@adcp/sdk 9.2.2 → 9.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (49) hide show
  1. package/README.md +23 -0
  2. package/dist/lib/discovery/inline-publisher-properties.js +10 -3
  3. package/dist/lib/discovery/inline-publisher-properties.js.map +1 -1
  4. package/dist/lib/discovery/resolve-agent-properties.d.ts +39 -11
  5. package/dist/lib/discovery/resolve-agent-properties.d.ts.map +1 -1
  6. package/dist/lib/discovery/resolve-agent-properties.js +136 -16
  7. package/dist/lib/discovery/resolve-agent-properties.js.map +1 -1
  8. package/dist/lib/discovery/types.d.ts +9 -2
  9. package/dist/lib/discovery/types.d.ts.map +1 -1
  10. package/dist/lib/discovery/validate-adagents.d.ts +2 -0
  11. package/dist/lib/discovery/validate-adagents.d.ts.map +1 -1
  12. package/dist/lib/discovery/validate-adagents.js +14 -6
  13. package/dist/lib/discovery/validate-adagents.js.map +1 -1
  14. package/dist/lib/index.d.ts +4 -3
  15. package/dist/lib/index.d.ts.map +1 -1
  16. package/dist/lib/index.js +24 -12
  17. package/dist/lib/index.js.map +1 -1
  18. package/dist/lib/registry/feed-stream.d.ts +147 -0
  19. package/dist/lib/registry/feed-stream.d.ts.map +1 -0
  20. package/dist/lib/registry/feed-stream.js +378 -0
  21. package/dist/lib/registry/feed-stream.js.map +1 -0
  22. package/dist/lib/registry/index.d.ts +52 -3
  23. package/dist/lib/registry/index.d.ts.map +1 -1
  24. package/dist/lib/registry/index.js +205 -2
  25. package/dist/lib/registry/index.js.map +1 -1
  26. package/dist/lib/registry/sync.d.ts +175 -10
  27. package/dist/lib/registry/sync.d.ts.map +1 -1
  28. package/dist/lib/registry/sync.js +601 -43
  29. package/dist/lib/registry/sync.js.map +1 -1
  30. package/dist/lib/registry/types.d.ts +38 -2
  31. package/dist/lib/registry/types.d.ts.map +1 -1
  32. package/dist/lib/registry/types.generated.d.ts +231 -8
  33. package/dist/lib/registry/types.generated.d.ts.map +1 -1
  34. package/dist/lib/registry/types.generated.js +1 -1
  35. package/dist/lib/schemas-data/v2.5/_provenance.json +1 -1
  36. package/dist/lib/signing/agent-fetch.d.ts +5 -4
  37. package/dist/lib/signing/agent-fetch.d.ts.map +1 -1
  38. package/dist/lib/signing/agent-fetch.js +31 -4
  39. package/dist/lib/signing/agent-fetch.js.map +1 -1
  40. package/dist/lib/signing/verifier.d.ts.map +1 -1
  41. package/dist/lib/signing/verifier.js +10 -37
  42. package/dist/lib/signing/verifier.js.map +1 -1
  43. package/dist/lib/signing/webhook-auth-detection.d.ts +10 -0
  44. package/dist/lib/signing/webhook-auth-detection.d.ts.map +1 -0
  45. package/dist/lib/signing/webhook-auth-detection.js +37 -0
  46. package/dist/lib/signing/webhook-auth-detection.js.map +1 -0
  47. package/dist/lib/version.d.ts +3 -3
  48. package/dist/lib/version.js +3 -3
  49. package/package.json +1 -1
@@ -1,6 +1,6 @@
1
1
  "use strict";
2
2
  // Generated AdCP Registry types from OpenAPI spec
3
- // Generated at: 2026-06-18T11:23:49.674Z
3
+ // Generated at: 2026-06-26T23:17:10.642Z
4
4
  // Source: https://agenticadvertising.org/openapi/registry.yaml
5
5
  //
6
6
  // Do not edit this file manually. Run: npm run generate-registry-types
@@ -4,5 +4,5 @@
4
4
  "source_sha": "4e553ad955f83b49c7d221ab5c3ff78237ad02e3",
5
5
  "source_tarball_sha256": "580656d6466ef9f0d1119985e6726c2efea718dc671e2ad30957fcb2fd54af0f",
6
6
  "upstream_adcp_version": "2.5.3",
7
- "synced_at": "2026-06-26T17:51:31.760Z"
7
+ "synced_at": "2026-06-30T09:13:01.441Z"
8
8
  }
@@ -73,12 +73,13 @@ export interface BuildAgentSigningFetchOptions {
73
73
  /**
74
74
  * Build a fetch wrapper suitable for injection into MCP/A2A transports. On
75
75
  * every outbound request:
76
- * 1. Extract the AdCP operation name from the JSON-RPC body (MCP tool-call
76
+ * 1. Sign immediately when the payload carries webhook authentication.
77
+ * 2. Extract the AdCP operation name from the JSON-RPC body (MCP tool-call
77
78
  * or A2A message/send). Non-AdCP JSON-RPC methods (e.g., `initialize`)
78
79
  * pass through unsigned.
79
- * 2. Consult the cached seller capability to decide whether to sign.
80
- * 3. Resolve the seller's content-digest policy into a per-request toggle.
81
- * 4. Delegate to `createSigningFetch` with the decision baked in.
80
+ * 3. Consult the cached seller capability to decide whether to sign.
81
+ * 4. Resolve the seller's content-digest policy into a per-request toggle.
82
+ * 5. Delegate to `createSigningFetch` with the decision baked in.
82
83
  */
83
84
  export declare function buildAgentSigningFetch(options: BuildAgentSigningFetchOptions): FetchLike;
84
85
  export interface CreateAgentSignedFetchOptions {
@@ -1 +1 @@
1
- {"version":3,"file":"agent-fetch.d.ts","sourceRoot":"","sources":["../../../src/lib/signing/agent-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,yBAAyB,EACzB,+BAA+B,EAC/B,iCAAiC,EAClC,MAAM,eAAe,CAAC;AAGvB,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE1C,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AA2C1F;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAgCtE;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,UAAU,EAAE,kBAAkB,GAAG,SAAS,EAC1C,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAQT;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,GAAG,OAAO,CAG1F;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,+BAA+B,GAAG,SAAS,CAM9E;AAED,yEAAyE;AACzE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,yBAAyB,GAAG,MAAM,IAAI,+BAA+B,CAElH;AAED,+CAA+C;AAC/C,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,yBAAyB,GAChC,MAAM,IAAI,iCAAiC,CAE7C;AAED,MAAM,WAAW,6BAA6B;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,yBAAyB,CAAC;IACnC,+EAA+E;IAC/E,aAAa,EAAE,MAAM,gBAAgB,GAAG,SAAS,CAAC;CACnD;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,6BAA6B,GAAG,SAAS,CAgCxF;AAcD,MAAM,WAAW,6BAA6B;IAC5C,iFAAiF;IACjF,OAAO,EAAE,yBAAyB,CAAC;IACnC;;;;;;;;;OASG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,sDAAsD;IACtD,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,6BAA6B,GAAG,SAAS,CAQxF"}
1
+ {"version":3,"file":"agent-fetch.d.ts","sourceRoot":"","sources":["../../../src/lib/signing/agent-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,yBAAyB,EACzB,+BAA+B,EAC/B,iCAAiC,EAClC,MAAM,eAAe,CAAC;AAGvB,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAG1C,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AA4C1F;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAgCtE;AAsBD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,UAAU,EAAE,kBAAkB,GAAG,SAAS,EAC1C,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAQT;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,GAAG,OAAO,CAG1F;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,+BAA+B,GAAG,SAAS,CAM9E;AAED,yEAAyE;AACzE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,yBAAyB,GAAG,MAAM,IAAI,+BAA+B,CAElH;AAED,+CAA+C;AAC/C,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,yBAAyB,GAChC,MAAM,IAAI,iCAAiC,CAE7C;AAED,MAAM,WAAW,6BAA6B;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,yBAAyB,CAAC;IACnC,+EAA+E;IAC/E,aAAa,EAAE,MAAM,gBAAgB,GAAG,SAAS,CAAC;CACnD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,6BAA6B,GAAG,SAAS,CAiCxF;AAcD,MAAM,WAAW,6BAA6B;IAC5C,iFAAiF;IACjF,OAAO,EAAE,yBAAyB,CAAC;IACnC;;;;;;;;;OASG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,sDAAsD;IACtD,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,6BAA6B,GAAG,SAAS,CAQxF"}
@@ -11,6 +11,8 @@ exports.createAgentSignedFetch = createAgentSignedFetch;
11
11
  const fetch_1 = require("./fetch");
12
12
  const fetch_async_1 = require("./fetch-async");
13
13
  const capability_cache_1 = require("./capability-cache");
14
+ const webhook_auth_detection_1 = require("./webhook-auth-detection");
15
+ const MAX_WEBHOOK_AUTH_INSPECTION_BYTES = 1_048_576;
14
16
  /**
15
17
  * Resolve `globalThis.fetch` at the moment of each outbound request — not at
16
18
  * module import, and not at factory call. Late resolution lets a polyfill
@@ -98,6 +100,28 @@ function extractAdcpOperation(body) {
98
100
  }
99
101
  return undefined;
100
102
  }
103
+ /**
104
+ * Detect webhook receiver credentials in the outbound JSON-RPC payload. The
105
+ * verifier rejects unsigned requests carrying these credentials regardless of
106
+ * the seller's operation-level capability advertisement, so the client must
107
+ * sign them even while the capability cache is cold or silent for that op.
108
+ * The scan is bounded; if the body exceeds the inspection budget, sign it.
109
+ */
110
+ function carriesWebhookAuthentication(body) {
111
+ const text = bodyToUtf8(body);
112
+ if (!text)
113
+ return false;
114
+ if (text.length > MAX_WEBHOOK_AUTH_INSPECTION_BYTES)
115
+ return true;
116
+ let parsed;
117
+ try {
118
+ parsed = JSON.parse(text);
119
+ }
120
+ catch {
121
+ return false;
122
+ }
123
+ return (0, webhook_auth_detection_1.containsWebhookAuthentication)(parsed);
124
+ }
101
125
  /**
102
126
  * Decide whether an outbound AdCP call should be signed given the seller's
103
127
  * advertised capability block and the buyer's override list.
@@ -170,12 +194,13 @@ function isProviderSigningConfig(config) {
170
194
  /**
171
195
  * Build a fetch wrapper suitable for injection into MCP/A2A transports. On
172
196
  * every outbound request:
173
- * 1. Extract the AdCP operation name from the JSON-RPC body (MCP tool-call
197
+ * 1. Sign immediately when the payload carries webhook authentication.
198
+ * 2. Extract the AdCP operation name from the JSON-RPC body (MCP tool-call
174
199
  * or A2A message/send). Non-AdCP JSON-RPC methods (e.g., `initialize`)
175
200
  * pass through unsigned.
176
- * 2. Consult the cached seller capability to decide whether to sign.
177
- * 3. Resolve the seller's content-digest policy into a per-request toggle.
178
- * 4. Delegate to `createSigningFetch` with the decision baked in.
201
+ * 3. Consult the cached seller capability to decide whether to sign.
202
+ * 4. Resolve the seller's content-digest policy into a per-request toggle.
203
+ * 5. Delegate to `createSigningFetch` with the decision baked in.
179
204
  */
180
205
  function buildAgentSigningFetch(options) {
181
206
  const { signing, getCapability } = options;
@@ -186,6 +211,8 @@ function buildAgentSigningFetch(options) {
186
211
  const explicitUpstream = options.upstream;
187
212
  const upstream = explicitUpstream ?? ((input, init) => defaultUpstream()(input, init));
188
213
  const shouldSign = (_url, init) => {
214
+ if (carriesWebhookAuthentication(init?.body))
215
+ return true;
189
216
  const operation = extractAdcpOperation(init?.body);
190
217
  const entry = getCapability();
191
218
  return shouldSignOperation(operation, entry?.requestSigning, signing);
@@ -1 +1 @@
1
- {"version":3,"file":"agent-fetch.js","sourceRoot":"","sources":["../../../src/lib/signing/agent-fetch.ts"],"names":[],"mappings":";;AAyEA,oDAgCC;AAqBD,kDAYC;AAWD,8DAGC;AAQD,kCAMC;AAGD,sDAEC;AAGD,0DAIC;AAwBD,wDAgCC;AA0GD,wDAQC;AAvVD,mCAA+E;AAC/E,+CAAwD;AACxD,yDAK4B;AAM5B;;;;;;;GAOG;AACH,SAAS,eAAe;IACtB,MAAM,CAAC,GAAI,UAAoC,CAAC,KAAK,CAAC;IACtD,IAAI,OAAO,CAAC,KAAK,UAAU,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CACjB,gIAAgI,CACjI,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,IAAI,IAAI,YAAY,UAAU;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1E,IAAI,IAAI,YAAY,WAAW;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,sEAAsE;IACtE,8EAA8E;IAC9E,8CAA8C;IAC9C,MAAM,IAAI,SAAS,CACjB,oFAAoF,YAAY,CAAC,IAAI,CAAC,8HAA8H,CACrO,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,GAAI,IAA4C,CAAC,WAAW,EAAE,IAAI,CAAC;QAC7E,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,OAAO,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,oBAAoB,CAAC,IAAa;IAChD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,GAAG,GAAG,MAAgD,CAAC;IAE7D,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAwC,CAAC;QAC5D,OAAO,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAuD,CAAC;QAC3E,MAAM,KAAK,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrC,MAAM,CAAC,GAAG,IAAsD,CAAC;gBACjE,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,mBAAmB,CACjC,SAA6B,EAC7B,UAA0C,EAC1C,MAAiC;IAEjC,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,CAAC,UAAU,EAAE,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,MAAM,CAAC,cAAc,IAAI,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,yBAAyB,CAAC,MAAuC;IAC/E,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAgB,WAAW,CAAC,MAAuC;IACjE,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,GAAG;QACjB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,UAAU,EAAE,MAAM,CAAC,WAAsC;KAC1D,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAgB,qBAAqB,CAAC,MAAiC;IACrE,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC;AACpC,CAAC;AAED,+CAA+C;AAC/C,SAAgB,uBAAuB,CACrC,MAAiC;IAEjC,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC;AACpC,CAAC;AAcD;;;;;;;;;GASG;AACH,SAAgB,sBAAsB,CAAC,OAAsC;IAC3E,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAC3C,2EAA2E;IAC3E,2EAA2E;IAC3E,qEAAqE;IACrE,qBAAqB;IACrB,MAAM,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC1C,MAAM,QAAQ,GAAc,gBAAgB,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAElG,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,IAA6B,EAAW,EAAE;QAC1E,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,OAAO,mBAAmB,CAAC,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAgC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACtE,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,OAAO,yBAAyB,CAAC,KAAK,EAAE,cAAc,EAAE,qBAAqB,CAAC,CAAC;IACjF,CAAC,CAAC;IAEF,IAAI,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,mEAAmE;QACnE,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE;QACpE,qEAAqE;QACrE,uEAAuE;QACvE,gEAAgE;QAChE,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxD,OAAO,IAAA,qCAAuB,EAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,IAAA,0BAAkB,EAAC,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAuD;IACrF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IACrC,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IACzC,OAAO;QACL,KAAK;QACL,SAAS;QACT,WAAW;QACX,IAAI,EAAE,CAAC,OAAmB,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;KACtD,CAAC;AACJ,CAAC;AAqDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,SAAgB,sBAAsB,CAAC,OAAsC;IAC3E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,yCAAsB,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAA,0CAAuB,EAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1F,OAAO,sBAAsB,CAAC;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,aAAa,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;KACzC,CAAC,CAAC;AACL,CAAC"}
1
+ {"version":3,"file":"agent-fetch.js","sourceRoot":"","sources":["../../../src/lib/signing/agent-fetch.ts"],"names":[],"mappings":";;AA2EA,oDAgCC;AAyCD,kDAYC;AAWD,8DAGC;AAQD,kCAMC;AAGD,sDAEC;AAGD,0DAIC;AAyBD,wDAiCC;AA0GD,wDAQC;AA/WD,mCAA+E;AAC/E,+CAAwD;AACxD,yDAK4B;AAG5B,qEAAyE;AAGzE,MAAM,iCAAiC,GAAG,SAAS,CAAC;AAEpD;;;;;;;GAOG;AACH,SAAS,eAAe;IACtB,MAAM,CAAC,GAAI,UAAoC,CAAC,KAAK,CAAC;IACtD,IAAI,OAAO,CAAC,KAAK,UAAU,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CACjB,gIAAgI,CACjI,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,IAAI,IAAI,YAAY,UAAU;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1E,IAAI,IAAI,YAAY,WAAW;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,sEAAsE;IACtE,8EAA8E;IAC9E,8CAA8C;IAC9C,MAAM,IAAI,SAAS,CACjB,oFAAoF,YAAY,CAAC,IAAI,CAAC,8HAA8H,CACrO,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,GAAI,IAA4C,CAAC,WAAW,EAAE,IAAI,CAAC;QAC7E,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,OAAO,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,oBAAoB,CAAC,IAAa;IAChD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,GAAG,GAAG,MAAgD,CAAC;IAE7D,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAwC,CAAC;QAC5D,OAAO,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAuD,CAAC;QAC3E,MAAM,KAAK,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrC,MAAM,CAAC,GAAG,IAAsD,CAAC;gBACjE,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,4BAA4B,CAAC,IAAa;IACjD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,MAAM,GAAG,iCAAiC;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAA,sDAA6B,EAAC,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,mBAAmB,CACjC,SAA6B,EAC7B,UAA0C,EAC1C,MAAiC;IAEjC,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,CAAC,UAAU,EAAE,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,MAAM,CAAC,cAAc,IAAI,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,yBAAyB,CAAC,MAAuC;IAC/E,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAgB,WAAW,CAAC,MAAuC;IACjE,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,GAAG;QACjB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,UAAU,EAAE,MAAM,CAAC,WAAsC;KAC1D,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAgB,qBAAqB,CAAC,MAAiC;IACrE,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC;AACpC,CAAC;AAED,+CAA+C;AAC/C,SAAgB,uBAAuB,CACrC,MAAiC;IAEjC,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC;AACpC,CAAC;AAcD;;;;;;;;;;GAUG;AACH,SAAgB,sBAAsB,CAAC,OAAsC;IAC3E,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAC3C,2EAA2E;IAC3E,2EAA2E;IAC3E,qEAAqE;IACrE,qBAAqB;IACrB,MAAM,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC1C,MAAM,QAAQ,GAAc,gBAAgB,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAElG,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,IAA6B,EAAW,EAAE;QAC1E,IAAI,4BAA4B,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1D,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,OAAO,mBAAmB,CAAC,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAgC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACtE,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,OAAO,yBAAyB,CAAC,KAAK,EAAE,cAAc,EAAE,qBAAqB,CAAC,CAAC;IACjF,CAAC,CAAC;IAEF,IAAI,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,mEAAmE;QACnE,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE;QACpE,qEAAqE;QACrE,uEAAuE;QACvE,gEAAgE;QAChE,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxD,OAAO,IAAA,qCAAuB,EAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,IAAA,0BAAkB,EAAC,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAuD;IACrF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IACrC,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IACzC,OAAO;QACL,KAAK;QACL,SAAS;QACT,WAAW;QACX,IAAI,EAAE,CAAC,OAAmB,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;KACtD,CAAC;AACJ,CAAC;AAqDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,SAAgB,sBAAsB,CAAC,OAAsC;IAC3E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,yCAAsB,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAA,0CAAuB,EAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1F,OAAO,sBAAsB,CAAC;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,aAAa,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;KACzC,CAAC,CAAC;AACL,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../../../src/lib/signing/verifier.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AAKxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAML,KAAK,kBAAkB,EACvB,KAAK,YAAY,EAClB,MAAM,SAAS,CAAC;AAEjB,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,kBAAkB,CAAC;IAC/B,IAAI,EAAE,YAAY,CAAC;IACnB,WAAW,EAAE,WAAW,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;CAC1D;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,YAAY,CAAC,CA2MvB"}
1
+ {"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../../../src/lib/signing/verifier.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AAKxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,OAAO,EAML,KAAK,kBAAkB,EACvB,KAAK,YAAY,EAClB,MAAM,SAAS,CAAC;AAEjB,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,kBAAkB,CAAC;IAC/B,IAAI,EAAE,YAAY,CAAC;IACnB,WAAW,EAAE,WAAW,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;CAC1D;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,YAAY,CAAC,CA4MvB"}
@@ -7,6 +7,7 @@ const content_digest_1 = require("./content-digest");
7
7
  const errors_1 = require("./errors");
8
8
  const parser_1 = require("./parser");
9
9
  const crypto_1 = require("./crypto");
10
+ const webhook_auth_detection_1 = require("./webhook-auth-detection");
10
11
  const types_1 = require("./types");
11
12
  async function verifyRequestSignature(request, options) {
12
13
  const now = options.now ? options.now() : Math.floor(Date.now() / 1000);
@@ -31,14 +32,15 @@ async function verifyRequestSignature(request, options) {
31
32
  if (requiredProtocolMethod) {
32
33
  throw new errors_1.RequestSignatureError('request_signature_required', 0, `Protocol method "${requiredProtocolMethod}" requires a signed request`);
33
34
  }
34
- // Payload-driven elevation: any request carrying
35
- // `push_notification_config.authentication` MUST be RFC 9421 signed,
36
- // regardless of whether the operation appears in `required_for`
35
+ // Payload-driven elevation: any request carrying webhook receiver
36
+ // credentials (task, reporting, artifact, or revocation callbacks) MUST
37
+ // be RFC 9421 signed, regardless of whether the operation appears in
38
+ // `required_for`
37
39
  // (#webhook-security downgrade-resistance). A bearer-only channel
38
40
  // would otherwise let an attacker who captured a token register or
39
41
  // update webhook credentials and redirect callbacks to a hostile URL.
40
42
  if (carriesWebhookAuthentication(request)) {
41
- throw new errors_1.RequestSignatureError('request_signature_required', 0, 'Requests carrying push_notification_config.authentication must be RFC 9421 signed');
43
+ throw new errors_1.RequestSignatureError('request_signature_required', 0, 'Requests carrying webhook authentication must be RFC 9421 signed');
42
44
  }
43
45
  return { status: 'unsigned', verified_at: now };
44
46
  }
@@ -331,14 +333,14 @@ const MAX_UNSIGNED_BODY_INSPECTION_BYTES = 1_048_576;
331
333
  * AdCP payloads reach depth ~5-8; 64 is generous without leaving room for
332
334
  * a pathological `{"a":{"a":{...}}}` to burn the stack.
333
335
  */
334
- const MAX_BODY_TRAVERSAL_DEPTH = 64;
335
336
  function exceedsUnsignedBodyInspectionCap(body) {
336
337
  return typeof body === 'string' && body.length > MAX_UNSIGNED_BODY_INSPECTION_BYTES;
337
338
  }
338
339
  /**
339
340
  * Scan a JSON request body for a non-empty
340
- * `push_notification_config.authentication` object — anywhere in the tree,
341
- * including inside arrays of pending config updates. Runs only on the
341
+ * webhook authentication object — anywhere in the tree, including inside
342
+ * arrays of pending config updates. MCP uses `push_notification_config`;
343
+ * A2A uses `pushNotificationConfig`. Runs only on the
342
344
  * unsigned branch; returning `true` triggers the webhook-security downgrade
343
345
  * rejection in {@link verifyRequestSignature}.
344
346
  *
@@ -363,36 +365,7 @@ function carriesWebhookAuthentication(request) {
363
365
  catch {
364
366
  return false;
365
367
  }
366
- return containsWebhookAuthentication(parsed, MAX_BODY_TRAVERSAL_DEPTH);
367
- }
368
- function containsWebhookAuthentication(value, depthRemaining) {
369
- if (depthRemaining <= 0)
370
- return false;
371
- if (value === null || typeof value !== 'object')
372
- return false;
373
- if (Array.isArray(value)) {
374
- for (const item of value) {
375
- if (containsWebhookAuthentication(item, depthRemaining - 1))
376
- return true;
377
- }
378
- return false;
379
- }
380
- const obj = value;
381
- const pnc = obj.push_notification_config;
382
- if (pnc && typeof pnc === 'object' && !Array.isArray(pnc)) {
383
- const auth = pnc.authentication;
384
- if (auth && typeof auth === 'object' && !Array.isArray(auth) && Object.keys(auth).length > 0) {
385
- return true;
386
- }
387
- }
388
- for (const [key, v] of Object.entries(obj)) {
389
- // Already inspected push_notification_config above; don't re-walk it.
390
- if (key === 'push_notification_config')
391
- continue;
392
- if (containsWebhookAuthentication(v, depthRemaining - 1))
393
- return true;
394
- }
395
- return false;
368
+ return (0, webhook_auth_detection_1.containsWebhookAuthentication)(parsed, webhook_auth_detection_1.WEBHOOK_AUTH_TRAVERSAL_DEPTH);
396
369
  }
397
370
  function validateCoveredComponents(components, capability, request) {
398
371
  for (const mandatory of types_1.MANDATORY_COMPONENTS) {
@@ -1 +1 @@
1
- {"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../../src/lib/signing/verifier.ts"],"names":[],"mappings":";;AA0CA,wDA8MC;AAxPD,2DAAqD;AACrD,iDAMwB;AACxB,qDAAwD;AACxD,qCAAiD;AACjD,qCAA0F;AAC1F,qCAA2D;AAI3D,mCAQiB;AAmBV,KAAK,UAAU,sBAAsB,CAC1C,OAAoB,EACpB,OAA6B;IAE7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACxE,MAAM,cAAc,GAAG,IAAA,6BAAc,EAAC,OAAO,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,IAAA,6BAAc,EAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAE/D,kDAAkD;IAClD,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,qEAAqE;QACrE,kEAAkE;QAClE,qEAAqE;QACrE,0BAA0B;QAC1B,IAAI,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,8BAAqB,CAC7B,4BAA4B,EAC5B,CAAC,EACD,cAAc,SAAS,6BAA6B,CACrD,CAAC;QACJ,CAAC;QACD,MAAM,0BAA0B,GAAG,OAAO,CAAC,UAAU,CAAC,6BAA6B,IAAI,EAAE,CAAC;QAC1F,IAAI,0BAA0B,CAAC,MAAM,GAAG,CAAC,IAAI,gCAAgC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5F,MAAM,IAAI,8BAAqB,CAC7B,4BAA4B,EAC5B,CAAC,EACD,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QACD,MAAM,eAAe,GAAG,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,sBAAsB,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,0BAA0B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3G,IAAI,sBAAsB,EAAE,CAAC;YAC3B,MAAM,IAAI,8BAAqB,CAC7B,4BAA4B,EAC5B,CAAC,EACD,oBAAoB,sBAAsB,6BAA6B,CACxE,CAAC;QACJ,CAAC;QACD,iDAAiD;QACjD,qEAAqE;QACrE,gEAAgE;QAChE,kEAAkE;QAClE,mEAAmE;QACnE,sEAAsE;QACtE,IAAI,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,8BAAqB,CAC7B,4BAA4B,EAC5B,CAAC,EACD,mFAAmF,CACpF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,8BAAqB,CAC7B,oCAAoC,EACpC,CAAC,EACD,iEAAiE,CAClE,CAAC;IACJ,CAAC;IAED,iBAAiB;IACjB,MAAM,WAAW,GAAG,IAAA,4BAAmB,EAAC,cAAc,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAA,uBAAc,EAAC,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAA,iCAAkB,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,kCAAkC,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAEpE,mCAAmC;IACnC,aAAa,CAAC,WAAW,CAAC,CAAC;IAE3B,qBAAqB;IACrB,IAAI,WAAW,CAAC,MAAM,CAAC,GAAG,KAAK,2BAAmB,EAAE,CAAC;QACnD,MAAM,IAAI,8BAAqB,CAC7B,+BAA+B,EAC/B,CAAC,EACD,0BAA0B,2BAAmB,WAAW,WAAW,CAAC,MAAM,CAAC,GAAG,GAAG,CAClF,CAAC;IACJ,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,oBAAY,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,8BAAqB,CAC7B,mCAAmC,EACnC,CAAC,EACD,kBAAkB,WAAW,CAAC,MAAM,CAAC,GAAG,gCAAgC,CACzE,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAE5E,8BAA8B;IAC9B,yBAAyB,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAE/E,yBAAyB;IACzB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,8BAAqB,CAC7B,+BAA+B,EAC/B,CAAC,EACD,2BAA2B,WAAW,CAAC,MAAM,CAAC,KAAK,GAAG,CACvD,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACzC,MAAM,IAAI,8BAAqB,CAC7B,+BAA+B,EAC/B,CAAC,EACD,2CAA2C,GAAG,CAAC,GAAG,qCAAqC,WAAW,CAAC,MAAM,CAAC,KAAK,GAAG,CACnH,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,8BAAqB,CAC7B,uCAAuC,EACvC,CAAC,EACD,QAAQ,GAAG,CAAC,GAAG,kDAAkD,CAClE,CAAC;IACJ,CAAC;IACD,+BAA+B,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAE7D,4EAA4E;IAC5E,IAAI,MAAM,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,8BAAqB,CAAC,+BAA+B,EAAE,CAAC,EAAE,QAAQ,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;IACrG,CAAC;IAED,qEAAqE;IACrE,uEAAuE;IACvE,qEAAqE;IACrE,yEAAyE;IACzE,MAAM,WAAW,GAAG,IAAA,iCAAkB,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEpD,0EAA0E;IAC1E,4EAA4E;IAC5E,qEAAqE;IACrE,IAAI,MAAM,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,8BAAqB,CAC7B,8BAA8B,EAC9B,EAAE,EACF,iDAAiD,GAAG,CAAC,GAAG,EAAE,CAC3D,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,8BAAqB,CAC7B,4BAA4B,EAC5B,EAAE,EACF,oBAAoB,GAAG,CAAC,GAAG,WAAW,WAAW,CAAC,MAAM,CAAC,KAAK,2BAA2B,CAC1F,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,8DAA8D;IAC9D,MAAM,IAAI,GAAG,IAAA,iCAAkB,EAC7B,WAAW,CAAC,UAAU,EACtB,OAAO,EACP,WAAW,CAAC,MAAM,EAClB,WAAW,CAAC,oBAAoB,CACjC,CAAC;IACF,MAAM,SAAS,GAAG,IAAA,uBAAc,EAAC,GAAG,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAA,wBAAe,EAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7G,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,8BAAqB,CAC7B,2BAA2B,EAC3B,EAAE,EACF,qDAAqD,CACtD,CAAC;IACJ,CAAC;IAED,mDAAmD;IACnD,IAAI,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACtD,MAAM,YAAY,GAAG,IAAA,6BAAc,EAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACvE,IAAI,CAAC,YAAY,IAAI,CAAC,IAAA,qCAAoB,EAAC,YAAY,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,8BAAqB,CAC7B,mCAAmC,EACnC,EAAE,EACF,2DAA2D,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,GAAG,oCAA4B,CAAC;IAClF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,oCAA4B,GAAG,oCAA4B,CAAC,CAAC;IAC7F,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAChH,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,8BAAqB,CAC7B,4BAA4B,EAC5B,EAAE,EACF,oBAAoB,GAAG,CAAC,GAAG,WAAW,WAAW,CAAC,MAAM,CAAC,KAAK,2BAA2B,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,8BAAqB,CAC7B,8BAA8B,EAC9B,EAAE,EACF,iDAAiD,GAAG,CAAC,GAAG,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAwB;IACtD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,gCAAgC,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3D,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAChC,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAQ,OAAgC,CAAC,MAAM,KAAK,QAAQ;YAC7G,CAAC,CAAC,CAAE,OAA8B,CAAC,MAAM,CAAC;YAC1C,CAAC,CAAC,EAAE,CACP,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAA4B;IACjD,MAAM,QAAQ,GAAgD,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACrH,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,8BAAqB,CAC7B,qCAAqC,EACrC,CAAC,EACD,kDAAkD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,OAAe,EAAE,GAAW;IACnE,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,8BAAqB,CAC7B,kCAAkC,EAClC,CAAC,EACD,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,OAAO,GAAG,oCAA4B,EAAE,CAAC;QACrD,MAAM,IAAI,8BAAqB,CAC7B,kCAAkC,EAClC,CAAC,EACD,4BAA4B,oCAA4B,WAAW,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,GAAG,OAAO,GAAG,oCAA4B,EAAE,CAAC;QACjD,MAAM,IAAI,8BAAqB,CAAC,kCAAkC,EAAE,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,GAAG,GAAG,OAAO,GAAG,oCAA4B,EAAE,CAAC;QACjD,MAAM,IAAI,8BAAqB,CAC7B,kCAAkC,EAClC,CAAC,EACD,0DAA0D,CAC3D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,+BAA+B,CACtC,GAA8D,EAC9D,YAAoB;IAEpB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,8BAAqB,CAC7B,uCAAuC,EACvC,CAAC,EACD,QAAQ,GAAG,CAAC,GAAG,6DAA6D,YAAY,GAAG,CAC5F,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAC7D,IAAI,eAAe,IAAI,GAAG,CAAC,GAAG,KAAK,eAAe,EAAE,CAAC;QACnD,MAAM,IAAI,8BAAqB,CAC7B,uCAAuC,EACvC,CAAC,EACD,QAAQ,GAAG,CAAC,GAAG,kBAAkB,GAAG,CAAC,GAAG,wCAAwC,YAAY,WAAW,eAAe,GAAG,CAC1H,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,8BAAqB,CAC7B,uCAAuC,EACvC,CAAC,EACD,QAAQ,GAAG,CAAC,GAAG,qCAAqC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,qCAAqC,CAC5G,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YAC5C,MAAM,IAAI,8BAAqB,CAC7B,uCAAuC,EACvC,CAAC,EACD,QAAQ,GAAG,CAAC,GAAG,qCAAqC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,mBAAmB,CAC1F,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,sBAAsB,GAA2B;IACrD,OAAO,EAAE,OAAO;IAChB,mBAAmB,EAAE,OAAO;CAC7B,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,kCAAkC,CAAC,UAAoB,EAAE,OAAoB;IACpF,IAAI,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAA,6BAAc,EAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,8BAAqB,CAC7B,oCAAoC,EACpC,CAAC,EACD,qGAAqG,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAA,6BAAc,EAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAChE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAA,oCAAe,EAAC,KAAK,CAAC,CAAC;gBACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;gBACvC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC1C,CAAC;gBACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;oBAChC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;wBACd,MAAM,IAAI,8BAAqB,CAC7B,oCAAoC,EACpC,CAAC,EACD,gCAAgC,GAAG,6DAA6D,CACjG,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,8BAAqB;oBAAE,MAAM,CAAC,CAAC;YAClD,CAAC;YACD,wEAAwE;YACxE,iEAAiE;YACjE,kDAAkD;YAClD,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,8BAAqB,CAC7B,oCAAoC,EACpC,CAAC,EACD,4FAA4F,CAC7F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACrB,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;YACpD,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,QAAQ,GAAG,CAAC,QAAQ,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;IACzB,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC;QACf,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;gBAAE,CAAC,EAAE,CAAC;YAC/D,MAAM,KAAK,GAAG,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;gBAAE,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,GAAG,KAAK;gBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAC9D,YAAY,GAAG,KAAK,CAAC;YACrB,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACrB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC;gBACf,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;oBACrC,CAAC,IAAI,CAAC,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACrB,CAAC,EAAE,CAAC;oBACJ,MAAM;gBACR,CAAC;gBACD,CAAC,EAAE,CAAC;YACN,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,GAAG,GAAG;gBAAE,CAAC,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,YAAY,GAAG,IAAI,CAAC;YACpB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,CAAC,EAAE,CAAC;IACN,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,kCAAkC,GAAG,SAAS,CAAC;AACrD;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC,SAAS,gCAAgC,CAAC,IAAwB;IAChE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,kCAAkC,CAAC;AACtF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,4BAA4B,CAAC,OAAoB;IACxD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,gCAAgC,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,6BAA6B,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAc,EAAE,cAAsB;IAC3E,IAAI,cAAc,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,6BAA6B,CAAC,IAAI,EAAE,cAAc,GAAG,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC3E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,GAAG,GAAG,GAAG,CAAC,wBAAwB,CAAC;IACzC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAI,GAA+B,CAAC,cAAc,CAAC;QAC7D,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7F,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,sEAAsE;QACtE,IAAI,GAAG,KAAK,0BAA0B;YAAE,SAAS;QACjD,IAAI,6BAA6B,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB,CAAC,UAAoB,EAAE,UAA8B,EAAE,OAAoB;IAC3G,KAAK,MAAM,SAAS,IAAI,4BAAoB,EAAE,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,EACzC,CAAC,EACD,oCAAoC,SAAS,GAAG,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAChD,IAAI,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,EACzC,CAAC,EACD,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAC7D,IAAI,UAAU,CAAC,qBAAqB,KAAK,UAAU,IAAI,CAAC,cAAc,EAAE,CAAC;QACvE,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,EACzC,CAAC,EACD,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,qBAAqB,KAAK,WAAW,IAAI,cAAc,EAAE,CAAC;QACvE,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,EACzC,CAAC,EACD,0CAA0C,CAC3C,CAAC;IACJ,CAAC;AACH,CAAC"}
1
+ {"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../../src/lib/signing/verifier.ts"],"names":[],"mappings":";;AA2CA,wDA+MC;AA1PD,2DAAqD;AACrD,iDAMwB;AACxB,qDAAwD;AACxD,qCAAiD;AACjD,qCAA0F;AAC1F,qCAA2D;AAI3D,qEAAuG;AACvG,mCAQiB;AAmBV,KAAK,UAAU,sBAAsB,CAC1C,OAAoB,EACpB,OAA6B;IAE7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACxE,MAAM,cAAc,GAAG,IAAA,6BAAc,EAAC,OAAO,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,IAAA,6BAAc,EAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAE/D,kDAAkD;IAClD,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,qEAAqE;QACrE,kEAAkE;QAClE,qEAAqE;QACrE,0BAA0B;QAC1B,IAAI,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,8BAAqB,CAC7B,4BAA4B,EAC5B,CAAC,EACD,cAAc,SAAS,6BAA6B,CACrD,CAAC;QACJ,CAAC;QACD,MAAM,0BAA0B,GAAG,OAAO,CAAC,UAAU,CAAC,6BAA6B,IAAI,EAAE,CAAC;QAC1F,IAAI,0BAA0B,CAAC,MAAM,GAAG,CAAC,IAAI,gCAAgC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5F,MAAM,IAAI,8BAAqB,CAC7B,4BAA4B,EAC5B,CAAC,EACD,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QACD,MAAM,eAAe,GAAG,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,sBAAsB,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,0BAA0B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3G,IAAI,sBAAsB,EAAE,CAAC;YAC3B,MAAM,IAAI,8BAAqB,CAC7B,4BAA4B,EAC5B,CAAC,EACD,oBAAoB,sBAAsB,6BAA6B,CACxE,CAAC;QACJ,CAAC;QACD,kEAAkE;QAClE,wEAAwE;QACxE,qEAAqE;QACrE,iBAAiB;QACjB,kEAAkE;QAClE,mEAAmE;QACnE,sEAAsE;QACtE,IAAI,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,8BAAqB,CAC7B,4BAA4B,EAC5B,CAAC,EACD,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,8BAAqB,CAC7B,oCAAoC,EACpC,CAAC,EACD,iEAAiE,CAClE,CAAC;IACJ,CAAC;IAED,iBAAiB;IACjB,MAAM,WAAW,GAAG,IAAA,4BAAmB,EAAC,cAAc,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAA,uBAAc,EAAC,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAA,iCAAkB,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,kCAAkC,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAEpE,mCAAmC;IACnC,aAAa,CAAC,WAAW,CAAC,CAAC;IAE3B,qBAAqB;IACrB,IAAI,WAAW,CAAC,MAAM,CAAC,GAAG,KAAK,2BAAmB,EAAE,CAAC;QACnD,MAAM,IAAI,8BAAqB,CAC7B,+BAA+B,EAC/B,CAAC,EACD,0BAA0B,2BAAmB,WAAW,WAAW,CAAC,MAAM,CAAC,GAAG,GAAG,CAClF,CAAC;IACJ,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,oBAAY,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,8BAAqB,CAC7B,mCAAmC,EACnC,CAAC,EACD,kBAAkB,WAAW,CAAC,MAAM,CAAC,GAAG,gCAAgC,CACzE,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAE5E,8BAA8B;IAC9B,yBAAyB,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAE/E,yBAAyB;IACzB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,8BAAqB,CAC7B,+BAA+B,EAC/B,CAAC,EACD,2BAA2B,WAAW,CAAC,MAAM,CAAC,KAAK,GAAG,CACvD,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACzC,MAAM,IAAI,8BAAqB,CAC7B,+BAA+B,EAC/B,CAAC,EACD,2CAA2C,GAAG,CAAC,GAAG,qCAAqC,WAAW,CAAC,MAAM,CAAC,KAAK,GAAG,CACnH,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,8BAAqB,CAC7B,uCAAuC,EACvC,CAAC,EACD,QAAQ,GAAG,CAAC,GAAG,kDAAkD,CAClE,CAAC;IACJ,CAAC;IACD,+BAA+B,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAE7D,4EAA4E;IAC5E,IAAI,MAAM,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,8BAAqB,CAAC,+BAA+B,EAAE,CAAC,EAAE,QAAQ,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;IACrG,CAAC;IAED,qEAAqE;IACrE,uEAAuE;IACvE,qEAAqE;IACrE,yEAAyE;IACzE,MAAM,WAAW,GAAG,IAAA,iCAAkB,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEpD,0EAA0E;IAC1E,4EAA4E;IAC5E,qEAAqE;IACrE,IAAI,MAAM,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,8BAAqB,CAC7B,8BAA8B,EAC9B,EAAE,EACF,iDAAiD,GAAG,CAAC,GAAG,EAAE,CAC3D,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,8BAAqB,CAC7B,4BAA4B,EAC5B,EAAE,EACF,oBAAoB,GAAG,CAAC,GAAG,WAAW,WAAW,CAAC,MAAM,CAAC,KAAK,2BAA2B,CAC1F,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,8DAA8D;IAC9D,MAAM,IAAI,GAAG,IAAA,iCAAkB,EAC7B,WAAW,CAAC,UAAU,EACtB,OAAO,EACP,WAAW,CAAC,MAAM,EAClB,WAAW,CAAC,oBAAoB,CACjC,CAAC;IACF,MAAM,SAAS,GAAG,IAAA,uBAAc,EAAC,GAAG,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAA,wBAAe,EAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7G,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,8BAAqB,CAC7B,2BAA2B,EAC3B,EAAE,EACF,qDAAqD,CACtD,CAAC;IACJ,CAAC;IAED,mDAAmD;IACnD,IAAI,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACtD,MAAM,YAAY,GAAG,IAAA,6BAAc,EAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACvE,IAAI,CAAC,YAAY,IAAI,CAAC,IAAA,qCAAoB,EAAC,YAAY,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,8BAAqB,CAC7B,mCAAmC,EACnC,EAAE,EACF,2DAA2D,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,GAAG,oCAA4B,CAAC;IAClF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,oCAA4B,GAAG,oCAA4B,CAAC,CAAC;IAC7F,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAChH,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,8BAAqB,CAC7B,4BAA4B,EAC5B,EAAE,EACF,oBAAoB,GAAG,CAAC,GAAG,WAAW,WAAW,CAAC,MAAM,CAAC,KAAK,2BAA2B,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,8BAAqB,CAC7B,8BAA8B,EAC9B,EAAE,EACF,iDAAiD,GAAG,CAAC,GAAG,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAwB;IACtD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,gCAAgC,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3D,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAChC,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAQ,OAAgC,CAAC,MAAM,KAAK,QAAQ;YAC7G,CAAC,CAAC,CAAE,OAA8B,CAAC,MAAM,CAAC;YAC1C,CAAC,CAAC,EAAE,CACP,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAA4B;IACjD,MAAM,QAAQ,GAAgD,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACrH,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,8BAAqB,CAC7B,qCAAqC,EACrC,CAAC,EACD,kDAAkD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,OAAe,EAAE,GAAW;IACnE,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,8BAAqB,CAC7B,kCAAkC,EAClC,CAAC,EACD,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,OAAO,GAAG,oCAA4B,EAAE,CAAC;QACrD,MAAM,IAAI,8BAAqB,CAC7B,kCAAkC,EAClC,CAAC,EACD,4BAA4B,oCAA4B,WAAW,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,GAAG,OAAO,GAAG,oCAA4B,EAAE,CAAC;QACjD,MAAM,IAAI,8BAAqB,CAAC,kCAAkC,EAAE,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,GAAG,GAAG,OAAO,GAAG,oCAA4B,EAAE,CAAC;QACjD,MAAM,IAAI,8BAAqB,CAC7B,kCAAkC,EAClC,CAAC,EACD,0DAA0D,CAC3D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,+BAA+B,CACtC,GAA8D,EAC9D,YAAoB;IAEpB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,8BAAqB,CAC7B,uCAAuC,EACvC,CAAC,EACD,QAAQ,GAAG,CAAC,GAAG,6DAA6D,YAAY,GAAG,CAC5F,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAC7D,IAAI,eAAe,IAAI,GAAG,CAAC,GAAG,KAAK,eAAe,EAAE,CAAC;QACnD,MAAM,IAAI,8BAAqB,CAC7B,uCAAuC,EACvC,CAAC,EACD,QAAQ,GAAG,CAAC,GAAG,kBAAkB,GAAG,CAAC,GAAG,wCAAwC,YAAY,WAAW,eAAe,GAAG,CAC1H,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,8BAAqB,CAC7B,uCAAuC,EACvC,CAAC,EACD,QAAQ,GAAG,CAAC,GAAG,qCAAqC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,qCAAqC,CAC5G,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YAC5C,MAAM,IAAI,8BAAqB,CAC7B,uCAAuC,EACvC,CAAC,EACD,QAAQ,GAAG,CAAC,GAAG,qCAAqC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,mBAAmB,CAC1F,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,sBAAsB,GAA2B;IACrD,OAAO,EAAE,OAAO;IAChB,mBAAmB,EAAE,OAAO;CAC7B,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,kCAAkC,CAAC,UAAoB,EAAE,OAAoB;IACpF,IAAI,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAA,6BAAc,EAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,8BAAqB,CAC7B,oCAAoC,EACpC,CAAC,EACD,qGAAqG,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAA,6BAAc,EAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAChE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAA,oCAAe,EAAC,KAAK,CAAC,CAAC;gBACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;gBACvC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC1C,CAAC;gBACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;oBAChC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;wBACd,MAAM,IAAI,8BAAqB,CAC7B,oCAAoC,EACpC,CAAC,EACD,gCAAgC,GAAG,6DAA6D,CACjG,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,8BAAqB;oBAAE,MAAM,CAAC,CAAC;YAClD,CAAC;YACD,wEAAwE;YACxE,iEAAiE;YACjE,kDAAkD;YAClD,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,8BAAqB,CAC7B,oCAAoC,EACpC,CAAC,EACD,4FAA4F,CAC7F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACrB,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;YACpD,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,QAAQ,GAAG,CAAC,QAAQ,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;IACzB,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC;QACf,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;gBAAE,CAAC,EAAE,CAAC;YAC/D,MAAM,KAAK,GAAG,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;gBAAE,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,GAAG,KAAK;gBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAC9D,YAAY,GAAG,KAAK,CAAC;YACrB,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACrB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC;gBACf,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;oBACrC,CAAC,IAAI,CAAC,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACrB,CAAC,EAAE,CAAC;oBACJ,MAAM;gBACR,CAAC;gBACD,CAAC,EAAE,CAAC;YACN,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,GAAG,GAAG;gBAAE,CAAC,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,YAAY,GAAG,IAAI,CAAC;YACpB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,CAAC,EAAE,CAAC;IACN,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,kCAAkC,GAAG,SAAS,CAAC;AACrD;;;;GAIG;AACH,SAAS,gCAAgC,CAAC,IAAwB;IAChE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,kCAAkC,CAAC;AACtF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,4BAA4B,CAAC,OAAoB;IACxD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,gCAAgC,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAA,sDAA6B,EAAC,MAAM,EAAE,qDAA4B,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,yBAAyB,CAAC,UAAoB,EAAE,UAA8B,EAAE,OAAoB;IAC3G,KAAK,MAAM,SAAS,IAAI,4BAAoB,EAAE,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,EACzC,CAAC,EACD,oCAAoC,SAAS,GAAG,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAChD,IAAI,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,EACzC,CAAC,EACD,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAC7D,IAAI,UAAU,CAAC,qBAAqB,KAAK,UAAU,IAAI,CAAC,cAAc,EAAE,CAAC;QACvE,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,EACzC,CAAC,EACD,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,qBAAqB,KAAK,WAAW,IAAI,cAAc,EAAE,CAAC;QACvE,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,EACzC,CAAC,EACD,0CAA0C,CAC3C,CAAC;IACJ,CAAC;AACH,CAAC"}
@@ -0,0 +1,10 @@
1
+ export declare const WEBHOOK_AUTH_TRAVERSAL_DEPTH = 64;
2
+ /**
3
+ * Scan a parsed JSON value for a non-empty authentication object. The false
4
+ * positive cost is over-signing; the false negative cost is an unsigned
5
+ * webhook-credential registration.
6
+ *
7
+ * Inspection-budget exhaustion fails closed by returning true.
8
+ */
9
+ export declare function containsWebhookAuthentication(value: unknown, depthRemaining?: number): boolean;
10
+ //# sourceMappingURL=webhook-auth-detection.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"webhook-auth-detection.d.ts","sourceRoot":"","sources":["../../../src/lib/signing/webhook-auth-detection.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAE/C;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,SAA+B,GAAG,OAAO,CAepH"}
@@ -0,0 +1,37 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.WEBHOOK_AUTH_TRAVERSAL_DEPTH = void 0;
4
+ exports.containsWebhookAuthentication = containsWebhookAuthentication;
5
+ exports.WEBHOOK_AUTH_TRAVERSAL_DEPTH = 64;
6
+ /**
7
+ * Scan a parsed JSON value for a non-empty authentication object. The false
8
+ * positive cost is over-signing; the false negative cost is an unsigned
9
+ * webhook-credential registration.
10
+ *
11
+ * Inspection-budget exhaustion fails closed by returning true.
12
+ */
13
+ function containsWebhookAuthentication(value, depthRemaining = exports.WEBHOOK_AUTH_TRAVERSAL_DEPTH) {
14
+ if (depthRemaining <= 0)
15
+ return true;
16
+ if (!value || typeof value !== 'object')
17
+ return false;
18
+ if (Array.isArray(value)) {
19
+ return value.some(item => containsWebhookAuthentication(item, depthRemaining - 1));
20
+ }
21
+ const obj = value;
22
+ if (hasNonEmptyAuthenticationObject(obj.authentication))
23
+ return true;
24
+ for (const [key, nested] of Object.entries(obj)) {
25
+ if (key === 'authentication')
26
+ continue;
27
+ if (containsWebhookAuthentication(nested, depthRemaining - 1))
28
+ return true;
29
+ }
30
+ return false;
31
+ }
32
+ function hasNonEmptyAuthenticationObject(value) {
33
+ if (!value || typeof value !== 'object' || Array.isArray(value))
34
+ return false;
35
+ return Object.keys(value).length > 0;
36
+ }
37
+ //# sourceMappingURL=webhook-auth-detection.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"webhook-auth-detection.js","sourceRoot":"","sources":["../../../src/lib/signing/webhook-auth-detection.ts"],"names":[],"mappings":";;;AASA,sEAeC;AAxBY,QAAA,4BAA4B,GAAG,EAAE,CAAC;AAE/C;;;;;;GAMG;AACH,SAAgB,6BAA6B,CAAC,KAAc,EAAE,cAAc,GAAG,oCAA4B;IACzG,IAAI,cAAc,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,6BAA6B,CAAC,IAAI,EAAE,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,IAAI,+BAA+B,CAAC,GAAG,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAErE,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,KAAK,gBAAgB;YAAE,SAAS;QACvC,IAAI,6BAA6B,CAAC,MAAM,EAAE,cAAc,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAc;IACrD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACvC,CAAC"}
@@ -1,7 +1,7 @@
1
1
  /**
2
2
  * AdCP SDK library version
3
3
  */
4
- export declare const LIBRARY_VERSION = "9.2.2";
4
+ export declare const LIBRARY_VERSION = "9.4.0";
5
5
  /**
6
6
  * AdCP specification version this library is built for
7
7
  */
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
33
33
  * Full version information
34
34
  */
35
35
  export declare const VERSION_INFO: {
36
- readonly library: "9.2.2";
36
+ readonly library: "9.4.0";
37
37
  readonly adcp: "3.1.0";
38
38
  readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0-beta.1", "3.0-beta.1", "3.0-beta", "3.0.0-beta.3", "3.0-beta.3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.1.0", "3.1"];
39
- readonly generatedAt: "2026-06-26T16:46:13.505Z";
39
+ readonly generatedAt: "2026-06-30T09:02:12.249Z";
40
40
  };
41
41
  /**
42
42
  * Get the AdCP specification version this library is built for
@@ -12,7 +12,7 @@ exports.toReleasePrecisionVersion = toReleasePrecisionVersion;
12
12
  /**
13
13
  * AdCP SDK library version
14
14
  */
15
- exports.LIBRARY_VERSION = '9.2.2';
15
+ exports.LIBRARY_VERSION = '9.4.0';
16
16
  /**
17
17
  * AdCP specification version this library is built for
18
18
  */
@@ -60,10 +60,10 @@ exports.COMPATIBLE_ADCP_VERSIONS = [
60
60
  * Full version information
61
61
  */
62
62
  exports.VERSION_INFO = {
63
- library: '9.2.2',
63
+ library: '9.4.0',
64
64
  adcp: '3.1.0',
65
65
  compatibleVersions: exports.COMPATIBLE_ADCP_VERSIONS,
66
- generatedAt: '2026-06-26T16:46:13.505Z',
66
+ generatedAt: '2026-06-30T09:02:12.249Z',
67
67
  };
68
68
  /**
69
69
  * Get the AdCP specification version this library is built for
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@adcp/sdk",
3
- "version": "9.2.2",
3
+ "version": "9.4.0",
4
4
  "description": "AdCP SDK — client, server, and compliance harnesses for the AdContext Protocol (MCP + A2A)",
5
5
  "workspaces": [
6
6
  ".",