@cotal-ai/core 0.89.0 → 0.90.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth-provider.d.ts +25 -0
- package/dist/auth-provider.d.ts.map +1 -1
- package/dist/auth-provider.js.map +1 -1
- package/dist/endpoint-capability-policy.d.ts +24 -0
- package/dist/endpoint-capability-policy.d.ts.map +1 -0
- package/dist/endpoint-capability-policy.js +106 -0
- package/dist/endpoint-capability-policy.js.map +1 -0
- package/dist/endpoint-describe-observation.d.ts +20 -0
- package/dist/endpoint-describe-observation.d.ts.map +1 -0
- package/dist/endpoint-describe-observation.js +33 -0
- package/dist/endpoint-describe-observation.js.map +1 -0
- package/dist/endpoint-reconcile.d.ts.map +1 -1
- package/dist/endpoint-reconcile.js +3 -1
- package/dist/endpoint-reconcile.js.map +1 -1
- package/dist/endpoint-serve-kv.d.ts +4 -13
- package/dist/endpoint-serve-kv.d.ts.map +1 -1
- package/dist/endpoint-serve-kv.js +114 -7
- package/dist/endpoint-serve-kv.js.map +1 -1
- package/dist/endpoint-serve.d.ts +2 -1
- package/dist/endpoint-serve.d.ts.map +1 -1
- package/dist/endpoint-serve.js +13 -2
- package/dist/endpoint-serve.js.map +1 -1
- package/dist/endpoint-service.d.ts +15 -14
- package/dist/endpoint-service.d.ts.map +1 -1
- package/dist/endpoint-service.js +47 -0
- package/dist/endpoint-service.js.map +1 -1
- package/dist/index.d.ts +5 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +5 -0
- package/dist/index.js.map +1 -1
- package/dist/lifecycle-saga.d.ts.map +1 -1
- package/dist/lifecycle-saga.js +20 -12
- package/dist/lifecycle-saga.js.map +1 -1
- package/dist/lifecycle-state.d.ts +17 -1
- package/dist/lifecycle-state.d.ts.map +1 -1
- package/dist/lifecycle-state.js +24 -4
- package/dist/lifecycle-state.js.map +1 -1
- package/dist/native-uid-custody.d.ts +43 -0
- package/dist/native-uid-custody.d.ts.map +1 -0
- package/dist/native-uid-custody.js +104 -0
- package/dist/native-uid-custody.js.map +1 -0
- package/dist/provision.d.ts +26 -0
- package/dist/provision.d.ts.map +1 -1
- package/dist/provision.js +28 -0
- package/dist/provision.js.map +1 -1
- package/dist/remote-service-authority.d.ts +204 -0
- package/dist/remote-service-authority.d.ts.map +1 -0
- package/dist/remote-service-authority.js +415 -0
- package/dist/remote-service-authority.js.map +1 -0
- package/dist/service-authority-limits.d.ts +5 -0
- package/dist/service-authority-limits.d.ts.map +1 -0
- package/dist/service-authority-limits.js +5 -0
- package/dist/service-authority-limits.js.map +1 -0
- package/dist/service-gate.d.ts +42 -0
- package/dist/service-gate.d.ts.map +1 -0
- package/dist/service-gate.js +99 -0
- package/dist/service-gate.js.map +1 -0
- package/dist/terminal.d.ts +5 -5
- package/package.json +1 -1
package/dist/auth-provider.d.ts
CHANGED
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
import { type ExecFileException } from "node:child_process";
|
|
2
2
|
import { type Extension } from "./registry.js";
|
|
3
3
|
import type { SecretStore } from "./secret-store.js";
|
|
4
|
+
import type { ServiceAuthorityInfo, ServiceAuthorityProof, ServiceAuthorityRequest, ServiceAuthorityResult } from "./remote-service-authority.js";
|
|
4
5
|
import type { RemoteManagerAdminAuthorizationRequest, RemoteManagerAdminAuthorizationResult, RemoteManagerAuthorityMaterial, RemoteManagerAuthorityRequest, RemoteManagerGoalIndexScanRequest, RemoteManagerGoalIndexScanResult, RemoteManagerMaintenanceRequest, RemoteManagerMaintenanceResult, RemoteManagedAgentEnrollmentRequest, RemoteManagedAgentEnrollmentResult, RemoteManagedAgentPrepareRetirementRequest, RemoteManagedAgentPrepareRetirementResult, RemoteManagedAgentRuntimeRequest, RemoteManagedAgentRuntimeResult, RemoteRetainedAgentValidationRequest, RemoteRetainedAgentValidationResult, RemoteRunAdmissionRequest, RemoteRunAdmissionResult, RemoteRunAttemptRequest, RemoteRunAttemptResult } from "./remote-manager-authority.js";
|
|
5
6
|
/** A fresh agent grant refused an occupied actor without replacing its authority. */
|
|
6
7
|
export declare class AgentGrantConflictError extends Error {
|
|
@@ -104,6 +105,30 @@ export interface AuthProvider extends Extension {
|
|
|
104
105
|
idpUrl: string;
|
|
105
106
|
sub: string;
|
|
106
107
|
}): string;
|
|
108
|
+
/** Read this space's DATA-account identity from the pinned authority endpoint. A client persists
|
|
109
|
+
* it before first service registration and refuses a later mismatch rather than silently repinning. */
|
|
110
|
+
serviceEndpointInfo?(opts: {
|
|
111
|
+
store: SecretStore;
|
|
112
|
+
dir: string;
|
|
113
|
+
space: string;
|
|
114
|
+
}): Promise<ServiceAuthorityInfo>;
|
|
115
|
+
/** Generic user-auth service registration. The provider supplies IdP proof when no service
|
|
116
|
+
* proof is supplied, validates its pinned authority origin, and returns that space's deny-all
|
|
117
|
+
* sentinel alongside the checked result. It never enrolls an actor or falls back to static auth. */
|
|
118
|
+
serviceEndpointAuthority?(opts: {
|
|
119
|
+
store: SecretStore;
|
|
120
|
+
dir: string;
|
|
121
|
+
request: ServiceAuthorityRequest;
|
|
122
|
+
proof?: Exclude<ServiceAuthorityProof, {
|
|
123
|
+
kind: "idp";
|
|
124
|
+
}>;
|
|
125
|
+
/** Remaining local query budget. Describe queries are capped at two seconds. */
|
|
126
|
+
timeoutMs?: number;
|
|
127
|
+
signal?: AbortSignal;
|
|
128
|
+
}): Promise<{
|
|
129
|
+
result: ServiceAuthorityResult;
|
|
130
|
+
sentinelCreds: string;
|
|
131
|
+
}>;
|
|
107
132
|
/**
|
|
108
133
|
* Request the closed remote manager-service authority material from the host's loopback/operator
|
|
109
134
|
* exchange. This is an explicitly typed lifecycle protocol, not a generic profile mint: the
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth-provider.d.ts","sourceRoot":"","sources":["../src/auth-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAY,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EACV,sCAAsC,EACtC,qCAAqC,EACrC,8BAA8B,EAC9B,6BAA6B,EAC7B,iCAAiC,EACjC,gCAAgC,EAChC,+BAA+B,EAC/B,8BAA8B,EAC9B,mCAAmC,EACnC,kCAAkC,EAClC,0CAA0C,EAC1C,yCAAyC,EACzC,gCAAgC,EAChC,+BAA+B,EAC/B,oCAAoC,EACpC,mCAAmC,EACnC,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,+BAA+B,CAAC;AAEvC,qFAAqF;AACrF,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,KAAK,EAAE,MAAM;CAI1B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B;;;;;;;OAOG;IACH,aAAa,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9D;kGAC8F;IAC9F,eAAe,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAC3G;;;;;;;;;;;;;;OAcG;IACH,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClG;;;;;;;;;OASG;IACH,oBAAoB,CAAC,CAAC,IAAI,EAAE;QAC1B,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC;QACpE,KAAK,CAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAAC;KAC7C,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACtC,4FAA4F;IAC5F,0BAA0B,CAAC,CAAC,IAAI,EAAE;QAChC,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC;QACpE,KAAK,CAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAAC;KAC7C,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACtC,uFAAuF;IACvF,eAAe,CAAC,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;IAC9E,uFAAuF;IACvF,kBAAkB,CAAC,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC;IAChF;;;;;;;OAOG;IACH,uBAAuB,CAAC,CAAC,IAAI,EAAE;QAC7B,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,6BAA6B,CAAC;KACxC,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC5C;kGAC8F;IAC9F,yBAAyB,CAAC,CAAC,IAAI,EAAE;QAC/B,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,yBAAyB,CAAC;KACpC,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtC,uBAAuB,CAAC,CAAC,IAAI,EAAE;QAC7B,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,uBAAuB,CAAC;KAClC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpC,0FAA0F;IAC1F,sBAAsB,CAAC,CAAC,IAAI,EAAE;QAC5B,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,OAAO,+BAA+B,EAAE,sBAAsB,CAAC;KACzE,GAAG,OAAO,CAAC,OAAO,+BAA+B,EAAE,qBAAqB,CAAC,CAAC;IAC3E;qGACiG;IACjG,qBAAqB,CAAC,CAAC,IAAI,EAAE;QAC3B,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,+BAA+B,CAAC;KAC1C,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC5C;gGAC4F;IAC5F,0BAA0B,CAAC,CAAC,IAAI,EAAE;QAChC,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,iCAAiC,CAAC;KAC5C,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC9C,sFAAsF;IACtF,2BAA2B,CAAC,CAAC,IAAI,EAAE;QACjC,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,sCAAsC,CAAC;KACjD,GAAG,OAAO,CAAC,qCAAqC,CAAC,CAAC;IACnD;;;;;OAKG;IACH,2BAA2B,CAAC,CAAC,IAAI,EAAE;QACjC,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,oCAAoC,CAAC;KAC/C,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACjD;;;;;;;OAOG;IACH,wBAAwB,CAAC,CAAC,IAAI,EAAE;QAC9B,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,mCAAmC,CAAC;KAC9C,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAChD;;;;OAIG;IACH,mCAAmC,CAAC,CAAC,IAAI,EAAE;QACzC,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,0CAA0C,CAAC;KACrD,GAAG,OAAO,CAAC,yCAAyC,CAAC,CAAC;IACvD;;;;;OAKG;IACH,gCAAgC,CAAC,CAAC,IAAI,EAAE;QACtC,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,gCAAgC,CAAC;KAC3C,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC7C;;;;;;OAMG;IACH,aAAa,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,WAAW,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzF;;;;;;;;;;;;OAYG;IACH,qBAAqB,CAAC,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/F;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E;;;;;;;;;OASG;IACH,UAAU,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,WAAW,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7G;;;;;;;OAOG;IACH,UAAU,CAAC,IAAI,EAAE;QACf,mFAAmF;QACnF,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,oFAAoF;QACpF,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf;;gGAEwF;QACxF,YAAY,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D;;8FAE0F;IAC1F,WAAW,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/H;;;;;;OAMG;IACH,UAAU,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAC/F;;;;;;;;;OASG;IACH,kBAAkB,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E;;;;;OAKG;IACH,gBAAgB,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,WAAW,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1G;;;;OAIG;IACH,qBAAqB,CAAC,IAAI,EAAE;QAC1B,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpC;;;;;qDAKiD;IACjD,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED;;;;yDAIyD;AACzD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,KAAK,CASrG;AAED;;mDAEmD;AACnD,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/E,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,6EAA6E;AAC7E,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,yFAAyF;IACzF,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,gGAAgG;AAChG,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,uBAAuB,CAAC;IACjC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,cAAc,GAAG,YAAY,GAAG,QAAQ,CAAC;IACtE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;qFAEqF;AACrF,MAAM,WAAW,oBAAqB,SAAQ,SAAS;IACrD,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACpE,KAAK,CAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAAC;CAC7C;AAED,wBAAgB,2BAA2B,IAAI,oBAAoB,CAKlE;AAED,iGAAiG;AACjG,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,iFAAiF;AACjF,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd;;2GAEuG;IACvG,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;iGAEiG;AACjG,wBAAgB,mBAAmB,IAAI,YAAY,CASlD;AAED;4EAC4E;AAC5E,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,cAAc,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACtD;AAED;iEACiE;AACjE,MAAM,WAAW,cAAc;IAC7B,6FAA6F;IAC7F,MAAM,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;6FACyF;IACzF,KAAK,CAAC,EACF;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,cAAc,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACpG,aAAa,CAAC;CACnB;AAED;;;0FAG0F;AAC1F,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd;gEAC4D;IAC5D,YAAY,EAAE,MAAM,CAAC;IACrB;8FAC0F;IAC1F,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C;;kGAE8F;IAC9F,KAAK,EAAE,WAAW,CAAC;IACnB;;iFAE6E;IAC7E,GAAG,EAAE,MAAM,CAAC;IACZ;;2FAEuF;IACvF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,+DAA+D;AAC/D,MAAM,WAAW,YAAY;IAC3B;qEACiE;IACjE,aAAa,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD;;8DAE0D;IAC1D,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,iFAAiF;IACjF,OAAO,EAAE,eAAe,CAAC;CAC1B;AAED;;;uEAGuE;AACvE,MAAM,WAAW,eAAe;IAC9B;8EAC0E;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;;;qGASiG;IACjG,KAAK,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACtH"}
|
|
1
|
+
{"version":3,"file":"auth-provider.d.ts","sourceRoot":"","sources":["../src/auth-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAY,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAClJ,OAAO,KAAK,EACV,sCAAsC,EACtC,qCAAqC,EACrC,8BAA8B,EAC9B,6BAA6B,EAC7B,iCAAiC,EACjC,gCAAgC,EAChC,+BAA+B,EAC/B,8BAA8B,EAC9B,mCAAmC,EACnC,kCAAkC,EAClC,0CAA0C,EAC1C,yCAAyC,EACzC,gCAAgC,EAChC,+BAA+B,EAC/B,oCAAoC,EACpC,mCAAmC,EACnC,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,+BAA+B,CAAC;AAEvC,qFAAqF;AACrF,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,KAAK,EAAE,MAAM;CAI1B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B;;;;;;;OAOG;IACH,aAAa,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9D;kGAC8F;IAC9F,eAAe,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAC3G;;;;;;;;;;;;;;OAcG;IACH,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClG;;;;;;;;;OASG;IACH,oBAAoB,CAAC,CAAC,IAAI,EAAE;QAC1B,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC;QACpE,KAAK,CAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAAC;KAC7C,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACtC,4FAA4F;IAC5F,0BAA0B,CAAC,CAAC,IAAI,EAAE;QAChC,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC;QACpE,KAAK,CAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAAC;KAC7C,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACtC,uFAAuF;IACvF,eAAe,CAAC,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;IAC9E,uFAAuF;IACvF,kBAAkB,CAAC,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC;IAChF;2GACuG;IACvG,mBAAmB,CAAC,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,WAAW,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC9G;;wGAEoG;IACpG,wBAAwB,CAAC,CAAC,IAAI,EAAE;QAC9B,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,uBAAuB,CAAC;QACjC,KAAK,CAAC,EAAE,OAAO,CAAC,qBAAqB,EAAE;YAAE,IAAI,EAAE,KAAK,CAAA;SAAE,CAAC,CAAC;QACxD,gFAAgF;QAChF,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,sBAAsB,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE;;;;;;;OAOG;IACH,uBAAuB,CAAC,CAAC,IAAI,EAAE;QAC7B,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,6BAA6B,CAAC;KACxC,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC5C;kGAC8F;IAC9F,yBAAyB,CAAC,CAAC,IAAI,EAAE;QAC/B,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,yBAAyB,CAAC;KACpC,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtC,uBAAuB,CAAC,CAAC,IAAI,EAAE;QAC7B,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,uBAAuB,CAAC;KAClC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpC,0FAA0F;IAC1F,sBAAsB,CAAC,CAAC,IAAI,EAAE;QAC5B,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,OAAO,+BAA+B,EAAE,sBAAsB,CAAC;KACzE,GAAG,OAAO,CAAC,OAAO,+BAA+B,EAAE,qBAAqB,CAAC,CAAC;IAC3E;qGACiG;IACjG,qBAAqB,CAAC,CAAC,IAAI,EAAE;QAC3B,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,+BAA+B,CAAC;KAC1C,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC5C;gGAC4F;IAC5F,0BAA0B,CAAC,CAAC,IAAI,EAAE;QAChC,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,iCAAiC,CAAC;KAC5C,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC9C,sFAAsF;IACtF,2BAA2B,CAAC,CAAC,IAAI,EAAE;QACjC,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,sCAAsC,CAAC;KACjD,GAAG,OAAO,CAAC,qCAAqC,CAAC,CAAC;IACnD;;;;;OAKG;IACH,2BAA2B,CAAC,CAAC,IAAI,EAAE;QACjC,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,oCAAoC,CAAC;KAC/C,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACjD;;;;;;;OAOG;IACH,wBAAwB,CAAC,CAAC,IAAI,EAAE;QAC9B,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,mCAAmC,CAAC;KAC9C,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAChD;;;;OAIG;IACH,mCAAmC,CAAC,CAAC,IAAI,EAAE;QACzC,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,0CAA0C,CAAC;KACrD,GAAG,OAAO,CAAC,yCAAyC,CAAC,CAAC;IACvD;;;;;OAKG;IACH,gCAAgC,CAAC,CAAC,IAAI,EAAE;QACtC,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,gCAAgC,CAAC;KAC3C,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC7C;;;;;;OAMG;IACH,aAAa,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,WAAW,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzF;;;;;;;;;;;;OAYG;IACH,qBAAqB,CAAC,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/F;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E;;;;;;;;;OASG;IACH,UAAU,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,WAAW,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7G;;;;;;;OAOG;IACH,UAAU,CAAC,IAAI,EAAE;QACf,mFAAmF;QACnF,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,oFAAoF;QACpF,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf;;gGAEwF;QACxF,YAAY,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D;;8FAE0F;IAC1F,WAAW,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/H;;;;;;OAMG;IACH,UAAU,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAC/F;;;;;;;;;OASG;IACH,kBAAkB,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E;;;;;OAKG;IACH,gBAAgB,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,WAAW,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1G;;;;OAIG;IACH,qBAAqB,CAAC,IAAI,EAAE;QAC1B,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpC;;;;;qDAKiD;IACjD,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED;;;;yDAIyD;AACzD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,KAAK,CASrG;AAED;;mDAEmD;AACnD,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/E,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,6EAA6E;AAC7E,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,yFAAyF;IACzF,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,gGAAgG;AAChG,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,uBAAuB,CAAC;IACjC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,cAAc,GAAG,YAAY,GAAG,QAAQ,CAAC;IACtE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;qFAEqF;AACrF,MAAM,WAAW,oBAAqB,SAAQ,SAAS;IACrD,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACpE,KAAK,CAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAAC;CAC7C;AAED,wBAAgB,2BAA2B,IAAI,oBAAoB,CAKlE;AAED,iGAAiG;AACjG,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,iFAAiF;AACjF,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd;;2GAEuG;IACvG,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;iGAEiG;AACjG,wBAAgB,mBAAmB,IAAI,YAAY,CASlD;AAED;4EAC4E;AAC5E,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,cAAc,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACtD;AAED;iEACiE;AACjE,MAAM,WAAW,cAAc;IAC7B,6FAA6F;IAC7F,MAAM,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;6FACyF;IACzF,KAAK,CAAC,EACF;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,cAAc,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACpG,aAAa,CAAC;CACnB;AAED;;;0FAG0F;AAC1F,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd;gEAC4D;IAC5D,YAAY,EAAE,MAAM,CAAC;IACrB;8FAC0F;IAC1F,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C;;kGAE8F;IAC9F,KAAK,EAAE,WAAW,CAAC;IACnB;;iFAE6E;IAC7E,GAAG,EAAE,MAAM,CAAC;IACZ;;2FAEuF;IACvF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,+DAA+D;AAC/D,MAAM,WAAW,YAAY;IAC3B;qEACiE;IACjE,aAAa,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD;;8DAE0D;IAC1D,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,iFAAiF;IACjF,OAAO,EAAE,eAAe,CAAC;CAC1B;AAED;;;uEAGuE;AACvE,MAAM,WAAW,eAAe;IAC9B;8EAC0E;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;;;qGASiG;IACjG,KAAK,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACtH"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth-provider.js","sourceRoot":"","sources":["../src/auth-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAA0B,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAkB,MAAM,eAAe,CAAC;
|
|
1
|
+
{"version":3,"file":"auth-provider.js","sourceRoot":"","sources":["../src/auth-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAA0B,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAkB,MAAM,eAAe,CAAC;AA0BzD,qFAAqF;AACrF,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,KAAa;QACvB,KAAK,CAAC,UAAU,KAAK,8CAA8C,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAgUD;;;;yDAIyD;AACzD,MAAM,UAAU,oBAAoB,CAAC,GAAsB,EAAE,MAAc,EAAE,SAAiB;IAC5F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,IAAI;QAAE,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,oFAAoF;IACpF,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,IAAI,KAAK,CAAC,sCAAsC,SAAS,IAAI,CAAC,CAAC;IACtF,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,KAAK,CAAC,uCAAuC,GAAG,CAAC,IAAI,sBAAsB,CAAC,CAAC;IAC1H,qGAAqG;IACrG,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;mDAEmD;AACnD,MAAM,UAAU,cAAc,CAC5B,IAAc,EACd,OAA8E,EAAE;IAEhF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC3C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CACN,IAAI,CAAC,CAAC,CAAC,EACP,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EACb,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAChF,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAC7G,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AA8BD,MAAM,UAAU,2BAA2B;IACzC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAuB,wBAAwB,CAAC,CAAC;IAC/E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,uDAAuD,CAAC,CAAC,CAAC,iDAAiD,CAAC,CAAC;IACxJ,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAuBD;;iGAEiG;AACjG,MAAM,UAAU,mBAAmB;IACjC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAe,eAAe,CAAC,CAAC;IAC9D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,yKAAyK,CAC1K,CAAC;IACJ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,uCAAuC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAClI,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC"}
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
import { type EpCapability } from "./endpoint-grants.js";
|
|
2
|
+
import { type EpCaller } from "./endpoint-subjects.js";
|
|
3
|
+
export declare const ENDPOINT_POLICY_MAX_CAPABILITIES = 256;
|
|
4
|
+
/** Closed syntax and deterministic defaults. This does not establish anyone's entitlement. */
|
|
5
|
+
export declare function parseEndpointCapabilities(raw: unknown): EpCapability[];
|
|
6
|
+
/** Validate the actual recipient before lowering. Operator entitlement comes from the host. */
|
|
7
|
+
export declare function validateEndpointCapabilities(space: string, raw: unknown, caller: EpCaller, policy: {
|
|
8
|
+
allowOperatorTargets: boolean;
|
|
9
|
+
}): EpCapability[];
|
|
10
|
+
/** Compare real rail authority, retaining route/instance/target/journal restrictions. Relative
|
|
11
|
+
* targets across different principals are refused here; their semantic containment is not proved
|
|
12
|
+
* by replacing a caller tuple. This helper never authenticates a parent or skips provenance reads. */
|
|
13
|
+
export declare function endpointCapabilitiesWithin(args: {
|
|
14
|
+
space: string;
|
|
15
|
+
child: {
|
|
16
|
+
caller: EpCaller;
|
|
17
|
+
capabilities: readonly EpCapability[];
|
|
18
|
+
};
|
|
19
|
+
parent: {
|
|
20
|
+
caller: EpCaller;
|
|
21
|
+
capabilities: readonly EpCapability[];
|
|
22
|
+
};
|
|
23
|
+
}): boolean;
|
|
24
|
+
//# sourceMappingURL=endpoint-capability-policy.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"endpoint-capability-policy.d.ts","sourceRoot":"","sources":["../src/endpoint-capability-policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAA+E,KAAK,QAAQ,EAAiB,MAAM,wBAAwB,CAAC;AAGnJ,eAAO,MAAM,gCAAgC,MAAM,CAAC;AAcpD,8FAA8F;AAC9F,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,EAAE,CAwCtE;AAED,+FAA+F;AAC/F,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE;IAAE,oBAAoB,EAAE,OAAO,CAAA;CAAE,GACxC,YAAY,EAAE,CAMhB;AAED;;sGAEsG;AACtG,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE;QAAE,MAAM,EAAE,QAAQ,CAAC;QAAC,YAAY,EAAE,SAAS,YAAY,EAAE,CAAA;KAAE,CAAC;IACnE,MAAM,EAAE;QAAE,MAAM,EAAE,QAAQ,CAAC;QAAC,YAAY,EAAE,SAAS,YAAY,EAAE,CAAA;KAAE,CAAC;CACrE,GAAG,OAAO,CAYV"}
|
|
@@ -0,0 +1,106 @@
|
|
|
1
|
+
import { canonicalJson } from "./canonical.js";
|
|
2
|
+
import { EpEnvelopeError } from "./endpoint-error.js";
|
|
3
|
+
import { epCallerGrantRows } from "./endpoint-grants.js";
|
|
4
|
+
import { assertBoundedOwner, assertCommandToken, assertLifecycleToken, endpointToken } from "./endpoint-subjects.js";
|
|
5
|
+
import { patternCovers } from "./subjects.js";
|
|
6
|
+
export const ENDPOINT_POLICY_MAX_CAPABILITIES = 256;
|
|
7
|
+
function invalid(detail) {
|
|
8
|
+
throw new EpEnvelopeError("bad-request", `endpoint caller policy: ${detail}`);
|
|
9
|
+
}
|
|
10
|
+
function record(raw, fields) {
|
|
11
|
+
if (raw === null || typeof raw !== "object" || Array.isArray(raw))
|
|
12
|
+
invalid("expected an object");
|
|
13
|
+
const proto = Object.getPrototypeOf(raw);
|
|
14
|
+
if (proto !== Object.prototype && proto !== null)
|
|
15
|
+
invalid("expected a plain object");
|
|
16
|
+
if (Reflect.ownKeys(raw).some((k) => typeof k !== "string" || !fields.includes(k)))
|
|
17
|
+
invalid("unsupported field");
|
|
18
|
+
return raw;
|
|
19
|
+
}
|
|
20
|
+
/** Closed syntax and deterministic defaults. This does not establish anyone's entitlement. */
|
|
21
|
+
export function parseEndpointCapabilities(raw) {
|
|
22
|
+
if (!Array.isArray(raw) || raw.length > ENDPOINT_POLICY_MAX_CAPABILITIES)
|
|
23
|
+
invalid("capabilities must be a bounded array");
|
|
24
|
+
const unique = new Map();
|
|
25
|
+
for (const item of raw) {
|
|
26
|
+
const o = record(item, ["endpoint", "command", "routes", "instanceId", "instanceOnly", "target", "journal"]);
|
|
27
|
+
if (!Object.hasOwn(o, "endpoint") || !Object.hasOwn(o, "command") || typeof o.endpoint !== "string" || typeof o.command !== "string")
|
|
28
|
+
invalid("endpoint and command are required");
|
|
29
|
+
endpointToken(o.endpoint);
|
|
30
|
+
assertCommandToken(o.command);
|
|
31
|
+
if (o.instanceId !== undefined && typeof o.instanceId !== "string")
|
|
32
|
+
invalid("instanceId must be a token");
|
|
33
|
+
if (o.instanceId !== undefined)
|
|
34
|
+
assertLifecycleToken(o.instanceId, "instanceId");
|
|
35
|
+
for (const key of ["instanceOnly", "journal"])
|
|
36
|
+
if (o[key] !== undefined && typeof o[key] !== "boolean")
|
|
37
|
+
invalid(`${key} must be boolean`);
|
|
38
|
+
if (o.instanceOnly === true && o.instanceId === undefined)
|
|
39
|
+
invalid("instance-only capability requires an instanceId");
|
|
40
|
+
const routes = o.routes ?? (o.instanceOnly === true ? [] : ["one"]);
|
|
41
|
+
if (!Array.isArray(routes) || routes.some((r) => r !== "one" && r !== "all") || new Set(routes).size !== routes.length)
|
|
42
|
+
invalid("routes must contain distinct one/all values");
|
|
43
|
+
if (o.instanceOnly === true && routes.length !== 0)
|
|
44
|
+
invalid("instance-only capability cannot carry class routes");
|
|
45
|
+
if (o.instanceOnly !== true && routes.length === 0 && o.instanceId === undefined)
|
|
46
|
+
invalid("capability has no route");
|
|
47
|
+
let target;
|
|
48
|
+
if (o.target !== undefined) {
|
|
49
|
+
const t = record(o.target, ["mode", "tOwner"]);
|
|
50
|
+
if (t.mode === "self") {
|
|
51
|
+
if (Object.keys(t).length !== 1)
|
|
52
|
+
invalid("self target carries no owner field");
|
|
53
|
+
target = { mode: "self" };
|
|
54
|
+
}
|
|
55
|
+
else if (t.mode === "owner" || t.mode === "child" || t.mode === "any" || t.mode === "ledger") {
|
|
56
|
+
if (typeof t.tOwner !== "string" || Object.keys(t).length !== 2)
|
|
57
|
+
invalid("target owner is required");
|
|
58
|
+
if (t.tOwner === "*") {
|
|
59
|
+
if (t.mode !== "any" && t.mode !== "ledger")
|
|
60
|
+
invalid("owner/child targets cannot use wildcard ownership");
|
|
61
|
+
}
|
|
62
|
+
else
|
|
63
|
+
assertBoundedOwner(t.tOwner, "target owner");
|
|
64
|
+
target = { mode: t.mode, tOwner: t.tOwner };
|
|
65
|
+
}
|
|
66
|
+
else
|
|
67
|
+
invalid("unsupported standing target mode");
|
|
68
|
+
}
|
|
69
|
+
const cap = {
|
|
70
|
+
endpoint: o.endpoint, command: o.command, routes: [...routes].sort(),
|
|
71
|
+
...(o.instanceId === undefined ? {} : { instanceId: o.instanceId }),
|
|
72
|
+
...(o.instanceOnly === true ? { instanceOnly: true } : {}),
|
|
73
|
+
...(target === undefined ? {} : { target }),
|
|
74
|
+
...(o.journal === true ? { journal: true } : {}),
|
|
75
|
+
};
|
|
76
|
+
unique.set(canonicalJson(cap), cap);
|
|
77
|
+
}
|
|
78
|
+
return [...unique.keys()].sort().map((key) => unique.get(key));
|
|
79
|
+
}
|
|
80
|
+
/** Validate the actual recipient before lowering. Operator entitlement comes from the host. */
|
|
81
|
+
export function validateEndpointCapabilities(space, raw, caller, policy) {
|
|
82
|
+
const caps = parseEndpointCapabilities(raw);
|
|
83
|
+
if (policy.allowOperatorTargets !== true && caps.some((c) => c.target?.mode === "any" || c.target?.mode === "ledger"))
|
|
84
|
+
throw new EpEnvelopeError("permission-denied", "endpoint caller policy requires explicit operator authority for any/ledger targets");
|
|
85
|
+
epCallerGrantRows(space, caps, caller);
|
|
86
|
+
return caps;
|
|
87
|
+
}
|
|
88
|
+
/** Compare real rail authority, retaining route/instance/target/journal restrictions. Relative
|
|
89
|
+
* targets across different principals are refused here; their semantic containment is not proved
|
|
90
|
+
* by replacing a caller tuple. This helper never authenticates a parent or skips provenance reads. */
|
|
91
|
+
export function endpointCapabilitiesWithin(args) {
|
|
92
|
+
const child = parseEndpointCapabilities(args.child.capabilities);
|
|
93
|
+
const parent = parseEndpointCapabilities(args.parent.capabilities);
|
|
94
|
+
epCallerGrantRows(args.space, child, args.child.caller);
|
|
95
|
+
epCallerGrantRows(args.space, parent, args.parent.caller);
|
|
96
|
+
if (args.child.caller.owner !== args.parent.caller.owner)
|
|
97
|
+
return false;
|
|
98
|
+
const samePrincipal = args.child.caller.actor === args.parent.caller.actor && args.child.caller.uid === args.parent.caller.uid;
|
|
99
|
+
if (!samePrincipal && child.some((c) => c.target?.mode === "self" || c.target?.mode === "child"))
|
|
100
|
+
return false;
|
|
101
|
+
const normalizedChild = epCallerGrantRows(args.space, child, args.child.caller);
|
|
102
|
+
const normalizedParent = epCallerGrantRows(args.space, parent, args.child.caller);
|
|
103
|
+
return normalizedChild.pub.every((row) => normalizedParent.pub.some((ceiling) => patternCovers(ceiling, row))) &&
|
|
104
|
+
normalizedChild.sub.every((row) => normalizedParent.sub.some((ceiling) => patternCovers(ceiling, row)));
|
|
105
|
+
}
|
|
106
|
+
//# sourceMappingURL=endpoint-capability-policy.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"endpoint-capability-policy.js","sourceRoot":"","sources":["../src/endpoint-capability-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAqB,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,aAAa,EAAgC,MAAM,wBAAwB,CAAC;AACnJ,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAEpD,SAAS,OAAO,CAAC,MAAc;IAC7B,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,2BAA2B,MAAM,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,MAAM,CAAC,GAAY,EAAE,MAAyB;IACrD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACrF,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjH,OAAO,GAA8B,CAAC;AACxC,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,yBAAyB,CAAC,GAAY;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,gCAAgC;QAAE,OAAO,CAAC,sCAAsC,CAAC,CAAC;IAC1H,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7G,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,CAAC,mCAAmC,CAAC,CAAC;QACnL,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;YAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC;QAC1G,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;YAAE,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,YAAY,CAAC,CAAC;QAC3F,KAAK,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC;YAAE,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,GAAG,kBAAkB,CAAC,CAAC;QAC1I,IAAI,CAAC,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,iDAAiD,CAAC,CAAC;QACtH,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;YACpH,OAAO,CAAC,6CAA6C,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC,YAAY,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,oDAAoD,CAAC,CAAC;QAClH,IAAI,CAAC,CAAC,YAAY,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;QACrH,IAAI,MAA4B,CAAC;QACjC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC/C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACtB,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,CAAC,oCAAoC,CAAC,CAAC;gBAC/E,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC5B,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC/F,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,CAAC,0BAA0B,CAAC,CAAC;gBACrG,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACrB,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;wBAAE,OAAO,CAAC,mDAAmD,CAAC,CAAC;gBAC5G,CAAC;;oBAAM,kBAAkB,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;gBACpD,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YAC9C,CAAC;;gBAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,GAAG,GAAiB;YACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAuB;YACzF,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAoB,EAAE,CAAC;YAC7E,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjD,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,CAAC;AAClE,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,4BAA4B,CAC1C,KAAa,EACb,GAAY,EACZ,MAAgB,EAChB,MAAyC;IAEzC,MAAM,IAAI,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,oBAAoB,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC;QACnH,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,oFAAoF,CAAC,CAAC;IACvI,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;sGAEsG;AACtG,MAAM,UAAU,0BAA0B,CAAC,IAI1C;IACC,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACnE,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxD,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACvE,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;IAC/H,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,KAAK,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/G,MAAM,eAAe,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChF,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClF,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5G,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5G,CAAC"}
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
import { type ParsedEpRequest } from "./endpoint-subjects.js";
|
|
2
|
+
import type { EpServeIdentity } from "./endpoint-serve.js";
|
|
3
|
+
/** Local receive metadata only. A fingerprint is not proof of broker receipt or authority. */
|
|
4
|
+
export interface DescribeRequestContext {
|
|
5
|
+
readonly subject: string;
|
|
6
|
+
readonly fingerprint: string;
|
|
7
|
+
readonly identity: Readonly<EpServeIdentity>;
|
|
8
|
+
readonly receivedAtMonotonicMs: number;
|
|
9
|
+
readonly replyExpected: boolean;
|
|
10
|
+
readonly deadlineMs?: number;
|
|
11
|
+
}
|
|
12
|
+
export interface ParsedDescribeObservation {
|
|
13
|
+
subject: ParsedEpRequest;
|
|
14
|
+
fingerprint: string;
|
|
15
|
+
replyExpected: boolean;
|
|
16
|
+
deadlineMs?: number;
|
|
17
|
+
}
|
|
18
|
+
/** Syntax and complete-JSON binding only. The caller must independently establish actual receipt. */
|
|
19
|
+
export declare function parseDescribeObservation(space: string, subject: string, originalEnvelope: unknown): ParsedDescribeObservation;
|
|
20
|
+
//# sourceMappingURL=endpoint-describe-observation.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"endpoint-describe-observation.d.ts","sourceRoot":"","sources":["../src/endpoint-describe-observation.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAG9E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,8FAA8F;AAC9F,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC7C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AACD,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,eAAe,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAGD,qGAAqG;AACrG,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,GAAG,yBAAyB,CAoB7H"}
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
import { contractDigest } from "./canonical.js";
|
|
2
|
+
import { spacePrefix } from "./subjects.js";
|
|
3
|
+
import { parseEpSubject } from "./endpoint-subjects.js";
|
|
4
|
+
import { EpEnvelopeError, parseEndpointRequest, checkRequestSubjectAgreement, assertClassMatches, assertArgsValid } from "./endpoint-envelope.js";
|
|
5
|
+
import { compileContract, VOID_SCHEMA } from "./schema-profile.js";
|
|
6
|
+
let voidValidator;
|
|
7
|
+
/** Syntax and complete-JSON binding only. The caller must independently establish actual receipt. */
|
|
8
|
+
export function parseDescribeObservation(space, subject, originalEnvelope) {
|
|
9
|
+
if (typeof subject !== "string" || !subject.startsWith(`${spacePrefix(space)}.ep.`))
|
|
10
|
+
throw new EpEnvelopeError("bad-request", "Describe observation belongs to another space or plane");
|
|
11
|
+
const parsed = parseEpSubject(subject);
|
|
12
|
+
if (!parsed || parsed.plane !== "request" || parsed.command !== "describe")
|
|
13
|
+
throw new EpEnvelopeError("bad-request", "Describe observation requires a native Describe request subject");
|
|
14
|
+
const request = parseEndpointRequest(originalEnvelope);
|
|
15
|
+
checkRequestSubjectAgreement(request, parsed);
|
|
16
|
+
assertClassMatches(request, "ephemeral");
|
|
17
|
+
if (request.op.inputDigest !== undefined || request.op.outputDigest !== undefined)
|
|
18
|
+
throw new EpEnvelopeError("contract-mismatch", "Describe carries no contract digest pins");
|
|
19
|
+
if (parsed.target !== null)
|
|
20
|
+
throw new EpEnvelopeError("permission-denied", "Describe is untargeted");
|
|
21
|
+
voidValidator ??= compileContract({ root: VOID_SCHEMA }).validate;
|
|
22
|
+
assertArgsValid(voidValidator, request.args);
|
|
23
|
+
let fingerprint;
|
|
24
|
+
try {
|
|
25
|
+
fingerprint = contractDigest({ subject, envelope: originalEnvelope });
|
|
26
|
+
}
|
|
27
|
+
catch {
|
|
28
|
+
throw new EpEnvelopeError("bad-request", "Describe fingerprint requires a complete canonicalizable JSON envelope");
|
|
29
|
+
}
|
|
30
|
+
return { subject: parsed, fingerprint, replyExpected: request.replyExpected,
|
|
31
|
+
...(request.deadlineMs === undefined ? {} : { deadlineMs: request.deadlineMs }) };
|
|
32
|
+
}
|
|
33
|
+
//# sourceMappingURL=endpoint-describe-observation.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"endpoint-describe-observation.js","sourceRoot":"","sources":["../src/endpoint-describe-observation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAwB,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAClJ,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAkBnE,IAAI,aAA2C,CAAC;AAEhD,qGAAqG;AACrG,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,OAAe,EAAE,gBAAyB;IAChG,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;QACjF,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,wDAAwD,CAAC,CAAC;IACrG,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU;QACxE,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,iEAAiE,CAAC,CAAC;IAC9G,MAAM,OAAO,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IACvD,4BAA4B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,EAAE,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,EAAE,CAAC,YAAY,KAAK,SAAS;QAC/E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,0CAA0C,CAAC,CAAC;IAC7F,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QACxB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,wBAAwB,CAAC,CAAC;IAC3E,aAAa,KAAK,eAAe,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC;IAClE,eAAe,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QAAC,WAAW,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAAC,CAAC;IAC9E,MAAM,CAAC;QAAC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,wEAAwE,CAAC,CAAC;IAAC,CAAC;IAC7H,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa;QACzE,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;AACtF,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"endpoint-reconcile.d.ts","sourceRoot":"","sources":["../src/endpoint-reconcile.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC;;mDAEmD;AACnD,MAAM,MAAM,sBAAsB;AAChC,2FAA2F;AACzF,SAAS;AACX,wEAAwE;GACtE,YAAY;AACd,qGAAqG;GACnG,eAAe;AACjB,2FAA2F;GACzF,cAAc;AAChB,qGAAqG;GACnG,gBAAgB;AAClB;wEACwE;GACtE,0BAA0B;AAC5B,sFAAsF;GACpF,qBAAqB;AACvB,wFAAwF;GACtF,OAAO,CAAC;AAEZ,2EAA2E;AAC3E,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,SAAS,EAAE,sBAAsB;gBAAjC,SAAS,EAAE,sBAAsB,EAC1C,OAAO,EAAE,MAAM;CAKlB;AAED;;4EAE4E;AAC5E,MAAM,MAAM,cAAc,GACtB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,KAAK,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,0FAA0F;AAC1F,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,wCAAwC;IACxC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,MAAM,CAAA;KAAE,CAAC;IAClH,kHAAkH;IAClH,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,MAAM,CAAA;KAAE,CAAC;IACjH,QAAQ,EAAE,cAAc,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,+DAA+D;IAC/D,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mEAAmE;IACnE,4BAA4B,EAAE,MAAM,EAAE,CAAC;IACvC,kDAAkD;IAClD,0BAA0B,EAAE,MAAM,EAAE,CAAC;IACrC,oEAAoE;IACpE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,iGAAiG;IACjG,mBAAmB,EAAE,SAAS,GAAG,UAAU,CAAC;IAC5C,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,gEAAgE;AAChE,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,EAAE,EAAE,EAAE,CAAC;IACP,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5D;sEACkE;IAClE,YAAY,EAAE,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,gJAAgJ;IAChJ,SAAS,EAAE,EAAE,CAAC;CACf,GAAG,OAAO,CAAC,mBAAmB,CAAC,
|
|
1
|
+
{"version":3,"file":"endpoint-reconcile.d.ts","sourceRoot":"","sources":["../src/endpoint-reconcile.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC;;mDAEmD;AACnD,MAAM,MAAM,sBAAsB;AAChC,2FAA2F;AACzF,SAAS;AACX,wEAAwE;GACtE,YAAY;AACd,qGAAqG;GACnG,eAAe;AACjB,2FAA2F;GACzF,cAAc;AAChB,qGAAqG;GACnG,gBAAgB;AAClB;wEACwE;GACtE,0BAA0B;AAC5B,sFAAsF;GACpF,qBAAqB;AACvB,wFAAwF;GACtF,OAAO,CAAC;AAEZ,2EAA2E;AAC3E,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,SAAS,EAAE,sBAAsB;gBAAjC,SAAS,EAAE,sBAAsB,EAC1C,OAAO,EAAE,MAAM;CAKlB;AAED;;4EAE4E;AAC5E,MAAM,MAAM,cAAc,GACtB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,KAAK,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,0FAA0F;AAC1F,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,wCAAwC;IACxC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,MAAM,CAAA;KAAE,CAAC;IAClH,kHAAkH;IAClH,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,MAAM,CAAA;KAAE,CAAC;IACjH,QAAQ,EAAE,cAAc,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,+DAA+D;IAC/D,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mEAAmE;IACnE,4BAA4B,EAAE,MAAM,EAAE,CAAC;IACvC,kDAAkD;IAClD,0BAA0B,EAAE,MAAM,EAAE,CAAC;IACrC,oEAAoE;IACpE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,iGAAiG;IACjG,mBAAmB,EAAE,SAAS,GAAG,UAAU,CAAC;IAC5C,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,gEAAgE;AAChE,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,EAAE,EAAE,EAAE,CAAC;IACP,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5D;sEACkE;IAClE,YAAY,EAAE,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,gJAAgJ;IAChJ,SAAS,EAAE,EAAE,CAAC;CACf,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAkM/B"}
|
|
@@ -65,6 +65,9 @@ export async function reconcileEndpointGate(opts) {
|
|
|
65
65
|
if (row.op.kind !== "registration")
|
|
66
66
|
throw new GateReconcileRefused("wrong-op-kind", `the gate at ${key} is frozen under a "${row.op.kind}" op, not a registration — this completes a crashed REGISTRATION's §13.1 obligation only; refusing to reinterpret another op's intent`);
|
|
67
67
|
const opId = row.op.opId;
|
|
68
|
+
const barrier = endpointRegistrationBarrier(kv, space, { endpoint, instanceId, opId });
|
|
69
|
+
if (row.serviceAuthority)
|
|
70
|
+
await barrier.enumerate();
|
|
68
71
|
// ---- 2. THE GUARD. Affirmative liveness, before anything is mutated.
|
|
69
72
|
const liveness = await opts.probeHolder(row.principal);
|
|
70
73
|
log(`freeze-holder ${row.principal}: ${liveness.state} — ${liveness.detail}`);
|
|
@@ -77,7 +80,6 @@ export async function reconcileEndpointGate(opts) {
|
|
|
77
80
|
// ---- 3. Only now: the shipped composition, in the §13.1 order, over the DEAD op's own id.
|
|
78
81
|
// The repair evicts the family in bounded sets below, so the barrier is built without an evictor
|
|
79
82
|
// (its own default is fail-closed) and is used here for enumerate, revoke and reopen.
|
|
80
|
-
const barrier = endpointRegistrationBarrier(kv, space, { endpoint, instanceId, opId });
|
|
81
83
|
const rows = await barrier.enumerate();
|
|
82
84
|
log(`family: ${rows.length} ledger row(s)`);
|
|
83
85
|
// Deny-new BEFORE kill-live — the precondition eviction's name carries. Revocations are
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"endpoint-reconcile.js","sourceRoot":"","sources":["../src/endpoint-reconcile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,mBAAmB,GACpG,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAmD,MAAM,sBAAsB,CAAC;AACrH,OAAO,EAAE,kCAAkC,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAyBlD,2EAA2E;AAC3E,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAElC;IADX,YACW,SAAiC,EAC1C,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,cAAS,GAAT,SAAS,CAAwB;QAI1C,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAuCD,gEAAgE;AAChE,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAErC;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAY3C;IACC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAEjE,gGAAgG;IAChG,4FAA4F;IAC5F,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK;QACrC,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,uBAAuB,GAAG,6DAA6D,CAAC,CAAC;IACrI,MAAM,GAAG,GAAoB,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC;IAEnC,GAAG,CAAC,QAAQ,GAAG,WAAW,GAAG,CAAC,KAAK,eAAe,GAAG,CAAC,UAAU,iBAAiB,GAAG,CAAC,YAAY,yBAAyB,GAAG,CAAC,oBAAoB,0BAA0B,GAAG,CAAC,qBAAqB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,SAAS,aAAa,WAAW,EAAE,CAAC,CAAC;IAE9R,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ;QACxB,MAAM,IAAI,oBAAoB,CAAC,YAAY,EAAE,eAAe,GAAG,QAAQ,GAAG,CAAC,KAAK,wFAAwF,CAAC,CAAC;IAC5K,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,cAAc;QAChC,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,eAAe,GAAG,uBAAuB,GAAG,CAAC,EAAE,CAAC,IAAI,uIAAuI,CAAC,CAAC;IAC/O,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;
|
|
1
|
+
{"version":3,"file":"endpoint-reconcile.js","sourceRoot":"","sources":["../src/endpoint-reconcile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,mBAAmB,GACpG,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAmD,MAAM,sBAAsB,CAAC;AACrH,OAAO,EAAE,kCAAkC,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAyBlD,2EAA2E;AAC3E,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAElC;IADX,YACW,SAAiC,EAC1C,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,cAAS,GAAT,SAAS,CAAwB;QAI1C,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAuCD,gEAAgE;AAChE,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAErC;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAY3C;IACC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAEjE,gGAAgG;IAChG,4FAA4F;IAC5F,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK;QACrC,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,uBAAuB,GAAG,6DAA6D,CAAC,CAAC;IACrI,MAAM,GAAG,GAAoB,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC;IAEnC,GAAG,CAAC,QAAQ,GAAG,WAAW,GAAG,CAAC,KAAK,eAAe,GAAG,CAAC,UAAU,iBAAiB,GAAG,CAAC,YAAY,yBAAyB,GAAG,CAAC,oBAAoB,0BAA0B,GAAG,CAAC,qBAAqB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,SAAS,aAAa,WAAW,EAAE,CAAC,CAAC;IAE9R,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ;QACxB,MAAM,IAAI,oBAAoB,CAAC,YAAY,EAAE,eAAe,GAAG,QAAQ,GAAG,CAAC,KAAK,wFAAwF,CAAC,CAAC;IAC5K,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,cAAc;QAChC,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,eAAe,GAAG,uBAAuB,GAAG,CAAC,EAAE,CAAC,IAAI,uIAAuI,CAAC,CAAC;IAC/O,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;IACzB,MAAM,OAAO,GAAG,2BAA2B,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACvF,IAAI,GAAG,CAAC,gBAAgB;QAAE,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;IAGpD,uEAAuE;IACvE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACvD,GAAG,CAAC,iBAAiB,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,KAAK,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM;QAC3B,MAAM,IAAI,oBAAoB,CAC5B,cAAc,EACd,sBAAsB,GAAG,CAAC,SAAS,eAAe,QAAQ,CAAC,MAAM,2LAA2L,CAC7P,CAAC;IACJ,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAC9B,MAAM,IAAI,oBAAoB,CAC5B,gBAAgB,EAChB,kCAAkC,GAAG,CAAC,SAAS,iBAAiB,QAAQ,CAAC,MAAM,4JAA4J,CAC5O,CAAC;IACJ,IAAI,QAAQ,CAAC,KAAK,KAAK,iBAAiB;QACtC,MAAM,IAAI,oBAAoB,CAC5B,0BAA0B,EAC1B,+BAA+B,GAAG,CAAC,SAAS,4BAA4B,QAAQ,CAAC,MAAM,oHAAoH,CAC5M,CAAC;IAEJ,4FAA4F;IAC5F,iGAAiG;IACjG,sFAAsF;IAGtF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;IACvC,GAAG,CAAC,WAAW,IAAI,CAAC,MAAM,gBAAgB,CAAC,CAAC;IAC5C,wFAAwF;IACxF,kGAAkG;IAClG,iFAAiF;IACjF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,kBAAkB,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACnH,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAA8B,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QACxF,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;gBAC7B,GAAG,CAAC,aAAa,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC;YAC5D,CAAC;;gBAAM,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,iGAAiG;IACjG,8FAA8F;IAC9F,gGAAgG;IAChG,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxE,IAAI,MAA4B,CAAC;IACjC,IAAI,cAA6B,CAAC;IAClC,IAAI,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACvB,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,GAAG,CAAC,4BAA4B,IAAI,gBAAgB,WAAW,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/H,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC1E,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,cAAc,GAAG,MAAM,wBAAwB,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;QAClG,GAAG,CAAC,6BAA6B,IAAI,gBAAgB,WAAW,YAAY,YAAY,CAAC,MAAM,2BAA2B,CAAC,CAAC;IAC9H,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,4BAA4B,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,YAAY;QAAE,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,iCAAiC,CAAC,EAAE,CAAC,CAAC;IAC5F,iGAAiG;IACjG,kGAAkG;IAClG,mGAAmG;IACnG,gGAAgG;IAChG,UAAU;IACV,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,IAAI,oBAAoB,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,oBAAoB,CAAC,CAAC;QAChE,IAAI,QAAmB,CAAC;QACxB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAClC,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,mBAAmB,KAAK,CAAC,MAAM,YAAY,CAAC,CAAC;QACxG,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,oBAAoB,CAC5B,qBAAqB,EACrB,6BAA6B,KAAK,CAAC,MAAM,kGAAkG,MAAM,CAAC,QAAQ,CAAC,MAAM,eAAe,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,sBAAuB,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CACvR,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAChE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;YAC5B,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3F,cAAc,GAAG,MAAM,wBAAwB,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;YAClG,KAAK,MAAM,CAAC,IAAI,UAAU;gBAAE,GAAG,CAAC,uBAAuB,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QACjH,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAChE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YACvB,MAAM,IAAI,oBAAoB,CAC5B,qBAAqB,EACrB,eAAe,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,0KAA0K,MAAM,CAAC,QAAQ,CAAC,MAAM,eAAe,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,aAAa,CAClU,CAAC;IACN,CAAC;IACD,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;QAC/B,MAAM,IAAI,oBAAoB,CAC5B,qBAAqB,EACrB,aAAa,GAAG,cAAc,gBAAgB,CAAC,MAAM,gDAAgD,CACtG,CAAC;IAEJ,qFAAqF;IACrF,wFAAwF;IACxF,gGAAgG;IAChG,mGAAmG;IACnG,2BAA2B;IAC3B,MAAM,oBAAoB,GAAG,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC;IAChD,IAAI,iBAAiB,GAAG,GAAG,CAAC,YAAY,CAAC;IACzC,IAAI,yBAAyB,GAAG,GAAG,CAAC,oBAAoB,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,kCAAkC,CAAC,SAAS,EAAE;QACnE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW;QAC1C,IAAI,EAAE;YACJ,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY;YAC1D,oBAAoB,EAAE,GAAG,CAAC,oBAAoB,EAAE,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;SACjG;KACF,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvB,iBAAiB,GAAG,QAAQ,CAAC,YAAY,CAAC;QAC1C,yBAAyB,GAAG,QAAQ,CAAC,oBAAoB,CAAC;QAC1D,GAAG,CAAC,yDAAyD,yBAAyB,iBAAiB,iBAAiB,EAAE,CAAC,CAAC;IAC9H,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;YACpE,UAAU,EAAE,oBAAoB;YAChC,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;YAC9C,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;SACjD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ;YACX,MAAM,IAAI,oBAAoB,CAC5B,OAAO,EACP,8BAA8B,GAAG,yHAAyH,CAC3J,CAAC;IACN,CAAC;IAED,6FAA6F;IAC7F,iGAAiG;IACjG,iGAAiG;IACjG,oCAAoC;IACpC,IAAI,mBAAmB,GAA2B,SAAS,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,0BAA0B,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAe,CAAC,CAAC;QAC5E,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,mBAAmB,GAAG,UAAU,CAAC;QACjC,GAAG,CAAC,iEAAkE,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,GAAG,CAAC,UAAU,GAAG,2BAA2B,oBAAoB,kBAAkB,iBAAiB,0BAA0B,yBAAyB,kCAAkC,OAAO,CAAC,MAAM,mCAAmC,OAAO,CAAC,MAAM,uBAAuB,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,oBAAoB,mBAAmB,EAAE,CAAC,CAAC;IACtW,OAAO;QACL,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW;QACvE,MAAM,EAAE;YACN,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY;YAC1D,oBAAoB,EAAE,GAAG,CAAC,oBAAoB,EAAE,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;SACjG;QACD,KAAK,EAAE;YACL,UAAU,EAAE,oBAAoB,EAAE,YAAY,EAAE,iBAAiB;YACjE,oBAAoB,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;SAClG;QACD,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO;QACnD,OAAO,EAAE,YAAY;QACrB,4BAA4B;QAC5B,0BAA0B,EAAE,OAAO;QACnC,gBAAgB;QAChB,mBAAmB;QACnB,oBAAoB;KACrB,CAAC;AACJ,CAAC"}
|
|
@@ -1,16 +1,3 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* The §13.1 endpoint-serve CREDENTIAL LIFECYCLE over a plain KV — the shared core home for the
|
|
3
|
-
* endpoint credential family (`epgate.<endpoint>.<instanceId>` + `epcred.<endpoint>.<instanceId>.
|
|
4
|
-
* <credentialId>`) so BOTH the auth session ledger and the manager's endpoint-serve wiring drive
|
|
5
|
-
* ONE implementation (the manager cannot import implementations/auth, AGENTS.md one-way deps, so
|
|
6
|
-
* the KV binding lives in core — the same guarded-core lift as `lifecycle-saga.ts`).
|
|
7
|
-
*
|
|
8
|
-
* This module is the raw-KV credential-ledger primitives + the endpoint-serve mint fence + the
|
|
9
|
-
* production issuance barrier. It carries NO auth-store branding: a caller supplies the bound KV +
|
|
10
|
-
* space (the auth session ledger unwraps its `SessionAuthStore`; the manager binds its own auth
|
|
11
|
-
* bucket). The KEY GRAMMAR + row parsers stay in `lifecycle-state.ts`; this module is the CAS
|
|
12
|
-
* operations over them.
|
|
13
|
-
*/
|
|
14
1
|
import type { KV } from "@nats-io/kv";
|
|
15
2
|
import { type EndpointGateRow, type EndpointRepairCursor } from "./lifecycle-state.js";
|
|
16
3
|
import type { EpIssuanceGate, EpServeLedgerRow } from "./endpoint-service.js";
|
|
@@ -125,6 +112,10 @@ export declare function endpointRegistrationBarrier(kv: KV, space: string, args:
|
|
|
125
112
|
endpoint: string;
|
|
126
113
|
instanceId: string;
|
|
127
114
|
opId: string;
|
|
115
|
+
serviceRegistration?: {
|
|
116
|
+
requestId: string;
|
|
117
|
+
requestDigest: string;
|
|
118
|
+
};
|
|
128
119
|
evict?: (holderPrincipals: readonly string[]) => Promise<boolean[]> | boolean[];
|
|
129
120
|
}): import("./endpoint-service.js").EpIssuanceBarrier;
|
|
130
121
|
//# sourceMappingURL=endpoint-serve-kv.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"endpoint-serve-kv.d.ts","sourceRoot":"","sources":["../src/endpoint-serve-kv.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"endpoint-serve-kv.d.ts","sourceRoot":"","sources":["../src/endpoint-serve-kv.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAItC,OAAO,EAAoJ,KAAK,eAAe,EAAE,KAAK,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACzO,OAAO,KAAK,EAAe,cAAc,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAK3F;;;yFAGyF;AACzF,wBAAsB,uBAAuB,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhG;AAED;;sFAEsF;AACtF,wBAAsB,oBAAoB,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,iBAAiB,CAAC,CAkBtG;AAsBD;;;;;;;;;;;gFAWgF;AAChF,wBAAsB,0BAA0B,CAC9C,EAAE,EAAE,EAAE,EACN,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC7C,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED;;;;;;;yFAOyF;AACzF,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,cAAc,CAwEzH;AAED;;;;;;;;;;;;;;;;;;;;;;;qBAuBqB;AACrB,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,OAAO,uBAAuB,EAAE,cAAc,EACpD,QAAQ,EAAE,OAAO,uBAAuB,EAAE,WAAW,EACrD,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,IAAI,CAAC,CA8Df;AAED,wBAAsB,wBAAwB,CAC5C,EAAE,EAAE,EAAE,EACN,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;IAAE,MAAM,EAAE,oBAAoB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAKpE;AAED;0GAC0G;AAC1G,wBAAsB,wBAAwB,CAC5C,EAAE,EAAE,EAAE,EACN,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,oBAAoB,EAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAC9B,OAAO,CAAC,MAAM,CAAC,CAuBjB;AAED;6FAC6F;AAC7F,wBAAsB,0BAA0B,CAC9C,EAAE,EAAE,EAAE,EACN,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC,CASf;AAED,4FAA4F;AAC5F,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACzE,OAAO,CAMT;AAED;;;;;;gCAMgC;AAChC,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,EAAE,EACN,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,eAAe,CAAC,iBAAiB,CAAC,CAAA;CAAE,GACtH,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;;;;;;;;;;;;mGAemG;AACnG,wBAAgB,2BAA2B,CACzC,EAAE,EAAE,EAAE,EACN,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IACzD,mBAAmB,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,KAAK,CAAC,EAAE,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,CAAA;CAAE,GAClF,OAAO,uBAAuB,EAAE,iBAAiB,CA+HnD"}
|