@venizia/ignis-kernel 0.2.0-4 → 0.2.0-41

package/dist/cjs/base/applications/types.d.ts

@@ -1,111 +0,0 @@
-import type { OpenAPIHono } from '@hono/zod-openapi';
-import type { ValueOrPromise } from '@venizia/ignis-helpers/common';
-import type { Context, Env, Schema } from 'hono';
-import type { IPRestrictionRules as IIPRestrictionRules } from 'hono/ip-restriction';
-import type { TControllerTransport } from '../controllers/common/constants';
-import type { IComponentMixin, IControllerMixin, IRepositoryMixin, IServiceMixin, IStaticServeMixin } from '../mixins/types';
-export interface IBaseMiddlewareOptions {
-    enable: boolean;
-    path?: string;
-    [extra: string | symbol]: any;
-}
-export interface ICompressOptions extends IBaseMiddlewareOptions {
-    encoding: 'gzip' | 'deflate';
-    threshold?: number;
-}
-export type TOrigin = string | string[] | ((origin: string, c: Context) => Promise<string | undefined | null> | string | undefined | null);
-export interface ICORSOptions extends IBaseMiddlewareOptions {
-    origin: TOrigin;
-    allowMethods?: string[] | ((origin: string, c: Context) => Promise<string[]> | string[]);
-    allowHeaders?: string[];
-    maxAge?: number;
-    credentials?: boolean;
-    exposeHeaders?: string[];
-}
-export type TIsAllowedOriginHandler = (origin: string, context: Context) => boolean;
-export declare const SecFetchSiteValues: readonly ["same-origin", "same-site", "none", "cross-site"];
-export type TSecFetchSite = (typeof SecFetchSiteValues)[number];
-export type TIsAllowedSecFetchSiteHandler = (secFetchSite: TSecFetchSite, context: Context) => boolean;
-export interface ICSRFOptions extends IBaseMiddlewareOptions {
-    origin?: string | string[] | TIsAllowedOriginHandler;
-    secFetchSite?: TSecFetchSite | TSecFetchSite[] | TIsAllowedSecFetchSiteHandler;
-}
-export interface IBodyLimitOptions extends IBaseMiddlewareOptions {
-    maxSize: number;
-    onError?: (c: Context) => Response | Promise<Response>;
-}
-export interface IRequestIdOptions extends IBaseMiddlewareOptions {
-}
-export interface IMiddlewareConfigs {
-    requestId?: IRequestIdOptions;
-    compress?: ICompressOptions;
-    cors?: ICORSOptions;
-    csrf?: ICSRFOptions;
-    bodyLimit?: IBodyLimitOptions;
-    ipRestriction?: IBaseMiddlewareOptions & IIPRestrictionRules;
-    [extra: string | symbol]: any;
-}
-/**
- * Structural mirror of `@venizia/ignis-boot`'s `IBootOptions` - kernel does not depend on boot
- * (boot sits beside kernel in the Makefile chain, `{boot, kernel} -> core`; importing boot's type
- * here would invert that). Both shapes are the same artifact-glob bag keyed by artifact type, so a
- * real `IBootOptions` value is structurally assignable to this without a cast.
- */
-export interface IApplicationArtifactOptions {
-    dirs?: string[];
-    extensions?: string[];
-    isNested?: boolean;
-    glob?: string;
-}
-export interface IApplicationBootOptions {
-    [artifactType: string]: IApplicationArtifactOptions | undefined;
-}
-/** No `host`/`port`: a browser Worker has neither, and carrying them here made one silently configured with `localhost:3000`. `@venizia/ignis` widens this shape with both - see its `IServerApplicationConfigs`. */
-export interface IApplicationConfigs {
-    path: {
-        base: string;
-        isStrict: boolean;
-    };
-    requestId?: {
-        isStrict: boolean;
-    };
-    favicon?: string;
-    /** `environment` is the host's ambient environment name. Set it where there is none to read - a browser Worker - so the error middleware can tell "no ambient environment" from "misconfigured". Absent on a server, which reads `process.env.NODE_ENV`. */
-    error?: {
-        rootKey?: string;
-        environment?: string;
-    };
-    asyncContext?: {
-        enable: boolean;
-    };
-    bootOptions?: IApplicationBootOptions;
-    debug?: {
-        shouldShowRoutes?: boolean;
-    };
-    /** Controller transports to enable. Defaults to ['rest']. */
-    transports?: TControllerTransport[];
-    [key: string]: any;
-}
-export interface IApplicationInfo {
-    name: string;
-    version: string;
-    description: string;
-    author?: {
-        name: string;
-        email: string;
-        url?: string;
-    };
-    [extra: string | symbol]: any;
-}
-/** Exactly what EVERY host implements. `getServerHost`/`getServerPort`/`getServerAddress`/`start`/`stop` are not here on purpose - a browser Worker can implement none of them; they live on `@venizia/ignis`'s `IServerApplication`. */
-export interface IApplication<AppEnv extends Env = Env, AppSchema extends Schema = Schema, BasePath extends string = '/'> {
-    getProjectRoot(): string;
-    getProjectConfigs(): IApplicationConfigs;
-    getServer(): OpenAPIHono<AppEnv, AppSchema, BasePath>;
-    getRootRouter(): OpenAPIHono<AppEnv, AppSchema, BasePath>;
-    setupMiddlewares(): ValueOrPromise<void>;
-    initialize(): ValueOrPromise<void>;
-}
-export interface IRestApplication extends IApplication, IComponentMixin, IControllerMixin, IRepositoryMixin, IServiceMixin, IStaticServeMixin {
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/cjs/base/applications/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/base/applications/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACjD,OAAO,KAAK,EAAE,kBAAkB,IAAI,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EAClB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAiB,SAAQ,sBAAsB;IAC9D,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,OAAO,GACf,MAAM,GACN,MAAM,EAAE,GACR,CAAC,CACC,MAAM,EAAE,MAAM,EACd,CAAC,EAAE,OAAO,KACP,OAAO,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;AACzE,MAAM,WAAW,YAAa,SAAQ,sBAAsB;IAC1D,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;IACzF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;AACpF,eAAO,MAAM,kBAAkB,6DAA8D,CAAC;AAC9F,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChE,MAAM,MAAM,6BAA6B,GAAG,CAC1C,YAAY,EAAE,aAAa,EAC3B,OAAO,EAAE,OAAO,KACb,OAAO,CAAC;AAEb,MAAM,WAAW,YAAa,SAAQ,sBAAsB;IAC1D,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,uBAAuB,CAAC;IACrD,YAAY,CAAC,EAAE,aAAa,GAAG,aAAa,EAAE,GAAG,6BAA6B,CAAC;CAChF;AAED,MAAM,WAAW,iBAAkB,SAAQ,sBAAsB;IAC/D,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,iBAAkB,SAAQ,sBAAsB;CAAG;AAEpE,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,aAAa,CAAC,EAAE,sBAAsB,GAAG,mBAAmB,CAAC;IAC7D,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED;;;;;GAKG;AACH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,CAAC,YAAY,EAAE,MAAM,GAAG,2BAA2B,GAAG,SAAS,CAAC;CACjE;AAED,qNAAqN;AACrN,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAC1C,SAAS,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4PAA4P;IAC5P,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,YAAY,CAAC,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IACnC,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,KAAK,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACvC,6DAA6D;IAC7D,UAAU,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACpC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,yOAAyO;AACzO,MAAM,WAAW,YAAY,CAC3B,MAAM,SAAS,GAAG,GAAG,GAAG,EACxB,SAAS,SAAS,MAAM,GAAG,MAAM,EACjC,QAAQ,SAAS,MAAM,GAAG,GAAG;IAE7B,cAAc,IAAI,MAAM,CAAC;IACzB,iBAAiB,IAAI,mBAAmB,CAAC;IACzC,SAAS,IAAI,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtD,aAAa,IAAI,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAE1D,gBAAgB,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IAEzC,UAAU,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,gBACf,SACE,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,iBAAiB;CAAG"}

package/dist/cjs/base/applications/types.js

@@ -1,5 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SecFetchSiteValues = void 0;
-exports.SecFetchSiteValues = ['same-origin', 'same-site', 'none', 'cross-site'];
-//# sourceMappingURL=types.js.map

package/dist/cjs/base/applications/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/base/applications/types.ts"],"names":[],"mappings":";;;AAyCa,QAAA,kBAAkB,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAU,CAAC"}

package/dist/cjs/base/auth/authenticate/common/constants.d.ts

@@ -1,86 +0,0 @@
-import type { TConstValue } from '@venizia/ignis-helpers/common';
-export declare class AuthenticateStrategy {
-    static readonly BASIC = "basic";
-    static readonly JWT = "jwt";
-    static readonly SERVICE = "service";
-    /** The strategies the FRAMEWORK ships. An application registers its own beyond these. */
-    static readonly SCHEME_SET: Set<string>;
-    static isValid(input: string): boolean;
-}
-export type TAuthStrategy = TConstValue<typeof AuthenticateStrategy> | (string & {});
-export declare class JOSEStandards {
-    static readonly JWS = "JWS";
-    static readonly JWKS = "JWKS";
-    static readonly SCHEME_SET: Set<string>;
-    static isValid(input: string): boolean;
-}
-export type TJOSEStandard = TConstValue<typeof JOSEStandards>;
-export declare class Authentication {
-    static readonly STRATEGY_BASIC = "basic";
-    static readonly STRATEGY_JWT = "jwt";
-    static readonly STRATEGY_SERVICE = "service";
-    static readonly TYPE_BASIC = "Basic";
-    static readonly TYPE_BEARER = "Bearer";
-    static readonly AUTHENTICATION_STRATEGY = "authentication.strategy";
-    static readonly SKIP_AUTHENTICATION = "authentication.skip";
-    static readonly CURRENT_USER = "auth.current.user";
-    static readonly AUDIT_USER_ID = "audit.user.id";
-}
-export declare class AuthenticationTokenTypes {
-    static readonly TYPE_AUTHORIZATION_CODE = "000_AUTHORIZATION_CODE";
-    static readonly TYPE_ACCESS_TOKEN = "100_ACCESS_TOKEN";
-    static readonly TYPE_REFRESH_TOKEN = "200_REFRESH_TOKEN";
-}
-export declare class AuthenticationModes {
-    static readonly ANY = "any";
-    static readonly ALL = "all";
-    static readonly SCHEME_SET: Set<string>;
-    static isValid(input: string): boolean;
-}
-export type TAuthMode = TConstValue<typeof AuthenticationModes>;
-export declare class JWKSModes {
-    static readonly ISSUER = "issuer";
-    static readonly VERIFIER = "verifier";
-    static readonly SCHEME_SET: Set<string>;
-    static isValid(input: string): boolean;
-}
-export type TJWKSMode = TConstValue<typeof JWKSModes>;
-export declare class JWKSKeyDrivers {
-    static readonly TEXT = "text";
-    static readonly FILE = "file";
-    static readonly SCHEME_SET: Set<string>;
-    static isValid(input: string): boolean;
-}
-export type TJWKSKeyDriver = TConstValue<typeof JWKSKeyDrivers>;
-export declare class JWKSKeyFormats {
-    static readonly PEM = "pem";
-    static readonly JWK = "jwk";
-    static readonly SCHEME_SET: Set<string>;
-    static isValid(input: string): boolean;
-}
-export type TJWKSKeyFormat = TConstValue<typeof JWKSKeyFormats>;
-/**
- * Wire-level constants of the service assertion. Fixed rather than configurable: both ends of a
- * call must agree on them, and a knob here would let two services disagree silently.
- */
-export declare class ServiceAssertion {
-    /** Its own header, so the end user's token keeps `Authorization` on the same request. */
-    static readonly HEADER = "x-service-assertion";
-    /** The JWS `typ`. What stops a user token being replayed as an assertion when one JWKS serves both. */
-    static readonly TYP = "svc+jwt";
-    static readonly ALGORITHM = "EdDSA";
-    static readonly DEFAULT_REST_PATH = "/svc-certs";
-    /** How long a minted assertion stays valid. */
-    static readonly DEFAULT_SIGN_LIFETIME_SECONDS = 60;
-    /** The oldest assertion a callee accepts, measured from `iat`. Its own decision, not the caller's. */
-    static readonly DEFAULT_ACCEPT_MAX_AGE_SECONDS = 60;
-    static readonly DEFAULT_CLOCK_TOLERANCE_SECONDS = 5;
-    /** Resolves the accepted age for one caller: its own override, then the service default. */
-    static resolveAcceptMaxAge(opts: {
-        callerOverride?: number;
-        serviceDefault?: number;
-    }): number;
-    static readonly DEFAULT_JWKS_CACHE_MAX_AGE_MS: number;
-    static readonly DEFAULT_JWKS_COOLDOWN_MS: number;
-}
-//# sourceMappingURL=constants.d.ts.map

package/dist/cjs/base/auth/authenticate/common/constants.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/constants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,qBAAa,oBAAoB;IAC/B,MAAM,CAAC,QAAQ,CAAC,KAAK,WAAW;IAChC,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,OAAO,aAAa;IAEpC,yFAAyF;IACzF,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAiD;IAE3E,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAID,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,oBAAoB,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAErF,qBAAa,aAAa;IACxB,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAE9B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAkC;IAE5D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,aAAa,CAAC,CAAC;AAE9D,qBAAa,cAAc;IAEzB,MAAM,CAAC,QAAQ,CAAC,cAAc,WAA8B;IAC5D,MAAM,CAAC,QAAQ,CAAC,YAAY,SAA4B;IACxD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,aAAgC;IAGhE,MAAM,CAAC,QAAQ,CAAC,UAAU,WAAW;IACrC,MAAM,CAAC,QAAQ,CAAC,WAAW,YAAY;IAEvC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,6BAA6B;IACpE,MAAM,CAAC,QAAQ,CAAC,mBAAmB,yBAAyB;IAE5D,MAAM,CAAC,QAAQ,CAAC,YAAY,uBAAuB;IACnD,MAAM,CAAC,QAAQ,CAAC,aAAa,mBAAmB;CACjD;AAED,qBAAa,wBAAwB;IACnC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,4BAA4B;IACnE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,sBAAsB;IACvD,MAAM,CAAC,QAAQ,CAAC,kBAAkB,uBAAuB;CAC1D;AAED,qBAAa,mBAAmB;IAC9B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAE5B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAiC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,qBAAa,SAAS;IACpB,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,QAAQ,cAAc;IAEtC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAyC;IAEnE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,SAAS,CAAC,CAAC;AAEtD,qBAAa,cAAc;IACzB,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAC9B,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAE9B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAmC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,cAAc,CAAC,CAAC;AAEhE,qBAAa,cAAc;IACzB,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAE5B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAiC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,cAAc,CAAC,CAAC;AAEhE;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,yFAAyF;IACzF,MAAM,CAAC,QAAQ,CAAC,MAAM,yBAAyB;IAE/C,uGAAuG;IACvG,MAAM,CAAC,QAAQ,CAAC,GAAG,aAAa;IAEhC,MAAM,CAAC,QAAQ,CAAC,SAAS,WAAW;IAEpC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,gBAAgB;IACjD,+CAA+C;IAC/C,MAAM,CAAC,QAAQ,CAAC,6BAA6B,MAAM;IAEnD,sGAAsG;IACtG,MAAM,CAAC,QAAQ,CAAC,8BAA8B,MAAM;IACpD,MAAM,CAAC,QAAQ,CAAC,+BAA+B,KAAK;IAEpD,4FAA4F;IAC5F,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;IAM9F,MAAM,CAAC,QAAQ,CAAC,6BAA6B,SAAkB;IAC/D,MAAM,CAAC,QAAQ,CAAC,wBAAwB,SAAa;CACtD"}

package/dist/cjs/base/auth/authenticate/common/constants.js

@@ -1,104 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ServiceAssertion = exports.JWKSKeyFormats = exports.JWKSKeyDrivers = exports.JWKSModes = exports.AuthenticationModes = exports.AuthenticationTokenTypes = exports.Authentication = exports.JOSEStandards = exports.AuthenticateStrategy = void 0;
-class AuthenticateStrategy {
-    static { this.BASIC = 'basic'; }
-    static { this.JWT = 'jwt'; }
-    static { this.SERVICE = 'service'; }
-    /** The strategies the FRAMEWORK ships. An application registers its own beyond these. */
-    static { this.SCHEME_SET = new Set([this.BASIC, this.JWT, this.SERVICE]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.AuthenticateStrategy = AuthenticateStrategy;
-class JOSEStandards {
-    static { this.JWS = 'JWS'; }
-    static { this.JWKS = 'JWKS'; }
-    static { this.SCHEME_SET = new Set([this.JWS, this.JWKS]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.JOSEStandards = JOSEStandards;
-class Authentication {
-    // Strategy
-    static { this.STRATEGY_BASIC = AuthenticateStrategy.BASIC; }
-    static { this.STRATEGY_JWT = AuthenticateStrategy.JWT; }
-    static { this.STRATEGY_SERVICE = AuthenticateStrategy.SERVICE; }
-    // Token type
-    static { this.TYPE_BASIC = 'Basic'; }
-    static { this.TYPE_BEARER = 'Bearer'; }
-    static { this.AUTHENTICATION_STRATEGY = 'authentication.strategy'; }
-    static { this.SKIP_AUTHENTICATION = 'authentication.skip'; }
-    static { this.CURRENT_USER = 'auth.current.user'; }
-    static { this.AUDIT_USER_ID = 'audit.user.id'; }
-}
-exports.Authentication = Authentication;
-class AuthenticationTokenTypes {
-    static { this.TYPE_AUTHORIZATION_CODE = '000_AUTHORIZATION_CODE'; }
-    static { this.TYPE_ACCESS_TOKEN = '100_ACCESS_TOKEN'; }
-    static { this.TYPE_REFRESH_TOKEN = '200_REFRESH_TOKEN'; }
-}
-exports.AuthenticationTokenTypes = AuthenticationTokenTypes;
-class AuthenticationModes {
-    static { this.ANY = 'any'; }
-    static { this.ALL = 'all'; }
-    static { this.SCHEME_SET = new Set([this.ANY, this.ALL]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.AuthenticationModes = AuthenticationModes;
-class JWKSModes {
-    static { this.ISSUER = 'issuer'; }
-    static { this.VERIFIER = 'verifier'; }
-    static { this.SCHEME_SET = new Set([this.ISSUER, this.VERIFIER]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.JWKSModes = JWKSModes;
-class JWKSKeyDrivers {
-    static { this.TEXT = 'text'; }
-    static { this.FILE = 'file'; }
-    static { this.SCHEME_SET = new Set([this.TEXT, this.FILE]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.JWKSKeyDrivers = JWKSKeyDrivers;
-class JWKSKeyFormats {
-    static { this.PEM = 'pem'; }
-    static { this.JWK = 'jwk'; }
-    static { this.SCHEME_SET = new Set([this.PEM, this.JWK]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.JWKSKeyFormats = JWKSKeyFormats;
-/**
- * Wire-level constants of the service assertion. Fixed rather than configurable: both ends of a
- * call must agree on them, and a knob here would let two services disagree silently.
- */
-class ServiceAssertion {
-    /** Its own header, so the end user's token keeps `Authorization` on the same request. */
-    static { this.HEADER = 'x-service-assertion'; }
-    /** The JWS `typ`. What stops a user token being replayed as an assertion when one JWKS serves both. */
-    static { this.TYP = 'svc+jwt'; }
-    static { this.ALGORITHM = 'EdDSA'; }
-    static { this.DEFAULT_REST_PATH = '/svc-certs'; }
-    /** How long a minted assertion stays valid. */
-    static { this.DEFAULT_SIGN_LIFETIME_SECONDS = 60; }
-    /** The oldest assertion a callee accepts, measured from `iat`. Its own decision, not the caller's. */
-    static { this.DEFAULT_ACCEPT_MAX_AGE_SECONDS = 60; }
-    static { this.DEFAULT_CLOCK_TOLERANCE_SECONDS = 5; }
-    /** Resolves the accepted age for one caller: its own override, then the service default. */
-    static resolveAcceptMaxAge(opts) {
-        return (opts.callerOverride ?? opts.serviceDefault ?? ServiceAssertion.DEFAULT_ACCEPT_MAX_AGE_SECONDS);
-    }
-    static { this.DEFAULT_JWKS_CACHE_MAX_AGE_MS = 10 * 60 * 1000; }
-    static { this.DEFAULT_JWKS_COOLDOWN_MS = 30 * 1000; }
-}
-exports.ServiceAssertion = ServiceAssertion;
-//# sourceMappingURL=constants.js.map

package/dist/cjs/base/auth/authenticate/common/constants.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/constants.ts"],"names":[],"mappings":";;;AAEA,MAAa,oBAAoB;aACf,UAAK,GAAG,OAAO,CAAC;aAChB,QAAG,GAAG,KAAK,CAAC;aACZ,YAAO,GAAG,SAAS,CAAC;IAEpC,yFAAyF;aACzE,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAE3E,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAVH,oDAWC;AAMD,MAAa,aAAa;aACR,QAAG,GAAG,KAAK,CAAC;aACZ,SAAI,GAAG,MAAM,CAAC;aAEd,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE5D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,sCASC;AAID,MAAa,cAAc;IACzB,WAAW;aACK,mBAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC;aAC5C,iBAAY,GAAG,oBAAoB,CAAC,GAAG,CAAC;aACxC,qBAAgB,GAAG,oBAAoB,CAAC,OAAO,CAAC;IAEhE,aAAa;aACG,eAAU,GAAG,OAAO,CAAC;aACrB,gBAAW,GAAG,QAAQ,CAAC;aAEvB,4BAAuB,GAAG,yBAAyB,CAAC;aACpD,wBAAmB,GAAG,qBAAqB,CAAC;aAE5C,iBAAY,GAAG,mBAAmB,CAAC;aACnC,kBAAa,GAAG,eAAe,CAAC;;AAdlD,wCAeC;AAED,MAAa,wBAAwB;aACnB,4BAAuB,GAAG,wBAAwB,CAAC;aACnD,sBAAiB,GAAG,kBAAkB,CAAC;aACvC,uBAAkB,GAAG,mBAAmB,CAAC;;AAH3D,4DAIC;AAED,MAAa,mBAAmB;aACd,QAAG,GAAG,KAAK,CAAC;aACZ,QAAG,GAAG,KAAK,CAAC;aAEZ,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,kDASC;AAID,MAAa,SAAS;aACJ,WAAM,GAAG,QAAQ,CAAC;aAClB,aAAQ,GAAG,UAAU,CAAC;aAEtB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEnE,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,8BASC;AAID,MAAa,cAAc;aACT,SAAI,GAAG,MAAM,CAAC;aACd,SAAI,GAAG,MAAM,CAAC;aAEd,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,wCASC;AAID,MAAa,cAAc;aACT,QAAG,GAAG,KAAK,CAAC;aACZ,QAAG,GAAG,KAAK,CAAC;aAEZ,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,wCASC;AAID;;;GAGG;AACH,MAAa,gBAAgB;IAC3B,yFAAyF;aACzE,WAAM,GAAG,qBAAqB,CAAC;IAE/C,uGAAuG;aACvF,QAAG,GAAG,SAAS,CAAC;aAEhB,cAAS,GAAG,OAAO,CAAC;aAEpB,sBAAiB,GAAG,YAAY,CAAC;IACjD,+CAA+C;aAC/B,kCAA6B,GAAG,EAAE,CAAC;IAEnD,sGAAsG;aACtF,mCAA8B,GAAG,EAAE,CAAC;aACpC,oCAA+B,GAAG,CAAC,CAAC;IAEpD,4FAA4F;IAC5F,MAAM,CAAC,mBAAmB,CAAC,IAA0D;QACnF,OAAO,CACL,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,IAAI,gBAAgB,CAAC,8BAA8B,CAC9F,CAAC;IACJ,CAAC;aAEe,kCAA6B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;aAC/C,6BAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;;AAzBvD,4CA0BC"}

package/dist/cjs/base/auth/authenticate/common/types.d.ts

@@ -1,312 +0,0 @@
-import type { TContext } from '../../../../base/controllers/common/types';
-import type { IdType } from '../../../../base/models/common/types';
-import type { TAnyObjectSchema } from '../../../../utilities/schema.utility';
-import type { AnyObject, TNullable, ValueOrPromise } from '@venizia/ignis-helpers/common';
-import type { AESAlgorithmType, IPayloadCipher } from '@venizia/ignis-helpers/core';
-import type { Env } from 'hono';
-import { type MiddlewareHandler } from 'hono';
-import type { JWTPayload } from 'jose';
-import type { TChangePasswordRequest, TSignInRequest, TSignUpRequest } from '../../models/requests';
-import type { JOSEStandards, JWKSModes } from './constants';
-import { type TAuthMode, type TJWKSKeyDriver, type TJWKSKeyFormat } from './constants';
-export type TDefineAuthControllerOpts = {
-    restPath?: string;
-    serviceKey: string;
-    requireAuthenticatedSignUp?: boolean;
-    payload?: {
-        signIn?: {
-            request: {
-                schema: TAnyObjectSchema;
-            };
-            response: {
-                schema: TAnyObjectSchema;
-            };
-        };
-        signUp?: {
-            request: {
-                schema: TAnyObjectSchema;
-            };
-            response: {
-                schema: TAnyObjectSchema;
-            };
-        };
-        changePassword?: {
-            request: {
-                schema?: TAnyObjectSchema;
-            };
-            response: {
-                schema: TAnyObjectSchema;
-            };
-        };
-        refreshToken?: {
-            response: {
-                schema: TAnyObjectSchema;
-            };
-        };
-        getUserInformation?: {
-            response: {
-                schema: TAnyObjectSchema;
-            };
-        };
-    };
-};
-export type TAuthenticationRestOptions = {} & ({
-    useAuthController?: false | undefined;
-} | {
-    useAuthController: true;
-    controllerOpts: TDefineAuthControllerOpts;
-});
-/**
- * Claim checks applied when VERIFYING a JWT. Field names and types mirror jose's `JWTVerifyOptions`
- * exactly, so this is a pass-through with no translation layer.
- *
- * Every field is optional and unset by default, which is today's behaviour: nothing is checked
- * beyond the signature and the time claims. In a fleet where every verifier points at the same
- * issuer JWKS, that means a token minted for one service is accepted verbatim by every other -
- * `audience` is what makes "this token was meant for me" a cryptographic statement rather than a
- * convention.
- */
-export interface IJWTVerifyOptions {
-    /** Expected `aud`. Setting it makes the claim required. Matching is jose's OVERLAP semantics, not equality: a token carrying `['a','b']` satisfies `audience: 'a'`. Enforce single-valued audiences at issue time if that matters. */
-    audience?: string | string[];
-    /** Expected `iss`. Setting it makes the claim required. */
-    issuer?: string | string[];
-    /** Expected `sub`. Setting it makes the claim required. */
-    subject?: string;
-    /** Clock skew tolerance: seconds, or a jose duration string such as `'30 seconds'`. */
-    clockTolerance?: string | number;
-    /** Accepted JWS `alg` header values. Unset means the accepted algorithm is decided entirely by what the JWKS serves. */
-    algorithms?: string[];
-    /** Caps elapsed time since `iat`. The real replay window for a short-lived assertion, independent of whatever `exp` the caller chose to stamp. */
-    maxTokenAge?: string | number;
-    /** Expected JWS `typ` header. The standard defence against cross-token-type confusion when one JWKS serves more than one kind of token. */
-    typ?: string;
-    /** Claims that must be present, beyond those implied by the checks above. */
-    requiredClaims?: string[];
-}
-/** Default `iss` / `aud` stamped on every issued token. Configured values are AUTHORITATIVE - see {@link IJWTIssueClaims}. */
-export interface IJWTSignOptions {
-    issuer?: string;
-    audience?: string | string[];
-}
-/**
- * Per-token registered claims, passed to `generate()`.
- *
- * This is the supported way to vary `aud` or `sub` per token. Putting them on the payload used to
- * work by accident - `iss`, `aud`, `sub` and `jti` ride through the AES envelope in the clear
- * because they are standard JWT fields - but a claim the payload can set is a claim any caller who
- * shapes the payload can forge. These win over {@link IJWTSignOptions}; the payload never does.
- */
-export interface IJWTIssueClaims {
-    issuer?: string;
-    audience?: string | string[];
-    subject?: string;
-    jwtId?: string;
-}
-export interface IJWSTokenServiceOptions {
-    headerAlgorithm?: string;
-    jwtSecret: string;
-    getTokenExpiresFn: TGetTokenExpiresFn;
-    aesAlgorithm?: AESAlgorithmType;
-    applicationSecret?: string;
-    fieldCodecs?: IPayloadFieldCodec[];
-    /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */
-    cipher?: IPayloadCipher;
-    /** Claim checks applied on verify. Unset means signature and time claims only. */
-    verify?: IJWTVerifyOptions;
-    /** Claims stamped on every issued token. A configured value WINS over one supplied in the payload. */
-    sign?: IJWTSignOptions;
-}
-export type TJWKSAlgorithm = 'ES256' | 'RS256' | 'EdDSA';
-export interface IJWKSIssuerOptions {
-    mode: typeof JWKSModes.ISSUER;
-    algorithm: TJWKSAlgorithm;
-    rest?: {
-        path: string;
-    };
-    keys: {
-        driver: TJWKSKeyDriver;
-        format: TJWKSKeyFormat;
-        private: string;
-        public: string;
-    };
-    kid: string;
-    getTokenExpiresFn: TGetTokenExpiresFn;
-    aesAlgorithm?: AESAlgorithmType;
-    applicationSecret?: string;
-    fieldCodecs?: IPayloadFieldCodec[];
-    /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */
-    cipher?: IPayloadCipher;
-    /** Claim checks applied on verify. Unset means signature and time claims only. */
-    verify?: IJWTVerifyOptions;
-    /** Claims stamped on every issued token. A configured value WINS over one supplied in the payload. */
-    sign?: IJWTSignOptions;
-}
-export interface IJWKSVerifierOptions {
-    mode: typeof JWKSModes.VERIFIER;
-    jwksUrl: string;
-    cacheTtlMs?: number;
-    cooldownMs?: number;
-    aesAlgorithm?: AESAlgorithmType;
-    applicationSecret?: string;
-    fieldCodecs?: IPayloadFieldCodec[];
-    /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */
-    cipher?: IPayloadCipher;
-    /** Claim checks applied on verify. Unset means signature and time claims only. */
-    verify?: IJWTVerifyOptions;
-}
-export type TJWKSTokenServiceOptions = IJWKSIssuerOptions | IJWKSVerifierOptions;
-export type TJWTTokenServiceOptions = {
-    standard: typeof JOSEStandards.JWS;
-    options: IJWSTokenServiceOptions;
-} | {
-    standard: typeof JOSEStandards.JWKS;
-    options: TJWKSTokenServiceOptions;
-};
-/**
- * The request binding, following RFC 9449's `htm`/`htu`. A captured assertion cannot be replayed
- * against a different method or path.
- *
- * `htu` is the percent-ENCODED pathname on both ends. Compare it against
- * `new URL(context.req.url).pathname`, never `context.req.path` - Hono hands that one back DECODED,
- * so any route carrying a space or a non-ASCII slug would never match what the caller signed.
- */
-export interface IServiceAssertionClaims extends JWTPayload {
-    htm: string;
-    htu: string;
-}
-/**
- * One entry in the caller allowlist: the JWKS url, or that url plus settings for this caller alone.
- */
-export type TServiceCallerEntry = string | {
-    jwksUrl: string;
-    /** Widens the accepted age for THIS caller only. Falls back to the service-wide setting. */
-    acceptMaxAgeSeconds?: number;
-};
-/** Service-to-service authentication: an Ed25519 assertion per request, verified against the caller's JWKS. */
-export interface IServiceAuthOptions<E extends Env = Env> {
-    /** What this service calls itself: the `iss` it stamps, and the `aud` it demands. */
-    name: string;
-    /**
-     * Present only on a service that CALLS OUT. Absent means verify-only, and no certs route is
-     * mounted - which is the common case, since most services are called and never call.
-     */
-    keys?: {
-        driver: TJWKSKeyDriver;
-        format: TJWKSKeyFormat;
-        /** PEM or JWK by `format`; content for the `text` driver, a path for `file`. */
-        private: string;
-        public: string;
-        kid?: string;
-    };
-    /**
-     * Caller name to its JWKS url. THIS IS ALSO THE ALLOWLIST - a name absent from the map cannot
-     * call, and an empty map correctly allows nobody.
-     *
-     * The bare-string form is the common case. The object form exists to widen the accepted age for
-     * ONE caller: a nightly batch may legitimately need more slack than an interactive service, and
-     * granting it per caller keeps the concession named and visible in config.
-     */
-    callers?: Record<string, TServiceCallerEntry>;
-    /** Where the certs route is mounted. Defaults to `ServiceAssertion.DEFAULT_REST_PATH`. */
-    rest?: {
-        path: string;
-    };
-    /**
-     * How long the assertions this service MINTS stay valid. Only meaningful where `keys` is set.
-     */
-    signLifetimeSeconds?: number;
-    /**
-     * The oldest assertion this service ACCEPTS, measured from `iat`.
-     *
-     * Deliberately separate from `signLifetimeSeconds`, and deliberately not requestable by the
-     * caller. The caller already controls `exp` - it signs the token - so this is the only bound that
-     * survives a compromised caller. A per-caller override belongs in {@link callers}, never in the
-     * assertion.
-     *
-     * Composes with `clockToleranceSeconds`: the real acceptance window is the sum of the two.
-     */
-    acceptMaxAgeSeconds?: number;
-    /**
-     * Clock skew allowance. A SECURITY knob, not an operational one.
-     *
-     * Its job is the future case: two machines never agree to the second, and without it a caller one
-     * second ahead is refused outright. But it also widens the REPLAY window second for second - a
-     * callee accepting an `iat` 5s in its own future keeps accepting that token for the rest of the
-     * window too. Measured at the defaults: 65s accepted on our clock, 70s of wall-clock life for a
-     * capture minted by a caller running the full tolerance fast.
-     */
-    clockToleranceSeconds?: number;
-    jwks?: {
-        cacheMaxAgeMs?: number;
-        cooldownMs?: number;
-    };
-    /**
-     * WHO a verified assertion acts as. The framework has already proven the caller; this only maps a
-     * caller name onto an application principal. Return `null` to refuse a caller the allowlist
-     * admits but the application does not recognise.
-     */
-    resolvePrincipal: (opts: {
-        issuer: string;
-        context: TContext<E, string>;
-    }) => ValueOrPromise<TNullable<IAuthUser>>;
-}
-export type TBasicTokenServiceOptions<E extends Env = Env> = {
-    /** Callback to verify basic auth credentials. Returns IAuthUser if valid, null otherwise. */
-    verifyCredentials: (opts: {
-        credentials: {
-            username: string;
-            password: string;
-        };
-        context: TContext<E, string>;
-    }) => Promise<IAuthUser | null>;
-};
-export interface IAuthenticateOptions {
-    restOptions?: TAuthenticationRestOptions;
-    jwtOptions?: TJWTTokenServiceOptions;
-    basicOptions?: TBasicTokenServiceOptions;
-    serviceOptions?: IServiceAuthOptions;
-}
-export interface IAuthUser {
-    userId: IdType;
-    [extra: string | symbol]: any;
-}
-export interface IJWTTokenPayload extends JWTPayload, IAuthUser {
-    userId: IdType;
-    roles: {
-        id: IdType;
-        identifier: string;
-        priority: number;
-    }[];
-    clientId?: string;
-    provider?: string;
-    email?: string;
-    name?: string;
-    [extra: string | symbol]: any;
-}
-export interface IPayloadFieldCodec<T = unknown> {
-    key: string;
-    serialize(opts: {
-        value: T;
-    }): string;
-    deserialize(opts: {
-        raw: string;
-    }): T;
-}
-export type TGetTokenExpiresFn = () => ValueOrPromise<number>;
-export interface IAuthenticationStrategy<E extends Env = Env> {
-    name: string;
-    authenticate(context: TContext<E, string>): Promise<IAuthUser>;
-}
-export type TAuthenticateFn<RouteEnv extends Env = Env> = (opts: {
-    strategies: string[];
-    mode?: TAuthMode;
-}) => MiddlewareHandler<RouteEnv>;
-export interface IAuthService<E extends Env = Env, SIRQ extends TSignInRequest = TSignInRequest, SIRS = AnyObject, SURQ extends TSignUpRequest = TSignUpRequest, SURS = AnyObject, CPRQ extends TChangePasswordRequest = TChangePasswordRequest, CPRS = AnyObject, UIRQ = AnyObject, UIRS = AnyObject, RTRS = AnyObject> {
-    signIn(context: TContext<E>, opts: SIRQ): Promise<SIRS>;
-    signUp(context: TContext<E>, opts: SURQ): Promise<SURS>;
-    changePassword(context: TContext<E>, opts: CPRQ): Promise<CPRS>;
-    getUserInformation?(context: TContext<E>, opts: UIRQ): Promise<UIRS>;
-    refreshToken?(context: TContext<E>): Promise<RTRS>;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/cjs/base/auth/authenticate/common/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC1F,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AACpF,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AACvC,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACpG,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAEvF,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE;YACP,OAAO,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACtC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,MAAM,CAAC,EAAE;YACP,OAAO,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACtC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,cAAc,CAAC,EAAE;YACf,OAAO,EAAE;gBAAE,MAAM,CAAC,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACvC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,YAAY,CAAC,EAAE;YACb,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,kBAAkB,CAAC,EAAE;YACnB,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,EAAE,GAAG,CAC1C;IAAE,iBAAiB,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;CAAE,GACzC;IACE,iBAAiB,EAAE,IAAI,CAAC;IACxB,cAAc,EAAE,yBAAyB,CAAC;CAC3C,CACJ,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,sOAAsO;IACtO,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE7B,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE3B,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAEjC,wHAAwH;IACxH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAEtB,kJAAkJ;IAClJ,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAE9B,2IAA2I;IAC3I,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,8HAA8H;AAC9H,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,gHAAgH;IAChH,MAAM,CAAC,EAAE,cAAc,CAAC;IAExB,kFAAkF;IAClF,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAE3B,sGAAsG;IACtG,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,SAAS,CAAC,MAAM,CAAC;IAC9B,SAAS,EAAE,cAAc,CAAC;IAC1B,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxB,IAAI,EAAE;QACJ,MAAM,EAAE,cAAc,CAAC;QACvB,MAAM,EAAE,cAAc,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,gHAAgH;IAChH,MAAM,CAAC,EAAE,cAAc,CAAC;IAExB,kFAAkF;IAClF,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAE3B,sGAAsG;IACtG,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,OAAO,SAAS,CAAC,QAAQ,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,gHAAgH;IAChH,MAAM,CAAC,EAAE,cAAc,CAAC;IAExB,kFAAkF;IAClF,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED,MAAM,MAAM,wBAAwB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;AAEjF,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,EAAE,OAAO,aAAa,CAAC,GAAG,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,GACxE;IAAE,QAAQ,EAAE,OAAO,aAAa,CAAC,IAAI,CAAC;IAAC,OAAO,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAE/E;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAwB,SAAQ,UAAU;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAC3B,MAAM,GACN;IACE,OAAO,EAAE,MAAM,CAAC;IAChB,4FAA4F;IAC5F,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEN,+GAA+G;AAC/G,MAAM,WAAW,mBAAmB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG;IACtD,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,IAAI,CAAC,EAAE;QACL,MAAM,EAAE,cAAc,CAAC;QACvB,MAAM,EAAE,cAAc,CAAC;QACvB,gFAAgF;QAChF,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;IAEF;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAE9C,0FAA0F;IAC1F,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAExB;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;;;;;;OASG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B,IAAI,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAEvD;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,IAAI,EAAE;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,KAAK,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;CAC5C;AAED,MAAM,MAAM,yBAAyB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,IAAI;IAC3D,6FAA6F;IAC7F,iBAAiB,EAAE,CAAC,IAAI,EAAE;QACxB,WAAW,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QACpD,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;CACjC,CAAC;AACF,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,0BAA0B,CAAC;IACzC,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,YAAY,CAAC,EAAE,yBAAyB,CAAC;IACzC,cAAc,CAAC,EAAE,mBAAmB,CAAC;CACtC;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAiB,SAAQ,UAAU,EAAE,SAAS;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAE9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,CAAC,CAAA;KAAE,GAAG,MAAM,CAAC;IACtC,WAAW,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;AAE9D,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CAChE;AAED,MAAM,MAAM,eAAe,CAAC,QAAQ,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE;IAC/D,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB,KAAK,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AAElC,MAAM,WAAW,YAAY,CAC3B,CAAC,SAAS,GAAG,GAAG,GAAG,EAEnB,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,IAAI,GAAG,SAAS,EAEhB,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,IAAI,GAAG,SAAS,EAEhB,IAAI,SAAS,sBAAsB,GAAG,sBAAsB,EAC5D,IAAI,GAAG,SAAS,EAEhB,IAAI,GAAG,SAAS,EAChB,IAAI,GAAG,SAAS,EAEhB,IAAI,GAAG,SAAS;IAEhB,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,kBAAkB,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD"}