pipework 0.7.26 → 0.8.1

package/dist/auth/namespace.d.ts

@@ -1,22 +0,0 @@
-import { createSessions } from './sessions.js';
-import { createMultiOrgSessions } from './multi-org.js';
-import { runAuthChain } from './chain.js';
-import { resolveCookieConfig, parseCookieHeader, buildSetCookieHeader, buildClearCookieHeader } from './cookie.js';
-/** Authentication namespace — session management, multi-org support, auth chain resolution. */
-export declare const auth: {
-    /** Creates a Sessions manager with JWT access/refresh tokens, rotation, and reuse detection. */
-    createSessions: typeof createSessions;
-    /** Creates multi-org session management — org selection, switching, membership CRUD. */
-    createMultiOrg: typeof createMultiOrgSessions;
-    /** Executes an auth chain (strategy pipeline) to resolve auth + tenant from a request. */
-    runChain: typeof runAuthChain;
-    /** Resolves CookieConfig with defaults for secure cookie-based token delivery. */
-    resolveCookie: typeof resolveCookieConfig;
-    /** Parses a Cookie header string into key-value pairs. */
-    parseCookie: typeof parseCookieHeader;
-    /** Builds a Set-Cookie header string from name, value, and CookieConfig. */
-    buildSetCookie: typeof buildSetCookieHeader;
-    /** Builds a Set-Cookie header that clears (expires) a cookie. */
-    buildClearCookie: typeof buildClearCookieHeader;
-};
-//# sourceMappingURL=namespace.d.ts.map

package/dist/auth/namespace.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../src/auth/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAElH,+FAA+F;AAC/F,eAAO,MAAM,IAAI;IACf,gGAAgG;;IAEhG,wFAAwF;;IAExF,0FAA0F;;IAE1F,kFAAkF;;IAElF,0DAA0D;;IAE1D,4EAA4E;;IAE5E,iEAAiE;;CAElE,CAAA"}

package/dist/auth/namespace.js

@@ -1,22 +0,0 @@
-import { createSessions } from './sessions.js';
-import { createMultiOrgSessions } from './multi-org.js';
-import { runAuthChain } from './chain.js';
-import { resolveCookieConfig, parseCookieHeader, buildSetCookieHeader, buildClearCookieHeader } from './cookie.js';
-/** Authentication namespace — session management, multi-org support, auth chain resolution. */
-export const auth = {
-    /** Creates a Sessions manager with JWT access/refresh tokens, rotation, and reuse detection. */
-    createSessions,
-    /** Creates multi-org session management — org selection, switching, membership CRUD. */
-    createMultiOrg: createMultiOrgSessions,
-    /** Executes an auth chain (strategy pipeline) to resolve auth + tenant from a request. */
-    runChain: runAuthChain,
-    /** Resolves CookieConfig with defaults for secure cookie-based token delivery. */
-    resolveCookie: resolveCookieConfig,
-    /** Parses a Cookie header string into key-value pairs. */
-    parseCookie: parseCookieHeader,
-    /** Builds a Set-Cookie header string from name, value, and CookieConfig. */
-    buildSetCookie: buildSetCookieHeader,
-    /** Builds a Set-Cookie header that clears (expires) a cookie. */
-    buildClearCookie: buildClearCookieHeader,
-};
-//# sourceMappingURL=namespace.js.map

package/dist/auth/namespace.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../src/auth/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAElH,+FAA+F;AAC/F,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,gGAAgG;IAChG,cAAc;IACd,wFAAwF;IACxF,cAAc,EAAE,sBAAsB;IACtC,0FAA0F;IAC1F,QAAQ,EAAE,YAAY;IACtB,kFAAkF;IAClF,aAAa,EAAE,mBAAmB;IAClC,0DAA0D;IAC1D,WAAW,EAAE,iBAAiB;IAC9B,4EAA4E;IAC5E,cAAc,EAAE,oBAAoB;IACpC,iEAAiE;IACjE,gBAAgB,EAAE,sBAAsB;CACzC,CAAA"}

package/dist/auth/sessions.d.ts

@@ -1,70 +0,0 @@
-import type { DB } from '../db/index.js';
-import type { CookieConfig } from './cookie.js';
-import type { HttpRequest, HttpResponse } from '../http/types.js';
-/** Session configuration — signing keys, issuer, audience, token TTLs, refresh rotation. */
-export interface SessionConfig {
-    readonly signing: {
-        algorithm: 'ES256';
-        privateKey: string;
-        publicKey: string;
-    };
-    readonly issuer: string;
-    readonly audience: string;
-    readonly accessToken: {
-        expiresIn: string;
-    };
-    readonly refreshToken: {
-        expiresIn: string;
-        rotateOnUse: boolean;
-        reuseDetection: boolean;
-        cookie?: CookieConfig;
-    };
-    readonly versionCheck: boolean;
-    readonly versionCacheTtlMs?: number;
-    readonly resolveRoles?: (db: DB, userId: string, tenantId: string) => Promise<string[]>;
-    readonly environment?: string;
-}
-/** Access + refresh token pair returned by issueTokens(). */
-export interface TokenPair {
-    readonly accessToken: string;
-    readonly refreshToken: string;
-    readonly expiresIn: number;
-}
-/** Decoded JWT payload — userId, tenantId, roles, version. */
-export interface TokenPayload {
-    readonly sub: string;
-    readonly tid: string;
-    readonly av: number;
-    readonly roles: string[] | undefined;
-}
-/** Result from HTTP token operations — the token pair plus whether cookies were set. */
-export interface HttpTokenResult {
-    readonly accessToken: string;
-    readonly expiresIn: number;
-}
-export type { HttpRequest, HttpResponse };
-/** Session manager with JWT issue/refresh/revoke lifecycle and cookie-based HTTP helpers. */
-export interface Sessions {
-    issueTokens(db: DB, user: {
-        id: string;
-        tenantId: string;
-        roles?: string[];
-    }): Promise<TokenPair>;
-    refresh(db: DB, refreshToken: string): Promise<TokenPair>;
-    revokeAll(db: DB, userId: string): Promise<void>;
-    bumpVersion(db: DB, userId: string): Promise<void>;
-    verifyAccessToken(token: string): Promise<TokenPayload>;
-    checkVersion(db: DB, userId: string, tokenVersion: number): Promise<boolean>;
-    cleanExpiredTokens(db: DB): Promise<number>;
-    issueTokensHttp(response: HttpResponse, db: DB, user: {
-        id: string;
-        tenantId: string;
-        roles?: string[];
-    }): Promise<HttpTokenResult>;
-    refreshHttp(response: HttpResponse, db: DB, request: HttpRequest): Promise<HttpTokenResult>;
-    revokeHttp(response: HttpResponse, db: DB, request: HttpRequest): Promise<void>;
-    revokeAllHttp(response: HttpResponse, db: DB, userId: string): Promise<void>;
-}
-/** Creates a Sessions manager with JWT access/refresh tokens, rotation, reuse detection, and cookie helpers. */
-export declare function createSessions(config: SessionConfig): Sessions;
-//# sourceMappingURL=sessions.d.ts.map

package/dist/auth/sessions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/auth/sessions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAA;AAExC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG/C,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAEjE,4FAA4F;AAC5F,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IAC3C,QAAQ,CAAC,YAAY,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,YAAY,CAAA;KAAE,CAAA;IAClH,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;IAC9B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACvF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,6DAA6D;AAC7D,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,8DAA8D;AAC9D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CACrC;AAED,wFAAwF;AACxF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,CAAA;AAEzC,6FAA6F;AAC7F,MAAM,WAAW,QAAQ;IACvB,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjG,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACzD,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClD,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACvD,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5E,kBAAkB,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3C,eAAe,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACnI,WAAW,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAC3F,UAAU,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/E,aAAa,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7E;AAED,gHAAgH;AAChH,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,QAAQ,CAmQ9D"}

package/dist/auth/sessions.js

@@ -1,231 +0,0 @@
-import { SignJWT, jwtVerify, importPKCS8, importSPKI } from 'jose';
-import { sql } from '../db/sql.js';
-import { UnauthorizedError } from '../errors/index.js';
-import { resolveCookieConfig, buildSetCookieHeader, buildClearCookieHeader, parseCookieHeader } from './cookie.js';
-/** Creates a Sessions manager with JWT access/refresh tokens, rotation, reuse detection, and cookie helpers. */
-export function createSessions(config) {
-    const environment = config.environment ?? 'production';
-    if (environment === 'production') {
-        validateSigningKeys(config);
-    }
-    let privateKey = null;
-    let publicKey = null;
-    const versionCache = new Map();
-    const cacheTtl = config.versionCacheTtlMs ?? 60_000;
-    async function getPrivateKey() {
-        if (!privateKey)
-            privateKey = await importPKCS8(config.signing.privateKey, config.signing.algorithm);
-        return privateKey;
-    }
-    async function getPublicKey() {
-        if (!publicKey)
-            publicKey = await importSPKI(config.signing.publicKey, config.signing.algorithm);
-        return publicKey;
-    }
-    function parseExpiry(exp) {
-        const match = exp.match(/^(\d+)([smhd])$/);
-        if (!match)
-            throw new Error(`Invalid expiry format: ${exp}`);
-        const value = parseInt(match[1], 10);
-        const unit = match[2];
-        switch (unit) {
-            case 's': return value;
-            case 'm': return value * 60;
-            case 'h': return value * 3600;
-            case 'd': return value * 86400;
-            default: return value;
-        }
-    }
-    async function getOrCreateVersion(db, userId) {
-        const rows = await db.execute(sql `INSERT INTO pipework_auth_versions (user_id, version) VALUES (${userId}, 1)
-          ON CONFLICT (user_id) DO NOTHING
-          RETURNING version`);
-        if (rows.length > 0)
-            return rows[0]['version'];
-        const existing = await db.execute(sql `SELECT version FROM pipework_auth_versions WHERE user_id = ${userId}`);
-        const row = existing[0];
-        if (row === undefined)
-            return 1;
-        return row['version'];
-    }
-    async function issueTokens(db, user) {
-        const key = await getPrivateKey();
-        const version = config.versionCheck ? await getOrCreateVersion(db, user.id) : 1;
-        const expiresInSeconds = parseExpiry(config.accessToken.expiresIn);
-        const accessToken = await new SignJWT({ tid: user.tenantId, av: version, roles: user.roles })
-            .setProtectedHeader({ alg: config.signing.algorithm })
-            .setSubject(user.id)
-            .setIssuer(config.issuer)
-            .setAudience(config.audience)
-            .setIssuedAt()
-            .setExpirationTime(`${expiresInSeconds}s`)
-            .sign(key);
-        const familyId = crypto.randomUUID();
-        const refreshTokenValue = crypto.randomUUID();
-        const refreshHash = await hashToken(refreshTokenValue);
-        const refreshExpiresIn = parseExpiry(config.refreshToken.expiresIn);
-        const expiresAt = new Date(Date.now() + refreshExpiresIn * 1000);
-        await db.execute(sql `INSERT INTO pipework_refresh_tokens (user_id, tenant_id, token_hash, family_id, expires_at)
-          VALUES (${user.id}, ${user.tenantId}, ${refreshHash}, ${familyId}::uuid, ${expiresAt.toISOString()}::timestamptz)`);
-        return { accessToken, refreshToken: refreshTokenValue, expiresIn: expiresInSeconds };
-    }
-    async function refresh(db, refreshToken) {
-        const tokenHash = await hashToken(refreshToken);
-        return db.transaction(async (tx) => {
-            const rows = await tx.execute(sql `SELECT id, user_id, tenant_id, family_id, revoked_at, expires_at
-            FROM pipework_refresh_tokens
-            WHERE token_hash = ${tokenHash}
-            FOR UPDATE`);
-            if (rows.length === 0) {
-                throw new UnauthorizedError('Invalid refresh token');
-            }
-            const row = rows[0];
-            const userId = row['user_id'];
-            const tenantId = row['tenant_id'];
-            const familyId = row['family_id'];
-            const revokedAt = row['revoked_at'];
-            const expiresAt = new Date(row['expires_at']);
-            if (expiresAt < new Date()) {
-                throw new UnauthorizedError('Refresh token expired');
-            }
-            if (revokedAt !== null) {
-                if (config.refreshToken.reuseDetection) {
-                    await tx.execute(sql `UPDATE pipework_refresh_tokens SET revoked_at = now()
-                WHERE family_id = ${familyId}::uuid AND revoked_at IS NULL`);
-                }
-                throw new UnauthorizedError('Refresh token reuse detected — all sessions revoked');
-            }
-            if (config.refreshToken.rotateOnUse) {
-                await tx.execute(sql `UPDATE pipework_refresh_tokens SET revoked_at = now() WHERE token_hash = ${tokenHash}`);
-            }
-            const roles = config.resolveRoles
-                ? await config.resolveRoles(tx, userId, tenantId)
-                : undefined;
-            return issueTokens(tx, roles ? { id: userId, tenantId, roles } : { id: userId, tenantId });
-        });
-    }
-    async function revokeAll(db, userId) {
-        await db.execute(sql `UPDATE pipework_refresh_tokens SET revoked_at = now()
-          WHERE user_id = ${userId} AND revoked_at IS NULL`);
-    }
-    async function bumpVersion(db, userId) {
-        await db.execute(sql `INSERT INTO pipework_auth_versions (user_id, version, updated_at)
-          VALUES (${userId}, 2, now())
-          ON CONFLICT (user_id)
-          DO UPDATE SET version = pipework_auth_versions.version + 1, updated_at = now()`);
-        versionCache.delete(userId);
-    }
-    async function verifyAccessToken(token) {
-        const key = await getPublicKey();
-        try {
-            const { payload } = await jwtVerify(token, key, {
-                algorithms: [config.signing.algorithm],
-                issuer: config.issuer,
-                audience: config.audience,
-            });
-            return {
-                sub: payload.sub,
-                tid: payload['tid'],
-                av: payload['av'],
-                roles: payload['roles'],
-            };
-        }
-        catch {
-            throw new UnauthorizedError('Invalid access token');
-        }
-    }
-    async function checkVersion(db, userId, tokenVersion) {
-        const cached = versionCache.get(userId);
-        if (cached && cached.expiresAt > Date.now()) {
-            return cached.version === tokenVersion;
-        }
-        const rows = await db.execute(sql `SELECT version FROM pipework_auth_versions WHERE user_id = ${userId}`);
-        const currentVersion = rows.length > 0 ? rows[0]['version'] : 1;
-        versionCache.set(userId, { version: currentVersion, expiresAt: Date.now() + cacheTtl });
-        return currentVersion === tokenVersion;
-    }
-    async function cleanExpiredTokens(db) {
-        const rows = await db.execute(sql `DELETE FROM pipework_refresh_tokens WHERE expires_at < now() RETURNING id`);
-        return rows.length;
-    }
-    function getCookieConfig() {
-        const cookie = config.refreshToken.cookie;
-        if (cookie === undefined) {
-            throw new Error('Cookie-based session methods require refreshToken.cookie configuration');
-        }
-        return resolveCookieConfig(cookie, config.environment ?? 'production');
-    }
-    function getRefreshMaxAge() {
-        return parseExpiry(config.refreshToken.expiresIn);
-    }
-    async function issueTokensHttp(response, db, user) {
-        const resolved = getCookieConfig();
-        const pair = await issueTokens(db, user);
-        response.header('Set-Cookie', buildSetCookieHeader(resolved, pair.refreshToken, getRefreshMaxAge()));
-        return { accessToken: pair.accessToken, expiresIn: pair.expiresIn };
-    }
-    async function refreshHttp(response, db, request) {
-        const resolved = getCookieConfig();
-        const token = parseCookieHeader(request.headers['cookie'], resolved.name);
-        if (token === undefined) {
-            throw new UnauthorizedError('Missing refresh token cookie');
-        }
-        const pair = await refresh(db, token);
-        response.header('Set-Cookie', buildSetCookieHeader(resolved, pair.refreshToken, getRefreshMaxAge()));
-        return { accessToken: pair.accessToken, expiresIn: pair.expiresIn };
-    }
-    async function revokeHttp(response, db, request) {
-        const resolved = getCookieConfig();
-        const token = parseCookieHeader(request.headers['cookie'], resolved.name);
-        if (token === undefined) {
-            throw new UnauthorizedError('Missing refresh token cookie');
-        }
-        const tokenHash = await hashToken(token);
-        await db.execute(sql `UPDATE pipework_refresh_tokens SET revoked_at = now()
-          WHERE token_hash = ${tokenHash} AND revoked_at IS NULL`);
-        response.header('Set-Cookie', buildClearCookieHeader(resolved));
-    }
-    async function revokeAllHttp(response, db, userId) {
-        const resolved = getCookieConfig();
-        await revokeAll(db, userId);
-        response.header('Set-Cookie', buildClearCookieHeader(resolved));
-    }
-    return {
-        issueTokens, refresh, revokeAll, bumpVersion, verifyAccessToken, checkVersion, cleanExpiredTokens,
-        issueTokensHttp, refreshHttp, revokeHttp, revokeAllHttp,
-    };
-}
-const TEST_KEY_PATTERNS = [
-    'test', 'example', 'dummy', 'placeholder', 'changeme', 'insecure', 'dev-only',
-];
-function validateSigningKeys(config) {
-    const problems = [];
-    const { privateKey, publicKey } = config.signing;
-    if (privateKey.length < 100) {
-        problems.push('Private key appears too short for ES256. Ensure you are using a real PKCS#8 key.');
-    }
-    if (publicKey.length < 80) {
-        problems.push('Public key appears too short for ES256. Ensure you are using a real SPKI key.');
-    }
-    const combined = (privateKey + publicKey).toLowerCase();
-    for (const pattern of TEST_KEY_PATTERNS) {
-        if (combined.includes(pattern)) {
-            problems.push(`Signing key material contains "${pattern}" — this looks like a test key.`);
-            break;
-        }
-    }
-    if (!privateKey.includes('BEGIN') || !publicKey.includes('BEGIN')) {
-        problems.push('Keys should be PEM-encoded (BEGIN PRIVATE KEY / BEGIN PUBLIC KEY).');
-    }
-    if (problems.length > 0) {
-        throw new Error(`[pipework] Session signing keys are not suitable for production:\n\n${problems.map(p => `  - ${p}`).join('\n')}\n\n` +
-            '  Generate production keys with: openssl ecparam -genkey -name prime256v1 -noout | openssl pkcs8 -topk8 -nocrypt\n');
-    }
-}
-async function hashToken(token) {
-    const encoder = new TextEncoder();
-    const data = encoder.encode(token);
-    const hash = await crypto.subtle.digest('SHA-256', data);
-    return Buffer.from(hash).toString('hex');
-}
-//# sourceMappingURL=sessions.js.map

package/dist/auth/sessions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../src/auth/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,MAAM,CAAA;AAClE,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAElC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAEtD,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAuDlH,gHAAgH;AAChH,MAAM,UAAU,cAAc,CAAC,MAAqB;IAClD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,YAAY,CAAA;IACtD,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC;IAED,IAAI,UAAU,GAAqB,IAAI,CAAA;IACvC,IAAI,SAAS,GAAqB,IAAI,CAAA;IACtC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkD,CAAA;IAC9E,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAA;IAEnD,KAAK,UAAU,aAAa;QAC1B,IAAI,CAAC,UAAU;YAAE,UAAU,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACpG,OAAO,UAAU,CAAA;IACnB,CAAC;IAED,KAAK,UAAU,YAAY;QACzB,IAAI,CAAC,SAAS;YAAE,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAChG,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,SAAS,WAAW,CAAC,GAAW;QAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;QAC1C,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,EAAE,CAAC,CAAA;QAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAA;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,CAAA;YACtB,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,GAAG,EAAE,CAAA;YAC3B,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,GAAG,IAAI,CAAA;YAC7B,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,GAAG,KAAK,CAAA;YAC9B,OAAO,CAAC,CAAC,OAAO,KAAK,CAAA;QACvB,CAAC;IACH,CAAC;IAED,KAAK,UAAU,kBAAkB,CAAC,EAAM,EAAE,MAAc;QACtD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAC3B,GAAG,CAAA,iEAAiE,MAAM;;4BAEpD,CACvB,CAAA;QACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,CAAE,CAAC,SAAS,CAAW,CAAA;QAEzD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAC/B,GAAG,CAAA,8DAA8D,MAAM,EAAE,CAC1E,CAAA;QACD,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;QACvB,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,CAAC,CAAA;QAC/B,OAAO,GAAG,CAAC,SAAS,CAAW,CAAA;IACjC,CAAC;IAED,KAAK,UAAU,WAAW,CACxB,EAAM,EACN,IAAwD;QAExD,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAA;QACjC,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC/E,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;QAElE,MAAM,WAAW,GAAG,MAAM,IAAI,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;aAC1F,kBAAkB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;aACrD,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;aACnB,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;aACxB,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC;aAC5B,WAAW,EAAE;aACb,iBAAiB,CAAC,GAAG,gBAAgB,GAAG,CAAC;aACzC,IAAI,CAAC,GAAG,CAAC,CAAA;QAEZ,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;QACpC,MAAM,iBAAiB,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;QAC7C,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,CAAA;QACtD,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;QACnE,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,GAAG,IAAI,CAAC,CAAA;QAEhE,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA;oBACW,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,QAAQ,KAAK,WAAW,KAAK,QAAQ,WAAW,SAAS,CAAC,WAAW,EAAE,gBAAgB,CACvH,CAAA;QAED,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAA;IACtF,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,EAAM,EAAE,YAAoB;QACjD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,CAAA;QAE/C,OAAO,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAC3B,GAAG,CAAA;;iCAEsB,SAAS;uBACnB,CAChB,CAAA;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,CAAC,CAAA;YACtD,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAA;YACpB,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAW,CAAA;YACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAW,CAAA;YAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAW,CAAA;YAC3C,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAkB,CAAA;YACpD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAW,CAAC,CAAA;YAEvD,IAAI,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;gBAC3B,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,CAAC,CAAA;YACtD,CAAC;YAED,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,IAAI,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;oBACvC,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA;oCACqB,QAAQ,+BAA+B,CAChE,CAAA;gBACH,CAAC;gBACD,MAAM,IAAI,iBAAiB,CAAC,qDAAqD,CAAC,CAAA;YACpF,CAAC;YAED,IAAI,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;gBACpC,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA,4EAA4E,SAAS,EAAE,CAC3F,CAAA;YACH,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY;gBAC/B,CAAC,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC;gBACjD,CAAC,CAAC,SAAS,CAAA;YAEb,OAAO,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC5F,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,UAAU,SAAS,CAAC,EAAM,EAAE,MAAc;QAC7C,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA;4BACmB,MAAM,yBAAyB,CACtD,CAAA;IACH,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,EAAM,EAAE,MAAc;QAC/C,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA;oBACW,MAAM;;yFAE+D,CACpF,CAAA;QACD,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC;IAED,KAAK,UAAU,iBAAiB,CAAC,KAAa;QAC5C,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAA;QAChC,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE;gBAC9C,UAAU,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;gBACtC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAA;YACF,OAAO;gBACL,GAAG,EAAE,OAAO,CAAC,GAAI;gBACjB,GAAG,EAAE,OAAO,CAAC,KAAK,CAAW;gBAC7B,EAAE,EAAE,OAAO,CAAC,IAAI,CAAW;gBAC3B,KAAK,EAAE,OAAO,CAAC,OAAO,CAAyB;aAChD,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,CAAC,CAAA;QACrD,CAAC;IACH,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,EAAM,EAAE,MAAc,EAAE,YAAoB;QACtE,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACvC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,OAAO,KAAK,YAAY,CAAA;QACxC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAC3B,GAAG,CAAA,8DAA8D,MAAM,EAAE,CAC1E,CAAA;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,CAAE,CAAC,SAAS,CAAY,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5E,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAA;QACvF,OAAO,cAAc,KAAK,YAAY,CAAA;IACxC,CAAC;IAED,KAAK,UAAU,kBAAkB,CAAC,EAAM;QACtC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAC3B,GAAG,CAAA,2EAA2E,CAC/E,CAAA;QACD,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED,SAAS,eAAe;QACtB,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAA;QACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;QAC3F,CAAC;QACD,OAAO,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,IAAI,YAAY,CAAC,CAAA;IACxE,CAAC;IAED,SAAS,gBAAgB;QACvB,OAAO,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;IACnD,CAAC;IAED,KAAK,UAAU,eAAe,CAC5B,QAAsB,EACtB,EAAM,EACN,IAAwD;QAExD,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAA;QAClC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QACxC,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAA;QACpG,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAA;IACrE,CAAC;IAED,KAAK,UAAU,WAAW,CACxB,QAAsB,EACtB,EAAM,EACN,OAAoB;QAEpB,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAA;QAClC,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;QACzE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,iBAAiB,CAAC,8BAA8B,CAAC,CAAA;QAC7D,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QACrC,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAA;QACpG,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAA;IACrE,CAAC;IAED,KAAK,UAAU,UAAU,CACvB,QAAsB,EACtB,EAAM,EACN,OAAoB;QAEpB,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAA;QAClC,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;QACzE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,iBAAiB,CAAC,8BAA8B,CAAC,CAAA;QAC7D,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA;+BACsB,SAAS,yBAAyB,CAC5D,CAAA;QACD,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAA;IACjE,CAAC;IAED,KAAK,UAAU,aAAa,CAC1B,QAAsB,EACtB,EAAM,EACN,MAAc;QAEd,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAA;QAClC,MAAM,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAC3B,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAA;IACjE,CAAC;IAED,OAAO;QACL,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,kBAAkB;QACjG,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa;KACxD,CAAA;AACH,CAAC;AAED,MAAM,iBAAiB,GAAG;IACxB,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;CAC9E,CAAA;AAED,SAAS,mBAAmB,CAAC,MAAqB;IAChD,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,OAAO,CAAA;IAEhD,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAA;IACnG,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAA;IAChG,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAA;IACvD,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,kCAAkC,OAAO,iCAAiC,CAAC,CAAA;YACzF,MAAK;QACP,CAAC;IACH,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAA;IACrF,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,uEAAuE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YACrH,oHAAoH,CACrH,CAAA;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAa;IACpC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAClC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IACxD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC1C,CAAC"}

package/dist/auth/types.d.ts

@@ -1,22 +0,0 @@
-import type { DB } from '../db/types.js';
-/** Runtime auth context passed to strategies — carries the resolved DB and request metadata. */
-export interface AuthContext {
-    readonly db: (name?: string) => DB;
-}
-/** Pluggable auth strategy — implement authenticate() to extract auth from a request. */
-export interface AuthStrategy<TAuth> {
-    readonly name: string;
-    extract(request: AuthRequest, context: AuthContext): Promise<TAuth | null>;
-    verify(extracted: TAuth, context: AuthContext): Promise<TAuth>;
-}
-/** Normalized request shape passed to auth strategies — headers, cookies, method, url. */
-export interface AuthRequest {
-    readonly headers: Readonly<Record<string, string | undefined>>;
-    readonly cookies: Readonly<Record<string, string | undefined>>;
-}
-/** Minimum auth shape — userId and tenantId. Extend for app-specific auth fields. */
-export interface BaseAuth {
-    readonly userId: string;
-    readonly tenantId: string;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/auth/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAA;AAExC,gGAAgG;AAChG,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,EAAE,CAAA;CACnC;AAED,yFAAyF;AACzF,MAAM,WAAW,YAAY,CAAC,KAAK;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAA;IAC1E,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;CAC/D;AAED,0FAA0F;AAC1F,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC9D,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;CAC/D;AAED,qFAAqF;AACrF,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B"}

package/dist/auth/types.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=types.js.map

package/dist/auth/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":""}

package/dist/behavior/audited.d.ts

@@ -1,5 +0,0 @@
-import type { ResourceOperations } from '../fixture/types.js';
-import type { AuditedBehaviorConfig } from './types.js';
-import type { Audit } from '../audit/types.js';
-export declare function applyAudited<TAuth>(ops: ResourceOperations<TAuth>, config: AuditedBehaviorConfig | Audit, resourceName: string): ResourceOperations<TAuth>;
-//# sourceMappingURL=audited.d.ts.map

package/dist/behavior/audited.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audited.d.ts","sourceRoot":"","sources":["../../src/behavior/audited.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAc,MAAM,qBAAqB,CAAA;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AACvD,OAAO,KAAK,EAAE,KAAK,EAAoB,MAAM,mBAAmB,CAAA;AAEhE,wBAAgB,YAAY,CAAC,KAAK,EAChC,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAC9B,MAAM,EAAE,qBAAqB,GAAG,KAAK,EACrC,YAAY,EAAE,MAAM,GACnB,kBAAkB,CAAC,KAAK,CAAC,CAkE3B"}

package/dist/behavior/audited.js

@@ -1,78 +0,0 @@
-export function applyAudited(ops, config, resourceName) {
-    const audit = 'emit' in config ? config : config.audit;
-    const isConfig = !('emit' in config);
-    const entityType = isConfig && config.entityType !== undefined
-        ? config.entityType
-        : singularize(resourceName);
-    const prefix = isConfig && config.actionPrefix !== undefined
-        ? config.actionPrefix
-        : entityType;
-    const result = { ...ops };
-    if (ops.create !== undefined) {
-        const original = ops.create;
-        result['create'] = {
-            input: original.input,
-            handler: async (db, auth, tenant, input) => {
-                const created = await original.handler(db, auth, tenant, input);
-                const opts = {
-                    actionType: `${prefix}.created`,
-                    entityType,
-                    entityId: extractEntityId(created),
-                    after: created,
-                };
-                await audit.emit(opts);
-                return created;
-            },
-        };
-    }
-    if (ops.update !== undefined) {
-        const original = ops.update;
-        result['update'] = {
-            input: original.input,
-            handler: async (db, auth, tenant, id, input) => {
-                const before = ops.get !== undefined ? await ops.get(db, auth, tenant, id) : null;
-                const updated = await original.handler(db, auth, tenant, id, input);
-                const opts = {
-                    actionType: `${prefix}.updated`,
-                    entityType,
-                    entityId: id,
-                    before: before ?? undefined,
-                    after: updated,
-                };
-                await audit.emit(opts);
-                return updated;
-            },
-        };
-    }
-    if (ops.delete !== undefined) {
-        const original = ops.delete;
-        result['delete'] = async (db, auth, tenant, id) => {
-            const before = ops.get !== undefined ? await ops.get(db, auth, tenant, id) : null;
-            await original(db, auth, tenant, id);
-            const opts = {
-                actionType: `${prefix}.deleted`,
-                entityType,
-                entityId: id,
-                before: before ?? undefined,
-            };
-            await audit.emit(opts);
-        };
-    }
-    return result;
-}
-function extractEntityId(result) {
-    if (result !== null && typeof result === 'object' && 'id' in result) {
-        return String(result.id);
-    }
-    return 'unknown';
-}
-function singularize(s) {
-    if (s.endsWith('ies'))
-        return s.slice(0, -3) + 'y';
-    if (s.endsWith('ses') || s.endsWith('xes'))
-        return s.slice(0, -2);
-    if (s.endsWith('s') && !s.endsWith('ss'))
-        return s.slice(0, -1);
-    return s;
-}
-//# sourceMappingURL=audited.js.map

package/dist/behavior/audited.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audited.js","sourceRoot":"","sources":["../../src/behavior/audited.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,YAAY,CAC1B,GAA8B,EAC9B,MAAqC,EACrC,YAAoB;IAEpB,MAAM,KAAK,GAAU,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAA;IAC7D,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,CAAA;IACpC,MAAM,UAAU,GAAG,QAAQ,IAAK,MAAgC,CAAC,UAAU,KAAK,SAAS;QACvF,CAAC,CAAE,MAAgC,CAAC,UAAW;QAC/C,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAA;IAC7B,MAAM,MAAM,GAAG,QAAQ,IAAK,MAAgC,CAAC,YAAY,KAAK,SAAS;QACrF,CAAC,CAAE,MAAgC,CAAC,YAAa;QACjD,CAAC,CAAC,UAAU,CAAA;IAEd,MAAM,MAAM,GAA4B,EAAE,GAAG,GAAG,EAAE,CAAA;IAElD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAA;QAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,KAAK,EAAE,EAAM,EAAE,IAAW,EAAE,MAAc,EAAE,KAAc,EAAE,EAAE;gBACrE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;gBAC/D,MAAM,IAAI,GAAqB;oBAC7B,UAAU,EAAE,GAAG,MAAM,UAAU;oBAC/B,UAAU;oBACV,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC;oBAClC,KAAK,EAAE,OAAO;iBACf,CAAA;gBACD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACtB,OAAO,OAAO,CAAA;YAChB,CAAC;SACF,CAAA;IACH,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAA;QAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,KAAK,EAAE,EAAM,EAAE,IAAW,EAAE,MAAc,EAAE,EAAc,EAAE,KAAc,EAAE,EAAE;gBACrF,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;gBACjF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;gBACnE,MAAM,IAAI,GAAqB;oBAC7B,UAAU,EAAE,GAAG,MAAM,UAAU;oBAC/B,UAAU;oBACV,QAAQ,EAAE,EAAE;oBACZ,MAAM,EAAE,MAAM,IAAI,SAAS;oBAC3B,KAAK,EAAE,OAAO;iBACf,CAAA;gBACD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACtB,OAAO,OAAO,CAAA;YAChB,CAAC;SACF,CAAA;IACH,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAA;QAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,EAAM,EAAE,IAAW,EAAE,MAAc,EAAE,EAAc,EAAE,EAAE;YAC/E,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACjF,MAAM,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;YACpC,MAAM,IAAI,GAAqB;gBAC7B,UAAU,EAAE,GAAG,MAAM,UAAU;gBAC/B,UAAU;gBACV,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE,MAAM,IAAI,SAAS;aAC5B,CAAA;YACD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxB,CAAC,CAAA;IACH,CAAC;IAED,OAAO,MAAmC,CAAA;AAC5C,CAAC;AAED,SAAS,eAAe,CAAC,MAAe;IACtC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;QACpE,OAAO,MAAM,CAAE,MAA0B,CAAC,EAAE,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAA;IAClD,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACjE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/D,OAAO,CAAC,CAAA;AACV,CAAC"}

package/dist/behavior/cached.d.ts

@@ -1,7 +0,0 @@
-import type { ResourceOperations } from '../fixture/types.js';
-import type { InvalidationBehaviorConfig } from './types.js';
-import type { Cache } from '../cache/types.js';
-export declare function withInvalidation<TAuth>(ops: ResourceOperations<TAuth>, config: InvalidationBehaviorConfig, resourceName: string): ResourceOperations<TAuth> & {
-    readonly cache: Cache<unknown[]>;
-};
-//# sourceMappingURL=cached.d.ts.map

package/dist/behavior/cached.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cached.d.ts","sourceRoot":"","sources":["../../src/behavior/cached.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAc,MAAM,qBAAqB,CAAA;AACzE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA;AAE5D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAE9C,wBAAgB,gBAAgB,CAAC,KAAK,EACpC,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAC9B,MAAM,EAAE,0BAA0B,EAClC,YAAY,EAAE,MAAM,GACnB,kBAAkB,CAAC,KAAK,CAAC,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;CAAE,CAmDlE"}

package/dist/behavior/cached.js

@@ -1,48 +0,0 @@
-import { createCache } from '../cache/create.js';
-export function withInvalidation(ops, config, resourceName) {
-    const listCache = createCache({
-        name: `resource:${resourceName}:list`,
-        database: config.database,
-        ttlMs: config.ttlMs,
-        load: () => Promise.resolve([]),
-    });
-    const result = { ...ops, cache: listCache };
-    if (ops.list !== undefined) {
-        const original = ops.list;
-        result['list'] = async (db, auth, tenant) => {
-            const data = await original(db, auth, tenant);
-            return data;
-        };
-    }
-    if (ops.create !== undefined) {
-        const original = ops.create;
-        result['create'] = {
-            input: original.input,
-            handler: async (db, auth, tenant, input) => {
-                const created = await original.handler(db, auth, tenant, input);
-                listCache.invalidate();
-                return created;
-            },
-        };
-    }
-    if (ops.update !== undefined) {
-        const original = ops.update;
-        result['update'] = {
-            input: original.input,
-            handler: async (db, auth, tenant, id, input) => {
-                const updated = await original.handler(db, auth, tenant, id, input);
-                listCache.invalidate();
-                return updated;
-            },
-        };
-    }
-    if (ops.delete !== undefined) {
-        const original = ops.delete;
-        result['delete'] = async (db, _auth, _tenant, id) => {
-            await original(db, _auth, _tenant, id);
-            listCache.invalidate();
-        };
-    }
-    return result;
-}
-//# sourceMappingURL=cached.js.map

package/dist/behavior/cached.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cached.js","sourceRoot":"","sources":["../../src/behavior/cached.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAGhD,MAAM,UAAU,gBAAgB,CAC9B,GAA8B,EAC9B,MAAkC,EAClC,YAAoB;IAEpB,MAAM,SAAS,GAAG,WAAW,CAAY;QACvC,IAAI,EAAE,YAAY,YAAY,OAAO;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;KAChC,CAAC,CAAA;IAEF,MAAM,MAAM,GAA4B,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;IAEpE,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAA;QACzB,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,EAAM,EAAE,IAAW,EAAE,MAAc,EAAE,EAAE;YAC7D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;YAC7C,OAAO,IAAI,CAAA;QACb,CAAC,CAAA;IACH,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAA;QAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,KAAK,EAAE,EAAM,EAAE,IAAW,EAAE,MAAc,EAAE,KAAc,EAAE,EAAE;gBACrE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;gBAC/D,SAAS,CAAC,UAAU,EAAE,CAAA;gBACtB,OAAO,OAAO,CAAA;YAChB,CAAC;SACF,CAAA;IACH,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAA;QAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,KAAK,EAAE,EAAM,EAAE,IAAW,EAAE,MAAc,EAAE,EAAc,EAAE,KAAc,EAAE,EAAE;gBACrF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;gBACnE,SAAS,CAAC,UAAU,EAAE,CAAA;gBACtB,OAAO,OAAO,CAAA;YAChB,CAAC;SACF,CAAA;IACH,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAA;QAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,EAAM,EAAE,KAAY,EAAE,OAAe,EAAE,EAAc,EAAE,EAAE;YACjF,MAAM,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;YACtC,SAAS,CAAC,UAAU,EAAE,CAAA;QACxB,CAAC,CAAA;IACH,CAAC;IAED,OAAO,MAAqF,CAAA;AAC9F,CAAC"}

package/dist/behavior/compose.d.ts

@@ -1,4 +0,0 @@
-import type { ResourceOperations } from '../fixture/types.js';
-import type { BehaviorConfig } from './types.js';
-export declare function withBehaviors<TAuth>(ops: ResourceOperations<TAuth>, config: BehaviorConfig, resourceName?: string): ResourceOperations<TAuth>;
-//# sourceMappingURL=compose.d.ts.map

package/dist/behavior/compose.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"compose.d.ts","sourceRoot":"","sources":["../../src/behavior/compose.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAKhD,wBAAgB,aAAa,CAAC,KAAK,EACjC,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAC9B,MAAM,EAAE,cAAc,EACtB,YAAY,CAAC,EAAE,MAAM,GACpB,kBAAkB,CAAC,KAAK,CAAC,CAiB3B"}

package/dist/behavior/compose.js

@@ -1,18 +0,0 @@
-import { applyVersioned } from './versioned.js';
-import { applyAudited } from './audited.js';
-import { withInvalidation } from './cached.js';
-export function withBehaviors(ops, config, resourceName) {
-    const name = resourceName ?? 'resource';
-    let decorated = ops;
-    if (config.versioned !== undefined) {
-        decorated = applyVersioned(decorated, config.versioned, name);
-    }
-    if (config.audited !== undefined) {
-        decorated = applyAudited(decorated, config.audited, name);
-    }
-    if (config.cached !== undefined) {
-        decorated = withInvalidation(decorated, config.cached, name);
-    }
-    return decorated;
-}
-//# sourceMappingURL=compose.js.map

package/dist/behavior/compose.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"compose.js","sourceRoot":"","sources":["../../src/behavior/compose.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C,MAAM,UAAU,aAAa,CAC3B,GAA8B,EAC9B,MAAsB,EACtB,YAAqB;IAErB,MAAM,IAAI,GAAG,YAAY,IAAI,UAAU,CAAA;IACvC,IAAI,SAAS,GAAG,GAAG,CAAA;IAEnB,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,SAAS,GAAG,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC/D,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,SAAS,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IAC3D,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,SAAS,GAAG,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC9D,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/behavior/index.d.ts

@@ -1,6 +0,0 @@
-export { withBehaviors } from './compose.js';
-export { applyVersioned } from './versioned.js';
-export { applyAudited } from './audited.js';
-export { withInvalidation } from './cached.js';
-export type { BehaviorConfig, VersionedBehaviorConfig, AuditedBehaviorConfig, InvalidationBehaviorConfig } from './types.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/behavior/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/behavior/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,YAAY,EAAE,cAAc,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA"}

package/dist/behavior/index.js

@@ -1,5 +0,0 @@
-export { withBehaviors } from './compose.js';
-export { applyVersioned } from './versioned.js';
-export { applyAudited } from './audited.js';
-export { withInvalidation } from './cached.js';
-//# sourceMappingURL=index.js.map