@toa.io/extensions.exposition 1.0.0-alpha.283 → 1.0.0-alpha.285

package/components/identity.federation/operations/lib/errors.d.ts

@@ -1,77 +0,0 @@
-export declare const ERR_TOKEN: {
-    readonly code: "TOKEN";
-    readonly message: "Token is malformed or does not verify";
-    name: string;
-    stack?: string;
-    cause?: unknown;
-};
-export declare const ERR_TRUST: {
-    readonly code: "TRUST";
-    readonly message: "Issuer not trusted";
-    name: string;
-    stack?: string;
-    cause?: unknown;
-};
-export declare const ERR_RESPONSE: {
-    readonly code: "RESPONSE";
-    readonly message: "Request to IDP failed";
-    name: string;
-    stack?: string;
-    cause?: unknown;
-};
-export declare const ERR_CONFIG: {
-    readonly code: "CONFIG";
-    readonly message: "Invalid OpenID configuration";
-    name: string;
-    stack?: string;
-    cause?: unknown;
-};
-export declare const ERR_NO_TOKEN: {
-    readonly code: "NO_TOKEN";
-    readonly message: "No ID token received";
-    name: string;
-    stack?: string;
-    cause?: unknown;
-};
-export declare const ERR_ISS: {
-    readonly code: "ISS";
-    readonly message: "Invalid issuer claim";
-    name: string;
-    stack?: string;
-    cause?: unknown;
-};
-export declare const ERR_SUB: {
-    readonly code: "SUB";
-    readonly message: "Invalid subject claim";
-    name: string;
-    stack?: string;
-    cause?: unknown;
-};
-export declare const ERR_EXP: {
-    readonly code: "EXP";
-    readonly message: "Token does not have an expiration time";
-    name: string;
-    stack?: string;
-    cause?: unknown;
-};
-export declare const ERR_REPLAY: {
-    readonly code: "REPLAY";
-    readonly message: "Token has already been used";
-    name: string;
-    stack?: string;
-    cause?: unknown;
-};
-export declare const ERR_CODE_NOT_ENABLED: {
-    readonly code: "CODE_NOT_ENABLED";
-    readonly message: "Authorization code flow is not configured";
-    name: string;
-    stack?: string;
-    cause?: unknown;
-};
-export declare const ERR_CODE_SCHEMA: {
-    readonly code: "CODE_SCHEMA";
-    readonly message: "Invalid code credentials";
-    name: string;
-    stack?: string;
-    cause?: unknown;
-};

package/components/identity.federation/operations/lib/errors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../source/lib/errors.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,UAAW,SAAQ,KAAK;IAC1C,IAAI,GAAG,OAAO,CAAA;IACL,OAAO,GAAG,uCAAuC,CAAA;CAC3E,CAAC,EAAE,CAAA;AAEJ,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,UAAW,SAAQ,KAAK;IAC1C,IAAI,GAAG,OAAO,CAAA;IACL,OAAO,GAAG,oBAAoB,CAAA;CACxD,CAAC,EAAE,CAAA;AAEJ,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,aAAc,SAAQ,KAAK;IAChD,IAAI,GAAG,UAAU,CAAA;IACR,OAAO,GAAG,uBAAuB,CAAA;CAC3D,CAAC,EAAE,CAAA;AAEJ,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,WAAY,SAAQ,KAAK;IAC5C,IAAI,GAAG,QAAQ,CAAA;IACN,OAAO,GAAG,8BAA8B,CAAA;CAClE,CAAC,EAAE,CAAA;AAEJ,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,YAAa,SAAQ,KAAK;IAC/C,IAAI,GAAG,UAAU,CAAA;IACR,OAAO,GAAG,sBAAsB,CAAA;CAC1D,CAAC,EAAE,CAAA;AAEJ,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,QAAS,SAAQ,KAAK;IACtC,IAAI,GAAG,KAAK,CAAA;IACH,OAAO,GAAG,sBAAsB,CAAA;CAC1D,CAAC,EAAE,CAAA;AAEJ,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,QAAS,SAAQ,KAAK;IACtC,IAAI,GAAG,KAAK,CAAA;IACH,OAAO,GAAG,uBAAuB,CAAA;CAC3D,CAAC,EAAE,CAAA;AAEJ,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,QAAS,SAAQ,KAAK;IACtC,IAAI,GAAG,KAAK,CAAA;IACH,OAAO,GAAG,wCAAwC,CAAA;CAC5E,CAAC,EAAE,CAAA;AAEJ,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,WAAY,SAAQ,KAAK;IAC5C,IAAI,GAAG,QAAQ,CAAA;IACN,OAAO,GAAG,6BAA6B,CAAA;CACjE,CAAC,EAAE,CAAA;AAEJ,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,mBAAoB,SAAQ,KAAK;IAC9D,IAAI,GAAG,kBAAkB,CAAA;IAChB,OAAO,GAAG,2CAA2C,CAAA;CAC/E,CAAC,EAAE,CAAA;AAEJ,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,eAAgB,SAAQ,KAAK;IACrD,IAAI,GAAG,aAAa,CAAA;IACX,OAAO,GAAG,0BAA0B,CAAA;CAC9D,CAAC,EAAE,CAAA"}

package/components/identity.federation/operations/lib/exchange.d.ts

@@ -1,3 +0,0 @@
-import type { Ctx } from './Ctx.js';
-import type { Payload } from './Payload.js';
-export declare function exchange(credentials: string, ctx: Ctx): Promise<Payload | Error>;

package/components/identity.federation/operations/lib/exchange.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"exchange.js","sourceRoot":"","sources":["../../source/lib/exchange.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAC7D,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAKrC,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAE,WAAmB,EAAE,GAAQ;IAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAA;IACzB,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,CAAA;IAEtC,IAAI,UAAU,YAAY,KAAK;QAC7B,OAAO,UAAU,CAAA;IAEnB,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAA;IAE/C,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;IAE5D,IAAI,OAAO,KAAK,SAAS;QACvB,OAAO,MAAM,CAAC,SAAS,CAAA;IAEzB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;QAChG,OAAO,MAAM,CAAC,oBAAoB,CAAA;IAEpC,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IAEpD,IAAI,aAAa,CAAC,cAAc,KAAK,SAAS;QAC5C,OAAO,MAAM,CAAC,UAAU,CAAA;IAE1B,gEAAgE;IAChE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAA;IACrE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAA;IAC3F,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;IAEpC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAA;IACjD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC3B,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;IAC/B,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;IACtC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAA;IAEvC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE;QAChC,GAAG;QACH,GAAG;QACH,GAAG,EAAE,QAAQ;QACb,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;KAC5D,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,MAAM;KACb,CAAC,CAAA;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAEhG,OAAO,MAAM,CAAC,YAAY,CAAA;IAC5B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA0B,CAAA;IAE5D,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC/B,OAAO,MAAM,CAAC,YAAY,CAAA;IAE5B,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IAErD,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE;YAC9D,MAAM,EAAE,GAAG;YACX,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,cAAc,EAAE,CAAC,KAAK,CAAC;SACxB,CAAC,CAAA;QAEF,OAAO,OAAkB,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,SAAS,CAAA;IACzB,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAE,WAAmB;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAA;IAEjD,IACE,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ;QACnC,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;QAClC,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;QAClC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,qBAAqB,CAAC,MAAM;QAE/D,OAAO,MAAM,CAAC,eAAe,CAAA;IAE/B,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,KAAK,UAAU,IAAI,CAAE,KAAY;IAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAA;IACzB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAU,CAAA;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAI,CAAA;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAA;IAEnE,OAAO,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;SAC9B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC;SACxD,WAAW,CAAC,GAAG,CAAC;SAChB,iBAAiB,CAAC,GAAG,GAAG,GAAG,CAAC;SAC5B,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC;SACxB,UAAU,CAAC,GAAG,CAAC;SACf,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC;SACtB,IAAI,CAAC,GAAG,CAAC,CAAA;AACd,CAAC;AAED,MAAM,qBAAqB,GAA4B,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA"}

package/components/identity.federation/operations/lib/index.d.ts

@@ -1,4 +0,0 @@
-export { decode } from './decode.js';
-export { exchange } from './exchange.js';
-export { resolve } from './resolve.js';
-export { type Ctx } from './Ctx.js';

package/components/identity.federation/operations/lib/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../source/lib/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA"}

package/components/identity.federation/operations/lib/jose.d.ts

@@ -1 +0,0 @@
-export function load(): Promise<typeof import("jose")>;

package/components/identity.federation/operations/lib/jose.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jose.js","sourceRoot":"","sources":["../../source/lib/jose.js"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA"}

package/components/identity.federation/operations/lib/resolve.d.ts

@@ -1,3 +0,0 @@
-import type { Payload } from './Payload.js';
-import type { Context, Scheme } from '../types/index.js';
-export declare function resolve(scheme: Scheme, credentials: string, context: Context): Promise<Payload | Error>;

package/components/identity.federation/operations/lib/resolve.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../source/lib/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAKxC,MAAM,CAAC,KAAK,UAAU,OAAO,CAAE,MAAc,EAAE,WAAmB,EAAE,OAAgB;IAClF,MAAM,GAAG,GAAQ;QACf,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,KAAK;QAClC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAA;IAED,OAAO,MAAM,KAAK,QAAQ;QACxB,CAAC,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC;QAChC,CAAC,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;AACtC,CAAC"}

package/components/identity.federation/operations/list.d.ts

@@ -1,7 +0,0 @@
-import type { Context, Entity } from './types/index.js';
-export declare function computation({ authority, identity }: Input, context: Context): Promise<Entity[]>;
-interface Input {
-    authority: string;
-    identity: string;
-}
-export {};

package/components/identity.federation/operations/list.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"list.js","sourceRoot":"","sources":["../source/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAGvC,MAAM,CAAC,KAAK,UAAU,WAAW,CAAE,EAAE,SAAS,EAAE,QAAQ,EAAS,EAAE,OAAgB;IACjF,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QACnC,KAAK,EAAE;YACL,QAAQ,EAAE,cAAc,KAAK,CAAC,SAAS,CAAC,cAAc,KAAK,CAAC,QAAQ,CAAC,EAAE;YACvE,UAAU,EAAE,CAAC,KAAK,CAAC;YACnB,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,KAAK,EAAE,GAAG;SACX;KACF,CAAC,CAAA;AACJ,CAAC"}

package/components/identity.federation/operations/types/Scheme.d.ts

@@ -1 +0,0 @@
-export type Scheme = 'bearer' | 'code';

package/components/identity.federation/operations/types/Scheme.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"Scheme.js","sourceRoot":"","sources":["../../source/types/Scheme.ts"],"names":[],"mappings":""}

package/components/identity.federation/operations/types/configuration.d.ts

@@ -1,22 +0,0 @@
-import type { Secret } from '@toa.io/extensions.configuration';
-export interface Configuration {
-    trust: Trust[];
-    principal?: Principal;
-    assert?: boolean;
-}
-export interface Trust {
-    iss: string;
-    aud: string | [string, ...string[]];
-    secret?: Secret;
-    signature?: {
-        iss: string;
-        kid: string;
-        key: Secret;
-    };
-}
-interface Principal {
-    authority: string;
-    iss: string;
-    sub: string;
-}
-export {};

package/components/identity.federation/operations/types/configuration.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"configuration.js","sourceRoot":"","sources":["../../source/types/configuration.ts"],"names":[],"mappings":""}

package/components/identity.federation/operations/types/context.d.ts

@@ -1,36 +0,0 @@
-import type { JWTPayload } from 'jose';
-import type { Call, Observation, Query, Transition } from '@toa.io/core';
-import type { Logs } from '@toa.io/extensions.telemetry';
-import type { Entity } from './entity.js';
-import type { Configuration } from './configuration.js';
-export interface Context {
-    fetch: Fetch;
-    local: {
-        observe: Observation<Entity>;
-        enumerate: Observation<Entity[], never, Entity>;
-        terminate: Transition<void, void, Entity>;
-        transit: Call<Entity, TransitInput>;
-        ensure: Call<Entity>;
-        decode: Call<JWTPayload, string>;
-    };
-    remote: {
-        identity: {
-            tokens: {
-                revoke: Call<void, IdentityTokensRevokeInput>;
-            };
-        };
-    };
-    logs: Logs;
-    configuration: Configuration;
-}
-export type Fetch = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
-export interface TransitInput {
-    readonly authority: string;
-    readonly iss: string;
-    readonly sub: string;
-    readonly identity: string;
-}
-interface IdentityTokensRevokeInput {
-    query: Query;
-}
-export {};

package/components/identity.federation/operations/types/context.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../../source/types/context.ts"],"names":[],"mappings":""}

package/components/identity.federation/operations/types/entity.d.ts

@@ -1,9 +0,0 @@
-export interface Entity {
-    id: string;
-    authority: string;
-    iss: string;
-    sub: string;
-    identity: string;
-    _created: number;
-    _deleted?: number | null;
-}

package/components/identity.federation/operations/types/entity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"entity.js","sourceRoot":"","sources":["../../source/types/entity.ts"],"names":[],"mappings":""}

package/components/identity.federation/operations/types/index.d.ts

@@ -1,4 +0,0 @@
-export * from './configuration.js';
-export * from './context.js';
-export * from './entity.js';
-export * from './Scheme.js';

package/components/identity.federation/operations/types/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../source/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAA;AAClC,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA"}

package/components/identity.grants/operations/authorize.d.ts

@@ -1,35 +0,0 @@
-import type { Maybe } from '@toa.io/core';
-import type { Operation } from '@toa.io/bridges.node';
-import type { Context } from './lib/index.js';
-/**
- * What the consent page calls when a user allows a client. The page holds the user's own
- * credentials, so this is the user's own route; the code it answers with is what the client
- * redeems at the token endpoint.
- *
- * The grant is recorded so a user can see what they allowed and take it back. It is not
- * consulted to skip the prompt — consent is asked every time, which is what keeps a client
- * that changed where it wants a code sent from being waved through on an older one.
- */
-export declare class Effect implements Operation {
-    private context;
-    mount(context: Context): void;
-    execute(input: Input): Promise<Maybe<Output>>;
-}
-interface Input {
-    authority: string;
-    identity: string;
-    client: string;
-    redirect: string;
-    challenge: string;
-    method: string;
-    scope?: string[];
-    resource?: string[];
-}
-interface Output {
-    status?: number;
-    code?: string;
-    expires_in?: number;
-    error?: string;
-    error_description?: string;
-}
-export {};

package/components/identity.grants/operations/authorize.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../source/authorize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAK/C;;;;;;;;GAQG;AACH,MAAM,OAAO,MAAM;IACT,OAAO,CAAU;IAElB,KAAK,CAAE,OAAgB;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAEM,KAAK,CAAC,OAAO,CAAE,KAAY;QAChC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAA;QAErC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;YACvB,OAAO,OAAO,CAAC,iBAAiB,EAAE,kDAAkD,CAAC,CAAA;QAEvF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;YACjE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;SACjE,CAAC,CAAA;QAEF,IAAI,MAAM,YAAY,KAAK;YACzB,OAAO,OAAO,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAA;QAEpD,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;YAC3B,OAAO,OAAO,CAAC,iBAAiB,EAAE,2DAA2D,CAAC,CAAA;QAEhG,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAA;QAE/B,wFAAwF;QACxF,oFAAoF;QACpF,6FAA6F;QAC7F,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAA;QAErC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;YAC1D,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE;SACtE,CAAC,CAAA;QAEF,IAAI,KAAK,YAAY,KAAK;YACxB,OAAO,KAAK,CAAA;QAEd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE;YACjC,QAAQ;YACR,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK;YACL,QAAQ;SACT,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QAEhB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAA;IAClE,CAAC;CACF;AAED,SAAS,OAAO,CAAE,KAAa,EAAE,WAAmB;IAClD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAA;AACvE,CAAC;AAED,MAAM,IAAI,GAAG,MAAM,CAAA;AACnB,MAAM,WAAW,GAAG,GAAG,CAAA"}

package/components/identity.grants/operations/exchange.d.ts

@@ -1,37 +0,0 @@
-import type { Maybe } from '@toa.io/core';
-import type { Operation } from '@toa.io/bridges.node';
-import type { Context } from './lib/index.js';
-/**
- * The token endpoint, RFC 6749 §4.1.3. Anonymous, because the clients this server knows are
- * public ones with no secret to authenticate with: what stands in for that is PKCE, since
- * only the client that began the flow holds the verifier the challenge was made from.
- *
- * Every failure here is `invalid_grant` without saying which check failed. A code that was
- * replayed, a verifier that does not match and a redirect that was swapped are all the same
- * answer, and telling them apart would say whether a stolen code was still live.
- */
-export declare class Effect implements Operation {
-    private context;
-    mount(context: Context): void;
-    execute(input: Input): Promise<Maybe<Output>>;
-    private redeemable;
-}
-interface Input {
-    authority: string;
-    grant_type: string;
-    code?: string;
-    code_verifier?: string;
-    redirect_uri?: string;
-    client_id?: string;
-    resource?: string | string[];
-}
-interface Output {
-    status?: number;
-    access_token?: string;
-    token_type?: string;
-    expires_in?: number;
-    scope?: string;
-    error?: string;
-    error_description?: string;
-}
-export {};

package/components/identity.grants/operations/exchange.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"exchange.js","sourceRoot":"","sources":["../source/exchange.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAK1D;;;;;;;;GAQG;AACH,MAAM,OAAO,MAAM;IACT,OAAO,CAAU;IAElB,KAAK,CAAE,OAAgB;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAEM,KAAK,CAAC,OAAO,CAAE,KAAY;QAChC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAA;QAE3B,IAAI,KAAK,CAAC,UAAU,KAAK,kBAAkB;YACzC,OAAO,OAAO,CAAC,wBAAwB,EAAE,gDAAgD,CAAC,CAAA;QAE5F,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;YAC/D,OAAO,OAAO,CAAC,iBAAiB,EAAE,yCAAyC,CAAC,CAAA;QAE9E,wFAAwF;QACxF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QAE7D,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC;YAChD,OAAO,OAAO,CAAC,eAAe,EAAE,0CAA0C,CAAC,CAAA;QAE7E,qFAAqF;QACrF,uFAAuF;QACvF,yFAAyF;QACzF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7D,KAAK,EAAE;gBACL,SAAS;gBACT,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;gBACzB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK;gBAC1C,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;aAC3D;SACF,CAAC,CAAA;QAEF,uFAAuF;QACvF,4EAA4E;QAC5E,IAAI,MAAM,YAAY,KAAK;YACzB,OAAO,OAAO,CAAC,eAAe,EAAE,mDAAmD,CAAC,CAAA;QAEtF,yFAAyF;QACzF,wFAAwF;QACxF,wFAAwF;QACxF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;YAC9D,KAAK,EAAE;gBACL,SAAS;gBACT,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,GAAG,EAAE,MAAM,CAAC,GAAG;aAChB;SACF,CAAC,CAAA;QAEF,IAAI,KAAK,YAAY,KAAK;YACxB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,wCAAwC,EAC9D,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;QAE7C,OAAO;YACL,sEAAsE;YACtE,MAAM,EAAE,EAAE;YACV,YAAY,EAAE,MAAM,CAAC,KAAK;YAC1B,UAAU,EAAE,QAAQ;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS;gBAC1B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;SACpE,CAAA;IACH,CAAC;IAEO,UAAU,CAAE,IAAU,EAAE,KAAY;QAC1C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,aAAc,CAAC;YACjD,OAAO,KAAK,CAAA;QAEd,mEAAmE;QACnE,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,QAAQ;YAC1E,OAAO,KAAK,CAAA;QAEd,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,MAAM,CAAA;IACzE,CAAC;CACF;AAED,gGAAgG;AAChG,SAAS,KAAK,CAAE,MAAc;IAC5B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;AAC/B,CAAC;AAED,SAAS,OAAO,CAAE,KAAa,EAAE,WAAmB;IAClD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAA;AACvE,CAAC;AAED,MAAM,kBAAkB,GAAG,oBAAoB,CAAA;AAC/C,MAAM,EAAE,GAAG,GAAG,CAAA;AACd,MAAM,WAAW,GAAG,GAAG,CAAA;AACvB,MAAM,KAAK,GAAG,EAAE,CAAA"}

package/components/identity.grants/operations/lib/code.d.ts

@@ -1,15 +0,0 @@
-import type { Code, Context } from '../../types/index.js';
-/**
- * An authorization code is a bearer credential that lives for seconds. It is held under a
- * hash of itself, so a dump of the store hands out none of them, and redeemed with `GETDEL`,
- * so it is spent once however many requests arrive at once — the property the whole flow
- * rests on, since a replayed code is a stolen grant.
- */
-export declare function hold(authority: string, code: Code, context: Context): Promise<string>;
-export declare function spend(authority: string, value: string, context: Context): Promise<Code | null>;
-/**
- * PKCE, RFC 7636: the client kept a verifier and sent its hash, and only the client that
- * began the flow can present the verifier now. `S256` alone — `plain` proves nothing.
- */
-export declare function verifies(challenge: string, verifier: string): boolean;
-export declare function digest(verifier: string): string;

package/components/identity.grants/operations/lib/code.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"code.js","sourceRoot":"","sources":["../../source/lib/code.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAGrD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAE,SAAiB,EAAE,IAAU,EAAE,OAAgB;IACzE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IAEnD,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EACjE,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;IAEvC,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CAAE,SAAiB,EAAE,KAAa,EAAE,OAAgB;IAC7E,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAA;IAE9D,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAS,CAAA;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAE,SAAiB,EAAE,QAAgB;IAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAA;AACvC,CAAC;AAED,MAAM,UAAU,MAAM,CAAE,QAAgB;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AAClE,CAAC;AAED,SAAS,GAAG,CAAE,SAAiB,EAAE,KAAa;IAC5C,OAAO,cAAc,SAAS,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AACtF,CAAC"}

package/components/identity.grants/operations/lib/identify.d.ts

@@ -1,6 +0,0 @@
-/**
- * A user holds one grant per client, so the record is addressed by the three things that
- * say which: authorizing again replaces what is there rather than leaving another row, and
- * revoking has one thing to revoke.
- */
-export declare function identify(authority: string, identity: string, client: string): string;

package/components/identity.grants/operations/lib/identify.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"identify.js","sourceRoot":"","sources":["../../source/lib/identify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAE,SAAiB,EAAE,QAAgB,EAAE,MAAc;IAC3E,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;SACrD,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;AACrB,CAAC;AAED,kDAAkD;AAClD,MAAM,MAAM,GAAG,EAAE,CAAA"}

package/components/identity.grants/operations/lib/index.d.ts

@@ -1,3 +0,0 @@
-export * from './code.js';
-export * from './identify.js';
-export type * from '../../types/index.js';

package/components/identity.grants/operations/lib/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../source/lib/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA"}

package/components/identity.grants/operations/list.d.ts

@@ -1,13 +0,0 @@
-import type { Operation } from '@toa.io/bridges.node';
-import type { Context, Entity } from './lib/index.js';
-/** What a user has allowed, for a screen that lets them take it back. */
-export declare class Computation implements Operation {
-    private enumerate;
-    mount(context: Context): void;
-    execute(input: Input): Promise<Entity[]>;
-}
-interface Input {
-    authority: string;
-    identity: string;
-}
-export {};

package/components/identity.grants/operations/list.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"list.js","sourceRoot":"","sources":["../source/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAIvC,yEAAyE;AACzE,MAAM,OAAO,WAAW;IACd,SAAS,CAAgC;IAE1C,KAAK,CAAE,OAAgB;QAC5B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAA;IAC1C,CAAC;IAEM,KAAK,CAAC,OAAO,CAAE,KAAY;QAChC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC;YAC1B,KAAK,EAAE;gBACL,QAAQ,EAAE,cAAc,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;gBACnF,KAAK,EAAE,KAAK;aACb;SACF,CAAC,CAAA;IACJ,CAAC;CACF;AAED,MAAM,KAAK,GAAG,GAAG,CAAA"}

package/components/identity.grants/operations/revoke.d.ts

@@ -1,18 +0,0 @@
-import type { Maybe } from '@toa.io/core';
-import type { Operation } from '@toa.io/bridges.node';
-import type { Context, Entity } from './lib/index.js';
-/**
- * Taking back what was allowed. The token itself is not deleted — it is out in the world —
- * so what is revoked is the key it was issued under, which is what `identity.tokens` reads
- * it with. It stops being a token within `identity.tokens.cache.ttl`.
- */
-export declare class Transition implements Operation {
-    private keys;
-    mount(context: Context): void;
-    execute(input: Input, object: Entity): Promise<Maybe<void>>;
-}
-interface Input {
-    authority: string;
-    identity: string;
-}
-export {};

package/components/identity.grants/operations/revoke.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"revoke.js","sourceRoot":"","sources":["../source/revoke.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,MAAM,OAAO,UAAU;IACb,IAAI,CAAwC;IAE7C,KAAK,CAAE,OAAgB;QAC5B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAA;IAC1C,CAAC;IAEM,KAAK,CAAC,OAAO,CAAE,KAAY,EAAE,MAAc;QAChD,qFAAqF;QACrF,4EAA4E;QAC5E,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAC/D,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YAClC,OAAO,aAAa,CAAA;QAEtB,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAExD,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC/B,CAAC;CACF;AAED,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,aAAc,SAAQ,KAAK;IAC1C,IAAI,GAAG,WAAW,CAAA;CACnC,CAAC,EAAE,CAAA"}

package/components/identity.keys/operations/create.d.ts

@@ -1,22 +0,0 @@
-import type { Operation } from '@toa.io/bridges.node';
-export declare class Transition implements Operation {
-    execute(input: Input, object: Key): Promise<Output>;
-}
-interface Input {
-    identity: string;
-    label: string;
-    expires?: number;
-}
-interface Output {
-    id: string;
-    label: string;
-    key: string;
-}
-interface Key {
-    id: string;
-    identity: string;
-    key: string;
-    label: string;
-    expires?: number;
-}
-export {};

package/components/identity.keys/operations/create.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../source/create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAGzC,MAAM,OAAO,UAAU;IACd,KAAK,CAAC,OAAO,CAAE,KAAY,EAAE,MAAW;QAC7C,MAAM,CAAC,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAClD,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;QAChC,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;QAE1B,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAC7B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;QAEhC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAA;IAChE,CAAC;CACF"}

package/components/identity.keys/operations/disable.d.ts

@@ -1,5 +0,0 @@
-export declare function transition(_: unknown, object: Key): Key;
-interface Key {
-    revokedAt?: number;
-}
-export {};

package/components/identity.keys/operations/disable.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"disable.js","sourceRoot":"","sources":["../source/disable.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,UAAU,CAAE,CAAU,EAAE,MAAW;IACjD,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,GAAG,EAAE,CAAA;IAE/B,OAAO,MAAM,CAAA;AACf,CAAC"}

package/components/identity.keys/operations/revoke.d.ts

@@ -1,15 +0,0 @@
-import type { Call, Observation } from '@toa.io/core';
-export declare function effect({ identity }: Input, context: Context): Promise<void>;
-interface Input {
-    identity: string;
-}
-interface Key {
-    id: string;
-}
-interface Context {
-    local: {
-        enumerate: Observation<Key[], never, Key>;
-        disable: Call<void>;
-    };
-}
-export {};

package/components/identity.keys/operations/revoke.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"revoke.js","sourceRoot":"","sources":["../source/revoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAGvC,MAAM,CAAC,KAAK,UAAU,MAAM,CAAE,EAAE,QAAQ,EAAS,EAAE,OAAgB;IACjE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QACzC,KAAK,EAAE;YACL,QAAQ,EAAE,aAAa,KAAK,CAAC,QAAQ,CAAC,EAAE;YACxC,KAAK,EAAE,KAAK;SACb;KACF,CAAC,CAAA;IAEF,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;AACzF,CAAC;AAED,MAAM,KAAK,GAAG,IAAI,CAAA"}

package/components/identity.otp/operations/authenticate.d.ts

@@ -1,12 +0,0 @@
-import type { Context } from './lib/index.js';
-export declare function effect(input: Input, context: Context): Promise<Output | Error>;
-interface Input {
-    authority: string;
-    credentials: string;
-}
-interface Output {
-    identity: {
-        id: string;
-    };
-}
-export {};

package/components/identity.otp/operations/authenticate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authenticate.js","sourceRoot":"","sources":["../source/authenticate.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,MAAM,CAAE,KAAY,EAAE,OAAgB;IAC1D,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,KAAK,CAAA;IACxC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAEjF,IAAI,IAAI,KAAK,SAAS;QACpB,OAAO,uBAAuB,CAAA;IAEhC,MAAM,QAAQ,GAAG,GAAG,SAAS,IAAI,QAAQ,WAAW,CAAA;IACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAElD,IAAI,OAAO,KAAK,CAAC;QACf,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;IAEtE,IAAI,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAE7E,OAAO,qBAAqB,CAAA;IAC9B,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAA;IAC9C,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAEtC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAE1E,OAAO,WAAW,CAAA;IACpB,CAAC;IAED,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAEjC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QACvC,MAAM,EAAE;YACN,SAAS;YACT,QAAQ;SACT;KACF,CAAC,CAAA;IAEF,IAAI,KAAK,KAAK,IAAI;QAChB,OAAO,aAAa,CAAA;IAEtB,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAA,CAAC,qBAAqB;IAE3D,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,CAAA;AAC7B,CAAC;AAED,MAAM,uBAAuB,GAAG,IAAI,CAAC,MAAM,uBAAwB,SAAQ,KAAK;IAC9D,IAAI,GAAG,qBAAqB,CAAA;CAC7C,CAAC,EAAE,CAAA;AAEJ,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,YAAa,SAAQ,KAAK;IACvC,IAAI,GAAG,SAAS,CAAA;CACjC,CAAC,EAAE,CAAA;AAEJ,MAAM,qBAAqB,GAAG,IAAI,CAAC,MAAM,oBAAqB,SAAQ,KAAK;IACzD,IAAI,GAAG,mBAAmB,CAAA;CAC3C,CAAC,EAAE,CAAA;AAEJ,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,aAAc,SAAQ,KAAK;IAC1C,IAAI,GAAG,WAAW,CAAA;CACnC,CAAC,EAAE,CAAA"}

package/components/identity.otp/operations/issue.d.ts

@@ -1,12 +0,0 @@
-import type { Context } from './lib/index.js';
-export declare function effect(input: Input, context: Context): Promise<Output>;
-interface Input {
-    authority: string;
-    username: string;
-    identity?: string;
-    lifetime?: number;
-}
-interface Output {
-    code: string;
-}
-export {};

package/components/identity.otp/operations/issue.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"issue.js","sourceRoot":"","sources":["../source/issue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAGvC,MAAM,CAAC,KAAK,UAAU,MAAM,CAAE,KAAY,EAAE,OAAgB;IAC1D,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAA;IAC/C,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;IAClD,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAA;IAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAA;IAEjE,IAAI,QAAQ,KAAK,SAAS;QACxB,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE;gBACN,SAAS;gBACT,QAAQ;gBACR,QAAQ;aACT;SACF,CAAC,CAAA;IAEJ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;IAE5E,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;IAE/C,OAAO,EAAE,IAAI,EAAE,CAAA;AACjB,CAAC"}

package/components/identity.otp/operations/lib/Context.d.ts

@@ -1,16 +0,0 @@
-import type { Call, Observation } from '@toa.io/core';
-import type { Stash } from '@toa.io/extensions.stash';
-import type { Logs } from '@toa.io/extensions.telemetry';
-import type { Entity } from './Entity.js';
-export interface Context {
-    stash: Stash;
-    logs: Logs;
-    local: {
-        observe: Observation<Entity>;
-        ensure: Call<Entity>;
-    };
-    configuration: {
-        lifetime: number;
-        attempts: number;
-    };
-}

package/components/identity.otp/operations/lib/Context.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"Context.js","sourceRoot":"","sources":["../../source/lib/Context.ts"],"names":[],"mappings":""}

package/components/identity.otp/operations/lib/Entity.d.ts

@@ -1,6 +0,0 @@
-export interface Entity {
-    id: string;
-    authority: string;
-    username: string;
-    identity?: string;
-}

package/components/identity.otp/operations/lib/Entity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"Entity.js","sourceRoot":"","sources":["../../source/lib/Entity.ts"],"names":[],"mappings":""}

package/components/identity.otp/operations/lib/index.d.ts

@@ -1 +0,0 @@
-export type { Context } from './Context.js';

package/components/identity.otp/operations/lib/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../source/lib/index.ts"],"names":[],"mappings":""}

package/components/identity.passkeys/operations/authenticate.d.ts

@@ -1,16 +0,0 @@
-import type { Context } from './types/index.js';
-import type { AuthenticationResponseJSON } from '@simplewebauthn/server';
-import type { Operation } from '@toa.io/bridges.node';
-export declare class Effect implements Operation {
-    private use;
-    private logs;
-    mount(context: Context): void;
-    execute(input: Input): Promise<Output>;
-}
-export interface Input extends Omit<AuthenticationResponseJSON, 'rawId'> {
-    authority: string;
-    origin: string;
-}
-export type Output = {
-    identity: string;
-} | Error;

package/components/identity.passkeys/operations/authenticate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authenticate.js","sourceRoot":"","sources":["../source/authenticate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAKvC,MAAM,OAAO,MAAM;IACT,GAAG,CAA0B;IAC7B,IAAI,CAAkB;IAEvB,KAAK,CAAE,OAAgB;QAC5B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAA;QAC5B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;IAC1B,CAAC;IAEM,KAAK,CAAC,OAAO,CAAE,KAAY;QAChC,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAA;QAExC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC;YAC9B,KAAK,EAAE;gBACL,QAAQ,EAAE,cAAc,KAAK,CAAC,SAAS,CAAC,SAAS,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;aACtE;YACD,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAA;QAEF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE;gBACnC,SAAS;gBACT,EAAE,EAAE,QAAQ,CAAC,EAAE;aAChB,CAAC,CAAA;YAEF,OAAO,QAAQ,CAAA;QACjB,CAAC;QAED,IAAI,QAAQ,YAAY,KAAK;YAC3B,OAAO,QAAQ,CAAA;QAEjB,OAAO,EAAE,QAAQ,EAAE,CAAA;IACrB,CAAC;CACF;AAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,SAAU,SAAQ,KAAK;IACjC,IAAI,GAAG,MAAM,CAAA;CAC9B,CAAC,EAAE,CAAA"}

package/components/identity.passkeys/operations/challenge.d.ts

@@ -1,35 +0,0 @@
-import type { Operation } from '@toa.io/bridges.node';
-import type { Context } from './types/index.js';
-export declare class Effect implements Operation {
-    private timeout;
-    private authenticator?;
-    private credParams;
-    private enumerate;
-    private stash;
-    private logs;
-    mount(context: Context): void;
-    execute(input: Input): Promise<Output>;
-    private createChallenge;
-}
-interface Input {
-    type: 'creation' | 'request';
-    authority: string;
-    identity?: string | null;
-}
-type Output = CreationOptions | RequestOptions;
-interface CommonOptions {
-    identity?: string;
-    challenge: string;
-    timeout: number;
-}
-interface KeyDescriptor {
-    id: string;
-    transports?: string[];
-}
-type CreationOptions = CommonOptions & Omit<PublicKeyCredentialCreationOptions, 'challenge' | 'rp' | 'user' | 'excludeCredentials'> & {
-    excludeCredentials?: KeyDescriptor[];
-};
-type RequestOptions = CommonOptions & Omit<PublicKeyCredentialRequestOptions, 'challenge' | 'allowCredentials'> & {
-    allowCredentials?: KeyDescriptor[];
-};
-export {};

package/components/identity.passkeys/operations/challenge.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"challenge.js","sourceRoot":"","sources":["../source/challenge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAIzC,MAAM,OAAO,MAAM;IACT,OAAO,CAAS;IAChB,aAAa,CAAiC;IAC9C,UAAU,CAAkC;IAC5C,SAAS,CAAgC;IACzC,KAAK,CAAmB;IACxB,IAAI,CAAkB;IAEvB,KAAK,CAAE,OAAgB;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAA;QAC5C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;QAE9F,IAAI,OAAO,CAAC,aAAa,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACrD,IAAI,CAAC,aAAa,KAAK,EAAE,CAAA;YACzB,IAAI,CAAC,aAAa,CAAC,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,YAAY,CAAA;QAC1E,CAAC;QAED,IAAI,OAAO,CAAC,aAAa,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClD,IAAI,CAAC,aAAa,KAAK,EAAE,CAAA;YACzB,IAAI,CAAC,aAAa,CAAC,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,SAAS,CAAA;YAEhE,IAAI,OAAO,CAAC,aAAa,CAAC,SAAS,KAAK,UAAU;gBAChD,IAAI,CAAC,aAAa,CAAC,kBAAkB,GAAG,IAAI,CAAA;QAChD,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAA;QACxC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;IAC1B,CAAC;IAEM,KAAK,CAAC,OAAO,CAAE,KAAY;QAChC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAA;QAC3C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAA;QAEvD,MAAM,OAAO,GAAW;YACtB,SAAS;YACT,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAA;QAED,IAAI,IAAI,KAAK,UAAU;YACrB,OAAO,CAAC,QAAQ,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAA;QAExC,MAAM,IAAI,GAAG,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI;YACtD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC;gBACrB,KAAK,EAAE;oBACL,QAAQ,EAAE,aAAa,KAAK,CAAC,QAAQ,CAAC,EAAE;oBACxC,UAAU,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;oBACjC,KAAK,EAAE,QAAQ;iBAChB;aACF,CAAC,CAAA;QAEJ,IAAI,IAAI,KAAK,UAAU;YACrB,OAAO;gBACL,GAAG,OAAO;gBACV,kBAAkB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;gBAChF,gBAAgB,EAAE,IAAI,CAAC,UAAU;gBACjC,sBAAsB,EAAE,IAAI,CAAC,aAAa;aACjB,CAAA;;YAE3B,OAAO;gBACL,GAAG,OAAO;gBACV,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC9E,gBAAgB,EAAE,IAAI,CAAC,aAAa,EAAE,gBAAgB;aAC9B,CAAA;IAC9B,CAAC;IAEO,KAAK,CAAC,eAAe,CAAE,SAAiB;QAC9C,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACvD,MAAM,GAAG,GAAG,aAAa,SAAS,IAAI,SAAS,EAAE,CAAA;QAEjD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QAE9C,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,MAAM,CAAC,CAAA;QAEhE,OAAO,SAAS,CAAA;IAClB,CAAC;CACF;AAED,MAAM,MAAM,GAAG,GAAG,CAAA"}