@toa.io/extensions.exposition 1.0.0-alpha.325 → 1.0.0-alpha.326

package/components/exposition.octets/operations/put.js

@@ -114,25 +114,13 @@ function toURL(location) {
   }
 }
 
-const ERR_UNTRUSTED = new (class LocationUntrustedError extends Error {
-  code = 'LOCATION_UNTRUSTED'
-  message = 'Location is not trusted'
-})()
-
-const ERR_LENGTH = new (class LocationLengthError extends Error {
-  code = 'LOCATION_LENGTH'
-  message = 'Content-Length must be 0 when Content-Location is used'
-})()
-
-const ERR_UNAVAILABLE = new (class LocationUnavailableError extends Error {
-  code = 'LOCATION_UNAVAILABLE'
-  message = 'Location is not available'
-})()
-
-const ERR_INVALID_ID = new (class InvalidIdError extends Error {
-  code = 'INVALID_ID'
-  message = 'Invalid Content-ID'
-})()
+const ERR_UNTRUSTED = new Error('LOCATION_UNTRUSTED')
+
+const ERR_LENGTH = new Error('LOCATION_LENGTH')
+
+const ERR_UNAVAILABLE = new Error('LOCATION_UNAVAILABLE')
+
+const ERR_INVALID_ID = new Error('INVALID_ID')
 
 const ID_RX = /^[a-zA-Z0-9-_]{1,32}$/
 

package/components/exposition.octets/package.json

@@ -3,8 +3,8 @@
   "private": true,
   "type": "module",
   "dependencies": {
-    "@aws-sdk/client-s3": "3.1140.0",
-    "@aws-sdk/lib-storage": "3.1140.0",
+    "@aws-sdk/client-s3": "3.1145.0",
+    "@aws-sdk/lib-storage": "3.1145.0",
     "cloudinary": "2.11.0"
   }
 }

package/components/exposition.octets/types/toa.d.ts

@@ -1,7 +1,7 @@
 // Written by `toa types`. Every run rewrites it.
 // What a manifest does not state belongs in a file of your own.
 
-import type { RemoteError } from '@toa.io/core/types'
+import type { CodedError } from '@toa.io/core/types'
 
 export type PutInput = {
   location?: string
@@ -34,8 +34,8 @@ export type DeleteInput = {
 }
 
 export interface Component {
-  put: (request: { input: PutInput, task?: boolean }) => Promise<unknown | RemoteError<"LOCATION_UNTRUSTED" | "LOCATION_LENGTH" | "LOCATION_UNAVAILABLE" | "INVALID_ID" | "NOT_FOUND" | "LIMIT_EXCEEDED" | "NOT_ACCEPTABLE" | "TYPE_MISMATCH">>
-  get: (request: { input: GetInput, task?: boolean }) => Promise<unknown | RemoteError<"NOT_FOUND" | "LIMIT_EXCEEDED" | "NOT_ACCEPTABLE" | "TYPE_MISMATCH">>
-  head: (request: { input: HeadInput, task?: boolean }) => Promise<unknown | RemoteError<"NOT_FOUND" | "LIMIT_EXCEEDED" | "NOT_ACCEPTABLE" | "TYPE_MISMATCH">>
-  delete: (request: { input: DeleteInput, task?: boolean }) => Promise<unknown | RemoteError<"NOT_FOUND" | "LIMIT_EXCEEDED" | "NOT_ACCEPTABLE" | "TYPE_MISMATCH">>
+  put: (request: { input: PutInput, task?: boolean }) => Promise<{} | null | undefined | CodedError<"LOCATION_UNTRUSTED" | "LOCATION_LENGTH" | "LOCATION_UNAVAILABLE" | "INVALID_ID" | "NOT_FOUND" | "LIMIT_EXCEEDED" | "NOT_ACCEPTABLE" | "TYPE_MISMATCH">>
+  get: (request: { input: GetInput, task?: boolean }) => Promise<{} | null | undefined | CodedError<"NOT_FOUND" | "LIMIT_EXCEEDED" | "NOT_ACCEPTABLE" | "TYPE_MISMATCH">>
+  head: (request: { input: HeadInput, task?: boolean }) => Promise<{} | null | undefined | CodedError<"NOT_FOUND" | "LIMIT_EXCEEDED" | "NOT_ACCEPTABLE" | "TYPE_MISMATCH">>
+  delete: (request: { input: DeleteInput, task?: boolean }) => Promise<{} | null | undefined | CodedError<"NOT_FOUND" | "LIMIT_EXCEEDED" | "NOT_ACCEPTABLE" | "TYPE_MISMATCH">>
 }

package/components/identity.basic/operations/authenticate.js

@@ -21,10 +21,6 @@ export async function computation(input, context) {
     else
         return ERR_PASSWORD_MISMATCH;
 }
-const ERR_NOT_FOUND = new (class NotFoundError extends Error {
-    code = 'NOT_FOUND';
-})();
-const ERR_PASSWORD_MISMATCH = new (class PasswordMismatchError extends Error {
-    code = 'PASSWORD_MISMATCH';
-})();
-//# sourceMappingURL=data:application/json;base64,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
+const ERR_NOT_FOUND = new Error('NOT_FOUND');
+const ERR_PASSWORD_MISMATCH = new Error('PASSWORD_MISMATCH');
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.basic/operations/incept.js

@@ -32,7 +32,5 @@ async function principal(credentials, id, context) {
         return;
     await context.remote.identity.roles.principal({ input: { id } });
 }
-const INVALID_CREDENTIALS = new (class InvalidCredentialsError extends Error {
-    code = 'INVALID_CREDENTIALS';
-})();
-//# sourceMappingURL=data:application/json;base64,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
+const INVALID_CREDENTIALS = new Error('INVALID_CREDENTIALS');
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.basic/operations/transit.js

@@ -57,20 +57,8 @@ function toRx(expressions) {
 function invalid(value, expressions) {
     return expressions.some((expression) => !expression.test(value));
 }
-const ERR_PRINCIPAL_LOCKED = new (class PrincipalLockedError extends Error {
-    code = 'PRINCIPAL_LOCKED';
-    message = 'Principal username cannot be changed';
-})();
-const ERR_INVALID_USERNAME = new (class InvalidUsernameError extends Error {
-    code = 'INVALID_USERNAME';
-    message = 'Username is not meeting the requirements';
-})();
-const ERR_INVALID_PASSWORD = new (class InvalidPasswordError extends Error {
-    code = 'INVALID_PASSWORD';
-    message = 'Password is not meeting the requirements';
-})();
-const ERR_EXISTS = new (class ExistsError extends Error {
-    code = 'EXISTS';
-    message = 'Basic credentials already exist';
-})();
-//# sourceMappingURL=data:application/json;base64,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
+const ERR_PRINCIPAL_LOCKED = new Error('PRINCIPAL_LOCKED');
+const ERR_INVALID_USERNAME = new Error('INVALID_USERNAME');
+const ERR_INVALID_PASSWORD = new Error('INVALID_PASSWORD');
+const ERR_EXISTS = new Error('EXISTS');
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.basic/source/authenticate.ts

@@ -30,13 +30,9 @@ export async function computation(
   else return ERR_PASSWORD_MISMATCH
 }
 
-const ERR_NOT_FOUND = new (class NotFoundError extends Error {
-  public readonly code = 'NOT_FOUND'
-})()
+const ERR_NOT_FOUND = new Error('NOT_FOUND')
 
-const ERR_PASSWORD_MISMATCH = new (class PasswordMismatchError extends Error {
-  public readonly code = 'PASSWORD_MISMATCH'
-})()
+const ERR_PASSWORD_MISMATCH = new Error('PASSWORD_MISMATCH')
 
 interface Input {
   authority: string

package/components/identity.basic/source/incept.ts

@@ -50,9 +50,7 @@ async function principal(
   await context.remote.identity.roles.principal({ input: { id } })
 }
 
-const INVALID_CREDENTIALS = new (class InvalidCredentialsError extends Error {
-  public readonly code = 'INVALID_CREDENTIALS'
-})()
+const INVALID_CREDENTIALS = new Error('INVALID_CREDENTIALS')
 
 interface Credentials {
   authority: string

package/components/identity.basic/source/transit.ts

@@ -83,25 +83,13 @@ function invalid(value: string, expressions: RegExp[]): boolean {
   return expressions.some((expression) => !expression.test(value))
 }
 
-const ERR_PRINCIPAL_LOCKED = new (class PrincipalLockedError extends Error {
-  public readonly code = 'PRINCIPAL_LOCKED'
-  public override readonly message = 'Principal username cannot be changed'
-})()
-
-const ERR_INVALID_USERNAME = new (class InvalidUsernameError extends Error {
-  public readonly code = 'INVALID_USERNAME'
-  public override readonly message = 'Username is not meeting the requirements'
-})()
-
-const ERR_INVALID_PASSWORD = new (class InvalidPasswordError extends Error {
-  public readonly code = 'INVALID_PASSWORD'
-  public override readonly message = 'Password is not meeting the requirements'
-})()
-
-const ERR_EXISTS = new (class ExistsError extends Error {
-  public readonly code = 'EXISTS'
-  public override readonly message = 'Basic credentials already exist'
-})()
+const ERR_PRINCIPAL_LOCKED = new Error('PRINCIPAL_LOCKED')
+
+const ERR_INVALID_USERNAME = new Error('INVALID_USERNAME')
+
+const ERR_INVALID_PASSWORD = new Error('INVALID_PASSWORD')
+
+const ERR_EXISTS = new Error('EXISTS')
 
 type Tokens = Context['remote']['identity']['tokens']
 type Keys = Context['remote']['identity']['keys']

package/components/identity.basic/types/index.d.ts

@@ -2,7 +2,7 @@ export * from './toa.d.ts'
 
 // What a manifest does not state belongs here, and every run keeps it.
 
-import type { Query, RemoteError } from '@toa.io/core/types'
+import type { Query, CodedError } from '@toa.io/core/types'
 import type { Component, Configuration } from './toa.d.ts'
 
 /** Credentials whose Identity is granted the `system` role. */
@@ -13,12 +13,12 @@ export interface Context {
   local: Component
   remote: {
     identity: {
-      tokens: { revoke: (request: { query: Query }) => Promise<null | RemoteError> }
+      tokens: { revoke: (request: { query: Query }) => Promise<null | CodedError> }
       keys: {
-        revoke: (request: { input: { identity: string } }) => Promise<null | RemoteError>
+        revoke: (request: { input: { identity: string } }) => Promise<null | CodedError>
       }
       roles: {
-        principal: (request: { input: { id: string } }) => Promise<null | RemoteError>
+        principal: (request: { input: { id: string } }) => Promise<null | CodedError>
       }
     }
   }

package/components/identity.basic/types/toa.d.ts

@@ -1,7 +1,7 @@
 // Written by `toa types`. Every run rewrites it.
 // What a manifest does not state belongs in a file of your own.
 
-import type { Query, RemoteError } from '@toa.io/core/types'
+import type { CodedError, Query } from '@toa.io/core/types'
 import type { Secret } from '@toa.io/extensions.configuration'
 import type { FetchInit } from '@toa.io/extensions.fetch'
 import type { Logs, Metrics, Span } from '@toa.io/extensions.telemetry'
@@ -94,11 +94,11 @@ export type DeleteInput = {
 }
 
 export interface Component {
-  transit: (request: { input: TransitInput, query?: Query<Entity>, task?: boolean }) => Promise<TransitOutput | RemoteError<"PRINCIPAL_LOCKED" | "INVALID_USERNAME" | "INVALID_PASSWORD" | "EXISTS">>
-  create: (request: { input: CreateInput, task?: boolean }) => Promise<CreateOutput | RemoteError<"PRINCIPAL_LOCKED" | "INVALID_USERNAME" | "INVALID_PASSWORD" | "EXISTS">>
-  add: (request: { input: AddInput, task?: boolean }) => Promise<unknown | RemoteError<"PRINCIPAL_LOCKED" | "INVALID_USERNAME" | "INVALID_PASSWORD" | "EXISTS">>
-  incept: (request: { input: InceptInput, task?: boolean }) => Promise<InceptOutput | RemoteError<"INVALID_CREDENTIALS">>
-  authenticate: (request: { input: AuthenticateInput, task?: boolean }) => Promise<AuthenticateOutput | RemoteError<"NOT_FOUND" | "PASSWORD_MISMATCH">>
+  transit: (request: { input: TransitInput, query?: Query<Entity>, task?: boolean }) => Promise<TransitOutput | CodedError<"PRINCIPAL_LOCKED" | "INVALID_USERNAME" | "INVALID_PASSWORD" | "EXISTS">>
+  create: (request: { input: CreateInput, task?: boolean }) => Promise<CreateOutput | CodedError<"PRINCIPAL_LOCKED" | "INVALID_USERNAME" | "INVALID_PASSWORD" | "EXISTS">>
+  add: (request: { input: AddInput, task?: boolean }) => Promise<{} | null | undefined | CodedError<"PRINCIPAL_LOCKED" | "INVALID_USERNAME" | "INVALID_PASSWORD" | "EXISTS">>
+  incept: (request: { input: InceptInput, task?: boolean }) => Promise<InceptOutput | CodedError<"INVALID_CREDENTIALS">>
+  authenticate: (request: { input: AuthenticateInput, task?: boolean }) => Promise<AuthenticateOutput | CodedError<"NOT_FOUND" | "PASSWORD_MISMATCH">>
   check: (request: { input: CheckInput, task?: boolean }) => Promise<CheckOutput>
   info: (request: { input: InfoInput, task?: boolean }) => Promise<InfoOutput>
   delete: (request: { input: DeleteInput, task?: boolean }) => Promise<unknown>

package/components/identity.clients/operations/lib/errors.js

@@ -1,5 +1,2 @@
-export const ERR_UNKNOWN_CLIENT = new (class UnknownClientError extends Error {
-    code = 'UNKNOWN_CLIENT';
-    message = 'No such client';
-})();
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZXJyb3JzLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc291cmNlL2xpYi9lcnJvcnMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsTUFBTSxDQUFDLE1BQU0sa0JBQWtCLEdBQUcsSUFBSSxDQUFDLE1BQU0sa0JBQW1CLFNBQVEsS0FBSztJQUMzRCxJQUFJLEdBQUcsZ0JBQWdCLENBQUE7SUFDZCxPQUFPLEdBQUcsZ0JBQWdCLENBQUE7Q0FDcEQsQ0FBQyxFQUFFLENBQUEifQ==
+export const ERR_UNKNOWN_CLIENT = new Error('UNKNOWN_CLIENT');
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZXJyb3JzLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc291cmNlL2xpYi9lcnJvcnMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsTUFBTSxDQUFDLE1BQU0sa0JBQWtCLEdBQUcsSUFBSSxLQUFLLENBQUMsZ0JBQWdCLENBQUMsQ0FBQSJ9

package/components/identity.clients/source/lib/errors.ts

@@ -1,4 +1 @@
-export const ERR_UNKNOWN_CLIENT = new (class UnknownClientError extends Error {
-  public readonly code = 'UNKNOWN_CLIENT'
-  public override readonly message = 'No such client'
-})()
+export const ERR_UNKNOWN_CLIENT = new Error('UNKNOWN_CLIENT')

package/components/identity.clients/types/toa.d.ts

@@ -1,7 +1,7 @@
 // Written by `toa types`. Every run rewrites it.
 // What a manifest does not state belongs in a file of your own.
 
-import type { Query, RemoteError } from '@toa.io/core/types'
+import type { CodedError, Query } from '@toa.io/core/types'
 import type { FetchInit } from '@toa.io/extensions.fetch'
 import type { Stash } from '@toa.io/extensions.stash'
 import type { Logs, Metrics, Span } from '@toa.io/extensions.telemetry'
@@ -89,7 +89,7 @@ export type DescribeOutput = {
 export interface Component {
   transit: (request: { input: TransitInput, query?: Query<Entity>, task?: boolean }) => Promise<Entity>
   register: (request: { input: RegisterInput, task?: boolean }) => Promise<RegisterOutput>
-  describe: (request: { input: DescribeInput, task?: boolean }) => Promise<DescribeOutput | RemoteError<"UNKNOWN_CLIENT">>
+  describe: (request: { input: DescribeInput, task?: boolean }) => Promise<DescribeOutput | CodedError<"UNKNOWN_CLIENT">>
   assign: (request: { input?: null, query?: Query<Entity>, task?: boolean }) => Promise<Entity>
   ensure: (request: { input?: null, query?: Query<Entity>, task?: boolean }) => Promise<Entity>
   enumerate: (request: { input?: null, query?: Query<Entity>, task?: boolean }) => Promise<Entity[]>

package/components/identity.federation/migrations/0001-identity.yaml

@@ -0,0 +1,13 @@
+# Up to 1.0.0-alpha.256 a credential's id was the id of its Identity, and the record held no
+# `identity`. 1.0.0-alpha.257 reads the Identity from `identity` alone, so such a credential
+# authenticates as nobody, and two of them under one issuer are the same key of
+# `unique_identity`, which `0002-indexes` then fails to make.
+#
+# First, for that reason. A database `0002-indexes` was applied to already, which held at most one
+# such credential under an issuer, has this applied at its next start all the same: each migration
+# is recorded on its own. A record written since 1.0.0-alpha.257 holds `identity`, and is left as
+# it is.
+- update:
+    filter: { identity: { $exists: false } }
+    update:
+      - $set: { identity: '$_id' }

package/components/identity.federation/operations/authenticate.js

@@ -26,7 +26,5 @@ export async function effect({ scheme, authority, credentials }, context) {
         await principal(credential, context);
     return { identity: { id: credential.identity, claims } };
 }
-const ERR_NOT_FOUND = new (class NotFoundError extends Error {
-    code = 'NOT_FOUND';
-})();
-//# sourceMappingURL=data:application/json;base64,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
+const ERR_NOT_FOUND = new Error('NOT_FOUND');
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.federation/operations/create.js

@@ -22,8 +22,5 @@ export async function effect(input, context) {
         query: { id: existent.id, deleted: true }
     });
 }
-const ERR_EXISTS = new (class ExistsError extends Error {
-    code = 'EXISTS';
-    message = 'Federation credentials are associated with another Identity';
-})();
-//# sourceMappingURL=data:application/json;base64,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
+const ERR_EXISTS = new Error('EXISTS');
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.federation/operations/lib/errors.js

@@ -1,45 +1,12 @@
-export const ERR_TOKEN = new (class TokenError extends Error {
-    code = 'TOKEN';
-    message = 'Token is malformed or does not verify';
-})();
-export const ERR_TRUST = new (class TrustError extends Error {
-    code = 'TRUST';
-    message = 'Issuer not trusted';
-})();
-export const ERR_RESPONSE = new (class ResponseError extends Error {
-    code = 'RESPONSE';
-    message = 'Request to IDP failed';
-})();
-export const ERR_CONFIG = new (class ConfigError extends Error {
-    code = 'CONFIG';
-    message = 'Invalid OpenID configuration';
-})();
-export const ERR_NO_TOKEN = new (class NoTokenError extends Error {
-    code = 'NO_TOKEN';
-    message = 'No ID token received';
-})();
-export const ERR_ISS = new (class IssError extends Error {
-    code = 'ISS';
-    message = 'Invalid issuer claim';
-})();
-export const ERR_SUB = new (class SubError extends Error {
-    code = 'SUB';
-    message = 'Invalid subject claim';
-})();
-export const ERR_EXP = new (class ExpError extends Error {
-    code = 'EXP';
-    message = 'Token does not have an expiration time';
-})();
-export const ERR_REPLAY = new (class ReplayError extends Error {
-    code = 'REPLAY';
-    message = 'Token has already been used';
-})();
-export const ERR_CODE_NOT_ENABLED = new (class CodeNotEnabledError extends Error {
-    code = 'CODE_NOT_ENABLED';
-    message = 'Authorization code flow is not configured';
-})();
-export const ERR_CODE_SCHEMA = new (class CodeSchemaError extends Error {
-    code = 'CODE_SCHEMA';
-    message = 'Invalid code credentials';
-})();
-//# sourceMappingURL=data:application/json;base64,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
+export const ERR_TOKEN = new Error('TOKEN');
+export const ERR_TRUST = new Error('TRUST');
+export const ERR_RESPONSE = new Error('RESPONSE');
+export const ERR_CONFIG = new Error('CONFIG');
+export const ERR_NO_TOKEN = new Error('NO_TOKEN');
+export const ERR_ISS = new Error('ISS');
+export const ERR_SUB = new Error('SUB');
+export const ERR_EXP = new Error('EXP');
+export const ERR_REPLAY = new Error('REPLAY');
+export const ERR_CODE_NOT_ENABLED = new Error('CODE_NOT_ENABLED');
+export const ERR_CODE_SCHEMA = new Error('CODE_SCHEMA');
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.federation/source/authenticate.ts

@@ -42,9 +42,7 @@ export async function effect(
   return { identity: { id: credential.identity, claims } }
 }
 
-const ERR_NOT_FOUND = new (class NotFoundError extends Error {
-  public readonly code = 'NOT_FOUND'
-})()
+const ERR_NOT_FOUND = new Error('NOT_FOUND')
 
 interface Input {
   scheme: Scheme

package/components/identity.federation/source/create.ts

@@ -37,8 +37,4 @@ export interface Input {
   id: string
 }
 
-const ERR_EXISTS = new (class ExistsError extends Error {
-  public readonly code = 'EXISTS'
-  public override readonly message =
-    'Federation credentials are associated with another Identity'
-})()
+const ERR_EXISTS = new Error('EXISTS')

package/components/identity.federation/source/lib/errors.ts

@@ -1,54 +1,21 @@
-export const ERR_TOKEN = new (class TokenError extends Error {
-  public readonly code = 'TOKEN'
-  public override readonly message = 'Token is malformed or does not verify'
-})()
-
-export const ERR_TRUST = new (class TrustError extends Error {
-  public readonly code = 'TRUST'
-  public override readonly message = 'Issuer not trusted'
-})()
-
-export const ERR_RESPONSE = new (class ResponseError extends Error {
-  public readonly code = 'RESPONSE'
-  public override readonly message = 'Request to IDP failed'
-})()
-
-export const ERR_CONFIG = new (class ConfigError extends Error {
-  public readonly code = 'CONFIG'
-  public override readonly message = 'Invalid OpenID configuration'
-})()
-
-export const ERR_NO_TOKEN = new (class NoTokenError extends Error {
-  public readonly code = 'NO_TOKEN'
-  public override readonly message = 'No ID token received'
-})()
-
-export const ERR_ISS = new (class IssError extends Error {
-  public readonly code = 'ISS'
-  public override readonly message = 'Invalid issuer claim'
-})()
-
-export const ERR_SUB = new (class SubError extends Error {
-  public readonly code = 'SUB'
-  public override readonly message = 'Invalid subject claim'
-})()
-
-export const ERR_EXP = new (class ExpError extends Error {
-  public readonly code = 'EXP'
-  public override readonly message = 'Token does not have an expiration time'
-})()
-
-export const ERR_REPLAY = new (class ReplayError extends Error {
-  public readonly code = 'REPLAY'
-  public override readonly message = 'Token has already been used'
-})()
-
-export const ERR_CODE_NOT_ENABLED = new (class CodeNotEnabledError extends Error {
-  public readonly code = 'CODE_NOT_ENABLED'
-  public override readonly message = 'Authorization code flow is not configured'
-})()
-
-export const ERR_CODE_SCHEMA = new (class CodeSchemaError extends Error {
-  public readonly code = 'CODE_SCHEMA'
-  public override readonly message = 'Invalid code credentials'
-})()
+export const ERR_TOKEN = new Error('TOKEN')
+
+export const ERR_TRUST = new Error('TRUST')
+
+export const ERR_RESPONSE = new Error('RESPONSE')
+
+export const ERR_CONFIG = new Error('CONFIG')
+
+export const ERR_NO_TOKEN = new Error('NO_TOKEN')
+
+export const ERR_ISS = new Error('ISS')
+
+export const ERR_SUB = new Error('SUB')
+
+export const ERR_EXP = new Error('EXP')
+
+export const ERR_REPLAY = new Error('REPLAY')
+
+export const ERR_CODE_NOT_ENABLED = new Error('CODE_NOT_ENABLED')
+
+export const ERR_CODE_SCHEMA = new Error('CODE_SCHEMA')

package/components/identity.federation/types/toa.d.ts

@@ -1,7 +1,7 @@
 // Written by `toa types`. Every run rewrites it.
 // What a manifest does not state belongs in a file of your own.
 
-import type { Query, RemoteError } from '@toa.io/core/types'
+import type { CodedError, Query } from '@toa.io/core/types'
 import type { Secret } from '@toa.io/extensions.configuration'
 import type { FetchInit } from '@toa.io/extensions.fetch'
 import type { Logs, Metrics, Span } from '@toa.io/extensions.telemetry'
@@ -91,9 +91,9 @@ export type DeleteInput = {
 
 export interface Component {
   transit: (request: { input: TransitInput, query?: Query<Entity>, task?: boolean }) => Promise<Entity>
-  create: (request: { input: CreateInput, task?: boolean }) => Promise<unknown | RemoteError<"EXISTS" | "TOKEN" | "TRUST" | "RESPONSE" | "CONFIG" | "NO_TOKEN" | "ISS" | "SUB" | "EXP" | "REPLAY" | "CODE_NOT_ENABLED" | "CODE_SCHEMA">>
-  incept: (request: { input: InceptInput, task?: boolean }) => Promise<InceptOutput | RemoteError<"EXISTS" | "TOKEN" | "TRUST" | "RESPONSE" | "CONFIG" | "NO_TOKEN" | "ISS" | "SUB" | "EXP" | "REPLAY" | "CODE_NOT_ENABLED" | "CODE_SCHEMA">>
-  authenticate: (request: { input: AuthenticateInput, task?: boolean }) => Promise<AuthenticateOutput | RemoteError<"NOT_FOUND" | "TOKEN" | "TRUST" | "RESPONSE" | "CONFIG" | "NO_TOKEN" | "ISS" | "SUB" | "EXP" | "REPLAY" | "CODE_NOT_ENABLED" | "CODE_SCHEMA">>
+  create: (request: { input: CreateInput, task?: boolean }) => Promise<{} | null | undefined | CodedError<"EXISTS" | "TOKEN" | "TRUST" | "RESPONSE" | "CONFIG" | "NO_TOKEN" | "ISS" | "SUB" | "EXP" | "REPLAY" | "CODE_NOT_ENABLED" | "CODE_SCHEMA">>
+  incept: (request: { input: InceptInput, task?: boolean }) => Promise<InceptOutput | CodedError<"EXISTS" | "TOKEN" | "TRUST" | "RESPONSE" | "CONFIG" | "NO_TOKEN" | "ISS" | "SUB" | "EXP" | "REPLAY" | "CODE_NOT_ENABLED" | "CODE_SCHEMA">>
+  authenticate: (request: { input: AuthenticateInput, task?: boolean }) => Promise<AuthenticateOutput | CodedError<"NOT_FOUND" | "TOKEN" | "TRUST" | "RESPONSE" | "CONFIG" | "NO_TOKEN" | "ISS" | "SUB" | "EXP" | "REPLAY" | "CODE_NOT_ENABLED" | "CODE_SCHEMA">>
   decode: (request: { input: DecodeInput, task?: boolean }) => Promise<DecodeOutput>
   list: (request: { input: ListInput, task?: boolean }) => Promise<unknown>
   delete: (request: { input: DeleteInput, task?: boolean }) => Promise<unknown>

package/components/identity.grants/operations/revoke.js

@@ -20,7 +20,5 @@ export class Transition {
         entry.revokedAt = Date.now();
     }
 }
-const ERR_NOT_FOUND = new (class NotFoundError extends Error {
-    code = 'NOT_FOUND';
-})();
-//# sourceMappingURL=data:application/json;base64,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
+const ERR_NOT_FOUND = new Error('NOT_FOUND');
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.grants/source/revoke.ts

@@ -30,9 +30,7 @@ export class Transition implements Operation {
   }
 }
 
-const ERR_NOT_FOUND = new (class NotFoundError extends Error {
-  public readonly code = 'NOT_FOUND'
-})()
+const ERR_NOT_FOUND = new Error('NOT_FOUND')
 
 interface Input {
   authority: string

package/components/identity.grants/types/toa.d.ts

@@ -1,7 +1,7 @@
 // Written by `toa types`. Every run rewrites it.
 // What a manifest does not state belongs in a file of your own.
 
-import type { Query, RemoteError } from '@toa.io/core/types'
+import type { CodedError, Query } from '@toa.io/core/types'
 import type { FetchInit } from '@toa.io/extensions.fetch'
 import type { Stash } from '@toa.io/extensions.stash'
 import type { Logs, Metrics, Span } from '@toa.io/extensions.telemetry'
@@ -94,7 +94,7 @@ export interface Component {
   authorize: (request: { input: AuthorizeInput, task?: boolean }) => Promise<AuthorizeOutput>
   exchange: (request: { input: ExchangeInput, task?: boolean }) => Promise<ExchangeOutput>
   list: (request: { input: ListInput, task?: boolean }) => Promise<unknown>
-  revoke: (request: { input: RevokeInput, query?: Query<Entity>, task?: boolean }) => Promise<RevokeOutput | RemoteError<"NOT_FOUND">>
+  revoke: (request: { input: RevokeInput, query?: Query<Entity>, task?: boolean }) => Promise<RevokeOutput | CodedError<"NOT_FOUND">>
   assign: (request: { input?: null, query?: Query<Entity>, task?: boolean }) => Promise<Entity>
   ensure: (request: { input?: null, query?: Query<Entity>, task?: boolean }) => Promise<Entity>
   enumerate: (request: { input?: null, query?: Query<Entity>, task?: boolean }) => Promise<Entity[]>