@trypattern/sdk 0.1.32 → 0.1.34

package/dist/components/SegmentedControl.js

@@ -2,15 +2,15 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { Radio } from '@base-ui/react/radio';
 import { RadioGroup } from '@base-ui/react/radio-group';
 import * as stylex from '@stylexjs/stylex';
-import { borders, colors, fontWeights, motion, radii } from "../theme/tokens.stylex.js";
+import { borders, colors, fontSizes, fontWeights, lineHeights, motion, radii, space } from "../theme/tokens.stylex.js";
 import { interact } from "./interaction.js";
-import { controlSizes, focusRing } from "./controlLook.js";
+import { buttonCorners, controlSizes, focusRing } from "./controlLook.js";
 export function SegmentedControl({ label, value, options, size = 'md', disabled = false, onChange, style }) {
     const index = Math.max(0, options.findIndex((option) => option.value === value));
     return (_jsxs(RadioGroup, { "aria-label": label, value: value, disabled: disabled, onValueChange: (next) => {
             interact({ primitive: 'SegmentedControl', event: 'change', label });
             onChange(next);
-        }, className: stylex.props(styles.group, style).className, children: [_jsx("span", { ...stylex.props(styles.indicator(index, options.length)) }), options.map((option) => (_jsx(Radio.Root, { value: option.value, className: (state) => stylex.props(styles.option, controlSizes[size], !disabled && styles.hoverable, state.checked && styles.optionChecked, disabled && styles.disabled, focusRing.visible).className, children: option.label }, option.value)))] }));
+        }, className: stylex.props(styles.group, style).className, children: [_jsx("span", { ...stylex.props(styles.indicator(index, options.length)) }), options.map((option) => (_jsxs(Radio.Root, { value: option.value, className: (state) => stylex.props(styles.option, controlSizes[size], buttonCorners[size], !disabled && styles.hoverable, state.checked && styles.optionChecked, disabled && styles.disabled, focusRing.visible).className, children: [option.label, option.count === undefined ? null : (_jsx("span", { ...stylex.props(styles.count), children: option.count }))] }, option.value)))] }));
 }
 const styles = stylex.create({
     group: {
@@ -44,6 +44,7 @@ const styles = stylex.create({
         position: 'relative',
         zIndex: 1,
         display: 'inline-flex',
+        gap: `calc(${space.xs} + ${space.xxs})`,
         alignItems: 'center',
         justifyContent: 'center',
         color: colors.secondaryForeground,
@@ -64,5 +65,11 @@ const styles = stylex.create({
     },
     disabled: {
         color: colors.disabledForeground
+    },
+    count: {
+        fontSize: fontSizes.captionLg,
+        fontWeight: fontWeights.normal,
+        lineHeight: lineHeights.caption,
+        color: colors.tertiaryForeground
     }
 });

package/dist/components/Sidebar.d.ts

@@ -6,6 +6,7 @@ export type SidebarLink = {
     to: AppPath;
     icon: IconName;
     count?: number | null;
+    countTone?: 'quiet' | 'brand';
 };
 type SidebarProps = {
     workspace: string;

package/dist/components/Sidebar.js

@@ -1,7 +1,7 @@
 import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
 import * as stylex from '@stylexjs/stylex';
 import { NavLink } from 'react-router';
-import { breakpoints, colors, controls, iconSizes, layers, motion, radii, shadows, space, widths } from "../theme/tokens.stylex.js";
+import { breakpoints, colors, controls, fontSizes, fontWeights, iconSizes, layers, lineHeights, motion, radii, shadows, space, widths } from "../theme/tokens.stylex.js";
 import { Badge } from "./Badge.js";
 import { focusRing } from "./controlLook.js";
 import { Button } from "./Button.js";
@@ -16,7 +16,8 @@ export function Sidebar({ workspace, workspaceMenu, links, isToggled, isAnimatin
         onFollowLink();
     };
     return (_jsxs("nav", { ...stylex.props(styles.sidebar, isToggled && styles.sidebarToggled, isAnimating && styles.sidebarAnimating), children: [_jsx("div", { ...stylex.props(styles.header), children: _jsx(Menu, { trigger: _jsxs(_Fragment, { children: [_jsx("span", { ...stylex.props(styles.logo), children: _jsx(Text, { variant: "caption", children: workspace.charAt(0) }) }), _jsx(Text, { variant: "label", isTruncated: true, children: workspace }), _jsx(Icon, { name: "chevronDown" })] }), items: workspaceMenu }) }), onSearch === undefined ? null : (_jsx(Button, { variant: "secondary", icon: "search", shortcut: ['mod', 'k'], isFullWidth: true, align: "start", onClick: onSearch, children: "Search" })), _jsx("div", { ...stylex.props(styles.body), children: _jsx(ScrollArea, { children: _jsxs("div", { ...stylex.props(styles.group), children: [_jsx("span", { ...stylex.props(styles.groupLabel), children: _jsx(Text, { variant: "label", tone: "tertiary", children: "Workspace" }) }), links.map((item) => (_jsxs(NavLink, { onClick: () => followLink(item), to: item.to, end: item.to === '/' ||
-                                    links.some((other) => String(other.to).startsWith(`${String(item.to)}/`)), className: ({ isActive }) => stylex.props(styles.item, isActive && styles.itemCurrent, focusRing.visible, focusRing.inside).className ?? '', children: [_jsx(Icon, { name: item.icon }), _jsx(Text, { variant: "label", isTruncated: true, style: styles.itemLabel, children: item.label }), typeof item.count !== 'number' ? null : (_jsx(Badge, { variant: "transparent", children: item.count }))] }, item.to)))] }) }) })] }));
+                                    links.some((other) => String(other.to).startsWith(`${String(item.to)}/`)), className: ({ isActive }) => stylex.props(styles.item, isActive && styles.itemCurrent, focusRing.visible, focusRing.inside).className ?? '', children: [_jsx(Icon, { name: item.icon }), _jsx(Text, { variant: "label", isTruncated: true, style: styles.itemLabel, children: item.label }), typeof item.count !== 'number' ? null : item.countTone ===
+                                        'brand' ? (_jsx("span", { ...stylex.props(styles.count), children: item.count })) : (_jsx(Badge, { variant: "transparent", children: item.count }))] }, item.to)))] }) }) })] }));
 }
 const styles = stylex.create({
     sidebar: {
@@ -132,6 +133,21 @@ const styles = stylex.create({
         color: colors.primaryForeground,
         backgroundColor: colors.transparentHover
     },
+    count: {
+        display: 'inline-flex',
+        flexShrink: 0,
+        alignItems: 'center',
+        justifyContent: 'center',
+        minWidth: `calc(${space.lg} + ${space.xxs})`,
+        height: `calc(${space.lg} + ${space.xxs})`,
+        paddingInline: `calc(${space.xs} + ${space.xxs} / 2)`,
+        fontSize: fontSizes.captionSm,
+        fontWeight: fontWeights.medium,
+        lineHeight: lineHeights.caption,
+        color: colors.onBrandSolidForeground,
+        backgroundColor: colors.brandSolid,
+        borderRadius: radii.full
+    },
     itemLabel: {
         flexGrow: 1
     }

package/dist/components/TableRow.d.ts

@@ -2,8 +2,9 @@ import type { ReactNode } from 'react';
 type TableRowProps = {
     label: string;
     isCurrent?: boolean;
+    size?: 'md' | 'lg';
     onClick: () => void;
     children: ReactNode;
 };
-export declare function TableRow({ label, isCurrent, onClick, children }: TableRowProps): import("react").JSX.Element;
+export declare function TableRow({ label, isCurrent, size, onClick, children }: TableRowProps): import("react").JSX.Element;
 export {};

package/dist/components/TableRow.js

@@ -4,11 +4,11 @@ import * as stylex from '@stylexjs/stylex';
 import { borders, colors, space } from "../theme/tokens.stylex.js";
 import { focusRing } from "./controlLook.js";
 import { interact } from "./interaction.js";
-export function TableRow({ label, isCurrent = false, onClick, children }) {
+export function TableRow({ label, isCurrent = false, size = 'md', onClick, children }) {
     return (_jsx(BaseButton, { "aria-label": label, "aria-pressed": isCurrent, onClick: () => {
             interact({ primitive: 'TableRow', event: 'click', label });
             onClick();
-        }, className: stylex.props(styles.row, isCurrent && styles.current, focusRing.visible, focusRing.inside).className, children: children }));
+        }, className: stylex.props(styles.row, size === 'lg' && styles.large, isCurrent && styles.current, focusRing.visible, focusRing.inside).className, children: children }));
 }
 const styles = stylex.create({
     row: {
@@ -30,6 +30,9 @@ const styles = stylex.create({
         borderBottomStyle: 'solid',
         borderBottomWidth: borders.thin
     },
+    large: {
+        height: `calc(${space.xxxl} + ${space.sm})`
+    },
     current: {
         backgroundColor: colors.transparentHover
     }

package/dist/components/icons.js

@@ -102,8 +102,7 @@ const builtInIcons = {
     ],
     arrowDown: 'M12 5v14M6 13l6 6 6-6',
     logOut: [
-        'M14 4.5H7.5a2 2 0 0 0-2 2v11a2 2 0 0 0 2 2H14',
-        'M19.5 12H10M16 8.5l3.5 3.5-3.5 3.5'
+        'M20.25 12L9 12M20.25 12L15.75 16.5M20.25 12L15.75 7.5M11.25 20.25H5.75C4.64543 20.25 3.75 19.3546 3.75 18.25L3.75 5.75C3.75 4.64543 4.64543 3.75 5.75 3.75L11.25 3.75'
     ],
     today: 'M11.998 3.291V1.768M5.84 18.159L4.763 19.236M11.998 22.233V20.709M19.233 4.765L18.156 5.842M20.707 12H22.23M18.156 18.159L19.233 19.236M1.766 12H3.289M4.763 4.765L5.84 5.842M15.71 8.288C17.761 10.338 17.761 13.662 15.71 15.712C13.66 17.763 10.336 17.763 8.286 15.712C6.235 13.662 6.235 10.338 8.286 8.288C10.336 6.238 13.66 6.238 15.71 8.288Z',
     checklist: 'M11.75 16.25H20.25M11.75 7.75H20.25M3.75 8.625L5.417 9.75L8.75 5.25M3.75 17.625L5.417 18.75L8.75 14.25',

package/dist/flows/browser.js

@@ -4,6 +4,7 @@ export const viewports = {
     compact: { width: 390, height: 844, deviceScaleFactor: 2 }
 };
 export const viewportNames = ['desktop', 'compact'];
+const STAND_IN_PHOTO = '<svg xmlns="http://www.w3.org/2000/svg" width="4" height="3"><rect width="4" height="3" fill="#d9d4c8"/></svg>';
 const QUIET_NETWORK_MS = 250;
 const SETTLE_TIMEOUT_MS = 10_000;
 const HOOK_TIMEOUT_MS = 10_000;
@@ -122,6 +123,12 @@ export async function openApp(browser, baseUrl, path, viewport, signedInAs, memo
             });
         }, { ...memory, signedInAs });
     }
+    await context.route((url) => url.origin !== new URL(baseUrl).origin, (route) => route.request().resourceType() === 'image'
+        ? route.fulfill({
+            contentType: 'image/svg+xml',
+            body: STAND_IN_PHOTO
+        })
+        : route.continue());
     const page = await context.newPage();
     const problems = [];
     recordProblems(page, problems);

package/dist/index.d.ts

@@ -1,6 +1,8 @@
 export { defineApp } from './app.ts';
 export { Bookings, bookings } from './bookingsStore.ts';
 export type { BookingsWorld } from './bookingsMemory.ts';
+export { Inquiries, inquiries } from './inquiriesStore.ts';
+export type { InquiriesWorld } from './inquiriesStore.ts';
 export type { AppBlock } from './blocks.ts';
 export { ActionsStore, bindActions, rankActions } from './actions.ts';
 export type { Action, ActionsBuilder } from './actions.ts';

package/dist/index.js

@@ -1,5 +1,6 @@
 export { defineApp } from "./app.js";
 export { Bookings, bookings } from "./bookingsStore.js";
+export { Inquiries, inquiries } from "./inquiriesStore.js";
 export { ActionsStore, bindActions, rankActions } from "./actions.js";
 export { startApp } from "./start.js";
 export { appearance } from "./appearance.js";

package/dist/inquiriesStore.d.ts

@@ -0,0 +1,134 @@
+import { z } from 'zod';
+import type { WriteOutcome } from './access.ts';
+import { inquiryValue } from './requests.ts';
+import type { ServiceClient, ServiceMemory } from './services.ts';
+type Fields = Readonly<Record<string, z.output<typeof inquiryValue>>>;
+export type InquiriesWorld = {
+    sent?: {
+        source: string;
+        id: string;
+        fields: Fields;
+    }[];
+    sources?: string[];
+};
+declare const Inquiries_base: import("./store.ts").StoreClass<{
+    sent: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        source: z.ZodString;
+        id: z.ZodString;
+    }, z.core.$strip>>>;
+    isSending: z.ZodDefault<z.ZodBoolean>;
+}, [], ServiceClient<{
+    readonly inquiries: {
+        readonly send: NoInfer<import("./services.ts").ServiceCall<"/requests/:source", {
+            fields: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>;
+        }, z.ZodObject<{
+            id: z.ZodString;
+        }, z.core.$strip>, false>>;
+    };
+}>>;
+export declare class Inquiries extends Inquiries_base {
+    send(source: string, fields: Fields): Promise<WriteOutcome>;
+}
+export declare const inquiries: {
+    readonly name: "inquiries";
+    readonly tables: {
+        requestStates: import("./table.ts").TableOf<"requestStates", {
+            readonly columns: {
+                readonly source: z.ZodString;
+                readonly requestId: z.ZodString;
+                readonly state: z.ZodEnum<{
+                    done: "done";
+                    open: "open";
+                }>;
+                readonly revision: z.ZodNumber;
+                readonly sequence: z.ZodNumber;
+                readonly updatedAt: z.ZodString;
+            };
+            readonly access: {
+                readonly read: "server";
+                readonly create: "server";
+                readonly update: "server";
+                readonly delete: "server";
+            };
+            readonly writes: "confirmed";
+        }>;
+        requestEvents: import("./table.ts").TableOf<"requestEvents", {
+            readonly columns: {
+                readonly source: z.ZodString;
+                readonly requestId: z.ZodString;
+                readonly kind: z.ZodEnum<{
+                    done: "done";
+                    accepted: "accepted";
+                    declined: "declined";
+                    replied: "replied";
+                    received: "received";
+                }>;
+            };
+            readonly access: {
+                readonly read: "server";
+                readonly create: "server";
+                readonly update: "server";
+                readonly delete: "server";
+            };
+            readonly writes: "confirmed";
+        }>;
+        requestOutbox: import("./table.ts").TableOf<"requestOutbox", {
+            readonly columns: {
+                readonly source: z.ZodString;
+                readonly requestId: z.ZodString;
+                readonly subject: z.ZodString;
+                readonly text: z.ZodString;
+                readonly replyTo: z.ZodString;
+                readonly status: z.ZodEnum<{
+                    failed: "failed";
+                    pending: "pending";
+                    sent: "sent";
+                    sending: "sending";
+                }>;
+                readonly attempts: z.ZodNumber;
+                readonly nextAt: z.ZodNullable<z.ZodString>;
+                readonly sentAt: z.ZodNullable<z.ZodString>;
+                readonly claimedAt: z.ZodNullable<z.ZodString>;
+            };
+            readonly access: {
+                readonly read: "server";
+                readonly create: "server";
+                readonly update: "server";
+                readonly delete: "server";
+            };
+            readonly writes: "confirmed";
+        }>;
+        requestOperations: import("./table.ts").TableOf<"requestOperations", {
+            readonly columns: {
+                readonly result: z.ZodString;
+            };
+            readonly access: {
+                readonly read: "server";
+                readonly create: "server";
+                readonly update: "server";
+                readonly delete: "server";
+            };
+            readonly writes: "confirmed";
+        }>;
+    };
+    readonly services: {
+        readonly inquiries: {
+            readonly send: NoInfer<import("./services.ts").ServiceCall<"/requests/:source", {
+                fields: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>;
+            }, z.ZodObject<{
+                id: z.ZodString;
+            }, z.core.$strip>, false>>;
+        };
+    };
+    readonly memory: ServiceMemory<{
+        readonly inquiries: {
+            readonly send: NoInfer<import("./services.ts").ServiceCall<"/requests/:source", {
+                fields: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>;
+            }, z.ZodObject<{
+                id: z.ZodString;
+            }, z.core.$strip>, false>>;
+        };
+    }, unknown>;
+    readonly Store: typeof Inquiries;
+};
+export {};

package/dist/inquiriesStore.js

@@ -0,0 +1,64 @@
+import { z } from 'zod';
+import { inquiryServices, inquiryValue, requestTables } from "./requests.js";
+import { ServiceRefused, refused } from "./services.js";
+import { defineStore } from "./store.js";
+const Store = defineStore();
+function worldOf(world) {
+    const found = Reflect.get(Object(world), 'inquiries');
+    return typeof found === 'object' && found !== null ? found : {};
+}
+const inquiryMemory = {
+    inquiries: {
+        send: (world, { source, fields }) => {
+            const current = worldOf(world);
+            if (current.sources !== undefined && !current.sources.includes(source)) {
+                throw refused(404, 'No such form');
+            }
+            const sent = current.sent ?? [];
+            const id = `${source}-${sent.length + 1}`;
+            Reflect.set(Object(world), 'inquiries', {
+                ...current,
+                sent: [...sent, { source, id, fields }]
+            });
+            return { id };
+        }
+    }
+};
+function outcomeOf(error) {
+    if (!(error instanceof ServiceRefused))
+        return 'failed';
+    if (error.status === 400 || error.status === 404)
+        return 'forbidden';
+    return error.status === 409 ? 'conflict' : 'failed';
+}
+export class Inquiries extends Store({
+    state: {
+        sent: z
+            .object({ source: z.string(), id: z.string() })
+            .nullable()
+            .default(null),
+        isSending: z.boolean().default(false)
+    }
+}) {
+    async send(source, fields) {
+        this.set({ isSending: true });
+        try {
+            const { id } = await this.services.inquiries.send({ source, fields });
+            this.set({ sent: { source, id } });
+            return 'saved';
+        }
+        catch (error) {
+            return outcomeOf(error);
+        }
+        finally {
+            this.set({ isSending: false });
+        }
+    }
+}
+export const inquiries = {
+    name: 'inquiries',
+    tables: requestTables,
+    services: inquiryServices,
+    memory: inquiryMemory,
+    Store: Inquiries
+};

package/dist/media.d.ts

@@ -40,7 +40,8 @@ export type ImageSources = {
     width: number;
     height: number;
 };
-export declare function imageSources(image: MediaImage, { aspect, transforms }: {
+export declare function imageSources(image: MediaImage, { aspect, transforms, origin }: {
     aspect?: number | undefined;
     transforms: boolean;
+    origin?: string;
 }): ImageSources;

package/dist/media.js

@@ -46,14 +46,14 @@ function transformed(key, width, aspect) {
     ];
     return `/cdn-cgi/image/${options.join(',')}${mediaPath(key)}`;
 }
-export function imageSources(image, { aspect, transforms }) {
+export function imageSources(image, { aspect, transforms, origin = '' }) {
     const largest = largestWidth(image, aspect);
     const height = aspect === undefined
         ? image.height
         : Math.max(1, Math.round(largest / aspect));
     if (!transforms) {
         return {
-            src: mediaPath(image.key),
+            src: `${origin}${mediaPath(image.key)}`,
             srcSet: undefined,
             width: largest,
             height
@@ -64,9 +64,9 @@ export function imageSources(image, { aspect, transforms }) {
         largest
     ].filter((width, index, all) => all.indexOf(width) === index);
     return {
-        src: transformed(image.key, Math.min(FALLBACK_WIDTH, largest), aspect),
+        src: `${origin}${transformed(image.key, Math.min(FALLBACK_WIDTH, largest), aspect)}`,
         srcSet: widths
-            .map((width) => `${transformed(image.key, width, aspect)} ${width}w`)
+            .map((width) => `${origin}${transformed(image.key, width, aspect)} ${width}w`)
             .join(', '),
         width: largest,
         height

package/dist/patternAccess.d.ts

@@ -2,6 +2,8 @@ import { z } from 'zod';
 export declare const TABLES_READ = "tables:read";
 export declare const MEDIA_WRITE = "media:write";
 export declare const TABLES_WRITE = "tables:write";
+export declare const REQUESTS_READ = "requests:read";
+export declare const REQUESTS_ACT = "requests:act";
 export declare const ASSERTION_SECONDS = 60;
 export declare const NEXT_PAGE_HEADER = "x-pattern-next";
 export declare const assertionKey: z.ZodObject<{
@@ -16,17 +18,21 @@ declare const assertionScope: z.ZodEnum<{
     "tables:read": "tables:read";
     "media:write": "media:write";
     "tables:write": "tables:write";
+    "requests:read": "requests:read";
+    "requests:act": "requests:act";
 }>;
 export type AssertionScope = z.output<typeof assertionScope>;
-export declare function signAssertion(key: AssertionKey, { sub, aud, scope }: {
+export declare function signAssertion(key: AssertionKey, { sub, aud, scope, bound }: {
     sub: string;
     aud: string;
     scope: AssertionScope;
+    bound?: string;
 }, now: number): Promise<string>;
-export declare function verifiedAssertion(token: string, { hostname, keys, now, scope }: {
+export declare function verifiedAssertion(token: string, { hostname, keys, now, scope, bound }: {
     hostname: string;
     keys: Readonly<Record<string, string>>;
     now: number;
     scope: AssertionScope;
+    bound?: string;
 }): Promise<string | undefined>;
 export {};

package/dist/patternAccess.js

@@ -2,6 +2,8 @@ import { z } from 'zod';
 export const TABLES_READ = 'tables:read';
 export const MEDIA_WRITE = 'media:write';
 export const TABLES_WRITE = 'tables:write';
+export const REQUESTS_READ = 'requests:read';
+export const REQUESTS_ACT = 'requests:act';
 export const ASSERTION_SECONDS = 60;
 export const NEXT_PAGE_HEADER = 'x-pattern-next';
 const CLOCK_SKEW_SECONDS = 30;
@@ -13,7 +15,13 @@ export const assertionKey = z.object({
     x: z.string(),
     d: z.string()
 });
-const assertionScope = z.enum([TABLES_READ, TABLES_WRITE, MEDIA_WRITE]);
+const assertionScope = z.enum([
+    TABLES_READ,
+    TABLES_WRITE,
+    MEDIA_WRITE,
+    REQUESTS_READ,
+    REQUESTS_ACT
+]);
 const assertionHeader = z.object({
     alg: z.literal('EdDSA'),
     typ: z.literal('JWT'),
@@ -24,7 +32,8 @@ const assertionClaims = z.object({
     aud: z.string(),
     scope: assertionScope,
     iat: z.int(),
-    exp: z.int()
+    exp: z.int(),
+    bnd: z.string().optional()
 });
 const encoder = new TextEncoder();
 function base64url(bytes) {
@@ -56,14 +65,15 @@ function jsonOf(text) {
 function encoded(value) {
     return base64url(encoder.encode(JSON.stringify(value)));
 }
-export async function signAssertion(key, { sub, aud, scope }, now) {
+export async function signAssertion(key, { sub, aud, scope, bound }, now) {
     const privateKey = await crypto.subtle.importKey('jwk', { kty: key.kty, crv: key.crv, x: key.x, d: key.d }, ED25519, false, ['sign']);
     const signed = `${encoded({ alg: 'EdDSA', typ: 'JWT', kid: key.kid })}.${encoded({
         sub,
         aud,
         scope,
         iat: now,
-        exp: now + ASSERTION_SECONDS
+        exp: now + ASSERTION_SECONDS,
+        ...(bound === undefined ? {} : { bnd: bound })
     })}`;
     const signature = await crypto.subtle.sign(ED25519, privateKey, encoder.encode(signed));
     return `${signed}.${base64url(new Uint8Array(signature))}`;
@@ -83,7 +93,7 @@ async function isSignedBy(publicKey, signed, signature) {
         return false;
     }
 }
-export async function verifiedAssertion(token, { hostname, keys, now, scope }) {
+export async function verifiedAssertion(token, { hostname, keys, now, scope, bound }) {
     const [header, claims, signature, ...rest] = token.split('.');
     if (header === undefined ||
         claims === undefined ||
@@ -107,6 +117,8 @@ export async function verifiedAssertion(token, { hostname, keys, now, scope }) {
     const { sub, aud, iat, exp } = parsed.data;
     if (parsed.data.scope !== scope)
         return undefined;
+    if (bound !== undefined && parsed.data.bnd !== bound)
+        return undefined;
     const isFresh = exp > iat &&
         exp - iat <= ASSERTION_SECONDS &&
         iat <= now + CLOCK_SKEW_SECONDS &&