@smonn/ids 0.6.0 → 0.7.0

package/dist/cli.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cli.mjs","names":["parseKeyFormatFlag"],"sources":["../src/cli/codec-options.ts","../src/cli/constants.ts","../src/cli/flags.ts","../src/cli/opaque-key.ts","../src/cli/commands/generate.ts","../src/cli/format.ts","../src/cli/wrapping-key.ts","../src/cli/usage.ts","../src/cli/commands/inspect.ts","../src/cli/commands/keygen.ts","../src/cli.ts","../bin/cli.ts"],"sourcesContent":["import type { TimestampOptions } from \"../timestamp.js\";\nimport type { RunOpts } from \"./types.js\";\n\nexport function codecOpts(opts: RunOpts): Partial<TimestampOptions> {\n  // CLI invocations are intentionally ephemeral: one codec per run, never\n  // retained, so this is not the duplicate-brand warning case.\n  const o: Partial<TimestampOptions> = { allowDuplicateBrand: true };\n  if (opts.now !== undefined) o.now = opts.now;\n  if (opts.rng !== undefined) o.rng = opts.rng;\n  return o;\n}\n","export const maxGenerateCount = 10_000;\n","import { maxGenerateCount } from \"./constants.js\";\n\nexport type ParsedFlags = {\n  flags: Set<string>;\n  values: Map<string, string>;\n  positionals: string[];\n  errors: string[];\n};\n\nfunction splitFlagToken(arg: string): { flag: string; inlineValue: string | undefined } {\n  const eq = arg.indexOf(\"=\");\n  if (eq <= 0) return { flag: arg, inlineValue: undefined };\n  return { flag: arg.slice(0, eq), inlineValue: arg.slice(eq + 1) };\n}\n\nexport function splitFlags(args: ReadonlyArray<string>): ParsedFlags {\n  const flags = new Set<string>();\n  const values = new Map<string, string>();\n  const positionals: string[] = [];\n  const errors: string[] = [];\n  const seenFlags = new Set<string>();\n  const valueFlags = new Set([\"--count\", \"-c\", \"--bits\", \"--key-format\", \"--kind\"]);\n  const addFlag = (flag: string) => {\n    const canonical = canonicalFlag(flag);\n    if (seenFlags.has(canonical)) errors.push(`duplicate flag: ${canonical}`);\n    seenFlags.add(canonical);\n    flags.add(flag);\n  };\n  for (let i = 0; i < args.length; i++) {\n    const raw = args[i]!;\n    const { flag, inlineValue } = splitFlagToken(raw);\n    if (flag === \"--opaque\" || flag === \"--wrapped\" || flag === \"--reverse\") {\n      addFlag(flag);\n      if (inlineValue !== undefined) errors.push(`flag does not take a value: ${flag}`);\n      continue;\n    }\n    if (valueFlags.has(flag)) {\n      if (inlineValue !== undefined) {\n        addFlag(flag);\n        values.set(flag, inlineValue);\n        continue;\n      }\n      const value = args[i + 1];\n      if (value === undefined || value.startsWith(\"-\")) {\n        addFlag(flag);\n        values.set(flag, \"\");\n        continue;\n      }\n      addFlag(flag);\n      values.set(flag, value);\n      i++;\n      continue;\n    }\n    if (flag.startsWith(\"-\")) {\n      addFlag(flag);\n      continue;\n    }\n    positionals.push(raw);\n  }\n  return { flags, values, positionals, errors };\n}\n\nfunction canonicalFlag(flag: string): string {\n  if (flag === \"-c\") return \"--count\";\n  return flag;\n}\n\nconst knownFlags = new Set([\n  \"--opaque\",\n  \"--wrapped\",\n  \"--reverse\",\n  \"--kind\",\n  \"--key-format\",\n  \"--count\",\n  \"-c\",\n  \"--bits\",\n]);\n\nexport function unsupportedFlagForCommand(\n  command: string,\n  flags: Set<string>,\n  allowed: Set<string>,\n): string | undefined {\n  for (const flag of flags) {\n    if (!allowed.has(flag)) {\n      return knownFlags.has(flag)\n        ? `unsupported flag for ${command}: ${flag}`\n        : `unsupported flag: ${flag}`;\n    }\n  }\n  return undefined;\n}\n\nexport function parseCount(values: Map<string, string>): number | string {\n  const raw = values.get(\"--count\") ?? values.get(\"-c\");\n  if (raw === undefined) return 1;\n  if (raw === \"\") return \"--count requires a value\";\n  if (!/^[1-9][0-9]*$/.test(raw)) return `--count must be a positive integer, got '${raw}'`;\n  const count = Number.parseInt(raw, 10);\n  if (!Number.isSafeInteger(count) || count > maxGenerateCount) {\n    return `--count must be at most ${maxGenerateCount}, got '${raw}'`;\n  }\n  return count;\n}\n\nexport function parseBits(values: Map<string, string>): number | string {\n  const raw = values.get(\"--bits\");\n  if (raw === undefined) return 256;\n  if (raw === \"\") return \"--bits requires a value\";\n  if (raw === \"128\") return 128;\n  if (raw === \"192\") return 192;\n  if (raw === \"256\") return 256;\n  return `--bits must be 128, 192, or 256, got '${raw}'`;\n}\n\nexport type WrappedKindValue = \"u32\" | \"i32\" | \"u64\" | \"i64\";\n\nexport function parseKind(values: Map<string, string>): WrappedKindValue | string | undefined {\n  const raw = values.get(\"--kind\");\n  if (raw === undefined) return undefined;\n  if (raw === \"\") return \"--kind requires a value\";\n  if (raw === \"u32\" || raw === \"i32\" || raw === \"u64\" || raw === \"i64\") return raw;\n  return `--kind must be u32, i32, u64, or i64, got '${raw}'`;\n}\n\nexport function isKindError(result: WrappedKindValue | string): result is string {\n  return result !== \"u32\" && result !== \"i32\" && result !== \"u64\" && result !== \"i64\";\n}\n","import {\n  decodeOpaqueKey,\n  importOpaqueKey,\n  type OpaqueKey,\n  type OpaqueKeyFormat,\n} from \"../opaque.js\";\nimport type { RunOpts } from \"./types.js\";\n\nexport function isKeyFormatError(result: OpaqueKeyFormat | string): result is string {\n  return result !== \"hex\" && result !== \"base64url\";\n}\n\nfunction parseKeyFormatFlag(values: Map<string, string>): OpaqueKeyFormat | string | undefined {\n  const fromFlag = values.get(\"--key-format\");\n  if (fromFlag === undefined) return undefined;\n  if (fromFlag === \"\") return \"--key-format requires a value\";\n  if (fromFlag === \"hex\" || fromFlag === \"base64url\") return fromFlag;\n  return `--key-format must be hex or base64url, got '${fromFlag}'`;\n}\n\nexport function parseKeygenFormat(values: Map<string, string>): OpaqueKeyFormat | string {\n  const fromFlag = parseKeyFormatFlag(values);\n  if (fromFlag === undefined) return \"hex\";\n  return fromFlag;\n}\n\nexport function parseOpaqueKeyFormat(\n  values: Map<string, string>,\n  opts: RunOpts,\n): OpaqueKeyFormat | string {\n  const fromFlag = parseKeyFormatFlag(values);\n  if (fromFlag !== undefined) return fromFlag;\n  const env = opts.env ?? process.env;\n  const fromEnv = env.IDS_KEY_FORMAT;\n  if (fromEnv === undefined || fromEnv === \"\") return \"hex\";\n  if (fromEnv === \"hex\" || fromEnv === \"base64url\") return fromEnv;\n  return `IDS_KEY_FORMAT must be hex or base64url, got '${fromEnv}'`;\n}\n\nexport async function loadOpaqueKey(\n  opts: RunOpts,\n  format: OpaqueKeyFormat,\n): Promise<OpaqueKey | string> {\n  const env = opts.env ?? process.env;\n  const raw = env.IDS_KEY;\n  if (raw === undefined || raw === \"\") return \"missing IDS_KEY environment variable\";\n  try {\n    return importOpaqueKey(decodeOpaqueKey(raw, format));\n  } catch (err) {\n    return (err as Error).message;\n  }\n}\n","import { createTimestampId } from \"../../timestamp.js\";\nimport { createOpaqueTimestampId, type OpaqueKeyFormat } from \"../../opaque.js\";\nimport { createReverseTimestampId } from \"../../reverse.js\";\nimport { codecOpts } from \"../codec-options.js\";\nimport { parseCount, splitFlags, unsupportedFlagForCommand } from \"../flags.js\";\nimport { isKeyFormatError, loadOpaqueKey, parseOpaqueKeyFormat } from \"../opaque-key.js\";\nimport type { RunOpts } from \"../types.js\";\n\nexport function runGenerate(args: ReadonlyArray<string>, opts: RunOpts): Promise<number> {\n  const { flags, values, positionals, errors } = splitFlags(args);\n  const unsupported = unsupportedFlagForCommand(\n    \"generate\",\n    flags,\n    new Set([\"--count\", \"-c\", \"--opaque\", \"--reverse\", \"--key-format\"]),\n  );\n  if (unsupported !== undefined) {\n    opts.stderr(unsupported + \"\\n\");\n    return Promise.resolve(1);\n  }\n  if (errors[0] !== undefined) {\n    opts.stderr(errors[0] + \"\\n\");\n    return Promise.resolve(1);\n  }\n  const extra = positionals[1];\n  if (extra !== undefined) {\n    opts.stderr(`unexpected argument: ${extra}\\n`);\n    return Promise.resolve(1);\n  }\n  const [brand] = positionals;\n  const count = parseCount(values);\n  if (typeof count === \"string\") {\n    opts.stderr(count + \"\\n\");\n    return Promise.resolve(1);\n  }\n  const opaque = flags.has(\"--opaque\");\n  const reverse = flags.has(\"--reverse\");\n  if (reverse && opaque) {\n    opts.stderr(\"cannot use --reverse and --opaque together\\n\");\n    return Promise.resolve(1);\n  }\n  if (!opaque && flags.has(\"--key-format\")) {\n    opts.stderr(\"--key-format requires --opaque\\n\");\n    return Promise.resolve(1);\n  }\n  if (opaque) {\n    const format = parseOpaqueKeyFormat(values, opts);\n    if (isKeyFormatError(format)) {\n      opts.stderr(format + \"\\n\");\n      return Promise.resolve(1);\n    }\n    return runOpaqueGenerate(brand ?? \"\", count, format, opts);\n  }\n  if (reverse) {\n    let codec;\n    try {\n      codec = createReverseTimestampId(brand ?? \"\", codecOpts(opts));\n    } catch (err) {\n      opts.stderr((err as Error).message + \"\\n\");\n      return Promise.resolve(1);\n    }\n    for (let i = 0; i < count; i++) opts.stdout(codec.generate() + \"\\n\");\n    return Promise.resolve(0);\n  }\n  let codec;\n  try {\n    codec = createTimestampId(brand ?? \"\", codecOpts(opts));\n  } catch (err) {\n    opts.stderr((err as Error).message + \"\\n\");\n    return Promise.resolve(1);\n  }\n  for (let i = 0; i < count; i++) opts.stdout(codec.generate() + \"\\n\");\n  return Promise.resolve(0);\n}\n\nasync function runOpaqueGenerate(\n  brand: string,\n  count: number,\n  format: OpaqueKeyFormat,\n  opts: RunOpts,\n): Promise<number> {\n  const keyResult = await loadOpaqueKey(opts, format);\n  if (typeof keyResult === \"string\") {\n    opts.stderr(keyResult + \"\\n\");\n    return 1;\n  }\n  let codec;\n  try {\n    codec = createOpaqueTimestampId(brand, { key: keyResult, ...codecOpts(opts) });\n  } catch (err) {\n    opts.stderr((err as Error).message + \"\\n\");\n    return 1;\n  }\n  for (let i = 0; i < count; i++) opts.stdout((await codec.generate()) + \"\\n\");\n  return 0;\n}\n","import type { Id } from \"../types.js\";\n\ntype InspectOutput = {\n  brand: string;\n  timestamp: Date;\n  canonical: Id<string>;\n  input: string;\n  nowMs: number;\n};\n\ntype WrappedInspectOutput = {\n  brand: string;\n  lookupKey: number | bigint;\n  canonical: Id<string>;\n  input: string;\n};\n\nexport function formatWrappedInspectOutput(result: WrappedInspectOutput): string {\n  const inputLine = describeInputForm(result.input, result.canonical);\n  return [\n    `brand:      ${result.brand}`,\n    `lookup-key: ${result.lookupKey.toString()}`,\n    `canonical:  ${result.canonical}`,\n    `input:      ${inputLine}`,\n    \"\",\n  ].join(\"\\n\");\n}\n\nexport function formatInspectOutput(result: InspectOutput): string {\n  const relative = formatRelative(result.timestamp.getTime(), result.nowMs);\n  const inputLine = describeInputForm(result.input, result.canonical);\n  return [\n    `brand:     ${result.brand}`,\n    `timestamp: ${result.timestamp.toISOString()} (${relative})`,\n    `canonical: ${result.canonical}`,\n    `input:     ${inputLine}`,\n    \"\",\n  ].join(\"\\n\");\n}\n\nexport function describeInputForm(input: string, canonical: Id<string>): string {\n  if (input === canonical) return \"canonical\";\n  const notes: string[] = [];\n  if (input !== input.toLowerCase()) notes.push(\"was uppercase\");\n  if (/[ilo]/i.test(input.slice(4))) notes.push(\"used Crockford aliases\");\n  return `not canonical (${notes.join(\" + \")})`;\n}\n\nconst msPerSecond = 1000;\nconst msPerMinute = 60 * msPerSecond;\nconst msPerHour = 60 * msPerMinute;\nconst msPerDay = 24 * msPerHour;\nconst daysPerMonth = 30.44;\nconst monthsPerYear = 12;\n\nexport function formatRelative(thenMs: number, nowMs: number): string {\n  const diff = nowMs - thenMs;\n  const abs = Math.abs(diff);\n  const suffix = diff < 0 ? \"from now\" : \"ago\";\n\n  const head = headUnits(abs);\n  return head === \"\" ? \"just now\" : `${head} ${suffix}`;\n}\n\nfunction headUnits(abs: number): string {\n  if (abs < msPerMinute) return \"\";\n  if (abs < msPerHour) return unit(Math.round(abs / msPerMinute), \"minute\");\n  if (abs < msPerDay) return unit(Math.round(abs / msPerHour), \"hour\");\n  if (abs < msPerDay * daysPerMonth) return unit(Math.round(abs / msPerDay), \"day\");\n\n  const totalMonths = Math.round(abs / (msPerDay * daysPerMonth));\n  if (totalMonths < monthsPerYear) return unit(totalMonths, \"month\");\n\n  const years = Math.floor(totalMonths / monthsPerYear);\n  const months = totalMonths % monthsPerYear;\n  return months === 0 ? unit(years, \"year\") : `${unit(years, \"year\")} ${unit(months, \"month\")}`;\n}\n\nfunction unit(n: number, name: string): string {\n  return `${n} ${n === 1 ? name : `${name}s`}`;\n}\n","import {\n  decodeWrappingKey,\n  importWrappingKey,\n  type WrappingKey,\n  type WrappingKeyFormat,\n} from \"../wrapped.js\";\nimport type { RunOpts } from \"./types.js\";\n\nfunction parseKeyFormatFlag(values: Map<string, string>): WrappingKeyFormat | string | undefined {\n  const fromFlag = values.get(\"--key-format\");\n  if (fromFlag === undefined) return undefined;\n  if (fromFlag === \"\") return \"--key-format requires a value\";\n  if (fromFlag === \"hex\" || fromFlag === \"base64url\") return fromFlag;\n  return `--key-format must be hex or base64url, got '${fromFlag}'`;\n}\n\nexport function parseWrappingKeyFormat(\n  values: Map<string, string>,\n  opts: RunOpts,\n): WrappingKeyFormat | string {\n  const fromFlag = parseKeyFormatFlag(values);\n  if (fromFlag !== undefined) return fromFlag;\n  const env = opts.env ?? process.env;\n  const fromEnv = env.IDS_WRAPPING_KEY_FORMAT;\n  if (fromEnv === undefined || fromEnv === \"\") return \"hex\";\n  if (fromEnv === \"hex\" || fromEnv === \"base64url\") return fromEnv;\n  return `IDS_WRAPPING_KEY_FORMAT must be hex or base64url, got '${fromEnv}'`;\n}\n\nexport async function loadWrappingKey(\n  opts: RunOpts,\n  format: WrappingKeyFormat,\n): Promise<WrappingKey | string> {\n  const env = opts.env ?? process.env;\n  const raw = env.IDS_WRAPPING_KEY;\n  if (raw === undefined || raw === \"\") return \"missing IDS_WRAPPING_KEY environment variable\";\n  try {\n    return importWrappingKey(decodeWrappingKey(raw, format));\n  } catch (err) {\n    return (err as Error).message;\n  }\n}\n","import { maxGenerateCount } from \"./constants.js\";\n\nexport function usage(): string {\n  return [\n    \"Usage: ids <subcommand> [args]\",\n    \"\",\n    \"Subcommands:\",\n    \"  inspect, i <id> [--opaque] [--wrapped --kind u32|i32|u64|i64] [--reverse] [--key-format hex|base64url]\",\n    \"    Decode an ID and print brand, timestamp (or lookup key), and canonical form.\",\n    \"    --opaque reads the AES key from IDS_KEY (hex by default; IDS_KEY_FORMAT or --key-format).\",\n    \"    --wrapped reads the wrapping key from IDS_WRAPPING_KEY (hex by default; IDS_WRAPPING_KEY_FORMAT or --key-format).\",\n    \"    --kind is required with --wrapped: u32, i32, u64, or i64.\",\n    \"    --reverse decodes a Reverse Timestamp ID (newest-first sort order).\",\n    \"  generate, g <brand> [--count, -c N] [--opaque] [--reverse] [--key-format hex|base64url]\",\n    `    Mint 1..${maxGenerateCount} canonical IDs for the given brand.`,\n    \"    --opaque reads the AES key from IDS_KEY (hex by default; IDS_KEY_FORMAT or --key-format).\",\n    \"    --reverse mints Reverse Timestamp IDs (newest-first sort order).\",\n    \"  keygen, k [--wrapped] [--bits 128|192|256] [--key-format hex|base64url]\",\n    \"    Emit a random AES key for importOpaqueKey (stdout only).\",\n    \"    --wrapped emits a wrapping key for importWrappingKey instead (IDS_WRAPPING_KEY).\",\n    \"\",\n  ].join(\"\\n\");\n}\n","import { createTimestampId } from \"../../timestamp.js\";\nimport { createOpaqueTimestampId, type OpaqueKeyFormat } from \"../../opaque.js\";\nimport { createReverseTimestampId } from \"../../reverse.js\";\nimport { createWrappedKeyId, type WrappingKey } from \"../../wrapped.js\";\nimport { codecOpts } from \"../codec-options.js\";\nimport { formatInspectOutput, formatWrappedInspectOutput } from \"../format.js\";\nimport {\n  isKindError,\n  parseKind,\n  splitFlags,\n  unsupportedFlagForCommand,\n  type WrappedKindValue,\n} from \"../flags.js\";\nimport { isKeyFormatError, loadOpaqueKey, parseOpaqueKeyFormat } from \"../opaque-key.js\";\nimport { loadWrappingKey, parseWrappingKeyFormat } from \"../wrapping-key.js\";\nimport type { RunOpts } from \"../types.js\";\nimport { usage } from \"../usage.js\";\n\nexport function runInspect(args: ReadonlyArray<string>, opts: RunOpts): Promise<number> {\n  const { flags, values, positionals, errors } = splitFlags(args);\n  const unsupported = unsupportedFlagForCommand(\n    \"inspect\",\n    flags,\n    new Set([\"--opaque\", \"--wrapped\", \"--reverse\", \"--kind\", \"--key-format\"]),\n  );\n  if (unsupported !== undefined) {\n    opts.stderr(unsupported + \"\\n\");\n    return Promise.resolve(1);\n  }\n  if (errors[0] !== undefined) {\n    opts.stderr(errors[0] + \"\\n\");\n    return Promise.resolve(1);\n  }\n  const [input] = positionals;\n  if (input === undefined) {\n    opts.stderr(usage());\n    return Promise.resolve(1);\n  }\n  const extra = positionals[1];\n  if (extra !== undefined) {\n    opts.stderr(`unexpected argument: ${extra}\\n`);\n    return Promise.resolve(1);\n  }\n  const opaque = flags.has(\"--opaque\");\n  const wrapped = flags.has(\"--wrapped\");\n  const reverse = flags.has(\"--reverse\");\n  if (opaque && wrapped) {\n    opts.stderr(\"cannot use --wrapped and --opaque together\\n\");\n    return Promise.resolve(1);\n  }\n  if (reverse && opaque) {\n    opts.stderr(\"cannot use --reverse and --opaque together\\n\");\n    return Promise.resolve(1);\n  }\n  if (reverse && wrapped) {\n    opts.stderr(\"cannot use --reverse and --wrapped together\\n\");\n    return Promise.resolve(1);\n  }\n  if (!opaque && !wrapped && flags.has(\"--key-format\")) {\n    opts.stderr(\"--key-format requires --opaque or --wrapped\\n\");\n    return Promise.resolve(1);\n  }\n  const brand = input.slice(0, 3).toLowerCase();\n  if (wrapped) {\n    const kind = parseKind(values);\n    if (kind === undefined) {\n      opts.stderr(\"--kind is required with --wrapped\\n\");\n      return Promise.resolve(1);\n    }\n    if (isKindError(kind)) {\n      opts.stderr(kind + \"\\n\");\n      return Promise.resolve(1);\n    }\n    const format = parseWrappingKeyFormat(values, opts);\n    if (isKeyFormatError(format)) {\n      opts.stderr(format + \"\\n\");\n      return Promise.resolve(1);\n    }\n    return runWrappedInspect(brand, input, kind, format, opts);\n  }\n  if (opaque) {\n    const format = parseOpaqueKeyFormat(values, opts);\n    if (isKeyFormatError(format)) {\n      opts.stderr(format + \"\\n\");\n      return Promise.resolve(1);\n    }\n    return runOpaqueInspect(brand, input, format, opts);\n  }\n  if (reverse) {\n    let reverseCodec;\n    try {\n      reverseCodec = createReverseTimestampId(brand, codecOpts(opts));\n    } catch (err) {\n      opts.stderr((err as Error).message + \"\\n\");\n      return Promise.resolve(1);\n    }\n    const reverseValidation = reverseCodec[\"~standard\"].validate(input);\n    if (reverseValidation.issues) {\n      opts.stderr(reverseValidation.issues[0]!.message + \"\\n\");\n      return Promise.resolve(1);\n    }\n    const reverseCanonical = reverseValidation.value;\n    const reverseTimestamp = reverseCodec.extractTimestamp(reverseCanonical);\n    const reverseNowMs = (opts.now ?? Date.now)();\n    opts.stdout(\n      formatInspectOutput({\n        brand,\n        timestamp: reverseTimestamp,\n        canonical: reverseCanonical,\n        input,\n        nowMs: reverseNowMs,\n      }),\n    );\n    return Promise.resolve(0);\n  }\n  let codec;\n  try {\n    codec = createTimestampId(brand, codecOpts(opts));\n  } catch (err) {\n    opts.stderr((err as Error).message + \"\\n\");\n    return Promise.resolve(1);\n  }\n  const validation = codec[\"~standard\"].validate(input);\n  if (validation.issues) {\n    opts.stderr(validation.issues[0]!.message + \"\\n\");\n    return Promise.resolve(1);\n  }\n  const canonical = validation.value;\n  const timestamp = codec.extractTimestamp(canonical);\n  const nowMs = (opts.now ?? Date.now)();\n  opts.stdout(\n    formatInspectOutput({\n      brand,\n      timestamp,\n      canonical,\n      input,\n      nowMs,\n    }),\n  );\n  return Promise.resolve(0);\n}\n\nasync function runWrappedInspect(\n  brand: string,\n  input: string,\n  kind: WrappedKindValue,\n  format: string,\n  opts: RunOpts,\n): Promise<number> {\n  const keyResult = await loadWrappingKey(opts, format as \"hex\" | \"base64url\");\n  if (typeof keyResult === \"string\") {\n    opts.stderr(keyResult + \"\\n\");\n    return 1;\n  }\n  let codec;\n  try {\n    codec = createWrappedKeyId(brand, {\n      kind,\n      keys: [keyResult as WrappingKey],\n      allowDuplicateBrand: true,\n    });\n  } catch (err) {\n    opts.stderr((err as Error).message + \"\\n\");\n    return 1;\n  }\n  const validation = codec[\"~standard\"].validate(input);\n  if (validation.issues) {\n    opts.stderr(validation.issues[0]!.message + \"\\n\");\n    return 1;\n  }\n  const canonical = validation.value;\n  let lookupKey;\n  try {\n    lookupKey = await codec.unwrap(canonical);\n  } catch (err) {\n    opts.stderr((err as Error).message + \"\\n\");\n    return 1;\n  }\n  opts.stdout(\n    formatWrappedInspectOutput({\n      brand,\n      lookupKey,\n      canonical,\n      input,\n    }),\n  );\n  return 0;\n}\n\nasync function runOpaqueInspect(\n  brand: string,\n  input: string,\n  format: OpaqueKeyFormat,\n  opts: RunOpts,\n): Promise<number> {\n  const keyResult = await loadOpaqueKey(opts, format);\n  if (typeof keyResult === \"string\") {\n    opts.stderr(keyResult + \"\\n\");\n    return 1;\n  }\n  let codec;\n  try {\n    codec = createOpaqueTimestampId(brand, { key: keyResult, ...codecOpts(opts) });\n  } catch (err) {\n    opts.stderr((err as Error).message + \"\\n\");\n    return 1;\n  }\n  const validation = codec[\"~standard\"].validate(input);\n  if (validation.issues) {\n    opts.stderr(validation.issues[0]!.message + \"\\n\");\n    return 1;\n  }\n  const canonical = validation.value;\n  const timestamp = await codec.extractTimestamp(canonical);\n  const nowMs = (opts.now ?? Date.now)();\n  opts.stderr(\n    \"note: timestamp assumes IDS_KEY matches the key used at generation; a wrong key yields a plausible but incorrect timestamp\\n\",\n  );\n  opts.stdout(\n    formatInspectOutput({\n      brand,\n      timestamp,\n      canonical,\n      input,\n      nowMs,\n    }),\n  );\n  return 0;\n}\n","import { encodeOpaqueKey } from \"../../opaque.js\";\nimport { encodeWrappingKey } from \"../../wrapped.js\";\nimport { parseBits, splitFlags, unsupportedFlagForCommand } from \"../flags.js\";\nimport { isKeyFormatError, parseKeygenFormat } from \"../opaque-key.js\";\nimport type { RunOpts } from \"../types.js\";\n\nexport function runKeygen(args: ReadonlyArray<string>, opts: RunOpts): Promise<number> {\n  const { flags, values, positionals, errors } = splitFlags(args);\n  const unsupported = unsupportedFlagForCommand(\n    \"keygen\",\n    flags,\n    new Set([\"--wrapped\", \"--bits\", \"--key-format\"]),\n  );\n  if (unsupported !== undefined) {\n    opts.stderr(unsupported + \"\\n\");\n    return Promise.resolve(1);\n  }\n  if (errors[0] !== undefined) {\n    opts.stderr(errors[0] + \"\\n\");\n    return Promise.resolve(1);\n  }\n  const extra = positionals[0];\n  if (extra !== undefined) {\n    opts.stderr(`unexpected argument: ${extra}\\n`);\n    return Promise.resolve(1);\n  }\n  const bits = parseBits(values);\n  if (typeof bits === \"string\") {\n    opts.stderr(bits + \"\\n\");\n    return Promise.resolve(1);\n  }\n  const format = parseKeygenFormat(values);\n  if (isKeyFormatError(format)) {\n    opts.stderr(format + \"\\n\");\n    return Promise.resolve(1);\n  }\n  const bytes = new Uint8Array(bits / 8);\n  crypto.getRandomValues(bytes);\n  const wrapped = flags.has(\"--wrapped\");\n  opts.stdout((wrapped ? encodeWrappingKey(bytes, format) : encodeOpaqueKey(bytes, format)) + \"\\n\");\n  return Promise.resolve(0);\n}\n","import { runGenerate } from \"./cli/commands/generate.js\";\nimport { runInspect } from \"./cli/commands/inspect.js\";\nimport { runKeygen } from \"./cli/commands/keygen.js\";\nimport type { CommandHandler, RunOpts } from \"./cli/types.js\";\nimport { usage } from \"./cli/usage.js\";\n\nexport type { RunOpts } from \"./cli/types.js\";\n\ntype Command = {\n  names: ReadonlyArray<string>;\n  run: CommandHandler;\n};\n\nconst commands: ReadonlyArray<Command> = [\n  { names: [\"generate\", \"g\"], run: runGenerate },\n  { names: [\"inspect\", \"i\"], run: runInspect },\n  { names: [\"keygen\", \"k\"], run: runKeygen },\n];\n\nexport async function run(opts: RunOpts): Promise<number> {\n  const [subcommand, ...rest] = opts.argv;\n  const command = commands.find((candidate) => candidate.names.includes(subcommand ?? \"\"));\n  if (command !== undefined) return command.run(rest, opts);\n  if (subcommand === undefined || subcommand === \"--help\" || subcommand === \"-h\") {\n    opts.stdout(usage());\n    return 0;\n  }\n  opts.stderr(usage());\n  return 1;\n}\n","#!/usr/bin/env node\nimport { run } from \"../src/cli.js\";\n\nprocess.exitCode = await run({\n  argv: process.argv.slice(2),\n  stdout: (s) => process.stdout.write(s),\n  stderr: (s) => process.stderr.write(s),\n});\n"],"mappings":";;;;;;AAGA,SAAgB,UAAU,MAA0C;CAGlE,MAAM,IAA+B,EAAE,qBAAqB,KAAK;CACjE,IAAI,KAAK,QAAQ,KAAA,GAAW,EAAE,MAAM,KAAK;CACzC,IAAI,KAAK,QAAQ,KAAA,GAAW,EAAE,MAAM,KAAK;CACzC,OAAO;AACT;;;ACVA,MAAa,mBAAmB;;;ACShC,SAAS,eAAe,KAAgE;CACtF,MAAM,KAAK,IAAI,QAAQ,GAAG;CAC1B,IAAI,MAAM,GAAG,OAAO;EAAE,MAAM;EAAK,aAAa,KAAA;CAAU;CACxD,OAAO;EAAE,MAAM,IAAI,MAAM,GAAG,EAAE;EAAG,aAAa,IAAI,MAAM,KAAK,CAAC;CAAE;AAClE;AAEA,SAAgB,WAAW,MAA0C;CACnE,MAAM,wBAAQ,IAAI,IAAY;CAC9B,MAAM,yBAAS,IAAI,IAAoB;CACvC,MAAM,cAAwB,CAAC;CAC/B,MAAM,SAAmB,CAAC;CAC1B,MAAM,4BAAY,IAAI,IAAY;CAClC,MAAM,aAAa,IAAI,IAAI;EAAC;EAAW;EAAM;EAAU;EAAgB;CAAQ,CAAC;CAChF,MAAM,WAAW,SAAiB;EAChC,MAAM,YAAY,cAAc,IAAI;EACpC,IAAI,UAAU,IAAI,SAAS,GAAG,OAAO,KAAK,mBAAmB,WAAW;EACxE,UAAU,IAAI,SAAS;EACvB,MAAM,IAAI,IAAI;CAChB;CACA,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,MAAM,KAAK;EACjB,MAAM,EAAE,MAAM,gBAAgB,eAAe,GAAG;EAChD,IAAI,SAAS,cAAc,SAAS,eAAe,SAAS,aAAa;GACvE,QAAQ,IAAI;GACZ,IAAI,gBAAgB,KAAA,GAAW,OAAO,KAAK,+BAA+B,MAAM;GAChF;EACF;EACA,IAAI,WAAW,IAAI,IAAI,GAAG;GACxB,IAAI,gBAAgB,KAAA,GAAW;IAC7B,QAAQ,IAAI;IACZ,OAAO,IAAI,MAAM,WAAW;IAC5B;GACF;GACA,MAAM,QAAQ,KAAK,IAAI;GACvB,IAAI,UAAU,KAAA,KAAa,MAAM,WAAW,GAAG,GAAG;IAChD,QAAQ,IAAI;IACZ,OAAO,IAAI,MAAM,EAAE;IACnB;GACF;GACA,QAAQ,IAAI;GACZ,OAAO,IAAI,MAAM,KAAK;GACtB;GACA;EACF;EACA,IAAI,KAAK,WAAW,GAAG,GAAG;GACxB,QAAQ,IAAI;GACZ;EACF;EACA,YAAY,KAAK,GAAG;CACtB;CACA,OAAO;EAAE;EAAO;EAAQ;EAAa;CAAO;AAC9C;AAEA,SAAS,cAAc,MAAsB;CAC3C,IAAI,SAAS,MAAM,OAAO;CAC1B,OAAO;AACT;AAEA,MAAM,aAAa,IAAI,IAAI;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAgB,0BACd,SACA,OACA,SACoB;CACpB,KAAK,MAAM,QAAQ,OACjB,IAAI,CAAC,QAAQ,IAAI,IAAI,GACnB,OAAO,WAAW,IAAI,IAAI,IACtB,wBAAwB,QAAQ,IAAI,SACpC,qBAAqB;AAI/B;AAEA,SAAgB,WAAW,QAA8C;CACvE,MAAM,MAAM,OAAO,IAAI,SAAS,KAAK,OAAO,IAAI,IAAI;CACpD,IAAI,QAAQ,KAAA,GAAW,OAAO;CAC9B,IAAI,QAAQ,IAAI,OAAO;CACvB,IAAI,CAAC,gBAAgB,KAAK,GAAG,GAAG,OAAO,4CAA4C,IAAI;CACvF,MAAM,QAAQ,OAAO,SAAS,KAAK,EAAE;CACrC,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAA,KAClC,OAAO,2BAA2B,iBAAiB,SAAS,IAAI;CAElE,OAAO;AACT;AAEA,SAAgB,UAAU,QAA8C;CACtE,MAAM,MAAM,OAAO,IAAI,QAAQ;CAC/B,IAAI,QAAQ,KAAA,GAAW,OAAO;CAC9B,IAAI,QAAQ,IAAI,OAAO;CACvB,IAAI,QAAQ,OAAO,OAAO;CAC1B,IAAI,QAAQ,OAAO,OAAO;CAC1B,IAAI,QAAQ,OAAO,OAAO;CAC1B,OAAO,yCAAyC,IAAI;AACtD;AAIA,SAAgB,UAAU,QAAoE;CAC5F,MAAM,MAAM,OAAO,IAAI,QAAQ;CAC/B,IAAI,QAAQ,KAAA,GAAW,OAAO,KAAA;CAC9B,IAAI,QAAQ,IAAI,OAAO;CACvB,IAAI,QAAQ,SAAS,QAAQ,SAAS,QAAQ,SAAS,QAAQ,OAAO,OAAO;CAC7E,OAAO,8CAA8C,IAAI;AAC3D;AAEA,SAAgB,YAAY,QAAqD;CAC/E,OAAO,WAAW,SAAS,WAAW,SAAS,WAAW,SAAS,WAAW;AAChF;;;ACvHA,SAAgB,iBAAiB,QAAoD;CACnF,OAAO,WAAW,SAAS,WAAW;AACxC;AAEA,SAASA,qBAAmB,QAAmE;CAC7F,MAAM,WAAW,OAAO,IAAI,cAAc;CAC1C,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;CACnC,IAAI,aAAa,IAAI,OAAO;CAC5B,IAAI,aAAa,SAAS,aAAa,aAAa,OAAO;CAC3D,OAAO,+CAA+C,SAAS;AACjE;AAEA,SAAgB,kBAAkB,QAAuD;CACvF,MAAM,WAAWA,qBAAmB,MAAM;CAC1C,IAAI,aAAa,KAAA,GAAW,OAAO;CACnC,OAAO;AACT;AAEA,SAAgB,qBACd,QACA,MAC0B;CAC1B,MAAM,WAAWA,qBAAmB,MAAM;CAC1C,IAAI,aAAa,KAAA,GAAW,OAAO;CAEnC,MAAM,WADM,KAAK,OAAO,QAAQ,IAAA,CACZ;CACpB,IAAI,YAAY,KAAA,KAAa,YAAY,IAAI,OAAO;CACpD,IAAI,YAAY,SAAS,YAAY,aAAa,OAAO;CACzD,OAAO,iDAAiD,QAAQ;AAClE;AAEA,eAAsB,cACpB,MACA,QAC6B;CAE7B,MAAM,OADM,KAAK,OAAO,QAAQ,IAAA,CAChB;CAChB,IAAI,QAAQ,KAAA,KAAa,QAAQ,IAAI,OAAO;CAC5C,IAAI;EACF,OAAO,gBAAgB,gBAAgB,KAAK,MAAM,CAAC;CACrD,SAAS,KAAK;EACZ,OAAQ,IAAc;CACxB;AACF;;;AC3CA,SAAgB,YAAY,MAA6B,MAAgC;CACvF,MAAM,EAAE,OAAO,QAAQ,aAAa,WAAW,WAAW,IAAI;CAC9D,MAAM,cAAc,0BAClB,YACA,OACA,IAAI,IAAI;EAAC;EAAW;EAAM;EAAY;EAAa;CAAc,CAAC,CACpE;CACA,IAAI,gBAAgB,KAAA,GAAW;EAC7B,KAAK,OAAO,cAAc,IAAI;EAC9B,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI,OAAO,OAAO,KAAA,GAAW;EAC3B,KAAK,OAAO,OAAO,KAAK,IAAI;EAC5B,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,QAAQ,YAAY;CAC1B,IAAI,UAAU,KAAA,GAAW;EACvB,KAAK,OAAO,wBAAwB,MAAM,GAAG;EAC7C,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,CAAC,SAAS;CAChB,MAAM,QAAQ,WAAW,MAAM;CAC/B,IAAI,OAAO,UAAU,UAAU;EAC7B,KAAK,OAAO,QAAQ,IAAI;EACxB,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,SAAS,MAAM,IAAI,UAAU;CACnC,MAAM,UAAU,MAAM,IAAI,WAAW;CACrC,IAAI,WAAW,QAAQ;EACrB,KAAK,OAAO,8CAA8C;EAC1D,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI,CAAC,UAAU,MAAM,IAAI,cAAc,GAAG;EACxC,KAAK,OAAO,kCAAkC;EAC9C,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI,QAAQ;EACV,MAAM,SAAS,qBAAqB,QAAQ,IAAI;EAChD,IAAI,iBAAiB,MAAM,GAAG;GAC5B,KAAK,OAAO,SAAS,IAAI;GACzB,OAAO,QAAQ,QAAQ,CAAC;EAC1B;EACA,OAAO,kBAAkB,SAAS,IAAI,OAAO,QAAQ,IAAI;CAC3D;CACA,IAAI,SAAS;EACX,IAAI;EACJ,IAAI;GACF,QAAQ,yBAAyB,SAAS,IAAI,UAAU,IAAI,CAAC;EAC/D,SAAS,KAAK;GACZ,KAAK,OAAQ,IAAc,UAAU,IAAI;GACzC,OAAO,QAAQ,QAAQ,CAAC;EAC1B;EACA,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,KAAK,KAAK,OAAO,MAAM,SAAS,IAAI,IAAI;EACnE,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI;CACJ,IAAI;EACF,QAAQ,kBAAkB,SAAS,IAAI,UAAU,IAAI,CAAC;CACxD,SAAS,KAAK;EACZ,KAAK,OAAQ,IAAc,UAAU,IAAI;EACzC,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,KAAK,KAAK,OAAO,MAAM,SAAS,IAAI,IAAI;CACnE,OAAO,QAAQ,QAAQ,CAAC;AAC1B;AAEA,eAAe,kBACb,OACA,OACA,QACA,MACiB;CACjB,MAAM,YAAY,MAAM,cAAc,MAAM,MAAM;CAClD,IAAI,OAAO,cAAc,UAAU;EACjC,KAAK,OAAO,YAAY,IAAI;EAC5B,OAAO;CACT;CACA,IAAI;CACJ,IAAI;EACF,QAAQ,wBAAwB,OAAO;GAAE,KAAK;GAAW,GAAG,UAAU,IAAI;EAAE,CAAC;CAC/E,SAAS,KAAK;EACZ,KAAK,OAAQ,IAAc,UAAU,IAAI;EACzC,OAAO;CACT;CACA,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,KAAK,KAAK,OAAQ,MAAM,MAAM,SAAS,IAAK,IAAI;CAC3E,OAAO;AACT;;;AC7EA,SAAgB,2BAA2B,QAAsC;CAC/E,MAAM,YAAY,kBAAkB,OAAO,OAAO,OAAO,SAAS;CAClE,OAAO;EACL,eAAe,OAAO;EACtB,eAAe,OAAO,UAAU,SAAS;EACzC,eAAe,OAAO;EACtB,eAAe;EACf;CACF,CAAC,CAAC,KAAK,IAAI;AACb;AAEA,SAAgB,oBAAoB,QAA+B;CACjE,MAAM,WAAW,eAAe,OAAO,UAAU,QAAQ,GAAG,OAAO,KAAK;CACxE,MAAM,YAAY,kBAAkB,OAAO,OAAO,OAAO,SAAS;CAClE,OAAO;EACL,cAAc,OAAO;EACrB,cAAc,OAAO,UAAU,YAAY,EAAE,IAAI,SAAS;EAC1D,cAAc,OAAO;EACrB,cAAc;EACd;CACF,CAAC,CAAC,KAAK,IAAI;AACb;AAEA,SAAgB,kBAAkB,OAAe,WAA+B;CAC9E,IAAI,UAAU,WAAW,OAAO;CAChC,MAAM,QAAkB,CAAC;CACzB,IAAI,UAAU,MAAM,YAAY,GAAG,MAAM,KAAK,eAAe;CAC7D,IAAI,SAAS,KAAK,MAAM,MAAM,CAAC,CAAC,GAAG,MAAM,KAAK,wBAAwB;CACtE,OAAO,kBAAkB,MAAM,KAAK,KAAK,EAAE;AAC7C;AAGA,MAAM,cAAc,KAAK;AACzB,MAAM,YAAY,KAAK;AACvB,MAAM,WAAW,KAAK;AACtB,MAAM,eAAe;AACrB,MAAM,gBAAgB;AAEtB,SAAgB,eAAe,QAAgB,OAAuB;CACpE,MAAM,OAAO,QAAQ;CACrB,MAAM,MAAM,KAAK,IAAI,IAAI;CACzB,MAAM,SAAS,OAAO,IAAI,aAAa;CAEvC,MAAM,OAAO,UAAU,GAAG;CAC1B,OAAO,SAAS,KAAK,aAAa,GAAG,KAAK,GAAG;AAC/C;AAEA,SAAS,UAAU,KAAqB;CACtC,IAAI,MAAM,aAAa,OAAO;CAC9B,IAAI,MAAM,WAAW,OAAO,KAAK,KAAK,MAAM,MAAM,WAAW,GAAG,QAAQ;CACxE,IAAI,MAAM,UAAU,OAAO,KAAK,KAAK,MAAM,MAAM,SAAS,GAAG,MAAM;CACnE,IAAI,MAAM,WAAW,cAAc,OAAO,KAAK,KAAK,MAAM,MAAM,QAAQ,GAAG,KAAK;CAEhF,MAAM,cAAc,KAAK,MAAM,OAAO,WAAW,aAAa;CAC9D,IAAI,cAAc,eAAe,OAAO,KAAK,aAAa,OAAO;CAEjE,MAAM,QAAQ,KAAK,MAAM,cAAc,aAAa;CACpD,MAAM,SAAS,cAAc;CAC7B,OAAO,WAAW,IAAI,KAAK,OAAO,MAAM,IAAI,GAAG,KAAK,OAAO,MAAM,EAAE,GAAG,KAAK,QAAQ,OAAO;AAC5F;AAEA,SAAS,KAAK,GAAW,MAAsB;CAC7C,OAAO,GAAG,EAAE,GAAG,MAAM,IAAI,OAAO,GAAG,KAAK;AAC1C;;;ACxEA,SAAS,mBAAmB,QAAqE;CAC/F,MAAM,WAAW,OAAO,IAAI,cAAc;CAC1C,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;CACnC,IAAI,aAAa,IAAI,OAAO;CAC5B,IAAI,aAAa,SAAS,aAAa,aAAa,OAAO;CAC3D,OAAO,+CAA+C,SAAS;AACjE;AAEA,SAAgB,uBACd,QACA,MAC4B;CAC5B,MAAM,WAAW,mBAAmB,MAAM;CAC1C,IAAI,aAAa,KAAA,GAAW,OAAO;CAEnC,MAAM,WADM,KAAK,OAAO,QAAQ,IAAA,CACZ;CACpB,IAAI,YAAY,KAAA,KAAa,YAAY,IAAI,OAAO;CACpD,IAAI,YAAY,SAAS,YAAY,aAAa,OAAO;CACzD,OAAO,0DAA0D,QAAQ;AAC3E;AAEA,eAAsB,gBACpB,MACA,QAC+B;CAE/B,MAAM,OADM,KAAK,OAAO,QAAQ,IAAA,CAChB;CAChB,IAAI,QAAQ,KAAA,KAAa,QAAQ,IAAI,OAAO;CAC5C,IAAI;EACF,OAAO,kBAAkB,kBAAkB,KAAK,MAAM,CAAC;CACzD,SAAS,KAAK;EACZ,OAAQ,IAAc;CACxB;AACF;;;ACvCA,SAAgB,QAAgB;CAC9B,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,eAAe,iBAAiB;EAChC;EACA;EACA;EACA;EACA;EACA;CACF,CAAC,CAAC,KAAK,IAAI;AACb;;;ACJA,SAAgB,WAAW,MAA6B,MAAgC;CACtF,MAAM,EAAE,OAAO,QAAQ,aAAa,WAAW,WAAW,IAAI;CAC9D,MAAM,cAAc,0BAClB,WACA,OACA,IAAI,IAAI;EAAC;EAAY;EAAa;EAAa;EAAU;CAAc,CAAC,CAC1E;CACA,IAAI,gBAAgB,KAAA,GAAW;EAC7B,KAAK,OAAO,cAAc,IAAI;EAC9B,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI,OAAO,OAAO,KAAA,GAAW;EAC3B,KAAK,OAAO,OAAO,KAAK,IAAI;EAC5B,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,CAAC,SAAS;CAChB,IAAI,UAAU,KAAA,GAAW;EACvB,KAAK,OAAO,MAAM,CAAC;EACnB,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,QAAQ,YAAY;CAC1B,IAAI,UAAU,KAAA,GAAW;EACvB,KAAK,OAAO,wBAAwB,MAAM,GAAG;EAC7C,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,SAAS,MAAM,IAAI,UAAU;CACnC,MAAM,UAAU,MAAM,IAAI,WAAW;CACrC,MAAM,UAAU,MAAM,IAAI,WAAW;CACrC,IAAI,UAAU,SAAS;EACrB,KAAK,OAAO,8CAA8C;EAC1D,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI,WAAW,QAAQ;EACrB,KAAK,OAAO,8CAA8C;EAC1D,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI,WAAW,SAAS;EACtB,KAAK,OAAO,+CAA+C;EAC3D,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI,CAAC,UAAU,CAAC,WAAW,MAAM,IAAI,cAAc,GAAG;EACpD,KAAK,OAAO,+CAA+C;EAC3D,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,QAAQ,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,YAAY;CAC5C,IAAI,SAAS;EACX,MAAM,OAAO,UAAU,MAAM;EAC7B,IAAI,SAAS,KAAA,GAAW;GACtB,KAAK,OAAO,qCAAqC;GACjD,OAAO,QAAQ,QAAQ,CAAC;EAC1B;EACA,IAAI,YAAY,IAAI,GAAG;GACrB,KAAK,OAAO,OAAO,IAAI;GACvB,OAAO,QAAQ,QAAQ,CAAC;EAC1B;EACA,MAAM,SAAS,uBAAuB,QAAQ,IAAI;EAClD,IAAI,iBAAiB,MAAM,GAAG;GAC5B,KAAK,OAAO,SAAS,IAAI;GACzB,OAAO,QAAQ,QAAQ,CAAC;EAC1B;EACA,OAAO,kBAAkB,OAAO,OAAO,MAAM,QAAQ,IAAI;CAC3D;CACA,IAAI,QAAQ;EACV,MAAM,SAAS,qBAAqB,QAAQ,IAAI;EAChD,IAAI,iBAAiB,MAAM,GAAG;GAC5B,KAAK,OAAO,SAAS,IAAI;GACzB,OAAO,QAAQ,QAAQ,CAAC;EAC1B;EACA,OAAO,iBAAiB,OAAO,OAAO,QAAQ,IAAI;CACpD;CACA,IAAI,SAAS;EACX,IAAI;EACJ,IAAI;GACF,eAAe,yBAAyB,OAAO,UAAU,IAAI,CAAC;EAChE,SAAS,KAAK;GACZ,KAAK,OAAQ,IAAc,UAAU,IAAI;GACzC,OAAO,QAAQ,QAAQ,CAAC;EAC1B;EACA,MAAM,oBAAoB,aAAa,YAAY,CAAC,SAAS,KAAK;EAClE,IAAI,kBAAkB,QAAQ;GAC5B,KAAK,OAAO,kBAAkB,OAAO,EAAE,CAAE,UAAU,IAAI;GACvD,OAAO,QAAQ,QAAQ,CAAC;EAC1B;EACA,MAAM,mBAAmB,kBAAkB;EAC3C,MAAM,mBAAmB,aAAa,iBAAiB,gBAAgB;EACvE,MAAM,gBAAgB,KAAK,OAAO,KAAK,IAAA,CAAK;EAC5C,KAAK,OACH,oBAAoB;GAClB;GACA,WAAW;GACX,WAAW;GACX;GACA,OAAO;EACT,CAAC,CACH;EACA,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI;CACJ,IAAI;EACF,QAAQ,kBAAkB,OAAO,UAAU,IAAI,CAAC;CAClD,SAAS,KAAK;EACZ,KAAK,OAAQ,IAAc,UAAU,IAAI;EACzC,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,aAAa,MAAM,YAAY,CAAC,SAAS,KAAK;CACpD,IAAI,WAAW,QAAQ;EACrB,KAAK,OAAO,WAAW,OAAO,EAAE,CAAE,UAAU,IAAI;EAChD,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,YAAY,WAAW;CAC7B,MAAM,YAAY,MAAM,iBAAiB,SAAS;CAClD,MAAM,SAAS,KAAK,OAAO,KAAK,IAAA,CAAK;CACrC,KAAK,OACH,oBAAoB;EAClB;EACA;EACA;EACA;EACA;CACF,CAAC,CACH;CACA,OAAO,QAAQ,QAAQ,CAAC;AAC1B;AAEA,eAAe,kBACb,OACA,OACA,MACA,QACA,MACiB;CACjB,MAAM,YAAY,MAAM,gBAAgB,MAAM,MAA6B;CAC3E,IAAI,OAAO,cAAc,UAAU;EACjC,KAAK,OAAO,YAAY,IAAI;EAC5B,OAAO;CACT;CACA,IAAI;CACJ,IAAI;EACF,QAAQ,mBAAmB,OAAO;GAChC;GACA,MAAM,CAAC,SAAwB;GAC/B,qBAAqB;EACvB,CAAC;CACH,SAAS,KAAK;EACZ,KAAK,OAAQ,IAAc,UAAU,IAAI;EACzC,OAAO;CACT;CACA,MAAM,aAAa,MAAM,YAAY,CAAC,SAAS,KAAK;CACpD,IAAI,WAAW,QAAQ;EACrB,KAAK,OAAO,WAAW,OAAO,EAAE,CAAE,UAAU,IAAI;EAChD,OAAO;CACT;CACA,MAAM,YAAY,WAAW;CAC7B,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,MAAM,OAAO,SAAS;CAC1C,SAAS,KAAK;EACZ,KAAK,OAAQ,IAAc,UAAU,IAAI;EACzC,OAAO;CACT;CACA,KAAK,OACH,2BAA2B;EACzB;EACA;EACA;EACA;CACF,CAAC,CACH;CACA,OAAO;AACT;AAEA,eAAe,iBACb,OACA,OACA,QACA,MACiB;CACjB,MAAM,YAAY,MAAM,cAAc,MAAM,MAAM;CAClD,IAAI,OAAO,cAAc,UAAU;EACjC,KAAK,OAAO,YAAY,IAAI;EAC5B,OAAO;CACT;CACA,IAAI;CACJ,IAAI;EACF,QAAQ,wBAAwB,OAAO;GAAE,KAAK;GAAW,GAAG,UAAU,IAAI;EAAE,CAAC;CAC/E,SAAS,KAAK;EACZ,KAAK,OAAQ,IAAc,UAAU,IAAI;EACzC,OAAO;CACT;CACA,MAAM,aAAa,MAAM,YAAY,CAAC,SAAS,KAAK;CACpD,IAAI,WAAW,QAAQ;EACrB,KAAK,OAAO,WAAW,OAAO,EAAE,CAAE,UAAU,IAAI;EAChD,OAAO;CACT;CACA,MAAM,YAAY,WAAW;CAC7B,MAAM,YAAY,MAAM,MAAM,iBAAiB,SAAS;CACxD,MAAM,SAAS,KAAK,OAAO,KAAK,IAAA,CAAK;CACrC,KAAK,OACH,8HACF;CACA,KAAK,OACH,oBAAoB;EAClB;EACA;EACA;EACA;EACA;CACF,CAAC,CACH;CACA,OAAO;AACT;;;AC9NA,SAAgB,UAAU,MAA6B,MAAgC;CACrF,MAAM,EAAE,OAAO,QAAQ,aAAa,WAAW,WAAW,IAAI;CAC9D,MAAM,cAAc,0BAClB,UACA,OACA,IAAI,IAAI;EAAC;EAAa;EAAU;CAAc,CAAC,CACjD;CACA,IAAI,gBAAgB,KAAA,GAAW;EAC7B,KAAK,OAAO,cAAc,IAAI;EAC9B,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI,OAAO,OAAO,KAAA,GAAW;EAC3B,KAAK,OAAO,OAAO,KAAK,IAAI;EAC5B,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,QAAQ,YAAY;CAC1B,IAAI,UAAU,KAAA,GAAW;EACvB,KAAK,OAAO,wBAAwB,MAAM,GAAG;EAC7C,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,OAAO,UAAU,MAAM;CAC7B,IAAI,OAAO,SAAS,UAAU;EAC5B,KAAK,OAAO,OAAO,IAAI;EACvB,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,SAAS,kBAAkB,MAAM;CACvC,IAAI,iBAAiB,MAAM,GAAG;EAC5B,KAAK,OAAO,SAAS,IAAI;EACzB,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,QAAQ,IAAI,WAAW,OAAO,CAAC;CACrC,OAAO,gBAAgB,KAAK;CAC5B,MAAM,UAAU,MAAM,IAAI,WAAW;CACrC,KAAK,QAAQ,UAAU,kBAAkB,OAAO,MAAM,IAAI,gBAAgB,OAAO,MAAM,KAAK,IAAI;CAChG,OAAO,QAAQ,QAAQ,CAAC;AAC1B;;;AC5BA,MAAM,WAAmC;CACvC;EAAE,OAAO,CAAC,YAAY,GAAG;EAAG,KAAK;CAAY;CAC7C;EAAE,OAAO,CAAC,WAAW,GAAG;EAAG,KAAK;CAAW;CAC3C;EAAE,OAAO,CAAC,UAAU,GAAG;EAAG,KAAK;CAAU;AAC3C;AAEA,eAAsB,IAAI,MAAgC;CACxD,MAAM,CAAC,YAAY,GAAG,QAAQ,KAAK;CACnC,MAAM,UAAU,SAAS,MAAM,cAAc,UAAU,MAAM,SAAS,cAAc,EAAE,CAAC;CACvF,IAAI,YAAY,KAAA,GAAW,OAAO,QAAQ,IAAI,MAAM,IAAI;CACxD,IAAI,eAAe,KAAA,KAAa,eAAe,YAAY,eAAe,MAAM;EAC9E,KAAK,OAAO,MAAM,CAAC;EACnB,OAAO;CACT;CACA,KAAK,OAAO,MAAM,CAAC;CACnB,OAAO;AACT;;;AC1BA,QAAQ,WAAW,MAAM,IAAI;CAC3B,MAAM,QAAQ,KAAK,MAAM,CAAC;CAC1B,SAAS,MAAM,QAAQ,OAAO,MAAM,CAAC;CACrC,SAAS,MAAM,QAAQ,OAAO,MAAM,CAAC;AACvC,CAAC"}
+{"version":3,"file":"cli.mjs","names":["parseKeyFormatFlag"],"sources":["../src/cli/codec-options.ts","../src/cli/format.ts","../src/cli/constants.ts","../src/cli/flags.ts","../src/cli/opaque-key.ts","../src/cli/commands/generate.ts","../src/cli/wrapping-key.ts","../src/cli/usage.ts","../src/cli/commands/inspect.ts","../src/cli/commands/keygen.ts","../src/cli.ts","../bin/cli.ts"],"sourcesContent":["import type { TimestampOptions } from \"../timestamp.js\";\nimport type { RunOpts } from \"./types.js\";\n\nexport function codecOpts(opts: RunOpts): Partial<TimestampOptions> {\n  // CLI invocations are intentionally ephemeral: one codec per run, never\n  // retained, so this is not the duplicate-brand warning case.\n  const o: Partial<TimestampOptions> = { allowDuplicateBrand: true };\n  if (opts.now !== undefined) o.now = opts.now;\n  if (opts.rng !== undefined) o.rng = opts.rng;\n  return o;\n}\n","import { isIdsError } from \"../error.js\";\nimport type { Id } from \"../types.js\";\n\ntype InspectOutput = {\n  brand: string;\n  timestamp: Date;\n  canonical: Id<string>;\n  input: string;\n  nowMs: number;\n};\n\ntype WrappedInspectOutput = {\n  brand: string;\n  lookupKey: number | bigint;\n  canonical: Id<string>;\n  input: string;\n};\n\nexport function formatCliError(err: unknown): string {\n  return isIdsError(err)\n    ? `${err.code}: ${err.message}`\n    : err instanceof Error\n      ? err.message\n      : String(err);\n}\n\nexport function formatWrappedInspectOutput(result: WrappedInspectOutput): string {\n  const inputLine = describeInputForm(result.input, result.canonical);\n  return [\n    `brand:      ${result.brand}`,\n    `lookup-key: ${result.lookupKey.toString()}`,\n    `canonical:  ${result.canonical}`,\n    `input:      ${inputLine}`,\n    \"\",\n  ].join(\"\\n\");\n}\n\nexport function formatInspectOutput(result: InspectOutput): string {\n  const relative = formatRelative(result.timestamp.getTime(), result.nowMs);\n  const inputLine = describeInputForm(result.input, result.canonical);\n  return [\n    `brand:     ${result.brand}`,\n    `timestamp: ${result.timestamp.toISOString()} (${relative})`,\n    `canonical: ${result.canonical}`,\n    `input:     ${inputLine}`,\n    \"\",\n  ].join(\"\\n\");\n}\n\nexport function describeInputForm(input: string, canonical: Id<string>): string {\n  if (input === canonical) return \"canonical\";\n  const notes: string[] = [];\n  if (input !== input.toLowerCase()) notes.push(\"was uppercase\");\n  if (/[ilo]/i.test(input.slice(4))) notes.push(\"used Crockford aliases\");\n  return `not canonical (${notes.join(\" + \")})`;\n}\n\nconst msPerSecond = 1000;\nconst msPerMinute = 60 * msPerSecond;\nconst msPerHour = 60 * msPerMinute;\nconst msPerDay = 24 * msPerHour;\nconst daysPerMonth = 30.44;\nconst monthsPerYear = 12;\n\nexport function formatRelative(thenMs: number, nowMs: number): string {\n  const diff = nowMs - thenMs;\n  const abs = Math.abs(diff);\n  const suffix = diff < 0 ? \"from now\" : \"ago\";\n\n  const head = headUnits(abs);\n  return head === \"\" ? \"just now\" : `${head} ${suffix}`;\n}\n\nfunction headUnits(abs: number): string {\n  if (abs < msPerMinute) return \"\";\n  if (abs < msPerHour) return unit(Math.round(abs / msPerMinute), \"minute\");\n  if (abs < msPerDay) return unit(Math.round(abs / msPerHour), \"hour\");\n  if (abs < msPerDay * daysPerMonth) return unit(Math.round(abs / msPerDay), \"day\");\n\n  const totalMonths = Math.round(abs / (msPerDay * daysPerMonth));\n  if (totalMonths < monthsPerYear) return unit(totalMonths, \"month\");\n\n  const years = Math.floor(totalMonths / monthsPerYear);\n  const months = totalMonths % monthsPerYear;\n  return months === 0 ? unit(years, \"year\") : `${unit(years, \"year\")} ${unit(months, \"month\")}`;\n}\n\nfunction unit(n: number, name: string): string {\n  return `${n} ${n === 1 ? name : `${name}s`}`;\n}\n","export const maxGenerateCount = 10_000;\n","import { maxGenerateCount } from \"./constants.js\";\n\nexport type ParsedFlags = {\n  flags: Set<string>;\n  values: Map<string, string>;\n  positionals: string[];\n  errors: string[];\n};\n\nfunction splitFlagToken(arg: string): { flag: string; inlineValue: string | undefined } {\n  const eq = arg.indexOf(\"=\");\n  if (eq <= 0) return { flag: arg, inlineValue: undefined };\n  return { flag: arg.slice(0, eq), inlineValue: arg.slice(eq + 1) };\n}\n\nexport function splitFlags(args: ReadonlyArray<string>): ParsedFlags {\n  const flags = new Set<string>();\n  const values = new Map<string, string>();\n  const positionals: string[] = [];\n  const errors: string[] = [];\n  const seenFlags = new Set<string>();\n  const valueFlags = new Set([\"--count\", \"-c\", \"--bits\", \"--key-format\", \"--kind\"]);\n  const addFlag = (flag: string) => {\n    const canonical = canonicalFlag(flag);\n    if (seenFlags.has(canonical)) errors.push(`duplicate flag: ${canonical}`);\n    seenFlags.add(canonical);\n    flags.add(flag);\n  };\n  for (let i = 0; i < args.length; i++) {\n    const raw = args[i]!;\n    const { flag, inlineValue } = splitFlagToken(raw);\n    if (flag === \"--opaque\" || flag === \"--wrapped\" || flag === \"--reverse\") {\n      addFlag(flag);\n      if (inlineValue !== undefined) errors.push(`flag does not take a value: ${flag}`);\n      continue;\n    }\n    if (valueFlags.has(flag)) {\n      if (inlineValue !== undefined) {\n        addFlag(flag);\n        values.set(flag, inlineValue);\n        continue;\n      }\n      const value = args[i + 1];\n      if (value === undefined || value.startsWith(\"-\")) {\n        addFlag(flag);\n        values.set(flag, \"\");\n        continue;\n      }\n      addFlag(flag);\n      values.set(flag, value);\n      i++;\n      continue;\n    }\n    if (flag.startsWith(\"-\")) {\n      addFlag(flag);\n      continue;\n    }\n    positionals.push(raw);\n  }\n  return { flags, values, positionals, errors };\n}\n\nfunction canonicalFlag(flag: string): string {\n  if (flag === \"-c\") return \"--count\";\n  return flag;\n}\n\nconst knownFlags = new Set([\n  \"--opaque\",\n  \"--wrapped\",\n  \"--reverse\",\n  \"--kind\",\n  \"--key-format\",\n  \"--count\",\n  \"-c\",\n  \"--bits\",\n]);\n\nexport function unsupportedFlagForCommand(\n  command: string,\n  flags: Set<string>,\n  allowed: Set<string>,\n): string | undefined {\n  for (const flag of flags) {\n    if (!allowed.has(flag)) {\n      return knownFlags.has(flag)\n        ? `unsupported flag for ${command}: ${flag}`\n        : `unsupported flag: ${flag}`;\n    }\n  }\n  return undefined;\n}\n\nexport function parseCount(values: Map<string, string>): number | string {\n  const raw = values.get(\"--count\") ?? values.get(\"-c\");\n  if (raw === undefined) return 1;\n  if (raw === \"\") return \"--count requires a value\";\n  if (!/^[1-9][0-9]*$/.test(raw)) return `--count must be a positive integer, got '${raw}'`;\n  const count = Number.parseInt(raw, 10);\n  if (!Number.isSafeInteger(count) || count > maxGenerateCount) {\n    return `--count must be at most ${maxGenerateCount}, got '${raw}'`;\n  }\n  return count;\n}\n\nexport function parseBits(values: Map<string, string>): number | string {\n  const raw = values.get(\"--bits\");\n  if (raw === undefined) return 256;\n  if (raw === \"\") return \"--bits requires a value\";\n  if (raw === \"128\") return 128;\n  if (raw === \"192\") return 192;\n  if (raw === \"256\") return 256;\n  return `--bits must be 128, 192, or 256, got '${raw}'`;\n}\n\nexport type WrappedKindValue = \"u32\" | \"i32\" | \"u64\" | \"i64\";\n\nexport function parseKind(values: Map<string, string>): WrappedKindValue | string | undefined {\n  const raw = values.get(\"--kind\");\n  if (raw === undefined) return undefined;\n  if (raw === \"\") return \"--kind requires a value\";\n  if (raw === \"u32\" || raw === \"i32\" || raw === \"u64\" || raw === \"i64\") return raw;\n  return `--kind must be u32, i32, u64, or i64, got '${raw}'`;\n}\n\nexport function isKindError(result: WrappedKindValue | string): result is string {\n  return result !== \"u32\" && result !== \"i32\" && result !== \"u64\" && result !== \"i64\";\n}\n","import {\n  decodeOpaqueKey,\n  importOpaqueKey,\n  type OpaqueKey,\n  type OpaqueKeyFormat,\n} from \"../opaque.js\";\nimport type { RunOpts } from \"./types.js\";\n\nexport function isKeyFormatError(result: OpaqueKeyFormat | string): result is string {\n  return result !== \"hex\" && result !== \"base64url\";\n}\n\nfunction parseKeyFormatFlag(values: Map<string, string>): OpaqueKeyFormat | string | undefined {\n  const fromFlag = values.get(\"--key-format\");\n  if (fromFlag === undefined) return undefined;\n  if (fromFlag === \"\") return \"--key-format requires a value\";\n  if (fromFlag === \"hex\" || fromFlag === \"base64url\") return fromFlag;\n  return `--key-format must be hex or base64url, got '${fromFlag}'`;\n}\n\nexport function parseKeygenFormat(values: Map<string, string>): OpaqueKeyFormat | string {\n  const fromFlag = parseKeyFormatFlag(values);\n  if (fromFlag === undefined) return \"hex\";\n  return fromFlag;\n}\n\nexport function parseOpaqueKeyFormat(\n  values: Map<string, string>,\n  opts: RunOpts,\n): OpaqueKeyFormat | string {\n  const fromFlag = parseKeyFormatFlag(values);\n  if (fromFlag !== undefined) return fromFlag;\n  const env = opts.env ?? process.env;\n  const fromEnv = env.IDS_KEY_FORMAT;\n  if (fromEnv === undefined || fromEnv === \"\") return \"hex\";\n  if (fromEnv === \"hex\" || fromEnv === \"base64url\") return fromEnv;\n  return `IDS_KEY_FORMAT must be hex or base64url, got '${fromEnv}'`;\n}\n\nexport async function loadOpaqueKey(\n  opts: RunOpts,\n  format: OpaqueKeyFormat,\n): Promise<OpaqueKey | string> {\n  const env = opts.env ?? process.env;\n  const raw = env.IDS_KEY;\n  if (raw === undefined || raw === \"\") return \"missing IDS_KEY environment variable\";\n  try {\n    return importOpaqueKey(decodeOpaqueKey(raw, format));\n  } catch (err) {\n    return (err as Error).message;\n  }\n}\n","import { createTimestampId } from \"../../timestamp.js\";\nimport { createOpaqueTimestampId, type OpaqueKeyFormat } from \"../../opaque.js\";\nimport { createReverseTimestampId } from \"../../reverse.js\";\nimport { codecOpts } from \"../codec-options.js\";\nimport { formatCliError } from \"../format.js\";\nimport { parseCount, splitFlags, unsupportedFlagForCommand } from \"../flags.js\";\nimport { isKeyFormatError, loadOpaqueKey, parseOpaqueKeyFormat } from \"../opaque-key.js\";\nimport type { RunOpts } from \"../types.js\";\n\nexport function runGenerate(args: ReadonlyArray<string>, opts: RunOpts): Promise<number> {\n  const { flags, values, positionals, errors } = splitFlags(args);\n  const unsupported = unsupportedFlagForCommand(\n    \"generate\",\n    flags,\n    new Set([\"--count\", \"-c\", \"--opaque\", \"--reverse\", \"--key-format\"]),\n  );\n  if (unsupported !== undefined) {\n    opts.stderr(unsupported + \"\\n\");\n    return Promise.resolve(1);\n  }\n  if (errors[0] !== undefined) {\n    opts.stderr(errors[0] + \"\\n\");\n    return Promise.resolve(1);\n  }\n  const extra = positionals[1];\n  if (extra !== undefined) {\n    opts.stderr(`unexpected argument: ${extra}\\n`);\n    return Promise.resolve(1);\n  }\n  const [brand] = positionals;\n  const count = parseCount(values);\n  if (typeof count === \"string\") {\n    opts.stderr(count + \"\\n\");\n    return Promise.resolve(1);\n  }\n  const opaque = flags.has(\"--opaque\");\n  const reverse = flags.has(\"--reverse\");\n  if (reverse && opaque) {\n    opts.stderr(\"cannot use --reverse and --opaque together\\n\");\n    return Promise.resolve(1);\n  }\n  if (!opaque && flags.has(\"--key-format\")) {\n    opts.stderr(\"--key-format requires --opaque\\n\");\n    return Promise.resolve(1);\n  }\n  if (opaque) {\n    const format = parseOpaqueKeyFormat(values, opts);\n    if (isKeyFormatError(format)) {\n      opts.stderr(format + \"\\n\");\n      return Promise.resolve(1);\n    }\n    return runOpaqueGenerate(brand ?? \"\", count, format, opts);\n  }\n  if (reverse) {\n    let codec;\n    try {\n      codec = createReverseTimestampId(brand ?? \"\", codecOpts(opts));\n    } catch (err) {\n      opts.stderr(formatCliError(err) + \"\\n\");\n      return Promise.resolve(1);\n    }\n    for (let i = 0; i < count; i++) opts.stdout(codec.generate() + \"\\n\");\n    return Promise.resolve(0);\n  }\n  let codec;\n  try {\n    codec = createTimestampId(brand ?? \"\", codecOpts(opts));\n  } catch (err) {\n    opts.stderr(formatCliError(err) + \"\\n\");\n    return Promise.resolve(1);\n  }\n  for (let i = 0; i < count; i++) opts.stdout(codec.generate() + \"\\n\");\n  return Promise.resolve(0);\n}\n\nasync function runOpaqueGenerate(\n  brand: string,\n  count: number,\n  format: OpaqueKeyFormat,\n  opts: RunOpts,\n): Promise<number> {\n  const keyResult = await loadOpaqueKey(opts, format);\n  if (typeof keyResult === \"string\") {\n    opts.stderr(keyResult + \"\\n\");\n    return 1;\n  }\n  let codec;\n  try {\n    codec = createOpaqueTimestampId(brand, { key: keyResult, ...codecOpts(opts) });\n  } catch (err) {\n    opts.stderr(formatCliError(err) + \"\\n\");\n    return 1;\n  }\n  for (let i = 0; i < count; i++) opts.stdout((await codec.generate()) + \"\\n\");\n  return 0;\n}\n","import {\n  decodeWrappingKey,\n  importWrappingKey,\n  type WrappingKey,\n  type WrappingKeyFormat,\n} from \"../wrapped.js\";\nimport type { RunOpts } from \"./types.js\";\n\nfunction parseKeyFormatFlag(values: Map<string, string>): WrappingKeyFormat | string | undefined {\n  const fromFlag = values.get(\"--key-format\");\n  if (fromFlag === undefined) return undefined;\n  if (fromFlag === \"\") return \"--key-format requires a value\";\n  if (fromFlag === \"hex\" || fromFlag === \"base64url\") return fromFlag;\n  return `--key-format must be hex or base64url, got '${fromFlag}'`;\n}\n\nexport function parseWrappingKeyFormat(\n  values: Map<string, string>,\n  opts: RunOpts,\n): WrappingKeyFormat | string {\n  const fromFlag = parseKeyFormatFlag(values);\n  if (fromFlag !== undefined) return fromFlag;\n  const env = opts.env ?? process.env;\n  const fromEnv = env.IDS_WRAPPING_KEY_FORMAT;\n  if (fromEnv === undefined || fromEnv === \"\") return \"hex\";\n  if (fromEnv === \"hex\" || fromEnv === \"base64url\") return fromEnv;\n  return `IDS_WRAPPING_KEY_FORMAT must be hex or base64url, got '${fromEnv}'`;\n}\n\nexport async function loadWrappingKey(\n  opts: RunOpts,\n  format: WrappingKeyFormat,\n): Promise<WrappingKey | string> {\n  const env = opts.env ?? process.env;\n  const raw = env.IDS_WRAPPING_KEY;\n  if (raw === undefined || raw === \"\") return \"missing IDS_WRAPPING_KEY environment variable\";\n  try {\n    return importWrappingKey(decodeWrappingKey(raw, format));\n  } catch (err) {\n    return (err as Error).message;\n  }\n}\n","import { maxGenerateCount } from \"./constants.js\";\n\nexport function usage(): string {\n  return [\n    \"Usage: ids <subcommand> [args]\",\n    \"\",\n    \"Subcommands:\",\n    \"  inspect, i <id> [--opaque] [--wrapped --kind u32|i32|u64|i64] [--reverse] [--key-format hex|base64url]\",\n    \"    Decode an ID and print brand, timestamp (or lookup key), and canonical form.\",\n    \"    --opaque reads the AES key from IDS_KEY (hex by default; IDS_KEY_FORMAT or --key-format).\",\n    \"    --wrapped reads the wrapping key from IDS_WRAPPING_KEY (hex by default; IDS_WRAPPING_KEY_FORMAT or --key-format).\",\n    \"    --kind is required with --wrapped: u32, i32, u64, or i64.\",\n    \"    --reverse decodes a Reverse Timestamp ID (newest-first sort order).\",\n    \"  generate, g <brand> [--count, -c N] [--opaque] [--reverse] [--key-format hex|base64url]\",\n    `    Mint 1..${maxGenerateCount} canonical IDs for the given brand.`,\n    \"    --opaque reads the AES key from IDS_KEY (hex by default; IDS_KEY_FORMAT or --key-format).\",\n    \"    --reverse mints Reverse Timestamp IDs (newest-first sort order).\",\n    \"  keygen, k [--wrapped] [--bits 128|192|256] [--key-format hex|base64url]\",\n    \"    Emit a random AES key for importOpaqueKey (stdout only).\",\n    \"    --wrapped emits a wrapping key for importWrappingKey instead (IDS_WRAPPING_KEY).\",\n    \"\",\n  ].join(\"\\n\");\n}\n","import { createTimestampId } from \"../../timestamp.js\";\nimport { createOpaqueTimestampId, type OpaqueKeyFormat } from \"../../opaque.js\";\nimport { createReverseTimestampId } from \"../../reverse.js\";\nimport { createWrappedKeyId, type WrappingKey } from \"../../wrapped.js\";\nimport { codecOpts } from \"../codec-options.js\";\nimport { formatCliError, formatInspectOutput, formatWrappedInspectOutput } from \"../format.js\";\nimport {\n  isKindError,\n  parseKind,\n  splitFlags,\n  unsupportedFlagForCommand,\n  type WrappedKindValue,\n} from \"../flags.js\";\nimport { isKeyFormatError, loadOpaqueKey, parseOpaqueKeyFormat } from \"../opaque-key.js\";\nimport { loadWrappingKey, parseWrappingKeyFormat } from \"../wrapping-key.js\";\nimport type { RunOpts } from \"../types.js\";\nimport { usage } from \"../usage.js\";\n\nexport function runInspect(args: ReadonlyArray<string>, opts: RunOpts): Promise<number> {\n  const { flags, values, positionals, errors } = splitFlags(args);\n  const unsupported = unsupportedFlagForCommand(\n    \"inspect\",\n    flags,\n    new Set([\"--opaque\", \"--wrapped\", \"--reverse\", \"--kind\", \"--key-format\"]),\n  );\n  if (unsupported !== undefined) {\n    opts.stderr(unsupported + \"\\n\");\n    return Promise.resolve(1);\n  }\n  if (errors[0] !== undefined) {\n    opts.stderr(errors[0] + \"\\n\");\n    return Promise.resolve(1);\n  }\n  const [input] = positionals;\n  if (input === undefined) {\n    opts.stderr(usage());\n    return Promise.resolve(1);\n  }\n  const extra = positionals[1];\n  if (extra !== undefined) {\n    opts.stderr(`unexpected argument: ${extra}\\n`);\n    return Promise.resolve(1);\n  }\n  const opaque = flags.has(\"--opaque\");\n  const wrapped = flags.has(\"--wrapped\");\n  const reverse = flags.has(\"--reverse\");\n  if (opaque && wrapped) {\n    opts.stderr(\"cannot use --wrapped and --opaque together\\n\");\n    return Promise.resolve(1);\n  }\n  if (reverse && opaque) {\n    opts.stderr(\"cannot use --reverse and --opaque together\\n\");\n    return Promise.resolve(1);\n  }\n  if (reverse && wrapped) {\n    opts.stderr(\"cannot use --reverse and --wrapped together\\n\");\n    return Promise.resolve(1);\n  }\n  if (!opaque && !wrapped && flags.has(\"--key-format\")) {\n    opts.stderr(\"--key-format requires --opaque or --wrapped\\n\");\n    return Promise.resolve(1);\n  }\n  const brand = input.slice(0, 3).toLowerCase();\n  if (wrapped) {\n    const kind = parseKind(values);\n    if (kind === undefined) {\n      opts.stderr(\"--kind is required with --wrapped\\n\");\n      return Promise.resolve(1);\n    }\n    if (isKindError(kind)) {\n      opts.stderr(kind + \"\\n\");\n      return Promise.resolve(1);\n    }\n    const format = parseWrappingKeyFormat(values, opts);\n    if (isKeyFormatError(format)) {\n      opts.stderr(format + \"\\n\");\n      return Promise.resolve(1);\n    }\n    return runWrappedInspect(brand, input, kind, format, opts);\n  }\n  if (opaque) {\n    const format = parseOpaqueKeyFormat(values, opts);\n    if (isKeyFormatError(format)) {\n      opts.stderr(format + \"\\n\");\n      return Promise.resolve(1);\n    }\n    return runOpaqueInspect(brand, input, format, opts);\n  }\n  if (reverse) {\n    let reverseCodec;\n    try {\n      reverseCodec = createReverseTimestampId(brand, codecOpts(opts));\n    } catch (err) {\n      opts.stderr(formatCliError(err) + \"\\n\");\n      return Promise.resolve(1);\n    }\n    const reverseValidation = reverseCodec[\"~standard\"].validate(input);\n    if (reverseValidation.issues) {\n      opts.stderr(reverseValidation.issues[0]!.message + \"\\n\");\n      return Promise.resolve(1);\n    }\n    const reverseCanonical = reverseValidation.value;\n    const reverseTimestamp = reverseCodec.extractTimestamp(reverseCanonical);\n    const reverseNowMs = (opts.now ?? Date.now)();\n    opts.stdout(\n      formatInspectOutput({\n        brand,\n        timestamp: reverseTimestamp,\n        canonical: reverseCanonical,\n        input,\n        nowMs: reverseNowMs,\n      }),\n    );\n    return Promise.resolve(0);\n  }\n  let codec;\n  try {\n    codec = createTimestampId(brand, codecOpts(opts));\n  } catch (err) {\n    opts.stderr(formatCliError(err) + \"\\n\");\n    return Promise.resolve(1);\n  }\n  const validation = codec[\"~standard\"].validate(input);\n  if (validation.issues) {\n    opts.stderr(validation.issues[0]!.message + \"\\n\");\n    return Promise.resolve(1);\n  }\n  const canonical = validation.value;\n  const timestamp = codec.extractTimestamp(canonical);\n  const nowMs = (opts.now ?? Date.now)();\n  opts.stdout(\n    formatInspectOutput({\n      brand,\n      timestamp,\n      canonical,\n      input,\n      nowMs,\n    }),\n  );\n  return Promise.resolve(0);\n}\n\nasync function runWrappedInspect(\n  brand: string,\n  input: string,\n  kind: WrappedKindValue,\n  format: string,\n  opts: RunOpts,\n): Promise<number> {\n  const keyResult = await loadWrappingKey(opts, format as \"hex\" | \"base64url\");\n  if (typeof keyResult === \"string\") {\n    opts.stderr(keyResult + \"\\n\");\n    return 1;\n  }\n  let codec;\n  try {\n    codec = createWrappedKeyId(brand, {\n      kind,\n      keys: [keyResult as WrappingKey],\n      allowDuplicateBrand: true,\n    });\n  } catch (err) {\n    opts.stderr(formatCliError(err) + \"\\n\");\n    return 1;\n  }\n  const validation = codec[\"~standard\"].validate(input);\n  if (validation.issues) {\n    opts.stderr(validation.issues[0]!.message + \"\\n\");\n    return 1;\n  }\n  const canonical = validation.value;\n  let lookupKey;\n  try {\n    lookupKey = await codec.unwrap(canonical);\n  } catch (err) {\n    opts.stderr(formatCliError(err) + \"\\n\");\n    return 1;\n  }\n  opts.stdout(\n    formatWrappedInspectOutput({\n      brand,\n      lookupKey,\n      canonical,\n      input,\n    }),\n  );\n  return 0;\n}\n\nasync function runOpaqueInspect(\n  brand: string,\n  input: string,\n  format: OpaqueKeyFormat,\n  opts: RunOpts,\n): Promise<number> {\n  const keyResult = await loadOpaqueKey(opts, format);\n  if (typeof keyResult === \"string\") {\n    opts.stderr(keyResult + \"\\n\");\n    return 1;\n  }\n  let codec;\n  try {\n    codec = createOpaqueTimestampId(brand, { key: keyResult, ...codecOpts(opts) });\n  } catch (err) {\n    opts.stderr(formatCliError(err) + \"\\n\");\n    return 1;\n  }\n  const validation = codec[\"~standard\"].validate(input);\n  if (validation.issues) {\n    opts.stderr(validation.issues[0]!.message + \"\\n\");\n    return 1;\n  }\n  const canonical = validation.value;\n  const timestamp = await codec.extractTimestamp(canonical);\n  const nowMs = (opts.now ?? Date.now)();\n  opts.stderr(\n    \"note: timestamp assumes IDS_KEY matches the key used at generation; a wrong key yields a plausible but incorrect timestamp\\n\",\n  );\n  opts.stdout(\n    formatInspectOutput({\n      brand,\n      timestamp,\n      canonical,\n      input,\n      nowMs,\n    }),\n  );\n  return 0;\n}\n","import { encodeOpaqueKey } from \"../../opaque.js\";\nimport { encodeWrappingKey } from \"../../wrapped.js\";\nimport { parseBits, splitFlags, unsupportedFlagForCommand } from \"../flags.js\";\nimport { isKeyFormatError, parseKeygenFormat } from \"../opaque-key.js\";\nimport type { RunOpts } from \"../types.js\";\n\nexport function runKeygen(args: ReadonlyArray<string>, opts: RunOpts): Promise<number> {\n  const { flags, values, positionals, errors } = splitFlags(args);\n  const unsupported = unsupportedFlagForCommand(\n    \"keygen\",\n    flags,\n    new Set([\"--wrapped\", \"--bits\", \"--key-format\"]),\n  );\n  if (unsupported !== undefined) {\n    opts.stderr(unsupported + \"\\n\");\n    return Promise.resolve(1);\n  }\n  if (errors[0] !== undefined) {\n    opts.stderr(errors[0] + \"\\n\");\n    return Promise.resolve(1);\n  }\n  const extra = positionals[0];\n  if (extra !== undefined) {\n    opts.stderr(`unexpected argument: ${extra}\\n`);\n    return Promise.resolve(1);\n  }\n  const bits = parseBits(values);\n  if (typeof bits === \"string\") {\n    opts.stderr(bits + \"\\n\");\n    return Promise.resolve(1);\n  }\n  const format = parseKeygenFormat(values);\n  if (isKeyFormatError(format)) {\n    opts.stderr(format + \"\\n\");\n    return Promise.resolve(1);\n  }\n  const bytes = new Uint8Array(bits / 8);\n  crypto.getRandomValues(bytes);\n  const wrapped = flags.has(\"--wrapped\");\n  opts.stdout((wrapped ? encodeWrappingKey(bytes, format) : encodeOpaqueKey(bytes, format)) + \"\\n\");\n  return Promise.resolve(0);\n}\n","import { runGenerate } from \"./cli/commands/generate.js\";\nimport { runInspect } from \"./cli/commands/inspect.js\";\nimport { runKeygen } from \"./cli/commands/keygen.js\";\nimport type { CommandHandler, RunOpts } from \"./cli/types.js\";\nimport { usage } from \"./cli/usage.js\";\n\nexport type { RunOpts } from \"./cli/types.js\";\n\ntype Command = {\n  names: ReadonlyArray<string>;\n  run: CommandHandler;\n};\n\nconst commands: ReadonlyArray<Command> = [\n  { names: [\"generate\", \"g\"], run: runGenerate },\n  { names: [\"inspect\", \"i\"], run: runInspect },\n  { names: [\"keygen\", \"k\"], run: runKeygen },\n];\n\nexport async function run(opts: RunOpts): Promise<number> {\n  const [subcommand, ...rest] = opts.argv;\n  const command = commands.find((candidate) => candidate.names.includes(subcommand ?? \"\"));\n  if (command !== undefined) return command.run(rest, opts);\n  if (subcommand === undefined || subcommand === \"--help\" || subcommand === \"-h\") {\n    opts.stdout(usage());\n    return 0;\n  }\n  opts.stderr(usage());\n  return 1;\n}\n","#!/usr/bin/env node\nimport { run } from \"../src/cli.js\";\n\nprocess.exitCode = await run({\n  argv: process.argv.slice(2),\n  stdout: (s) => process.stdout.write(s),\n  stderr: (s) => process.stderr.write(s),\n});\n"],"mappings":";;;;;;;AAGA,SAAgB,UAAU,MAA0C;CAGlE,MAAM,IAA+B,EAAE,qBAAqB,KAAK;CACjE,IAAI,KAAK,QAAQ,KAAA,GAAW,EAAE,MAAM,KAAK;CACzC,IAAI,KAAK,QAAQ,KAAA,GAAW,EAAE,MAAM,KAAK;CACzC,OAAO;AACT;;;ACQA,SAAgB,eAAe,KAAsB;CACnD,OAAO,WAAW,GAAG,IACjB,GAAG,IAAI,KAAK,IAAI,IAAI,YACpB,eAAe,QACb,IAAI,UACJ,OAAO,GAAG;AAClB;AAEA,SAAgB,2BAA2B,QAAsC;CAC/E,MAAM,YAAY,kBAAkB,OAAO,OAAO,OAAO,SAAS;CAClE,OAAO;EACL,eAAe,OAAO;EACtB,eAAe,OAAO,UAAU,SAAS;EACzC,eAAe,OAAO;EACtB,eAAe;EACf;CACF,CAAC,CAAC,KAAK,IAAI;AACb;AAEA,SAAgB,oBAAoB,QAA+B;CACjE,MAAM,WAAW,eAAe,OAAO,UAAU,QAAQ,GAAG,OAAO,KAAK;CACxE,MAAM,YAAY,kBAAkB,OAAO,OAAO,OAAO,SAAS;CAClE,OAAO;EACL,cAAc,OAAO;EACrB,cAAc,OAAO,UAAU,YAAY,EAAE,IAAI,SAAS;EAC1D,cAAc,OAAO;EACrB,cAAc;EACd;CACF,CAAC,CAAC,KAAK,IAAI;AACb;AAEA,SAAgB,kBAAkB,OAAe,WAA+B;CAC9E,IAAI,UAAU,WAAW,OAAO;CAChC,MAAM,QAAkB,CAAC;CACzB,IAAI,UAAU,MAAM,YAAY,GAAG,MAAM,KAAK,eAAe;CAC7D,IAAI,SAAS,KAAK,MAAM,MAAM,CAAC,CAAC,GAAG,MAAM,KAAK,wBAAwB;CACtE,OAAO,kBAAkB,MAAM,KAAK,KAAK,EAAE;AAC7C;AAGA,MAAM,cAAc,KAAK;AACzB,MAAM,YAAY,KAAK;AACvB,MAAM,WAAW,KAAK;AACtB,MAAM,eAAe;AACrB,MAAM,gBAAgB;AAEtB,SAAgB,eAAe,QAAgB,OAAuB;CACpE,MAAM,OAAO,QAAQ;CACrB,MAAM,MAAM,KAAK,IAAI,IAAI;CACzB,MAAM,SAAS,OAAO,IAAI,aAAa;CAEvC,MAAM,OAAO,UAAU,GAAG;CAC1B,OAAO,SAAS,KAAK,aAAa,GAAG,KAAK,GAAG;AAC/C;AAEA,SAAS,UAAU,KAAqB;CACtC,IAAI,MAAM,aAAa,OAAO;CAC9B,IAAI,MAAM,WAAW,OAAO,KAAK,KAAK,MAAM,MAAM,WAAW,GAAG,QAAQ;CACxE,IAAI,MAAM,UAAU,OAAO,KAAK,KAAK,MAAM,MAAM,SAAS,GAAG,MAAM;CACnE,IAAI,MAAM,WAAW,cAAc,OAAO,KAAK,KAAK,MAAM,MAAM,QAAQ,GAAG,KAAK;CAEhF,MAAM,cAAc,KAAK,MAAM,OAAO,WAAW,aAAa;CAC9D,IAAI,cAAc,eAAe,OAAO,KAAK,aAAa,OAAO;CAEjE,MAAM,QAAQ,KAAK,MAAM,cAAc,aAAa;CACpD,MAAM,SAAS,cAAc;CAC7B,OAAO,WAAW,IAAI,KAAK,OAAO,MAAM,IAAI,GAAG,KAAK,OAAO,MAAM,EAAE,GAAG,KAAK,QAAQ,OAAO;AAC5F;AAEA,SAAS,KAAK,GAAW,MAAsB;CAC7C,OAAO,GAAG,EAAE,GAAG,MAAM,IAAI,OAAO,GAAG,KAAK;AAC1C;;;ACzFA,MAAa,mBAAmB;;;ACShC,SAAS,eAAe,KAAgE;CACtF,MAAM,KAAK,IAAI,QAAQ,GAAG;CAC1B,IAAI,MAAM,GAAG,OAAO;EAAE,MAAM;EAAK,aAAa,KAAA;CAAU;CACxD,OAAO;EAAE,MAAM,IAAI,MAAM,GAAG,EAAE;EAAG,aAAa,IAAI,MAAM,KAAK,CAAC;CAAE;AAClE;AAEA,SAAgB,WAAW,MAA0C;CACnE,MAAM,wBAAQ,IAAI,IAAY;CAC9B,MAAM,yBAAS,IAAI,IAAoB;CACvC,MAAM,cAAwB,CAAC;CAC/B,MAAM,SAAmB,CAAC;CAC1B,MAAM,4BAAY,IAAI,IAAY;CAClC,MAAM,aAAa,IAAI,IAAI;EAAC;EAAW;EAAM;EAAU;EAAgB;CAAQ,CAAC;CAChF,MAAM,WAAW,SAAiB;EAChC,MAAM,YAAY,cAAc,IAAI;EACpC,IAAI,UAAU,IAAI,SAAS,GAAG,OAAO,KAAK,mBAAmB,WAAW;EACxE,UAAU,IAAI,SAAS;EACvB,MAAM,IAAI,IAAI;CAChB;CACA,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,MAAM,KAAK;EACjB,MAAM,EAAE,MAAM,gBAAgB,eAAe,GAAG;EAChD,IAAI,SAAS,cAAc,SAAS,eAAe,SAAS,aAAa;GACvE,QAAQ,IAAI;GACZ,IAAI,gBAAgB,KAAA,GAAW,OAAO,KAAK,+BAA+B,MAAM;GAChF;EACF;EACA,IAAI,WAAW,IAAI,IAAI,GAAG;GACxB,IAAI,gBAAgB,KAAA,GAAW;IAC7B,QAAQ,IAAI;IACZ,OAAO,IAAI,MAAM,WAAW;IAC5B;GACF;GACA,MAAM,QAAQ,KAAK,IAAI;GACvB,IAAI,UAAU,KAAA,KAAa,MAAM,WAAW,GAAG,GAAG;IAChD,QAAQ,IAAI;IACZ,OAAO,IAAI,MAAM,EAAE;IACnB;GACF;GACA,QAAQ,IAAI;GACZ,OAAO,IAAI,MAAM,KAAK;GACtB;GACA;EACF;EACA,IAAI,KAAK,WAAW,GAAG,GAAG;GACxB,QAAQ,IAAI;GACZ;EACF;EACA,YAAY,KAAK,GAAG;CACtB;CACA,OAAO;EAAE;EAAO;EAAQ;EAAa;CAAO;AAC9C;AAEA,SAAS,cAAc,MAAsB;CAC3C,IAAI,SAAS,MAAM,OAAO;CAC1B,OAAO;AACT;AAEA,MAAM,aAAa,IAAI,IAAI;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAgB,0BACd,SACA,OACA,SACoB;CACpB,KAAK,MAAM,QAAQ,OACjB,IAAI,CAAC,QAAQ,IAAI,IAAI,GACnB,OAAO,WAAW,IAAI,IAAI,IACtB,wBAAwB,QAAQ,IAAI,SACpC,qBAAqB;AAI/B;AAEA,SAAgB,WAAW,QAA8C;CACvE,MAAM,MAAM,OAAO,IAAI,SAAS,KAAK,OAAO,IAAI,IAAI;CACpD,IAAI,QAAQ,KAAA,GAAW,OAAO;CAC9B,IAAI,QAAQ,IAAI,OAAO;CACvB,IAAI,CAAC,gBAAgB,KAAK,GAAG,GAAG,OAAO,4CAA4C,IAAI;CACvF,MAAM,QAAQ,OAAO,SAAS,KAAK,EAAE;CACrC,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAA,KAClC,OAAO,2BAA2B,iBAAiB,SAAS,IAAI;CAElE,OAAO;AACT;AAEA,SAAgB,UAAU,QAA8C;CACtE,MAAM,MAAM,OAAO,IAAI,QAAQ;CAC/B,IAAI,QAAQ,KAAA,GAAW,OAAO;CAC9B,IAAI,QAAQ,IAAI,OAAO;CACvB,IAAI,QAAQ,OAAO,OAAO;CAC1B,IAAI,QAAQ,OAAO,OAAO;CAC1B,IAAI,QAAQ,OAAO,OAAO;CAC1B,OAAO,yCAAyC,IAAI;AACtD;AAIA,SAAgB,UAAU,QAAoE;CAC5F,MAAM,MAAM,OAAO,IAAI,QAAQ;CAC/B,IAAI,QAAQ,KAAA,GAAW,OAAO,KAAA;CAC9B,IAAI,QAAQ,IAAI,OAAO;CACvB,IAAI,QAAQ,SAAS,QAAQ,SAAS,QAAQ,SAAS,QAAQ,OAAO,OAAO;CAC7E,OAAO,8CAA8C,IAAI;AAC3D;AAEA,SAAgB,YAAY,QAAqD;CAC/E,OAAO,WAAW,SAAS,WAAW,SAAS,WAAW,SAAS,WAAW;AAChF;;;ACvHA,SAAgB,iBAAiB,QAAoD;CACnF,OAAO,WAAW,SAAS,WAAW;AACxC;AAEA,SAASA,qBAAmB,QAAmE;CAC7F,MAAM,WAAW,OAAO,IAAI,cAAc;CAC1C,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;CACnC,IAAI,aAAa,IAAI,OAAO;CAC5B,IAAI,aAAa,SAAS,aAAa,aAAa,OAAO;CAC3D,OAAO,+CAA+C,SAAS;AACjE;AAEA,SAAgB,kBAAkB,QAAuD;CACvF,MAAM,WAAWA,qBAAmB,MAAM;CAC1C,IAAI,aAAa,KAAA,GAAW,OAAO;CACnC,OAAO;AACT;AAEA,SAAgB,qBACd,QACA,MAC0B;CAC1B,MAAM,WAAWA,qBAAmB,MAAM;CAC1C,IAAI,aAAa,KAAA,GAAW,OAAO;CAEnC,MAAM,WADM,KAAK,OAAO,QAAQ,IAAA,CACZ;CACpB,IAAI,YAAY,KAAA,KAAa,YAAY,IAAI,OAAO;CACpD,IAAI,YAAY,SAAS,YAAY,aAAa,OAAO;CACzD,OAAO,iDAAiD,QAAQ;AAClE;AAEA,eAAsB,cACpB,MACA,QAC6B;CAE7B,MAAM,OADM,KAAK,OAAO,QAAQ,IAAA,CAChB;CAChB,IAAI,QAAQ,KAAA,KAAa,QAAQ,IAAI,OAAO;CAC5C,IAAI;EACF,OAAO,gBAAgB,gBAAgB,KAAK,MAAM,CAAC;CACrD,SAAS,KAAK;EACZ,OAAQ,IAAc;CACxB;AACF;;;AC1CA,SAAgB,YAAY,MAA6B,MAAgC;CACvF,MAAM,EAAE,OAAO,QAAQ,aAAa,WAAW,WAAW,IAAI;CAC9D,MAAM,cAAc,0BAClB,YACA,OACA,IAAI,IAAI;EAAC;EAAW;EAAM;EAAY;EAAa;CAAc,CAAC,CACpE;CACA,IAAI,gBAAgB,KAAA,GAAW;EAC7B,KAAK,OAAO,cAAc,IAAI;EAC9B,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI,OAAO,OAAO,KAAA,GAAW;EAC3B,KAAK,OAAO,OAAO,KAAK,IAAI;EAC5B,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,QAAQ,YAAY;CAC1B,IAAI,UAAU,KAAA,GAAW;EACvB,KAAK,OAAO,wBAAwB,MAAM,GAAG;EAC7C,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,CAAC,SAAS;CAChB,MAAM,QAAQ,WAAW,MAAM;CAC/B,IAAI,OAAO,UAAU,UAAU;EAC7B,KAAK,OAAO,QAAQ,IAAI;EACxB,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,SAAS,MAAM,IAAI,UAAU;CACnC,MAAM,UAAU,MAAM,IAAI,WAAW;CACrC,IAAI,WAAW,QAAQ;EACrB,KAAK,OAAO,8CAA8C;EAC1D,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI,CAAC,UAAU,MAAM,IAAI,cAAc,GAAG;EACxC,KAAK,OAAO,kCAAkC;EAC9C,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI,QAAQ;EACV,MAAM,SAAS,qBAAqB,QAAQ,IAAI;EAChD,IAAI,iBAAiB,MAAM,GAAG;GAC5B,KAAK,OAAO,SAAS,IAAI;GACzB,OAAO,QAAQ,QAAQ,CAAC;EAC1B;EACA,OAAO,kBAAkB,SAAS,IAAI,OAAO,QAAQ,IAAI;CAC3D;CACA,IAAI,SAAS;EACX,IAAI;EACJ,IAAI;GACF,QAAQ,yBAAyB,SAAS,IAAI,UAAU,IAAI,CAAC;EAC/D,SAAS,KAAK;GACZ,KAAK,OAAO,eAAe,GAAG,IAAI,IAAI;GACtC,OAAO,QAAQ,QAAQ,CAAC;EAC1B;EACA,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,KAAK,KAAK,OAAO,MAAM,SAAS,IAAI,IAAI;EACnE,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI;CACJ,IAAI;EACF,QAAQ,kBAAkB,SAAS,IAAI,UAAU,IAAI,CAAC;CACxD,SAAS,KAAK;EACZ,KAAK,OAAO,eAAe,GAAG,IAAI,IAAI;EACtC,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,KAAK,KAAK,OAAO,MAAM,SAAS,IAAI,IAAI;CACnE,OAAO,QAAQ,QAAQ,CAAC;AAC1B;AAEA,eAAe,kBACb,OACA,OACA,QACA,MACiB;CACjB,MAAM,YAAY,MAAM,cAAc,MAAM,MAAM;CAClD,IAAI,OAAO,cAAc,UAAU;EACjC,KAAK,OAAO,YAAY,IAAI;EAC5B,OAAO;CACT;CACA,IAAI;CACJ,IAAI;EACF,QAAQ,wBAAwB,OAAO;GAAE,KAAK;GAAW,GAAG,UAAU,IAAI;EAAE,CAAC;CAC/E,SAAS,KAAK;EACZ,KAAK,OAAO,eAAe,GAAG,IAAI,IAAI;EACtC,OAAO;CACT;CACA,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,KAAK,KAAK,OAAQ,MAAM,MAAM,SAAS,IAAK,IAAI;CAC3E,OAAO;AACT;;;ACvFA,SAAS,mBAAmB,QAAqE;CAC/F,MAAM,WAAW,OAAO,IAAI,cAAc;CAC1C,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;CACnC,IAAI,aAAa,IAAI,OAAO;CAC5B,IAAI,aAAa,SAAS,aAAa,aAAa,OAAO;CAC3D,OAAO,+CAA+C,SAAS;AACjE;AAEA,SAAgB,uBACd,QACA,MAC4B;CAC5B,MAAM,WAAW,mBAAmB,MAAM;CAC1C,IAAI,aAAa,KAAA,GAAW,OAAO;CAEnC,MAAM,WADM,KAAK,OAAO,QAAQ,IAAA,CACZ;CACpB,IAAI,YAAY,KAAA,KAAa,YAAY,IAAI,OAAO;CACpD,IAAI,YAAY,SAAS,YAAY,aAAa,OAAO;CACzD,OAAO,0DAA0D,QAAQ;AAC3E;AAEA,eAAsB,gBACpB,MACA,QAC+B;CAE/B,MAAM,OADM,KAAK,OAAO,QAAQ,IAAA,CAChB;CAChB,IAAI,QAAQ,KAAA,KAAa,QAAQ,IAAI,OAAO;CAC5C,IAAI;EACF,OAAO,kBAAkB,kBAAkB,KAAK,MAAM,CAAC;CACzD,SAAS,KAAK;EACZ,OAAQ,IAAc;CACxB;AACF;;;ACvCA,SAAgB,QAAgB;CAC9B,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,eAAe,iBAAiB;EAChC;EACA;EACA;EACA;EACA;EACA;CACF,CAAC,CAAC,KAAK,IAAI;AACb;;;ACJA,SAAgB,WAAW,MAA6B,MAAgC;CACtF,MAAM,EAAE,OAAO,QAAQ,aAAa,WAAW,WAAW,IAAI;CAC9D,MAAM,cAAc,0BAClB,WACA,OACA,IAAI,IAAI;EAAC;EAAY;EAAa;EAAa;EAAU;CAAc,CAAC,CAC1E;CACA,IAAI,gBAAgB,KAAA,GAAW;EAC7B,KAAK,OAAO,cAAc,IAAI;EAC9B,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI,OAAO,OAAO,KAAA,GAAW;EAC3B,KAAK,OAAO,OAAO,KAAK,IAAI;EAC5B,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,CAAC,SAAS;CAChB,IAAI,UAAU,KAAA,GAAW;EACvB,KAAK,OAAO,MAAM,CAAC;EACnB,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,QAAQ,YAAY;CAC1B,IAAI,UAAU,KAAA,GAAW;EACvB,KAAK,OAAO,wBAAwB,MAAM,GAAG;EAC7C,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,SAAS,MAAM,IAAI,UAAU;CACnC,MAAM,UAAU,MAAM,IAAI,WAAW;CACrC,MAAM,UAAU,MAAM,IAAI,WAAW;CACrC,IAAI,UAAU,SAAS;EACrB,KAAK,OAAO,8CAA8C;EAC1D,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI,WAAW,QAAQ;EACrB,KAAK,OAAO,8CAA8C;EAC1D,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI,WAAW,SAAS;EACtB,KAAK,OAAO,+CAA+C;EAC3D,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI,CAAC,UAAU,CAAC,WAAW,MAAM,IAAI,cAAc,GAAG;EACpD,KAAK,OAAO,+CAA+C;EAC3D,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,QAAQ,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,YAAY;CAC5C,IAAI,SAAS;EACX,MAAM,OAAO,UAAU,MAAM;EAC7B,IAAI,SAAS,KAAA,GAAW;GACtB,KAAK,OAAO,qCAAqC;GACjD,OAAO,QAAQ,QAAQ,CAAC;EAC1B;EACA,IAAI,YAAY,IAAI,GAAG;GACrB,KAAK,OAAO,OAAO,IAAI;GACvB,OAAO,QAAQ,QAAQ,CAAC;EAC1B;EACA,MAAM,SAAS,uBAAuB,QAAQ,IAAI;EAClD,IAAI,iBAAiB,MAAM,GAAG;GAC5B,KAAK,OAAO,SAAS,IAAI;GACzB,OAAO,QAAQ,QAAQ,CAAC;EAC1B;EACA,OAAO,kBAAkB,OAAO,OAAO,MAAM,QAAQ,IAAI;CAC3D;CACA,IAAI,QAAQ;EACV,MAAM,SAAS,qBAAqB,QAAQ,IAAI;EAChD,IAAI,iBAAiB,MAAM,GAAG;GAC5B,KAAK,OAAO,SAAS,IAAI;GACzB,OAAO,QAAQ,QAAQ,CAAC;EAC1B;EACA,OAAO,iBAAiB,OAAO,OAAO,QAAQ,IAAI;CACpD;CACA,IAAI,SAAS;EACX,IAAI;EACJ,IAAI;GACF,eAAe,yBAAyB,OAAO,UAAU,IAAI,CAAC;EAChE,SAAS,KAAK;GACZ,KAAK,OAAO,eAAe,GAAG,IAAI,IAAI;GACtC,OAAO,QAAQ,QAAQ,CAAC;EAC1B;EACA,MAAM,oBAAoB,aAAa,YAAY,CAAC,SAAS,KAAK;EAClE,IAAI,kBAAkB,QAAQ;GAC5B,KAAK,OAAO,kBAAkB,OAAO,EAAE,CAAE,UAAU,IAAI;GACvD,OAAO,QAAQ,QAAQ,CAAC;EAC1B;EACA,MAAM,mBAAmB,kBAAkB;EAC3C,MAAM,mBAAmB,aAAa,iBAAiB,gBAAgB;EACvE,MAAM,gBAAgB,KAAK,OAAO,KAAK,IAAA,CAAK;EAC5C,KAAK,OACH,oBAAoB;GAClB;GACA,WAAW;GACX,WAAW;GACX;GACA,OAAO;EACT,CAAC,CACH;EACA,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI;CACJ,IAAI;EACF,QAAQ,kBAAkB,OAAO,UAAU,IAAI,CAAC;CAClD,SAAS,KAAK;EACZ,KAAK,OAAO,eAAe,GAAG,IAAI,IAAI;EACtC,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,aAAa,MAAM,YAAY,CAAC,SAAS,KAAK;CACpD,IAAI,WAAW,QAAQ;EACrB,KAAK,OAAO,WAAW,OAAO,EAAE,CAAE,UAAU,IAAI;EAChD,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,YAAY,WAAW;CAC7B,MAAM,YAAY,MAAM,iBAAiB,SAAS;CAClD,MAAM,SAAS,KAAK,OAAO,KAAK,IAAA,CAAK;CACrC,KAAK,OACH,oBAAoB;EAClB;EACA;EACA;EACA;EACA;CACF,CAAC,CACH;CACA,OAAO,QAAQ,QAAQ,CAAC;AAC1B;AAEA,eAAe,kBACb,OACA,OACA,MACA,QACA,MACiB;CACjB,MAAM,YAAY,MAAM,gBAAgB,MAAM,MAA6B;CAC3E,IAAI,OAAO,cAAc,UAAU;EACjC,KAAK,OAAO,YAAY,IAAI;EAC5B,OAAO;CACT;CACA,IAAI;CACJ,IAAI;EACF,QAAQ,mBAAmB,OAAO;GAChC;GACA,MAAM,CAAC,SAAwB;GAC/B,qBAAqB;EACvB,CAAC;CACH,SAAS,KAAK;EACZ,KAAK,OAAO,eAAe,GAAG,IAAI,IAAI;EACtC,OAAO;CACT;CACA,MAAM,aAAa,MAAM,YAAY,CAAC,SAAS,KAAK;CACpD,IAAI,WAAW,QAAQ;EACrB,KAAK,OAAO,WAAW,OAAO,EAAE,CAAE,UAAU,IAAI;EAChD,OAAO;CACT;CACA,MAAM,YAAY,WAAW;CAC7B,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,MAAM,OAAO,SAAS;CAC1C,SAAS,KAAK;EACZ,KAAK,OAAO,eAAe,GAAG,IAAI,IAAI;EACtC,OAAO;CACT;CACA,KAAK,OACH,2BAA2B;EACzB;EACA;EACA;EACA;CACF,CAAC,CACH;CACA,OAAO;AACT;AAEA,eAAe,iBACb,OACA,OACA,QACA,MACiB;CACjB,MAAM,YAAY,MAAM,cAAc,MAAM,MAAM;CAClD,IAAI,OAAO,cAAc,UAAU;EACjC,KAAK,OAAO,YAAY,IAAI;EAC5B,OAAO;CACT;CACA,IAAI;CACJ,IAAI;EACF,QAAQ,wBAAwB,OAAO;GAAE,KAAK;GAAW,GAAG,UAAU,IAAI;EAAE,CAAC;CAC/E,SAAS,KAAK;EACZ,KAAK,OAAO,eAAe,GAAG,IAAI,IAAI;EACtC,OAAO;CACT;CACA,MAAM,aAAa,MAAM,YAAY,CAAC,SAAS,KAAK;CACpD,IAAI,WAAW,QAAQ;EACrB,KAAK,OAAO,WAAW,OAAO,EAAE,CAAE,UAAU,IAAI;EAChD,OAAO;CACT;CACA,MAAM,YAAY,WAAW;CAC7B,MAAM,YAAY,MAAM,MAAM,iBAAiB,SAAS;CACxD,MAAM,SAAS,KAAK,OAAO,KAAK,IAAA,CAAK;CACrC,KAAK,OACH,8HACF;CACA,KAAK,OACH,oBAAoB;EAClB;EACA;EACA;EACA;EACA;CACF,CAAC,CACH;CACA,OAAO;AACT;;;AC9NA,SAAgB,UAAU,MAA6B,MAAgC;CACrF,MAAM,EAAE,OAAO,QAAQ,aAAa,WAAW,WAAW,IAAI;CAC9D,MAAM,cAAc,0BAClB,UACA,OACA,IAAI,IAAI;EAAC;EAAa;EAAU;CAAc,CAAC,CACjD;CACA,IAAI,gBAAgB,KAAA,GAAW;EAC7B,KAAK,OAAO,cAAc,IAAI;EAC9B,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,IAAI,OAAO,OAAO,KAAA,GAAW;EAC3B,KAAK,OAAO,OAAO,KAAK,IAAI;EAC5B,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,QAAQ,YAAY;CAC1B,IAAI,UAAU,KAAA,GAAW;EACvB,KAAK,OAAO,wBAAwB,MAAM,GAAG;EAC7C,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,OAAO,UAAU,MAAM;CAC7B,IAAI,OAAO,SAAS,UAAU;EAC5B,KAAK,OAAO,OAAO,IAAI;EACvB,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,SAAS,kBAAkB,MAAM;CACvC,IAAI,iBAAiB,MAAM,GAAG;EAC5B,KAAK,OAAO,SAAS,IAAI;EACzB,OAAO,QAAQ,QAAQ,CAAC;CAC1B;CACA,MAAM,QAAQ,IAAI,WAAW,OAAO,CAAC;CACrC,OAAO,gBAAgB,KAAK;CAC5B,MAAM,UAAU,MAAM,IAAI,WAAW;CACrC,KAAK,QAAQ,UAAU,kBAAkB,OAAO,MAAM,IAAI,gBAAgB,OAAO,MAAM,KAAK,IAAI;CAChG,OAAO,QAAQ,QAAQ,CAAC;AAC1B;;;AC5BA,MAAM,WAAmC;CACvC;EAAE,OAAO,CAAC,YAAY,GAAG;EAAG,KAAK;CAAY;CAC7C;EAAE,OAAO,CAAC,WAAW,GAAG;EAAG,KAAK;CAAW;CAC3C;EAAE,OAAO,CAAC,UAAU,GAAG;EAAG,KAAK;CAAU;AAC3C;AAEA,eAAsB,IAAI,MAAgC;CACxD,MAAM,CAAC,YAAY,GAAG,QAAQ,KAAK;CACnC,MAAM,UAAU,SAAS,MAAM,cAAc,UAAU,MAAM,SAAS,cAAc,EAAE,CAAC;CACvF,IAAI,YAAY,KAAA,GAAW,OAAO,QAAQ,IAAI,MAAM,IAAI;CACxD,IAAI,eAAe,KAAA,KAAa,eAAe,YAAY,eAAe,MAAM;EAC9E,KAAK,OAAO,MAAM,CAAC;EACnB,OAAO;CACT;CACA,KAAK,OAAO,MAAM,CAAC;CACnB,OAAO;AACT;;;AC1BA,QAAQ,WAAW,MAAM,IAAI;CAC3B,MAAM,QAAQ,KAAK,MAAM,CAAC;CAC1B,SAAS,MAAM,QAAQ,OAAO,MAAM,CAAC;CACrC,SAAS,MAAM,QAAQ,OAAO,MAAM,CAAC;AACvC,CAAC"}

package/dist/{codec-shell-dWpxoFmy.mjs → codec-shell-DH-UO4UR.mjs}

@@ -1,8 +1,9 @@
+import { t as IdsError } from "./error-Cp5qYZcv.mjs";
 //#region src/brand.ts
 const brandPattern = /^[a-z]{3}$/;
 /** Validates a three-character lowercase brand. Throws on invalid input. */
 function validateBrand(brand) {
-	if (!brandPattern.test(brand)) throw new Error("invalid brand, expected three lowercase a-z characters");
+	if (!brandPattern.test(brand)) throw new IdsError("invalid_brand", "invalid brand: expected three lowercase a-z characters");
 }
 //#endregion
 //#region src/base32.ts
@@ -103,11 +104,6 @@ function safeParse(prefix, value) {
 		id: prefix + base32
 	};
 }
-function parse(prefix, value) {
-	const result = safeParse(prefix, value);
-	if (result.ok) return result.id;
-	throw new Error(`Invalid ID: ${result.error}`);
-}
 function is(prefix, value) {
 	if (typeof value !== "string") return false;
 	if (!value.startsWith(prefix)) return false;
@@ -131,7 +127,11 @@ function standardValidate(prefix, value) {
 function wireMethods(prefix) {
 	return {
 		is: (value) => is(prefix, value),
-		parse: (value) => parse(prefix, value),
+		parse: (value) => {
+			const result = safeParse(prefix, value);
+			if (result.ok) return result.id;
+			throw new IdsError("invalid_id", `invalid ID: ${result.error}`, { cause: result.error });
+		},
 		safeParse: (value) => safeParse(prefix, value),
 		toJsonSchema: (brand, example) => ({
 			type: "string",
@@ -149,4 +149,4 @@ function wireMethods(prefix) {
 //#endregion
 export { toWireId as a, payloadBytesFromId as i, registerBrand as n, decodeBase32 as o, payloadBase32Length as r, validateBrand as s, wireMethods as t };
 
-//# sourceMappingURL=codec-shell-dWpxoFmy.mjs.map
+//# sourceMappingURL=codec-shell-DH-UO4UR.mjs.map

package/dist/codec-shell-DH-UO4UR.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec-shell-DH-UO4UR.mjs","names":[],"sources":["../src/brand.ts","../src/base32.ts","../src/wire/envelope.ts","../src/wire/invariants.ts","../src/registry.ts","../src/wire/parse.ts","../src/wire/codec-shell.ts"],"sourcesContent":["import { IdsError } from \"./error.js\";\n\nconst brandPattern = /^[a-z]{3}$/;\n\n/** Validates a three-character lowercase brand. Throws on invalid input. */\nexport function validateBrand(brand: string): void {\n  if (!brandPattern.test(brand)) {\n    throw new IdsError(\"invalid_brand\", \"invalid brand: expected three lowercase a-z characters\");\n  }\n}\n","/*\n  This is based on Crockford's Base32 spec: https://www.crockford.com/base32.html\n  One difference is that it uses lowercase instead of uppercase when encoding.\n\n  These functions are internal: codec constructors guarantee that input is a\n  16-byte buffer for encode, or a string of characters drawn from the alphabet\n  for decode. Invalid input produces silent garbage rather than a thrown error,\n  consistent with the trust-the-type rule in ADR-0003.\n*/\n\nexport const alphabet = \"0123456789abcdefghjkmnpqrstvwxyz\";\n\n// 0–31 → ASCII char code, for write-into-codes-then-fromCharCode encoding.\nconst valueToCharCode = new Uint8Array(32);\nfor (let i = 0; i < 32; i++) valueToCharCode[i] = alphabet.charCodeAt(i);\n\n// charCode → 0–31 value. Canonical lowercase only; upstream resolves case and\n// o/i/l aliases before any string reaches decodeBase32.\nconst INVALID = 0xff;\nconst charCodeToValue = new Uint8Array(256).fill(INVALID);\nfor (let i = 0; i < alphabet.length; i++) charCodeToValue[alphabet.charCodeAt(i)] = i;\n\nexport function encodeBase32(bytes: Uint8Array): string {\n  // Build an Array<number> of char codes and pass it to fromCharCode.apply.\n  // Faster than `result += char` (avoids cons-string overhead) and than\n  // Uint8Array variants (apply has a fast path for plain Arrays).\n  // oxlint-disable-next-line no-new-array\n  const codes = new Array<number>(Math.floor((bytes.length * 8) / 5) + 1);\n  let chi = 0;\n  let bits = 0;\n  let value = 0;\n\n  for (let i = 0; i < bytes.length; i++) {\n    value = (value << 8) | bytes[i]!;\n    bits += 8;\n    while (bits >= 5) {\n      bits -= 5;\n      codes[chi++] = valueToCharCode[(value >>> bits) & 0x1f]!;\n    }\n  }\n  codes[chi] = valueToCharCode[(value << (5 - bits)) & 0x1f]!;\n  return String.fromCharCode.apply(null, codes);\n}\n\nexport function decodeBase32(str: string): Uint8Array {\n  const result = new Uint8Array(Math.floor((str.length * 5) / 8));\n  let bits = 0;\n  let value = 0;\n  let index = 0;\n\n  for (let i = 0; i < str.length; i++) {\n    const v = charCodeToValue[str.charCodeAt(i)]!;\n    value = (value << 5) | v;\n    bits += 5;\n    if (bits >= 8) {\n      bits -= 8;\n      result[index++] = (value >>> bits) & 0xff;\n    }\n  }\n  return result;\n}\n","import { decodeBase32, encodeBase32 } from \"../base32.js\";\nimport type { Id, Prefix } from \"../types.js\";\n\n/** Encodes a 16-byte payload as lowercase Crockford base32 (26 chars). */\nfunction encodePayload(bytes: Uint8Array): string {\n  return encodeBase32(bytes);\n}\n\n/** Decodes a 26-char base32 payload suffix to 16 bytes. Trust-the-type. */\nfunction decodePayload(base32: string): Uint8Array {\n  return decodeBase32(base32);\n}\n\n/** Composes a canonical wire ID from a prefix and 16-byte payload. */\nexport function toWireId<Brand extends string>(\n  prefix: Prefix<Brand>,\n  payload: Uint8Array,\n): Id<Brand> {\n  return (prefix + encodePayload(payload)) as Id<Brand>;\n}\n\n/** Decodes the full 16-byte payload from a trusted wire ID. */\nexport function payloadBytesFromId<Brand extends string>(\n  prefix: Prefix<Brand>,\n  id: Id<Brand>,\n): Uint8Array {\n  return decodePayload(id.slice(prefix.length));\n}\n","// Payload is always 16 bytes on the wire (every codec). 16 bytes → 26 Crockford\n// base32 chars. ADR-0002 codifies this as the shared wire-format invariant.\nexport const payloadByteLength: number = 16;\nexport const payloadBase32Length: number = Math.ceil((payloadByteLength * 8) / 5);\n\n// Compact regex character class for the canonical lowercase Crockford alphabet\n// (`0123456789abcdefghjkmnpqrstvwxyz` — excludes i, l, o, u). Used in the JSON\n// Schema `pattern`, which describes the canonical wire form only (ADR-0003).\nexport const base32CharClass: string = \"[0-9a-hjkmnp-tv-z]\";\n","const registeredBrands = new Set<string>();\nconst warnedBrands = new Set<string>();\n\nexport function registerBrand(brand: string, allowDuplicateBrand: boolean | undefined): void {\n  if (\n    typeof process === \"undefined\" ||\n    process.env.NODE_ENV === \"production\" ||\n    allowDuplicateBrand\n  ) {\n    return;\n  }\n\n  if (registeredBrands.has(brand)) {\n    if (!warnedBrands.has(brand)) {\n      console.warn(\n        `[@smonn/ids] brand \"${brand}\" was registered more than once — this usually indicates a bundling or import bug, or that more than one codec variant is using the same brand. Pass { allowDuplicateBrand: true } to silence.`,\n      );\n      warnedBrands.add(brand);\n    }\n  } else {\n    registeredBrands.add(brand);\n  }\n}\n","import { alphabet } from \"../base32.js\";\nimport type { Id, ParseError, ParseResult, Prefix } from \"../types.js\";\nimport { payloadBase32Length } from \"./invariants.js\";\n\nconst replacePattern = /[ilo]/g;\nconst aliasTestPattern = /[ilo]/;\nconst replacer = (match: string): string => (match === \"o\" ? \"0\" : \"1\");\nconst base32Pattern = new RegExp(`^[${alphabet}]{${payloadBase32Length}}$`);\n\nexport function safeParse<Brand extends string>(\n  prefix: Prefix<Brand>,\n  value: unknown,\n): ParseResult<Brand> {\n  if (typeof value !== \"string\") return { ok: false, error: \"not_string\" };\n  const lowercase = value.toLowerCase();\n  if (!lowercase.startsWith(prefix)) return { ok: false, error: \"invalid_prefix\" };\n\n  const sliced = lowercase.slice(prefix.length);\n  const base32 = aliasTestPattern.test(sliced)\n    ? sliced.replaceAll(replacePattern, replacer)\n    : sliced;\n\n  if (!base32Pattern.test(base32)) return { ok: false, error: \"invalid_base32\" };\n\n  const id = (prefix + base32) as Id<Brand>;\n  return { ok: true, id };\n}\n\nexport function is<Brand extends string>(\n  prefix: Prefix<Brand>,\n  value: unknown,\n): value is Id<Brand> {\n  if (typeof value !== \"string\") return false;\n  if (!value.startsWith(prefix)) return false;\n  return base32Pattern.test(value.slice(prefix.length));\n}\n\nfunction errorMessage<Brand extends string>(prefix: Prefix<Brand>, error: ParseError): string {\n  switch (error) {\n    case \"not_string\":\n      return \"expected string\";\n    case \"invalid_prefix\":\n      return `expected prefix '${prefix}'`;\n    case \"invalid_base32\":\n      return \"invalid base32 payload\";\n  }\n}\n\nexport function standardValidate<Brand extends string>(\n  prefix: Prefix<Brand>,\n  value: unknown,\n):\n  | { readonly value: Id<Brand>; readonly issues?: undefined }\n  | { readonly issues: ReadonlyArray<{ readonly message: string }> } {\n  const result = safeParse(prefix, value);\n  if (result.ok) return { value: result.id };\n  return { issues: [{ message: errorMessage(prefix, result.error) }] };\n}\n","import { IdsError } from \"../error.js\";\nimport type { Id, JsonSchema, ParseResult, Prefix, StandardSchemaProps } from \"../types.js\";\nimport { base32CharClass, payloadBase32Length } from \"./invariants.js\";\nimport { is, safeParse, standardValidate } from \"./parse.js\";\n\ntype WireMethods<Brand extends string> = {\n  is: (value: unknown) => value is Id<Brand>;\n  parse: (value: unknown) => Id<Brand>;\n  safeParse: (value: unknown) => ParseResult<Brand>;\n  toJsonSchema: (brand: Brand, example: string) => JsonSchema;\n  \"~standard\": StandardSchemaProps<Brand>;\n};\n\n/** Wire-only methods shared by every codec variant for a fixed prefix. */\nexport function wireMethods<Brand extends string>(prefix: Prefix<Brand>): WireMethods<Brand> {\n  const standard: StandardSchemaProps<Brand> = {\n    version: 1,\n    vendor: \"@smonn/ids\",\n    validate: (value: unknown) => standardValidate(prefix, value),\n  };\n  return {\n    is: (value: unknown): value is Id<Brand> => is(prefix, value),\n    parse: (value: unknown): Id<Brand> => {\n      const result = safeParse(prefix, value);\n      if (result.ok) return result.id;\n      throw new IdsError(\"invalid_id\", `invalid ID: ${result.error}`, { cause: result.error });\n    },\n    safeParse: (value: unknown): ParseResult<Brand> => safeParse(prefix, value),\n    toJsonSchema: (brand: Brand, example: string): JsonSchema => ({\n      type: \"string\",\n      pattern: `^${prefix}${base32CharClass}{${payloadBase32Length}}$`,\n      description: `Branded ID for '${brand}'`,\n      example,\n    }),\n    \"~standard\": standard,\n  };\n}\n"],"mappings":";;AAEA,MAAM,eAAe;;AAGrB,SAAgB,cAAc,OAAqB;CACjD,IAAI,CAAC,aAAa,KAAK,KAAK,GAC1B,MAAM,IAAI,SAAS,iBAAiB,wDAAwD;AAEhG;;;ACCA,MAAa,WAAW;AAGxB,MAAM,kBAAkB,IAAI,WAAW,EAAE;AACzC,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK,gBAAgB,KAAK,SAAS,WAAW,CAAC;AAKvE,MAAM,kBAAkB,IAAI,WAAW,GAAG,CAAC,CAAC,KAAK,GAAO;AACxD,KAAK,IAAI,IAAI,GAAG,IAAI,IAAiB,KAAK,gBAAgB,SAAS,WAAW,CAAC,KAAK;AAEpF,SAAgB,aAAa,OAA2B;CAKtD,MAAM,QAAQ,IAAI,MAAc,KAAK,MAAO,MAAM,SAAS,IAAK,CAAC,IAAI,CAAC;CACtE,IAAI,MAAM;CACV,IAAI,OAAO;CACX,IAAI,QAAQ;CAEZ,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,QAAS,SAAS,IAAK,MAAM;EAC7B,QAAQ;EACR,OAAO,QAAQ,GAAG;GAChB,QAAQ;GACR,MAAM,SAAS,gBAAiB,UAAU,OAAQ;EACpD;CACF;CACA,MAAM,OAAO,gBAAiB,SAAU,IAAI,OAAS;CACrD,OAAO,OAAO,aAAa,MAAM,MAAM,KAAK;AAC9C;AAEA,SAAgB,aAAa,KAAyB;CACpD,MAAM,SAAS,IAAI,WAAW,KAAK,MAAO,IAAI,SAAS,IAAK,CAAC,CAAC;CAC9D,IAAI,OAAO;CACX,IAAI,QAAQ;CACZ,IAAI,QAAQ;CAEZ,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;EACnC,MAAM,IAAI,gBAAgB,IAAI,WAAW,CAAC;EAC1C,QAAS,SAAS,IAAK;EACvB,QAAQ;EACR,IAAI,QAAQ,GAAG;GACb,QAAQ;GACR,OAAO,WAAY,UAAU,OAAQ;EACvC;CACF;CACA,OAAO;AACT;;;;ACxDA,SAAS,cAAc,OAA2B;CAChD,OAAO,aAAa,KAAK;AAC3B;;AAGA,SAAS,cAAc,QAA4B;CACjD,OAAO,aAAa,MAAM;AAC5B;;AAGA,SAAgB,SACd,QACA,SACW;CACX,OAAQ,SAAS,cAAc,OAAO;AACxC;;AAGA,SAAgB,mBACd,QACA,IACY;CACZ,OAAO,cAAc,GAAG,MAAM,OAAO,MAAM,CAAC;AAC9C;ACxBA,MAAa,sBAA8B,KAAK,KAAA,MAA+B,CAAC;AAKhF,MAAa,kBAA0B;;;ACRvC,MAAM,mCAAmB,IAAI,IAAY;AACzC,MAAM,+BAAe,IAAI,IAAY;AAErC,SAAgB,cAAc,OAAe,qBAAgD;CAC3F,IACE,OAAO,YAAY,eACnB,QAAQ,IAAI,aAAa,gBACzB,qBAEA;CAGF,IAAI,iBAAiB,IAAI,KAAK;MACxB,CAAC,aAAa,IAAI,KAAK,GAAG;GAC5B,QAAQ,KACN,uBAAuB,MAAM,+LAC/B;GACA,aAAa,IAAI,KAAK;EACxB;QAEA,iBAAiB,IAAI,KAAK;AAE9B;;;AClBA,MAAM,iBAAiB;AACvB,MAAM,mBAAmB;AACzB,MAAM,YAAY,UAA2B,UAAU,MAAM,MAAM;AACnE,MAAM,gBAAgB,IAAI,OAAO,KAAK,SAAS,IAAI,oBAAoB,GAAG;AAE1E,SAAgB,UACd,QACA,OACoB;CACpB,IAAI,OAAO,UAAU,UAAU,OAAO;EAAE,IAAI;EAAO,OAAO;CAAa;CACvE,MAAM,YAAY,MAAM,YAAY;CACpC,IAAI,CAAC,UAAU,WAAW,MAAM,GAAG,OAAO;EAAE,IAAI;EAAO,OAAO;CAAiB;CAE/E,MAAM,SAAS,UAAU,MAAM,OAAO,MAAM;CAC5C,MAAM,SAAS,iBAAiB,KAAK,MAAM,IACvC,OAAO,WAAW,gBAAgB,QAAQ,IAC1C;CAEJ,IAAI,CAAC,cAAc,KAAK,MAAM,GAAG,OAAO;EAAE,IAAI;EAAO,OAAO;CAAiB;CAG7E,OAAO;EAAE,IAAI;EAAM,IADP,SAAS;CACC;AACxB;AAEA,SAAgB,GACd,QACA,OACoB;CACpB,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,IAAI,CAAC,MAAM,WAAW,MAAM,GAAG,OAAO;CACtC,OAAO,cAAc,KAAK,MAAM,MAAM,OAAO,MAAM,CAAC;AACtD;AAEA,SAAS,aAAmC,QAAuB,OAA2B;CAC5F,QAAQ,OAAR;EACE,KAAK,cACH,OAAO;EACT,KAAK,kBACH,OAAO,oBAAoB,OAAO;EACpC,KAAK,kBACH,OAAO;CACX;AACF;AAEA,SAAgB,iBACd,QACA,OAGmE;CACnE,MAAM,SAAS,UAAU,QAAQ,KAAK;CACtC,IAAI,OAAO,IAAI,OAAO,EAAE,OAAO,OAAO,GAAG;CACzC,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,aAAa,QAAQ,OAAO,KAAK,EAAE,CAAC,EAAE;AACrE;;;;AC3CA,SAAgB,YAAkC,QAA2C;CAM3F,OAAO;EACL,KAAK,UAAuC,GAAG,QAAQ,KAAK;EAC5D,QAAQ,UAA8B;GACpC,MAAM,SAAS,UAAU,QAAQ,KAAK;GACtC,IAAI,OAAO,IAAI,OAAO,OAAO;GAC7B,MAAM,IAAI,SAAS,cAAc,eAAe,OAAO,SAAS,EAAE,OAAO,OAAO,MAAM,CAAC;EACzF;EACA,YAAY,UAAuC,UAAU,QAAQ,KAAK;EAC1E,eAAe,OAAc,aAAiC;GAC5D,MAAM;GACN,SAAS,IAAI,SAAS,gBAAgB,GAAG,oBAAoB;GAC7D,aAAa,mBAAmB,MAAM;GACtC;EACF;EACA,aAAa;GAlBb,SAAS;GACT,QAAQ;GACR,WAAW,UAAmB,iBAAiB,QAAQ,KAAK;EAgBxC;CACtB;AACF"}

package/dist/drizzle-CeSni5PB.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"drizzle-CeSni5PB.d.mts","names":[],"sources":["../src/drizzle.ts"],"mappings":";;;;;;AAgBA;;;;;;;KAAY,aAAA;EACV,SAAA,CAAU,KAAA,YAAiB,WAAA,CAAY,KAAA;AAAA;AAAA;AAwBzC;;;;;;;;;;;;;;;;;;;;AAxByC,iBAwBzB,QAAA,uBACd,KAAA,EAAO,aAAA,CAAc,KAAA,IACpB,qBAAA,CAAsB,mBAAA;EAA0B,IAAA,EAAM,EAAA,CAAG,KAAA;EAAQ,UAAA;AAAA"}
+{"version":3,"file":"drizzle-CeSni5PB.d.mts","names":[],"sources":["../src/drizzle.ts"],"mappings":";;;;;;;;;;;;;KAoBY,aAAA;EACV,SAAA,CAAU,KAAA,YAAiB,WAAA,CAAY,KAAA;AAAA;;;;;;;;;;;;;;;;;;;;;AA0B2B;iBAFpD,QAAA,uBACd,KAAA,EAAO,aAAA,CAAc,KAAA,IACpB,qBAAA,CAAsB,mBAAA;EAA0B,IAAA,EAAM,EAAA,CAAG,KAAA;EAAQ,UAAA;AAAA"}

package/dist/drizzle.d.mts

@@ -1,2 +1,3 @@
+import { n as IdsErrorCode, r as isIdsError, t as IdsError } from "./error-DTr4i6Ic.mjs";
 import { n as idColumn, t as IdColumnCodec } from "./drizzle-CeSni5PB.mjs";
-export { IdColumnCodec, idColumn };
+export { IdColumnCodec, IdsError, type IdsErrorCode, idColumn, isIdsError };

package/dist/drizzle.mjs

@@ -1,3 +1,4 @@
+import { n as isIdsError, t as IdsError } from "./error-Cp5qYZcv.mjs";
 import { customType } from "drizzle-orm/pg-core";
 //#region src/drizzle.ts
 /**
@@ -31,12 +32,12 @@ function idColumn(codec) {
 		},
 		fromDriver(value) {
 			const result = codec.safeParse(value);
-			if (!result.ok) throw new Error(`[ids] invalid ID from database: ${result.error}`);
+			if (!result.ok) throw new IdsError("invalid_id", `invalid ID from database: ${result.error}`, { cause: result.error });
 			return result.id;
 		}
 	})();
 }
 //#endregion
-export { idColumn };
+export { IdsError, idColumn, isIdsError };
 
 //# sourceMappingURL=drizzle.mjs.map

package/dist/drizzle.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"drizzle.mjs","names":[],"sources":["../src/drizzle.ts"],"sourcesContent":["import {\n  customType,\n  type ConvertCustomConfig,\n  type PgCustomColumnBuilder,\n} from \"drizzle-orm/pg-core\";\nimport type { Id, ParseResult } from \"./types.js\";\n\n/**\n * Minimum codec interface required by the Drizzle adapter.\n *\n * Any codec variant satisfies this type — TimestampCodec, OpaqueTimestampCodec,\n * and WrappedKeyCodec all expose `safeParse`. The adapter never calls\n * `extractTimestamp`, `wrap`/`unwrap`, or any key-dependent method.\n *\n * Kysely and Prisma adapter issues should use this same codec contract shape.\n */\nexport type IdColumnCodec<Brand extends string> = {\n  safeParse(value: unknown): ParseResult<Brand>;\n};\n\n/**\n * Drizzle custom column type that stores an `Id<Brand>` as a canonical `text` value.\n *\n * **Write path:** passes the `Id<Brand>` directly to the driver — it is already\n * the canonical string form.\n *\n * **Read path:** normalises the raw DB string via `codec.safeParse()`, not strict\n * `is()`. Data at rest should already be canonical per ADR-0003, but `safeParse`\n * is a safe boundary in case stale non-canonical values exist. Throws if the\n * value from the database does not parse as a valid `Id<Brand>`.\n *\n * @example\n * ```ts\n * import { idColumn } from \"@smonn/ids/drizzle\";\n * import { createTimestampId } from \"@smonn/ids\";\n *\n * const usr = createTimestampId(\"usr\");\n * export const users = pgTable(\"users\", { id: idColumn(usr).primaryKey() });\n * // users.id is Id<\"usr\"> end-to-end\n * ```\n */\nexport function idColumn<Brand extends string>(\n  codec: IdColumnCodec<Brand>,\n): PgCustomColumnBuilder<ConvertCustomConfig<\"\", { data: Id<Brand>; driverData: string }>> {\n  return customType<{ data: Id<Brand>; driverData: string }>({\n    dataType() {\n      return \"text\";\n    },\n    toDriver(value: Id<Brand>): string {\n      return value;\n    },\n    fromDriver(value: string): Id<Brand> {\n      const result = codec.safeParse(value);\n      if (!result.ok) {\n        throw new Error(`[ids] invalid ID from database: ${result.error}`);\n      }\n      return result.id;\n    },\n  })();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAyCA,SAAgB,SACd,OACyF;CACzF,OAAO,WAAoD;EACzD,WAAW;GACT,OAAO;EACT;EACA,SAAS,OAA0B;GACjC,OAAO;EACT;EACA,WAAW,OAA0B;GACnC,MAAM,SAAS,MAAM,UAAU,KAAK;GACpC,IAAI,CAAC,OAAO,IACV,MAAM,IAAI,MAAM,mCAAmC,OAAO,OAAO;GAEnE,OAAO,OAAO;EAChB;CACF,CAAC,CAAC,CAAC;AACL"}
+{"version":3,"file":"drizzle.mjs","names":[],"sources":["../src/drizzle.ts"],"sourcesContent":["import {\n  customType,\n  type ConvertCustomConfig,\n  type PgCustomColumnBuilder,\n} from \"drizzle-orm/pg-core\";\nimport { IdsError, isIdsError, type IdsErrorCode } from \"./error.js\";\nimport type { Id, ParseResult } from \"./types.js\";\n\n/** {@link IdsError} class, {@link isIdsError} type guard, and {@link IdsErrorCode} union — re-exported from `\"@smonn/ids\"` for convenience. */\nexport { IdsError, isIdsError, type IdsErrorCode };\n\n/**\n * Minimum codec interface required by the Drizzle adapter.\n *\n * Any codec variant satisfies this type — TimestampCodec, OpaqueTimestampCodec,\n * and WrappedKeyCodec all expose `safeParse`. The adapter never calls\n * `extractTimestamp`, `wrap`/`unwrap`, or any key-dependent method.\n *\n * Kysely and Prisma adapter issues should use this same codec contract shape.\n */\nexport type IdColumnCodec<Brand extends string> = {\n  safeParse(value: unknown): ParseResult<Brand>;\n};\n\n/**\n * Drizzle custom column type that stores an `Id<Brand>` as a canonical `text` value.\n *\n * **Write path:** passes the `Id<Brand>` directly to the driver — it is already\n * the canonical string form.\n *\n * **Read path:** normalises the raw DB string via `codec.safeParse()`, not strict\n * `is()`. Data at rest should already be canonical per ADR-0003, but `safeParse`\n * is a safe boundary in case stale non-canonical values exist. Throws if the\n * value from the database does not parse as a valid `Id<Brand>`.\n *\n * @example\n * ```ts\n * import { idColumn } from \"@smonn/ids/drizzle\";\n * import { createTimestampId } from \"@smonn/ids\";\n *\n * const usr = createTimestampId(\"usr\");\n * export const users = pgTable(\"users\", { id: idColumn(usr).primaryKey() });\n * // users.id is Id<\"usr\"> end-to-end\n * ```\n */\nexport function idColumn<Brand extends string>(\n  codec: IdColumnCodec<Brand>,\n): PgCustomColumnBuilder<ConvertCustomConfig<\"\", { data: Id<Brand>; driverData: string }>> {\n  return customType<{ data: Id<Brand>; driverData: string }>({\n    dataType() {\n      return \"text\";\n    },\n    toDriver(value: Id<Brand>): string {\n      return value;\n    },\n    fromDriver(value: string): Id<Brand> {\n      const result = codec.safeParse(value);\n      if (!result.ok) {\n        throw new IdsError(\"invalid_id\", `invalid ID from database: ${result.error}`, {\n          cause: result.error,\n        });\n      }\n      return result.id;\n    },\n  })();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AA6CA,SAAgB,SACd,OACyF;CACzF,OAAO,WAAoD;EACzD,WAAW;GACT,OAAO;EACT;EACA,SAAS,OAA0B;GACjC,OAAO;EACT;EACA,WAAW,OAA0B;GACnC,MAAM,SAAS,MAAM,UAAU,KAAK;GACpC,IAAI,CAAC,OAAO,IACV,MAAM,IAAI,SAAS,cAAc,6BAA6B,OAAO,SAAS,EAC5E,OAAO,OAAO,MAChB,CAAC;GAEH,OAAO,OAAO;EAChB;CACF,CAAC,CAAC,CAAC;AACL"}

package/dist/error-Cp5qYZcv.mjs

@@ -0,0 +1,52 @@
+//#region src/error.ts
+const BRAND = Symbol.for("@smonn/ids/IdsError");
+/**
+* The single error class thrown by caller-reachable public failures.
+* Carries a stable `readonly code: IdsErrorCode` for programmatic discrimination.
+* Recognized via `isIdsError()` — a branded guard that survives realm/dual-package duplication
+* where bare `instanceof` would silently fail.
+*
+* @example
+* ```ts
+* try {
+*   usr.parse(rawInput);
+* } catch (err) {
+*   if (isIdsError(err) && err.code === "invalid_id") return; // handle parse failure
+* }
+* ```
+*/
+var IdsError = class extends Error {
+	code;
+	constructor(code, message, options) {
+		super(message, options);
+		this.name = "IdsError";
+		this.code = code;
+		Object.defineProperty(this, BRAND, {
+			value: true,
+			enumerable: false,
+			configurable: false,
+			writable: false
+		});
+	}
+};
+/**
+* Type guard for `IdsError`. Checks a non-enumerable brand rather than bare `instanceof`
+* so it survives realm/dual-package duplication (ESM + CJS dual package hazard).
+*
+* @example
+* ```ts
+* if (isIdsError(err)) {
+*   switch (err.code) {
+*     case "verification_failed": // ...
+*     case "invalid_id": // ...
+*   }
+* }
+* ```
+*/
+function isIdsError(value) {
+	return typeof value === "object" && value !== null && value[BRAND] === true;
+}
+//#endregion
+export { isIdsError as n, IdsError as t };
+
+//# sourceMappingURL=error-Cp5qYZcv.mjs.map

package/dist/error-Cp5qYZcv.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-Cp5qYZcv.mjs","names":[],"sources":["../src/error.ts"],"sourcesContent":["const BRAND = Symbol.for(\"@smonn/ids/IdsError\");\n\n/**\n * The stable machine-readable failure reason carried by `IdsError`.\n * Use `code` — not `message` — for programmatic branching; `message` is non-contractual.\n * Adding a new member is minor-additive; renaming or removing one is breaking.\n */\nexport type IdsErrorCode =\n  | \"invalid_brand\"\n  | \"invalid_key_format\"\n  | \"invalid_key_encoding\"\n  | \"invalid_key_length\"\n  | \"invalid_kind\"\n  | \"empty_keyring\"\n  | \"duplicate_keyring_entry\"\n  | \"invalid_lookup_key\"\n  | \"verification_failed\"\n  | \"invalid_id\";\n\n/**\n * The single error class thrown by caller-reachable public failures.\n * Carries a stable `readonly code: IdsErrorCode` for programmatic discrimination.\n * Recognized via `isIdsError()` — a branded guard that survives realm/dual-package duplication\n * where bare `instanceof` would silently fail.\n *\n * @example\n * ```ts\n * try {\n *   usr.parse(rawInput);\n * } catch (err) {\n *   if (isIdsError(err) && err.code === \"invalid_id\") return; // handle parse failure\n * }\n * ```\n */\nexport class IdsError extends Error {\n  readonly code: IdsErrorCode;\n\n  constructor(code: IdsErrorCode, message: string, options?: ErrorOptions) {\n    super(message, options);\n    this.name = \"IdsError\";\n    this.code = code;\n    Object.defineProperty(this, BRAND, {\n      value: true,\n      enumerable: false,\n      configurable: false,\n      writable: false,\n    });\n  }\n}\n\n/**\n * Type guard for `IdsError`. Checks a non-enumerable brand rather than bare `instanceof`\n * so it survives realm/dual-package duplication (ESM + CJS dual package hazard).\n *\n * @example\n * ```ts\n * if (isIdsError(err)) {\n *   switch (err.code) {\n *     case \"verification_failed\": // ...\n *     case \"invalid_id\": // ...\n *   }\n * }\n * ```\n */\nexport function isIdsError(value: unknown): value is IdsError {\n  return (\n    typeof value === \"object\" &&\n    value !== null &&\n    (value as Record<symbol, unknown>)[BRAND] === true\n  );\n}\n"],"mappings":";AAAA,MAAM,QAAQ,OAAO,IAAI,qBAAqB;;;;;;;;;;;;;;;;AAkC9C,IAAa,WAAb,cAA8B,MAAM;CAClC;CAEA,YAAY,MAAoB,SAAiB,SAAwB;EACvE,MAAM,SAAS,OAAO;EACtB,KAAK,OAAO;EACZ,KAAK,OAAO;EACZ,OAAO,eAAe,MAAM,OAAO;GACjC,OAAO;GACP,YAAY;GACZ,cAAc;GACd,UAAU;EACZ,CAAC;CACH;AACF;;;;;;;;;;;;;;;AAgBA,SAAgB,WAAW,OAAmC;CAC5D,OACE,OAAO,UAAU,YACjB,UAAU,QACT,MAAkC,WAAW;AAElD"}

package/dist/error-DTr4i6Ic.d.mts

@@ -0,0 +1,44 @@
+//#region src/error.d.ts
+/**
+* The stable machine-readable failure reason carried by `IdsError`.
+* Use `code` — not `message` — for programmatic branching; `message` is non-contractual.
+* Adding a new member is minor-additive; renaming or removing one is breaking.
+*/
+type IdsErrorCode = "invalid_brand" | "invalid_key_format" | "invalid_key_encoding" | "invalid_key_length" | "invalid_kind" | "empty_keyring" | "duplicate_keyring_entry" | "invalid_lookup_key" | "verification_failed" | "invalid_id";
+/**
+* The single error class thrown by caller-reachable public failures.
+* Carries a stable `readonly code: IdsErrorCode` for programmatic discrimination.
+* Recognized via `isIdsError()` — a branded guard that survives realm/dual-package duplication
+* where bare `instanceof` would silently fail.
+*
+* @example
+* ```ts
+* try {
+*   usr.parse(rawInput);
+* } catch (err) {
+*   if (isIdsError(err) && err.code === "invalid_id") return; // handle parse failure
+* }
+* ```
+*/
+declare class IdsError extends Error {
+  readonly code: IdsErrorCode;
+  constructor(code: IdsErrorCode, message: string, options?: ErrorOptions);
+}
+/**
+* Type guard for `IdsError`. Checks a non-enumerable brand rather than bare `instanceof`
+* so it survives realm/dual-package duplication (ESM + CJS dual package hazard).
+*
+* @example
+* ```ts
+* if (isIdsError(err)) {
+*   switch (err.code) {
+*     case "verification_failed": // ...
+*     case "invalid_id": // ...
+*   }
+* }
+* ```
+*/
+declare function isIdsError(value: unknown): value is IdsError;
+//#endregion
+export { IdsErrorCode as n, isIdsError as r, IdsError as t };
+//# sourceMappingURL=error-DTr4i6Ic.d.mts.map

package/dist/error-DTr4i6Ic.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-DTr4i6Ic.d.mts","names":[],"sources":["../src/error.ts"],"mappings":";;AAOA;;;;KAAY,YAAA;AA2BZ;;;;;;;;;;;;;;;AAAA,cAAa,QAAA,SAAiB,KAAA;EAAA,SACnB,IAAA,EAAM,YAAA;EAEf,WAAA,CAAY,IAAA,EAAM,YAAA,EAAc,OAAA,UAAiB,OAAA,GAAU,YAAA;AAAA;AAAA;AA2B7D;;;;;;;;AAAqD;;;;;AA3BQ,iBA2B7C,UAAA,CAAW,KAAA,YAAiB,KAAA,IAAS,QAAA"}

package/dist/express.d.mts

@@ -1,18 +1,11 @@
 import { i as ParseResult, t as Id } from "./types-g7CiQDyE.mjs";
+import { t as IdParamFailure } from "./adapter-types-oHCCSgOO.mjs";
 import { NextFunction, Request, Response } from "express";
 
 //#region src/express.d.ts
 type IdCodec<Brand extends string> = {
   safeParse(value: unknown): ParseResult<Brand>;
 };
-/** Discriminated failure value passed to `onError` and emitted to Express error pipeline via `next(err)`. */
-type IdParamFailure = {
-  readonly reason: "brand_mismatch";
-  readonly status: number;
-} | {
-  readonly reason: "malformed";
-  readonly status: number;
-};
 /**
 * Typed error forwarded to Express's error pipeline (`next(err)`) on validation failure.
 * Inspect `err.reason` and `err.status` in error-handling middleware.
@@ -88,5 +81,5 @@ type IdParamOptions = {
 */
 declare function idParam<ParamKey extends string, Brand extends string>(paramName: ParamKey, codec: IdCodec<Brand>, options?: IdParamOptions): (req: Request, res: Response<unknown, Record<ParamKey, Id<Brand>>>, next: NextFunction) => void;
 //#endregion
-export { IdParamError, IdParamFailure, IdParamOptions, idParam };
+export { IdParamError, type IdParamFailure, IdParamOptions, idParam };
 //# sourceMappingURL=express.d.mts.map

package/dist/express.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"express.d.mts","names":[],"sources":["../src/express.ts"],"mappings":";;;;KAGK,OAAA;EACH,SAAA,CAAU,KAAA,YAAiB,WAAA,CAAY,KAAA;AAAA;;KAI7B,cAAA;EAAA,SACG,MAAA;EAAA,SAAmC,MAAA;AAAA;EAAA,SACnC,MAAA;EAAA,SAA8B,MAAA;AAAA;;AANJ;AAIzC;;cAQa,YAAA,SAAqB,KAAA;EAAA,SACvB,MAAA;EAAA,SACA,MAAA;EAET,WAAA,CAAY,MAAA,kCAAwC,MAAA;AAAA;;KAS1C,cAAA;EAnBiC;AAM7C;;;EAkBE,OAAA,IAAW,OAAA,EAAS,cAAA,EAAgB,GAAA,EAAK,OAAA,EAAS,GAAA,EAAK,QAAA,EAAU,IAAA,EAAM,YAAA;;;;;EAKvE,MAAA;IAAW,cAAA;IAAyB,SAAA;EAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;AAAA;AAmDtC;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAgB,OAAA,gDACd,SAAA,EAAW,QAAA,EACX,KAAA,EAAO,OAAA,CAAQ,KAAA,GACf,OAAA,GAAU,cAAA,IACR,GAAA,EAAK,OAAA,EAAS,GAAA,EAAK,QAAA,UAAkB,MAAA,CAAO,QAAA,EAAU,EAAA,CAAG,KAAA,KAAU,IAAA,EAAM,YAAA"}
+{"version":3,"file":"express.d.mts","names":[],"sources":["../src/express.ts"],"mappings":";;;;;KAMK,OAAA;EACH,SAAA,CAAU,KAAA,YAAiB,WAAA,CAAY,KAAA;AAAA;;;;;cAO5B,YAAA,SAAqB,KAAA;EAAA,SACvB,MAAA;EAAA,SACA,MAAA;EAET,WAAA,CAAY,MAAA,kCAAwC,MAAA;AAAA;AAJtD;AAAA,KAaY,cAAA;;;;;EAKV,OAAA,IAAW,OAAA,EAAS,cAAA,EAAgB,GAAA,EAAK,OAAA,EAAS,GAAA,EAAK,QAAA,EAAU,IAAA,EAAM,YAAA;;;;;EAKvE,MAAA;IAAW,cAAA;IAAyB,SAAA;EAAA;AAAA;;;;;;;;;;;;;;;;;;;AAAA;AAmDtC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAgB,OAAA,gDACd,SAAA,EAAW,QAAA,EACX,KAAA,EAAO,OAAA,CAAQ,KAAA,GACf,OAAA,GAAU,cAAA,IACR,GAAA,EAAK,OAAA,EAAS,GAAA,EAAK,QAAA,UAAkB,MAAA,CAAO,QAAA,EAAU,EAAA,CAAG,KAAA,KAAU,IAAA,EAAM,YAAA"}

package/dist/express.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"express.mjs","names":[],"sources":["../src/express.ts"],"sourcesContent":["import type { NextFunction, Request, Response } from \"express\";\nimport type { Id, ParseResult } from \"./types.js\";\n\ntype IdCodec<Brand extends string> = {\n  safeParse(value: unknown): ParseResult<Brand>;\n};\n\n/** Discriminated failure value passed to `onError` and emitted to Express error pipeline via `next(err)`. */\nexport type IdParamFailure =\n  | { readonly reason: \"brand_mismatch\"; readonly status: number }\n  | { readonly reason: \"malformed\"; readonly status: number };\n\n/**\n * Typed error forwarded to Express's error pipeline (`next(err)`) on validation failure.\n * Inspect `err.reason` and `err.status` in error-handling middleware.\n */\nexport class IdParamError extends Error {\n  readonly status: number;\n  readonly reason: \"brand_mismatch\" | \"malformed\";\n\n  constructor(reason: \"brand_mismatch\" | \"malformed\", status: number) {\n    super(`ID validation failed: ${reason}`);\n    this.name = \"IdParamError\";\n    this.reason = reason;\n    this.status = status;\n  }\n}\n\n/** Options for `idParam`. All fields are optional. */\nexport type IdParamOptions = {\n  /**\n   * Called instead of forwarding to `next(err)` when provided. The hook owns the response\n   * entirely — the adapter does not call `next(err)` itself.\n   */\n  onError?: (failure: IdParamFailure, req: Request, res: Response, next: NextFunction) => void;\n  /**\n   * Remap the default HTTP status for a failure reason without a full handler.\n   * e.g. `{ brand_mismatch: 400 }` treats both failure kinds as 400.\n   */\n  status?: { brand_mismatch?: number; malformed?: number };\n};\n\n/**\n * Express middleware that validates a named route param against a codec via `safeParse`.\n *\n * **Default (no options):** calls `next(err)` with an `IdParamError` carrying `status` and `reason`,\n * so the app's existing error-handling middleware controls rendering. The adapter does not write\n * a response body itself.\n *\n * **`options.onError`:** when provided, the hook owns the response entirely — the adapter does\n * not call `next(err)`.\n *\n * **`options.status`:** remaps the default HTTP status for a reason without a full handler.\n *\n * - **Brand mismatch (`invalid_prefix`) → `reason: \"brand_mismatch\"`, default 404**\n * - **Malformed or missing ID → `reason: \"malformed\"`, default 400**\n *\n * On success, stores the canonical `Id<Brand>` in `res.locals` under `paramName`\n * and calls `next()`.\n *\n * @example\n * ```ts\n * import { idParam, IdParamError } from \"@smonn/ids/express\";\n * import { createTimestampId } from \"@smonn/ids\";\n *\n * const usr = createTimestampId(\"usr\");\n *\n * // Default: forwards error to app error-handling middleware\n * app.get(\"/users/:id\", idParam(\"id\", usr), (req, res) => {\n *   const id = res.locals.id; // Id<\"usr\">, canonical\n * });\n *\n * // Error-handling middleware receives the typed error\n * app.use((err, req, res, next) => {\n *   if (err instanceof IdParamError) {\n *     res.status(err.status).json({ error: err.reason });\n *     return;\n *   }\n *   next(err);\n * });\n *\n * // Override: consumer fully owns the response\n * app.get(\"/orgs/:id\", idParam(\"id\", org, {\n *   onError: (failure, req, res) => res.status(failure.status).json({ error: failure.reason }),\n * }), handler);\n *\n * // Or a lightweight status remap without a full handler\n * app.get(\"/things/:id\", idParam(\"id\", thing, { status: { brand_mismatch: 400 } }), handler);\n * ```\n */\nexport function idParam<ParamKey extends string, Brand extends string>(\n  paramName: ParamKey,\n  codec: IdCodec<Brand>,\n  options?: IdParamOptions,\n): (req: Request, res: Response<unknown, Record<ParamKey, Id<Brand>>>, next: NextFunction) => void {\n  return (req, res, next): void => {\n    const raw = req.params[paramName];\n    const result = codec.safeParse(raw);\n    if (!result.ok) {\n      const reason =\n        result.error === \"invalid_prefix\" ? (\"brand_mismatch\" as const) : (\"malformed\" as const);\n      const defaultStatus = reason === \"brand_mismatch\" ? 404 : 400;\n      const status = options?.status?.[reason] ?? defaultStatus;\n      const failure: IdParamFailure = { reason, status };\n      if (options?.onError) {\n        options.onError(failure, req, res, next);\n        return;\n      }\n      next(new IdParamError(reason, status));\n      return;\n    }\n    (res.locals as Record<string, unknown>)[paramName] = result.id;\n    next();\n  };\n}\n"],"mappings":";;;;;AAgBA,IAAa,eAAb,cAAkC,MAAM;CACtC;CACA;CAEA,YAAY,QAAwC,QAAgB;EAClE,MAAM,yBAAyB,QAAQ;EACvC,KAAK,OAAO;EACZ,KAAK,SAAS;EACd,KAAK,SAAS;CAChB;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgEA,SAAgB,QACd,WACA,OACA,SACiG;CACjG,QAAQ,KAAK,KAAK,SAAe;EAC/B,MAAM,MAAM,IAAI,OAAO;EACvB,MAAM,SAAS,MAAM,UAAU,GAAG;EAClC,IAAI,CAAC,OAAO,IAAI;GACd,MAAM,SACJ,OAAO,UAAU,mBAAoB,mBAA8B;GACrE,MAAM,gBAAgB,WAAW,mBAAmB,MAAM;GAC1D,MAAM,SAAS,SAAS,SAAS,WAAW;GAC5C,MAAM,UAA0B;IAAE;IAAQ;GAAO;GACjD,IAAI,SAAS,SAAS;IACpB,QAAQ,QAAQ,SAAS,KAAK,KAAK,IAAI;IACvC;GACF;GACA,KAAK,IAAI,aAAa,QAAQ,MAAM,CAAC;GACrC;EACF;EACA,IAAK,OAAmC,aAAa,OAAO;EAC5D,KAAK;CACP;AACF"}
+{"version":3,"file":"express.mjs","names":[],"sources":["../src/express.ts"],"sourcesContent":["import type { NextFunction, Request, Response } from \"express\";\nimport type { IdParamFailure } from \"./adapter-types.js\";\nimport type { Id, ParseResult } from \"./types.js\";\n\nexport type { IdParamFailure };\n\ntype IdCodec<Brand extends string> = {\n  safeParse(value: unknown): ParseResult<Brand>;\n};\n\n/**\n * Typed error forwarded to Express's error pipeline (`next(err)`) on validation failure.\n * Inspect `err.reason` and `err.status` in error-handling middleware.\n */\nexport class IdParamError extends Error {\n  readonly status: number;\n  readonly reason: \"brand_mismatch\" | \"malformed\";\n\n  constructor(reason: \"brand_mismatch\" | \"malformed\", status: number) {\n    super(`ID validation failed: ${reason}`);\n    this.name = \"IdParamError\";\n    this.reason = reason;\n    this.status = status;\n  }\n}\n\n/** Options for `idParam`. All fields are optional. */\nexport type IdParamOptions = {\n  /**\n   * Called instead of forwarding to `next(err)` when provided. The hook owns the response\n   * entirely — the adapter does not call `next(err)` itself.\n   */\n  onError?: (failure: IdParamFailure, req: Request, res: Response, next: NextFunction) => void;\n  /**\n   * Remap the default HTTP status for a failure reason without a full handler.\n   * e.g. `{ brand_mismatch: 400 }` treats both failure kinds as 400.\n   */\n  status?: { brand_mismatch?: number; malformed?: number };\n};\n\n/**\n * Express middleware that validates a named route param against a codec via `safeParse`.\n *\n * **Default (no options):** calls `next(err)` with an `IdParamError` carrying `status` and `reason`,\n * so the app's existing error-handling middleware controls rendering. The adapter does not write\n * a response body itself.\n *\n * **`options.onError`:** when provided, the hook owns the response entirely — the adapter does\n * not call `next(err)`.\n *\n * **`options.status`:** remaps the default HTTP status for a reason without a full handler.\n *\n * - **Brand mismatch (`invalid_prefix`) → `reason: \"brand_mismatch\"`, default 404**\n * - **Malformed or missing ID → `reason: \"malformed\"`, default 400**\n *\n * On success, stores the canonical `Id<Brand>` in `res.locals` under `paramName`\n * and calls `next()`.\n *\n * @example\n * ```ts\n * import { idParam, IdParamError } from \"@smonn/ids/express\";\n * import { createTimestampId } from \"@smonn/ids\";\n *\n * const usr = createTimestampId(\"usr\");\n *\n * // Default: forwards error to app error-handling middleware\n * app.get(\"/users/:id\", idParam(\"id\", usr), (req, res) => {\n *   const id = res.locals.id; // Id<\"usr\">, canonical\n * });\n *\n * // Error-handling middleware receives the typed error\n * app.use((err, req, res, next) => {\n *   if (err instanceof IdParamError) {\n *     res.status(err.status).json({ error: err.reason });\n *     return;\n *   }\n *   next(err);\n * });\n *\n * // Override: consumer fully owns the response\n * app.get(\"/orgs/:id\", idParam(\"id\", org, {\n *   onError: (failure, req, res) => res.status(failure.status).json({ error: failure.reason }),\n * }), handler);\n *\n * // Or a lightweight status remap without a full handler\n * app.get(\"/things/:id\", idParam(\"id\", thing, { status: { brand_mismatch: 400 } }), handler);\n * ```\n */\nexport function idParam<ParamKey extends string, Brand extends string>(\n  paramName: ParamKey,\n  codec: IdCodec<Brand>,\n  options?: IdParamOptions,\n): (req: Request, res: Response<unknown, Record<ParamKey, Id<Brand>>>, next: NextFunction) => void {\n  return (req, res, next): void => {\n    const raw = req.params[paramName];\n    const result = codec.safeParse(raw);\n    if (!result.ok) {\n      const reason =\n        result.error === \"invalid_prefix\" ? (\"brand_mismatch\" as const) : (\"malformed\" as const);\n      const defaultStatus = reason === \"brand_mismatch\" ? 404 : 400;\n      const status = options?.status?.[reason] ?? defaultStatus;\n      const failure: IdParamFailure = { reason, status };\n      if (options?.onError) {\n        options.onError(failure, req, res, next);\n        return;\n      }\n      next(new IdParamError(reason, status));\n      return;\n    }\n    (res.locals as Record<string, unknown>)[paramName] = result.id;\n    next();\n  };\n}\n"],"mappings":";;;;;AAcA,IAAa,eAAb,cAAkC,MAAM;CACtC;CACA;CAEA,YAAY,QAAwC,QAAgB;EAClE,MAAM,yBAAyB,QAAQ;EACvC,KAAK,OAAO;EACZ,KAAK,SAAS;EACd,KAAK,SAAS;CAChB;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgEA,SAAgB,QACd,WACA,OACA,SACiG;CACjG,QAAQ,KAAK,KAAK,SAAe;EAC/B,MAAM,MAAM,IAAI,OAAO;EACvB,MAAM,SAAS,MAAM,UAAU,GAAG;EAClC,IAAI,CAAC,OAAO,IAAI;GACd,MAAM,SACJ,OAAO,UAAU,mBAAoB,mBAA8B;GACrE,MAAM,gBAAgB,WAAW,mBAAmB,MAAM;GAC1D,MAAM,SAAS,SAAS,SAAS,WAAW;GAC5C,MAAM,UAA0B;IAAE;IAAQ;GAAO;GACjD,IAAI,SAAS,SAAS;IACpB,QAAQ,QAAQ,SAAS,KAAK,KAAK,IAAI;IACvC;GACF;GACA,KAAK,IAAI,aAAa,QAAQ,MAAM,CAAC;GACrC;EACF;EACA,IAAK,OAAmC,aAAa,OAAO;EAC5D,KAAK;CACP;AACF"}

package/dist/fastify.d.mts

@@ -0,0 +1,88 @@
+import { i as ParseResult } from "./types-g7CiQDyE.mjs";
+import { t as IdParamFailure } from "./adapter-types-oHCCSgOO.mjs";
+import { FastifyReply, FastifyRequest } from "fastify";
+
+//#region src/fastify.d.ts
+type IdCodec<Brand extends string> = {
+  safeParse(value: unknown): ParseResult<Brand>;
+};
+/**
+* Typed error thrown into Fastify's `setErrorHandler` on validation failure.
+* Inspect `err.reason` and `err.statusCode` in your error handler.
+*/
+declare class IdParamError extends Error {
+  readonly statusCode: number;
+  readonly reason: "brand_mismatch" | "malformed";
+  constructor(reason: "brand_mismatch" | "malformed", statusCode: number);
+}
+/** Options for `idParam`. All fields are optional. */
+type IdParamOptions = {
+  /**
+  * Called instead of throwing when provided. The hook owns the response entirely —
+  * the adapter does not throw.
+  */
+  onError?: (failure: IdParamFailure, request: FastifyRequest, reply: FastifyReply) => void | Promise<void>;
+  /**
+  * Remap the default HTTP status for a failure reason without a full handler.
+  * e.g. `{ brand_mismatch: 400 }` treats both failure kinds as 400.
+  */
+  status?: {
+    brand_mismatch?: number;
+    malformed?: number;
+  };
+};
+/**
+* Fastify `preHandler` hook factory that validates a named route param against a codec via `safeParse`.
+*
+* **Default (no options):** throws `IdParamError` carrying `statusCode` and `reason` so the app's
+* existing `setErrorHandler` controls rendering. The adapter does not write a response body itself.
+*
+* **`options.onError`:** when provided, the hook calls `onError` and does not throw; the consumer
+* fully owns the response via `reply`.
+*
+* **`options.status`:** remaps the default HTTP status for a reason without a full handler.
+*
+* - **Brand mismatch (`invalid_prefix`) → `reason: "brand_mismatch"`, default 404**
+* - **Malformed or missing ID → `reason: "malformed"`, default 400**
+*
+* On success, stores the canonical `Id<Brand>` in `request.params` under `paramName`.
+*
+* @example
+* ```ts
+* import { idParam, IdParamError } from "@smonn/ids/fastify";
+* import { createTimestampId } from "@smonn/ids";
+*
+* const usr = createTimestampId("usr");
+*
+* // Default: throws IdParamError → setErrorHandler renders it
+* fastify.get("/users/:id", { preHandler: idParam("id", usr) }, (request, reply) => {
+*   const id = request.params.id; // Id<"usr">, canonical
+* });
+*
+* // Error handler receives the typed error
+* fastify.setErrorHandler((err, request, reply) => {
+*   if (err instanceof IdParamError) {
+*     reply.status(err.statusCode).send({ error: err.reason });
+*     return;
+*   }
+*   reply.send(err);
+* });
+*
+* // Override: consumer fully owns the error response
+* fastify.get("/orgs/:id", {
+*   preHandler: idParam("id", org, {
+*     onError: (failure, request, reply) =>
+*       reply.status(failure.status).send({ error: failure.reason }),
+*   }),
+* }, handler);
+*
+* // Or a lightweight status remap without a full handler
+* fastify.get("/things/:id", {
+*   preHandler: idParam("id", thing, { status: { brand_mismatch: 400 } }),
+* }, handler);
+* ```
+*/
+declare function idParam<ParamKey extends string, Brand extends string>(paramName: ParamKey, codec: IdCodec<Brand>, options?: IdParamOptions): (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+//#endregion
+export { IdParamError, type IdParamFailure, IdParamOptions, idParam };
+//# sourceMappingURL=fastify.d.mts.map

package/dist/fastify.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fastify.d.mts","names":[],"sources":["../src/fastify.ts"],"mappings":";;;;;KAMK,OAAA;EACH,SAAA,CAAU,KAAA,YAAiB,WAAA,CAAY,KAAA;AAAA;;;;;cAO5B,YAAA,SAAqB,KAAA;EAAA,SACvB,UAAA;EAAA,SACA,MAAA;EAET,WAAA,CAAY,MAAA,kCAAwC,UAAA;AAAA;AAJtD;AAAA,KAaY,cAAA;;;;;EAKV,OAAA,IACE,OAAA,EAAS,cAAA,EACT,OAAA,EAAS,cAAA,EACT,KAAA,EAAO,YAAA,YACG,OAAA;;;;;EAKZ,MAAA;IAAW,cAAA;IAAyB,SAAA;EAAA;AAAA;;;;;;;;;;;;;;;;;;AAAA;AAsDtC;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIqD;;;;;;iBAJrC,OAAA,gDACd,SAAA,EAAW,QAAA,EACX,KAAA,EAAO,OAAA,CAAQ,KAAA,GACf,OAAA,GAAU,cAAA,IACR,OAAA,EAAS,cAAA,EAAgB,KAAA,EAAO,YAAA,KAAiB,OAAA"}