@agent-deck/backend 1.8.0 → 1.8.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/.tsbuildinfo +1 -1
- package/dist/execution-authority/types.d.ts +1 -1
- package/dist/execution-authority/types.d.ts.map +1 -1
- package/dist/lib/agent-deck-context.d.ts +1 -1
- package/dist/lib/agent-deck-context.d.ts.map +1 -1
- package/dist/lib/agent-deck-context.js +4 -17
- package/dist/lib/agent-deck-context.js.map +1 -1
- package/dist/lib/backend-api-error.d.ts.map +1 -1
- package/dist/lib/backend-api-error.js +0 -1
- package/dist/lib/backend-api-error.js.map +1 -1
- package/dist/lib/bound-deck-scope.d.ts.map +1 -1
- package/dist/lib/bound-deck-scope.js +0 -4
- package/dist/lib/bound-deck-scope.js.map +1 -1
- package/dist/lib/http-auth.d.ts +0 -14
- package/dist/lib/http-auth.d.ts.map +1 -1
- package/dist/lib/http-auth.js +0 -25
- package/dist/lib/http-auth.js.map +1 -1
- package/dist/lib/invalid-deck-id-path-segment.d.ts +6 -0
- package/dist/lib/invalid-deck-id-path-segment.d.ts.map +1 -0
- package/dist/lib/invalid-deck-id-path-segment.js +11 -0
- package/dist/lib/invalid-deck-id-path-segment.js.map +1 -0
- package/dist/lib/route-policy.js +2 -2
- package/dist/lib/route-policy.js.map +1 -1
- package/dist/mcp-server.d.ts +6 -13
- package/dist/mcp-server.d.ts.map +1 -1
- package/dist/mcp-server.js +64 -140
- package/dist/mcp-server.js.map +1 -1
- package/dist/mcp-session-binding.d.ts +7 -15
- package/dist/mcp-session-binding.d.ts.map +1 -1
- package/dist/mcp-session-binding.js +14 -30
- package/dist/mcp-session-binding.js.map +1 -1
- package/dist/mcp-tools/policy.d.ts +0 -3
- package/dist/mcp-tools/policy.d.ts.map +1 -1
- package/dist/mcp-tools/policy.js +6 -43
- package/dist/mcp-tools/policy.js.map +1 -1
- package/dist/mcp-tools/register.d.ts +1 -5
- package/dist/mcp-tools/register.d.ts.map +1 -1
- package/dist/mcp-tools/register.js +100 -104
- package/dist/mcp-tools/register.js.map +1 -1
- package/dist/mcp-tools/test-harness.d.ts +5 -5
- package/dist/mcp-tools/test-harness.d.ts.map +1 -1
- package/dist/mcp-tools/test-harness.js +15 -21
- package/dist/mcp-tools/test-harness.js.map +1 -1
- package/dist/models/database.d.ts +2 -0
- package/dist/models/database.d.ts.map +1 -1
- package/dist/models/database.js +5 -0
- package/dist/models/database.js.map +1 -1
- package/dist/playbooks/stub-sync.d.ts +9 -0
- package/dist/playbooks/stub-sync.d.ts.map +1 -1
- package/dist/playbooks/stub-sync.js +51 -12
- package/dist/playbooks/stub-sync.js.map +1 -1
- package/dist/routes/decks.d.ts.map +1 -1
- package/dist/routes/decks.js +0 -1
- package/dist/routes/decks.js.map +1 -1
- package/dist/routes/execution-authority.d.ts.map +1 -1
- package/dist/routes/execution-authority.js +115 -28
- package/dist/routes/execution-authority.js.map +1 -1
- package/dist/routes/launch.d.ts +8 -0
- package/dist/routes/launch.d.ts.map +1 -0
- package/dist/routes/launch.js +35 -0
- package/dist/routes/launch.js.map +1 -0
- package/dist/routes/scope.d.ts.map +1 -1
- package/dist/routes/scope.js +1 -39
- package/dist/routes/scope.js.map +1 -1
- package/dist/routes/services.d.ts.map +1 -1
- package/dist/routes/services.js +1 -7
- package/dist/routes/services.js.map +1 -1
- package/dist/routes/trusted-session.d.ts.map +1 -1
- package/dist/routes/trusted-session.js +50 -152
- package/dist/routes/trusted-session.js.map +1 -1
- package/dist/scope/live-display-registry.d.ts +0 -2
- package/dist/scope/live-display-registry.d.ts.map +1 -1
- package/dist/scope/live-display-registry.js +0 -1
- package/dist/scope/live-display-registry.js.map +1 -1
- package/dist/server/index.d.ts +0 -2
- package/dist/server/index.d.ts.map +1 -1
- package/dist/server/index.js +2 -5
- package/dist/server/index.js.map +1 -1
- package/dist/test/auth-fixtures.d.ts +1 -1
- package/dist/test/auth-fixtures.d.ts.map +1 -1
- package/dist/test/auth-fixtures.js +2 -11
- package/dist/test/auth-fixtures.js.map +1 -1
- package/dist/trusted-session/auth.d.ts +1 -7
- package/dist/trusted-session/auth.d.ts.map +1 -1
- package/dist/trusted-session/auth.js +7 -54
- package/dist/trusted-session/auth.js.map +1 -1
- package/dist/trusted-session/policy-hook.d.ts.map +1 -1
- package/dist/trusted-session/policy-hook.js +1 -51
- package/dist/trusted-session/policy-hook.js.map +1 -1
- package/dist/trusted-session/route-policy-registry.d.ts.map +1 -1
- package/dist/trusted-session/route-policy-registry.js +5 -50
- package/dist/trusted-session/route-policy-registry.js.map +1 -1
- package/dist/trusted-session/store.d.ts +12 -45
- package/dist/trusted-session/store.d.ts.map +1 -1
- package/dist/trusted-session/store.js +66 -208
- package/dist/trusted-session/store.js.map +1 -1
- package/package.json +2 -2
- package/static-ui/assets/{index-DhP_UPyM.js → index-Bb9ckehB.js} +1 -1
- package/static-ui/index.html +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"live-display-registry.js","sourceRoot":"","sources":["../../src/scope/live-display-registry.ts"],"names":[],"mappings":";;;;;;AAAA,0DAA6B;AAC7B,+CAI4B;AAC5B,mCAAsC;
|
|
1
|
+
{"version":3,"file":"live-display-registry.js","sourceRoot":"","sources":["../../src/scope/live-display-registry.ts"],"names":[],"mappings":";;;;;;AAAA,0DAA6B;AAC7B,+CAI4B;AAC5B,mCAAsC;AAkBtC,qFAAqF;AACrF,MAAa,mBAAmB;IACtB,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IAE1D,MAAM,CAAC,KAAwB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,KAAK,GACT,QAAQ,EAAE,KAAK;YACf,IAAA,mBAAW,EAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnF,sFAAsF;QACtF,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE,aAAa,CAAC;QAC7E,MAAM,KAAK,GAAqB;YAC9B,GAAG,KAAK;YACR,aAAa;YACb,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,QAAQ,EAAE,UAAU;YACpD,KAAK;YACL,cAAc,EAAE,KAAK,CAAC,SAAS;SAChC,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,GAAG,CAAC,YAAoB;QACtB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,CAAC,YAAoB;QACzB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,YAAoB,EAAE,EAAU;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjD,IAAI,KAAK,IAAI,EAAE,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;YACvC,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAClD,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACvF,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,gBAAgB,CAAC,aAAqB;QACpC,IAAI,OAAO,GAAG,IAAA,+BAAsB,EAAC,aAAa,CAAC,CAAC;QACpD,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,IAAI,GAA4B,IAAI,CAAC;YACzC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC9C,4EAA4E;gBAC5E,8EAA8E;gBAC9E,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,IAAA,+BAAsB,EAAC,KAAK,CAAC,aAAa,CAAC,KAAK,OAAO,EAAE,CAAC;oBACpF,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;oBAC9C,IAAI,GAAG,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YACD,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,MAAM;YACR,CAAC;YACD,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AArED,kDAqEC"}
|
package/dist/server/index.d.ts
CHANGED
|
@@ -5,7 +5,6 @@ import { OAuthManager } from '../services/oauth-manager';
|
|
|
5
5
|
import { ServiceStatusUpdate, DeckUpdate, WebSocketMessage } from '@agent-deck/shared';
|
|
6
6
|
import { CredentialManager, OAuthClientSecretVault, OAuthTokenVault, ServiceHeaderVault } from '../vault';
|
|
7
7
|
import { CollectionWarningService } from '../services/collection-warning-service';
|
|
8
|
-
import { ExecutionAuthorityStore } from '../execution-authority';
|
|
9
8
|
import { PlaybookManager } from '../playbooks/playbook-manager';
|
|
10
9
|
import { PatchManager } from '../playbooks/patch-manager';
|
|
11
10
|
import { LiveDisplayRegistry } from '../scope/live-display-registry';
|
|
@@ -15,7 +14,6 @@ declare module 'fastify' {
|
|
|
15
14
|
interface FastifyInstance {
|
|
16
15
|
db: DatabaseManager;
|
|
17
16
|
trustedSessionStore: TrustedSessionStore;
|
|
18
|
-
executionAuthorityStore: ExecutionAuthorityStore;
|
|
19
17
|
serviceManager: ServiceManager;
|
|
20
18
|
mcpClient: MCPClientManager;
|
|
21
19
|
oauthManager: OAuthManager;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAUzD,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,EAAqB,iBAAiB,EAAE,sBAAsB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAE7H,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAKlF,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAUzD,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,EAAqB,iBAAiB,EAAE,sBAAsB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAE7H,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAKlF,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAK1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAGrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAI/D,wBAAsB,YAAY,qUAwKjC;AAGD,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,EAAE,EAAE,eAAe,CAAC;QACpB,mBAAmB,EAAE,mBAAmB,CAAC;QACzC,cAAc,EAAE,cAAc,CAAC;QAC/B,SAAS,EAAE,gBAAgB,CAAC;QAC5B,YAAY,EAAE,YAAY,CAAC;QAC3B,sBAAsB,EAAE,sBAAsB,CAAC;QAC/C,eAAe,EAAE,eAAe,CAAC;QACjC,kBAAkB,EAAE,kBAAkB,CAAC;QACvC,iBAAiB,EAAE,iBAAiB,CAAC;QACrC,eAAe,EAAE,eAAe,CAAC;QACjC,YAAY,EAAE,YAAY,CAAC;QAC3B,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,mBAAmB,EAAE,mBAAmB,CAAC;QACzC,sBAAsB,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;QAC9D,mBAAmB,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;QAClD,cAAc,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;KACrD;CACF"}
|
package/dist/server/index.js
CHANGED
|
@@ -29,8 +29,7 @@ const collection_warning_service_1 = require("../services/collection-warning-ser
|
|
|
29
29
|
const collection_1 = require("../routes/collection");
|
|
30
30
|
const export_import_1 = require("../routes/export-import");
|
|
31
31
|
const trusted_session_1 = require("../routes/trusted-session");
|
|
32
|
-
const
|
|
33
|
-
const execution_authority_2 = require("../execution-authority");
|
|
32
|
+
const launch_1 = require("../routes/launch");
|
|
34
33
|
const playbook_manager_1 = require("../playbooks/playbook-manager");
|
|
35
34
|
const patch_manager_1 = require("../playbooks/patch-manager");
|
|
36
35
|
const playbook_patches_1 = require("../routes/playbook-patches");
|
|
@@ -85,7 +84,6 @@ async function createServer() {
|
|
|
85
84
|
await (0, startup_1.ensureStoreReady)(db);
|
|
86
85
|
const secretStore = (0, vault_1.createSecretStore)();
|
|
87
86
|
const trustedSessionStore = new store_1.TrustedSessionStore(db.getSqliteDatabase());
|
|
88
|
-
const executionAuthorityStore = new execution_authority_2.ExecutionAuthorityStore(db.getSqliteDatabase());
|
|
89
87
|
await (0, admin_secret_1.ensureAdminSecret)();
|
|
90
88
|
const oauthClientSecretVault = new vault_1.OAuthClientSecretVault(secretStore, db);
|
|
91
89
|
const oauthTokenVault = new vault_1.OAuthTokenVault(secretStore, db);
|
|
@@ -103,7 +101,6 @@ async function createServer() {
|
|
|
103
101
|
const liveDisplayRegistry = new live_display_registry_1.LiveDisplayRegistry();
|
|
104
102
|
fastify.decorate('db', db);
|
|
105
103
|
fastify.decorate('trustedSessionStore', trustedSessionStore);
|
|
106
|
-
fastify.decorate('executionAuthorityStore', executionAuthorityStore);
|
|
107
104
|
(0, policy_hook_1.registerHttpPolicyHook)(fastify);
|
|
108
105
|
const sweepStaleSessions = () => {
|
|
109
106
|
try {
|
|
@@ -134,7 +131,7 @@ async function createServer() {
|
|
|
134
131
|
await fastify.register(local_mcp_1.registerLocalMCPRoutes, { prefix: '/api/local-mcp' });
|
|
135
132
|
await fastify.register(trusted_session_1.registerTrustedSessionRoutes, { prefix: '/api/trusted-session' });
|
|
136
133
|
await fastify.register(trusted_session_1.registerDashboardAuthRoutes, { prefix: '/api/dashboard-auth' });
|
|
137
|
-
await fastify.register(
|
|
134
|
+
await fastify.register(launch_1.registerLaunchRoutes, { prefix: '/api/launch' });
|
|
138
135
|
// Health check endpoint
|
|
139
136
|
fastify.get('/health', async (request, reply) => {
|
|
140
137
|
return {
|
package/dist/server/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";;;;;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";;;;;AAwCA,oCAwKC;AAhND,sDAA8B;AAC9B,yDAAiC;AACjC,mEAA2C;AAC3C,6DAA4C;AAC5C,sDAAyB;AACzB,0DAA6B;AAC7B,iDAAqD;AACrD,iEAA6D;AAC7D,uEAAkE;AAClE,6DAAyD;AACzD,iDAA2D;AAC3D,2CAAqD;AACrD,2CAAsD;AACtD,mDAA8D;AAC9D,wDAAsC;AACtC,mDAA6D;AAC7D,uDAAiE;AACjE,2CAAsD;AACtD,mDAA6D;AAE7D,oCAA6H;AAC7H,wCAAmD;AACnD,uFAAkF;AAClF,qDAAgE;AAChE,2DAAqE;AACrE,+DAAsG;AACtG,6CAAwD;AACxD,oEAAgE;AAChE,8DAA0D;AAC1D,iEAAyE;AACzE,iEAA0E;AAC1E,4CAAqD;AACrD,yEAA2E;AAC3E,0EAAqE;AACrE,4CAAkD;AAClD,8CAAoD;AACpD,oDAA+D;AAC/D,kEAAoE;AACpE,gEAAwE;AAEjE,KAAK,UAAU,YAAY;IAChC,MAAM,OAAO,GAAG,IAAA,iBAAO,EAAC;QACtB,MAAM,EAAE;YACN,KAAK,EAAE,MAAM;SACd;KACF,CAAC,CAAC;IAEH,mBAAmB;IACnB,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IAClE,MAAM,qBAAqB,GAAG;QAC5B,uBAAuB;QACvB,uBAAuB;QACvB,uBAAuB;QACvB,uBAAuB;KACxB,CAAC;IAEF,MAAM,WAAW,GAAG,iBAAiB;QACnC,CAAC,CAAC,CAAC,iBAAiB,CAAC;QACrB,CAAC,CAAC,qBAAqB,CAAC;IAE1B,MAAM,OAAO,CAAC,QAAQ,CAAC,cAAI,EAAE;QAC3B,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE;YACrB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,2CAA2C;gBAC3C,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACxB,CAAC;YACD,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACxB,CAAC;YACD,EAAE,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC;QACD,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,QAAQ,CAAC,mBAAS,CAAC,CAAC;IAElC,sBAAsB;IACtB,MAAM,YAAY,GAAG,IAAA,2BAAmB,GAAE,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,gBAAgB,YAAY,EAAE,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,IAAI,0BAAe,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,MAAM,IAAA,kDAA0B,EAAC,EAAE,CAAC,CAAC;IACzD,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,UAAU,WAAW,4BAA4B,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAA,0BAAgB,EAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,WAAW,GAAG,IAAA,yBAAiB,GAAE,CAAC;IACxC,MAAM,mBAAmB,GAAG,IAAI,2BAAmB,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC5E,MAAM,IAAA,gCAAiB,GAAE,CAAC;IAC1B,MAAM,sBAAsB,GAAG,IAAI,8BAAsB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,IAAI,uBAAe,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,kBAAkB,GAAG,IAAI,0BAAkB,CAAC,WAAW,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,IAAI,4BAAY,CAAC,EAAE,EAAE,sBAAsB,EAAE,eAAe,CAAC,CAAC;IACnF,MAAM,WAAW,GAAG,IAAI,wBAAe,EAAE,CAAC;IAC1C,MAAM,iBAAiB,GAAG,IAAI,yBAAiB,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACzF,MAAM,SAAS,GAAG,IAAI,qCAAgB,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;IACnG,MAAM,cAAc,GAAG,IAAI,gCAAc,CACvC,EAAE,EACF,SAAS,EACT,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,EACjB,WAAW,EACX,kBAAkB,CACnB,CAAC;IACF,KAAK,cAAc,CAAC,oBAAoB,EAAE,CAAC;IAC3C,KAAK,cAAc,CAAC,2BAA2B,EAAE,CAAC;IAClD,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,IAAI,4BAAY,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;IAC3D,MAAM,wBAAwB,GAAG,IAAI,qDAAwB,CAAC,YAAY,CAAC,CAAC;IAC5E,MAAM,mBAAmB,GAAG,IAAI,2CAAmB,EAAE,CAAC;IAEtD,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,CAAC;IAC7D,IAAA,oCAAsB,EAAC,OAAO,CAAC,CAAC;IAEhC,MAAM,kBAAkB,GAAG,GAAG,EAAE;QAC9B,IAAI,CAAC;YACH,mBAAmB,CAAC,mBAAmB,EAAE,CAAC;YAC1C,mBAAmB,CAAC,qBAAqB,EAAE,CAAC;YAC5C,mBAAmB,CAAC,uBAAuB,EAAE,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,oCAAoC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC;IACF,kBAAkB,EAAE,CAAC;IACrB,MAAM,iBAAiB,GAAG,WAAW,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAClE,iBAAiB,CAAC,KAAK,EAAE,EAAE,CAAC;IAE5B,kBAAkB;IAClB,MAAM,OAAO,CAAC,QAAQ,CAAC,mCAAuB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACvE,MAAM,OAAO,CAAC,QAAQ,CAAC,gCAAqB,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAC3E,MAAM,OAAO,CAAC,QAAQ,CAAC,0BAAkB,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;IAClF,MAAM,OAAO,CAAC,QAAQ,CAAC,sCAAwB,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACjF,MAAM,OAAO,CAAC,QAAQ,CAAC,2BAAmB,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACtE,MAAM,OAAO,CAAC,QAAQ,CAAC,kCAAsB,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC7E,MAAM,OAAO,CAAC,QAAQ,CAAC,8CAA2B,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;IACzF,MAAM,OAAO,CAAC,QAAQ,CAAC,+CAA4B,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC1F,MAAM,OAAO,CAAC,QAAQ,CAAC,qCAAwB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAChF,MAAM,OAAO,CAAC,QAAQ,CAAC,0CAA0B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACvE,MAAM,OAAO,CAAC,QAAQ,CAAC,2BAAmB,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACtE,MAAM,OAAO,CAAC,QAAQ,CAAC,aAAS,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAC1D,MAAM,OAAO,CAAC,QAAQ,CAAC,kCAAsB,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC7E,MAAM,OAAO,CAAC,QAAQ,CAAC,8CAA4B,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACzF,MAAM,OAAO,CAAC,QAAQ,CAAC,6CAA2B,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACvF,MAAM,OAAO,CAAC,QAAQ,CAAC,6BAAoB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAExE,wBAAwB;IACxB,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC9C,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,oBAAoB;YAC7B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,IAAA,6BAAmB,GAAE;SAC/B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,MAAM,IAAI,iBAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,CAAC,QAAQ,CAAC,gBAAa,EAAE;YACpC,IAAI,EAAE,mBAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAC1B,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;QAEH,OAAO,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAClD,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,mBAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACnB,uDAAuD;QACvD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,IAAA,6BAAmB,GAAE;YAC9B,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,kCAAkC;IAClC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IACnD,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC/C,OAAO,CAAC,QAAQ,CAAC,wBAAwB,EAAE,sBAAsB,CAAC,CAAC;IACnE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC;IACrD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC;IAC3D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;IACzD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC;IACrD,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC/C,OAAO,CAAC,QAAQ,CAAC,0BAA0B,EAAE,wBAAwB,CAAC,CAAC;IACvE,OAAO,CAAC,QAAQ,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,CAAC;IAE7D,uDAAuD;IACvD,OAAO,CAAC,QAAQ,CAAC,wBAAwB,EAAE,CAAC,MAA2B,EAAE,EAAE;QACzE,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,MAAM,CAAC,CAAC;QACpD,gEAAgE;IAClE,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,MAAkB,EAAE,EAAE;QAC7D,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;QACjD,gEAAgE;IAClE,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,OAAyB,EAAE,EAAE;QAC/D,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;QAC7C,gEAAgE;IAClE,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC"}
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
import type { DatabaseManager } from '../models/database';
|
|
2
2
|
import { TrustedSessionStore } from '../trusted-session/store';
|
|
3
3
|
export declare function dashboardAuthHeaders(store: TrustedSessionStore): Record<string, string>;
|
|
4
|
-
export declare function agentSessionHeaders(db: DatabaseManager, deckId: string,
|
|
4
|
+
export declare function agentSessionHeaders(db: DatabaseManager, deckId: string, _workspaceDigest?: string): Record<string, string>;
|
|
5
5
|
//# sourceMappingURL=auth-fixtures.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth-fixtures.d.ts","sourceRoot":"","sources":["../../src/test/auth-fixtures.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,
|
|
1
|
+
{"version":3,"file":"auth-fixtures.d.ts","sourceRoot":"","sources":["../../src/test/auth-fixtures.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAKvF;AAED,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,eAAe,EACnB,MAAM,EAAE,MAAM,EACd,gBAAgB,SAA0B,GACzC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAIxB"}
|
|
@@ -10,18 +10,9 @@ function dashboardAuthHeaders(store) {
|
|
|
10
10
|
cookie: `${shared_1.AGENT_DECK_DASHBOARD_COOKIE}=${encodeURIComponent(token)}`,
|
|
11
11
|
};
|
|
12
12
|
}
|
|
13
|
-
function agentSessionHeaders(db, deckId,
|
|
13
|
+
function agentSessionHeaders(db, deckId, _workspaceDigest = 'test-workspace-digest') {
|
|
14
14
|
const store = new store_1.TrustedSessionStore(db.getSqliteDatabase());
|
|
15
|
-
const
|
|
16
|
-
const secret = (0, store_1.generateGrantSecret)();
|
|
17
|
-
const pending = store.createPendingGrant(workspace.id, deckId, secret);
|
|
18
|
-
store.activateGrant(pending.id);
|
|
19
|
-
const grant = store.findActiveGrantBySecret(secret);
|
|
20
|
-
const session = store.createRuntimeSession({
|
|
21
|
-
workspaceKeyId: workspace.id,
|
|
22
|
-
workspaceGrantId: grant.id,
|
|
23
|
-
deckId,
|
|
24
|
-
});
|
|
15
|
+
const session = store.createRuntimeSession({ deckId });
|
|
25
16
|
return { [shared_1.AGENT_DECK_SESSION_HEADER]: session.sessionId };
|
|
26
17
|
}
|
|
27
18
|
//# sourceMappingURL=auth-fixtures.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth-fixtures.js","sourceRoot":"","sources":["../../src/test/auth-fixtures.ts"],"names":[],"mappings":";;AAQA,oDAKC;AAED,
|
|
1
|
+
{"version":3,"file":"auth-fixtures.js","sourceRoot":"","sources":["../../src/test/auth-fixtures.ts"],"names":[],"mappings":";;AAQA,oDAKC;AAED,kDAQC;AAvBD,+CAG4B;AAG5B,oDAA+D;AAE/D,SAAgB,oBAAoB,CAAC,KAA0B;IAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,sBAAsB,EAAE,CAAC;IAC7C,OAAO;QACL,MAAM,EAAE,GAAG,oCAA2B,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE;KACtE,CAAC;AACJ,CAAC;AAED,SAAgB,mBAAmB,CACjC,EAAmB,EACnB,MAAc,EACd,gBAAgB,GAAG,uBAAuB;IAE1C,MAAM,KAAK,GAAG,IAAI,2BAAmB,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACvD,OAAO,EAAE,CAAC,kCAAyB,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;AAC5D,CAAC"}
|
|
@@ -1,7 +1,5 @@
|
|
|
1
1
|
import type { FastifyReply, FastifyRequest } from 'fastify';
|
|
2
2
|
import { type AgentSessionMode, type RuntimeSession, type TrustedSessionErrorCode } from '@agent-deck/shared';
|
|
3
|
-
import type { ExecutionAuthority } from '../execution-authority/types';
|
|
4
|
-
import type { ExecutionAuthorityStore } from '../execution-authority/store';
|
|
5
3
|
import type { TrustedSessionStore } from './store';
|
|
6
4
|
export type AuthPolicy = 'allowPublic' | 'requireTrustedWriter' | 'requireAgentResource' | 'requireAgentOrDashboard' | 'requireDeckAdmin' | 'requireDashboard';
|
|
7
5
|
export type RequestPrincipal = {
|
|
@@ -13,16 +11,12 @@ export type RequestPrincipal = {
|
|
|
13
11
|
session: RuntimeSession;
|
|
14
12
|
mode: AgentSessionMode;
|
|
15
13
|
deckId: string;
|
|
16
|
-
workspaceKey: string;
|
|
17
|
-
} | {
|
|
18
|
-
kind: 'execution-authority';
|
|
19
|
-
authority: ExecutionAuthority;
|
|
20
14
|
};
|
|
21
15
|
export declare class TrustedAuthError extends Error {
|
|
22
16
|
readonly code: TrustedSessionErrorCode;
|
|
23
17
|
constructor(code: TrustedSessionErrorCode, message: string);
|
|
24
18
|
}
|
|
25
|
-
export declare function resolveRequestPrincipal(request: FastifyRequest, store: TrustedSessionStore
|
|
19
|
+
export declare function resolveRequestPrincipal(request: FastifyRequest, store: TrustedSessionStore): Promise<RequestPrincipal>;
|
|
26
20
|
export declare function requireTrustedWriterBearer(request: FastifyRequest): Promise<void>;
|
|
27
21
|
export declare function enforcePolicy(policy: AuthPolicy, principal: RequestPrincipal): void;
|
|
28
22
|
export declare function sendTrustedAuthError(reply: FastifyReply, error: TrustedAuthError): void;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/trusted-session/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE5D,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAG7B,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EAAE,
|
|
1
|
+
{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/trusted-session/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE5D,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAG7B,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAEnD,MAAM,MAAM,UAAU,GAClB,aAAa,GACb,sBAAsB,GACtB,sBAAsB,GACtB,yBAAyB,GACzB,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IACE,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEN,qBAAa,gBAAiB,SAAQ,KAAK;aAEvB,IAAI,EAAE,uBAAuB;gBAA7B,IAAI,EAAE,uBAAuB,EAC7C,OAAO,EAAE,MAAM;CAKlB;AAoDD,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,gBAAgB,CAAC,CAiB3B;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAMvF;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,GAAG,IAAI,CA0BnF;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAGvF;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAGzE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAEzE;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAEjE"}
|
|
@@ -11,8 +11,6 @@ exports.isAgentAdmin = isAgentAdmin;
|
|
|
11
11
|
const shared_1 = require("@agent-deck/shared");
|
|
12
12
|
const http_auth_1 = require("../lib/http-auth");
|
|
13
13
|
const dashboard_auth_1 = require("../lib/dashboard-auth");
|
|
14
|
-
const bearer_1 = require("../execution-authority/bearer");
|
|
15
|
-
const execution_authority_http_1 = require("../lib/execution-authority-http");
|
|
16
14
|
const admin_secret_1 = require("./admin-secret");
|
|
17
15
|
class TrustedAuthError extends Error {
|
|
18
16
|
code;
|
|
@@ -23,6 +21,7 @@ class TrustedAuthError extends Error {
|
|
|
23
21
|
}
|
|
24
22
|
}
|
|
25
23
|
exports.TrustedAuthError = TrustedAuthError;
|
|
24
|
+
const GRANT_REQUIRED_MESSAGE = 'No deck selected for this connection';
|
|
26
25
|
async function resolveDashboardPrincipal(request, store) {
|
|
27
26
|
const dashboardToken = (0, dashboard_auth_1.parseDashboardCookie)(request);
|
|
28
27
|
if (dashboardToken && store.validateAndTouchDashboardSession(dashboardToken)) {
|
|
@@ -48,7 +47,7 @@ function resolveAgentFromSessionHeader(request, store) {
|
|
|
48
47
|
throw new TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
|
|
49
48
|
}
|
|
50
49
|
if (row.revoked_at) {
|
|
51
|
-
throw new TrustedAuthError('SESSION_REVOKED', '
|
|
50
|
+
throw new TrustedAuthError('SESSION_REVOKED', 'Session was revoked');
|
|
52
51
|
}
|
|
53
52
|
if (Date.parse(row.expires_at) <= Date.now()) {
|
|
54
53
|
throw new TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
|
|
@@ -59,18 +58,7 @@ function resolveAgentFromSessionHeader(request, store) {
|
|
|
59
58
|
}
|
|
60
59
|
return session;
|
|
61
60
|
}
|
|
62
|
-
function
|
|
63
|
-
const grant = store.findActiveGrantBySecret(grantSecret);
|
|
64
|
-
if (!grant) {
|
|
65
|
-
throw new TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
|
|
66
|
-
}
|
|
67
|
-
return store.createRuntimeSession({
|
|
68
|
-
workspaceKeyId: grant.workspace_key_id,
|
|
69
|
-
workspaceGrantId: grant.id,
|
|
70
|
-
deckId: grant.deck_id,
|
|
71
|
-
});
|
|
72
|
-
}
|
|
73
|
-
async function resolveRequestPrincipal(request, store, executionAuthorityStore) {
|
|
61
|
+
async function resolveRequestPrincipal(request, store) {
|
|
74
62
|
const dashboard = await resolveDashboardPrincipal(request, store);
|
|
75
63
|
if (dashboard) {
|
|
76
64
|
return dashboard;
|
|
@@ -82,31 +70,9 @@ async function resolveRequestPrincipal(request, store, executionAuthorityStore)
|
|
|
82
70
|
session: sessionFromHeader,
|
|
83
71
|
mode: sessionFromHeader.mode,
|
|
84
72
|
deckId: sessionFromHeader.deckId,
|
|
85
|
-
workspaceKey: sessionFromHeader.workspaceKey,
|
|
86
73
|
};
|
|
87
74
|
}
|
|
88
|
-
|
|
89
|
-
if (bearer && executionAuthorityStore) {
|
|
90
|
-
const authorityCreds = (0, bearer_1.parseAuthorityBearer)(bearer);
|
|
91
|
-
if (authorityCreds) {
|
|
92
|
-
const auth = executionAuthorityStore.authenticateAuthority(authorityCreds.authorityId, authorityCreds.secret);
|
|
93
|
-
if (!auth.ok) {
|
|
94
|
-
throw new execution_authority_http_1.AuthorityContractAuthError(auth);
|
|
95
|
-
}
|
|
96
|
-
return { kind: 'execution-authority', authority: auth.data };
|
|
97
|
-
}
|
|
98
|
-
}
|
|
99
|
-
if (bearer) {
|
|
100
|
-
const session = resolveAgentFromGrantSecret(bearer, store);
|
|
101
|
-
return {
|
|
102
|
-
kind: 'agent',
|
|
103
|
-
session,
|
|
104
|
-
mode: session.mode,
|
|
105
|
-
deckId: session.deckId,
|
|
106
|
-
workspaceKey: session.workspaceKey,
|
|
107
|
-
};
|
|
108
|
-
}
|
|
109
|
-
throw new TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
|
|
75
|
+
throw new TrustedAuthError('GRANT_REQUIRED', GRANT_REQUIRED_MESSAGE);
|
|
110
76
|
}
|
|
111
77
|
async function requireTrustedWriterBearer(request) {
|
|
112
78
|
const bearer = (0, http_auth_1.parseBearerToken)(request);
|
|
@@ -126,24 +92,13 @@ function enforcePolicy(policy, principal) {
|
|
|
126
92
|
return;
|
|
127
93
|
}
|
|
128
94
|
if (policy === 'requireAgentOrDashboard') {
|
|
129
|
-
if (principal.kind === 'dashboard' ||
|
|
130
|
-
principal.kind === 'agent' ||
|
|
131
|
-
principal.kind === 'execution-authority') {
|
|
132
|
-
return;
|
|
133
|
-
}
|
|
134
|
-
throw new TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
|
|
135
|
-
}
|
|
136
|
-
if (principal.kind === 'execution-authority') {
|
|
137
|
-
if (policy === 'requireDeckAdmin') {
|
|
138
|
-
throw new TrustedAuthError('ADMIN_REQUIRED', 'Deck-admin elevation is required');
|
|
139
|
-
}
|
|
140
|
-
if (policy === 'requireAgentResource') {
|
|
95
|
+
if (principal.kind === 'dashboard' || principal.kind === 'agent') {
|
|
141
96
|
return;
|
|
142
97
|
}
|
|
143
|
-
throw new TrustedAuthError('GRANT_REQUIRED',
|
|
98
|
+
throw new TrustedAuthError('GRANT_REQUIRED', GRANT_REQUIRED_MESSAGE);
|
|
144
99
|
}
|
|
145
100
|
if (principal.kind !== 'agent') {
|
|
146
|
-
throw new TrustedAuthError('GRANT_REQUIRED',
|
|
101
|
+
throw new TrustedAuthError('GRANT_REQUIRED', GRANT_REQUIRED_MESSAGE);
|
|
147
102
|
}
|
|
148
103
|
if (policy === 'requireDeckAdmin' && principal.mode !== 'agent-admin') {
|
|
149
104
|
throw new TrustedAuthError('ADMIN_REQUIRED', 'Deck-admin elevation is required');
|
|
@@ -156,8 +111,6 @@ function sendTrustedAuthError(reply, error) {
|
|
|
156
111
|
function getAgentDeckId(principal) {
|
|
157
112
|
if (principal.kind === 'agent')
|
|
158
113
|
return principal.deckId;
|
|
159
|
-
if (principal.kind === 'execution-authority')
|
|
160
|
-
return principal.authority.deckId;
|
|
161
114
|
return null;
|
|
162
115
|
}
|
|
163
116
|
function isDashboardPrincipal(principal) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/trusted-session/auth.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/trusted-session/auth.ts"],"names":[],"mappings":";;;AA8FA,0DAoBC;AAED,gEAMC;AAED,sCA0BC;AAED,oDAGC;AAED,wCAGC;AAED,oDAEC;AAED,oCAEC;AAtKD,+CAO4B;AAE5B,gDAAoD;AACpD,0DAA6D;AAC7D,iDAAiF;AAqBjF,MAAa,gBAAiB,SAAQ,KAAK;IAEvB;IADlB,YACkB,IAA6B,EAC7C,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAyB;QAI7C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AARD,4CAQC;AAED,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AAEtE,KAAK,UAAU,yBAAyB,CACtC,OAAuB,EACvB,KAA0B;IAE1B,MAAM,cAAc,GAAG,IAAA,qCAAoB,EAAC,OAAO,CAAC,CAAC;IACrD,IAAI,cAAc,IAAI,KAAK,CAAC,gCAAgC,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7E,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,4BAAgB,EAAC,OAAO,CAAC,CAAC;IACzC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,MAAM,IAAA,2CAA4B,GAAE,CAAC;QACtD,IAAI,QAAQ,IAAI,IAAA,gCAAiB,EAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,6BAA6B,CACpC,OAAuB,EACvB,KAA0B;IAE1B,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,kCAAyB,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAC3C,OAAuB,EACvB,KAA0B;IAE1B,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAClE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,iBAAiB,GAAG,6BAA6B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxE,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,iBAAiB;YAC1B,IAAI,EAAE,iBAAiB,CAAC,IAAI;YAC5B,MAAM,EAAE,iBAAiB,CAAC,MAAM;SACjC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;AACvE,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAAC,OAAuB;IACtE,MAAM,MAAM,GAAG,IAAA,4BAAgB,EAAC,OAAO,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,IAAA,2CAA4B,GAAE,CAAC;IACtD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAA,gCAAiB,EAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,wCAAwC,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,SAAgB,aAAa,CAAC,MAAkB,EAAE,SAA2B;IAC3E,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAClC,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACnC,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,mCAAmC,CAAC,CAAC;QACxF,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACzC,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACjE,OAAO;QACT,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,MAAM,KAAK,kBAAkB,IAAI,SAAS,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACtE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAgB,oBAAoB,CAAC,KAAmB,EAAE,KAAuB;IAC/E,MAAM,IAAI,GAAG,IAAA,4BAAmB,EAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5D,KAAK,CAAC,MAAM,CAAC,IAAA,kCAAyB,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,SAAgB,cAAc,CAAC,SAA2B;IACxD,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC,MAAM,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,oBAAoB,CAAC,SAA2B;IAC9D,OAAO,SAAS,CAAC,IAAI,KAAK,WAAW,CAAC;AACxC,CAAC;AAED,SAAgB,YAAY,CAAC,SAA2B;IACtD,OAAO,SAAS,CAAC,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,IAAI,KAAK,aAAa,CAAC;AACxE,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"policy-hook.d.ts","sourceRoot":"","sources":["../../src/trusted-session/policy-hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;
|
|
1
|
+
{"version":3,"file":"policy-hook.d.ts","sourceRoot":"","sources":["../../src/trusted-session/policy-hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAE7E,OAAO,EAML,KAAK,gBAAgB,EACtB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;KACrC;CACF;AAED,eAAO,MAAM,oBAAoB,EAAE,eAAe,EAAO,CAAC;AAE1D,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CA6DrE;AAED,wBAAgB,2BAA2B,CAAC,MAAM,GAAE,eAAe,EAAyB,GAAG,IAAI,CAMlG"}
|
|
@@ -3,21 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
3
3
|
exports.registeredHttpRoutes = void 0;
|
|
4
4
|
exports.registerHttpPolicyHook = registerHttpPolicyHook;
|
|
5
5
|
exports.assertAllRoutesHavePolicies = assertAllRoutesHavePolicies;
|
|
6
|
-
const bearer_1 = require("../execution-authority/bearer");
|
|
7
|
-
const http_auth_1 = require("../lib/http-auth");
|
|
8
|
-
const execution_authority_http_1 = require("../lib/execution-authority-http");
|
|
9
6
|
const auth_1 = require("./auth");
|
|
10
7
|
const route_policy_registry_1 = require("./route-policy-registry");
|
|
11
8
|
exports.registeredHttpRoutes = [];
|
|
12
|
-
function tryParseAuthorityBearer(request) {
|
|
13
|
-
const bearer = (0, http_auth_1.parseBearerToken)(request);
|
|
14
|
-
return bearer ? (0, bearer_1.parseAuthorityBearer)(bearer) : null;
|
|
15
|
-
}
|
|
16
|
-
/** Worker bootstrap only — coordinator issuer routes stay off-limits to authority bearers. */
|
|
17
|
-
function isExecutionAuthorityWorkerBootstrap(pathname) {
|
|
18
|
-
return (pathname === '/api/execution-authority/mcp/connect' ||
|
|
19
|
-
pathname === '/api/execution-authority/authorize-call');
|
|
20
|
-
}
|
|
21
9
|
function registerHttpPolicyHook(fastify) {
|
|
22
10
|
exports.registeredHttpRoutes.length = 0;
|
|
23
11
|
fastify.addHook('onRoute', (routeOptions) => {
|
|
@@ -39,41 +27,6 @@ function registerHttpPolicyHook(fastify) {
|
|
|
39
27
|
if (request.method === 'HEAD') {
|
|
40
28
|
return;
|
|
41
29
|
}
|
|
42
|
-
// NOT-86: detect authority bearer before any generic policy rejection
|
|
43
|
-
// (DASHBOARD_REQUIRED / GRANT_REQUIRED / unmatched route / trusted-writer).
|
|
44
|
-
const authorityCreds = tryParseAuthorityBearer(request);
|
|
45
|
-
if (authorityCreds && fastify.executionAuthorityStore) {
|
|
46
|
-
const auth = fastify.executionAuthorityStore.authenticateAuthority(authorityCreds.authorityId, authorityCreds.secret);
|
|
47
|
-
if (!auth.ok) {
|
|
48
|
-
return (0, execution_authority_http_1.sendContractError)(reply, auth);
|
|
49
|
-
}
|
|
50
|
-
request.requestPrincipal = { kind: 'execution-authority', authority: auth.data };
|
|
51
|
-
const policy = (0, route_policy_registry_1.resolveRoutePolicy)(request.method, pathname);
|
|
52
|
-
if (policy === 'allowPublic') {
|
|
53
|
-
if (isExecutionAuthorityWorkerBootstrap(pathname)) {
|
|
54
|
-
// connect / authorize-call authenticate again in-handler.
|
|
55
|
-
return;
|
|
56
|
-
}
|
|
57
|
-
if (pathname.startsWith('/api/execution-authority/')) {
|
|
58
|
-
return (0, execution_authority_http_1.sendContractError)(reply, {
|
|
59
|
-
ok: false,
|
|
60
|
-
error_code: 'INTERACTION_REQUIRED',
|
|
61
|
-
message: 'Control-plane decision required; do not hold the worker',
|
|
62
|
-
correlation: { authorityId: auth.data.authorityId },
|
|
63
|
-
});
|
|
64
|
-
}
|
|
65
|
-
return;
|
|
66
|
-
}
|
|
67
|
-
if (!policy || !(0, execution_authority_http_1.isExecutionAuthorityHttpAllowed)(request.method, pathname)) {
|
|
68
|
-
return (0, execution_authority_http_1.sendContractError)(reply, {
|
|
69
|
-
ok: false,
|
|
70
|
-
error_code: 'INTERACTION_REQUIRED',
|
|
71
|
-
message: 'Control-plane decision required; do not hold the worker',
|
|
72
|
-
correlation: { authorityId: auth.data.authorityId },
|
|
73
|
-
});
|
|
74
|
-
}
|
|
75
|
-
return;
|
|
76
|
-
}
|
|
77
30
|
const policy = (0, route_policy_registry_1.resolveRoutePolicy)(request.method, pathname);
|
|
78
31
|
if (!policy) {
|
|
79
32
|
return (0, auth_1.sendTrustedAuthError)(reply, new auth_1.TrustedAuthError('DASHBOARD_REQUIRED', `No authorization policy for ${request.method} ${pathname}`));
|
|
@@ -96,14 +49,11 @@ function registerHttpPolicyHook(fastify) {
|
|
|
96
49
|
return;
|
|
97
50
|
}
|
|
98
51
|
try {
|
|
99
|
-
const principal = await (0, auth_1.resolveRequestPrincipal)(request, fastify.trustedSessionStore
|
|
52
|
+
const principal = await (0, auth_1.resolveRequestPrincipal)(request, fastify.trustedSessionStore);
|
|
100
53
|
(0, auth_1.enforcePolicy)(policy, principal);
|
|
101
54
|
request.requestPrincipal = principal;
|
|
102
55
|
}
|
|
103
56
|
catch (error) {
|
|
104
|
-
if (error instanceof execution_authority_http_1.AuthorityContractAuthError) {
|
|
105
|
-
return (0, execution_authority_http_1.sendContractError)(reply, error.contract);
|
|
106
|
-
}
|
|
107
57
|
if (error instanceof auth_1.TrustedAuthError) {
|
|
108
58
|
return (0, auth_1.sendTrustedAuthError)(reply, error);
|
|
109
59
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"policy-hook.js","sourceRoot":"","sources":["../../src/trusted-session/policy-hook.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"policy-hook.js","sourceRoot":"","sources":["../../src/trusted-session/policy-hook.ts"],"names":[],"mappings":";;;AAyBA,wDA6DC;AAED,kEAMC;AA5FD,iCAOgB;AAChB,mEAKiC;AAQpB,QAAA,oBAAoB,GAAsB,EAAE,CAAC;AAE1D,SAAgB,sBAAsB,CAAC,OAAwB;IAC7D,4BAAoB,CAAC,MAAM,GAAG,CAAC,CAAC;IAEhC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC;YAChD,CAAC,CAAC,YAAY,CAAC,MAAM;YACrB,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,4BAAoB,CAAC,IAAI,CAAC;gBACxB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;gBACpC,GAAG,EAAE,YAAY,CAAC,GAAG;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QAClF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAA,6CAAqB,EAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,0CAAkB,EAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAA,2BAAoB,EACzB,KAAK,EACL,IAAI,uBAAgB,CAAC,oBAAoB,EAAE,+BAA+B,OAAO,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC,CACxG,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YAC7B,OAAO,CAAC,gBAAgB,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,IAAI,MAAM,KAAK,sBAAsB,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,IAAA,iCAA0B,EAAC,OAAO,CAAC,CAAC;gBAC1C,OAAO,CAAC,gBAAgB,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YACnD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;oBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC5C,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAA,8BAAuB,EAAC,OAAO,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;YACtF,IAAA,oBAAa,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACjC,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,2BAA2B,CAAC,SAA4B,4BAAoB;IAC1F,MAAM,SAAS,GAAG,IAAA,2CAAmB,EAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,8CAA8C,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"route-policy-registry.d.ts","sourceRoot":"","sources":["../../src/trusted-session/route-policy-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEzC,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,eAAe,
|
|
1
|
+
{"version":3,"file":"route-policy-registry.d.ts","sourceRoot":"","sources":["../../src/trusted-session/route-policy-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEzC,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,eAAe,EAmHhD,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAK/D;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAQtF;AAED,MAAM,MAAM,eAAe,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,eAAe,EAAE,CAmBhF"}
|
|
@@ -19,59 +19,14 @@ exports.HTTP_ROUTE_POLICIES = [
|
|
|
19
19
|
{ methods: ['GET'], pattern: /^\/api\/scope\/display$/, policy: 'allowPublic' },
|
|
20
20
|
{ methods: ['GET'], pattern: /^\/api\/scope\/bindings$/, policy: 'allowPublic' },
|
|
21
21
|
{ methods: ['GET'], pattern: /^\/api\/trusted-session\/admin\/challenges$/, policy: 'allowPublic' },
|
|
22
|
-
{ methods: ['POST'], pattern: /^\/api\/trusted-session\/mcp\/connect$/, policy: 'allowPublic' },
|
|
23
|
-
{ methods: ['POST'], pattern: /^\/api\/trusted-session\/mcp\/disconnect$/, policy: 'allowPublic' },
|
|
24
|
-
{ methods: ['POST'], pattern: /^\/api\/trusted-session\/mcp\/disconnect$/, policy: 'allowPublic' },
|
|
22
|
+
{ methods: ['POST'], pattern: /^\/api\/trusted-session\/mcp\/connect-deck$/, policy: 'allowPublic' },
|
|
23
|
+
{ methods: ['POST'], pattern: /^\/api\/trusted-session\/mcp\/disconnect-deck$/, policy: 'allowPublic' },
|
|
25
24
|
{ methods: ['POST'], pattern: /^\/api\/dashboard-auth\/bootstrap\/session$/, policy: 'allowPublic' },
|
|
25
|
+
{ methods: ['GET'], pattern: /^\/api\/launch\/decks$/, policy: 'allowPublic' },
|
|
26
|
+
{ methods: ['GET'], pattern: /^\/api\/launch\/decks\/[^/]+\/playbooks$/, policy: 'allowPublic' },
|
|
26
27
|
// Trusted writer (admin secret bearer only — enforced in policy hook)
|
|
27
|
-
{ methods: ['POST'], pattern: /^\/api\/trusted-session\/workspace-grants\/issue$/, policy: 'requireTrustedWriter' },
|
|
28
|
-
{
|
|
29
|
-
methods: ['POST'],
|
|
30
|
-
pattern: /^\/api\/trusted-session\/workspace-grants\/[^/]+\/revoke-pending$/,
|
|
31
|
-
policy: 'requireTrustedWriter',
|
|
32
|
-
},
|
|
33
|
-
{
|
|
34
|
-
methods: ['POST'],
|
|
35
|
-
pattern: /^\/api\/trusted-session\/workspace-grants\/[^/]+\/activate$/,
|
|
36
|
-
policy: 'requireTrustedWriter',
|
|
37
|
-
},
|
|
38
28
|
{ methods: ['POST'], pattern: /^\/api\/dashboard-auth\/bootstrap\/nonce$/, policy: 'requireTrustedWriter' },
|
|
39
|
-
//
|
|
40
|
-
{
|
|
41
|
-
methods: ['POST'],
|
|
42
|
-
pattern: /^\/api\/execution-authority\/enrollments$/,
|
|
43
|
-
policy: 'requireTrustedWriter',
|
|
44
|
-
},
|
|
45
|
-
{
|
|
46
|
-
methods: ['GET'],
|
|
47
|
-
pattern: /^\/api\/execution-authority\/enrollments\/[^/]+$/,
|
|
48
|
-
policy: 'requireTrustedWriter',
|
|
49
|
-
},
|
|
50
|
-
{
|
|
51
|
-
methods: ['POST'],
|
|
52
|
-
pattern: /^\/api\/execution-authority\/enrollments\/[^/]+\/revoke$/,
|
|
53
|
-
policy: 'requireTrustedWriter',
|
|
54
|
-
},
|
|
55
|
-
{ methods: ['GET'], pattern: /^\/api\/execution-authority\/decks$/, policy: 'allowPublic' },
|
|
56
|
-
{ methods: ['POST'], pattern: /^\/api\/execution-authority\/authorities$/, policy: 'allowPublic' },
|
|
57
|
-
{
|
|
58
|
-
methods: ['GET'],
|
|
59
|
-
pattern: /^\/api\/execution-authority\/authorities\/[^/]+$/,
|
|
60
|
-
policy: 'allowPublic',
|
|
61
|
-
},
|
|
62
|
-
{
|
|
63
|
-
methods: ['POST'],
|
|
64
|
-
pattern: /^\/api\/execution-authority\/authorities\/[^/]+\/revoke$/,
|
|
65
|
-
policy: 'allowPublic',
|
|
66
|
-
},
|
|
67
|
-
{ methods: ['GET'], pattern: /^\/api\/execution-authority\/audit$/, policy: 'allowPublic' },
|
|
68
|
-
{ methods: ['POST'], pattern: /^\/api\/execution-authority\/mcp\/connect$/, policy: 'allowPublic' },
|
|
69
|
-
{
|
|
70
|
-
methods: ['POST'],
|
|
71
|
-
pattern: /^\/api\/execution-authority\/authorize-call$/,
|
|
72
|
-
policy: 'allowPublic',
|
|
73
|
-
},
|
|
74
|
-
// Agent resource (runtime session or grant bearer)
|
|
29
|
+
// Agent resource (runtime session)
|
|
75
30
|
{ methods: ['GET'], pattern: /^\/api\/trusted-session\/runtime-session$/, policy: 'requireAgentResource' },
|
|
76
31
|
{
|
|
77
32
|
methods: ['POST'],
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"route-policy-registry.js","sourceRoot":"","sources":["../../src/trusted-session/route-policy-registry.ts"],"names":[],"mappings":";;;AAgLA,sDAKC;AAED,gDAQC;AAID,kDAmBC;AA7MD;;;GAGG;AACU,QAAA,mBAAmB,GAAsB;IACpD,SAAS;IACT,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE;IAClE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE;IAC5D,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,aAAa,EAAE;IAChF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,aAAa,EAAE;IACvF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,aAAa,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,aAAa,EAAE;IACzF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,aAAa,EAAE;IAC/E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,aAAa,EAAE;IAChF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,MAAM,EAAE,aAAa,EAAE;IACnG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,MAAM,EAAE,aAAa,EAAE;IAC/F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,aAAa,EAAE;IAClG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,aAAa,EAAE;IAClG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,MAAM,EAAE,aAAa,EAAE;IAEpG,sEAAsE;IACtE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mDAAmD,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACnH;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,mEAAmE;QAC5E,MAAM,EAAE,sBAAsB;KAC/B;IACD;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,6DAA6D;QACtE,MAAM,EAAE,sBAAsB;KAC/B;IACD,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAE3G,gGAAgG;IAChG;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,2CAA2C;QACpD,MAAM,EAAE,sBAAsB;KAC/B;IACD;QACE,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,OAAO,EAAE,kDAAkD;QAC3D,MAAM,EAAE,sBAAsB;KAC/B;IACD;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,0DAA0D;QACnE,MAAM,EAAE,sBAAsB;KAC/B;IACD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,aAAa,EAAE;IAC3F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,aAAa,EAAE;IAClG;QACE,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,OAAO,EAAE,kDAAkD;QAC3D,MAAM,EAAE,aAAa;KACtB;IACD;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,0DAA0D;QACnE,MAAM,EAAE,aAAa;KACtB;IACD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,aAAa,EAAE;IAC3F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,MAAM,EAAE,aAAa,EAAE;IACnG;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,8CAA8C;QACvD,MAAM,EAAE,aAAa;KACtB;IAED,mDAAmD;IACnD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAC1G;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,oDAAoD;QAC7D,MAAM,EAAE,sBAAsB;KAC/B;IACD,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACvG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAC1G,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAC9F,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACvG;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,4CAA4C;QACrD,MAAM,EAAE,sBAAsB;KAC/B;IACD,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAEhG,gCAAgC;IAChC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAE5E,iBAAiB;IACjB,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACnF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAClF,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC/E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACpG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAClF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACjG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC3F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC3F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAClG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACrG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAChF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACzF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACpG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAChG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC/F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC1F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7E,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC5F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACzF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC5F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC/F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC5F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC1F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACpF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC9F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC9F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC9F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAEtG,6EAA6E;IAC7E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAClF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACzF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACnG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACpG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACtG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC5G,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC7G,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACvG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACzG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACrG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACvG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC5F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACnG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACnG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC/F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACjG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,yBAAyB,EAAE;CAC/F,CAAC;AAEF,SAAgB,qBAAqB,CAAC,QAAgB;IACpD,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACpF,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAAc,EAAE,QAAgB;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,2BAAmB,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAID,SAAgB,mBAAmB,CAAC,MAAyB;IAC3D,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3E,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;YACjD,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,OAAO;aACpB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC;aACrC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
|
|
1
|
+
{"version":3,"file":"route-policy-registry.js","sourceRoot":"","sources":["../../src/trusted-session/route-policy-registry.ts"],"names":[],"mappings":";;;AAkIA,sDAKC;AAED,gDAQC;AAID,kDAmBC;AA/JD;;;GAGG;AACU,QAAA,mBAAmB,GAAsB;IACpD,SAAS;IACT,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE;IAClE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE;IAC5D,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,aAAa,EAAE;IAChF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,aAAa,EAAE;IACvF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,aAAa,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,aAAa,EAAE;IACzF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,aAAa,EAAE;IAC/E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,aAAa,EAAE;IAChF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,MAAM,EAAE,aAAa,EAAE;IACnG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,MAAM,EAAE,aAAa,EAAE;IACpG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gDAAgD,EAAE,MAAM,EAAE,aAAa,EAAE;IACvG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,MAAM,EAAE,aAAa,EAAE;IACpG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,aAAa,EAAE;IAC9E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,aAAa,EAAE;IAEhG,sEAAsE;IACtE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAE3G,mCAAmC;IACnC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAC1G;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,oDAAoD;QAC7D,MAAM,EAAE,sBAAsB;KAC/B;IACD,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACvG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAC1G,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAC9F,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACvG;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,4CAA4C;QACrD,MAAM,EAAE,sBAAsB;KAC/B;IACD,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAEhG,gCAAgC;IAChC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAE5E,iBAAiB;IACjB,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACnF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAClF,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC/E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACpG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAClF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACjG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC3F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC3F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAClG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACrG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAChF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACzF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACpG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAChG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC/F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC1F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7E,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC5F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACzF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC5F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC/F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC5F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC1F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACpF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC9F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC9F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC9F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAEtG,6EAA6E;IAC7E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAClF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACzF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACnG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACpG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACtG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC5G,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC7G,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACvG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACzG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACrG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACvG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC5F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACnG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACnG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC/F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACjG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,yBAAyB,EAAE;CAC/F,CAAC;AAEF,SAAgB,qBAAqB,CAAC,QAAgB;IACpD,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACpF,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAAc,EAAE,QAAgB;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,2BAAmB,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAID,SAAgB,mBAAmB,CAAC,MAAyB;IAC3D,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3E,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;YACjD,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,OAAO;aACpB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC;aACrC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
|