@atlasauth/backend 0.26.0 → 0.27.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +10 -0
- package/dist/client/abac.d.ts +65 -0
- package/dist/client/abac.js +25 -0
- package/dist/client/abac.js.map +1 -1
- package/dist/client/access-policies.d.ts +84 -2
- package/dist/client/access-policies.js +8 -0
- package/dist/client/access-policies.js.map +1 -1
- package/dist/client/actions.d.ts +1 -1
- package/dist/client/actions.js.map +1 -1
- package/dist/client/agent-platform.d.ts +294 -0
- package/dist/client/agent-platform.js +132 -0
- package/dist/client/agent-platform.js.map +1 -0
- package/dist/client/app-catalog.d.ts +60 -1
- package/dist/client/app-catalog.js +32 -2
- package/dist/client/app-catalog.js.map +1 -1
- package/dist/client/authz-decisions.d.ts +46 -0
- package/dist/client/authz-decisions.js +13 -0
- package/dist/client/authz-decisions.js.map +1 -1
- package/dist/client/connections.d.ts +12 -0
- package/dist/client/connections.js +7 -0
- package/dist/client/connections.js.map +1 -1
- package/dist/client/desktop-mfa.d.ts +37 -0
- package/dist/client/desktop-mfa.js +14 -0
- package/dist/client/desktop-mfa.js.map +1 -1
- package/dist/client/devices.d.ts +130 -0
- package/dist/client/devices.js +54 -0
- package/dist/client/devices.js.map +1 -1
- package/dist/client/email-templates.d.ts +1 -1
- package/dist/client/email-templates.js.map +1 -1
- package/dist/client/fga.d.ts +176 -1
- package/dist/client/fga.js +41 -1
- package/dist/client/fga.js.map +1 -1
- package/dist/client/index.d.ts +3782 -2946
- package/dist/client/index.js +28 -0
- package/dist/client/index.js.map +1 -1
- package/dist/client/log-streams.d.ts +1 -1
- package/dist/client/mcp-gateways.d.ts +148 -2
- package/dist/client/mcp-gateways.js +52 -0
- package/dist/client/mcp-gateways.js.map +1 -1
- package/dist/client/messaging.d.ts +11 -2
- package/dist/client/messaging.js.map +1 -1
- package/dist/client/oauth-protocols.d.ts +116 -0
- package/dist/client/oauth-protocols.js +54 -0
- package/dist/client/oauth-protocols.js.map +1 -0
- package/dist/client/oauth-providers.d.ts +4 -4
- package/dist/client/org-ldap-connections.d.ts +3 -0
- package/dist/client/org-ldap-connections.js.map +1 -1
- package/dist/client/organizations.d.ts +14 -0
- package/dist/client/organizations.js.map +1 -1
- package/dist/client/risk-containment.d.ts +244 -0
- package/dist/client/risk-containment.js +120 -0
- package/dist/client/risk-containment.js.map +1 -0
- package/dist/client/saml-idp.d.ts +183 -0
- package/dist/client/saml-idp.js +71 -0
- package/dist/client/saml-idp.js.map +1 -0
- package/dist/client/scim-provisioning.d.ts +100 -4
- package/dist/client/scim-provisioning.js +30 -0
- package/dist/client/scim-provisioning.js.map +1 -1
- package/dist/client/scim-tokens.d.ts +34 -0
- package/dist/client/scim-tokens.js +17 -0
- package/dist/client/scim-tokens.js.map +1 -1
- package/dist/client/service-connectors.d.ts +1 -1
- package/dist/client/ssf.d.ts +29 -0
- package/dist/client/ssf.js +17 -0
- package/dist/client/ssf.js.map +1 -1
- package/dist/client/users.d.ts +9 -0
- package/dist/client/users.js +9 -0
- package/dist/client/users.js.map +1 -1
- package/dist/client/vault.d.ts +54 -0
- package/dist/client/vault.js +30 -0
- package/dist/client/vault.js.map +1 -1
- package/dist/client/vc.d.ts +54 -2
- package/dist/client/vc.js +15 -0
- package/dist/client/vc.js.map +1 -1
- package/dist/client/workflows.d.ts +182 -3
- package/dist/client/workflows.js +34 -0
- package/dist/client/workflows.js.map +1 -1
- package/dist/index.d.ts +3 -2
- package/dist/index.js +3 -1
- package/dist/index.js.map +1 -1
- package/dist/oauth-resource.d.ts +30 -3
- package/dist/oauth-resource.js +43 -2
- package/dist/oauth-resource.js.map +1 -1
- package/dist/txn-token.d.ts +36 -0
- package/dist/txn-token.js +30 -0
- package/dist/txn-token.js.map +1 -0
- package/package.json +1 -1
|
@@ -0,0 +1,132 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.connectionActionsResource = connectionActionsResource;
|
|
4
|
+
exports.agentGovernanceResource = agentGovernanceResource;
|
|
5
|
+
exports.mcpRegistryResource = mcpRegistryResource;
|
|
6
|
+
exports.telemetryExportResource = telemetryExportResource;
|
|
7
|
+
const request_1 = require("./request");
|
|
8
|
+
/** Typed actions over connections, provider event triggers, scoped relay tokens and usage records. */
|
|
9
|
+
function connectionActionsResource(request) {
|
|
10
|
+
return {
|
|
11
|
+
catalog: {
|
|
12
|
+
list(query = {}) {
|
|
13
|
+
return request({ method: 'GET', path: '/v1/connection_actions', query: { ...query } });
|
|
14
|
+
},
|
|
15
|
+
get(provider, name) {
|
|
16
|
+
return request({ method: 'GET', path: `/v1/connection_actions/${(0, request_1.enc)(provider)}/${(0, request_1.enc)(name)}` });
|
|
17
|
+
},
|
|
18
|
+
/** Define or replace a custom action (data, never code). */
|
|
19
|
+
define(provider, name, body) {
|
|
20
|
+
return request({ method: 'PUT', path: `/v1/connection_actions/${(0, request_1.enc)(provider)}/${(0, request_1.enc)(name)}`, body });
|
|
21
|
+
},
|
|
22
|
+
delete(provider, name) {
|
|
23
|
+
return request({ method: 'DELETE', path: `/v1/connection_actions/${(0, request_1.enc)(provider)}/${(0, request_1.enc)(name)}` });
|
|
24
|
+
},
|
|
25
|
+
},
|
|
26
|
+
/** The actions available on one connection. */
|
|
27
|
+
list(connectionId) {
|
|
28
|
+
return request({ method: 'GET', path: `/v1/connections/${(0, request_1.enc)(connectionId)}/actions` });
|
|
29
|
+
},
|
|
30
|
+
run(connectionId, name, body = {}) {
|
|
31
|
+
return request({ method: 'POST', path: `/v1/connections/${(0, request_1.enc)(connectionId)}/actions/${(0, request_1.enc)(name)}`, body });
|
|
32
|
+
},
|
|
33
|
+
triggers: {
|
|
34
|
+
list(connectionId) {
|
|
35
|
+
return request({ method: 'GET', path: `/v1/connections/${(0, request_1.enc)(connectionId)}/triggers` });
|
|
36
|
+
},
|
|
37
|
+
create(connectionId, body) {
|
|
38
|
+
return request({ method: 'POST', path: `/v1/connections/${(0, request_1.enc)(connectionId)}/triggers`, body });
|
|
39
|
+
},
|
|
40
|
+
get(connectionId, triggerId) {
|
|
41
|
+
return request({ method: 'GET', path: `/v1/connections/${(0, request_1.enc)(connectionId)}/triggers/${(0, request_1.enc)(triggerId)}` });
|
|
42
|
+
},
|
|
43
|
+
setStatus(connectionId, triggerId, status) {
|
|
44
|
+
return request({ method: 'PATCH', path: `/v1/connections/${(0, request_1.enc)(connectionId)}/triggers/${(0, request_1.enc)(triggerId)}`, body: { status } });
|
|
45
|
+
},
|
|
46
|
+
delete(connectionId, triggerId) {
|
|
47
|
+
return request({ method: 'DELETE', path: `/v1/connections/${(0, request_1.enc)(connectionId)}/triggers/${(0, request_1.enc)(triggerId)}` });
|
|
48
|
+
},
|
|
49
|
+
},
|
|
50
|
+
/** A signed credential for one connection that only works through the relay, for listed methods and URL prefixes. */
|
|
51
|
+
mintScopedToken(connectionId, body) {
|
|
52
|
+
return request({ method: 'POST', path: `/v1/connections/${(0, request_1.enc)(connectionId)}/scoped_tokens`, body });
|
|
53
|
+
},
|
|
54
|
+
/** Calls through connections, agent connection use and gateway calls, counted from the audit trail. */
|
|
55
|
+
usage(query = {}) {
|
|
56
|
+
return request({ method: 'GET', path: '/v1/usage/connections', query: { ...query } });
|
|
57
|
+
},
|
|
58
|
+
};
|
|
59
|
+
}
|
|
60
|
+
/** Agent governance: sponsors, expiry and renewal, the activity log, and access reviews of agents' grants. */
|
|
61
|
+
function agentGovernanceResource(request) {
|
|
62
|
+
return {
|
|
63
|
+
lifecycle: {
|
|
64
|
+
get(agentId) {
|
|
65
|
+
return request({ method: 'GET', path: `/v1/agents/${(0, request_1.enc)(agentId)}/lifecycle` });
|
|
66
|
+
},
|
|
67
|
+
set(agentId, body) {
|
|
68
|
+
return request({ method: 'PUT', path: `/v1/agents/${(0, request_1.enc)(agentId)}/lifecycle`, body });
|
|
69
|
+
},
|
|
70
|
+
renew(agentId, extendDays) {
|
|
71
|
+
return request({ method: 'POST', path: `/v1/agents/${(0, request_1.enc)(agentId)}/renew`, body: { extend_days: extendDays } });
|
|
72
|
+
},
|
|
73
|
+
},
|
|
74
|
+
activity(agentId, query = {}) {
|
|
75
|
+
return request({ method: 'GET', path: `/v1/agents/${(0, request_1.enc)(agentId)}/activity`, query: { ...query } });
|
|
76
|
+
},
|
|
77
|
+
reviews: {
|
|
78
|
+
list() {
|
|
79
|
+
return request({ method: 'GET', path: '/v1/agent_access_reviews' });
|
|
80
|
+
},
|
|
81
|
+
start(body) {
|
|
82
|
+
return request({ method: 'POST', path: '/v1/agent_access_reviews', body });
|
|
83
|
+
},
|
|
84
|
+
get(id, query = {}) {
|
|
85
|
+
return request({ method: 'GET', path: `/v1/agent_access_reviews/${(0, request_1.enc)(id)}`, query: { ...query } });
|
|
86
|
+
},
|
|
87
|
+
decide(id, itemId, body) {
|
|
88
|
+
return request({ method: 'POST', path: `/v1/agent_access_reviews/${(0, request_1.enc)(id)}/items/${(0, request_1.enc)(itemId)}/decide`, body });
|
|
89
|
+
},
|
|
90
|
+
close(id) {
|
|
91
|
+
return request({ method: 'POST', path: `/v1/agent_access_reviews/${(0, request_1.enc)(id)}/close` });
|
|
92
|
+
},
|
|
93
|
+
},
|
|
94
|
+
};
|
|
95
|
+
}
|
|
96
|
+
/** The registry of approved upstream MCP servers, and write elevations for the admin MCP server. */
|
|
97
|
+
function mcpRegistryResource(request) {
|
|
98
|
+
return {
|
|
99
|
+
list(query = {}) {
|
|
100
|
+
return request({ method: 'GET', path: '/v1/mcp_registry', query: { ...query } });
|
|
101
|
+
},
|
|
102
|
+
add(body) {
|
|
103
|
+
return request({ method: 'POST', path: '/v1/mcp_registry', body });
|
|
104
|
+
},
|
|
105
|
+
decide(id, status) {
|
|
106
|
+
return request({ method: 'POST', path: `/v1/mcp_registry/${(0, request_1.enc)(id)}/decide`, body: { status } });
|
|
107
|
+
},
|
|
108
|
+
remove(id) {
|
|
109
|
+
return request({ method: 'DELETE', path: `/v1/mcp_registry/${(0, request_1.enc)(id)}` });
|
|
110
|
+
},
|
|
111
|
+
/** Grant another API key a short write elevation over the admin MCP server. */
|
|
112
|
+
elevate(body) {
|
|
113
|
+
return request({ method: 'POST', path: '/v1/mcp/elevations', body });
|
|
114
|
+
},
|
|
115
|
+
};
|
|
116
|
+
}
|
|
117
|
+
/** OTLP/HTTP export of gateway and relay calls (spans and metrics) to your collector. */
|
|
118
|
+
function telemetryExportResource(request) {
|
|
119
|
+
return {
|
|
120
|
+
get() {
|
|
121
|
+
return request({ method: 'GET', path: '/v1/telemetry_export' });
|
|
122
|
+
},
|
|
123
|
+
update(body) {
|
|
124
|
+
return request({ method: 'PUT', path: '/v1/telemetry_export', body });
|
|
125
|
+
},
|
|
126
|
+
/** Send one test span now. */
|
|
127
|
+
test() {
|
|
128
|
+
return request({ method: 'POST', path: '/v1/telemetry_export/test' });
|
|
129
|
+
},
|
|
130
|
+
};
|
|
131
|
+
}
|
|
132
|
+
//# sourceMappingURL=agent-platform.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"agent-platform.js","sourceRoot":"","sources":["../../src/client/agent-platform.ts"],"names":[],"mappings":";;AAyEA,8DAkDC;AAuCD,0DAkCC;AAgBD,kDAmBC;AAcD,0DAaC;AAlQD,uCAAgD;AAwEhD,sGAAsG;AACtG,SAAgB,yBAAyB,CAAC,OAAkB;IAC1D,OAAO;QACL,OAAO,EAAE;YACP,IAAI,CAAC,QAA+B,EAAE;gBACpC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,GAAG,CAAC,QAAgB,EAAE,IAAY;gBAChC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,IAAA,aAAG,EAAC,QAAQ,CAAC,IAAI,IAAA,aAAG,EAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,4DAA4D;YAC5D,MAAM,CAAC,QAAgB,EAAE,IAAY,EAAE,IAAgC;gBACrE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,IAAA,aAAG,EAAC,QAAQ,CAAC,IAAI,IAAA,aAAG,EAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACxG,CAAC;YACD,MAAM,CAAC,QAAgB,EAAE,IAAY;gBACnC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,0BAA0B,IAAA,aAAG,EAAC,QAAQ,CAAC,IAAI,IAAA,aAAG,EAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACrG,CAAC;SACF;QACD,+CAA+C;QAC/C,IAAI,CAAC,YAAoB;YACvB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,GAAG,CAAC,YAAoB,EAAE,IAAY,EAAE,OAAqI,EAAE;YAC7K,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,YAAY,CAAC,YAAY,IAAA,aAAG,EAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9G,CAAC;QACD,QAAQ,EAAE;YACR,IAAI,CAAC,YAAoB;gBACvB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,CAAC,YAAoB,EAAE,IAAiC;gBAC5D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,YAAY,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,GAAG,CAAC,YAAoB,EAAE,SAAiB;gBACzC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,YAAY,CAAC,aAAa,IAAA,aAAG,EAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7G,CAAC;YACD,SAAS,CAAC,YAAoB,EAAE,SAAiB,EAAE,MAA2B;gBAC5E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,YAAY,CAAC,aAAa,IAAA,aAAG,EAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACjI,CAAC;YACD,MAAM,CAAC,YAAoB,EAAE,SAAiB;gBAC5C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,YAAY,CAAC,aAAa,IAAA,aAAG,EAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YAChH,CAAC;SACF;QACD,qHAAqH;QACrH,eAAe,CAAC,YAAoB,EAAE,IAA0E;YAC9G,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,YAAY,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,uGAAuG;QACvG,KAAK,CAAC,QAAgH,EAAE;YACtH,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;KACF,CAAC;AACJ,CAAC;AAsCD,8GAA8G;AAC9G,SAAgB,uBAAuB,CAAC,OAAkB;IACxD,OAAO;QACL,SAAS,EAAE;YACT,GAAG,CAAC,OAAe;gBACjB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,IAAA,aAAG,EAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,GAAG,CAAC,OAAe,EAAE,IAAsH;gBACzI,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,IAAA,aAAG,EAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,KAAK,CAAC,OAAe,EAAE,UAAkB;gBACvC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,IAAA,aAAG,EAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;YAClH,CAAC;SACF;QACD,QAAQ,CAAC,OAAe,EAAE,QAA+E,EAAE;YACzG,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,IAAA,aAAG,EAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,OAAO,EAAE;YACP,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,KAAK,CAAC,IAAqH;gBACzH,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,GAAG,CAAC,EAAU,EAAE,QAAuF,EAAE;gBACvG,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;YACtG,CAAC;YACD,MAAM,CAAC,EAAU,EAAE,MAAc,EAAE,IAAkF;gBACnH,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,IAAA,aAAG,EAAC,EAAE,CAAC,UAAU,IAAA,aAAG,EAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpH,CAAC;YACD,KAAK,CAAC,EAAU;gBACd,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,IAAA,aAAG,EAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxF,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAeD,oGAAoG;AACpG,SAAgB,mBAAmB,CAAC,OAAkB;IACpD,OAAO;QACL,IAAI,CAAC,QAA0D,EAAE;YAC/D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,GAAG,CAAC,IAA0F;YAC5F,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,CAAC,EAAU,EAAE,MAA+B;YAChD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,+EAA+E;QAC/E,OAAO,CAAC,IAAmE;YACzE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;KACF,CAAC;AACJ,CAAC;AAaD,yFAAyF;AACzF,SAAgB,uBAAuB,CAAC,OAAkB;IACxD,OAAO;QACL,GAAG;YACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,CAAC,IAAmJ;YACxJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,8BAA8B;QAC9B,IAAI;YACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACxE,CAAC;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -10,6 +10,8 @@ export interface AppPreset {
|
|
|
10
10
|
verified: boolean;
|
|
11
11
|
/** The vendor SSO documentation the values come from. */
|
|
12
12
|
source_url: string | null;
|
|
13
|
+
/** A private preset of this instance. */
|
|
14
|
+
custom?: boolean;
|
|
13
15
|
params: Array<{
|
|
14
16
|
key: string;
|
|
15
17
|
label: string;
|
|
@@ -38,6 +40,20 @@ export interface InstalledApp {
|
|
|
38
40
|
allowed_email_domains: string[];
|
|
39
41
|
assignment: Required<AppAssignment>;
|
|
40
42
|
}
|
|
43
|
+
export type AppRequestStatus = 'open' | 'building' | 'available' | 'declined';
|
|
44
|
+
export interface AppRequest {
|
|
45
|
+
object: 'app_request';
|
|
46
|
+
id: string;
|
|
47
|
+
name: string;
|
|
48
|
+
protocol: 'saml' | 'oidc';
|
|
49
|
+
docs_url: string | null;
|
|
50
|
+
note: string | null;
|
|
51
|
+
status: AppRequestStatus;
|
|
52
|
+
requested_by: string | null;
|
|
53
|
+
votes: number;
|
|
54
|
+
created_at: number;
|
|
55
|
+
updated_at: number;
|
|
56
|
+
}
|
|
41
57
|
export interface InstallAppBody {
|
|
42
58
|
params?: Record<string, string>;
|
|
43
59
|
installed_id?: string;
|
|
@@ -48,9 +64,52 @@ export interface InstallAppBody {
|
|
|
48
64
|
/** The app catalog: SAML and OpenID Connect presets, installs, and who may open each app. */
|
|
49
65
|
export declare function appCatalogResource(request: RequestFn): {
|
|
50
66
|
/** `GET /v1/app_catalog` — every preset with its protocol and parameters. */
|
|
51
|
-
presets(
|
|
67
|
+
presets(query?: {
|
|
68
|
+
q?: string;
|
|
69
|
+
category?: string;
|
|
70
|
+
protocol?: "saml" | "oidc";
|
|
71
|
+
verified?: boolean;
|
|
72
|
+
limit?: number;
|
|
73
|
+
offset?: number;
|
|
74
|
+
}): Promise<{
|
|
52
75
|
object: "list";
|
|
53
76
|
data: AppPreset[];
|
|
77
|
+
total: number;
|
|
78
|
+
has_more: boolean;
|
|
79
|
+
}>;
|
|
80
|
+
/** `GET /v1/app_catalog/custom_presets` — this instance's private presets in portable form. */
|
|
81
|
+
customPresets(): Promise<{
|
|
82
|
+
object: "list";
|
|
83
|
+
data: Array<Record<string, unknown>>;
|
|
84
|
+
}>;
|
|
85
|
+
/** `POST /v1/app_catalog/custom_presets` — save (or replace) a private SAML preset. */
|
|
86
|
+
saveCustomPreset(preset: Record<string, unknown>): Promise<Record<string, unknown>>;
|
|
87
|
+
deleteCustomPreset(id: string): Promise<{
|
|
88
|
+
object: "app_custom_preset";
|
|
89
|
+
id: string;
|
|
90
|
+
deleted: true;
|
|
91
|
+
}>;
|
|
92
|
+
/** `GET /v1/app_catalog/requests` — apps people asked for, most wanted first. */
|
|
93
|
+
requests(status?: AppRequestStatus): Promise<{
|
|
94
|
+
object: "list";
|
|
95
|
+
data: AppRequest[];
|
|
96
|
+
}>;
|
|
97
|
+
/** `POST /v1/app_catalog/requests` — ask for an app; asking again for an open one adds a vote. */
|
|
98
|
+
requestApp(body: {
|
|
99
|
+
name: string;
|
|
100
|
+
protocol?: "saml" | "oidc";
|
|
101
|
+
docs_url?: string;
|
|
102
|
+
note?: string;
|
|
103
|
+
requested_by?: string;
|
|
104
|
+
}): Promise<AppRequest>;
|
|
105
|
+
updateRequest(id: string, body: {
|
|
106
|
+
status?: AppRequestStatus;
|
|
107
|
+
note?: string;
|
|
108
|
+
}): Promise<AppRequest>;
|
|
109
|
+
deleteRequest(id: string): Promise<{
|
|
110
|
+
object: "app_request";
|
|
111
|
+
id: string;
|
|
112
|
+
deleted: true;
|
|
54
113
|
}>;
|
|
55
114
|
/** `GET /v1/app_catalog/installed` */
|
|
56
115
|
installed(): Promise<{
|
|
@@ -6,8 +6,38 @@ const request_1 = require("./request");
|
|
|
6
6
|
function appCatalogResource(request) {
|
|
7
7
|
return {
|
|
8
8
|
/** `GET /v1/app_catalog` — every preset with its protocol and parameters. */
|
|
9
|
-
presets() {
|
|
10
|
-
|
|
9
|
+
presets(query = {}) {
|
|
10
|
+
const p = new URLSearchParams();
|
|
11
|
+
for (const [k, v] of Object.entries(query))
|
|
12
|
+
if (v !== undefined)
|
|
13
|
+
p.set(k, String(v));
|
|
14
|
+
const qs = p.toString();
|
|
15
|
+
return request({ method: 'GET', path: `/v1/app_catalog${qs ? `?${qs}` : ''}` });
|
|
16
|
+
},
|
|
17
|
+
/** `GET /v1/app_catalog/custom_presets` — this instance's private presets in portable form. */
|
|
18
|
+
customPresets() {
|
|
19
|
+
return request({ method: 'GET', path: '/v1/app_catalog/custom_presets' });
|
|
20
|
+
},
|
|
21
|
+
/** `POST /v1/app_catalog/custom_presets` — save (or replace) a private SAML preset. */
|
|
22
|
+
saveCustomPreset(preset) {
|
|
23
|
+
return request({ method: 'POST', path: '/v1/app_catalog/custom_presets', body: { preset } });
|
|
24
|
+
},
|
|
25
|
+
deleteCustomPreset(id) {
|
|
26
|
+
return request({ method: 'DELETE', path: `/v1/app_catalog/custom_presets/${(0, request_1.enc)(id)}` });
|
|
27
|
+
},
|
|
28
|
+
/** `GET /v1/app_catalog/requests` — apps people asked for, most wanted first. */
|
|
29
|
+
requests(status) {
|
|
30
|
+
return request({ method: 'GET', path: `/v1/app_catalog/requests${status ? `?status=${status}` : ''}` });
|
|
31
|
+
},
|
|
32
|
+
/** `POST /v1/app_catalog/requests` — ask for an app; asking again for an open one adds a vote. */
|
|
33
|
+
requestApp(body) {
|
|
34
|
+
return request({ method: 'POST', path: '/v1/app_catalog/requests', body });
|
|
35
|
+
},
|
|
36
|
+
updateRequest(id, body) {
|
|
37
|
+
return request({ method: 'PATCH', path: `/v1/app_catalog/requests/${(0, request_1.enc)(id)}`, body });
|
|
38
|
+
},
|
|
39
|
+
deleteRequest(id) {
|
|
40
|
+
return request({ method: 'DELETE', path: `/v1/app_catalog/requests/${(0, request_1.enc)(id)}` });
|
|
11
41
|
},
|
|
12
42
|
/** `GET /v1/app_catalog/installed` */
|
|
13
43
|
installed() {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"app-catalog.js","sourceRoot":"","sources":["../../src/client/app-catalog.ts"],"names":[],"mappings":";;
|
|
1
|
+
{"version":3,"file":"app-catalog.js","sourceRoot":"","sources":["../../src/client/app-catalog.ts"],"names":[],"mappings":";;AAmEA,gDAmDC;AAtHD,uCAAgD;AAkEhD,6FAA6F;AAC7F,SAAgB,kBAAkB,CAAC,OAAkB;IACnD,OAAO;QACL,6EAA6E;QAC7E,OAAO,CAAC,QAA4H,EAAE;YACpI,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAC;YAChC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,IAAI,CAAC,KAAK,SAAS;oBAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACrF,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;YACxB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,+FAA+F;QAC/F,aAAa;YACX,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,uFAAuF;QACvF,gBAAgB,CAAC,MAA+B;YAC9C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,kBAAkB,CAAC,EAAU;YAC3B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,kCAAkC,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,iFAAiF;QACjF,QAAQ,CAAC,MAAyB;YAChC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,kGAAkG;QAClG,UAAU,CAAC,IAA2G;YACpH,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,aAAa,CAAC,EAAU,EAAE,IAAkD;YAC1E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,4BAA4B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,aAAa,CAAC,EAAU;YACtB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,4BAA4B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,sCAAsC;QACtC,SAAS;YACP,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,yGAAyG;QACzG,OAAO,CAAC,QAAgB,EAAE,OAAuB,EAAE,EAAE,cAAuB;YAC1E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,uFAAuF;QACvF,MAAM,CAAC,EAAU,EAAE,IAA2E;YAC5F,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,6BAA6B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,6CAA6C;QAC7C,SAAS,CAAC,EAAU;YAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,6BAA6B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -100,9 +100,55 @@ export declare function authzDecisionsResource(request: RequestFn): {
|
|
|
100
100
|
since?: string | number;
|
|
101
101
|
until?: string | number;
|
|
102
102
|
}): Promise<AuthzDecisionStats>;
|
|
103
|
+
/** A local PDP ships a batch of decisions (max 500) and checks in; also its heartbeat. */
|
|
104
|
+
ingest(body: {
|
|
105
|
+
pdp: {
|
|
106
|
+
id: string;
|
|
107
|
+
name?: string;
|
|
108
|
+
version?: string;
|
|
109
|
+
bundle_revision?: string;
|
|
110
|
+
};
|
|
111
|
+
decisions?: Array<{
|
|
112
|
+
decision: "allow" | "deny";
|
|
113
|
+
principal?: string;
|
|
114
|
+
action?: string;
|
|
115
|
+
resource?: string;
|
|
116
|
+
input?: Record<string, unknown>;
|
|
117
|
+
result?: Record<string, unknown>;
|
|
118
|
+
latency_ms?: number;
|
|
119
|
+
}>;
|
|
120
|
+
}): Promise<{
|
|
121
|
+
object: "authz_decision_ingest";
|
|
122
|
+
accepted: number;
|
|
123
|
+
enabled: boolean;
|
|
124
|
+
pdp: AuthzPdp;
|
|
125
|
+
}>;
|
|
126
|
+
/** The fleet of local PDPs that have checked in. */
|
|
127
|
+
pdps: {
|
|
128
|
+
list(): Promise<{
|
|
129
|
+
object: "list";
|
|
130
|
+
data: AuthzPdp[];
|
|
131
|
+
has_more: boolean;
|
|
132
|
+
}>;
|
|
133
|
+
remove(id: string): Promise<{
|
|
134
|
+
object: "authz_pdp";
|
|
135
|
+
id: string;
|
|
136
|
+
deleted: boolean;
|
|
137
|
+
}>;
|
|
138
|
+
};
|
|
103
139
|
settings: {
|
|
104
140
|
get(): Promise<AuthzDecisionSettings>;
|
|
105
141
|
/** Fields you omit keep their value. */
|
|
106
142
|
update(body: UpdateAuthzDecisionSettingsBody): Promise<AuthzDecisionSettings>;
|
|
107
143
|
};
|
|
108
144
|
};
|
|
145
|
+
export interface AuthzPdp {
|
|
146
|
+
object: 'authz_pdp';
|
|
147
|
+
id: string;
|
|
148
|
+
name: string | null;
|
|
149
|
+
version: string | null;
|
|
150
|
+
bundle_revision: string | null;
|
|
151
|
+
decisions_total: number;
|
|
152
|
+
first_seen_at: number;
|
|
153
|
+
last_seen_at: number;
|
|
154
|
+
}
|
|
@@ -26,6 +26,19 @@ function authzDecisionsResource(request) {
|
|
|
26
26
|
stats(params = {}) {
|
|
27
27
|
return request({ method: 'GET', path: '/v1/authz_decisions/stats', query: { ...params } });
|
|
28
28
|
},
|
|
29
|
+
/** A local PDP ships a batch of decisions (max 500) and checks in; also its heartbeat. */
|
|
30
|
+
ingest(body) {
|
|
31
|
+
return request({ method: 'POST', path: '/v1/authz_decisions/ingest', body });
|
|
32
|
+
},
|
|
33
|
+
/** The fleet of local PDPs that have checked in. */
|
|
34
|
+
pdps: {
|
|
35
|
+
list() {
|
|
36
|
+
return request({ method: 'GET', path: '/v1/authz_pdps' });
|
|
37
|
+
},
|
|
38
|
+
remove(id) {
|
|
39
|
+
return request({ method: 'DELETE', path: `/v1/authz_pdps/${(0, request_1.enc)(id)}` });
|
|
40
|
+
},
|
|
41
|
+
},
|
|
29
42
|
settings: {
|
|
30
43
|
get() {
|
|
31
44
|
return request({ method: 'GET', path: '/v1/authz_decision_settings' });
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"authz-decisions.js","sourceRoot":"","sources":["../../src/client/authz-decisions.ts"],"names":[],"mappings":";;AA0FA,
|
|
1
|
+
{"version":3,"file":"authz-decisions.js","sourceRoot":"","sources":["../../src/client/authz-decisions.ts"],"names":[],"mappings":";;AA0FA,wDA8CC;AAxID,uCAAgD;AA0FhD,SAAgB,sBAAsB,CAAC,OAAkB;IACvD,OAAO;QACL,4CAA4C;QAC5C,IAAI,CAAC,SAAmC,EAAE;YACxC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,8DAA8D;QAC9D,KAAK,CAAC,CAAC,OAAO,CAAC,SAA2D,EAAE;YAC1E,IAAI,KAAyB,CAAC;YAC9B,SAAS,CAAC;gBACR,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW;oBAAE,OAAO;gBAChD,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,kHAAkH;QAClH,KAAK,CAAC,SAA+D,EAAE;YACrE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,0FAA0F;QAC1F,MAAM,CAAC,IAA2R;YAChS,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,oDAAoD;QACpD,IAAI,EAAE;YACJ,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,CAAC,EAAU;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1E,CAAC;SACF;QACD,QAAQ,EAAE;YACR,GAAG;gBACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,wCAAwC;YACxC,MAAM,CAAC,IAAqC;gBAC1C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -445,6 +445,18 @@ export declare function connectionsResource(request: RequestFn): {
|
|
|
445
445
|
staleAccessToken?: string;
|
|
446
446
|
reason?: "provider_401" | "expired" | "manual";
|
|
447
447
|
}): Promise<ConnectionToken>;
|
|
448
|
+
/**
|
|
449
|
+
* A token limited to a subset of the granted scopes, for a less-trusted caller. Not cached and never replaces the
|
|
450
|
+
* connection's own token. Refused with 422 `invalid_scope` or `downscope_unsupported` (the provider cannot narrow).
|
|
451
|
+
*/
|
|
452
|
+
downscopeToken(id: string, scopes: string[]): Promise<{
|
|
453
|
+
object: "connection_token";
|
|
454
|
+
connection_id: string;
|
|
455
|
+
access_token: string;
|
|
456
|
+
expires_at: number | null;
|
|
457
|
+
scopes: string[];
|
|
458
|
+
downscoped: true;
|
|
459
|
+
}>;
|
|
448
460
|
/** Read up to 100 connections' tokens in one call. Each id has its own result, so one dead connection does not fail the rest. */
|
|
449
461
|
tokens(ids: string[], options?: {
|
|
450
462
|
minTtlSeconds?: number;
|
|
@@ -79,6 +79,13 @@ function connectionsResource(request) {
|
|
|
79
79
|
});
|
|
80
80
|
return remember(t);
|
|
81
81
|
},
|
|
82
|
+
/**
|
|
83
|
+
* A token limited to a subset of the granted scopes, for a less-trusted caller. Not cached and never replaces the
|
|
84
|
+
* connection's own token. Refused with 422 `invalid_scope` or `downscope_unsupported` (the provider cannot narrow).
|
|
85
|
+
*/
|
|
86
|
+
downscopeToken(id, scopes) {
|
|
87
|
+
return request({ method: 'POST', path: `/v1/connections/${(0, request_1.enc)(id)}/token/downscope`, body: { scopes } });
|
|
88
|
+
},
|
|
82
89
|
/** Read up to 100 connections' tokens in one call. Each id has its own result, so one dead connection does not fail the rest. */
|
|
83
90
|
async tokens(ids, options = {}) {
|
|
84
91
|
const r = await request({
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"connections.js","sourceRoot":"","sources":["../../src/client/connections.ts"],"names":[],"mappings":";;AA2YA,
|
|
1
|
+
{"version":3,"file":"connections.js","sourceRoot":"","sources":["../../src/client/connections.ts"],"names":[],"mappings":";;AA2YA,kDA2JC;AAtiBD,uCAAgD;AAsRhD,MAAM,OAAO,GAAG,MAAM,CAAC;AAEvB,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACrF,CAAC;AA+GD,uEAAuE;AACvE,SAAgB,mBAAmB,CAAC,OAAkB;IACpD,+HAA+H;IAC/H,MAAM,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAC;IACjD,MAAM,IAAI,GAAG,CAAC,CAA8B,EAAE,aAAqB,EAAwB,EAAE,CAC3F,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACtG,MAAM,QAAQ,GAAG,CAAC,CAAkB,EAAmB,EAAE;QACvD,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;;YACpD,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,OAAO;QACL,MAAM,CAAC,IAA0B,EAAE,cAAuB;YACxD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,SAAgC,EAAE;YACrC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,CAAC,EAAU,EAAE,IAA0B;YAC3C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,2GAA2G;QAC3G,MAAM,CAA4B,EAAU,EAAE,UAA0B,EAAE;YACxE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACnI,CAAC;QACD,+EAA+E;QAC/E,OAAO,CAAC,EAAU,EAAE,IAA2B;YAC7C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,uHAAuH;QACvH,MAAM,CAAC,EAAU;YACf,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;QAChF,CAAC;QACD;;;;WAIG;QACH,KAAK,CAAC,KAAK,CAAC,EAAU,EAAE,UAA4B,EAAE;YACpD,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1B,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,OAAO,CAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACrL,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;gBAAE,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACnG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAkB;gBACvC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,QAAQ;gBACxC,KAAK,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;aACnH,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QACD;;;WAGG;QACH,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,UAAyF,EAAE;YACxH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjB,MAAM,CAAC,GAAG,MAAM,OAAO,CAAkB;gBACvC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,gBAAgB;gBAChD,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;aACzJ,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QACD;;;WAGG;QACH,cAAc,CAAC,EAAU,EAAE,MAAgB;YACzC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,kBAAkB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,iIAAiI;QACjI,KAAK,CAAC,MAAM,CAAC,GAAa,EAAE,UAAsC,EAAE;YAClE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAwE;gBAC7F,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,8BAA8B;gBACpC,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;aAC5F,CAAC,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,IAAI;gBAAE,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK;oBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,+GAA+G;QAC/G,iBAAiB,CAAC,IAA2B,EAAE,cAAuB;YACpE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD;;;WAGG;QACH,iBAAiB,CAAC,OAA8B,EAAE;YAChD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAChK,CAAC;QACD,wGAAwG;QACxG,cAAc,CAAC,EAAU,EAAE,IAAkC;YAC3D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,qFAAqF;QACrF,iBAAiB,CAAC,EAAU,EAAE,IAAqC;YACjE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,yEAAyE;QACzE,cAAc,CAAC,EAAU;YACvB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,uBAAuB,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD;;;;WAIG;QACH,MAAM,CAAC,EAAU,EAAE,UAAkF,EAAE;YACrG,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,qBAAqB,IAAA,aAAG,EAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,CAAC;YAC7J,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACnI,CAAC;QACD,sFAAsF;QACtF,UAAU,CAAC,EAAU,EAAE,IAA4E;YACjG,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,QAAQ,EAAE;YACR,gFAAgF;YAChF,MAAM,CAAC,EAAU,EAAE,IAAiC;gBAClD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/F,CAAC;YACD,cAAc,CAAC,EAAU,EAAE,IAAyC;gBAClE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC;YACjG,CAAC;YACD,aAAa,CAAC,EAAU;gBACtB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,CAAC;YAC1F,CAAC;YACD,cAAc,CAAC,EAAU,EAAE,UAAkB,EAAE,IAA0E;gBACvH,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,sBAAsB,IAAA,aAAG,EAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACrH,CAAC;YACD,cAAc,CAAC,EAAU,EAAE,UAAkB;gBAC3C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,sBAAsB,IAAA,aAAG,EAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;YAChH,CAAC;SACF;QACD,YAAY,EAAE;YACZ,GAAG,CAAC,IAAkC;gBACpC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,IAAI,CAAC,SAAqF,EAAE;gBAC1F,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;YACjG,CAAC;YACD,GAAG,CAAC,EAAU;gBACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,MAAM,CAAC,EAAU;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,iCAAiC,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACzF,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -16,6 +16,27 @@ export interface DesktopMfaPolicy {
|
|
|
16
16
|
/** Relying-party domain the agents use; null uses the application's passkey RP id. */
|
|
17
17
|
passkey_rp_id: string | null;
|
|
18
18
|
passkey_require_uv: boolean;
|
|
19
|
+
/** Device-bound SSO (macOS Platform SSO, Windows broker) accepts registrations and logins. */
|
|
20
|
+
device_sso_enabled: boolean;
|
|
21
|
+
device_sso_session_minutes: number;
|
|
22
|
+
device_sso_refresh_days: number;
|
|
23
|
+
}
|
|
24
|
+
/** A device registered for device-bound SSO. */
|
|
25
|
+
export interface DeviceSsoRegistration {
|
|
26
|
+
object: 'device_sso_registration';
|
|
27
|
+
id: string;
|
|
28
|
+
user_id: string;
|
|
29
|
+
platform: 'macos' | 'windows';
|
|
30
|
+
hostname: string | null;
|
|
31
|
+
agent_version: string | null;
|
|
32
|
+
status: 'active' | 'revoked';
|
|
33
|
+
signing_key_id: string;
|
|
34
|
+
user_key_registered: boolean;
|
|
35
|
+
user_key_method: 'user_secure_enclave_key' | 'user_tpm_key' | null;
|
|
36
|
+
local_username: string | null;
|
|
37
|
+
last_login_at: number | null;
|
|
38
|
+
revoked_at: number | null;
|
|
39
|
+
created_at: number;
|
|
19
40
|
}
|
|
20
41
|
/** A passkey registered through a workstation. It answers the desktop passkey factor and never a web sign-in. */
|
|
21
42
|
export interface DesktopPasskey {
|
|
@@ -101,4 +122,20 @@ export declare function desktopMfaResource(request: RequestFn): {
|
|
|
101
122
|
id: string;
|
|
102
123
|
deleted: boolean;
|
|
103
124
|
}>;
|
|
125
|
+
/** Devices registered for device-bound SSO (macOS Platform SSO, Windows broker). */
|
|
126
|
+
listDeviceSsoRegistrations(query?: {
|
|
127
|
+
user_id?: string;
|
|
128
|
+
}): Promise<{
|
|
129
|
+
object: "list";
|
|
130
|
+
data: DeviceSsoRegistration[];
|
|
131
|
+
has_more: boolean;
|
|
132
|
+
}>;
|
|
133
|
+
getDeviceSsoRegistration(id: string): Promise<DeviceSsoRegistration>;
|
|
134
|
+
/** Ends every session the device holds and refuses its next call. */
|
|
135
|
+
revokeDeviceSsoRegistration(id: string): Promise<DeviceSsoRegistration>;
|
|
136
|
+
deleteDeviceSsoRegistration(id: string): Promise<{
|
|
137
|
+
object: "device_sso_registration";
|
|
138
|
+
id: string;
|
|
139
|
+
deleted: boolean;
|
|
140
|
+
}>;
|
|
104
141
|
};
|
|
@@ -39,6 +39,20 @@ function desktopMfaResource(request) {
|
|
|
39
39
|
deleteDevice(id) {
|
|
40
40
|
return request({ method: 'DELETE', path: `/v1/desktop_mfa/devices/${(0, request_1.enc)(id)}` });
|
|
41
41
|
},
|
|
42
|
+
/** Devices registered for device-bound SSO (macOS Platform SSO, Windows broker). */
|
|
43
|
+
listDeviceSsoRegistrations(query = {}) {
|
|
44
|
+
return request({ method: 'GET', path: '/v1/device_sso/registrations', query });
|
|
45
|
+
},
|
|
46
|
+
getDeviceSsoRegistration(id) {
|
|
47
|
+
return request({ method: 'GET', path: `/v1/device_sso/registrations/${(0, request_1.enc)(id)}` });
|
|
48
|
+
},
|
|
49
|
+
/** Ends every session the device holds and refuses its next call. */
|
|
50
|
+
revokeDeviceSsoRegistration(id) {
|
|
51
|
+
return request({ method: 'POST', path: `/v1/device_sso/registrations/${(0, request_1.enc)(id)}/revoke` });
|
|
52
|
+
},
|
|
53
|
+
deleteDeviceSsoRegistration(id) {
|
|
54
|
+
return request({ method: 'DELETE', path: `/v1/device_sso/registrations/${(0, request_1.enc)(id)}` });
|
|
55
|
+
},
|
|
42
56
|
};
|
|
43
57
|
}
|
|
44
58
|
//# sourceMappingURL=desktop-mfa.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"desktop-mfa.js","sourceRoot":"","sources":["../../src/client/desktop-mfa.ts"],"names":[],"mappings":";;
|
|
1
|
+
{"version":3,"file":"desktop-mfa.js","sourceRoot":"","sources":["../../src/client/desktop-mfa.ts"],"names":[],"mappings":";;AA2FA,gDAmDC;AA9ID,uCAAgD;AA0FhD,4EAA4E;AAC5E,SAAgB,kBAAkB,CAAC,OAAkB;IACnD,OAAO;QACL,SAAS;YACP,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,sCAAsC;QACtC,YAAY,CAAC,IAAgC;YAC3C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,gGAAgG;QAChG,mBAAmB,CAAC,IAAsD;YACxE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,WAAW,CAAC,QAA8B,EAAE;YAC1C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,SAAS,CAAC,EAAU;YAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,kBAAkB,CAAC,EAAU;YAC3B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,mBAAmB,CAAC,EAAU,EAAE,SAAiB;YAC/C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,2BAA2B,IAAA,aAAG,EAAC,EAAE,CAAC,aAAa,IAAA,aAAG,EAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9G,CAAC;QACD,6EAA6E;QAC7E,YAAY,CAAC,EAAU;YACrB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,0GAA0G;QAC1G,kBAAkB,CAAC,EAAU;YAC3B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,IAAA,aAAG,EAAC,EAAE,CAAC,uBAAuB,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,YAAY,CAAC,EAAU;YACrB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,2BAA2B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,oFAAoF;QACpF,0BAA0B,CAAC,QAA8B,EAAE;YACzD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,wBAAwB,CAAC,EAAU;YACjC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,gCAAgC,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,qEAAqE;QACrE,2BAA2B,CAAC,EAAU;YACpC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,2BAA2B,CAAC,EAAU;YACpC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,gCAAgC,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;KACF,CAAC;AACJ,CAAC"}
|