mcp-auth-server 0.0.0-stage → 0.1.0

package/lib/cache/lru.metadata.cache.js

@@ -0,0 +1,31 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+class LruMetadataCache {
+    maxEntries;
+    now;
+    entries = new Map();
+    constructor(maxEntries = 500, now = Date.now) {
+        this.maxEntries = maxEntries;
+        this.now = now;
+    }
+    async get(url) {
+        const entry = this.entries.get(url);
+        if (!entry)
+            return undefined;
+        if (entry.expiresAt <= this.now()) {
+            this.entries.delete(url);
+            return undefined;
+        }
+        this.entries.delete(url);
+        this.entries.set(url, entry);
+        return entry.value;
+    }
+    async set(url, value, ttlSeconds) {
+        this.entries.delete(url);
+        this.entries.set(url, { value, expiresAt: this.now() + ttlSeconds * 1000 });
+        while (this.entries.size > this.maxEntries)
+            this.entries.delete(this.entries.keys().next().value);
+    }
+}
+exports.default = LruMetadataCache;
+//# sourceMappingURL=lru.metadata.cache.js.map

package/lib/cache/lru.metadata.cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lru.metadata.cache.js","sourceRoot":"","sources":["../../src/cache/lru.metadata.cache.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAKb,MAAqB,gBAAgB;IAIlB;IACA;IAJV,OAAO,GAAgE,IAAI,GAAG,EAAE,CAAC;IAEzF,YACkB,aAAqB,GAAG,EACxB,MAAoB,IAAI,CAAC,GAAG;QAD5B,eAAU,GAAV,UAAU,CAAc;QACxB,QAAG,GAAH,GAAG,CAAyB;IAC3C,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAC,GAAW;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAyB,EAAE,UAAkB;QACnE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,EAAC,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;IAC7G,CAAC;CACD;AAzBD,mCAyBC"}

package/lib/functions/body/parse.body.d.ts

@@ -0,0 +1,2 @@
+declare const parseBody: (contentType: string | undefined, raw: string) => unknown;
+export default parseBody;

package/lib/functions/body/parse.body.js

@@ -0,0 +1,20 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const parseBody = (contentType, raw) => {
+    if (!raw)
+        return undefined;
+    const type = (contentType ?? '').toLowerCase();
+    if (type.includes('application/x-www-form-urlencoded'))
+        return Object.fromEntries(new URLSearchParams(raw));
+    if (type.includes('json') || !type) {
+        try {
+            return JSON.parse(raw);
+        }
+        catch {
+            return undefined;
+        }
+    }
+    return undefined;
+};
+exports.default = parseBody;
+//# sourceMappingURL=parse.body.js.map

package/lib/functions/body/parse.body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.body.js","sourceRoot":"","sources":["../../../src/functions/body/parse.body.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,SAAS,GAAG,CAAC,WAA+B,EAAE,GAAW,EAAW,EAAE;IAC3E,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,IAAI,GAAW,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5G,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC,CAAC;AACF,kBAAe,SAAS,CAAC"}

package/lib/functions/body/parse.query.d.ts

@@ -0,0 +1,2 @@
+declare const parseQuery: (search: string | URLSearchParams) => Record<string, string | string[]>;
+export default parseQuery;

package/lib/functions/body/parse.query.js

@@ -0,0 +1,16 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const parseQuery = (search) => {
+    const params = 'string' === typeof search ? new URLSearchParams(search) : search;
+    const query = {};
+    for (const [key, value] of params) {
+        const existing = query[key];
+        if (undefined === existing)
+            query[key] = value;
+        else
+            query[key] = [].concat(existing, value);
+    }
+    return query;
+};
+exports.default = parseQuery;
+//# sourceMappingURL=parse.query.js.map

package/lib/functions/body/parse.query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.query.js","sourceRoot":"","sources":["../../../src/functions/body/parse.query.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,UAAU,GAAG,CAAC,MAAgC,EAAqC,EAAE;IAC1F,MAAM,MAAM,GAAoB,QAAQ,KAAK,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAClG,MAAM,KAAK,GAAsC,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAkC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3D,IAAI,SAAS,KAAK,QAAQ;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;;YAC1C,KAAK,CAAC,GAAG,CAAC,GAAI,EAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC,CAAC;AACF,kBAAe,UAAU,CAAC"}

package/lib/functions/cimd/assert.public.host.d.ts

@@ -0,0 +1,2 @@
+declare const assertPublicHost: (url: URL) => void;
+export default assertPublicHost;

package/lib/functions/cimd/assert.public.host.js

@@ -0,0 +1,15 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const is_private_ipv4_1 = __importDefault(require("./is.private.ipv4"));
+const is_private_ipv6_1 = __importDefault(require("./is.private.ipv6"));
+const internalName = /(^|\.)(localhost|local|internal|localdomain|home\.arpa)$/;
+const assertPublicHost = (url) => {
+    const host = url.hostname.toLowerCase();
+    if (internalName.test(host) || (0, is_private_ipv4_1.default)(host) || (0, is_private_ipv6_1.default)(host))
+        throw new Error('client metadata host is not a public address');
+};
+exports.default = assertPublicHost;
+//# sourceMappingURL=assert.public.host.js.map

package/lib/functions/cimd/assert.public.host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert.public.host.js","sourceRoot":"","sources":["../../../src/functions/cimd/assert.public.host.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAEb,wEAA8C;AAC9C,wEAA8C;AAE9C,MAAM,YAAY,GAAW,0DAA0D,CAAC;AAExF,MAAM,gBAAgB,GAAG,CAAC,GAAQ,EAAQ,EAAE;IAC3C,MAAM,IAAI,GAAW,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAA,yBAAa,EAAC,IAAI,CAAC,IAAI,IAAA,yBAAa,EAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;AAC5I,CAAC,CAAC;AACF,kBAAe,gBAAgB,CAAC"}

package/lib/functions/cimd/cache.seconds.d.ts

@@ -0,0 +1,2 @@
+declare const cacheSeconds: (header: string | null, maxCacheSeconds: number, defaultCacheSeconds: number) => number;
+export default cacheSeconds;

package/lib/functions/cimd/cache.seconds.js

@@ -0,0 +1,16 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const cacheSeconds = (header, maxCacheSeconds, defaultCacheSeconds) => {
+    if (!header)
+        return defaultCacheSeconds;
+    const directives = header
+        .toLowerCase()
+        .split(',')
+        .map((part) => part.trim());
+    if (directives.some((directive) => 'no-store' === directive || 'no-cache' === directive))
+        return 0;
+    const maxAge = directives.map((directive) => /^max-age=(\d+)$/.exec(directive)).find(Boolean);
+    return maxAge ? Math.min(Number(maxAge[1]), maxCacheSeconds) : defaultCacheSeconds;
+};
+exports.default = cacheSeconds;
+//# sourceMappingURL=cache.seconds.js.map

package/lib/functions/cimd/cache.seconds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.seconds.js","sourceRoot":"","sources":["../../../src/functions/cimd/cache.seconds.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,YAAY,GAAG,CAAC,MAAqB,EAAE,eAAuB,EAAE,mBAA2B,EAAU,EAAE;IAC5G,IAAI,CAAC,MAAM;QAAE,OAAO,mBAAmB,CAAC;IACxC,MAAM,UAAU,GAAa,MAAM;SACjC,WAAW,EAAE;SACb,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,SAAiB,EAAW,EAAE,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,CAAC;QAAE,OAAO,CAAC,CAAC;IACpH,MAAM,MAAM,GAAgC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAiB,EAA0B,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAC7H,CAAC;IAC7B,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;AACpF,CAAC,CAAC;AACF,kBAAe,YAAY,CAAC"}

package/lib/functions/cimd/create.metadata.resolver.d.ts

@@ -0,0 +1,5 @@
+import type CimdOptionsType from '../../types/cimd.options.type';
+import type IMetadataCache from '../../types/i.metadata.cache';
+import type MetadataResolutionType from '../../types/metadata.resolution.type';
+declare const createMetadataResolver: (options: CimdOptionsType, cache: IMetadataCache) => ((clientId: string) => Promise<MetadataResolutionType>);
+export default createMetadataResolver;

package/lib/functions/cimd/create.metadata.resolver.js

@@ -0,0 +1,53 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const assert_public_host_1 = __importDefault(require("./assert.public.host"));
+const cache_seconds_1 = __importDefault(require("./cache.seconds"));
+const host_matches_1 = __importDefault(require("./host.matches"));
+const read_limited_1 = __importDefault(require("./read.limited"));
+const validate_metadata_document_1 = __importDefault(require("./validate.metadata.document"));
+const createMetadataResolver = (options, cache) => {
+    const fetchImpl = options.fetch ?? ((input, init) => fetch(input, init));
+    const timeoutMs = options.timeoutMs ?? 5000;
+    const maxBytes = options.maxBytes ?? 5120;
+    const maxCacheSeconds = options.maxCacheSeconds ?? 3600;
+    const defaultCacheSeconds = options.defaultCacheSeconds ?? 300;
+    return async (clientId) => {
+        try {
+            const url = new URL(clientId);
+            const host = url.hostname.toLowerCase();
+            if (options.trust?.denyHosts && (0, host_matches_1.default)(host, options.trust.denyHosts))
+                throw new Error('client host is denied');
+            if (options.trust?.allowHosts && !(0, host_matches_1.default)(host, options.trust.allowHosts))
+                throw new Error('client host is not allowed');
+            const cached = await cache.get(clientId);
+            if (cached)
+                return { ok: true, metadata: cached };
+            (0, assert_public_host_1.default)(url);
+            await options.guard?.(url);
+            const response = await fetchImpl(clientId, { redirect: 'manual', headers: { accept: 'application/json' }, signal: AbortSignal.timeout(timeoutMs) });
+            if (200 !== response.status)
+                throw new Error(`client metadata fetch returned status ${response.status}`);
+            const text = await (0, read_limited_1.default)(response, maxBytes);
+            let parsed;
+            try {
+                parsed = JSON.parse(text);
+            }
+            catch {
+                throw new Error('client metadata document is not valid JSON');
+            }
+            const metadata = (0, validate_metadata_document_1.default)(parsed, clientId);
+            const seconds = (0, cache_seconds_1.default)(response.headers.get('cache-control'), maxCacheSeconds, defaultCacheSeconds);
+            if (seconds > 0)
+                await cache.set(clientId, metadata, seconds);
+            return { ok: true, metadata };
+        }
+        catch (error) {
+            return { ok: false, reason: error instanceof Error ? error.message : 'client metadata fetch failed' };
+        }
+    };
+};
+exports.default = createMetadataResolver;
+//# sourceMappingURL=create.metadata.resolver.js.map

package/lib/functions/cimd/create.metadata.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.metadata.resolver.js","sourceRoot":"","sources":["../../../src/functions/cimd/create.metadata.resolver.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAKb,8EAAoD;AACpD,oEAA2C;AAC3C,kEAAyC;AACzC,kEAAyC;AACzC,8FAAoE;AAEpE,MAAM,sBAAsB,GAAG,CAAC,OAAwB,EAAE,KAAqB,EAA2D,EAAE;IAC3I,MAAM,SAAS,GAAiB,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,KAAU,EAAE,IAAkB,EAAqB,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7H,MAAM,SAAS,GAAW,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;IACpD,MAAM,QAAQ,GAAW,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;IAClD,MAAM,eAAe,GAAW,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;IAChE,MAAM,mBAAmB,GAAW,OAAO,CAAC,mBAAmB,IAAI,GAAG,CAAC;IAEvE,OAAO,KAAK,EAAE,QAAgB,EAAmC,EAAE;QAClE,IAAI,CAAC;YACJ,MAAM,GAAG,GAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,IAAI,GAAW,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAChD,IAAI,OAAO,CAAC,KAAK,EAAE,SAAS,IAAI,IAAA,sBAAW,EAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACrH,IAAI,OAAO,CAAC,KAAK,EAAE,UAAU,IAAI,CAAC,IAAA,sBAAW,EAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAE7H,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,MAAM;gBAAE,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAC,CAAC;YAEhD,IAAA,4BAAgB,EAAC,GAAG,CAAC,CAAC;YACtB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC;YAE3B,MAAM,QAAQ,GAAa,MAAM,SAAS,CAAC,QAAQ,EAAE,EAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAC,MAAM,EAAE,kBAAkB,EAAC,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAC,CAAC,CAAC;YAC1J,IAAI,GAAG,KAAK,QAAQ,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACzG,MAAM,IAAI,GAAW,MAAM,IAAA,sBAAW,EAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC3D,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,QAAQ,GAAG,IAAA,oCAAwB,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAE5D,MAAM,OAAO,GAAW,IAAA,uBAAY,EAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAC;YAClH,IAAI,OAAO,GAAG,CAAC;gBAAE,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9D,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,EAAC,CAAC;QACrG,CAAC;IACF,CAAC,CAAC;AACH,CAAC,CAAC;AACF,kBAAe,sBAAsB,CAAC"}

package/lib/functions/cimd/host.matches.d.ts

@@ -0,0 +1,2 @@
+declare const hostMatches: (host: string, patterns: string[]) => boolean;
+export default hostMatches;

package/lib/functions/cimd/host.matches.js

@@ -0,0 +1,5 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const hostMatches = (host, patterns) => patterns.some((pattern) => (pattern.startsWith('*.') ? host.endsWith(pattern.slice(1)) : host === pattern));
+exports.default = hostMatches;
+//# sourceMappingURL=host.matches.js.map

package/lib/functions/cimd/host.matches.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.matches.js","sourceRoot":"","sources":["../../../src/functions/cimd/host.matches.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,QAAkB,EAAW,EAAE,CACjE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAe,EAAW,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC;AAC9H,kBAAe,WAAW,CAAC"}

package/lib/functions/cimd/is.metadata.client.id.d.ts

@@ -0,0 +1,2 @@
+declare const isMetadataClientId: (clientId: string) => boolean;
+export default isMetadataClientId;

package/lib/functions/cimd/is.metadata.client.id.js

@@ -0,0 +1,14 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const isMetadataClientId = (clientId) => {
+    let url;
+    try {
+        url = new URL(clientId);
+    }
+    catch {
+        return false;
+    }
+    return 'https:' === url.protocol && '/' !== url.pathname && !url.hash && !url.username && !url.password && url.href === clientId;
+};
+exports.default = isMetadataClientId;
+//# sourceMappingURL=is.metadata.client.id.js.map

package/lib/functions/cimd/is.metadata.client.id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is.metadata.client.id.js","sourceRoot":"","sources":["../../../src/functions/cimd/is.metadata.client.id.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,kBAAkB,GAAG,CAAC,QAAgB,EAAW,EAAE;IACxD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,KAAK,GAAG,CAAC,QAAQ,IAAI,GAAG,KAAK,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC;AAClI,CAAC,CAAC;AACF,kBAAe,kBAAkB,CAAC"}

package/lib/functions/cimd/is.private.ipv4.d.ts

@@ -0,0 +1,2 @@
+declare const isPrivateIpv4: (host: string) => boolean;
+export default isPrivateIpv4;

package/lib/functions/cimd/is.private.ipv4.js

@@ -0,0 +1,18 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const isPrivateIpv4 = (host) => {
+    const match = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
+    if (!match)
+        return false;
+    const [a, b] = [Number(match[1]), Number(match[2])];
+    return (0 === a ||
+        10 === a ||
+        127 === a ||
+        (169 === a && 254 === b) ||
+        (172 === a && b >= 16 && b <= 31) ||
+        (192 === a && 168 === b) ||
+        (100 === a && b >= 64 && b <= 127) ||
+        a >= 224);
+};
+exports.default = isPrivateIpv4;
+//# sourceMappingURL=is.private.ipv4.js.map

package/lib/functions/cimd/is.private.ipv4.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is.private.ipv4.js","sourceRoot":"","sources":["../../../src/functions/cimd/is.private.ipv4.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,aAAa,GAAG,CAAC,IAAY,EAAW,EAAE;IAC/C,MAAM,KAAK,GAA2B,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChG,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,CACN,CAAC,KAAK,CAAC;QACP,EAAE,KAAK,CAAC;QACR,GAAG,KAAK,CAAC;QACT,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;QACxB,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;QACxB,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC;QAClC,CAAC,IAAI,GAAG,CACR,CAAC;AACH,CAAC,CAAC;AACF,kBAAe,aAAa,CAAC"}

package/lib/functions/cimd/is.private.ipv6.d.ts

@@ -0,0 +1,2 @@
+declare const isPrivateIpv6: (host: string) => boolean;
+export default isPrivateIpv6;

package/lib/functions/cimd/is.private.ipv6.js

@@ -0,0 +1,17 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const is_private_ipv4_1 = __importDefault(require("./is.private.ipv4"));
+const isPrivateIpv6 = (host) => {
+    const address = host.replace(/^\[|\]$/g, '').toLowerCase();
+    if (!address.includes(':'))
+        return false;
+    const mapped = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/.exec(address);
+    if (mapped)
+        return (0, is_private_ipv4_1.default)(mapped[1]);
+    return '::' === address || '::1' === address || /^f[cd]/.test(address) || /^fe[89ab]/.test(address) || address.startsWith('::ffff:');
+};
+exports.default = isPrivateIpv6;
+//# sourceMappingURL=is.private.ipv6.js.map

package/lib/functions/cimd/is.private.ipv6.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is.private.ipv6.js","sourceRoot":"","sources":["../../../src/functions/cimd/is.private.ipv6.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAEb,wEAA8C;AAE9C,MAAM,aAAa,GAAG,CAAC,IAAY,EAAW,EAAE;IAC/C,MAAM,OAAO,GAAW,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,MAAM,GAA2B,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrF,IAAI,MAAM;QAAE,OAAO,IAAA,yBAAa,EAAC,MAAM,CAAC,CAAC,CAAW,CAAC,CAAC;IACtD,OAAO,IAAI,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AACtI,CAAC,CAAC;AACF,kBAAe,aAAa,CAAC"}

package/lib/functions/cimd/read.limited.d.ts

@@ -0,0 +1,2 @@
+declare const readLimited: (response: Response, maxBytes: number) => Promise<string>;
+export default readLimited;

package/lib/functions/cimd/read.limited.js

@@ -0,0 +1,32 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const readLimited = async (response, maxBytes) => {
+    const declared = Number(response.headers.get('content-length'));
+    if (declared > maxBytes)
+        throw new Error('client metadata document is too large');
+    if (!response.body)
+        return '';
+    const reader = response.body.getReader();
+    const chunks = [];
+    let total = 0;
+    for (;;) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        total += value.byteLength;
+        if (total > maxBytes) {
+            await reader.cancel();
+            throw new Error('client metadata document is too large');
+        }
+        chunks.push(value);
+    }
+    const bytes = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return new TextDecoder().decode(bytes);
+};
+exports.default = readLimited;
+//# sourceMappingURL=read.limited.js.map

package/lib/functions/cimd/read.limited.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.limited.js","sourceRoot":"","sources":["../../../src/functions/cimd/read.limited.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,WAAW,GAAG,KAAK,EAAE,QAAkB,EAAE,QAAgB,EAAmB,EAAE;IACnF,MAAM,QAAQ,GAAW,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACxE,IAAI,QAAQ,GAAG,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAClF,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAW,CAAC,CAAC;IACtB,SAAS,CAAC;QACT,MAAM,EAAC,IAAI,EAAE,KAAK,EAAC,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,IAAI;YAAE,MAAM;QAChB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;QAC1B,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YACtB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,KAAK,GAAe,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,MAAM,GAAW,CAAC,CAAC;IACvB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC,CAAC;AACF,kBAAe,WAAW,CAAC"}

package/lib/functions/cimd/validate.metadata.document.d.ts

@@ -0,0 +1,3 @@
+import type ClientMetadataType from '../../types/client.metadata.type';
+declare const validateMetadataDocument: (document: unknown, url: string) => ClientMetadataType;
+export default validateMetadataDocument;

package/lib/functions/cimd/validate.metadata.document.js

@@ -0,0 +1,25 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const is_safe_metadata_redirect_uri_1 = __importDefault(require("../redirect/is.safe.metadata.redirect.uri"));
+const validateMetadataDocument = (document, url) => {
+    if (!document || 'object' !== typeof document || Array.isArray(document))
+        throw new Error('client metadata document must be a JSON object');
+    const metadata = document;
+    if (metadata.client_id !== url)
+        throw new Error('client_id in the metadata document does not match its URL');
+    if ('string' !== typeof metadata.client_name || !metadata.client_name.trim())
+        throw new Error('client metadata document requires client_name');
+    const uris = metadata.redirect_uris;
+    if (!Array.isArray(uris) || 0 === uris.length || !uris.every(is_safe_metadata_redirect_uri_1.default))
+        throw new Error('client metadata document requires valid redirect_uris');
+    if (undefined !== metadata.client_secret || undefined !== metadata.client_secret_expires_at)
+        throw new Error('client metadata document must not contain client secrets');
+    if (undefined !== metadata.token_endpoint_auth_method && 'none' !== metadata.token_endpoint_auth_method)
+        throw new Error('only token_endpoint_auth_method none is supported');
+    return metadata;
+};
+exports.default = validateMetadataDocument;
+//# sourceMappingURL=validate.metadata.document.js.map

package/lib/functions/cimd/validate.metadata.document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.metadata.document.js","sourceRoot":"","sources":["../../../src/functions/cimd/validate.metadata.document.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAGb,8GAAkF;AAElF,MAAM,wBAAwB,GAAG,CAAC,QAAiB,EAAE,GAAW,EAAsB,EAAE;IACvF,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,OAAO,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC5I,MAAM,QAAQ,GAA4B,QAAmC,CAAC;IAC9E,IAAI,QAAQ,CAAC,SAAS,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC7G,IAAI,QAAQ,KAAK,OAAO,QAAQ,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC/I,MAAM,IAAI,GAAY,QAAQ,CAAC,aAAa,CAAC;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,uCAAyB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAClK,IAAI,SAAS,KAAK,QAAQ,CAAC,aAAa,IAAI,SAAS,KAAK,QAAQ,CAAC,wBAAwB;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACzK,IAAI,SAAS,KAAK,QAAQ,CAAC,0BAA0B,IAAI,MAAM,KAAK,QAAQ,CAAC,0BAA0B;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC9K,OAAO,QAA8B,CAAC;AACvC,CAAC,CAAC;AACF,kBAAe,wBAAwB,CAAC"}

package/lib/functions/consent/consent.styles.d.ts

@@ -0,0 +1,2 @@
+declare const consentStyles: string;
+export default consentStyles;

package/lib/functions/consent/consent.styles.js

@@ -0,0 +1,20 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const consentStyles = `
+:root{color-scheme:light dark}
+*{box-sizing:border-box}
+body{margin:0;min-height:100vh;display:flex;flex-direction:column;align-items:center;background:Canvas;color:CanvasText;font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;line-height:1.5}
+header{width:100%;padding:1rem 1.5rem;border-bottom:1px solid GrayText;font-weight:700;display:flex;gap:.75rem}
+.env{margin-left:auto;padding:.1rem .6rem;border:1px solid currentColor;font-size:.8rem;text-transform:uppercase}
+main{width:100%;max-width:34rem;margin:3rem 1rem;padding:2rem;border:1px solid GrayText;border-radius:6px}
+h1{margin:0 0 1rem;font-size:1.5rem;line-height:1.25}
+.host{font-weight:400;font-size:.95rem;color:GrayText}
+.user,.warn{margin:0 0 1rem;padding:.6rem .9rem;border-left:3px solid currentColor}
+.muted{color:GrayText;font-size:.9rem}
+.actions{display:flex;gap:.75rem;flex-wrap:wrap;margin-top:1.5rem}
+button{font:inherit;font-weight:700;padding:.7rem 1.6rem;border-radius:4px;cursor:pointer;border:2px solid currentColor;background:transparent;color:inherit}
+button.approve{background:CanvasText;color:Canvas}
+button:focus-visible{outline:3px solid Highlight;outline-offset:2px}
+`;
+exports.default = consentStyles;
+//# sourceMappingURL=consent.styles.js.map

package/lib/functions/consent/consent.styles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.styles.js","sourceRoot":"","sources":["../../../src/functions/consent/consent.styles.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,aAAa,GAAW;;;;;;;;;;;;;;;CAe7B,CAAC;AACF,kBAAe,aAAa,CAAC"}

package/lib/functions/consent/escape.html.d.ts

@@ -0,0 +1,2 @@
+declare const escapeHtml: (value: string) => string;
+export default escapeHtml;

package/lib/functions/consent/escape.html.js

@@ -0,0 +1,5 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const escapeHtml = (value) => value.replace(/[&<>"']/g, (char) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[char]);
+exports.default = escapeHtml;
+//# sourceMappingURL=escape.html.js.map

package/lib/functions/consent/escape.html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"escape.html.js","sourceRoot":"","sources":["../../../src/functions/consent/escape.html.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE,CAC5C,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,IAAY,EAAU,EAAE,CAAC,CAAC,EAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAC,CAAC,CAAC,IAAI,CAAW,CAAC,CAAC;AAC9I,kBAAe,UAAU,CAAC"}

package/lib/functions/consent/render.default.consent.d.ts

@@ -0,0 +1,3 @@
+import type ConsentModelType from '../../types/consent.model.type';
+declare const renderDefaultConsent: (model: ConsentModelType) => string;
+export default renderDefaultConsent;

package/lib/functions/consent/render.default.consent.js

@@ -0,0 +1,50 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const consent_styles_1 = __importDefault(require("./consent.styles"));
+const escape_html_1 = __importDefault(require("./escape.html"));
+const renderDefaultConsent = (model) => {
+    const name = (0, escape_html_1.default)(model.clientName || 'An MCP client');
+    const product = (0, escape_html_1.default)(model.environmentLabel ? `${model.productName} (${model.environmentLabel})` : model.productName);
+    const target = (0, escape_html_1.default)(model.redirectTarget);
+    const host = model.clientHost ? `<span class="host">${(0, escape_html_1.default)(model.clientHost)}</span>` : '';
+    const identity = model.metadataDocument
+        ? `<p class="muted">The name <strong>${name}</strong> is declared by the client itself and is not verified. It is identified by <strong>${(0, escape_html_1.default)(model.clientHost ?? model.clientId)}</strong>.</p>`
+        : '';
+    const localhost = model.redirectIsLocalhost
+        ? '<p class="warn">This client receives the result on your own computer (localhost). Any program on this machine could claim to be this client.</p>'
+        : '';
+    const signedInAs = model.userDisplayName ? `<p class="user">Signing in as <strong>${(0, escape_html_1.default)(model.userDisplayName)}</strong></p>` : '';
+    const env = model.environmentLabel ? `<span class="env">${(0, escape_html_1.default)(model.environmentLabel)}</span>` : '';
+    return `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Authorize ${name} - ${product}</title>
+<style>${consent_styles_1.default}</style>
+</head>
+<body>
+<header><span>${(0, escape_html_1.default)(model.productName)}</span>${env}</header>
+<main>
+<h1>${name} ${host}<br>wants to connect to ${product}</h1>
+${signedInAs}
+${identity}
+${localhost}
+<p class="muted">After you decide, you are sent back to <strong>${target}</strong>. Only approve clients you started yourself.</p>
+<form method="post" action="${(0, escape_html_1.default)(model.action)}">
+<input type="hidden" name="state" value="${(0, escape_html_1.default)(model.state)}">
+<div class="actions">
+<button class="approve" type="submit" name="decision" value="approve">Approve</button>
+<button type="submit" name="decision" value="deny">Deny</button>
+</div>
+</form>
+</main>
+</body>
+</html>
+`;
+};
+exports.default = renderDefaultConsent;
+//# sourceMappingURL=render.default.consent.js.map

package/lib/functions/consent/render.default.consent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.default.consent.js","sourceRoot":"","sources":["../../../src/functions/consent/render.default.consent.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAGb,sEAA6C;AAC7C,gEAAuC;AAEvC,MAAM,oBAAoB,GAAG,CAAC,KAAuB,EAAU,EAAE;IAChE,MAAM,IAAI,GAAW,IAAA,qBAAU,EAAC,KAAK,CAAC,UAAU,IAAI,eAAe,CAAC,CAAC;IACrE,MAAM,OAAO,GAAW,IAAA,qBAAU,EAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpI,MAAM,MAAM,GAAW,IAAA,qBAAU,EAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,IAAI,GAAW,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,sBAAsB,IAAA,qBAAU,EAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACzG,MAAM,QAAQ,GAAW,KAAK,CAAC,gBAAgB;QAC9C,CAAC,CAAC,qCAAqC,IAAI,+FAA+F,IAAA,qBAAU,EAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB;QACxM,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,SAAS,GAAW,KAAK,CAAC,mBAAmB;QAClD,CAAC,CAAC,kJAAkJ;QACpJ,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,UAAU,GAAW,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,yCAAyC,IAAA,qBAAU,EAAC,KAAK,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;IAClJ,MAAM,GAAG,GAAW,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,qBAAqB,IAAA,qBAAU,EAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAEnH,OAAO;;;;;mBAKW,IAAI,MAAM,OAAO;SAC3B,wBAAa;;;gBAGN,IAAA,qBAAU,EAAC,KAAK,CAAC,WAAW,CAAC,UAAU,GAAG;;MAEpD,IAAI,IAAI,IAAI,2BAA2B,OAAO;EAClD,UAAU;EACV,QAAQ;EACR,SAAS;kEACuD,MAAM;8BAC1C,IAAA,qBAAU,EAAC,KAAK,CAAC,MAAM,CAAC;2CACX,IAAA,qBAAU,EAAC,KAAK,CAAC,KAAK,CAAC;;;;;;;;;CASjE,CAAC;AACF,CAAC,CAAC;AACF,kBAAe,oBAAoB,CAAC"}

package/lib/functions/crypto/random.id.d.ts

@@ -0,0 +1,2 @@
+declare const randomId: () => string;
+export default randomId;

package/lib/functions/crypto/random.id.js

@@ -0,0 +1,5 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const randomId = () => crypto.randomUUID();
+exports.default = randomId;
+//# sourceMappingURL=random.id.js.map

package/lib/functions/crypto/random.id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"random.id.js","sourceRoot":"","sources":["../../../src/functions/crypto/random.id.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,QAAQ,GAAG,GAAW,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;AACnD,kBAAe,QAAQ,CAAC"}

package/lib/functions/crypto/random.token.d.ts

@@ -0,0 +1,2 @@
+declare const randomToken: (byteLength?: number) => string;
+export default randomToken;

package/lib/functions/crypto/random.token.js

@@ -0,0 +1,9 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const to_base64_url_1 = __importDefault(require("./to.base64.url"));
+const randomToken = (byteLength = 32) => (0, to_base64_url_1.default)(crypto.getRandomValues(new Uint8Array(byteLength)));
+exports.default = randomToken;
+//# sourceMappingURL=random.token.js.map

package/lib/functions/crypto/random.token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"random.token.js","sourceRoot":"","sources":["../../../src/functions/crypto/random.token.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAEb,oEAA0C;AAE1C,MAAM,WAAW,GAAG,CAAC,aAAqB,EAAE,EAAU,EAAE,CAAC,IAAA,uBAAW,EAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AACzH,kBAAe,WAAW,CAAC"}

package/lib/functions/crypto/sha256.base64.url.d.ts

@@ -0,0 +1,2 @@
+declare const sha256Base64Url: (value: string) => Promise<string>;
+export default sha256Base64Url;

package/lib/functions/crypto/sha256.base64.url.js

@@ -0,0 +1,10 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const sha256_digest_1 = __importDefault(require("./sha256.digest"));
+const to_base64_url_1 = __importDefault(require("./to.base64.url"));
+const sha256Base64Url = async (value) => (0, to_base64_url_1.default)(await (0, sha256_digest_1.default)(value));
+exports.default = sha256Base64Url;
+//# sourceMappingURL=sha256.base64.url.js.map

package/lib/functions/crypto/sha256.base64.url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.base64.url.js","sourceRoot":"","sources":["../../../src/functions/crypto/sha256.base64.url.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAEb,oEAA2C;AAC3C,oEAA0C;AAE1C,MAAM,eAAe,GAAG,KAAK,EAAE,KAAa,EAAmB,EAAE,CAAC,IAAA,uBAAW,EAAC,MAAM,IAAA,uBAAY,EAAC,KAAK,CAAC,CAAC,CAAC;AACzG,kBAAe,eAAe,CAAC"}

package/lib/functions/crypto/sha256.digest.d.ts

@@ -0,0 +1,2 @@
+declare const sha256Digest: (value: string) => Promise<Uint8Array>;
+export default sha256Digest;

package/lib/functions/crypto/sha256.digest.js

@@ -0,0 +1,5 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const sha256Digest = async (value) => new Uint8Array(await crypto.subtle.digest('SHA-256', new TextEncoder().encode(value)));
+exports.default = sha256Digest;
+//# sourceMappingURL=sha256.digest.js.map

package/lib/functions/crypto/sha256.digest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.digest.js","sourceRoot":"","sources":["../../../src/functions/crypto/sha256.digest.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,YAAY,GAAG,KAAK,EAAE,KAAa,EAAuB,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1J,kBAAe,YAAY,CAAC"}

package/lib/functions/crypto/sha256.hex.d.ts

@@ -0,0 +1,2 @@
+declare const sha256Hex: (value: string) => Promise<string>;
+export default sha256Hex;

package/lib/functions/crypto/sha256.hex.js

@@ -0,0 +1,9 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const sha256_digest_1 = __importDefault(require("./sha256.digest"));
+const sha256Hex = async (value) => Array.from(await (0, sha256_digest_1.default)(value), (byte) => byte.toString(16).padStart(2, '0')).join('');
+exports.default = sha256Hex;
+//# sourceMappingURL=sha256.hex.js.map

package/lib/functions/crypto/sha256.hex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.hex.js","sourceRoot":"","sources":["../../../src/functions/crypto/sha256.hex.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAEb,oEAA2C;AAE3C,MAAM,SAAS,GAAG,KAAK,EAAE,KAAa,EAAmB,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,IAAA,uBAAY,EAAC,KAAK,CAAC,EAAE,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzK,kBAAe,SAAS,CAAC"}

package/lib/functions/crypto/to.base64.url.d.ts

@@ -0,0 +1,2 @@
+declare const toBase64Url: (bytes: Uint8Array) => string;
+export default toBase64Url;

package/lib/functions/crypto/to.base64.url.js

@@ -0,0 +1,10 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const toBase64Url = (bytes) => {
+    let binary = '';
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary).split('=')[0].replaceAll('+', '-').replaceAll('/', '_');
+};
+exports.default = toBase64Url;
+//# sourceMappingURL=to.base64.url.js.map

package/lib/functions/crypto/to.base64.url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"to.base64.url.js","sourceRoot":"","sources":["../../../src/functions/crypto/to.base64.url.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,WAAW,GAAG,CAAC,KAAiB,EAAU,EAAE;IACjD,IAAI,MAAM,GAAW,EAAE,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAQ,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAY,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AACzF,CAAC,CAAC;AACF,kBAAe,WAAW,CAAC"}

package/lib/functions/http/form.params.d.ts

@@ -0,0 +1,2 @@
+declare const formParams: (body: unknown) => Record<string, unknown>;
+export default formParams;