@cmmd-center/forge 0.9.11 → 0.9.13
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/bin.cjs +65 -19
- package/dist/bin.mjs +65 -19
- package/dist/client/assets/{CanvasPanel-CNtJjkFi.js → CanvasPanel-Dc8j2ouo.js} +2 -2
- package/dist/client/assets/{CompositeItem-BYLWaYF6.js → CompositeItem-Cn5DdObI.js} +2 -2
- package/dist/client/assets/{DiffPanel-BilYcllQ.js → DiffPanel-CRdkVPEz.js} +3 -3
- package/dist/client/assets/{DiffPanel.logic-Caky6F_f.js → DiffPanel.logic-BIPcNz_o.js} +2 -2
- package/dist/client/assets/DiffPanelShell-tIdXu7mn.js +2531 -0
- package/dist/client/assets/{DiffWorkerPoolProvider-CTUAka0e.js → DiffWorkerPoolProvider-DuP7DBdu.js} +9 -9
- package/dist/client/assets/PullRequestCodePanel-BID-ZM7w.js +5 -0
- package/dist/client/assets/{Virtualizer-CFg_81uW.js → Virtualizer-DeKxnAeU.js} +2 -2
- package/dist/client/assets/{canvasStateStore-BdDORpO9.js → canvasStateStore-Dlm4tanv.js} +2 -2
- package/dist/client/assets/{cmmdAuthRedirect-CrxxHqHr.js → cmmdAuthRedirect-C1FjO86g.js} +2 -2
- package/dist/client/assets/index-4a61qSZ4.css +1 -0
- package/dist/client/assets/{index-BUY6pZDx.js → index-BtUnlnWs.js} +59 -59
- package/dist/client/assets/src-DljvAdHI.js +3 -0
- package/dist/client/assets/{toggle-BUlphA25.js → toggle-It2CvaLA.js} +2 -2
- package/dist/client/assets/{useTriggerFocusGuards-D2jbdUMe.js → useTriggerFocusGuards-DfUh9uvu.js} +2 -2
- package/dist/client/index.html +11 -11
- package/dist/runtimeBootstrap.cjs +1 -1
- package/dist/runtimeBootstrap.mjs +1 -1
- package/dist/{runtimeControlAuthority-SNBF5Mjy.cjs → runtimeControlAuthority-45DPznyK.cjs} +6 -7
- package/dist/{runtimeControlAuthority-L85w5RTn.mjs → runtimeControlAuthority-akIBTI-S.mjs} +6 -7
- package/package.json +1 -1
- package/dist/client/assets/DiffPanelShell-DXP_jwHj.js +0 -2531
- package/dist/client/assets/PullRequestCodePanel-4bf4PYHp.js +0 -5
- package/dist/client/assets/index-BydoCpMZ.css +0 -1
- package/dist/client/assets/src-Dqe_-4FQ.js +0 -3
|
@@ -155,13 +155,12 @@ function runtimeTicketExpiration(payload, allowExpired) {
|
|
|
155
155
|
function requiredRuntimeIdentity(payload) {
|
|
156
156
|
const userId = stringClaim(payload, "user_id");
|
|
157
157
|
const orgId = stringClaim(payload, "org_id");
|
|
158
|
-
const projectId = stringClaim(payload, "project_id");
|
|
159
158
|
const runtimeId = stringClaim(payload, "runtime_id");
|
|
160
|
-
if (!userId || !orgId || !
|
|
159
|
+
if (!userId || !orgId || !runtimeId) return null;
|
|
161
160
|
return {
|
|
162
161
|
userId,
|
|
163
162
|
orgId,
|
|
164
|
-
projectId,
|
|
163
|
+
projectId: stringClaim(payload, "project_id"),
|
|
165
164
|
runtimeId
|
|
166
165
|
};
|
|
167
166
|
}
|
|
@@ -188,7 +187,7 @@ function exactMachineExpectationMatches(claims, expectations) {
|
|
|
188
187
|
return expectations.credentialEpoch === void 0 || claims.credentialEpoch === expectations.credentialEpoch;
|
|
189
188
|
}
|
|
190
189
|
function runtimeTicketExpectationsMatch(claims, expectations) {
|
|
191
|
-
return matchesExpected(claims.runtimeId, expectations.runtimeId) && matchesExpected(claims.orgId, expectations.orgId) && matchesExpected(claims.userId, expectations.userId) &&
|
|
190
|
+
return matchesExpected(claims.runtimeId, expectations.runtimeId) && matchesExpected(claims.orgId, expectations.orgId) && matchesExpected(claims.userId, expectations.userId) && exactMachineExpectationMatches(claims, expectations);
|
|
192
191
|
}
|
|
193
192
|
function verifyCmmdRuntimeTicketWithExpirationPolicy(token, expectations, allowExpired) {
|
|
194
193
|
const payload = verifiedRuntimeTicketPayload(token, expectations.publicKeyPem);
|
|
@@ -357,7 +356,7 @@ function storeRuntimeControlAuthority(input) {
|
|
|
357
356
|
const claims = verifyCmmdRuntimeTicket(input.envelope.controlTicket, {
|
|
358
357
|
publicKeyPem: input.identity.publicKeyPem,
|
|
359
358
|
orgId: input.identity.orgId,
|
|
360
|
-
|
|
359
|
+
userId: input.identity.userId,
|
|
361
360
|
runtimeId: input.identity.runtimeId,
|
|
362
361
|
machineId: input.identity.machineId,
|
|
363
362
|
credentialEpoch: input.identity.credentialEpoch
|
|
@@ -453,7 +452,7 @@ function bootstrapRuntimeControlAuthorityFromNarrowGrant(input) {
|
|
|
453
452
|
const claims = verifyCmmdRuntimeTicket(input.grantToken, {
|
|
454
453
|
publicKeyPem: input.identity.publicKeyPem,
|
|
455
454
|
orgId: input.identity.orgId,
|
|
456
|
-
|
|
455
|
+
userId: input.identity.userId,
|
|
457
456
|
runtimeId: input.identity.runtimeId,
|
|
458
457
|
machineId: input.identity.machineId,
|
|
459
458
|
credentialEpoch: input.identity.credentialEpoch
|
|
@@ -598,4 +597,4 @@ Object.defineProperty(exports, "verifyCmmdRuntimeTicketRefreshProof", {
|
|
|
598
597
|
}
|
|
599
598
|
});
|
|
600
599
|
|
|
601
|
-
//# sourceMappingURL=runtimeControlAuthority-
|
|
600
|
+
//# sourceMappingURL=runtimeControlAuthority-45DPznyK.cjs.map
|
|
@@ -154,13 +154,12 @@ function runtimeTicketExpiration(payload, allowExpired) {
|
|
|
154
154
|
function requiredRuntimeIdentity(payload) {
|
|
155
155
|
const userId = stringClaim(payload, "user_id");
|
|
156
156
|
const orgId = stringClaim(payload, "org_id");
|
|
157
|
-
const projectId = stringClaim(payload, "project_id");
|
|
158
157
|
const runtimeId = stringClaim(payload, "runtime_id");
|
|
159
|
-
if (!userId || !orgId || !
|
|
158
|
+
if (!userId || !orgId || !runtimeId) return null;
|
|
160
159
|
return {
|
|
161
160
|
userId,
|
|
162
161
|
orgId,
|
|
163
|
-
projectId,
|
|
162
|
+
projectId: stringClaim(payload, "project_id"),
|
|
164
163
|
runtimeId
|
|
165
164
|
};
|
|
166
165
|
}
|
|
@@ -187,7 +186,7 @@ function exactMachineExpectationMatches(claims, expectations) {
|
|
|
187
186
|
return expectations.credentialEpoch === void 0 || claims.credentialEpoch === expectations.credentialEpoch;
|
|
188
187
|
}
|
|
189
188
|
function runtimeTicketExpectationsMatch(claims, expectations) {
|
|
190
|
-
return matchesExpected(claims.runtimeId, expectations.runtimeId) && matchesExpected(claims.orgId, expectations.orgId) && matchesExpected(claims.userId, expectations.userId) &&
|
|
189
|
+
return matchesExpected(claims.runtimeId, expectations.runtimeId) && matchesExpected(claims.orgId, expectations.orgId) && matchesExpected(claims.userId, expectations.userId) && exactMachineExpectationMatches(claims, expectations);
|
|
191
190
|
}
|
|
192
191
|
function verifyCmmdRuntimeTicketWithExpirationPolicy(token, expectations, allowExpired) {
|
|
193
192
|
const payload = verifiedRuntimeTicketPayload(token, expectations.publicKeyPem);
|
|
@@ -356,7 +355,7 @@ function storeRuntimeControlAuthority(input) {
|
|
|
356
355
|
const claims = verifyCmmdRuntimeTicket(input.envelope.controlTicket, {
|
|
357
356
|
publicKeyPem: input.identity.publicKeyPem,
|
|
358
357
|
orgId: input.identity.orgId,
|
|
359
|
-
|
|
358
|
+
userId: input.identity.userId,
|
|
360
359
|
runtimeId: input.identity.runtimeId,
|
|
361
360
|
machineId: input.identity.machineId,
|
|
362
361
|
credentialEpoch: input.identity.credentialEpoch
|
|
@@ -452,7 +451,7 @@ function bootstrapRuntimeControlAuthorityFromNarrowGrant(input) {
|
|
|
452
451
|
const claims = verifyCmmdRuntimeTicket(input.grantToken, {
|
|
453
452
|
publicKeyPem: input.identity.publicKeyPem,
|
|
454
453
|
orgId: input.identity.orgId,
|
|
455
|
-
|
|
454
|
+
userId: input.identity.userId,
|
|
456
455
|
runtimeId: input.identity.runtimeId,
|
|
457
456
|
machineId: input.identity.machineId,
|
|
458
457
|
credentialEpoch: input.identity.credentialEpoch
|
|
@@ -532,4 +531,4 @@ async function sendRuntimeControlHeartbeat(input) {
|
|
|
532
531
|
//#endregion
|
|
533
532
|
export { verifyCmmdAuthRuntimeTicket as a, verifyCmmdRuntimeTicketRefreshProof as c, createReadOnceFileTokenAccessor as d, sendRuntimeControlHeartbeat as i, runtimeGrantToken as l, bootstrapRuntimeControlAuthorityFromNarrowGrant as n, verifyCmmdClaudeReadinessTicket as o, readRuntimeControlAuthority as r, verifyCmmdRuntimeTicket as s, bootstrapRuntimeControlAuthority as t, setRuntimeGrantToken as u };
|
|
534
533
|
|
|
535
|
-
//# sourceMappingURL=runtimeControlAuthority-
|
|
534
|
+
//# sourceMappingURL=runtimeControlAuthority-akIBTI-S.mjs.map
|