@statewalker/webrun-biscuit 0.1.0

package/dist/parser.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Parser for the Biscuit Datalog text syntax (SPECIFICATIONS.md grammar).
+ * Hand-written recursive descent + precedence climbing; expressions are
+ * compiled straight to the opcode form the VM executes.
+ */
+import { type Check, type Fact, type Op, type Predicate, type Rule, type Scope, type Term } from "./datalog.js";
+export declare class ParseError extends Error {
+}
+export type Statement = {
+    k: "fact";
+    fact: Fact;
+} | {
+    k: "rule";
+    rule: Rule;
+} | {
+    k: "check";
+    check: Check;
+} | {
+    k: "policy";
+    kind: "allow" | "deny";
+    queries: Rule[];
+} | {
+    k: "blockScope";
+    scopes: Scope[];
+};
+export declare class Parser {
+    private readonly src;
+    private i;
+    private readonly vars;
+    constructor(src: string, vars?: Map<string, number>);
+    /** id -> name, for printing rules back out */
+    variableNames(): Map<number, string>;
+    varId(name: string): number;
+    private ws;
+    private get eof();
+    private peek;
+    private eat;
+    private expect;
+    /** keyword: matches only if not followed by a name character */
+    private keyword;
+    /** variable names, unlike predicate names, may start with a digit ($0) */
+    private variableName;
+    private name;
+    private string;
+    private tryDate;
+    /** a term that may be a variable (rule/check context) */
+    term(allowVariables?: boolean): Term;
+    private array;
+    private setOrMap;
+    private asMapKey;
+    predicate(allowVariables?: boolean): Predicate;
+    /** precedence climbing; each level returns opcodes in postfix order */
+    expression(): Op[];
+    private orExpr;
+    private andExpr;
+    private comparison;
+    /** avoids matching "==" when the source really has "===" */
+    private peekOperator;
+    private bitXor;
+    private bitOr;
+    private bitAnd;
+    private additive;
+    /** `-` starts a negative literal only when it is not an infix position */
+    private peekSign;
+    private multiplicative;
+    private unary;
+    private primary;
+    private methods;
+    private closure;
+    private scopes;
+    /** body of a rule / check / policy: predicates, expressions, trusting */
+    private ruleBody;
+    /** a predicate is only a predicate if nothing operator-like follows it */
+    private tryPredicate;
+    private queries;
+    statement(): Statement;
+    parse(): Statement[];
+}
+export declare const parse: (src: string) => Statement[];
+//# sourceMappingURL=parser.d.ts.map

package/dist/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../src/parser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAEL,KAAK,KAAK,EAEV,KAAK,IAAI,EAGT,KAAK,EAAE,EACP,KAAK,SAAS,EACd,KAAK,IAAI,EACT,KAAK,KAAK,EACV,KAAK,IAAI,EAEV,MAAM,cAAc,CAAC;AAEtB,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAExC,MAAM,MAAM,SAAS,GACjB;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GACzB;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GACzB;IAAE,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAC5B;IAAE,CAAC,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IAAC,OAAO,EAAE,IAAI,EAAE,CAAA;CAAE,GACxD;IAAE,CAAC,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,KAAK,EAAE,CAAA;CAAE,CAAC;AAKzC,qBAAa,MAAM;IAIf,OAAO,CAAC,QAAQ,CAAC,GAAG;IAHtB,OAAO,CAAC,CAAC,CAAK;IACd,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsB;IAC3C,YACmB,GAAG,EAAE,MAAM,EAC5B,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAG3B;IAED,8CAA8C;IAC9C,aAAa,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAInC;IAED,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO1B;IAID,OAAO,CAAC,EAAE;IAgBV,OAAO,KAAK,GAAG,GAGd;IACD,OAAO,CAAC,IAAI;IAIZ,OAAO,CAAC,GAAG;IAKX,OAAO,CAAC,MAAM;IAGd,gEAAgE;IAChE,OAAO,CAAC,OAAO;IAQf,0EAA0E;IAC1E,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,IAAI;IAYZ,OAAO,CAAC,MAAM;IA+Bd,OAAO,CAAC,OAAO;IAYf,yDAAyD;IACzD,IAAI,CAAC,cAAc,UAAO,GAAG,IAAI,CAkChC;IAED,OAAO,CAAC,KAAK;IAWb,OAAO,CAAC,QAAQ;IA4BhB,OAAO,CAAC,QAAQ;IAQhB,SAAS,CAAC,cAAc,UAAO,GAAG,SAAS,CAW1C;IAID,uEAAuE;IACvE,UAAU,IAAI,EAAE,EAAE,CAEjB;IAED,OAAO,CAAC,MAAM;IAcd,OAAO,CAAC,OAAO;IAcf,OAAO,CAAC,UAAU;IAsBlB,4DAA4D;IAC5D,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,MAAM;IAQd,OAAO,CAAC,KAAK;IAQb,OAAO,CAAC,MAAM;IAQd,OAAO,CAAC,QAAQ;IAYhB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,KAAK;IAQb,OAAO,CAAC,OAAO;IAWf,OAAO,CAAC,OAAO;IAiEf,OAAO,CAAC,OAAO;IAiBf,OAAO,CAAC,MAAM;IAsBd,yEAAyE;IACzE,OAAO,CAAC,QAAQ;IA0BhB,0EAA0E;IAC1E,OAAO,CAAC,YAAY;IAiBpB,OAAO,CAAC,OAAO;IASf,SAAS,IAAI,SAAS,CAgCrB;IAED,KAAK,IAAI,SAAS,EAAE,CAQnB;CACF;AAED,eAAO,MAAM,KAAK,QAAS,MAAM,KAAG,SAAS,EAA6B,CAAC"}

package/dist/print.d.ts

@@ -0,0 +1,12 @@
+/** Datalog pretty-printer (used for error messages and world snapshots). */
+import { type Check, type Op, type Predicate, type Rule, type Scope, type Term } from "./datalog.js";
+export declare function printTerm(t: Term, varName: (id: number) => string): string;
+export declare const printPredicate: (p: Predicate, varName: (id: number) => string) => string;
+export declare function printExpression(ops: Op[], varName: (id: number) => string): string;
+export declare function printScopes(scopes: Scope[]): string;
+/** the body of a rule, check or policy: predicates, then expressions */
+export declare function printQuery(r: Rule, varName: (id: number) => string): string;
+export declare function printCheck(c: Check, varName: (id: number) => string): string;
+export declare function printPolicy(kind: "allow" | "deny", queries: Rule[], varName: (id: number) => string): string;
+export declare function printRule(r: Rule, varName: (id: number) => string): string;
+//# sourceMappingURL=print.d.ts.map

package/dist/print.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"print.d.ts","sourceRoot":"","sources":["../src/print.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,OAAO,EAEL,KAAK,KAAK,EAEV,KAAK,EAAE,EACP,KAAK,SAAS,EACd,KAAK,IAAI,EACT,KAAK,KAAK,EACV,KAAK,IAAI,EAEV,MAAM,cAAc,CAAC;AAStB,wBAAgB,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,MAAM,CAyB1E;AAED,eAAO,MAAM,cAAc,MAAO,SAAS,WAAW,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,KAAG,MACT,CAAC;AAwCvE,wBAAgB,eAAe,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,MAAM,CAoBlF;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAMnD;AAED,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,MAAM,CAM3E;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,MAAM,CAG5E;AAED,wBAAgB,WAAW,CACzB,IAAI,EAAE,OAAO,GAAG,MAAM,EACtB,OAAO,EAAE,IAAI,EAAE,EACf,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAC9B,MAAM,CAER;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,MAAM,CAM1E"}

package/dist/proto.d.ts

@@ -0,0 +1,132 @@
+/**
+ * Strict proto2 codec for the Biscuit schema.
+ *
+ * Written against src/schema.proto. Unlike a generated codec it: decodes
+ * int64/uint64 as BigInt, tracks proto2 `optional` presence, validates UTF-8
+ * strictly, and rejects unknown fields, wrong wire types and missing
+ * `required` fields.
+ */
+export declare class ProtoError extends Error {
+}
+export type Algorithm = 0 | 1;
+export interface PublicKeyMsg {
+    algorithm: Algorithm;
+    key: Uint8Array;
+}
+export interface ExternalSignature {
+    signature: Uint8Array;
+    publicKey: PublicKeyMsg;
+}
+export interface SignedBlock {
+    block: Uint8Array;
+    nextKey: PublicKeyMsg;
+    signature: Uint8Array;
+    externalSignature?: ExternalSignature;
+    version?: number;
+}
+export type Proof = {
+    kind: "nextSecret";
+    value: Uint8Array;
+} | {
+    kind: "finalSignature";
+    value: Uint8Array;
+};
+export interface BiscuitMsg {
+    rootKeyId?: number;
+    authority: SignedBlock;
+    blocks: SignedBlock[];
+    proof: Proof;
+}
+export type TermMsg = {
+    kind: "variable";
+    value: number;
+} | {
+    kind: "integer";
+    value: bigint;
+} | {
+    kind: "string";
+    value: number;
+} | {
+    kind: "date";
+    value: bigint;
+} | {
+    kind: "bytes";
+    value: Uint8Array;
+} | {
+    kind: "bool";
+    value: boolean;
+} | {
+    kind: "set";
+    value: TermMsg[];
+} | {
+    kind: "null";
+} | {
+    kind: "array";
+    value: TermMsg[];
+} | {
+    kind: "map";
+    value: MapEntryMsg[];
+};
+export type MapKeyMsg = {
+    kind: "integer";
+    value: bigint;
+} | {
+    kind: "string";
+    value: number;
+};
+export interface MapEntryMsg {
+    key: MapKeyMsg;
+    value: TermMsg;
+}
+export type OpMsg = {
+    kind: "value";
+    value: TermMsg;
+} | {
+    kind: "unary";
+    op: number;
+    ffiName?: number;
+} | {
+    kind: "binary";
+    op: number;
+    ffiName?: number;
+} | {
+    kind: "closure";
+    params: number[];
+    ops: OpMsg[];
+};
+export interface PredicateMsg {
+    name: number;
+    terms: TermMsg[];
+}
+export type ScopeMsg = {
+    kind: "type";
+    value: 0 | 1;
+} | {
+    kind: "publicKey";
+    value: number;
+};
+export interface RuleMsg {
+    head: PredicateMsg;
+    body: PredicateMsg[];
+    expressions: OpMsg[][];
+    scope: ScopeMsg[];
+}
+export interface CheckMsg {
+    queries: RuleMsg[];
+    kind?: 0 | 1 | 2;
+}
+export interface BlockMsg {
+    symbols: string[];
+    context?: string;
+    version?: number;
+    facts: PredicateMsg[];
+    rules: RuleMsg[];
+    checks: CheckMsg[];
+    scope: ScopeMsg[];
+    publicKeys: PublicKeyMsg[];
+}
+export declare function decodeBiscuit(buf: Uint8Array): BiscuitMsg;
+export declare function decodeBlock(buf: Uint8Array): BlockMsg;
+export declare function encodeBiscuit(v: BiscuitMsg): Uint8Array;
+export declare function encodeBlock(b: BlockMsg): Uint8Array;
+//# sourceMappingURL=proto.d.ts.map

package/dist/proto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proto.d.ts","sourceRoot":"","sources":["../src/proto.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAqIxC,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,CAAC;AAE9B,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,SAAS,CAAC;IACrB,GAAG,EAAE,UAAU,CAAC;CACjB;AACD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,UAAU,CAAC;IACtB,SAAS,EAAE,YAAY,CAAC;CACzB;AACD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,UAAU,CAAC;IACtB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,MAAM,KAAK,GACb;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC;AAElD,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,WAAW,CAAC;IACvB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,KAAK,EAAE,KAAK,CAAC;CACd;AAED,MAAM,MAAM,OAAO,GACf;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,OAAO,EAAE,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,EAAE,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,WAAW,EAAE,CAAA;CAAE,CAAC;AAE1C,MAAM,MAAM,SAAS,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAC/F,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,SAAS,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,MAAM,KAAK,GACb;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,KAAK,EAAE,CAAA;CAAE,CAAC;AAExD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,EAAE,CAAC;CAClB;AACD,MAAM,MAAM,QAAQ,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAC7F,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,YAAY,EAAE,CAAC;IACrB,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC;IACvB,KAAK,EAAE,QAAQ,EAAE,CAAC;CACnB;AACD,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;CAClB;AACD,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,MAAM,EAAE,QAAQ,EAAE,CAAC;IACnB,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,UAAU,EAAE,YAAY,EAAE,CAAC;CAC5B;AAoED,wBAAgB,aAAa,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,CAoCzD;AA0MD,wBAAgB,WAAW,CAAC,GAAG,EAAE,UAAU,GAAG,QAAQ,CAqErD;AAyBD,wBAAgB,aAAa,CAAC,CAAC,EAAE,UAAU,GAAG,UAAU,CAWvD;AAwHD,wBAAgB,WAAW,CAAC,CAAC,EAAE,QAAQ,GAAG,UAAU,CAoBnD"}

package/dist/version.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Datalog block versioning.
+ *
+ * Every block declares the Datalog version it was generated at. An
+ * implementation must reject versions outside the supported window, and must
+ * reject a block that uses a feature newer than the version it declares —
+ * otherwise a token could smuggle newer semantics past an older verifier.
+ *
+ * Mirrors `get_schema_version` / `check_compatibility` in the reference
+ * implementation (biscuit-auth `src/datalog/mod.rs`).
+ */
+import { type Check, type Fact, type Rule, type Scope } from "./datalog.js";
+import type { CheckMsg } from "./proto.js";
+export declare const MIN_SCHEMA_VERSION = 3;
+export declare const MAX_SCHEMA_VERSION = 6;
+export declare const DATALOG_3_1 = 4;
+export declare const DATALOG_3_2 = 5;
+export declare const DATALOG_3_3 = 6;
+export declare class VersionError extends Error {
+}
+export interface BlockContentLike {
+    facts: Fact[];
+    rules: Rule[];
+    checks: Check[];
+    scopes: Scope[];
+}
+export interface BlockFeatures {
+    scopes: boolean;
+    v31: boolean;
+    checkAll: boolean;
+    v33: boolean;
+}
+export declare function blockFeatures(c: BlockContentLike): BlockFeatures;
+/** the lowest version that can legally carry this block's content */
+export declare function requiredVersion(c: BlockContentLike): number;
+/**
+ * Rejects a block whose declared version is out of range, or which uses a
+ * feature newer than that version. `rawChecks` is needed because the gate on
+ * check kinds distinguishes an absent kind from an explicit `One`.
+ */
+export declare function validateBlockVersion(declared: number | undefined, rawChecks: CheckMsg[], hasExternalKey: boolean, content: BlockContentLike): void;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAEL,KAAK,KAAK,EACV,KAAK,IAAI,EAGT,KAAK,IAAI,EACT,KAAK,KAAK,EAGX,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,WAAW,IAAI,CAAC;AAC7B,eAAO,MAAM,WAAW,IAAI,CAAC;AAC7B,eAAO,MAAM,WAAW,IAAI,CAAC;AAE7B,qBAAa,YAAa,SAAQ,KAAK;CAAG;AAE1C,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,MAAM,EAAE,KAAK,EAAE,CAAC;CACjB;AAyCD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,OAAO,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,GAAG,EAAE,OAAO,CAAC;CACd;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,gBAAgB,GAAG,aAAa,CAsBhE;AAED,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAK3D;AAID;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,SAAS,EAAE,QAAQ,EAAE,EACrB,cAAc,EAAE,OAAO,EACvB,OAAO,EAAE,gBAAgB,GACxB,IAAI,CA4BN"}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@statewalker/webrun-biscuit",
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "description": "Biscuit authorization tokens in pure TypeScript: proto2 codec, Ed25519 and secp256r1 signature chain, Datalog engine, parser, authorizer and builder. No WASM, no Node built-ins — runs in Node, browsers, Workers and Durable Objects.",
+  "homepage": "https://github.com/statewalker/webrun-wire",
+  "author": {
+    "name": "Mikhail Kotelnikov",
+    "email": "mikhail.kotelnikov@gmail.com"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git@github.com:statewalker/webrun-wire.git",
+    "directory": "packages/webrun-biscuit"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "dependencies": {
+    "@noble/curves": "^2.4.0",
+    "@noble/hashes": "^2.4.0"
+  },
+  "devDependencies": {
+    "@biscuit-auth/biscuit-wasm": "^0.6.0",
+    "rimraf": "^6.1.3",
+    "rolldown": "^1.2.4",
+    "typescript": "^7.0.2",
+    "vitest": "^4.1.10"
+  },
+  "sideEffects": false,
+  "publishConfig": {
+    "access": "public"
+  },
+  "types": "./dist/index.d.ts",
+  "scripts": {
+    "samples": "node scripts/fetch-samples.mjs",
+    "build": "rimraf dist && rolldown -c && tsc --emitDeclarationOnly --declaration",
+    "test": "pnpm run samples && vitest run",
+    "test:watch": "pnpm run samples && vitest",
+    "test:cross": "vitest run --config vitest.cross.config.ts",
+    "test:all": "pnpm run test && pnpm run test:cross",
+    "mutate": "pnpm run samples && node scripts/mutate.mjs",
+    "typecheck": "tsc --noEmit",
+    "typecheck:tests": "tsc -p tsconfig.tests.json",
+    "clean": "rimraf dist",
+    "lint": "biome check src tests",
+    "format": "biome format --write ."
+  }
+}