@stigmer/server 3.24.0 → 3.26.0

package/dist/pipeline/interceptors/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/pipeline/interceptors/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+EG;AACH,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAO3E,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG/C,OAAO,EAAE,SAAS,EAAE,MAAM,0DAA0D,CAAC;AAQrF,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAEhE;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAC/C,8BAA8B,CAAC;AAEjC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAwB,IAAI,GAAG,CAAC;IACzE,uBAAuB;CACxB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAkB;IACvD,OAAO,CACL,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC;QAC5B,8BAA8B,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,gBAAgB,CAC/C,SAAS,EACT,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAChE,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAmB;IAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACnD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,kDAAkD,CAAC,EAC7D,uBAAuB,CACxB,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,uBAAuB,CAAC,wBAAwB,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,QAAQ,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAGvC;IACC,IAAI,QAAQ,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QAC1B,OAAO;YACL,UAAU,EAAE,2BAA2B;YACvC,WAAW,EAAE,MAAM;YACnB,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IACD,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,KAAK;QAC1B,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;KAClC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,8BAA8B,CAC5C,SAA0C,EAC1C,MAAkC,EAClC,MAAc,EACd,qBAAqB,GAAG,KAAK;IAE7B,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACjC,qEAAqE;QACrE,mEAAmE;QACnE,kEAAkE;QAClE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,IAAI,QAAoC,CAAC;QACzC,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACjB,QAAQ,GAAG,MAAM,uBAAuB,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACnE,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnD,kEAAkE;gBAClE,+DAA+D;gBAC/D,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE;oBAClE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBACnD,CAAC,CAAC;gBACH,MAAM,IAAI,YAAY,CACpB,0EAA0E,EAC1E,IAAI,CAAC,eAAe,CACrB,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IACL,qBAAqB;YACrB,CAAC,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,EACvC,CAAC;YACD,mEAAmE;YACnE,kEAAkE;YAClE,oEAAoE;YACpE,oEAAoE;YACpE,gDAAgD;YAChD,MAAM,IAAI,YAAY,CACpB,oCAAoC,EACpC,IAAI,CAAC,eAAe,CACrB,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,IAAI,oBAAoB,EAAE,CAAC;QACnD,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,eAAe,CAC5B,MAAkC,EAClC,MAAsB,EACtB,OAAqC,EACrC,MAAc;IAEd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACxE,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;oBAC9C,KAAK,EAAE,KAAK,CAAC,IAAI;oBACjB,SAAS;oBACT,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;iBACvB,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;gBAClC,KAAK,EAAE,KAAK,CAAC,IAAI;gBACjB,SAAS;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,aAAa,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;AAErE,2DAA2D;AAC3D,MAAM,UAAU,qBAAqB,CAAC,MAAsB;IAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,gCAAgC;IAC9C,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAC7D,IAAI,QAAwB,CAAC;QAC7B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;YAChD,IAAI,CAAC;gBACH,QAAQ,GAAG;oBACT,GAAI,IAAI,CAAC,KAAK,CACZ,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAChC;oBACpB,MAAM,EAAE,YAAY;iBACrB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CACjB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EACzD,uBAAuB,CACxB,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG;gBACT,GAAG,oBAAoB,EAAE;gBACzB,WAAW,EAAE,UAAU;gBACvB,MAAM,EAAE,YAAY;aACrB,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAA0C,EAC1C,KAAa,EACb,MAAc;IAEd,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,OAA8B,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;gBAClC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBACvC,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,aAAa,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,iBAAyB;IACxD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC;IACzB,IACE,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EACvD,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/pipeline/interceptors/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+EG;AACH,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAO3E,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG/C,OAAO,EAAE,SAAS,EAAE,MAAM,0DAA0D,CAAC;AAQrF,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAEhE;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAC/C,8BAA8B,CAAC;AAEjC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAwB,IAAI,GAAG,CAAC;IACzE,uBAAuB;CACxB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAkB;IACvD,OAAO,CACL,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC;QAC5B,8BAA8B,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,gBAAgB,CAC/C,SAAS,EACT,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAChE,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAmB;IAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACnD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,kDAAkD,CAAC,EAC7D,uBAAuB,CACxB,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,uBAAuB,CAAC,wBAAwB,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,QAAQ,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAGvC;IACC,IAAI,QAAQ,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QAC1B,OAAO;YACL,UAAU,EAAE,2BAA2B;YACvC,WAAW,EAAE,MAAM;YACnB,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IACD,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,KAAK;QAC1B,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;KAClC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,UAAU,EAAE,WAAW;QACvB,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,8BAA8B,CAC5C,SAA0C,EAC1C,MAAkC,EAClC,MAAc,EACd,qBAAqB,GAAG,KAAK;IAE7B,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACjC,qEAAqE;QACrE,mEAAmE;QACnE,kEAAkE;QAClE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,IAAI,QAAoC,CAAC;QACzC,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACjB,QAAQ,GAAG,MAAM,uBAAuB,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACnE,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnD,kEAAkE;gBAClE,+DAA+D;gBAC/D,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE;oBAClE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBACnD,CAAC,CAAC;gBACH,MAAM,IAAI,YAAY,CACpB,0EAA0E,EAC1E,IAAI,CAAC,eAAe,CACrB,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IACL,qBAAqB;YACrB,CAAC,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,EACvC,CAAC;YACD,mEAAmE;YACnE,kEAAkE;YAClE,oEAAoE;YACpE,oEAAoE;YACpE,gDAAgD;YAChD,MAAM,IAAI,YAAY,CACpB,oCAAoC,EACpC,IAAI,CAAC,eAAe,CACrB,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,IAAI,oBAAoB,EAAE,CAAC;QACnD,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,eAAe,CAC5B,MAAkC,EAClC,MAAsB,EACtB,OAAqC,EACrC,MAAc;IAEd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACxE,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;oBAC9C,KAAK,EAAE,KAAK,CAAC,IAAI;oBACjB,SAAS;oBACT,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;iBACvB,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;gBAClC,KAAK,EAAE,KAAK,CAAC,IAAI;gBACjB,SAAS;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,aAAa,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;AAErE,2DAA2D;AAC3D,MAAM,UAAU,qBAAqB,CAAC,MAAsB;IAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,gCAAgC;IAC9C,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAC7D,IAAI,QAAwB,CAAC;QAC7B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;YAChD,IAAI,CAAC;gBACH,QAAQ,GAAG;oBACT,GAAI,IAAI,CAAC,KAAK,CACZ,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAChC;oBACpB,MAAM,EAAE,YAAY;iBACrB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CACjB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EACzD,uBAAuB,CACxB,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG;gBACT,GAAG,oBAAoB,EAAE;gBACzB,WAAW,EAAE,UAAU;gBACvB,MAAM,EAAE,YAAY;aACrB,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAA0C,EAC1C,KAAa,EACb,MAAc;IAEd,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,OAA8B,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;gBAClC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBACvC,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,aAAa,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,iBAAyB;IACxD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC;IACzB,IACE,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EACvD,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC"}

package/dist/pipeline/steps/build-update-state.d.ts

@@ -1,4 +1,14 @@
-import type { DescMessage } from "@bufbuild/protobuf";
+import type { DescMessage, Message } from "@bufbuild/protobuf";
 import type { PipelineStep } from "../pipeline.js";
+import type { CallerIdentity } from "../../extensions/identity.js";
 export declare function newBuildUpdateStateStep<Desc extends DescMessage>(): PipelineStep<Desc>;
+/**
+ * Go updateAuditFieldsReflect: spec_audit keeps the existing creation
+ * identity with a fresh update stamp; status_audit is fully current (the
+ * status was rebuilt); both carry event "updated". Exported for the one
+ * write that changes a stored resource outside this step — a
+ * PlatformClient secret rotation (domain/platformclient/steps.ts) — so an
+ * update's audit has one shape whichever step writes it.
+ */
+export declare function updateAuditFields(schema: DescMessage, resource: Message, existing: Message, identity: CallerIdentity): void;
 //# sourceMappingURL=build-update-state.d.ts.map

package/dist/pipeline/steps/build-update-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build-update-state.d.ts","sourceRoot":"","sources":["../../../src/pipeline/steps/build-update-state.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,WAAW,EAAyB,MAAM,oBAAoB,CAAC;AAW7E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAanD,wBAAgB,uBAAuB,CACrC,IAAI,SAAS,WAAW,KACrB,YAAY,CAAC,IAAI,CAAC,CAiCtB"}
+{"version":3,"file":"build-update-state.d.ts","sourceRoot":"","sources":["../../../src/pipeline/steps/build-update-state.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAgB,MAAM,oBAAoB,CAAC;AAW7E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAWnE,wBAAgB,uBAAuB,CACrC,IAAI,SAAS,WAAW,KACrB,YAAY,CAAC,IAAI,CAAC,CAiCtB;AAyCD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,cAAc,GACvB,IAAI,CAuBN"}

package/dist/pipeline/steps/build-update-state.js

@@ -73,9 +73,12 @@ function copyStatusFromExisting(schema, merged, existing) {
 /**
  * Go updateAuditFieldsReflect: spec_audit keeps the existing creation
  * identity with a fresh update stamp; status_audit is fully current (the
- * status was rebuilt); both carry event "updated".
+ * status was rebuilt); both carry event "updated". Exported for the one
+ * write that changes a stored resource outside this step — a
+ * PlatformClient secret rotation (domain/platformclient/steps.ts) — so an
+ * update's audit has one shape whichever step writes it.
  */
-function updateAuditFields(schema, resource, existing, identity) {
+export function updateAuditFields(schema, resource, existing, identity) {
     const now = timestampNow();
     const actor = auditActorFor(identity);
     const { createdBy, createdAt } = creationAuditOf(schema, existing, "spec_audit");

package/dist/pipeline/steps/build-update-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"build-update-state.js","sourceRoot":"","sources":["../../../src/pipeline/steps/build-update-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EACL,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,0DAA0D,CAAC;AAElE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAI7C,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE7E,MAAM,UAAU,uBAAuB;IAGrC,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,OAAO,CAAC,GAAyB;YAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAEjC,CAAC;YACd,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,aAAa,CACjB,IAAI,KAAK,CACP,sEAAsE,CACvE,EACD,oBAAoB,CACrB,CAAC;YACJ,CAAC;YAED,kEAAkE;YAClE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YAE5C,uBAAuB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAE1C,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,oEAAoE;gBACpE,+DAA+D;gBAC/D,kDAAkD;gBAClD,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACrC,sBAAsB,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACrD,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;YACtE,CAAC;YAED,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,MAAe,EAAE,QAAiB;IACjE,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,UAAU,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC3D,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,iBAAiB,CAAC,EAC5B,2BAA2B,CAC5B,CAAC;IACJ,CAAC;IACD,UAAU,CAAC,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC;IAChC,UAAU,CAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;IACpC,UAAU,CAAC,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC;IAClC,UAAU,CAAC,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC;AAClD,CAAC;AAED,2EAA2E;AAC3E,SAAS,sBAAsB,CAC7B,MAAmB,EACnB,MAAe,EACf,QAAiB;IAEjB,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,kBAAkB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC/D,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAClE,OAAO;IACT,CAAC;IACD,qEAAqE;IACrE,MAAM,UAAU,GAAG,OAAO,CACxB,WAAW,CAAC,OAAO,EACnB,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAClE,CAAC;IACF,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CACxB,MAAmB,EACnB,QAAiB,EACjB,QAAiB,EACjB,QAAwB;IAExB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,eAAe,CAC9C,MAAM,EACN,QAAQ,EACR,YAAY,CACb,CAAC;IAEF,eAAe,CACb,MAAM,EACN,QAAQ,EACR,MAAM,CAAC,sBAAsB,EAAE;QAC7B,SAAS,EAAE,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC;QAC7D,WAAW,EAAE,MAAM,CAAC,0BAA0B,EAAE;YAC9C,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,SAAS;SACjB,CAAC;KACH,CAAC,CACH,CAAC;AACJ,CAAC"}
+{"version":3,"file":"build-update-state.js","sourceRoot":"","sources":["../../../src/pipeline/steps/build-update-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EACL,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,0DAA0D,CAAC;AAElE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAI7C,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE7E,MAAM,UAAU,uBAAuB;IAGrC,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,OAAO,CAAC,GAAyB;YAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAEjC,CAAC;YACd,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,aAAa,CACjB,IAAI,KAAK,CACP,sEAAsE,CACvE,EACD,oBAAoB,CACrB,CAAC;YACJ,CAAC;YAED,kEAAkE;YAClE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YAE5C,uBAAuB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAE1C,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,oEAAoE;gBACpE,+DAA+D;gBAC/D,kDAAkD;gBAClD,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACrC,sBAAsB,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACrD,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;YACtE,CAAC;YAED,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,MAAe,EAAE,QAAiB;IACjE,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,UAAU,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC3D,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,iBAAiB,CAAC,EAC5B,2BAA2B,CAC5B,CAAC;IACJ,CAAC;IACD,UAAU,CAAC,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC;IAChC,UAAU,CAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;IACpC,UAAU,CAAC,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC;IAClC,UAAU,CAAC,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC;AAClD,CAAC;AAED,2EAA2E;AAC3E,SAAS,sBAAsB,CAC7B,MAAmB,EACnB,MAAe,EACf,QAAiB;IAEjB,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,kBAAkB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC/D,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAClE,OAAO;IACT,CAAC;IACD,qEAAqE;IACrE,MAAM,UAAU,GAAG,OAAO,CACxB,WAAW,CAAC,OAAO,EACnB,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAClE,CAAC;IACF,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAmB,EACnB,QAAiB,EACjB,QAAiB,EACjB,QAAwB;IAExB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,eAAe,CAC9C,MAAM,EACN,QAAQ,EACR,YAAY,CACb,CAAC;IAEF,eAAe,CACb,MAAM,EACN,QAAQ,EACR,MAAM,CAAC,sBAAsB,EAAE;QAC7B,SAAS,EAAE,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC;QAC7D,WAAW,EAAE,MAAM,CAAC,0BAA0B,EAAE;YAC9C,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,SAAS;SACjB,CAAC;KACH,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/pipeline/steps/list-page.d.ts

@@ -0,0 +1,63 @@
+import type { Store } from "../../store/interface.js";
+import type { ListIndexCursor, ListIndexDeclaration, ListIndexQuery } from "../../store/list-index.js";
+/** The most entries one page returns, the contract's word on every paged request. */
+export declare const LIST_PAGE_MAX_SIZE = 100;
+/**
+ * The most rows one request examines for a page of `size`: five pages'
+ * worth, at least 100, at most 500. It bounds what one request asks of a
+ * composed read scope (on the hosted edition one authorization key per
+ * row, 50 per round trip) when the caller can see few of the rows.
+ */
+export declare function examineBudgetOf(size: number): number;
+/** The request fields every paged lane carries. */
+export interface ListPageRequest {
+    readonly pageSize: number;
+    readonly pageToken: string;
+}
+export interface ListPageParams<T, K extends string> {
+    readonly store: Store;
+    readonly declaration: ListIndexDeclaration<K>;
+    /** The request's own predicates, pushed into the store's indexed read. */
+    readonly query: Omit<ListIndexQuery<K>, "after" | "limit">;
+    readonly request: ListPageRequest;
+    /**
+     * The request's other fields, as text: a token is valid only for the
+     * request it was issued to.
+     */
+    readonly fingerprint: string;
+    /** Decodes a row; undefined skips it (the lane logs, as it always has). */
+    readonly decode: (data: Uint8Array) => T | undefined;
+    /** The lane's per-row filter beyond the indexed predicates. */
+    readonly keep?: (row: T) => boolean;
+    /** The read scope, bound by the lane to its caller and kind. */
+    readonly scope: (rows: T[]) => Promise<T[]>;
+    /** The failure copy for a store fault. */
+    readonly failure: string;
+}
+export interface ListPage<T> {
+    readonly entries: T[];
+    /** "" when the list is complete. */
+    readonly nextPageToken: string;
+}
+/** Reads one page (or, at `page_size` 0, the whole list) through the list index. */
+export declare function readListPage<T, K extends string>(params: ListPageParams<T, K>): Promise<ListPage<T>>;
+/**
+ * The position a token carries: the list index's cursor, plus, for a lane
+ * whose entries are finer than rows (the approvals of one execution), the
+ * entry's position within its row.
+ */
+export interface ListPageTokenCursor {
+    readonly cursor: ListIndexCursor;
+    readonly position?: number;
+}
+/** An opaque, versioned token for the position after `cursor`. */
+export declare function encodeListPageToken(cursor: ListIndexCursor, fingerprint: string, position?: number): string;
+/**
+ * The position a token carries, refused as `invalid page_token` (the copy
+ * every paged lane already answers with) when it is malformed, of a
+ * version this server never issued, or issued for another request.
+ */
+export declare function decodeListPageToken(token: string, fingerprint: string): ListPageTokenCursor;
+/** A request's other fields as the text its token is bound to. */
+export declare function listPageFingerprint(fields: Readonly<Record<string, unknown>>): string;
+//# sourceMappingURL=list-page.d.ts.map

package/dist/pipeline/steps/list-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-page.d.ts","sourceRoot":"","sources":["../../../src/pipeline/steps/list-page.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,KAAK,EACV,eAAe,EACf,oBAAoB,EACpB,cAAc,EAEf,MAAM,2BAA2B,CAAC;AAGnC,qFAAqF;AACrF,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,mDAAmD;AACnD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM;IACjD,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC9C,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC;IAC3D,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,CAAC,GAAG,SAAS,CAAC;IACrD,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC;IACpC,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5C,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,QAAQ,CAAC,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;IACtB,oCAAoC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,oFAAoF;AACpF,wBAAsB,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,EACpD,MAAM,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,GAC3B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CA4DtB;AAmDD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AASD,kEAAkE;AAClE,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,eAAe,EACvB,WAAW,EAAE,MAAM,EACnB,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CASR;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,mBAAmB,CAmCrB;AAED,kEAAkE;AAClE,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACxC,MAAM,CAIR"}

package/dist/pipeline/steps/list-page.js

@@ -0,0 +1,187 @@
+/**
+ * One page of a list lane read through the list index — the one
+ * implementation of the page loop every paged lane calls, so the rules
+ * below hold everywhere by construction:
+ *
+ * - The store narrows by the request's own predicates (organization, key,
+ *   creation window) and orders newest first (store/list-index.ts). The
+ *   lane's per-row filter runs on each batch, then the read scope, which
+ *   stays the last per-row predicate (extensions/list-read-scope.ts);
+ *   neither reorders, so a page is in the store's order.
+ * - `page_size` 0 reads every matching row and returns no token, the
+ *   behaviour every list lane had before it paged; a positive size is
+ *   capped at `LIST_PAGE_MAX_SIZE`.
+ * - A page fills batch by batch until it is full, the rows run out, or
+ *   `examineBudgetOf(size)` rows have been examined. A caller who may see
+ *   few of the organization's rows gets a short page, possibly empty, with
+ *   a token (the timeline's cursor contract, agentchannel/v1
+ *   conversation_io.proto), never an unbounded walk.
+ * - The token's cursor is the last row RETURNED when the page was cut,
+ *   else the last row EXAMINED, so no row is skipped and no refused row is
+ *   read twice. The token is opaque and versioned, carries a fingerprint
+ *   of the request's other fields (a mismatch is refused), and carries no
+ *   authority: every page re-runs the scope.
+ *
+ * Proven by __tests__/list-page.test.ts (the loop, the budget, the cut,
+ * the token) and end-to-end by the paging arms of the conformance suites.
+ */
+import { createHash } from "node:crypto";
+import { internalError, invalidArgumentError } from "../errors.js";
+/** The most entries one page returns, the contract's word on every paged request. */
+export const LIST_PAGE_MAX_SIZE = 100;
+/**
+ * The most rows one request examines for a page of `size`: five pages'
+ * worth, at least 100, at most 500. It bounds what one request asks of a
+ * composed read scope (on the hosted edition one authorization key per
+ * row, 50 per round trip) when the caller can see few of the rows.
+ */
+export function examineBudgetOf(size) {
+    return Math.min(500, Math.max(100, size * 5));
+}
+/** Reads one page (or, at `page_size` 0, the whole list) through the list index. */
+export async function readListPage(params) {
+    const { request } = params;
+    if (request.pageSize < 0) {
+        throw invalidArgumentError("page_size must not be negative");
+    }
+    let after = request.pageToken === ""
+        ? undefined
+        : decodeListPageToken(request.pageToken, params.fingerprint).cursor;
+    if (request.pageSize === 0) {
+        const rows = await queryOrFail(params, after, undefined);
+        return {
+            entries: await admit(params, rows).then((a) => a.map((e) => e.row)),
+            nextPageToken: "",
+        };
+    }
+    const size = Math.min(request.pageSize, LIST_PAGE_MAX_SIZE);
+    const budget = examineBudgetOf(size);
+    const kept = [];
+    let examined = 0;
+    for (;;) {
+        // One row past the batch is read only to learn whether more follow,
+        // so a list that ends exactly on a page carries no token (and no
+        // empty page behind it); the next batch reads that row again.
+        const batchSize = Math.min(size, budget - examined);
+        const read = await queryOrFail(params, after, batchSize + 1);
+        const more = read.length > batchSize;
+        const rows = more ? read.slice(0, batchSize) : read;
+        examined += rows.length;
+        kept.push(...(await admit(params, rows)));
+        const last = rows[rows.length - 1];
+        if (last !== undefined) {
+            after = last.cursor;
+        }
+        if (kept.length >= size) {
+            const page = kept.slice(0, size);
+            const exhausted = !more && kept.length === size;
+            return {
+                entries: page.map((e) => e.row),
+                nextPageToken: exhausted
+                    ? ""
+                    : encodeListPageToken(page[page.length - 1].cursor, params.fingerprint),
+            };
+        }
+        if (!more) {
+            return { entries: kept.map((e) => e.row), nextPageToken: "" };
+        }
+        if (examined >= budget) {
+            return {
+                entries: kept.map((e) => e.row),
+                nextPageToken: encodeListPageToken(after, params.fingerprint),
+            };
+        }
+    }
+}
+async function queryOrFail(params, after, limit) {
+    try {
+        return await params.store.queryResources(params.declaration, {
+            ...params.query,
+            ...(after === undefined ? {} : { after }),
+            ...(limit === undefined ? {} : { limit }),
+        });
+    }
+    catch (error) {
+        throw internalError(error, params.failure);
+    }
+}
+/** A batch through the lane's filter and the scope, each row keeping its cursor. */
+async function admit(params, rows) {
+    const decoded = [];
+    for (const row of rows) {
+        const value = params.decode(row.data);
+        if (value !== undefined &&
+            (params.keep === undefined || params.keep(value))) {
+            decoded.push({ row: value, cursor: row.cursor });
+        }
+    }
+    if (decoded.length === 0) {
+        return [];
+    }
+    const allowed = new Set(await params.scope(decoded.map((d) => d.row)));
+    return decoded.filter((d) => allowed.has(d.row));
+}
+// =============================================================================
+// The token
+// =============================================================================
+const TOKEN_VERSION = 1;
+function fingerprintHash(fingerprint) {
+    return createHash("sha256")
+        .update(fingerprint)
+        .digest("base64url")
+        .slice(0, 16);
+}
+/** An opaque, versioned token for the position after `cursor`. */
+export function encodeListPageToken(cursor, fingerprint, position) {
+    const body = {
+        v: TOKEN_VERSION,
+        c: cursor.createdAt,
+        i: cursor.id,
+        f: fingerprintHash(fingerprint),
+        ...(position === undefined ? {} : { p: position }),
+    };
+    return Buffer.from(JSON.stringify(body)).toString("base64url");
+}
+/**
+ * The position a token carries, refused as `invalid page_token` (the copy
+ * every paged lane already answers with) when it is malformed, of a
+ * version this server never issued, or issued for another request.
+ */
+export function decodeListPageToken(token, fingerprint) {
+    let body;
+    try {
+        const bytes = Buffer.from(token, "base64url");
+        if (bytes.toString("base64url") !== token) {
+            throw new Error("not canonical base64url");
+        }
+        body = JSON.parse(bytes.toString("utf8"));
+    }
+    catch {
+        throw invalidArgumentError("invalid page_token");
+    }
+    if (typeof body !== "object" ||
+        body === null ||
+        body.v !== TOKEN_VERSION ||
+        typeof body.c !== "string" ||
+        typeof body.i !== "string" ||
+        typeof body.f !== "string") {
+        throw invalidArgumentError("invalid page_token");
+    }
+    const parsed = body;
+    if (parsed.f !== fingerprintHash(fingerprint)) {
+        throw invalidArgumentError("page_token was issued for a different request");
+    }
+    if (parsed.p !== undefined &&
+        !(Number.isSafeInteger(parsed.p) && parsed.p >= 0)) {
+        throw invalidArgumentError("invalid page_token");
+    }
+    return {
+        cursor: { createdAt: parsed.c, id: parsed.i },
+        ...(parsed.p === undefined ? {} : { position: parsed.p }),
+    };
+}
+/** A request's other fields as the text its token is bound to. */
+export function listPageFingerprint(fields) {
+    return JSON.stringify(fields, (_key, value) => typeof value === "bigint" ? value.toString() : value);
+}
+//# sourceMappingURL=list-page.js.map

package/dist/pipeline/steps/list-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-page.js","sourceRoot":"","sources":["../../../src/pipeline/steps/list-page.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AASzC,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEnE,qFAAqF;AACrF,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAmCD,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAA4B;IAE5B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC3B,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,oBAAoB,CAAC,gCAAgC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,GACP,OAAO,CAAC,SAAS,KAAK,EAAE;QACtB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;IAExE,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QACzD,OAAO;YACL,OAAO,EAAE,MAAM,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACnE,aAAa,EAAE,EAAE;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAuB,EAAE,CAAC;IACpC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,SAAS,CAAC;QACR,oEAAoE;QACpE,iEAAiE;QACjE,8DAA8D;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpD,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QACtB,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACjC,MAAM,SAAS,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;YAChD,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC/B,aAAa,EAAE,SAAS;oBACtB,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,mBAAmB,CACjB,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,MAAM,EAC7B,MAAM,CAAC,WAAW,CACnB;aACN,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;QAChE,CAAC;QACD,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YACvB,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC/B,aAAa,EAAE,mBAAmB,CAAC,KAAM,EAAE,MAAM,CAAC,WAAW,CAAC;aAC/D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAOD,KAAK,UAAU,WAAW,CACxB,MAA4B,EAC5B,KAAkC,EAClC,KAAyB;IAEzB,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE;YAC3D,GAAG,MAAM,CAAC,KAAK;YACf,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACzC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,KAAK,CAClB,MAA4B,EAC5B,IAAiC;IAEjC,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IACE,KAAK,KAAK,SAAS;YACnB,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EACjD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,MAAM,aAAa,GAAG,CAAC,CAAC;AAYxB,SAAS,eAAe,CAAC,WAAmB;IAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,WAAW,CAAC;SACnB,MAAM,CAAC,WAAW,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,mBAAmB,CACjC,MAAuB,EACvB,WAAmB,EACnB,QAAiB;IAEjB,MAAM,IAAI,GAAG;QACX,CAAC,EAAE,aAAa;QAChB,CAAC,EAAE,MAAM,CAAC,SAAS;QACnB,CAAC,EAAE,MAAM,CAAC,EAAE;QACZ,CAAC,EAAE,eAAe,CAAC,WAAW,CAAC;QAC/B,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;KACnD,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAa,EACb,WAAmB;IAEnB,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;IACnD,CAAC;IACD,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACZ,IAAwB,CAAC,CAAC,KAAK,aAAa;QAC7C,OAAQ,IAAwB,CAAC,CAAC,KAAK,QAAQ;QAC/C,OAAQ,IAAwB,CAAC,CAAC,KAAK,QAAQ;QAC/C,OAAQ,IAAwB,CAAC,CAAC,KAAK,QAAQ,EAC/C,CAAC;QACD,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,IAAwD,CAAC;IACxE,IAAI,MAAM,CAAC,CAAC,KAAK,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,MAAM,oBAAoB,CAAC,+CAA+C,CAAC,CAAC;IAC9E,CAAC;IACD,IACE,MAAM,CAAC,CAAC,KAAK,SAAS;QACtB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAK,MAAM,CAAC,CAAY,IAAI,CAAC,CAAC,EAC9D,CAAC;QACD,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;IACnD,CAAC;IACD,OAAO;QACL,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,EAAE;QAC7C,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAW,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,mBAAmB,CACjC,MAAyC;IAEzC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,KAAc,EAAE,EAAE,CACrD,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CACrD,CAAC;AACJ,CAAC"}

package/dist/platformtoken/envelope.d.ts

@@ -0,0 +1,100 @@
+/**
+ * The platform-token envelope: the RS256 JWT every token the server signs
+ * for itself rides — the PlatformClient user token in open source, and in
+ * the cloud its typed lanes (guest, schedule, channel, the sandbox family)
+ * as well. One envelope, byte-compatible with the tokens Stigmer Cloud has
+ * signed since the Java issuer, so a token minted before the cloud serves
+ * this code verifies after it.
+ *
+ * The envelope knows the issuer, the four claims it owns (`iss`, `iat`,
+ * `exp`, `jti`, plus `aud` when the ring carries an audience) and the
+ * signature. It does not know lanes: a lane's vocabulary (its claims, its
+ * `token_type`, the caller class it stamps) belongs to the verifier that
+ * claims it — open source verifies only the untyped PlatformClient lane
+ * (domain/platformclient/verifier.ts); the typed lanes stay the cloud's.
+ *
+ * A token's lifetime is the lane's to choose: the ring carries the default
+ * (the user token's), and a lane that lives longer or shorter — the cloud's
+ * sandbox tokens outlive a user token sixteen-fold — says so per token.
+ * Either way the envelope alone computes `exp` and hands the expiry back,
+ * so no lane re-derives it beside the claim it signed.
+ *
+ * Verification is the cloud verifier's, exactly (its verifiers/jwt.ts and
+ * platform-token.ts), because the tokens in the field were accepted by it:
+ *   - A token that is not a three-part JWT with `iss: "stigmer"` is
+ *     `foreign` — some other verifier's to judge, never refused here.
+ *   - The signature is RS256 over every key in the ring; the header's
+ *     `alg` and `kid` are never read to choose (so neither `alg: none` nor
+ *     an HMAC-with-the-public-key forgery can pass, and a constant kid
+ *     across a rotation still verifies).
+ *   - Then `exp` (required, a number, strictly in the future; no leeway),
+ *     then `aud` (tolerated when absent, refused when it names another
+ *     audience), then `sub` (a non-empty string) — in that order, each with
+ *     its pinned copy.
+ * The refusals are returned, not thrown: the envelope has no transport,
+ * and a verifier turns a refusal into the wire error with
+ * `platformTokenRefusalError`.
+ */
+import { ConnectError } from "@connectrpc/connect";
+import type { PlatformTokenKeyRing, SigningPlatformTokenKeyRing } from "./key-ring.js";
+/** The `iss` of every platform token (the cloud's STIGMER_ISSUER). */
+export declare const PLATFORM_TOKEN_ISSUER = "stigmer";
+/** The claim a typed lane names itself by; absent on the PlatformClient user token. */
+export declare const TOKEN_TYPE_CLAIM = "token_type";
+/** A lane claim's value: the token carries JSON scalars only. */
+export type PlatformTokenClaimValue = string | number | boolean;
+export type PlatformTokenRefusal = "signature" | "expired" | "audience" | "subject";
+/** Wire copy, byte-pinned: the cloud verifier's sentences since the Java issuer. */
+export declare const PLATFORM_TOKEN_REFUSAL_MESSAGES: Readonly<Record<PlatformTokenRefusal, string>>;
+/** A verified token: its subject, its lane discriminator, its payload. */
+export interface VerifiedPlatformToken {
+    readonly subject: string;
+    /** The `token_type` claim when it is a non-empty string; undefined for the untyped lane. */
+    readonly tokenType: string | undefined;
+    readonly payload: Readonly<Record<string, unknown>>;
+}
+export type PlatformTokenVerification = {
+    readonly outcome: "foreign";
+} | {
+    readonly outcome: "refused";
+    readonly refusal: PlatformTokenRefusal;
+} | {
+    readonly outcome: "verified";
+    readonly token: VerifiedPlatformToken;
+};
+/** How one token is signed; every field defaults to the ring's answer. */
+export interface PlatformTokenSigningOptions {
+    /** The signing instant (`iat`); defaults to the wall clock. */
+    readonly now?: Date;
+    /** This token's lifetime in whole seconds; defaults to the ring's `ttlSeconds`. */
+    readonly ttlSeconds?: number;
+}
+/** A signed token and the instant its `exp` claim names. */
+export interface SignedPlatformToken {
+    readonly token: string;
+    readonly expiresAt: Date;
+}
+/**
+ * Signs `claims` inside the envelope: header `{alg, typ, kid}`, then `iss`,
+ * `iat`, `exp` (iat + the lifetime), `jti` and `aud` when the ring has one,
+ * then the lane's claims. Throws when a lane claim collides with an
+ * envelope claim, or when a lifetime is not a positive whole number of
+ * seconds — programming errors, never a request's.
+ */
+export declare function signPlatformToken(ring: SigningPlatformTokenKeyRing, claims: Readonly<Record<string, PlatformTokenClaimValue>>, options?: PlatformTokenSigningOptions): SignedPlatformToken;
+/** Verifies a bearer token against the ring (see the header for the order). */
+export declare function verifyPlatformToken(ring: PlatformTokenKeyRing, token: string, now?: Date): PlatformTokenVerification;
+/** The UNAUTHENTICATED error a verifier answers for a refused platform token. */
+export declare function platformTokenRefusalError(refusal: PlatformTokenRefusal): ConnectError;
+/**
+ * The payload of a platform token WITHOUT verifying it — for a caller
+ * guard reading the claims of a token the verifier chain already verified
+ * on this request (caller-guards.ts: guards decode `rawToken`). Undefined
+ * for anything that is not a platform token, an API key or an empty
+ * trusted-local token included. Never a substitute for
+ * `verifyPlatformToken`.
+ */
+export declare function decodeVerifiedPlatformTokenPayload(token: string): Readonly<Record<string, unknown>> | undefined;
+/** A payload claim when it is a non-empty string; undefined otherwise. */
+export declare function stringClaim(payload: Readonly<Record<string, unknown>>, name: string): string | undefined;
+//# sourceMappingURL=envelope.d.ts.map

package/dist/platformtoken/envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../src/platformtoken/envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAQ,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGzD,OAAO,KAAK,EACV,oBAAoB,EACpB,2BAA2B,EAC5B,MAAM,eAAe,CAAC;AAEvB,sEAAsE;AACtE,eAAO,MAAM,qBAAqB,YAAY,CAAC;AAE/C,uFAAuF;AACvF,eAAO,MAAM,gBAAgB,eAAe,CAAC;AAE7C,iEAAiE;AACjE,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAKhE,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX,SAAS,GACT,UAAU,GACV,SAAS,CAAC;AAEd,oFAAoF;AACpF,eAAO,MAAM,+BAA+B,EAAE,QAAQ,CACpD,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAMrC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,4FAA4F;IAC5F,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACrD;AAED,MAAM,MAAM,yBAAyB,GACjC;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAA;CAAE,GAC/B;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;CAAE,GACvE;IAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAE5E,0EAA0E;AAC1E,MAAM,WAAW,2BAA2B;IAC1C,+DAA+D;IAC/D,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;IACpB,mFAAmF;IACnF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,4DAA4D;AAC5D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,2BAA2B,EACjC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC,EACzD,OAAO,GAAE,2BAAgC,GACxC,mBAAmB,CA+BrB;AAED,+EAA+E;AAC/E,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,oBAAoB,EAC1B,KAAK,EAAE,MAAM,EACb,GAAG,GAAE,IAAiB,GACrB,yBAAyB,CAsC3B;AAED,iFAAiF;AACjF,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,oBAAoB,GAC5B,YAAY,CAKd;AAED;;;;;;;GAOG;AACH,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,MAAM,GACZ,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAK/C;AAED,0EAA0E;AAC1E,wBAAgB,WAAW,CACzB,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC1C,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,SAAS,CAGpB"}

package/dist/platformtoken/envelope.js

@@ -0,0 +1,184 @@
+/**
+ * The platform-token envelope: the RS256 JWT every token the server signs
+ * for itself rides — the PlatformClient user token in open source, and in
+ * the cloud its typed lanes (guest, schedule, channel, the sandbox family)
+ * as well. One envelope, byte-compatible with the tokens Stigmer Cloud has
+ * signed since the Java issuer, so a token minted before the cloud serves
+ * this code verifies after it.
+ *
+ * The envelope knows the issuer, the four claims it owns (`iss`, `iat`,
+ * `exp`, `jti`, plus `aud` when the ring carries an audience) and the
+ * signature. It does not know lanes: a lane's vocabulary (its claims, its
+ * `token_type`, the caller class it stamps) belongs to the verifier that
+ * claims it — open source verifies only the untyped PlatformClient lane
+ * (domain/platformclient/verifier.ts); the typed lanes stay the cloud's.
+ *
+ * A token's lifetime is the lane's to choose: the ring carries the default
+ * (the user token's), and a lane that lives longer or shorter — the cloud's
+ * sandbox tokens outlive a user token sixteen-fold — says so per token.
+ * Either way the envelope alone computes `exp` and hands the expiry back,
+ * so no lane re-derives it beside the claim it signed.
+ *
+ * Verification is the cloud verifier's, exactly (its verifiers/jwt.ts and
+ * platform-token.ts), because the tokens in the field were accepted by it:
+ *   - A token that is not a three-part JWT with `iss: "stigmer"` is
+ *     `foreign` — some other verifier's to judge, never refused here.
+ *   - The signature is RS256 over every key in the ring; the header's
+ *     `alg` and `kid` are never read to choose (so neither `alg: none` nor
+ *     an HMAC-with-the-public-key forgery can pass, and a constant kid
+ *     across a rotation still verifies).
+ *   - Then `exp` (required, a number, strictly in the future; no leeway),
+ *     then `aud` (tolerated when absent, refused when it names another
+ *     audience), then `sub` (a non-empty string) — in that order, each with
+ *     its pinned copy.
+ * The refusals are returned, not thrown: the envelope has no transport,
+ * and a verifier turns a refusal into the wire error with
+ * `platformTokenRefusalError`.
+ */
+import { Code, ConnectError } from "@connectrpc/connect";
+import { randomUUID, sign, verify } from "node:crypto";
+/** The `iss` of every platform token (the cloud's STIGMER_ISSUER). */
+export const PLATFORM_TOKEN_ISSUER = "stigmer";
+/** The claim a typed lane names itself by; absent on the PlatformClient user token. */
+export const TOKEN_TYPE_CLAIM = "token_type";
+/** The claims the envelope owns; a lane may not set them. */
+const ENVELOPE_CLAIMS = new Set(["iss", "iat", "exp", "jti", "aud"]);
+/** Wire copy, byte-pinned: the cloud verifier's sentences since the Java issuer. */
+export const PLATFORM_TOKEN_REFUSAL_MESSAGES = {
+    signature: "platform token signature verification failed",
+    expired: "platform token is expired",
+    audience: "platform token was minted for another environment",
+    subject: "platform token carries no subject",
+};
+/**
+ * Signs `claims` inside the envelope: header `{alg, typ, kid}`, then `iss`,
+ * `iat`, `exp` (iat + the lifetime), `jti` and `aud` when the ring has one,
+ * then the lane's claims. Throws when a lane claim collides with an
+ * envelope claim, or when a lifetime is not a positive whole number of
+ * seconds — programming errors, never a request's.
+ */
+export function signPlatformToken(ring, claims, options = {}) {
+    for (const name of Object.keys(claims)) {
+        if (ENVELOPE_CLAIMS.has(name)) {
+            throw new Error(`platform-token claim '${name}' belongs to the envelope and cannot be set by a lane`);
+        }
+    }
+    const ttlSeconds = options.ttlSeconds ?? ring.ttlSeconds;
+    if (!Number.isInteger(ttlSeconds) || ttlSeconds <= 0) {
+        throw new Error(`platform-token lifetime must be a positive integer number of seconds, got ${ttlSeconds}`);
+    }
+    const issuedAt = Math.floor((options.now ?? new Date()).getTime() / 1000);
+    const expiresAtSeconds = issuedAt + ttlSeconds;
+    const header = { alg: "RS256", typ: "JWT", kid: ring.signer.kid };
+    const payload = {
+        iss: PLATFORM_TOKEN_ISSUER,
+        iat: issuedAt,
+        exp: expiresAtSeconds,
+        jti: randomUUID(),
+        ...(ring.audience !== "" ? { aud: ring.audience } : {}),
+        ...claims,
+    };
+    const signingInput = `${base64UrlJson(header)}.${base64UrlJson(payload)}`;
+    const signature = sign("sha256", Buffer.from(signingInput), ring.signer.key);
+    return {
+        token: `${signingInput}.${signature.toString("base64url")}`,
+        expiresAt: new Date(expiresAtSeconds * 1000),
+    };
+}
+/** Verifies a bearer token against the ring (see the header for the order). */
+export function verifyPlatformToken(ring, token, now = new Date()) {
+    const decoded = decode(token);
+    if (decoded === undefined || decoded.payload.iss !== PLATFORM_TOKEN_ISSUER) {
+        return { outcome: "foreign" };
+    }
+    const signingInput = Buffer.from(`${decoded.encodedHeader}.${decoded.encodedPayload}`);
+    const signatureValid = ring.verificationKeys.some((key) => verify("sha256", signingInput, key, decoded.signature));
+    if (!signatureValid) {
+        return { outcome: "refused", refusal: "signature" };
+    }
+    const exp = decoded.payload.exp;
+    if (typeof exp !== "number" || exp * 1000 <= now.getTime()) {
+        return { outcome: "refused", refusal: "expired" };
+    }
+    const aud = decoded.payload.aud;
+    if (ring.audience !== "" &&
+        aud !== undefined &&
+        !audienceMatches(aud, ring.audience)) {
+        return { outcome: "refused", refusal: "audience" };
+    }
+    const sub = decoded.payload.sub;
+    if (typeof sub !== "string" || sub === "") {
+        return { outcome: "refused", refusal: "subject" };
+    }
+    return {
+        outcome: "verified",
+        token: {
+            subject: sub,
+            tokenType: stringClaim(decoded.payload, TOKEN_TYPE_CLAIM),
+            payload: decoded.payload,
+        },
+    };
+}
+/** The UNAUTHENTICATED error a verifier answers for a refused platform token. */
+export function platformTokenRefusalError(refusal) {
+    return new ConnectError(PLATFORM_TOKEN_REFUSAL_MESSAGES[refusal], Code.Unauthenticated);
+}
+/**
+ * The payload of a platform token WITHOUT verifying it — for a caller
+ * guard reading the claims of a token the verifier chain already verified
+ * on this request (caller-guards.ts: guards decode `rawToken`). Undefined
+ * for anything that is not a platform token, an API key or an empty
+ * trusted-local token included. Never a substitute for
+ * `verifyPlatformToken`.
+ */
+export function decodeVerifiedPlatformTokenPayload(token) {
+    const decoded = decode(token);
+    return decoded !== undefined && decoded.payload.iss === PLATFORM_TOKEN_ISSUER
+        ? decoded.payload
+        : undefined;
+}
+/** A payload claim when it is a non-empty string; undefined otherwise. */
+export function stringClaim(payload, name) {
+    const value = payload[name];
+    return typeof value === "string" && value !== "" ? value : undefined;
+}
+/** A three-part JWT whose header and payload are JSON objects; anything else is undefined. */
+function decode(token) {
+    const parts = token.split(".");
+    if (parts.length !== 3) {
+        return undefined;
+    }
+    const [encodedHeader = "", encodedPayload = "", encodedSignature = ""] = parts;
+    const header = parseJsonObject(encodedHeader);
+    const payload = parseJsonObject(encodedPayload);
+    if (header === undefined || payload === undefined) {
+        return undefined;
+    }
+    return {
+        encodedHeader,
+        encodedPayload,
+        payload,
+        signature: Buffer.from(encodedSignature, "base64url"),
+    };
+}
+function parseJsonObject(segment) {
+    try {
+        const value = JSON.parse(Buffer.from(segment, "base64url").toString("utf8"));
+        return typeof value === "object" && value !== null && !Array.isArray(value)
+            ? value
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function audienceMatches(aud, expected) {
+    if (typeof aud === "string") {
+        return aud === expected;
+    }
+    return Array.isArray(aud) && aud.includes(expected);
+}
+function base64UrlJson(value) {
+    return Buffer.from(JSON.stringify(value)).toString("base64url");
+}
+//# sourceMappingURL=envelope.js.map