@zintrust/core 3.5.0 → 3.5.1

package/src/auth/LoginFlow.d.ts

@@ -1,71 +0,0 @@
-import { type JwtPayload } from '../security/JwtManager.js';
-export type LoginFlowStage = 'identify' | 'verify' | 'issue' | 'audit';
-export type LoginFlowError = Error & {
-    stage: LoginFlowStage;
-    details?: unknown;
-};
-export type LoginFlowIdentity = Record<string, unknown> | null;
-export type LoginFlowVerifiedRecord = {
-    user?: unknown;
-    subject?: string;
-    claims?: JwtPayload;
-    metadata?: Record<string, unknown>;
-};
-export type LoginFlowResult = {
-    identity: LoginFlowIdentity;
-    verified: LoginFlowVerifiedRecord;
-    issued?: unknown;
-};
-export type LoginFlowProvider<TContext = unknown> = {
-    identify: (input: unknown, context: TContext) => Promise<LoginFlowIdentity>;
-    verify: (identity: LoginFlowIdentity, input: unknown, context: TContext) => Promise<LoginFlowVerifiedRecord>;
-};
-export type LoginFlowIssuerInput<TContext = unknown> = {
-    verified: LoginFlowVerifiedRecord;
-    context: TContext;
-};
-export type BulletproofJwtIssued = Readonly<{
-    token: string;
-    token_type: 'Bearer';
-    deviceId: string;
-    deviceSecret: string;
-}>;
-export type LoginFlowIssuer<TContext = unknown> = (input: LoginFlowIssuerInput<TContext>) => Promise<unknown>;
-export type LoginFlowAuditEvent<TContext = unknown> = {
-    status: 'success' | 'failed';
-    stage?: LoginFlowStage;
-    provider: string;
-    issuer?: string;
-    identity?: LoginFlowIdentity;
-    verified?: LoginFlowVerifiedRecord;
-    issued?: unknown;
-    error?: unknown;
-    context: TContext;
-};
-export type LoginFlowAuditor<TContext = unknown> = (event: LoginFlowAuditEvent<TContext>) => void | Promise<void>;
-export type LoginFlowCreateOptions<TContext = unknown> = {
-    provider: string | LoginFlowProvider<TContext>;
-    context: TContext;
-};
-export type LoginFlowBuilder<TContext = unknown> = {
-    identify: (input: unknown) => LoginFlowBuilder<TContext>;
-    verify: (input: unknown) => LoginFlowBuilder<TContext>;
-    issue: (issuer: string | LoginFlowIssuer<TContext>) => LoginFlowBuilder<TContext>;
-    audit: (auditor?: string | LoginFlowAuditor<TContext>) => LoginFlowBuilder<TContext>;
-    run: () => Promise<LoginFlowResult>;
-};
-export type LoginFlowNamespace = {
-    create: <TContext = unknown>(options: LoginFlowCreateOptions<TContext>) => LoginFlowBuilder<TContext>;
-    registerProvider: <TContext = unknown>(name: string, provider: LoginFlowProvider<TContext>) => void;
-    unregisterProvider: (name: string) => void;
-    hasProvider: (name: string) => boolean;
-    registerIssuer: <TContext = unknown>(name: string, issuer: LoginFlowIssuer<TContext>) => void;
-    unregisterIssuer: (name: string) => void;
-    hasIssuer: (name: string) => boolean;
-    registerAuditor: <TContext = unknown>(name: string, auditor: LoginFlowAuditor<TContext>) => void;
-    unregisterAuditor: (name: string) => void;
-    hasAuditor: (name: string) => boolean;
-    clearRegistrations: () => void;
-};
-export declare const LoginFlow: LoginFlowNamespace;
-//# sourceMappingURL=LoginFlow.d.ts.map

package/src/auth/LoginFlow.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"LoginFlow.d.ts","sourceRoot":"","sources":["../../../src/auth/LoginFlow.ts"],"names":[],"mappings":"AAaA,OAAO,EAAc,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEnE,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAEvE,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG;IACnC,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;AAE/D,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,QAAQ,EAAE,uBAAuB,CAAC;IAClC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,iBAAiB,CAAC,QAAQ,GAAG,OAAO,IAAI;IAClD,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC5E,MAAM,EAAE,CACN,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,QAAQ,KACd,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,oBAAoB,CAAC,QAAQ,GAAG,OAAO,IAAI;IACrD,QAAQ,EAAE,uBAAuB,CAAC;IAClC,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,QAAQ,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAEH,MAAM,MAAM,eAAe,CAAC,QAAQ,GAAG,OAAO,IAAI,CAChD,KAAK,EAAE,oBAAoB,CAAC,QAAQ,CAAC,KAClC,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,MAAM,MAAM,mBAAmB,CAAC,QAAQ,GAAG,OAAO,IAAI;IACpD,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gBAAgB,CAAC,QAAQ,GAAG,OAAO,IAAI,CACjD,KAAK,EAAE,mBAAmB,CAAC,QAAQ,CAAC,KACjC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B,MAAM,MAAM,sBAAsB,CAAC,QAAQ,GAAG,OAAO,IAAI;IACvD,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gBAAgB,CAAC,QAAQ,GAAG,OAAO,IAAI;IACjD,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACvD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAClF,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACrF,GAAG,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,CAAC,QAAQ,GAAG,OAAO,EACzB,OAAO,EAAE,sBAAsB,CAAC,QAAQ,CAAC,KACtC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAChC,gBAAgB,EAAE,CAAC,QAAQ,GAAG,OAAO,EACnC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,CAAC,KAClC,IAAI,CAAC;IACV,kBAAkB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACvC,cAAc,EAAE,CAAC,QAAQ,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;IAC9F,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACrC,eAAe,EAAE,CAAC,QAAQ,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;IACjG,iBAAiB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,kBAAkB,EAAE,MAAM,IAAI,CAAC;CAChC,CAAC;AA2lBF,eAAO,MAAM,SAAS,EAAE,kBAYtB,CAAC"}

package/src/auth/LoginFlow.js

@@ -1,448 +0,0 @@
-import { SystemTraceBridge } from '../trace/SystemTraceBridge.js';
-import { ErrorFactory } from '../exceptions/ZintrustError.js';
-import { isFunction, isNonEmptyString, isObject } from '../helper/index.js';
-import { detectRuntimePlatform, RuntimeServices, } from '../runtime/RuntimeServices.js';
-import { BulletproofDeviceStore, } from '../security/BulletproofDeviceStore.js';
-import { JwtManager } from '../security/JwtManager.js';
-const providerRegistry = new Map();
-const issuerRegistry = new Map();
-const auditorRegistry = new Map();
-const createLoginFlowError = (stage, message, details) => {
-    return Object.assign(ErrorFactory.createValidationError(message, details), {
-        stage,
-        details,
-    });
-};
-const isLoginFlowError = (value) => {
-    if (!isObject(value)) {
-        return false;
-    }
-    return isNonEmptyString(value['stage']);
-};
-const getNamedProvider = (name) => {
-    const provider = providerRegistry.get(name);
-    if (!provider) {
-        throw createLoginFlowError('identify', `LoginFlow provider "${name}" is not registered`, {
-            provider: name,
-        });
-    }
-    return provider;
-};
-const getNamedIssuer = (name) => {
-    const issuer = issuerRegistry.get(name);
-    if (!issuer) {
-        throw createLoginFlowError('issue', `LoginFlow issuer "${name}" is not registered`, {
-            issuer: name,
-        });
-    }
-    return issuer;
-};
-const getNamedAuditor = (name) => {
-    const auditor = auditorRegistry.get(name);
-    if (!auditor) {
-        throw createLoginFlowError('audit', `LoginFlow auditor "${name}" is not registered`, {
-            auditor: name,
-        });
-    }
-    return auditor;
-};
-const resolveProvider = (provider) => {
-    if (typeof provider === 'string') {
-        return getNamedProvider(provider);
-    }
-    return provider;
-};
-const resolveProviderName = (provider) => {
-    if (typeof provider === 'string') {
-        return provider;
-    }
-    return 'inline';
-};
-const resolveIssuer = (issuer) => {
-    if (typeof issuer === 'string') {
-        return getNamedIssuer(issuer);
-    }
-    return issuer;
-};
-const resolveIssuerName = (issuer) => {
-    if (typeof issuer === 'string') {
-        return issuer;
-    }
-    return 'inline';
-};
-const resolveAuditor = (auditor) => {
-    if (typeof auditor === 'string') {
-        return getNamedAuditor(auditor);
-    }
-    return auditor;
-};
-const normalizeVerifiedRecord = (value) => {
-    if (!isObject(value)) {
-        throw createLoginFlowError('verify', 'LoginFlow verify() must return an object', { value });
-    }
-    const record = value;
-    if (record.subject !== undefined && !isNonEmptyString(record.subject)) {
-        throw createLoginFlowError('verify', 'LoginFlow verify() returned an invalid subject', {
-            subject: record.subject,
-        });
-    }
-    if (record.claims !== undefined && !isObject(record.claims)) {
-        throw createLoginFlowError('verify', 'LoginFlow verify() returned invalid claims', {
-            claims: record.claims,
-        });
-    }
-    return record;
-};
-const createJwtIssuer = async ({ verified, }) => {
-    const claims = isObject(verified.claims) ? { ...verified.claims } : {};
-    if (isNonEmptyString(verified.subject) && !isNonEmptyString(claims.sub)) {
-        claims.sub = verified.subject;
-    }
-    return JwtManager.signAccessToken(claims);
-};
-const getContextRecord = (context) => {
-    return isObject(context) ? context : {};
-};
-const getContextRequest = (context) => {
-    const request = getContextRecord(context)['request'];
-    return isObject(request) ? request : undefined;
-};
-const getContextString = (context, key) => {
-    const value = getContextRecord(context)[key];
-    return typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined;
-};
-const getBodyString = (request, key) => {
-    if (request === undefined || typeof request.getBody !== 'function')
-        return undefined;
-    const body = request.getBody();
-    if (!isObject(body))
-        return undefined;
-    const value = body[key];
-    return typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined;
-};
-const getRequestHeaderString = (request, name) => {
-    if (request === undefined || typeof request.getHeader !== 'function')
-        return undefined;
-    const value = request.getHeader(name);
-    if (Array.isArray(value)) {
-        return typeof value[0] === 'string' && value[0].trim() !== '' ? value[0].trim() : undefined;
-    }
-    return typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined;
-};
-const bytesToHex = (bytes) => {
-    let out = '';
-    for (const byte of bytes)
-        out += byte.toString(16).padStart(2, '0');
-    return out;
-};
-const getRuntimeCrypto = () => RuntimeServices.create(detectRuntimePlatform()).crypto;
-const generateDeviceId = () => {
-    const bytes = getRuntimeCrypto().getRandomValues(new Uint8Array(16));
-    return `dev_${bytesToHex(bytes)}`;
-};
-const generateDeviceSecret = () => {
-    const bytes = getRuntimeCrypto().getRandomValues(new Uint8Array(32));
-    return `hex:${bytesToHex(bytes)}`;
-};
-const getClaimedDeviceId = (claims) => {
-    const deviceId = claims['deviceId'];
-    return typeof deviceId === 'string' && deviceId.trim() !== '' ? deviceId.trim() : undefined;
-};
-const resolveBulletproofDeviceId = (context, request, claims) => {
-    return (getContextString(context, 'deviceId') ??
-        getBodyString(request, 'deviceId') ??
-        getClaimedDeviceId(claims) ??
-        generateDeviceId());
-};
-const resolveBulletproofUserId = (context, verified) => {
-    const subjectUserId = isNonEmptyString(verified.subject) ? verified.subject.trim() : undefined;
-    const verifiedUserId = isObject(verified.user) && verified.user['id'] !== undefined
-        ? String(verified.user['id'])
-        : undefined;
-    return getContextString(context, 'userId') ?? subjectUserId ?? verifiedUserId;
-};
-const buildBulletproofDeviceRecord = (context, verified, request, claims, deviceSecret) => {
-    const deviceId = resolveBulletproofDeviceId(context, request, claims);
-    const userId = resolveBulletproofUserId(context, verified);
-    const userAgent = getRequestHeaderString(request, 'user-agent');
-    return {
-        deviceId,
-        record: {
-            deviceId,
-            signingSecret: deviceSecret,
-            lastSeenAt: new Date(),
-            ...(isNonEmptyString(userId) ? { userId } : {}),
-            ...(userAgent === undefined ? {} : { userAgent }),
-        },
-    };
-};
-const createBulletproofIssuer = async ({ verified, context, }) => {
-    const claims = isObject(verified.claims) ? { ...verified.claims } : {};
-    if (isNonEmptyString(verified.subject) && !isNonEmptyString(claims.sub)) {
-        claims.sub = verified.subject;
-    }
-    const request = getContextRequest(context);
-    const deviceSecret = generateDeviceSecret();
-    const { deviceId, record } = buildBulletproofDeviceRecord(context, verified, request, claims, deviceSecret);
-    claims['deviceId'] = deviceId;
-    await BulletproofDeviceStore.upsert(record);
-    const token = await JwtManager.signAccessToken(claims);
-    return Object.freeze({
-        token,
-        token_type: 'Bearer',
-        deviceId,
-        deviceSecret,
-    });
-};
-const createTraceAuditor = (event) => {
-    const subject = typeof event.verified?.subject === 'string' && event.verified.subject.trim() !== ''
-        ? event.verified.subject
-        : undefined;
-    SystemTraceBridge.emitAuth(event.status === 'success' ? 'login' : 'failed', subject);
-};
-const ensureNamedRegistration = (kind, name) => {
-    if (!isNonEmptyString(name)) {
-        throw createLoginFlowError('identify', `LoginFlow ${kind} name must be a non-empty string`, {
-            name,
-            kind,
-        });
-    }
-};
-const ensureProvider = (provider) => {
-    if (!isObject(provider) || !isFunction(provider['identify']) || !isFunction(provider['verify'])) {
-        throw createLoginFlowError('identify', 'LoginFlow provider must expose identify() and verify()', {
-            provider,
-        });
-    }
-};
-const ensureHandler = (stage, kind, handler) => {
-    if (!isFunction(handler)) {
-        throw createLoginFlowError(stage, `LoginFlow ${kind} must be a function`, {
-            handler,
-        });
-    }
-};
-const auditFailureIfNeeded = async (auditorTarget, event) => {
-    if (auditorTarget === undefined) {
-        return;
-    }
-    const auditor = resolveAuditor(auditorTarget);
-    await auditor(event);
-};
-const ensureRequiredInputs = (state) => {
-    if (!state.identifySet) {
-        throw createLoginFlowError('identify', 'LoginFlow identify() must be called before run()', {
-            provider: state.providerName,
-        });
-    }
-    if (!state.verifySet) {
-        throw createLoginFlowError('verify', 'LoginFlow verify() must be called before run()', {
-            provider: state.providerName,
-        });
-    }
-};
-const resolveProviderWithAudit = async (state) => {
-    try {
-        return resolveProvider(state.options.provider);
-    }
-    catch (error) {
-        const wrapped = isLoginFlowError(error)
-            ? error
-            : createLoginFlowError('identify', 'LoginFlow identify() failed', {
-                provider: state.providerName,
-                error,
-            });
-        await auditFailureIfNeeded(state.auditorTarget, {
-            status: 'failed',
-            stage: 'identify',
-            provider: state.providerName,
-            context: state.options.context,
-            error: wrapped,
-        });
-        throw wrapped;
-    }
-};
-const identifyWithAudit = async (state, provider) => {
-    try {
-        return await provider.identify(state.identifyInput, state.options.context);
-    }
-    catch (error) {
-        const wrapped = createLoginFlowError('identify', 'LoginFlow identify() failed', {
-            provider: state.providerName,
-            error,
-        });
-        await auditFailureIfNeeded(state.auditorTarget, {
-            status: 'failed',
-            stage: 'identify',
-            provider: state.providerName,
-            context: state.options.context,
-            error: wrapped,
-        });
-        throw wrapped;
-    }
-};
-const verifyWithAudit = async (state, provider, identity) => {
-    try {
-        return normalizeVerifiedRecord(await provider.verify(identity, state.verifyInput, state.options.context));
-    }
-    catch (error) {
-        const wrapped = isLoginFlowError(error)
-            ? error
-            : createLoginFlowError('verify', 'LoginFlow verify() failed', {
-                provider: state.providerName,
-                error,
-            });
-        await auditFailureIfNeeded(state.auditorTarget, {
-            status: 'failed',
-            stage: 'verify',
-            provider: state.providerName,
-            identity,
-            context: state.options.context,
-            error: wrapped,
-        });
-        throw wrapped;
-    }
-};
-const issueWithAudit = async (state, identity, verified) => {
-    if (state.issueTarget === undefined) {
-        return undefined;
-    }
-    const issuer = resolveIssuer(state.issueTarget);
-    try {
-        return await issuer({ verified, context: state.options.context });
-    }
-    catch (error) {
-        const wrapped = createLoginFlowError('issue', 'LoginFlow issue() failed', {
-            provider: state.providerName,
-            issuer: state.issueName,
-            error,
-        });
-        await auditFailureIfNeeded(state.auditorTarget, {
-            status: 'failed',
-            stage: 'issue',
-            provider: state.providerName,
-            issuer: state.issueName,
-            identity,
-            verified,
-            context: state.options.context,
-            error: wrapped,
-        });
-        throw wrapped;
-    }
-};
-const auditSuccess = async (state, identity, verified, issued) => {
-    if (state.auditorTarget === undefined) {
-        return;
-    }
-    const auditor = resolveAuditor(state.auditorTarget);
-    await auditor({
-        status: 'success',
-        provider: state.providerName,
-        issuer: state.issueName,
-        identity,
-        verified,
-        issued,
-        context: state.options.context,
-    });
-};
-const runLoginFlow = async (state) => {
-    const provider = await resolveProviderWithAudit(state);
-    ensureRequiredInputs(state);
-    const identity = await identifyWithAudit(state, provider);
-    const verified = await verifyWithAudit(state, provider, identity);
-    const issued = await issueWithAudit(state, identity, verified);
-    await auditSuccess(state, identity, verified, issued);
-    return {
-        identity,
-        verified,
-        ...(issued === undefined ? {} : { issued }),
-    };
-};
-const createBuilder = (state) => {
-    return Object.freeze({
-        identify(input) {
-            state.identifyInput = input;
-            state.identifySet = true;
-            return this;
-        },
-        verify(input) {
-            state.verifyInput = input;
-            state.verifySet = true;
-            return this;
-        },
-        issue(issuer) {
-            state.issueTarget = issuer;
-            state.issueName = resolveIssuerName(issuer);
-            return this;
-        },
-        audit(auditor) {
-            state.auditorTarget = auditor ?? 'trace';
-            return this;
-        },
-        async run() {
-            return runLoginFlow(state);
-        },
-    });
-};
-const create = (options) => {
-    return createBuilder({
-        options,
-        providerName: resolveProviderName(options.provider),
-        identifyInput: undefined,
-        verifyInput: undefined,
-        issueTarget: undefined,
-        issueName: undefined,
-        auditorTarget: undefined,
-        identifySet: false,
-        verifySet: false,
-    });
-};
-const registerProvider = (name, provider) => {
-    ensureNamedRegistration('provider', name);
-    ensureProvider(provider);
-    providerRegistry.set(name, provider);
-};
-const unregisterProvider = (name) => {
-    providerRegistry.delete(name);
-};
-const hasProvider = (name) => providerRegistry.has(name);
-const registerIssuer = (name, issuer) => {
-    ensureNamedRegistration('issuer', name);
-    ensureHandler('issue', 'issuer', issuer);
-    issuerRegistry.set(name, issuer);
-};
-const unregisterIssuer = (name) => {
-    issuerRegistry.delete(name);
-};
-const hasIssuer = (name) => issuerRegistry.has(name);
-const registerAuditor = (name, auditor) => {
-    ensureNamedRegistration('auditor', name);
-    ensureHandler('audit', 'auditor', auditor);
-    auditorRegistry.set(name, auditor);
-};
-const unregisterAuditor = (name) => {
-    auditorRegistry.delete(name);
-};
-const hasAuditor = (name) => auditorRegistry.has(name);
-const clearRegistrations = () => {
-    providerRegistry.clear();
-    issuerRegistry.clear();
-    auditorRegistry.clear();
-    issuerRegistry.set('jwt', createJwtIssuer);
-    issuerRegistry.set('bulletproof', createBulletproofIssuer);
-    auditorRegistry.set('trace', createTraceAuditor);
-};
-clearRegistrations();
-export const LoginFlow = Object.freeze({
-    create,
-    registerProvider,
-    unregisterProvider,
-    hasProvider,
-    registerIssuer,
-    unregisterIssuer,
-    hasIssuer,
-    registerAuditor,
-    unregisterAuditor,
-    hasAuditor,
-    clearRegistrations,
-});

package/src/auth-index.d.ts

@@ -1,8 +0,0 @@
-/**
- * ZinTrust Auth - Authentication and login flow utilities
- * Contains Auth service and LoginFlow for authentication workflows
- */
-export { Auth } from './auth/Auth.js';
-export { LoginFlow } from './auth/LoginFlow.js';
-export type { BulletproofJwtIssued, LoginFlowAuditEvent, LoginFlowAuditor, LoginFlowBuilder, LoginFlowCreateOptions, LoginFlowError, LoginFlowIdentity, LoginFlowIssuer, LoginFlowIssuerInput, LoginFlowProvider, LoginFlowResult, LoginFlowStage, LoginFlowVerifiedRecord, } from './auth/LoginFlow.js';
-//# sourceMappingURL=auth-index.d.ts.map

package/src/auth-index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-index.d.ts","sourceRoot":"","sources":["../../src/auth-index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAGnC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,uBAAuB,GACxB,MAAM,iBAAiB,CAAC"}

package/src/auth-index.js

@@ -1,8 +0,0 @@
-/**
- * ZinTrust Auth - Authentication and login flow utilities
- * Contains Auth service and LoginFlow for authentication workflows
- */
-// Auth service
-export { Auth } from './auth/Auth.js';
-// Login flow
-export { LoginFlow } from './auth/LoginFlow.js';

package/src/boot/Application.d.ts

@@ -1,16 +0,0 @@
-/**
- * Application - Framework core entry point
- * Handles application lifecycle, booting, and environment
- */
-import type { IApplication } from './registry/type.js';
-/**
- * Application Factory
- */
-export declare const Application: Readonly<{
-    /**
-     * Create a new application instance
-     */
-    create(basePath?: string): IApplication;
-}>;
-export default Application;
-//# sourceMappingURL=Application.d.ts.map

package/src/boot/Application.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"Application.d.ts","sourceRoot":"","sources":["../../../src/boot/Application.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,OAAO,KAAK,EAAE,YAAY,EAAkC,MAAM,gBAAgB,CAAC;AA2DnF;;GAEG;AACH,eAAO,MAAM,WAAW;IACtB;;OAEG;sBACe,MAAM,GAAG,YAAY;EA0CvC,CAAC;AAEH,eAAe,WAAW,CAAC"}

package/src/boot/Application.js

@@ -1,95 +0,0 @@
-/**
- * Application - Framework core entry point
- * Handles application lifecycle, booting, and environment
- */
-import { appConfig } from '../config/index.js';
-import { ServiceContainer } from '../container/ServiceContainer.js';
-import { MiddlewareStack } from '../middleware/MiddlewareStack.js';
-import { Router } from '../routes/Router.js';
-import { createLifecycle, registerFrameworkShutdownHooks } from './registry/runtime.js';
-const ShutdownManager = Object.freeze({
-    create() {
-        const hooks = [];
-        return Object.freeze({
-            add(hook) {
-                hooks.push(hook);
-            },
-            async run() {
-                // Run hooks in parallel for better performance
-                await Promise.all(hooks.map(async (hook) => hook()));
-            },
-        });
-    },
-});
-const resolveBasePath = (basePath) => {
-    if (typeof basePath === 'string')
-        return basePath;
-    if (typeof process !== 'undefined' && typeof process.cwd === 'function')
-        return process.cwd();
-    return '';
-};
-const makeJoinFromBase = (resolvedBasePath) => (subPath) => {
-    return resolvedBasePath.length > 0 ? `${resolvedBasePath}/${subPath}` : subPath;
-};
-const registerCorePaths = (container, resolvedBasePath, joinFromBase) => {
-    container.singleton('paths', {
-        base: resolvedBasePath,
-        app: joinFromBase('app'),
-        config: joinFromBase('config'),
-        database: joinFromBase('database'),
-        routes: joinFromBase('routes'),
-        tests: joinFromBase('tests'),
-    });
-};
-const registerCoreInstances = (params) => {
-    params.container.singleton('env', params.environment);
-    params.container.singleton('router', params.router);
-    params.container.singleton('middleware', params.middlewareStack);
-    params.container.singleton('container', params.container);
-    params.container.singleton('shutdownManager', params.shutdownManager);
-};
-/**
- * Application Factory
- */
-export const Application = Object.freeze({
-    /**
-     * Create a new application instance
-     */
-    create(basePath) {
-        const resolvedBasePath = resolveBasePath(basePath);
-        const joinFromBase = makeJoinFromBase(resolvedBasePath);
-        const environment = appConfig.environment;
-        const container = ServiceContainer.create();
-        const router = Router.createRouter();
-        const middlewareStack = MiddlewareStack.create();
-        const shutdownManager = ShutdownManager.create();
-        let booted = false;
-        registerCorePaths(container, resolvedBasePath, joinFromBase);
-        registerCoreInstances({ container, environment, router, middlewareStack, shutdownManager });
-        registerFrameworkShutdownHooks(shutdownManager);
-        const { boot, shutdown } = createLifecycle({
-            environment,
-            resolvedBasePath,
-            router,
-            shutdownManager,
-            getBooted: () => booted,
-            setBooted: (value) => {
-                booted = value;
-            },
-        });
-        return {
-            boot,
-            shutdown,
-            isBooted: () => booted,
-            isDevelopment: () => appConfig.isDevelopment(),
-            isProduction: () => appConfig.isProduction(),
-            isTesting: () => appConfig.isTesting(),
-            getEnvironment: () => environment,
-            getRouter: () => router,
-            getContainer: () => container,
-            getMiddlewareStack: () => middlewareStack,
-            getBasePath: () => resolvedBasePath,
-        };
-    },
-});
-export default Application;

package/src/boot/Server.d.ts

@@ -1,24 +0,0 @@
-/**
- * Server - HTTP Server implementation
- * Uses Node.js built-in HTTP server with no external dependencies
- */
-import type { IKernel } from '../http/Kernel.js';
-import * as http from '../node-singletons/http.js';
-import type { IApplication } from './registry/type.js';
-export interface IServer {
-    listen(): Promise<void>;
-    close(): Promise<void>;
-    getHttpServer(): http.Server;
-}
-/**
- * Server - HTTP Server implementation
- * Refactored to Functional Object pattern
- */
-export declare const Server: Readonly<{
-    /**
-     * Create a new server instance
-     */
-    create(app: IApplication, port?: number, host?: string, kernel?: IKernel | null): IServer;
-}>;
-export default Server;
-//# sourceMappingURL=Server.d.ts.map