@selvajs/server 0.2.0-beta.3 → 0.2.0-beta.5

package/dist/http/__tests__/body-size.test.js

@@ -1,24 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { declaredBodySizeExceeds } from '../body-size.js';
-function headersWith(contentLength) {
-    const h = new Headers();
-    if (contentLength !== undefined)
-        h.set('content-length', contentLength);
-    return h;
-}
-describe('declaredBodySizeExceeds', () => {
-    it('flags a declared size over the limit', () => {
-        expect(declaredBodySizeExceeds(headersWith('1001'), 1000)).toBe(true);
-    });
-    it('passes a declared size at or under the limit', () => {
-        expect(declaredBodySizeExceeds(headersWith('1000'), 1000)).toBe(false);
-        expect(declaredBodySizeExceeds(headersWith('0'), 1000)).toBe(false);
-    });
-    it('passes when Content-Length is absent (chunked transfer — global limit is the backstop)', () => {
-        expect(declaredBodySizeExceeds(headersWith(), 1000)).toBe(false);
-    });
-    it('passes a non-numeric Content-Length rather than throwing', () => {
-        expect(declaredBodySizeExceeds(headersWith('not-a-number'), 1000)).toBe(false);
-    });
-});
-//# sourceMappingURL=body-size.test.js.map

package/dist/http/__tests__/body-size.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"body-size.test.js","sourceRoot":"","sources":["../../../src/http/__tests__/body-size.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,SAAS,WAAW,CAAC,aAAsB;IAC1C,MAAM,CAAC,GAAG,IAAI,OAAO,EAAE,CAAC;IACxB,IAAI,aAAa,KAAK,SAAS;QAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IACxE,OAAO,CAAC,CAAC;AACV,CAAC;AAED,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,uBAAuB,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,uBAAuB,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,CAAC,uBAAuB,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QACjG,MAAM,CAAC,uBAAuB,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,uBAAuB,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/http/__tests__/route-classifier.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=route-classifier.test.d.ts.map

package/dist/http/__tests__/route-classifier.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"route-classifier.test.d.ts","sourceRoot":"","sources":["../../../src/http/__tests__/route-classifier.test.ts"],"names":[],"mappings":""}

package/dist/http/__tests__/route-classifier.test.js

@@ -1,54 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { createRouteClassifier } from '../route-classifier.js';
-// Generic values — the consuming app's actual route policy is pinned by its
-// own test suite; these cover the classifier mechanics.
-const classifier = createRouteClassifier({
-    publicPages: ['/', '/login'],
-    publicPrefixes: ['/auth/', '/logout'],
-    publicApis: ['/api/health'],
-    selfGatingPrefix: '/api/files/',
-    staticPrefixes: ['/_app/', '/favicon/'],
-    staticPaths: ['/favicon.svg', '/robots.txt']
-});
-describe('createRouteClassifier', () => {
-    it('classifies exact pages, API allowlist, prefixes, and self-gating as public', () => {
-        for (const path of [
-            '/',
-            '/login',
-            '/api/health',
-            '/auth/oauth/callback',
-            '/logout',
-            '/api/files/orgs/abc/logo.webp'
-        ]) {
-            expect(classifier.isPublicRoute(path)).toBe(true);
-        }
-    });
-    it('denies by default — unknown routes are gated', () => {
-        for (const path of ['/library', '/api/projects', '/billing', '/whatever']) {
-            expect(classifier.isPublicRoute(path)).toBe(false);
-        }
-    });
-    it('exact-match pages do not admit siblings via prefix', () => {
-        expect(classifier.isPublicRoute('/login-other')).toBe(false);
-        expect(classifier.isPublicRoute('/api/healthz')).toBe(false);
-    });
-    it('self-gating prefix is not a loose match', () => {
-        expect(classifier.isSelfGatingApiRoute('/api/files/x')).toBe(true);
-        expect(classifier.isSelfGatingApiRoute('/api/filesX/y')).toBe(false);
-        expect(classifier.isSelfGatingApiRoute('/api/projects')).toBe(false);
-    });
-    it('recognizes static assets by prefix and exact path', () => {
-        expect(classifier.isStaticAsset('/_app/immutable/x.js')).toBe(true);
-        expect(classifier.isStaticAsset('/favicon/16.png')).toBe(true);
-        expect(classifier.isStaticAsset('/robots.txt')).toBe(true);
-        expect(classifier.isStaticAsset('/favicon-other.png')).toBe(false);
-        expect(classifier.isStaticAsset('/login')).toBe(false);
-    });
-    it('every allowlist is optional — an empty config gates everything', () => {
-        const closed = createRouteClassifier({});
-        expect(closed.isPublicRoute('/')).toBe(false);
-        expect(closed.isStaticAsset('/robots.txt')).toBe(false);
-        expect(closed.isSelfGatingApiRoute('/api/files/x')).toBe(false);
-    });
-});
-//# sourceMappingURL=route-classifier.test.js.map

package/dist/http/__tests__/route-classifier.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"route-classifier.test.js","sourceRoot":"","sources":["../../../src/http/__tests__/route-classifier.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,4EAA4E;AAC5E,wDAAwD;AACxD,MAAM,UAAU,GAAG,qBAAqB,CAAC;IACxC,WAAW,EAAE,CAAC,GAAG,EAAE,QAAQ,CAAC;IAC5B,cAAc,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;IACrC,UAAU,EAAE,CAAC,aAAa,CAAC;IAC3B,gBAAgB,EAAE,aAAa;IAC/B,cAAc,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC;IACvC,WAAW,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC;CAC5C,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACrF,KAAK,MAAM,IAAI,IAAI;YAClB,GAAG;YACH,QAAQ;YACR,aAAa;YACb,sBAAsB;YACtB,SAAS;YACT,+BAA+B;SAC/B,EAAE,CAAC;YACH,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACvD,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;YAC3E,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACzE,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/http/__tests__/safe-redirect.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=safe-redirect.test.d.ts.map

package/dist/http/__tests__/safe-redirect.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"safe-redirect.test.d.ts","sourceRoot":"","sources":["../../../src/http/__tests__/safe-redirect.test.ts"],"names":[],"mappings":""}

package/dist/http/__tests__/safe-redirect.test.js

@@ -1,44 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { safeRedirectTarget } from '../redirect.js';
-/**
- * `safeRedirectTarget` is the post-login redirect validator. The point of
- * the function is to reject *exactly* the values that would otherwise
- * smuggle an external host into a `redirect(303, …)` call:
- * protocol-relative URLs (`//evil.com`) and back-slash variants some
- * browsers normalize as a path separator. Each row below is one such case.
- */
-describe('safeRedirectTarget', () => {
-    it.each([
-        ['/foo', '/foo'],
-        ['/foo/bar', '/foo/bar'],
-        ['/foo?x=1', '/foo?x=1'],
-        ['/foo#frag', '/foo#frag'],
-        ['/a', '/a'] // shortest valid path: `/` + non-`/` char
-    ])('accepts same-origin path %j → %j', (input, expected) => {
-        expect(safeRedirectTarget(input, '/fallback')).toBe(expected);
-    });
-    it.each([
-        ['//evil.com', 'protocol-relative URL'],
-        ['//evil.com/path', 'protocol-relative URL with path'],
-        ['/\\evil.com', 'back-slash bypass'],
-        ['https://evil.com', 'absolute URL'],
-        ['http://evil.com', 'absolute URL'],
-        ['javascript:alert(1)', 'javascript: scheme'],
-        ['', 'empty string'],
-        ['/', 'lone slash (length<2)'],
-        ['evil.com', 'no leading slash'],
-        ['./relative', 'relative path']
-    ])('rejects %j (%s)', (input) => {
-        expect(safeRedirectTarget(input, '/fallback')).toBe('/fallback');
-    });
-    it.each([null, undefined])('rejects %j', (input) => {
-        expect(safeRedirectTarget(input, '/fallback')).toBe('/fallback');
-    });
-    it('passes through arbitrary non-string types as fallback', () => {
-        // safeRedirectTarget's signature is `string | null | undefined`, but
-        // some call sites get `unknown` from FormData — make sure we don't
-        // throw on a stray non-string.
-        expect(safeRedirectTarget(42, '/fallback')).toBe('/fallback');
-    });
-});
-//# sourceMappingURL=safe-redirect.test.js.map

package/dist/http/__tests__/safe-redirect.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"safe-redirect.test.js","sourceRoot":"","sources":["../../../src/http/__tests__/safe-redirect.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD;;;;;;GAMG;AACH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,IAAI,CAAC;QACP,CAAC,MAAM,EAAE,MAAM,CAAC;QAChB,CAAC,UAAU,EAAE,UAAU,CAAC;QACxB,CAAC,UAAU,EAAE,UAAU,CAAC;QACxB,CAAC,WAAW,EAAE,WAAW,CAAC;QAC1B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,0CAA0C;KACvD,CAAC,CAAC,kCAAkC,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;QAC1D,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACP,CAAC,YAAY,EAAE,uBAAuB,CAAC;QACvC,CAAC,iBAAiB,EAAE,iCAAiC,CAAC;QACtD,CAAC,aAAa,EAAE,mBAAmB,CAAC;QACpC,CAAC,kBAAkB,EAAE,cAAc,CAAC;QACpC,CAAC,iBAAiB,EAAE,cAAc,CAAC;QACnC,CAAC,qBAAqB,EAAE,oBAAoB,CAAC;QAC7C,CAAC,EAAE,EAAE,cAAc,CAAC;QACpB,CAAC,GAAG,EAAE,uBAAuB,CAAC;QAC9B,CAAC,UAAU,EAAE,kBAAkB,CAAC;QAChC,CAAC,YAAY,EAAE,eAAe,CAAC;KAC/B,CAAC,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE;QAC/B,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE;QAClD,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAChE,qEAAqE;QACrE,mEAAmE;QACnE,+BAA+B;QAC/B,MAAM,CAAC,kBAAkB,CAAC,EAAuB,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/http/__tests__/security-headers.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=security-headers.test.d.ts.map

package/dist/http/__tests__/security-headers.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"security-headers.test.d.ts","sourceRoot":"","sources":["../../../src/http/__tests__/security-headers.test.ts"],"names":[],"mappings":""}

package/dist/http/__tests__/security-headers.test.js

@@ -1,24 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { applySecurityHeaders } from '../security-headers.js';
-describe('applySecurityHeaders', () => {
-    it('sets the baseline hardening headers and returns the same response', () => {
-        const response = new Response('ok');
-        const out = applySecurityHeaders(response, { hsts: false });
-        expect(out).toBe(response);
-        expect(out.headers.get('X-Content-Type-Options')).toBe('nosniff');
-        expect(out.headers.get('Referrer-Policy')).toBe('strict-origin-when-cross-origin');
-        expect(out.headers.get('Permissions-Policy')).toContain('camera=()');
-    });
-    it('sets HSTS only when asked (production)', () => {
-        const dev = applySecurityHeaders(new Response('ok'), { hsts: false });
-        expect(dev.headers.get('Strict-Transport-Security')).toBeNull();
-        const prod = applySecurityHeaders(new Response('ok'), { hsts: true });
-        expect(prod.headers.get('Strict-Transport-Security')).toBe('max-age=31536000; includeSubDomains');
-    });
-    it('never sets CSP or frame headers (iframe embedding is a product requirement)', () => {
-        const out = applySecurityHeaders(new Response('ok'), { hsts: true });
-        expect(out.headers.get('Content-Security-Policy')).toBeNull();
-        expect(out.headers.get('X-Frame-Options')).toBeNull();
-    });
-});
-//# sourceMappingURL=security-headers.test.js.map

package/dist/http/__tests__/security-headers.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"security-headers.test.js","sourceRoot":"","sources":["../../../src/http/__tests__/security-headers.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC5E,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,oBAAoB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACnF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QACjD,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAEhE,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CACzD,qCAAqC,CACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACtF,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/ops/__tests__/semver.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=semver.test.d.ts.map

package/dist/ops/__tests__/semver.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"semver.test.d.ts","sourceRoot":"","sources":["../../../src/ops/__tests__/semver.test.ts"],"names":[],"mappings":""}

package/dist/ops/__tests__/semver.test.js

@@ -1,38 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { isNewer } from '../semver.js';
-describe('isNewer', () => {
-    it('detects a newer patch / minor / major', () => {
-        expect(isNewer('4.3.2', '4.3.1')).toBe(true);
-        expect(isNewer('4.4.0', '4.3.9')).toBe(true);
-        expect(isNewer('5.0.0', '4.9.9')).toBe(true);
-    });
-    it('returns false for same or older versions', () => {
-        expect(isNewer('4.3.1', '4.3.1')).toBe(false);
-        expect(isNewer('4.3.0', '4.3.1')).toBe(false);
-        expect(isNewer('3.9.9', '4.0.0')).toBe(false);
-    });
-    it('ignores pre-release suffixes on the stable channel (only stable bumps surface)', () => {
-        expect(isNewer('4.3.2-beta.1', '4.3.1')).toBe(true);
-        expect(isNewer('4.3.1-beta.1', '4.3.1')).toBe(false);
-        // Explicit stable channel matches the default.
-        expect(isNewer('4.3.1-beta.1', '4.3.1', 'stable')).toBe(false);
-    });
-    it('orders pre-releases on the beta channel', () => {
-        // Successive betas of the same core.
-        expect(isNewer('4.6.0-beta.2', '4.6.0-beta.1', 'beta')).toBe(true);
-        expect(isNewer('4.6.0-beta.1', '4.6.0-beta.2', 'beta')).toBe(false);
-        // A newer core beta beats an older stable.
-        expect(isNewer('4.6.0-beta.1', '4.5.1', 'beta')).toBe(true);
-        // Stable of a core outranks any beta of the same core (promotion).
-        expect(isNewer('4.6.0', '4.6.0-beta.9', 'beta')).toBe(true);
-        expect(isNewer('4.6.0-beta.9', '4.6.0', 'beta')).toBe(false);
-        // Reverting to an OLDER stable is NOT "newer" — the channel switch, not
-        // isNewer, is what makes it actionable.
-        expect(isNewer('4.5.1', '4.6.0-beta.2', 'beta')).toBe(false);
-    });
-    it('falls back to a string compare when unparseable', () => {
-        expect(isNewer('weird', 'weird')).toBe(false);
-        expect(isNewer('a', 'b')).toBe(true);
-    });
-});
-//# sourceMappingURL=semver.test.js.map

package/dist/ops/__tests__/semver.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"semver.test.js","sourceRoot":"","sources":["../../../src/ops/__tests__/semver.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACzF,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,+CAA+C;QAC/C,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QAClD,qCAAqC;QACrC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpE,2CAA2C;QAC3C,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,mEAAmE;QACnE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,wEAAwE;QACxE,wCAAwC;QACxC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/providers/__tests__/create-selva-providers.test.d.ts

@@ -1,7 +0,0 @@
-/**
- * Tests for `createSelvaProviders` (K5) — registry-driven provider selection,
- * lazy memoized instantiation, config parsing (flags/branding/tenancy), the
- * solve-metrics duck-type pick, and the external config-path override.
- */
-export {};
-//# sourceMappingURL=create-selva-providers.test.d.ts.map

package/dist/providers/__tests__/create-selva-providers.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"create-selva-providers.test.d.ts","sourceRoot":"","sources":["../../../src/providers/__tests__/create-selva-providers.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/providers/__tests__/create-selva-providers.test.js

@@ -1,135 +0,0 @@
-/**
- * Tests for `createSelvaProviders` (K5) — registry-driven provider selection,
- * lazy memoized instantiation, config parsing (flags/branding/tenancy), the
- * solve-metrics duck-type pick, and the external config-path override.
- */
-import { describe, it, expect, vi } from 'vitest';
-import { fileURLToPath } from 'node:url';
-import { createSelvaProviders } from '../create-selva-providers.js';
-class FakeData {
-}
-class FakeStorage {
-}
-function makeRegistry() {
-    const authLocal = vi.fn(() => ({ name: 'local-auth' }));
-    const authSupabase = vi.fn(() => ({ name: 'supabase-auth' }));
-    const dataLocal = vi.fn(() => new FakeData());
-    const dataSupabase = vi.fn(() => new FakeData());
-    const storageLocal = vi.fn(() => new FakeStorage());
-    const registry = {
-        auth: { local: authLocal, supabase: authSupabase },
-        data: { local: dataLocal, supabase: dataSupabase },
-        storage: { local: storageLocal }
-    };
-    return { registry, authLocal, authSupabase, dataLocal, dataSupabase, storageLocal };
-}
-const noBoot = { onBoot: () => { } };
-describe('registry selection', () => {
-    it('falls back to "local" for every slot when env is empty', async () => {
-        const { registry, authLocal, dataLocal, storageLocal } = makeRegistry();
-        const runtime = await createSelvaProviders({}, { registry, ...noBoot });
-        runtime.resolve();
-        expect(authLocal).toHaveBeenCalledTimes(1);
-        expect(dataLocal).toHaveBeenCalledTimes(1);
-        expect(storageLocal).toHaveBeenCalledTimes(1);
-    });
-    it('honors SELVA_*_PROVIDER env choices, case-insensitively', async () => {
-        const { registry, authSupabase, dataSupabase } = makeRegistry();
-        const runtime = await createSelvaProviders({ SELVA_AUTH_PROVIDER: 'Supabase', SELVA_DATA_PROVIDER: 'SUPABASE' }, { registry, ...noBoot });
-        runtime.resolve();
-        expect(authSupabase).toHaveBeenCalledTimes(1);
-        expect(dataSupabase).toHaveBeenCalledTimes(1);
-    });
-    it('honors the defaults option over the built-in "local"', async () => {
-        const { registry, authSupabase } = makeRegistry();
-        const runtime = await createSelvaProviders({}, { registry, defaults: { auth: 'supabase' }, ...noBoot });
-        runtime.resolve();
-        expect(authSupabase).toHaveBeenCalledTimes(1);
-    });
-    it('rejects an unknown choice, listing the registered names', async () => {
-        const { registry } = makeRegistry();
-        const runtime = await createSelvaProviders({ SELVA_AUTH_PROVIDER: 'okta' }, { registry, ...noBoot });
-        expect(() => runtime.resolve()).toThrow(/SELVA_AUTH_PROVIDER="okta".*local \| supabase/);
-    });
-});
-describe('laziness and memoization', () => {
-    it('does not instantiate providers until resolve() is called', async () => {
-        const { registry, authLocal } = makeRegistry();
-        await createSelvaProviders({}, { registry, ...noBoot });
-        expect(authLocal).not.toHaveBeenCalled();
-    });
-    it('instantiates once and logs the boot summary once across repeated resolves', async () => {
-        const { registry, authLocal } = makeRegistry();
-        const onBoot = vi.fn();
-        const runtime = await createSelvaProviders({}, { registry, onBoot });
-        runtime.resolve();
-        runtime.resolve();
-        runtime.flag('ENABLE_SHARING');
-        expect(authLocal).toHaveBeenCalledTimes(1);
-        expect(onBoot).toHaveBeenCalledTimes(1);
-        expect(onBoot.mock.calls[0][0]).toContain('auth=local-auth');
-        expect(onBoot.mock.calls[0][0]).toContain('data=FakeData');
-        expect(onBoot.mock.calls[0][0]).toContain('tenancy=single');
-    });
-});
-describe('config parsing', () => {
-    it('parses flags from SELVA_FLAG_* (omitted → false)', async () => {
-        const { registry } = makeRegistry();
-        const runtime = await createSelvaProviders({ SELVA_FLAG_ENABLE_SHARING: 'true', SELVA_FLAG_ALLOW_ORG_CREATION: 'no' }, { registry, ...noBoot });
-        expect(runtime.flag('ENABLE_SHARING')).toBe(true);
-        expect(runtime.flag('ALLOW_ORG_CREATION')).toBe(false);
-        expect(runtime.flag('ALLOW_CROSS_ORG_PUBLIC')).toBe(false);
-    });
-    it('parses tenancy and rejects unknown values', async () => {
-        const { registry } = makeRegistry();
-        const multi = await createSelvaProviders({ SELVA_TENANCY: 'multi' }, { registry, ...noBoot });
-        expect(multi.tenancy()).toBe('multi');
-        const bad = await createSelvaProviders({ SELVA_TENANCY: 'galactic' }, { registry, ...noBoot });
-        expect(() => bad.tenancy()).toThrow(/SELVA_TENANCY="galactic"/);
-    });
-    it('brands with defaults; copyright falls back to the overridden name', async () => {
-        const { registry } = makeRegistry();
-        const plain = await createSelvaProviders({}, { registry, ...noBoot });
-        expect(plain.branding().name).toBe('Selva');
-        expect(plain.branding().copyrightName).toBe('Selva');
-        expect(plain.branding().tagline).toBeTruthy();
-        const branded = await createSelvaProviders({ SELVA_BRAND_NAME: '  Acme  ' }, { registry, ...noBoot });
-        expect(branded.branding().name).toBe('Acme');
-        expect(branded.branding().copyrightName).toBe('Acme');
-        expect(branded.branding().description).toContain('Acme');
-    });
-});
-describe('solve metric sink', () => {
-    it('falls back to a noop sink when the data provider has no solveMetrics', async () => {
-        const { registry } = makeRegistry();
-        const runtime = await createSelvaProviders({}, { registry, ...noBoot });
-        const sink = runtime.solveMetricSink();
-        expect(typeof sink.record).toBe('function');
-        expect(runtime.solveMetricSink()).toBe(sink); // memoized
-    });
-    it('reuses a duck-typed solveMetrics sink carried by the data provider', async () => {
-        const { registry } = makeRegistry();
-        const carried = { record: vi.fn() };
-        registry.data.local = vi.fn(() => ({ solveMetrics: carried }));
-        const runtime = await createSelvaProviders({}, { registry, ...noBoot });
-        expect(runtime.solveMetricSink()).toBe(carried);
-    });
-});
-describe('config-path override', () => {
-    it('loads the module default export and hands it the env', async () => {
-        const { registry, authLocal } = makeRegistry();
-        const configPath = fileURLToPath(new URL('./fixtures/override-config.mjs', import.meta.url));
-        const runtime = await createSelvaProviders({ OVERRIDE_MARKER: 'hello' }, { registry, configPath, ...noBoot });
-        const config = runtime.resolve();
-        expect(config.auth.name).toBe('override-auth');
-        expect(config.data.marker).toBe('hello');
-        expect(runtime.tenancy()).toBe('multi');
-        // The registry is bypassed entirely.
-        expect(authLocal).not.toHaveBeenCalled();
-    });
-    it('rejects at load time when the path does not exist', async () => {
-        const { registry } = makeRegistry();
-        await expect(createSelvaProviders({}, { registry, configPath: './does-not-exist.js', ...noBoot })).rejects.toThrow(/does-not-exist\.js/);
-    });
-});
-//# sourceMappingURL=create-selva-providers.test.js.map

package/dist/providers/__tests__/create-selva-providers.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"create-selva-providers.test.js","sourceRoot":"","sources":["../../../src/providers/__tests__/create-selva-providers.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAyB,MAAM,8BAA8B,CAAC;AAE3F,MAAM,QAAQ;CAAG;AACjB,MAAM,WAAW;CAAG;AAEpB,SAAS,YAAY;IACpB,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAA6B,CAAC,CAAC;IACpF,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAA6B,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,QAAQ,EAA8B,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,QAAQ,EAA8B,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,WAAW,EAAiC,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAqB;QAClC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE;QAClD,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE;QAClD,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;KAChC,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;AAEpC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACzC,EAAE,mBAAmB,EAAE,UAAU,EAAE,mBAAmB,EAAE,UAAU,EAAE,EACpE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CACvB,CAAC;QACF,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACzC,EAAE,EACF,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,MAAM,EAAE,CACvD,CAAC;QACF,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACzC,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAC/B,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CACvB,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,YAAY,EAAE,CAAC;QAC/C,MAAM,oBAAoB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,YAAY,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/B,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACzC,EAAE,yBAAyB,EAAE,MAAM,EAAE,6BAA6B,EAAE,IAAI,EAAE,EAC1E,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CACvB,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC9F,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEtC,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC/F,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC;QAE9C,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACzC,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAChC,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CACvB,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;QACvC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;QACpC,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAA6B,CAAC,CAAC;QAC3F,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,YAAY,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,gCAAgC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7F,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACzC,EAAE,eAAe,EAAE,OAAO,EAAE,EAC5B,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,CACnC,CAAC;QACF,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/C,MAAM,CAAE,MAAM,CAAC,IAAsC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5E,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,qCAAqC;QACrC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,MAAM,CACX,oBAAoB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,qBAAqB,EAAE,GAAG,MAAM,EAAE,CAAC,CACpF,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tokens/__tests__/token-codec.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=token-codec.test.d.ts.map

package/dist/tokens/__tests__/token-codec.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"token-codec.test.d.ts","sourceRoot":"","sources":["../../../src/tokens/__tests__/token-codec.test.ts"],"names":[],"mappings":""}

package/dist/tokens/__tests__/token-codec.test.js

@@ -1,50 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { createTokenCodec, MIN_TOKEN_SECRET_LENGTH } from '../token-codec.js';
-const SECRET = 'unit-test-secret-that-is-long-enough-to-pass';
-describe('createTokenCodec', () => {
-    it('rejects a secret shorter than the minimum', () => {
-        expect(() => createTokenCodec({ prefix: 'share_', secret: 'short' })).toThrow(/at least 32 characters/);
-        expect(() => createTokenCodec({ prefix: 'share_', secret: 'x'.repeat(MIN_TOKEN_SECRET_LENGTH - 1) })).toThrow(/got 31/);
-    });
-    it('accepts a secret at exactly the minimum length', () => {
-        expect(() => createTokenCodec({ prefix: 'share_', secret: 'x'.repeat(MIN_TOKEN_SECRET_LENGTH) })).not.toThrow();
-    });
-    it('mints prefixed, unique, URL-safe tokens', () => {
-        const codec = createTokenCodec({ prefix: 'share_', secret: SECRET });
-        const a = codec.mintRawToken();
-        const b = codec.mintRawToken();
-        expect(a).toMatch(/^share_[A-Za-z0-9_-]{43}$/); // 32 bytes → 43 base64url chars
-        expect(a).not.toBe(b);
-    });
-    it('hashes deterministically, never echoing the raw token', () => {
-        const codec = createTokenCodec({ prefix: 'share_', secret: SECRET });
-        const raw = codec.mintRawToken();
-        const hash = codec.hashToken(raw);
-        expect(codec.hashToken(raw)).toBe(hash);
-        expect(hash).not.toContain(raw);
-        expect(hash).toMatch(/^[A-Za-z0-9_-]+$/); // base64url
-    });
-    it('produces different hashes under different secrets (rotation invalidates)', () => {
-        const a = createTokenCodec({ prefix: 'share_', secret: SECRET });
-        const b = createTokenCodec({ prefix: 'share_', secret: SECRET + '-rotated' });
-        const raw = a.mintRawToken();
-        expect(a.hashToken(raw)).not.toBe(b.hashToken(raw));
-    });
-    it('hashesEqual: equal, unequal, and length-mismatch inputs', () => {
-        const codec = createTokenCodec({ prefix: 'invite_', secret: SECRET });
-        const hash = codec.hashToken(codec.mintRawToken());
-        const other = codec.hashToken(codec.mintRawToken());
-        expect(codec.hashesEqual(hash, hash)).toBe(true);
-        expect(codec.hashesEqual(hash, other)).toBe(false);
-        expect(codec.hashesEqual(hash, hash.slice(0, -1))).toBe(false);
-    });
-    it('looksLikeToken recognizes only its own prefix', () => {
-        const share = createTokenCodec({ prefix: 'share_', secret: SECRET });
-        const invite = createTokenCodec({ prefix: 'invite_', secret: SECRET });
-        const raw = share.mintRawToken();
-        expect(share.looksLikeToken(raw)).toBe(true);
-        expect(invite.looksLikeToken(raw)).toBe(false);
-        expect(share.looksLikeToken('random-string')).toBe(false);
-    });
-});
-//# sourceMappingURL=token-codec.test.js.map

package/dist/tokens/__tests__/token-codec.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"token-codec.test.js","sourceRoot":"","sources":["../../../src/tokens/__tests__/token-codec.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE9E,MAAM,MAAM,GAAG,8CAA8C,CAAC;AAE9D,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAC5E,wBAAwB,CACxB,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CACX,gBAAgB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,uBAAuB,GAAG,CAAC,CAAC,EAAE,CAAC,CACvF,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,GAAG,EAAE,CACX,gBAAgB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,uBAAuB,CAAC,EAAE,CAAC,CACnF,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QAClD,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC,gCAAgC;QAChF,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAChE,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QACnF,MAAM,CAAC,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,EAAE,CAAC;QAC7B,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QAClE,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACxD,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}