTH_LOG_LEVEL ?? "INFO"] ?? "INFO";
-	switch (level) {
-		case "ERROR":
-			console.error(...args);
-			break;
-		case "WARN":
-			if (configuredLogLevel !== "ERROR") console.warn(...args);
-			break;
-		case "INFO":
-			if (configuredLogLevel === "INFO" || configuredLogLevel === "DEBUG") console.info(...args);
-			break;
-		case "DEBUG":
-			if (configuredLogLevel === "DEBUG") console.debug(...args);
-			break;
-	}
-}
-const UNREDACTED_LENGTH = 5;
-/** @internal */
-function maybeRedact(value) {
-	if (value === "") return "";
-	if (process.env.AUTH_LOG_SECRETS !== "true") {
-		if (value.length < UNREDACTED_LENGTH * 2) return "<redacted>";
-		return value.substring(0, UNREDACTED_LENGTH) + "<redacted>" + value.substring(value.length - UNREDACTED_LENGTH);
-	} else return value;
-}
-const SECRET_KEY_ENV = "AUTH_SECRET_ENCRYPTION_KEY";
-const SECRET_IV_LENGTH = 12;
-function toArrayBuffer(bytes) {
-	return bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
-}
-async function getSecretCryptoKey() {
-	const material = requireEnv(SECRET_KEY_ENV);
-	const rawKey = sha256$1(new TextEncoder().encode(material));
-	return await crypto.subtle.importKey("raw", toArrayBuffer(rawKey), { name: "AES-GCM" }, false, ["encrypt", "decrypt"]);
-}
-/** @internal */
-async function encryptSecret(value) {
-	const key = await getSecretCryptoKey();
-	const iv = crypto.getRandomValues(new Uint8Array(SECRET_IV_LENGTH));
-	const encrypted = await crypto.subtle.encrypt({
-		name: "AES-GCM",
-		iv: toArrayBuffer(iv)
-	}, key, toArrayBuffer(new TextEncoder().encode(value)));
-	return `${encodeBase64urlNoPadding(iv)}.${encodeBase64urlNoPadding(new Uint8Array(encrypted))}`;
-}
-/** @internal */
-async function decryptSecret(ciphertext) {
-	const [ivEncoded, payloadEncoded] = ciphertext.split(".");
-	if (!ivEncoded || !payloadEncoded) throw Cv.error({
-		code: "INVALID_PARAMETERS",
-		message: "Stored enterprise secret is malformed."
-	});
-	const key = await getSecretCryptoKey();
-	const decrypted = await crypto.subtle.decrypt({
-		name: "AES-GCM",
-		iv: toArrayBuffer(decodeBase64urlIgnorePadding(ivEncoded))
-	}, key, toArrayBuffer(decodeBase64urlIgnorePadding(payloadEncoded)));
-	return new TextDecoder().decode(decrypted);
-}
-
-//#endregion
-export { LOG_LEVELS, REFRESH_TOKEN_DIVIDER, TOKEN_SUB_CLAIM_DIVIDER, decryptSecret, encryptSecret, errorMessage, generateRandomString, isLocalHost, logError, logWithLevel, maybeRedact, normalizeUrl, requireEnv, sha256, siteUrlsFromEnv };
-//# sourceMappingURL=utils.js.map

package/dist/server/utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"utils.js","names":["rawSha256","osloGenerateRandomString"],"sources":["../../src/server/utils.ts"],"sourcesContent":["import {\n  RandomReader,\n  generateRandomString as osloGenerateRandomString,\n} from \"@oslojs/crypto/random\";\nimport { sha256 as rawSha256 } from \"@oslojs/crypto/sha2\";\nimport {\n  decodeBase64urlIgnorePadding,\n  encodeBase64urlNoPadding,\n  encodeHexLowerCase,\n} from \"@oslojs/encoding\";\nimport { Cv } from \"@robelest/fx/convex\";\n\n/**\n * Require an environment variable to be set, throwing at config time if missing.\n *\n * Uses `Cv.error()` directly since this is a synchronous guard\n * called inline in many expressions — not suitable for Fx pipeline wrapping.\n */\n/** @internal */\nexport function requireEnv(name: string) {\n  const value = process.env[name];\n  if (value === undefined) {\n    throw Cv.error({\n      code: \"MISSING_ENV_VAR\",\n      message: `Missing environment variable \\`${name}\\``,\n    });\n  }\n  return value;\n}\n\n/** @internal */\nexport function normalizeUrl(url: string) {\n  return url.replace(/\\/$/, \"\");\n}\n\n/** @internal */\nexport function siteUrlsFromEnv() {\n  const primaryUrl = normalizeUrl(requireEnv(\"SITE_URL\"));\n  const secondary = process.env.SECONDARY_URL;\n  const secondaryUrls =\n    secondary\n      ?.split(\",\")\n      .map((url) => url.trim())\n      .filter((url) => url.length > 0)\n      .map(normalizeUrl) ?? [];\n  return {\n    primaryUrl,\n    allowedUrls: [...new Set([primaryUrl, ...secondaryUrls])],\n  };\n}\n\n/** @internal */\nexport function isLocalHost(host?: string) {\n  if (host === undefined) {\n    return false;\n  }\n  const raw = host.includes(\"://\") ? host : `http://${host}`;\n  let url: URL;\n  try {\n    url = new URL(raw);\n  } catch {\n    return false;\n  }\n  return (\n    url.hostname === \"localhost\" ||\n    url.hostname === \"127.0.0.1\" ||\n    url.hostname === \"::1\"\n  );\n}\n\n// Internal server utilities (merged from former internalUtils.ts)\n\n/** @internal */\nexport const TOKEN_SUB_CLAIM_DIVIDER = \"|\";\n/** @internal */\nexport const REFRESH_TOKEN_DIVIDER = \"|\";\n\n/** @internal */\nexport async function sha256(input: string) {\n  return encodeHexLowerCase(rawSha256(new TextEncoder().encode(input)));\n}\n\n/** @internal */\nexport function generateRandomString(length: number, alphabet: string) {\n  const random: RandomReader = {\n    read(bytes) {\n      crypto.getRandomValues(bytes as Uint8Array<ArrayBuffer>);\n    },\n  };\n\n  return osloGenerateRandomString(random, alphabet, length);\n}\n\n/** @internal */\nexport function errorMessage(error: unknown) {\n  return error instanceof Error ? error.message : String(error);\n}\n\n/** @internal */\nexport function logError(error: unknown) {\n  logWithLevel(\n    LOG_LEVELS.ERROR,\n    error instanceof Error\n      ? error.message + \"\\n\" + error.stack?.replace(\"\\\\n\", \"\\n\")\n      : error,\n  );\n}\n\n/** @internal */\nexport const LOG_LEVELS = {\n  ERROR: \"ERROR\",\n  WARN: \"WARN\",\n  INFO: \"INFO\",\n  DEBUG: \"DEBUG\",\n} as const;\ntype LogLevel = keyof typeof LOG_LEVELS;\n\n/** @internal */\nexport function logWithLevel(level: LogLevel, ...args: unknown[]) {\n  const configuredLogLevel =\n    LOG_LEVELS[\n      (process.env.AUTH_LOG_LEVEL as LogLevel | undefined) ?? \"INFO\"\n    ] ?? \"INFO\";\n  switch (level) {\n    case \"ERROR\":\n      console.error(...args);\n      break;\n    case \"WARN\":\n      if (configuredLogLevel !== \"ERROR\") {\n        console.warn(...args);\n      }\n      break;\n    case \"INFO\":\n      if (configuredLogLevel === \"INFO\" || configuredLogLevel === \"DEBUG\") {\n        console.info(...args);\n      }\n      break;\n    case \"DEBUG\":\n      if (configuredLogLevel === \"DEBUG\") {\n        console.debug(...args);\n      }\n      break;\n  }\n}\n\nconst UNREDACTED_LENGTH = 5;\n/** @internal */\nexport function maybeRedact(value: string) {\n  if (value === \"\") {\n    return \"\";\n  }\n  const shouldRedact = process.env.AUTH_LOG_SECRETS !== \"true\";\n  if (shouldRedact) {\n    if (value.length < UNREDACTED_LENGTH * 2) {\n      return \"<redacted>\";\n    }\n    return (\n      value.substring(0, UNREDACTED_LENGTH) +\n      \"<redacted>\" +\n      value.substring(value.length - UNREDACTED_LENGTH)\n    );\n  } else {\n    return value;\n  }\n}\n\nconst SECRET_KEY_ENV = \"AUTH_SECRET_ENCRYPTION_KEY\";\nconst SECRET_IV_LENGTH = 12;\n\nfunction toArrayBuffer(bytes: Uint8Array) {\n  return bytes.buffer.slice(\n    bytes.byteOffset,\n    bytes.byteOffset + bytes.byteLength,\n  ) as ArrayBuffer;\n}\n\nasync function getSecretCryptoKey() {\n  const material = requireEnv(SECRET_KEY_ENV);\n  const rawKey = rawSha256(new TextEncoder().encode(material));\n  return await crypto.subtle.importKey(\n    \"raw\",\n    toArrayBuffer(rawKey),\n    { name: \"AES-GCM\" },\n    false,\n    [\"encrypt\", \"decrypt\"],\n  );\n}\n\n/** @internal */\nexport async function encryptSecret(value: string) {\n  const key = await getSecretCryptoKey();\n  const iv = crypto.getRandomValues(new Uint8Array(SECRET_IV_LENGTH));\n  const encrypted = await crypto.subtle.encrypt(\n    { name: \"AES-GCM\", iv: toArrayBuffer(iv) },\n    key,\n    toArrayBuffer(new TextEncoder().encode(value)),\n  );\n  return `${encodeBase64urlNoPadding(iv)}.${encodeBase64urlNoPadding(new Uint8Array(encrypted))}`;\n}\n\n/** @internal */\nexport async function decryptSecret(ciphertext: string) {\n  const [ivEncoded, payloadEncoded] = ciphertext.split(\".\");\n  if (!ivEncoded || !payloadEncoded) {\n    throw Cv.error({\n      code: \"INVALID_PARAMETERS\",\n      message: \"Stored enterprise secret is malformed.\",\n    });\n  }\n  const key = await getSecretCryptoKey();\n  const decrypted = await crypto.subtle.decrypt(\n    {\n      name: \"AES-GCM\",\n      iv: toArrayBuffer(decodeBase64urlIgnorePadding(ivEncoded)),\n    },\n    key,\n    toArrayBuffer(decodeBase64urlIgnorePadding(payloadEncoded)),\n  );\n  return new TextDecoder().decode(decrypted);\n}\n"],"mappings":";;;;;;;;;;;;;AAmBA,SAAgB,WAAW,MAAc;CACvC,MAAM,QAAQ,QAAQ,IAAI;AAC1B,KAAI,UAAU,OACZ,OAAM,GAAG,MAAM;EACb,MAAM;EACN,SAAS,kCAAkC,KAAK;EACjD,CAAC;AAEJ,QAAO;;;AAIT,SAAgB,aAAa,KAAa;AACxC,QAAO,IAAI,QAAQ,OAAO,GAAG;;;AAI/B,SAAgB,kBAAkB;CAChC,MAAM,aAAa,aAAa,WAAW,WAAW,CAAC;CAEvD,MAAM,gBADY,QAAQ,IAAI,eAGxB,MAAM,IAAI,CACX,KAAK,QAAQ,IAAI,MAAM,CAAC,CACxB,QAAQ,QAAQ,IAAI,SAAS,EAAE,CAC/B,IAAI,aAAa,IAAI,EAAE;AAC5B,QAAO;EACL;EACA,aAAa,CAAC,GAAG,IAAI,IAAI,CAAC,YAAY,GAAG,cAAc,CAAC,CAAC;EAC1D;;;AAIH,SAAgB,YAAY,MAAe;AACzC,KAAI,SAAS,OACX,QAAO;CAET,MAAM,MAAM,KAAK,SAAS,MAAM,GAAG,OAAO,UAAU;CACpD,IAAI;AACJ,KAAI;AACF,QAAM,IAAI,IAAI,IAAI;SACZ;AACN,SAAO;;AAET,QACE,IAAI,aAAa,eACjB,IAAI,aAAa,eACjB,IAAI,aAAa;;;AAOrB,MAAa,0BAA0B;;AAEvC,MAAa,wBAAwB;;AAGrC,eAAsB,OAAO,OAAe;AAC1C,QAAO,mBAAmBA,SAAU,IAAI,aAAa,CAAC,OAAO,MAAM,CAAC,CAAC;;;AAIvE,SAAgB,qBAAqB,QAAgB,UAAkB;AAOrE,QAAOC,uBANsB,EAC3B,KAAK,OAAO;AACV,SAAO,gBAAgB,MAAiC;IAE3D,EAEuC,UAAU,OAAO;;;AAI3D,SAAgB,aAAa,OAAgB;AAC3C,QAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;;;AAI/D,SAAgB,SAAS,OAAgB;AACvC,cACE,WAAW,OACX,iBAAiB,QACb,MAAM,UAAU,OAAO,MAAM,OAAO,QAAQ,OAAO,KAAK,GACxD,MACL;;;AAIH,MAAa,aAAa;CACxB,OAAO;CACP,MAAM;CACN,MAAM;CACN,OAAO;CACR;;AAID,SAAgB,aAAa,OAAiB,GAAG,MAAiB;CAChE,MAAM,qBACJ,WACG,QAAQ,IAAI,kBAA2C,WACrD;AACP,SAAQ,OAAR;EACE,KAAK;AACH,WAAQ,MAAM,GAAG,KAAK;AACtB;EACF,KAAK;AACH,OAAI,uBAAuB,QACzB,SAAQ,KAAK,GAAG,KAAK;AAEvB;EACF,KAAK;AACH,OAAI,uBAAuB,UAAU,uBAAuB,QAC1D,SAAQ,KAAK,GAAG,KAAK;AAEvB;EACF,KAAK;AACH,OAAI,uBAAuB,QACzB,SAAQ,MAAM,GAAG,KAAK;AAExB;;;AAIN,MAAM,oBAAoB;;AAE1B,SAAgB,YAAY,OAAe;AACzC,KAAI,UAAU,GACZ,QAAO;AAGT,KADqB,QAAQ,IAAI,qBAAqB,QACpC;AAChB,MAAI,MAAM,SAAS,oBAAoB,EACrC,QAAO;AAET,SACE,MAAM,UAAU,GAAG,kBAAkB,GACrC,eACA,MAAM,UAAU,MAAM,SAAS,kBAAkB;OAGnD,QAAO;;AAIX,MAAM,iBAAiB;AACvB,MAAM,mBAAmB;AAEzB,SAAS,cAAc,OAAmB;AACxC,QAAO,MAAM,OAAO,MAClB,MAAM,YACN,MAAM,aAAa,MAAM,WAC1B;;AAGH,eAAe,qBAAqB;CAClC,MAAM,WAAW,WAAW,eAAe;CAC3C,MAAM,SAASD,SAAU,IAAI,aAAa,CAAC,OAAO,SAAS,CAAC;AAC5D,QAAO,MAAM,OAAO,OAAO,UACzB,OACA,cAAc,OAAO,EACrB,EAAE,MAAM,WAAW,EACnB,OACA,CAAC,WAAW,UAAU,CACvB;;;AAIH,eAAsB,cAAc,OAAe;CACjD,MAAM,MAAM,MAAM,oBAAoB;CACtC,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,iBAAiB,CAAC;CACnE,MAAM,YAAY,MAAM,OAAO,OAAO,QACpC;EAAE,MAAM;EAAW,IAAI,cAAc,GAAG;EAAE,EAC1C,KACA,cAAc,IAAI,aAAa,CAAC,OAAO,MAAM,CAAC,CAC/C;AACD,QAAO,GAAG,yBAAyB,GAAG,CAAC,GAAG,yBAAyB,IAAI,WAAW,UAAU,CAAC;;;AAI/F,eAAsB,cAAc,YAAoB;CACtD,MAAM,CAAC,WAAW,kBAAkB,WAAW,MAAM,IAAI;AACzD,KAAI,CAAC,aAAa,CAAC,eACjB,OAAM,GAAG,MAAM;EACb,MAAM;EACN,SAAS;EACV,CAAC;CAEJ,MAAM,MAAM,MAAM,oBAAoB;CACtC,MAAM,YAAY,MAAM,OAAO,OAAO,QACpC;EACE,MAAM;EACN,IAAI,cAAc,6BAA6B,UAAU,CAAC;EAC3D,EACD,KACA,cAAc,6BAA6B,eAAe,CAAC,CAC5D;AACD,QAAO,IAAI,aAAa,CAAC,OAAO,UAAU"}

package/src/authorization/index.ts

@@ -1,83 +0,0 @@
-/**
- * Lightweight authorization helpers.
- *
- * @module
- */
-
-/**
- * Define typed role definitions for authorization.
- *
- * Transforms a declarative roles configuration object into a normalized
- * map where each role has an `id` (matching its key), an optional `label`,
- * and a typed `grants` array. The returned object is fully type-safe:
- * role IDs and grant strings are narrowed to their literal types, so
- * `member.inspect()` / `member.require()` and `member.create()` calls are checked at compile time.
- * This is the canonical way to define role metadata for the auth library.
- *
- * @param roles - An object mapping role IDs to their configuration.
- *   Each entry must include a `grants` array of permission strings and
- *   may include an optional human-readable `label`.
- * @typeParam TRoles - The object literal shape of your role definitions.
- * @returns An object with the same keys as `roles`, where each value
- *   is `{ id, label?, grants }` — `id` is the role key as a string,
- *   and `grants` is a mutable array of the declared grant strings.
- *
- * @example
- * ```ts
- * import { defineRoles } from "@robelest/convex-auth/authorization";
- *
- * const roles = defineRoles({
- *   admin: { label: "Administrator", grants: ["issues:write", "members:manage"] },
- *   member: { label: "Member", grants: ["issues:write"] },
- *   viewer: { grants: ["issues:read"] },
- * });
- *
- * // roles.admin.id   === "admin"
- * // roles.admin.grants === ["issues:write", "members:manage"]
- *
- * // Pass to createAuth:
- * const auth = createAuth(components.auth, {
- *   providers: [...],
- *   authorization: { roles },
- * });
- * ```
- *
- * @example
- * ```ts
- * type RoleId = keyof typeof roles;
- * // RoleId = "admin" | "member" | "viewer"
- * ```
- *
- * @see {@link ConvexAuthConfig}
- */
-export function defineRoles<
-  const TRoles extends Record<
-    string,
-    { label?: string; grants: readonly string[] }
-  >,
->(
-  roles: TRoles,
-): {
-  [K in keyof TRoles]: {
-    id: K & string;
-    label?: TRoles[K]["label"];
-    grants: Array<TRoles[K]["grants"][number] & string>;
-  };
-} {
-  return Object.fromEntries(
-    Object.entries(roles).map(([id, role]) => [
-      id,
-      {
-        id,
-        ...(role.label ? { label: role.label } : {}),
-        grants: [...role.grants],
-      },
-    ]),
-  ) as {
-    [K in keyof TRoles]: {
-      id: K & string;
-      label?: TRoles[K]["label"];
-      grants: Array<TRoles[K]["grants"][number] & string>;
-    };
-  };
-}

package/src/cli/bin.ts

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-
-import { program } from "./index";
-
-program.parse(process.argv);

package/src/cli/command.ts

@@ -1,70 +0,0 @@
-import {
-  Command,
-  Option,
-  type OptionValues,
-} from "@commander-js/extra-typings";
-
-declare module "@commander-js/extra-typings" {
-  interface Command<Args extends any[] = [], Opts extends OptionValues = {}> {
-    /**
-     * For a command that talks to the configured dev deployment by default,
-     * add flags for talking to prod, preview, or other deployment in the same
-     * project.
-     *
-     * These flags are added to the end of `command` (ordering matters for `--help`
-     * output). `action` should look like "Import data into" because it is prefixed
-     * onto help strings.
-     *
-     * The options can be passed to `deploymentSelectionFromOptions`.
-     *
-     * NOTE: This method only exists at runtime if this file is imported.
-     * To help avoid this bug, this method takes in an `ActionDescription` which
-     * can only be constructed via `actionDescription` from this file.
-     */
-    addDeploymentSelectionOptions(action: ActionDescription): Command<
-      Args,
-      Opts & {
-        url?: string;
-        adminKey?: string;
-        prod?: boolean;
-        previewName?: string;
-        deploymentName?: string;
-      }
-    >;
-  }
-}
-
-Command.prototype.addDeploymentSelectionOptions = function (
-  action: ActionDescription,
-) {
-  return this.addOption(
-    new Option("--url <url>")
-      .conflicts(["--prod", "--preview-name", "--deployment-name"])
-      .hideHelp(),
-  )
-    .addOption(new Option("--admin-key <adminKey>").hideHelp())
-    .addOption(
-      new Option(
-        "--prod",
-        action + " this project's production deployment.",
-      ).conflicts(["--preview-name", "--deployment-name", "--url"]),
-    )
-    .addOption(
-      new Option(
-        "--preview-name <previewName>",
-        action + " the preview deployment with the given name.",
-      ).conflicts(["--prod", "--deployment-name", "--url"]),
-    )
-    .addOption(
-      new Option(
-        "--deployment-name <deploymentName>",
-        action + " the specified deployment.",
-      ).conflicts(["--prod", "--preview-name", "--url"]),
-    ) as any;
-};
-
-declare const tag: unique symbol;
-type ActionDescription = string & { readonly [tag]: "noop" };
-export function actionDescription(action: string): ActionDescription {
-  return action as any;
-}