@toa.io/extensions.exposition 1.0.0-alpha.284 → 1.0.0-alpha.286

package/components/identity.federation/operations/decode.js

@@ -6,4 +6,4 @@ export async function effect(token, context) {
         fetch: context.fetch
     });
 }
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZGVjb2RlLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vc291cmNlL2RlY29kZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEVBQUUsTUFBTSxFQUFFLE1BQU0sZ0JBQWdCLENBQUE7QUFJdkMsTUFBTSxDQUFDLEtBQUssVUFBVSxNQUFNLENBQUUsS0FBYSxFQUFFLE9BQWdCO0lBQzNELE9BQU8sTUFBTSxNQUFNLENBQUMsS0FBSyxFQUFFO1FBQ3pCLEtBQUssRUFBRSxPQUFPLENBQUMsYUFBYSxDQUFDLEtBQUs7UUFDbEMsSUFBSSxFQUFFLE9BQU8sQ0FBQyxJQUFJO1FBQ2xCLEtBQUssRUFBRSxPQUFPLENBQUMsS0FBSztLQUNyQixDQUFDLENBQUE7QUFDSixDQUFDIn0=
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZGVjb2RlLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vc291cmNlL2RlY29kZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEVBQUUsTUFBTSxFQUFFLE1BQU0sZ0JBQWdCLENBQUE7QUFJdkMsTUFBTSxDQUFDLEtBQUssVUFBVSxNQUFNLENBQzFCLEtBQWEsRUFDYixPQUFnQjtJQUVoQixPQUFPLE1BQU0sTUFBTSxDQUFDLEtBQUssRUFBRTtRQUN6QixLQUFLLEVBQUUsT0FBTyxDQUFDLGFBQWEsQ0FBQyxLQUFLO1FBQ2xDLElBQUksRUFBRSxPQUFPLENBQUMsSUFBSTtRQUNsQixLQUFLLEVBQUUsT0FBTyxDQUFDLEtBQUs7S0FDckIsQ0FBQyxDQUFBO0FBQ0osQ0FBQyJ9

package/components/identity.federation/operations/delete.js

@@ -4,4 +4,4 @@ export async function effect({ authority, identity, credential }, context) {
         return null;
     return await context.local.terminate({ query: { id: credential } });
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.federation/operations/incept.js

@@ -7,4 +7,4 @@ export async function effect(input, context) {
     await principal(credential, context);
     return { id: credential.identity };
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.federation/operations/lib/decode.js

@@ -33,4 +33,4 @@ export async function decode(token, ctx) {
         return ERR_TOKEN;
     }
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.federation/operations/lib/discovery.js

@@ -12,7 +12,7 @@ async function fetchConfiguration(iss, fetch) {
     const response = await fetch(`${iss}/.well-known/openid-configuration`);
     if (!response.ok)
         throw new Error('Failed to fetch OIDC configuration');
-    return await response.json();
+    return (await response.json());
 }
 export async function createRemoteJWKSet(iss, fetch) {
     let entries = resolvers.get(fetch);
@@ -31,4 +31,4 @@ async function create(iss, fetch) {
         [jose.customFetch]: fetch
     });
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.federation/operations/lib/exchange.js

@@ -10,7 +10,8 @@ export async function exchange(credentials, ctx) {
     const trusted = ctx.trust.find((trust) => trust.iss === iss);
     if (trusted === undefined)
         return errors.ERR_TRUST;
-    if (trusted.aud === undefined || (trusted.secret === undefined && trusted.signature === undefined))
+    if (trusted.aud === undefined ||
+        (trusted.secret === undefined && trusted.signature === undefined))
         return errors.ERR_CODE_NOT_ENABLED;
     const configuration = await discover(iss, ctx.fetch);
     if (configuration.token_endpoint === undefined)
@@ -38,10 +39,13 @@ export async function exchange(credentials, ctx) {
         body: params
     });
     if (!response.ok) {
-        ctx.logs.error('Code exchange failed', { status: response.status, text: await response.text() });
+        ctx.logs.error('Code exchange failed', {
+            status: response.status,
+            text: await response.text()
+        });
         return errors.ERR_RESPONSE;
     }
-    const tokens = await response.json();
+    const tokens = (await response.json());
     if (tokens.id_token === undefined)
         return errors.ERR_NO_TOKEN;
     const jwks = await createRemoteJWKSet(iss, ctx.fetch);
@@ -83,4 +87,4 @@ async function sign(trust) {
         .sign(key);
 }
 const CREDENTIAL_PROPERTIES = ['for', 'iss', 'code'];
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZXhjaGFuZ2UuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zb3VyY2UvbGliL2V4Y2hhbmdlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sRUFBRSxJQUFJLEVBQUUsTUFBTSxXQUFXLENBQUE7QUFDaEMsT0FBTyxFQUFFLGtCQUFrQixFQUFFLFFBQVEsRUFBRSxNQUFNLGdCQUFnQixDQUFBO0FBQzdELE9BQU8sS0FBSyxNQUFNLE1BQU0sYUFBYSxDQUFBO0FBS3JDLE1BQU0sQ0FBQyxLQUFLLFVBQVUsUUFBUSxDQUFFLFdBQW1CLEVBQUUsR0FBUTtJQUMzRCxNQUFNLElBQUksR0FBRyxNQUFNLElBQUksRUFBRSxDQUFBO0lBQ3pCLE1BQU0sVUFBVSxHQUFHLE1BQU0sQ0FBQyxXQUFXLENBQUMsQ0FBQTtJQUV0QyxJQUFJLFVBQVUsWUFBWSxLQUFLO1FBQzdCLE9BQU8sVUFBVSxDQUFBO0lBRW5CLE1BQU0sRUFBRSxJQUFJLEVBQUUsR0FBRyxFQUFFLEdBQUcsRUFBRSxRQUFRLEVBQUUsR0FBRyxVQUFVLENBQUE7SUFFL0MsTUFBTSxPQUFPLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsQ0FBQyxLQUFLLEVBQUUsRUFBRSxDQUFDLEtBQUssQ0FBQyxHQUFHLEtBQUssR0FBRyxDQUFDLENBQUE7SUFFNUQsSUFBSSxPQUFPLEtBQUssU0FBUztRQUN2QixPQUFPLE1BQU0sQ0FBQyxTQUFTLENBQUE7SUFFekIsSUFBSSxPQUFPLENBQUMsR0FBRyxLQUFLLFNBQVMsSUFBSSxDQUFDLE9BQU8sQ0FBQyxNQUFNLEtBQUssU0FBUyxJQUFJLE9BQU8sQ0FBQyxTQUFTLEtBQUssU0FBUyxDQUFDO1FBQ2hHLE9BQU8sTUFBTSxDQUFDLG9CQUFvQixDQUFBO0lBRXBDLE1BQU0sYUFBYSxHQUFHLE1BQU0sUUFBUSxDQUFDLEdBQUcsRUFBRSxHQUFHLENBQUMsS0FBSyxDQUFDLENBQUE7SUFFcEQsSUFBSSxhQUFhLENBQUMsY0FBYyxLQUFLLFNBQVM7UUFDNUMsT0FBTyxNQUFNLENBQUMsVUFBVSxDQUFBO0lBRTFCLGdFQUFnRTtJQUNoRSxNQUFNLEdBQUcsR0FBRyxLQUFLLENBQUMsT0FBTyxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsQ0FBQyxDQUFDLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQTtJQUNyRSxNQUFNLE1BQU0sR0FBRyxPQUFPLENBQUMsTUFBTSxLQUFLLFNBQVMsQ0FBQyxDQUFDLENBQUMsTUFBTSxJQUFJLENBQUMsT0FBTyxDQUFDLENBQUMsQ0FBQyxDQUFDLE9BQU8sQ0FBQyxNQUFNLENBQUMsTUFBTSxFQUFFLENBQUE7SUFDM0YsTUFBTSxNQUFNLEdBQUcsSUFBSSxlQUFlLEVBQUUsQ0FBQTtJQUVwQyxNQUFNLENBQUMsTUFBTSxDQUFDLFlBQVksRUFBRSxvQkFBb0IsQ0FBQyxDQUFBO0lBQ2pELE1BQU0sQ0FBQyxNQUFNLENBQUMsTUFBTSxFQUFFLElBQUksQ0FBQyxDQUFBO0lBQzNCLE1BQU0sQ0FBQyxNQUFNLENBQUMsV0FBVyxFQUFFLEdBQUcsQ0FBQyxDQUFBO0lBQy9CLE1BQU0sQ0FBQyxNQUFNLENBQUMsZUFBZSxFQUFFLE1BQU0sQ0FBQyxDQUFBO0lBQ3RDLE1BQU0sQ0FBQyxNQUFNLENBQUMsY0FBYyxFQUFFLFFBQVEsQ0FBQyxDQUFBO0lBRXZDLEdBQUcsQ0FBQyxJQUFJLENBQUMsS0FBSyxDQUFDLGlCQUFpQixFQUFFO1FBQ2hDLEdBQUc7UUFDSCxHQUFHO1FBQ0gsR0FBRyxFQUFFLFFBQVE7UUFDYixJQUFJLEVBQUUsT0FBTyxDQUFDLE1BQU0sS0FBSyxTQUFTLENBQUMsQ0FBQyxDQUFDLFdBQVcsQ0FBQyxDQUFDLENBQUMsUUFBUTtLQUM1RCxDQUFDLENBQUE7SUFFRixNQUFNLFFBQVEsR0FBRyxNQUFNLEdBQUcsQ0FBQyxLQUFLLENBQUMsYUFBYSxDQUFDLGNBQWMsRUFBRTtRQUM3RCxNQUFNLEVBQUUsTUFBTTtRQUNkLE9BQU8sRUFBRTtZQUNQLGNBQWMsRUFBRSxtQ0FBbUM7U0FDcEQ7UUFDRCxJQUFJLEVBQUUsTUFBTTtLQUNiLENBQUMsQ0FBQTtJQUVGLElBQUksQ0FBQyxRQUFRLENBQUMsRUFBRSxFQUFFLENBQUM7UUFDakIsR0FBRyxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsc0JBQXNCLEVBQUUsRUFBRSxNQUFNLEVBQUUsUUFBUSxDQUFDLE1BQU0sRUFBRSxJQUFJLEVBQUUsTUFBTSxRQUFRLENBQUMsSUFBSSxFQUFFLEVBQUUsQ0FBQyxDQUFBO1FBRWhHLE9BQU8sTUFBTSxDQUFDLFlBQVksQ0FBQTtJQUM1QixDQUFDO0lBRUQsTUFBTSxNQUFNLEdBQUcsTUFBTSxRQUFRLENBQUMsSUFBSSxFQUEwQixDQUFBO0lBRTVELElBQUksTUFBTSxDQUFDLFFBQVEsS0FBSyxTQUFTO1FBQy9CLE9BQU8sTUFBTSxDQUFDLFlBQVksQ0FBQTtJQUU1QixNQUFNLElBQUksR0FBRyxNQUFNLGtCQUFrQixDQUFDLEdBQUcsRUFBRSxHQUFHLENBQUMsS0FBSyxDQUFDLENBQUE7SUFFckQsSUFBSSxDQUFDO1FBQ0gsTUFBTSxFQUFFLE9BQU8sRUFBRSxHQUFHLE1BQU0sSUFBSSxDQUFDLFNBQVMsQ0FBQyxNQUFNLENBQUMsUUFBUSxFQUFFLElBQUksRUFBRTtZQUM5RCxNQUFNLEVBQUUsR0FBRztZQUNYLFFBQVEsRUFBRSxPQUFPLENBQUMsR0FBRztZQUNyQixjQUFjLEVBQUUsQ0FBQyxLQUFLLENBQUM7U0FDeEIsQ0FBQyxDQUFBO1FBRUYsT0FBTyxPQUFrQixDQUFBO0lBQzNCLENBQUM7SUFBQyxNQUFNLENBQUM7UUFDUCxPQUFPLE1BQU0sQ0FBQyxTQUFTLENBQUE7SUFDekIsQ0FBQztBQUNILENBQUM7QUFFRCxTQUFTLE1BQU0sQ0FBRSxXQUFtQjtJQUNsQyxNQUFNLElBQUksR0FBRyxNQUFNLENBQUMsSUFBSSxDQUFDLFdBQVcsRUFBRSxRQUFRLENBQUMsQ0FBQyxRQUFRLENBQUMsTUFBTSxDQUFDLENBQUE7SUFDaEUsTUFBTSxVQUFVLEdBQUcsSUFBSSxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQWUsQ0FBQTtJQUVqRCxJQUNFLE9BQU8sVUFBVSxDQUFDLElBQUksS0FBSyxRQUFRO1FBQ25DLE9BQU8sVUFBVSxDQUFDLEdBQUcsS0FBSyxRQUFRO1FBQ2xDLE9BQU8sVUFBVSxDQUFDLEdBQUcsS0FBSyxRQUFRO1FBQ2xDLE1BQU0sQ0FBQyxJQUFJLENBQUMsVUFBVSxDQUFDLENBQUMsTUFBTSxLQUFLLHFCQUFxQixDQUFDLE1BQU07UUFFL0QsT0FBTyxNQUFNLENBQUMsZUFBZSxDQUFBO0lBRS9CLE9BQU8sVUFBVSxDQUFBO0FBQ25CLENBQUM7QUFFRCxLQUFLLFVBQVUsSUFBSSxDQUFFLEtBQVk7SUFDL0IsTUFBTSxJQUFJLEdBQUcsTUFBTSxJQUFJLEVBQUUsQ0FBQTtJQUN6QixNQUFNLFNBQVMsR0FBRyxLQUFLLENBQUMsU0FBVSxDQUFBO0lBQ2xDLE1BQU0sR0FBRyxHQUFHLEtBQUssQ0FBQyxPQUFPLENBQUMsS0FBSyxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUMsR0FBSSxDQUFBO0lBQ2hFLE1BQU0sR0FBRyxHQUFHLElBQUksQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLEdBQUcsRUFBRSxHQUFHLElBQUksQ0FBQyxDQUFBO0lBQ3pDLE1BQU0sR0FBRyxHQUFHLE1BQU0sSUFBSSxDQUFDLFdBQVcsQ0FBQyxTQUFTLENBQUMsR0FBRyxDQUFDLE1BQU0sRUFBRSxFQUFFLE9BQU8sQ0FBQyxDQUFBO0lBRW5FLE9BQU8sTUFBTSxJQUFJLElBQUksQ0FBQyxPQUFPLENBQUMsRUFBRSxDQUFDO1NBQzlCLGtCQUFrQixDQUFDLEVBQUUsR0FBRyxFQUFFLE9BQU8sRUFBRSxHQUFHLEVBQUUsU0FBUyxDQUFDLEdBQUcsRUFBRSxDQUFDO1NBQ3hELFdBQVcsQ0FBQyxHQUFHLENBQUM7U0FDaEIsaUJBQWlCLENBQUMsR0FBRyxHQUFHLEdBQUcsQ0FBQztTQUM1QixTQUFTLENBQUMsU0FBUyxDQUFDLEdBQUcsQ0FBQztTQUN4QixVQUFVLENBQUMsR0FBRyxDQUFDO1NBQ2YsV0FBVyxDQUFDLEtBQUssQ0FBQyxHQUFHLENBQUM7U0FDdEIsSUFBSSxDQUFDLEdBQUcsQ0FBQyxDQUFBO0FBQ2QsQ0FBQztBQUVELE1BQU0scUJBQXFCLEdBQTRCLENBQUMsS0FBSyxFQUFFLEtBQUssRUFBRSxNQUFNLENBQUMsQ0FBQSJ9
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.federation/operations/lib/principal.js

@@ -11,4 +11,4 @@ export async function principal(credential, context) {
         return;
     await context.remote.identity.roles.principal({ input: { id: credential.identity } });
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.federation/operations/lib/resolve.js

@@ -10,4 +10,4 @@ export async function resolve(scheme, credentials, context) {
         ? await decode(credentials, ctx)
         : await exchange(credentials, ctx);
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmVzb2x2ZS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NvdXJjZS9saWIvcmVzb2x2ZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEVBQUUsTUFBTSxFQUFFLE1BQU0sYUFBYSxDQUFBO0FBQ3BDLE9BQU8sRUFBRSxRQUFRLEVBQUUsTUFBTSxlQUFlLENBQUE7QUFLeEMsTUFBTSxDQUFDLEtBQUssVUFBVSxPQUFPLENBQzNCLE1BQWMsRUFDZCxXQUFtQixFQUNuQixPQUFnQjtJQUVoQixNQUFNLEdBQUcsR0FBUTtRQUNmLEtBQUssRUFBRSxPQUFPLENBQUMsYUFBYSxDQUFDLEtBQUs7UUFDbEMsSUFBSSxFQUFFLE9BQU8sQ0FBQyxJQUFJO1FBQ2xCLEtBQUssRUFBRSxPQUFPLENBQUMsS0FBSztLQUNyQixDQUFBO0lBRUQsT0FBTyxNQUFNLEtBQUssUUFBUTtRQUN4QixDQUFDLENBQUMsTUFBTSxNQUFNLENBQUMsV0FBVyxFQUFFLEdBQUcsQ0FBQztRQUNoQyxDQUFDLENBQUMsTUFBTSxRQUFRLENBQUMsV0FBVyxFQUFFLEdBQUcsQ0FBQyxDQUFBO0FBQ3RDLENBQUMifQ==

package/components/identity.federation/operations/list.js

@@ -4,9 +4,9 @@ export async function computation({ authority, identity }, context) {
         query: {
             criteria: `authority==${quote(authority)};identity==${quote(identity)}`,
             projection: ['iss'],
-            sort: ['_created:desc'],
+            sort: ['CREATED:desc'],
             limit: 100
         }
     });
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.federation/source/authenticate.ts

@@ -1,41 +1,43 @@
 import { newid, quote } from '@toa.io/generic'
 import { principal, resolve } from './lib/index.js'
 import type { JWTPayload } from 'jose'
-import type { Maybe } from '@toa.io/core'
+import type { Maybe } from '@toa.io/core/types'
 import type { Context, Scheme } from './types/index.js'
 
-export async function effect ({ scheme, authority, credentials }: Input, context: Context): Promise<Maybe<Output>> {
+export async function effect(
+  { scheme, authority, credentials }: Input,
+  context: Context
+): Promise<Maybe<Output>> {
   context.logs.debug('Authenticating', { scheme, authority })
 
   const claims = await resolve(scheme, credentials, context)
 
-  if (claims instanceof Error)
-    return claims
+  if (claims instanceof Error) return claims
 
   const { iss, sub } = claims
 
   context.logs.debug('Token claims', claims)
 
-  const query = { criteria: `authority==${quote(authority)};iss==${quote(iss)};sub==${quote(sub)}` }
+  const query = {
+    criteria: `authority==${quote(authority)};iss==${quote(iss)};sub==${quote(sub)}`
+  }
 
   const asserted = newid()
 
-  const credential = context.configuration.assert !== false
-    ? await context.local.ensure({
-      query,
-      entity: { authority, iss, sub, identity: asserted }
-    })
-    : await context.local.observe({ query })
+  const credential =
+    context.configuration.assert !== false
+      ? await context.local.ensure({
+          query,
+          entity: { authority, iss, sub, identity: asserted }
+        })
+      : await context.local.observe({ query })
 
-  if (credential === null)
-    return ERR_NOT_FOUND
+  if (credential === null) return ERR_NOT_FOUND
 
-  if (credential instanceof Error)
-    return credential
+  if (credential instanceof Error) return credential
 
   // the Identity this call has just created is the only one whose Role is not granted yet
-  if (credential.identity === asserted)
-    await principal(credential, context)
+  if (credential.identity === asserted) await principal(credential, context)
 
   return { identity: { id: credential.identity, claims } }
 }

package/components/identity.federation/source/create.ts

@@ -2,11 +2,10 @@ import { quote } from '@toa.io/generic'
 import { resolve } from './lib/index.js'
 import type { Context, Entity, Scheme } from './types/index.js'
 
-export async function effect (input: Input, context: Context): Promise<Entity | Error> {
+export async function effect(input: Input, context: Context): Promise<Entity | Error> {
   const claims = await resolve(input.scheme, input.credentials, context)
 
-  if (claims instanceof Error)
-    return claims
+  if (claims instanceof Error) return claims
 
   const { iss, sub } = claims
 
@@ -19,10 +18,9 @@ export async function effect (input: Input, context: Context): Promise<Entity |
 
   const record = { authority: input.authority, iss, sub, identity: input.id }
 
-  if (existent === null)
-    return await context.local.transit({ input: record })
+  if (existent === null) return await context.local.transit({ input: record })
 
-  if (existent._deleted === undefined || existent._deleted === null)
+  if (existent.DELETED === undefined || existent.DELETED === null)
     return existent.identity === input.id ? existent : ERR_EXISTS
 
   // a deleted record still occupies the unique index, so the transition revives it
@@ -41,5 +39,6 @@ export interface Input {
 
 const ERR_EXISTS = new (class ExistsError extends Error {
   public readonly code = 'EXISTS'
-  public override readonly message = 'Federation credentials are associated with another Identity'
+  public override readonly message =
+    'Federation credentials are associated with another Identity'
 })()

package/components/identity.federation/source/decode.ts

@@ -2,7 +2,10 @@ import { decode } from './lib/index.js'
 import type { JWTPayload } from 'jose'
 import type { Context } from './types/index.js'
 
-export async function effect (token: string, context: Context): Promise<JWTPayload | Error> {
+export async function effect(
+  token: string,
+  context: Context
+): Promise<JWTPayload | Error> {
   return await decode(token, {
     trust: context.configuration.trust,
     logs: context.logs,

package/components/identity.federation/source/delete.ts

@@ -1,6 +1,9 @@
 import type { Context } from './types/index.js'
 
-export async function effect ({ authority, identity, credential }: Input, context: Context): Promise<void | null> {
+export async function effect(
+  { authority, identity, credential }: Input,
+  context: Context
+): Promise<void | null> {
   const object = await context.local.observe({ query: { id: credential } })
 
   if (object === null || object.authority !== authority || object.identity !== identity)

package/components/identity.federation/source/incept.ts

@@ -2,11 +2,10 @@ import { effect as create } from './create.js'
 import { principal } from './lib/index.js'
 import type { Context, Scheme } from './types/index.js'
 
-export async function effect (input: Input, context: Context): Promise<Output | Error> {
+export async function effect(input: Input, context: Context): Promise<Output | Error> {
   const credential = await create(input, context)
 
-  if (credential instanceof Error)
-    return credential
+  if (credential instanceof Error) return credential
 
   await principal(credential, context)
 

package/components/identity.federation/source/lib/decode.ts

@@ -5,7 +5,7 @@ import type { JWTPayload } from 'jose'
 import type { Ctx } from './Ctx.js'
 import type { Payload } from './Payload.js'
 
-export async function decode (token: string, ctx: Ctx): Promise<Payload | Error> {
+export async function decode(token: string, ctx: Ctx): Promise<Payload | Error> {
   const jose = await load()
 
   let claims: JWTPayload
@@ -19,16 +19,13 @@ export async function decode (token: string, ctx: Ctx): Promise<Payload | Error>
 
   const { iss, sub } = claims
 
-  if (typeof iss !== 'string')
-    return ERR_ISS
+  if (typeof iss !== 'string') return ERR_ISS
 
-  if (typeof sub !== 'string')
-    return ERR_SUB
+  if (typeof sub !== 'string') return ERR_SUB
 
   const trusted = ctx.trust.find((trust) => trust.iss === iss)
 
-  if (trusted === undefined)
-    return ERR_TRUST
+  if (trusted === undefined) return ERR_TRUST
 
   // the issuer is a configured one by now, so reaching its keys is the deployment's to answer for
   const jwks = await createRemoteJWKSet(iss, ctx.fetch)

package/components/identity.federation/source/lib/discovery.test.ts

@@ -12,10 +12,17 @@ it('discovers an issuer using the component fetch', async () => {
   const configuration = { issuer: iss, jwks_uri: `${iss}/jwks` }
 
   const fetch = mock.fn(async (_input: string | URL | Request) =>
-    Response.json(configuration)) as Mock<Fetch>
+    Response.json(configuration)
+  ) as Mock<Fetch>
 
   await assert.partialDeepStrictEqual(await discover(iss, fetch), configuration)
-  assert.ok(fetch.mock.calls.some((call: any) => call.arguments.length === 1 && isDeepStrictEqual(call.arguments[0], `${iss}/.well-known/openid-configuration`)))
+  assert.ok(
+    fetch.mock.calls.some(
+      (call: any) =>
+        call.arguments.length === 1 &&
+        isDeepStrictEqual(call.arguments[0], `${iss}/.well-known/openid-configuration`)
+    )
+  )
 })
 
 it('loads and caches remote keys using the component fetch', async () => {
@@ -43,8 +50,11 @@ it('loads and caches remote keys using the component fetch', async () => {
   const second = await createRemoteJWKSet(iss, fetch)
 
   assert.strictEqual(second, first)
-  await assert.partialDeepStrictEqual(await jose.jwtVerify(token, first, { issuer: iss }), {
-    payload: { sub: 'subject' }
-  })
+  await assert.partialDeepStrictEqual(
+    await jose.jwtVerify(token, first, { issuer: iss }),
+    {
+      payload: { sub: 'subject' }
+    }
+  )
   assert.strictEqual(fetch.mock.callCount(), 2)
 })

package/components/identity.federation/source/lib/discovery.ts

@@ -6,7 +6,7 @@ import type { Fetch } from '../types/context.js'
 const cache = new Map<string, Configuration>()
 const resolvers = new WeakMap<Fetch, Map<string, Promise<jose.RemoteJWKSet>>>()
 
-export async function discover (iss: string, fetch: Fetch): Promise<Configuration> {
+export async function discover(iss: string, fetch: Fetch): Promise<Configuration> {
   if (!cache.has(iss)) {
     const configuration = await fetchConfiguration(iss, fetch)
 
@@ -16,16 +16,18 @@ export async function discover (iss: string, fetch: Fetch): Promise<Configuratio
   return cache.get(iss)!
 }
 
-async function fetchConfiguration (iss: string, fetch: Fetch): Promise<Configuration> {
+async function fetchConfiguration(iss: string, fetch: Fetch): Promise<Configuration> {
   const response = await fetch(`${iss}/.well-known/openid-configuration`)
 
-  if (!response.ok)
-    throw new Error('Failed to fetch OIDC configuration')
+  if (!response.ok) throw new Error('Failed to fetch OIDC configuration')
 
-  return await response.json() as Configuration
+  return (await response.json()) as Configuration
 }
 
-export async function createRemoteJWKSet (iss: string, fetch: Fetch): Promise<jose.RemoteJWKSet> {
+export async function createRemoteJWKSet(
+  iss: string,
+  fetch: Fetch
+): Promise<jose.RemoteJWKSet> {
   let entries = resolvers.get(fetch)
 
   if (entries === undefined) {
@@ -33,13 +35,12 @@ export async function createRemoteJWKSet (iss: string, fetch: Fetch): Promise<jo
     resolvers.set(fetch, entries)
   }
 
-  if (!entries.has(iss))
-    entries.set(iss, create(iss, fetch))
+  if (!entries.has(iss)) entries.set(iss, create(iss, fetch))
 
   return await entries.get(iss)!
 }
 
-async function create (iss: string, fetch: Fetch): Promise<jose.RemoteJWKSet> {
+async function create(iss: string, fetch: Fetch): Promise<jose.RemoteJWKSet> {
   const jose = await load()
   const configuration = await discover(iss, fetch)
 

package/components/identity.federation/source/lib/exchange.ts

@@ -5,31 +5,32 @@ import type { Trust } from '../types/index.js'
 import type { Ctx } from './Ctx.js'
 import type { Payload } from './Payload.js'
 
-export async function exchange (credentials: string, ctx: Ctx): Promise<Payload | Error> {
+export async function exchange(credentials: string, ctx: Ctx): Promise<Payload | Error> {
   const jose = await load()
   const properties = decode(credentials)
 
-  if (properties instanceof Error)
-    return properties
+  if (properties instanceof Error) return properties
 
   const { code, iss, for: redirect } = properties
 
   const trusted = ctx.trust.find((trust) => trust.iss === iss)
 
-  if (trusted === undefined)
-    return errors.ERR_TRUST
+  if (trusted === undefined) return errors.ERR_TRUST
 
-  if (trusted.aud === undefined || (trusted.secret === undefined && trusted.signature === undefined))
+  if (
+    trusted.aud === undefined ||
+    (trusted.secret === undefined && trusted.signature === undefined)
+  )
     return errors.ERR_CODE_NOT_ENABLED
 
   const configuration = await discover(iss, ctx.fetch)
 
-  if (configuration.token_endpoint === undefined)
-    return errors.ERR_CONFIG
+  if (configuration.token_endpoint === undefined) return errors.ERR_CONFIG
 
   // array actually is not expected here, but it is a valid format
   const aud = Array.isArray(trusted.aud) ? trusted.aud[0] : trusted.aud
-  const secret = trusted.secret === undefined ? await sign(trusted) : trusted.secret.unwrap()
+  const secret =
+    trusted.secret === undefined ? await sign(trusted) : trusted.secret.unwrap()
   const params = new URLSearchParams()
 
   params.append('grant_type', 'authorization_code')
@@ -54,15 +55,17 @@ export async function exchange (credentials: string, ctx: Ctx): Promise<Payload
   })
 
   if (!response.ok) {
-    ctx.logs.error('Code exchange failed', { status: response.status, text: await response.text() })
+    ctx.logs.error('Code exchange failed', {
+      status: response.status,
+      text: await response.text()
+    })
 
     return errors.ERR_RESPONSE
   }
 
-  const tokens = await response.json() as { id_token: string }
+  const tokens = (await response.json()) as { id_token: string }
 
-  if (tokens.id_token === undefined)
-    return errors.ERR_NO_TOKEN
+  if (tokens.id_token === undefined) return errors.ERR_NO_TOKEN
 
   const jwks = await createRemoteJWKSet(iss, ctx.fetch)
 
@@ -79,7 +82,7 @@ export async function exchange (credentials: string, ctx: Ctx): Promise<Payload
   }
 }
 
-function decode (credentials: string): Properties | Error {
+function decode(credentials: string): Properties | Error {
   const json = Buffer.from(credentials, 'base64').toString('utf8')
   const properties = JSON.parse(json) as Properties
 
@@ -94,7 +97,7 @@ function decode (credentials: string): Properties | Error {
   return properties
 }
 
-async function sign (trust: Trust): Promise<string> {
+async function sign(trust: Trust): Promise<string> {
   const jose = await load()
   const signature = trust.signature!
   const aud = Array.isArray(trust.aud) ? trust.aud[0] : trust.aud!

package/components/identity.federation/source/lib/jose.d.ts

@@ -1 +1 @@
-export function load (): Promise<typeof import('jose')>
+export function load(): Promise<typeof import('jose')>

package/components/identity.federation/source/lib/principal.ts

@@ -4,13 +4,15 @@ import type { Context, Entity } from '../types/index.js'
  * The `system` Role is granted where the credentials are created, before the reply that mints
  * a Token from them — the event that carries the same grant lands after it.
  */
-export async function principal (credential: Entity, context: Context): Promise<void> {
+export async function principal(credential: Entity, context: Context): Promise<void> {
   const configured = context.configuration.principal
 
-  if (configured === undefined ||
+  if (
+    configured === undefined ||
     configured.authority !== credential.authority ||
     configured.iss !== credential.iss ||
-    configured.sub !== credential.sub)
+    configured.sub !== credential.sub
+  )
     return
 
   await context.remote.identity.roles.principal({ input: { id: credential.identity } })

package/components/identity.federation/source/lib/resolve.ts

@@ -4,7 +4,11 @@ import type { Ctx } from './Ctx.js'
 import type { Payload } from './Payload.js'
 import type { Context, Scheme } from '../types/index.js'
 
-export async function resolve (scheme: Scheme, credentials: string, context: Context): Promise<Payload | Error> {
+export async function resolve(
+  scheme: Scheme,
+  credentials: string,
+  context: Context
+): Promise<Payload | Error> {
   const ctx: Ctx = {
     trust: context.configuration.trust,
     logs: context.logs,

package/components/identity.federation/source/list.test.ts

@@ -5,7 +5,14 @@ import { isDeepStrictEqual } from 'node:util'
 import { computation } from './list.js'
 
 it('lists indexed credentials', async () => {
-  const current = { id: 'credential', authority: 'nex', identity: 'identity', iss: 'apple', sub: '1', _created: 2 }
+  const current = {
+    id: 'credential',
+    authority: 'nex',
+    identity: 'identity',
+    iss: 'apple',
+    sub: '1',
+    CREATED: 2
+  }
 
   const context = {
     local: {
@@ -13,13 +20,22 @@ it('lists indexed credentials', async () => {
     }
   }
 
-  await assert.deepStrictEqual(await computation({ authority: 'nex', identity: 'identity' }, context as never), [current])
-  assert.ok(context.local.enumerate.mock.calls.some((call: any) => call.arguments.length === 1 && isDeepStrictEqual(call.arguments[0], {
-    query: {
-      criteria: 'authority=="nex";identity=="identity"',
-      projection: ['iss'],
-      sort: ['_created:desc'],
-      limit: 100
-    }
-  })))
+  await assert.deepStrictEqual(
+    await computation({ authority: 'nex', identity: 'identity' }, context as never),
+    [current]
+  )
+  assert.ok(
+    context.local.enumerate.mock.calls.some(
+      (call: any) =>
+        call.arguments.length === 1 &&
+        isDeepStrictEqual(call.arguments[0], {
+          query: {
+            criteria: 'authority=="nex";identity=="identity"',
+            projection: ['iss'],
+            sort: ['CREATED:desc'],
+            limit: 100
+          }
+        })
+    )
+  )
 })

package/components/identity.federation/source/list.ts

@@ -1,12 +1,15 @@
 import { quote } from '@toa.io/generic'
 import type { Context, Entity } from './types/index.js'
 
-export async function computation ({ authority, identity }: Input, context: Context): Promise<Entity[]> {
+export async function computation(
+  { authority, identity }: Input,
+  context: Context
+): Promise<Entity[]> {
   return await context.local.enumerate({
     query: {
       criteria: `authority==${quote(authority)};identity==${quote(identity)}`,
       projection: ['iss'],
-      sort: ['_created:desc'],
+      sort: ['CREATED:desc'],
       limit: 100
     }
   })

package/components/identity.federation/source/types/context.ts

@@ -1,5 +1,5 @@
 import type { JWTPayload } from 'jose'
-import type { Call, Observation, Query, Transition } from '@toa.io/core'
+import type { Call, Observation, Query, Transition } from '@toa.io/core/types'
 import type { Logs } from '@toa.io/extensions.telemetry'
 import type { Entity } from './entity.js'
 import type { Configuration } from './configuration.js'
@@ -28,7 +28,10 @@ export interface Context {
   configuration: Configuration
 }
 
-export type Fetch = (input: string | URL | Request, init?: RequestInit) => Promise<Response>
+export type Fetch = (
+  input: string | URL | Request,
+  init?: RequestInit
+) => Promise<Response>
 
 export interface TransitInput {
   readonly authority: string

package/components/identity.federation/source/types/entity.ts

@@ -4,6 +4,6 @@ export interface Entity {
   iss: string
   sub: string
   identity: string
-  _created: number
-  _deleted?: number | null
+  CREATED: number
+  DELETED?: number | null
 }