@venizia/ignis-kernel 0.2.0-9 → 0.2.1-0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@venizia/ignis-kernel",
-  "version": "0.2.0-9",
+  "version": "0.2.1-0",
   "description": "Browser-pure kernel of the IGNIS framework: dependency injection, lifecycle, REST controllers, repository and datasource abstractions, and the authentication and authorization seams. No node builtin and no server-only peer, so the same kernel serves a Bun server and a browser Worker.",
   "keywords": [
     "authentication",
@@ -37,7 +37,7 @@
   },
   "license": "MIT",
   "engines": {
-    "bun": ">=1.3"
+    "bun": ">=1.4"
   },
   "main": "./dist/cjs/index.js",
   "module": "./dist/esm/index.js",
@@ -49,6 +49,18 @@
       "require": "./dist/cjs/index.js",
       "default": "./dist/cjs/index.js"
     },
+    "./metadata": {
+      "types": "./dist/cjs/metadata.d.ts",
+      "import": "./dist/esm/metadata.js",
+      "require": "./dist/cjs/metadata.js",
+      "default": "./dist/cjs/metadata.js"
+    },
+    "./repository": {
+      "types": "./dist/cjs/repository.d.ts",
+      "import": "./dist/esm/repository.js",
+      "require": "./dist/cjs/repository.js",
+      "default": "./dist/cjs/repository.js"
+    },
     "./package.json": "./package.json"
   },
   "files": [
@@ -79,12 +91,11 @@
     "prepublishOnly": "bun run rebuild"
   },
   "dependencies": {
-    "@venizia/ignis-filter": "^0.2.0-4",
-    "@venizia/ignis-helpers": "^0.2.0-7",
-    "@venizia/ignis-inversion": "^0.2.0-3",
-    "lodash": "^4.18.1",
+    "@venizia/ignis-filter": "^0.2.1-0",
+    "@venizia/ignis-helpers": "^0.2.1-0",
+    "@venizia/ignis-inversion": "^0.2.0",
     "reflect-metadata": "^0.2.2",
-    "zod": "^4.4.3"
+    "zod": "^4.5.4"
   },
   "peerDependencies": {
     "@hono/zod-openapi": "^1.5.1",
@@ -94,24 +105,29 @@
     "jose": "^6.2.3"
   },
   "peerDependenciesMeta": {
+    "@hono/zod-openapi": {
+      "optional": true
+    },
     "casbin": {
       "optional": true
     },
     "drizzle-orm": {
       "optional": true
     },
+    "hono": {
+      "optional": true
+    },
     "jose": {
       "optional": true
     }
   },
   "devDependencies": {
-    "@types/bun": "^1.3.14",
-    "@types/lodash": "^4.17.23",
-    "@venizia/dev-configs": "^0.2.0-3",
+    "@types/bun": "^1.4.1",
+    "@venizia/dev-configs": "^0.2.0",
     "casbin": "^5.51.1",
-    "eslint": "^10.7.0",
-    "prettier": "^3.9.5",
-    "tsc-alias": "^1.9.1",
+    "eslint": "^10.10.0",
+    "prettier": "^3.9.6",
+    "tsc-alias": "^1.9.4",
     "typescript": "^6.0.3"
   }
 }

package/dist/cjs/base/applications/types.d.ts

@@ -1,111 +0,0 @@
-import type { OpenAPIHono } from '@hono/zod-openapi';
-import type { ValueOrPromise } from '@venizia/ignis-helpers/common';
-import type { Context, Env, Schema } from 'hono';
-import type { IPRestrictionRules as IIPRestrictionRules } from 'hono/ip-restriction';
-import type { TControllerTransport } from '../controllers/common/constants';
-import type { IComponentMixin, IControllerMixin, IRepositoryMixin, IServiceMixin, IStaticServeMixin } from '../mixins/types';
-export interface IBaseMiddlewareOptions {
-    enable: boolean;
-    path?: string;
-    [extra: string | symbol]: any;
-}
-export interface ICompressOptions extends IBaseMiddlewareOptions {
-    encoding: 'gzip' | 'deflate';
-    threshold?: number;
-}
-export type TOrigin = string | string[] | ((origin: string, c: Context) => Promise<string | undefined | null> | string | undefined | null);
-export interface ICORSOptions extends IBaseMiddlewareOptions {
-    origin: TOrigin;
-    allowMethods?: string[] | ((origin: string, c: Context) => Promise<string[]> | string[]);
-    allowHeaders?: string[];
-    maxAge?: number;
-    credentials?: boolean;
-    exposeHeaders?: string[];
-}
-export type TIsAllowedOriginHandler = (origin: string, context: Context) => boolean;
-export declare const SecFetchSiteValues: readonly ["same-origin", "same-site", "none", "cross-site"];
-export type TSecFetchSite = (typeof SecFetchSiteValues)[number];
-export type TIsAllowedSecFetchSiteHandler = (secFetchSite: TSecFetchSite, context: Context) => boolean;
-export interface ICSRFOptions extends IBaseMiddlewareOptions {
-    origin?: string | string[] | TIsAllowedOriginHandler;
-    secFetchSite?: TSecFetchSite | TSecFetchSite[] | TIsAllowedSecFetchSiteHandler;
-}
-export interface IBodyLimitOptions extends IBaseMiddlewareOptions {
-    maxSize: number;
-    onError?: (c: Context) => Response | Promise<Response>;
-}
-export interface IRequestIdOptions extends IBaseMiddlewareOptions {
-}
-export interface IMiddlewareConfigs {
-    requestId?: IRequestIdOptions;
-    compress?: ICompressOptions;
-    cors?: ICORSOptions;
-    csrf?: ICSRFOptions;
-    bodyLimit?: IBodyLimitOptions;
-    ipRestriction?: IBaseMiddlewareOptions & IIPRestrictionRules;
-    [extra: string | symbol]: any;
-}
-/**
- * Structural mirror of `@venizia/ignis-boot`'s `IBootOptions` - kernel does not depend on boot
- * (boot sits beside kernel in the Makefile chain, `{boot, kernel} -> core`; importing boot's type
- * here would invert that). Both shapes are the same artifact-glob bag keyed by artifact type, so a
- * real `IBootOptions` value is structurally assignable to this without a cast.
- */
-export interface IApplicationArtifactOptions {
-    dirs?: string[];
-    extensions?: string[];
-    isNested?: boolean;
-    glob?: string;
-}
-export interface IApplicationBootOptions {
-    [artifactType: string]: IApplicationArtifactOptions | undefined;
-}
-/** No `host`/`port`: a browser Worker has neither, and carrying them here made one silently configured with `localhost:3000`. `@venizia/ignis` widens this shape with both - see its `IServerApplicationConfigs`. */
-export interface IApplicationConfigs {
-    path: {
-        base: string;
-        isStrict: boolean;
-    };
-    requestId?: {
-        isStrict: boolean;
-    };
-    favicon?: string;
-    /** `environment` is the host's ambient environment name. Set it where there is none to read - a browser Worker - so the error middleware can tell "no ambient environment" from "misconfigured". Absent on a server, which reads `process.env.NODE_ENV`. */
-    error?: {
-        rootKey?: string;
-        environment?: string;
-    };
-    asyncContext?: {
-        enable: boolean;
-    };
-    bootOptions?: IApplicationBootOptions;
-    debug?: {
-        shouldShowRoutes?: boolean;
-    };
-    /** Controller transports to enable. Defaults to ['rest']. */
-    transports?: TControllerTransport[];
-    [key: string]: any;
-}
-export interface IApplicationInfo {
-    name: string;
-    version: string;
-    description: string;
-    author?: {
-        name: string;
-        email: string;
-        url?: string;
-    };
-    [extra: string | symbol]: any;
-}
-/** Exactly what EVERY host implements. `getServerHost`/`getServerPort`/`getServerAddress`/`start`/`stop` are not here on purpose - a browser Worker can implement none of them; they live on `@venizia/ignis`'s `IServerApplication`. */
-export interface IApplication<AppEnv extends Env = Env, AppSchema extends Schema = Schema, BasePath extends string = '/'> {
-    getProjectRoot(): string;
-    getProjectConfigs(): IApplicationConfigs;
-    getServer(): OpenAPIHono<AppEnv, AppSchema, BasePath>;
-    getRootRouter(): OpenAPIHono<AppEnv, AppSchema, BasePath>;
-    setupMiddlewares(): ValueOrPromise<void>;
-    initialize(): ValueOrPromise<void>;
-}
-export interface IRestApplication extends IApplication, IComponentMixin, IControllerMixin, IRepositoryMixin, IServiceMixin, IStaticServeMixin {
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/cjs/base/applications/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/base/applications/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACjD,OAAO,KAAK,EAAE,kBAAkB,IAAI,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EAClB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAiB,SAAQ,sBAAsB;IAC9D,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,OAAO,GACf,MAAM,GACN,MAAM,EAAE,GACR,CAAC,CACC,MAAM,EAAE,MAAM,EACd,CAAC,EAAE,OAAO,KACP,OAAO,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;AACzE,MAAM,WAAW,YAAa,SAAQ,sBAAsB;IAC1D,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;IACzF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;AACpF,eAAO,MAAM,kBAAkB,6DAA8D,CAAC;AAC9F,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChE,MAAM,MAAM,6BAA6B,GAAG,CAC1C,YAAY,EAAE,aAAa,EAC3B,OAAO,EAAE,OAAO,KACb,OAAO,CAAC;AAEb,MAAM,WAAW,YAAa,SAAQ,sBAAsB;IAC1D,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,uBAAuB,CAAC;IACrD,YAAY,CAAC,EAAE,aAAa,GAAG,aAAa,EAAE,GAAG,6BAA6B,CAAC;CAChF;AAED,MAAM,WAAW,iBAAkB,SAAQ,sBAAsB;IAC/D,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,iBAAkB,SAAQ,sBAAsB;CAAG;AAEpE,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,aAAa,CAAC,EAAE,sBAAsB,GAAG,mBAAmB,CAAC;IAC7D,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED;;;;;GAKG;AACH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,CAAC,YAAY,EAAE,MAAM,GAAG,2BAA2B,GAAG,SAAS,CAAC;CACjE;AAED,qNAAqN;AACrN,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAC1C,SAAS,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4PAA4P;IAC5P,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,YAAY,CAAC,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IACnC,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,KAAK,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACvC,6DAA6D;IAC7D,UAAU,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACpC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,yOAAyO;AACzO,MAAM,WAAW,YAAY,CAC3B,MAAM,SAAS,GAAG,GAAG,GAAG,EACxB,SAAS,SAAS,MAAM,GAAG,MAAM,EACjC,QAAQ,SAAS,MAAM,GAAG,GAAG;IAE7B,cAAc,IAAI,MAAM,CAAC;IACzB,iBAAiB,IAAI,mBAAmB,CAAC;IACzC,SAAS,IAAI,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtD,aAAa,IAAI,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAE1D,gBAAgB,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IAEzC,UAAU,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,gBACf,SACE,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,iBAAiB;CAAG"}

package/dist/cjs/base/applications/types.js

@@ -1,5 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SecFetchSiteValues = void 0;
-exports.SecFetchSiteValues = ['same-origin', 'same-site', 'none', 'cross-site'];
-//# sourceMappingURL=types.js.map

package/dist/cjs/base/applications/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/base/applications/types.ts"],"names":[],"mappings":";;;AAyCa,QAAA,kBAAkB,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAU,CAAC"}

package/dist/cjs/base/auth/authenticate/common/constants.d.ts

@@ -1,86 +0,0 @@
-import type { TConstValue } from '@venizia/ignis-helpers/common';
-export declare class AuthenticateStrategy {
-    static readonly BASIC = "basic";
-    static readonly JWT = "jwt";
-    static readonly SERVICE = "service";
-    /** The strategies the FRAMEWORK ships. An application registers its own beyond these. */
-    static readonly SCHEME_SET: Set<string>;
-    static isValid(input: string): boolean;
-}
-export type TAuthStrategy = TConstValue<typeof AuthenticateStrategy> | (string & {});
-export declare class JOSEStandards {
-    static readonly JWS = "JWS";
-    static readonly JWKS = "JWKS";
-    static readonly SCHEME_SET: Set<string>;
-    static isValid(input: string): boolean;
-}
-export type TJOSEStandard = TConstValue<typeof JOSEStandards>;
-export declare class Authentication {
-    static readonly STRATEGY_BASIC = "basic";
-    static readonly STRATEGY_JWT = "jwt";
-    static readonly STRATEGY_SERVICE = "service";
-    static readonly TYPE_BASIC = "Basic";
-    static readonly TYPE_BEARER = "Bearer";
-    static readonly AUTHENTICATION_STRATEGY = "authentication.strategy";
-    static readonly SKIP_AUTHENTICATION = "authentication.skip";
-    static readonly CURRENT_USER = "auth.current.user";
-    static readonly AUDIT_USER_ID = "audit.user.id";
-}
-export declare class AuthenticationTokenTypes {
-    static readonly TYPE_AUTHORIZATION_CODE = "000_AUTHORIZATION_CODE";
-    static readonly TYPE_ACCESS_TOKEN = "100_ACCESS_TOKEN";
-    static readonly TYPE_REFRESH_TOKEN = "200_REFRESH_TOKEN";
-}
-export declare class AuthenticationModes {
-    static readonly ANY = "any";
-    static readonly ALL = "all";
-    static readonly SCHEME_SET: Set<string>;
-    static isValid(input: string): boolean;
-}
-export type TAuthMode = TConstValue<typeof AuthenticationModes>;
-export declare class JWKSModes {
-    static readonly ISSUER = "issuer";
-    static readonly VERIFIER = "verifier";
-    static readonly SCHEME_SET: Set<string>;
-    static isValid(input: string): boolean;
-}
-export type TJWKSMode = TConstValue<typeof JWKSModes>;
-export declare class JWKSKeyDrivers {
-    static readonly TEXT = "text";
-    static readonly FILE = "file";
-    static readonly SCHEME_SET: Set<string>;
-    static isValid(input: string): boolean;
-}
-export type TJWKSKeyDriver = TConstValue<typeof JWKSKeyDrivers>;
-export declare class JWKSKeyFormats {
-    static readonly PEM = "pem";
-    static readonly JWK = "jwk";
-    static readonly SCHEME_SET: Set<string>;
-    static isValid(input: string): boolean;
-}
-export type TJWKSKeyFormat = TConstValue<typeof JWKSKeyFormats>;
-/**
- * Wire-level constants of the service assertion. Fixed rather than configurable: both ends of a
- * call must agree on them, and a knob here would let two services disagree silently.
- */
-export declare class ServiceAssertion {
-    /** Its own header, so the end user's token keeps `Authorization` on the same request. */
-    static readonly HEADER = "x-service-assertion";
-    /** The JWS `typ`. What stops a user token being replayed as an assertion when one JWKS serves both. */
-    static readonly TYP = "svc+jwt";
-    static readonly ALGORITHM = "EdDSA";
-    static readonly DEFAULT_REST_PATH = "/svc-certs";
-    /** How long a minted assertion stays valid. */
-    static readonly DEFAULT_SIGN_LIFETIME_SECONDS = 60;
-    /** The oldest assertion a callee accepts, measured from `iat`. Its own decision, not the caller's. */
-    static readonly DEFAULT_ACCEPT_MAX_AGE_SECONDS = 60;
-    static readonly DEFAULT_CLOCK_TOLERANCE_SECONDS = 5;
-    /** Resolves the accepted age for one caller: its own override, then the service default. */
-    static resolveAcceptMaxAge(opts: {
-        callerOverride?: number;
-        serviceDefault?: number;
-    }): number;
-    static readonly DEFAULT_JWKS_CACHE_MAX_AGE_MS: number;
-    static readonly DEFAULT_JWKS_COOLDOWN_MS: number;
-}
-//# sourceMappingURL=constants.d.ts.map

package/dist/cjs/base/auth/authenticate/common/constants.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/constants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,qBAAa,oBAAoB;IAC/B,MAAM,CAAC,QAAQ,CAAC,KAAK,WAAW;IAChC,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,OAAO,aAAa;IAEpC,yFAAyF;IACzF,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAiD;IAE3E,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAID,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,oBAAoB,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAErF,qBAAa,aAAa;IACxB,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAE9B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAkC;IAE5D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,aAAa,CAAC,CAAC;AAE9D,qBAAa,cAAc;IAEzB,MAAM,CAAC,QAAQ,CAAC,cAAc,WAA8B;IAC5D,MAAM,CAAC,QAAQ,CAAC,YAAY,SAA4B;IACxD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,aAAgC;IAGhE,MAAM,CAAC,QAAQ,CAAC,UAAU,WAAW;IACrC,MAAM,CAAC,QAAQ,CAAC,WAAW,YAAY;IAEvC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,6BAA6B;IACpE,MAAM,CAAC,QAAQ,CAAC,mBAAmB,yBAAyB;IAE5D,MAAM,CAAC,QAAQ,CAAC,YAAY,uBAAuB;IACnD,MAAM,CAAC,QAAQ,CAAC,aAAa,mBAAmB;CACjD;AAED,qBAAa,wBAAwB;IACnC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,4BAA4B;IACnE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,sBAAsB;IACvD,MAAM,CAAC,QAAQ,CAAC,kBAAkB,uBAAuB;CAC1D;AAED,qBAAa,mBAAmB;IAC9B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAE5B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAiC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,qBAAa,SAAS;IACpB,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,QAAQ,cAAc;IAEtC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAyC;IAEnE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,SAAS,CAAC,CAAC;AAEtD,qBAAa,cAAc;IACzB,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAC9B,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAE9B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAmC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,cAAc,CAAC,CAAC;AAEhE,qBAAa,cAAc;IACzB,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAE5B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAiC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,cAAc,CAAC,CAAC;AAEhE;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,yFAAyF;IACzF,MAAM,CAAC,QAAQ,CAAC,MAAM,yBAAyB;IAE/C,uGAAuG;IACvG,MAAM,CAAC,QAAQ,CAAC,GAAG,aAAa;IAEhC,MAAM,CAAC,QAAQ,CAAC,SAAS,WAAW;IAEpC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,gBAAgB;IACjD,+CAA+C;IAC/C,MAAM,CAAC,QAAQ,CAAC,6BAA6B,MAAM;IAEnD,sGAAsG;IACtG,MAAM,CAAC,QAAQ,CAAC,8BAA8B,MAAM;IACpD,MAAM,CAAC,QAAQ,CAAC,+BAA+B,KAAK;IAEpD,4FAA4F;IAC5F,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;IAM9F,MAAM,CAAC,QAAQ,CAAC,6BAA6B,SAAkB;IAC/D,MAAM,CAAC,QAAQ,CAAC,wBAAwB,SAAa;CACtD"}

package/dist/cjs/base/auth/authenticate/common/constants.js

@@ -1,104 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ServiceAssertion = exports.JWKSKeyFormats = exports.JWKSKeyDrivers = exports.JWKSModes = exports.AuthenticationModes = exports.AuthenticationTokenTypes = exports.Authentication = exports.JOSEStandards = exports.AuthenticateStrategy = void 0;
-class AuthenticateStrategy {
-    static { this.BASIC = 'basic'; }
-    static { this.JWT = 'jwt'; }
-    static { this.SERVICE = 'service'; }
-    /** The strategies the FRAMEWORK ships. An application registers its own beyond these. */
-    static { this.SCHEME_SET = new Set([this.BASIC, this.JWT, this.SERVICE]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.AuthenticateStrategy = AuthenticateStrategy;
-class JOSEStandards {
-    static { this.JWS = 'JWS'; }
-    static { this.JWKS = 'JWKS'; }
-    static { this.SCHEME_SET = new Set([this.JWS, this.JWKS]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.JOSEStandards = JOSEStandards;
-class Authentication {
-    // Strategy
-    static { this.STRATEGY_BASIC = AuthenticateStrategy.BASIC; }
-    static { this.STRATEGY_JWT = AuthenticateStrategy.JWT; }
-    static { this.STRATEGY_SERVICE = AuthenticateStrategy.SERVICE; }
-    // Token type
-    static { this.TYPE_BASIC = 'Basic'; }
-    static { this.TYPE_BEARER = 'Bearer'; }
-    static { this.AUTHENTICATION_STRATEGY = 'authentication.strategy'; }
-    static { this.SKIP_AUTHENTICATION = 'authentication.skip'; }
-    static { this.CURRENT_USER = 'auth.current.user'; }
-    static { this.AUDIT_USER_ID = 'audit.user.id'; }
-}
-exports.Authentication = Authentication;
-class AuthenticationTokenTypes {
-    static { this.TYPE_AUTHORIZATION_CODE = '000_AUTHORIZATION_CODE'; }
-    static { this.TYPE_ACCESS_TOKEN = '100_ACCESS_TOKEN'; }
-    static { this.TYPE_REFRESH_TOKEN = '200_REFRESH_TOKEN'; }
-}
-exports.AuthenticationTokenTypes = AuthenticationTokenTypes;
-class AuthenticationModes {
-    static { this.ANY = 'any'; }
-    static { this.ALL = 'all'; }
-    static { this.SCHEME_SET = new Set([this.ANY, this.ALL]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.AuthenticationModes = AuthenticationModes;
-class JWKSModes {
-    static { this.ISSUER = 'issuer'; }
-    static { this.VERIFIER = 'verifier'; }
-    static { this.SCHEME_SET = new Set([this.ISSUER, this.VERIFIER]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.JWKSModes = JWKSModes;
-class JWKSKeyDrivers {
-    static { this.TEXT = 'text'; }
-    static { this.FILE = 'file'; }
-    static { this.SCHEME_SET = new Set([this.TEXT, this.FILE]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.JWKSKeyDrivers = JWKSKeyDrivers;
-class JWKSKeyFormats {
-    static { this.PEM = 'pem'; }
-    static { this.JWK = 'jwk'; }
-    static { this.SCHEME_SET = new Set([this.PEM, this.JWK]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.JWKSKeyFormats = JWKSKeyFormats;
-/**
- * Wire-level constants of the service assertion. Fixed rather than configurable: both ends of a
- * call must agree on them, and a knob here would let two services disagree silently.
- */
-class ServiceAssertion {
-    /** Its own header, so the end user's token keeps `Authorization` on the same request. */
-    static { this.HEADER = 'x-service-assertion'; }
-    /** The JWS `typ`. What stops a user token being replayed as an assertion when one JWKS serves both. */
-    static { this.TYP = 'svc+jwt'; }
-    static { this.ALGORITHM = 'EdDSA'; }
-    static { this.DEFAULT_REST_PATH = '/svc-certs'; }
-    /** How long a minted assertion stays valid. */
-    static { this.DEFAULT_SIGN_LIFETIME_SECONDS = 60; }
-    /** The oldest assertion a callee accepts, measured from `iat`. Its own decision, not the caller's. */
-    static { this.DEFAULT_ACCEPT_MAX_AGE_SECONDS = 60; }
-    static { this.DEFAULT_CLOCK_TOLERANCE_SECONDS = 5; }
-    /** Resolves the accepted age for one caller: its own override, then the service default. */
-    static resolveAcceptMaxAge(opts) {
-        return (opts.callerOverride ?? opts.serviceDefault ?? ServiceAssertion.DEFAULT_ACCEPT_MAX_AGE_SECONDS);
-    }
-    static { this.DEFAULT_JWKS_CACHE_MAX_AGE_MS = 10 * 60 * 1000; }
-    static { this.DEFAULT_JWKS_COOLDOWN_MS = 30 * 1000; }
-}
-exports.ServiceAssertion = ServiceAssertion;
-//# sourceMappingURL=constants.js.map

package/dist/cjs/base/auth/authenticate/common/constants.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/constants.ts"],"names":[],"mappings":";;;AAEA,MAAa,oBAAoB;aACf,UAAK,GAAG,OAAO,CAAC;aAChB,QAAG,GAAG,KAAK,CAAC;aACZ,YAAO,GAAG,SAAS,CAAC;IAEpC,yFAAyF;aACzE,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAE3E,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAVH,oDAWC;AAMD,MAAa,aAAa;aACR,QAAG,GAAG,KAAK,CAAC;aACZ,SAAI,GAAG,MAAM,CAAC;aAEd,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE5D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,sCASC;AAID,MAAa,cAAc;IACzB,WAAW;aACK,mBAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC;aAC5C,iBAAY,GAAG,oBAAoB,CAAC,GAAG,CAAC;aACxC,qBAAgB,GAAG,oBAAoB,CAAC,OAAO,CAAC;IAEhE,aAAa;aACG,eAAU,GAAG,OAAO,CAAC;aACrB,gBAAW,GAAG,QAAQ,CAAC;aAEvB,4BAAuB,GAAG,yBAAyB,CAAC;aACpD,wBAAmB,GAAG,qBAAqB,CAAC;aAE5C,iBAAY,GAAG,mBAAmB,CAAC;aACnC,kBAAa,GAAG,eAAe,CAAC;;AAdlD,wCAeC;AAED,MAAa,wBAAwB;aACnB,4BAAuB,GAAG,wBAAwB,CAAC;aACnD,sBAAiB,GAAG,kBAAkB,CAAC;aACvC,uBAAkB,GAAG,mBAAmB,CAAC;;AAH3D,4DAIC;AAED,MAAa,mBAAmB;aACd,QAAG,GAAG,KAAK,CAAC;aACZ,QAAG,GAAG,KAAK,CAAC;aAEZ,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,kDASC;AAID,MAAa,SAAS;aACJ,WAAM,GAAG,QAAQ,CAAC;aAClB,aAAQ,GAAG,UAAU,CAAC;aAEtB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEnE,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,8BASC;AAID,MAAa,cAAc;aACT,SAAI,GAAG,MAAM,CAAC;aACd,SAAI,GAAG,MAAM,CAAC;aAEd,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,wCASC;AAID,MAAa,cAAc;aACT,QAAG,GAAG,KAAK,CAAC;aACZ,QAAG,GAAG,KAAK,CAAC;aAEZ,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,wCASC;AAID;;;GAGG;AACH,MAAa,gBAAgB;IAC3B,yFAAyF;aACzE,WAAM,GAAG,qBAAqB,CAAC;IAE/C,uGAAuG;aACvF,QAAG,GAAG,SAAS,CAAC;aAEhB,cAAS,GAAG,OAAO,CAAC;aAEpB,sBAAiB,GAAG,YAAY,CAAC;IACjD,+CAA+C;aAC/B,kCAA6B,GAAG,EAAE,CAAC;IAEnD,sGAAsG;aACtF,mCAA8B,GAAG,EAAE,CAAC;aACpC,oCAA+B,GAAG,CAAC,CAAC;IAEpD,4FAA4F;IAC5F,MAAM,CAAC,mBAAmB,CAAC,IAA0D;QACnF,OAAO,CACL,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,IAAI,gBAAgB,CAAC,8BAA8B,CAC9F,CAAC;IACJ,CAAC;aAEe,kCAA6B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;aAC/C,6BAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;;AAzBvD,4CA0BC"}