@embassys/ambassador 0.0.0 → 0.2.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (85) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +68 -2
  3. package/dist/agent-capabilities.d.ts +35 -0
  4. package/dist/agent-capabilities.js +221 -0
  5. package/dist/agent-capabilities.js.map +1 -0
  6. package/dist/ambassador-options.d.ts +9 -0
  7. package/dist/ambassador-options.js +31 -0
  8. package/dist/ambassador-options.js.map +1 -0
  9. package/dist/central-credential.d.ts +41 -0
  10. package/dist/central-credential.js +355 -0
  11. package/dist/central-credential.js.map +1 -0
  12. package/dist/central-enrollment.d.ts +31 -0
  13. package/dist/central-enrollment.js +278 -0
  14. package/dist/central-enrollment.js.map +1 -0
  15. package/dist/central-json.d.ts +8 -0
  16. package/dist/central-json.js +259 -0
  17. package/dist/central-json.js.map +1 -0
  18. package/dist/central-protected-transport.d.ts +21 -0
  19. package/dist/central-protected-transport.js +217 -0
  20. package/dist/central-protected-transport.js.map +1 -0
  21. package/dist/central-rest.d.ts +50 -0
  22. package/dist/central-rest.js +401 -0
  23. package/dist/central-rest.js.map +1 -0
  24. package/dist/cli.d.ts +26 -0
  25. package/dist/cli.js +131 -0
  26. package/dist/cli.js.map +1 -0
  27. package/dist/credential-store.d.ts +18 -0
  28. package/dist/credential-store.js +517 -0
  29. package/dist/credential-store.js.map +1 -0
  30. package/dist/delivery-profile.d.ts +43 -0
  31. package/dist/delivery-profile.js +253 -0
  32. package/dist/delivery-profile.js.map +1 -0
  33. package/dist/direct-delivery.d.ts +38 -0
  34. package/dist/direct-delivery.js +315 -0
  35. package/dist/direct-delivery.js.map +1 -0
  36. package/dist/dpop.d.ts +28 -0
  37. package/dist/dpop.js +119 -0
  38. package/dist/dpop.js.map +1 -0
  39. package/dist/errors.d.ts +5 -0
  40. package/dist/errors.js +11 -0
  41. package/dist/errors.js.map +1 -0
  42. package/dist/gateway-application.d.ts +32 -0
  43. package/dist/gateway-application.js +256 -0
  44. package/dist/gateway-application.js.map +1 -0
  45. package/dist/gateway-paths.d.ts +10 -0
  46. package/dist/gateway-paths.js +28 -0
  47. package/dist/gateway-paths.js.map +1 -0
  48. package/dist/guided-registration.d.ts +23 -0
  49. package/dist/guided-registration.js +117 -0
  50. package/dist/guided-registration.js.map +1 -0
  51. package/dist/identity.d.ts +20 -0
  52. package/dist/identity.js +54 -0
  53. package/dist/identity.js.map +1 -0
  54. package/dist/local-mcp.d.ts +28 -0
  55. package/dist/local-mcp.js +420 -0
  56. package/dist/local-mcp.js.map +1 -0
  57. package/dist/local-tool-result.d.ts +4 -0
  58. package/dist/local-tool-result.js +17 -0
  59. package/dist/local-tool-result.js.map +1 -0
  60. package/dist/mcp-contract.d.ts +10 -0
  61. package/dist/mcp-contract.js +63 -0
  62. package/dist/mcp-contract.js.map +1 -0
  63. package/dist/notification-journal.d.ts +24 -0
  64. package/dist/notification-journal.js +194 -0
  65. package/dist/notification-journal.js.map +1 -0
  66. package/dist/notification-relay.d.ts +31 -0
  67. package/dist/notification-relay.js +203 -0
  68. package/dist/notification-relay.js.map +1 -0
  69. package/dist/process-lock.d.ts +8 -0
  70. package/dist/process-lock.js +122 -0
  71. package/dist/process-lock.js.map +1 -0
  72. package/dist/sqlite-artifact.d.ts +7 -0
  73. package/dist/sqlite-artifact.js +121 -0
  74. package/dist/sqlite-artifact.js.map +1 -0
  75. package/dist/webhook-delivery.d.ts +23 -0
  76. package/dist/webhook-delivery.js +122 -0
  77. package/dist/webhook-delivery.js.map +1 -0
  78. package/docs/getting-started-claude.md +94 -0
  79. package/docs/getting-started-codex.md +103 -0
  80. package/docs/getting-started-gemini.md +87 -0
  81. package/docs/getting-started-hermes.md +84 -0
  82. package/docs/getting-started-openclaw.md +83 -0
  83. package/docs/live-qualification.md +174 -0
  84. package/package.json +48 -7
  85. package/index.js +0 -1
@@ -0,0 +1 @@
1
+ {"version":3,"file":"central-enrollment.js","sourceRoot":"","sources":["../src/central-enrollment.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,6BAA6B,EAC7B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,+BAA+B,EAC/B,gBAAgB,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAGpD,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,MAAM,KAAK,GAAG,yBAAyB,CAAC;AACxC,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,QAAQ,GAAG,2BAA2B,CAAC;AAW7C,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC1B,IAAI;IAAzB,YAAqB,IAAgC;QACnD,KAAK,CAAC,2BAA2B,CAAC,CAAC;oBADhB,IAAI;QAEvB,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAoBD,SAAS,MAAM,CACb,UAAmC,EACnC,QAA2B;IAE3B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;AAC9F,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAqC;IACpE;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,sDAAsD;QACnE,WAAW,EAAE,MAAM,CACjB;YACE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;YACvD,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;YAC9D,QAAQ,EAAE;gBACR,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;wBACzC,QAAQ,EAAE,CAAC,MAAM,CAAC;wBAClB,oBAAoB,EAAE,KAAK;qBAC5B;oBACD;wBACE,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;4BAC1B,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;4BACvD,UAAU,EAAE;gCACV,IAAI,EAAE,QAAQ;gCACd,OAAO,EAAE,0BAA0B;6BACpC;yBACF;wBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC;wBACvC,oBAAoB,EAAE,KAAK;qBAC5B;iBACF;aACF;SACF,EACD,CAAC,OAAO,CAAC,CACV;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,yDAAyD;QACtE,WAAW,EAAE,MAAM,CACjB;YACE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;YACvD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;SAChD,EACD,CAAC,OAAO,EAAE,MAAM,CAAC,CAClB;KACF;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,+DAA+D;QAC5E,WAAW,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;KAC5F;CACO,CAAC;AAEX,SAAS,OAAO,CAAC,IAAgC;IAC/C,OAAO,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7E,IACE,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,CAAC;QAC5E,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,KAAK,GAAG;QACvB,MAAM,CAAC,MAAM,KAAK,EAAE;QACpB,MAAM,CAAC,IAAI,KAAK,EAAE,EAClB,CAAC;QACD,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAChB,KAAc,EACd,QAA2B,EAC3B,QAAQ,GAAsB,EAAE;IAEhC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,OAAe;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;QAC5E,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,OAAgB;IAC/B,OAAO,CACL,OAAO;SACJ,GAAG,CAAC,eAAe,CAAC;QACrB,EAAE,KAAK,CAAC,GAAG,CAAC;SACX,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,KAAK,IAAI,CAC/E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,QAAkB;IACtC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,OAAO,uBAAuB;IACzB,OAAO,CAAM;IACb,MAAM,CAAe;IACrB,WAAW,CAAS;IACpB,eAAe,CAAwC;IACvD,WAAW,CAAe;IAEnC,YAAY,OAAuC;QACjD,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAC7D,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,IAAI,WAAW,CAAC,OAAO,CAAC;QACrE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YACpE,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,UAAmB,EAAE,MAAoB;QACtD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACxD,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,WAAW,GACf,UAAU,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC/F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,qBAAqB,EACrB,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,EAAE,EAC5F,MAAM,CACP,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7C,IACE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YACpD,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACnC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC/B,MAAM,CAAC,KAAK,KAAK,YAAY;YAC7B,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YACzB,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,EAC3B,CAAC;YACD,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAmB,EAAE,MAAoB;QACpD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACtC,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,0BAA0B,EAC1B,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,EAClC,MAAM,CACP,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7C,IACE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/B,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YACzB,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,EAC3B,CAAC;YACD,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAmB,EAAE,MAAoB;QACpD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC9C,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvE,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,GAAG,GAAG,uBAAuB,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,mBAAmB,EACnB,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,EAClE,MAAM,CACP,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACrF,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,OAAO,CAAC,sCAAsC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,CAAC,sCAAsC,CAAC,CAAC;QACxD,CAAC;QACD,IACE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACtE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACnC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC/B,MAAM,CAAC,KAAK,KAAK,YAAY;YAC7B,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAChC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,UAAU,CAAC,EAC3D,CAAC;YACD,MAAM,OAAO,CAAC,yCAAyC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,UAAmC,CAAC;QACxC,IAAI,CAAC;YACH,UAAU,GAAG,6BAA6B,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,sBAAsB,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACpE,IACE,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,QAAQ;gBACxC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,YAAY;gBACnC,MAAM,CAAC,aAAa,KAAK,GAAG,CAAC,UAAU,EACvC,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,CAAC;YACD,+BAA+B,CAAC;gBAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,CAAC,yCAAyC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO;YACL,UAAU;YACV,WAAW,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,KAAK,EAAE,YAAY;gBACnB,OAAO,EAAE,8BAA8B;aACxC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CACT,IAAY,EACZ,IAA6B,EAC7B,MAAoB;QAEpB,IAAI,QAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;gBACpD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,iBAAiB,EAAE,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC9E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,WAAW,EAAE,MAAM;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,aAAa;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,CAAC,sCAAsC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAkB;QAC/B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACxC,CAAC;QACD,IACE,CAAC,QAAQ,CAAC,EAAE;YACZ,QAAQ,CAAC,MAAM,GAAG,GAAG;YACrB,QAAQ,CAAC,MAAM,IAAI,GAAG;YACtB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAClC,CAAC;YACD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,eAAe,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gBAAgB;gBAAE,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;YAC3F,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;CACF"}
@@ -0,0 +1,8 @@
1
+ export declare const CENTRAL_RESPONSE_MAX_BYTES: number;
2
+ export declare class CentralJsonError extends Error {
3
+ constructor();
4
+ }
5
+ export declare function isCentralRecord(value: unknown): value is Record<string, unknown>;
6
+ export declare function parseStrictCentralJson(text: string): unknown;
7
+ export declare function readCentralJson(response: Response, maximumBytes?: number): Promise<unknown>;
8
+ export declare function assertNoCentralCredentialFields(value: unknown): void;
@@ -0,0 +1,259 @@
1
+ import { TextDecoder } from "node:util";
2
+ export const CENTRAL_RESPONSE_MAX_BYTES = 4 * 1024 * 1024;
3
+ const MAX_DEPTH = 100;
4
+ const MAX_STRUCTURAL_TOKENS = 16_384;
5
+ const JSON_MEDIA_TYPE = /^application\/json(?:\s*;\s*charset=utf-8)?$/iu;
6
+ const CREDENTIAL_FIELDS = new Set([
7
+ "access_token",
8
+ "authorization",
9
+ "dpop",
10
+ "dpop_proof",
11
+ "jwt",
12
+ "private_key",
13
+ "proof",
14
+ "token",
15
+ ]);
16
+ export class CentralJsonError extends Error {
17
+ constructor() {
18
+ super("The central JSON value is invalid");
19
+ this.name = "CentralJsonError";
20
+ }
21
+ }
22
+ function invalid() {
23
+ throw new CentralJsonError();
24
+ }
25
+ export function isCentralRecord(value) {
26
+ return value !== null && typeof value === "object" && !Array.isArray(value);
27
+ }
28
+ class Parser {
29
+ text;
30
+ #index = 0;
31
+ #tokens = 0;
32
+ constructor(text) {
33
+ this.text = text;
34
+ }
35
+ parse() {
36
+ const value = this.#value(0);
37
+ this.#whitespace();
38
+ if (this.#index !== this.text.length)
39
+ invalid();
40
+ return value;
41
+ }
42
+ #value(depth) {
43
+ if (depth > MAX_DEPTH)
44
+ invalid();
45
+ this.#whitespace();
46
+ const character = this.text[this.#index];
47
+ if (character === "{")
48
+ return this.#object(depth + 1);
49
+ if (character === "[")
50
+ return this.#array(depth + 1);
51
+ if (character === '"')
52
+ return this.#string();
53
+ if (this.text.startsWith("true", this.#index)) {
54
+ this.#index += 4;
55
+ return true;
56
+ }
57
+ if (this.text.startsWith("false", this.#index)) {
58
+ this.#index += 5;
59
+ return false;
60
+ }
61
+ if (this.text.startsWith("null", this.#index)) {
62
+ this.#index += 4;
63
+ return null;
64
+ }
65
+ return this.#number();
66
+ }
67
+ #object(depth) {
68
+ this.#container();
69
+ this.#index += 1;
70
+ this.#whitespace();
71
+ const result = {};
72
+ const names = new Set();
73
+ if (this.text[this.#index] === "}") {
74
+ this.#index += 1;
75
+ return result;
76
+ }
77
+ while (true) {
78
+ if (this.text[this.#index] !== '"')
79
+ invalid();
80
+ const name = this.#string();
81
+ if (names.has(name))
82
+ invalid();
83
+ names.add(name);
84
+ this.#whitespace();
85
+ if (this.text[this.#index] !== ":")
86
+ invalid();
87
+ this.#index += 1;
88
+ result[name] = this.#value(depth);
89
+ this.#whitespace();
90
+ const separator = this.text[this.#index];
91
+ if (separator === "}") {
92
+ this.#index += 1;
93
+ return result;
94
+ }
95
+ if (separator !== ",")
96
+ invalid();
97
+ this.#index += 1;
98
+ }
99
+ }
100
+ #array(depth) {
101
+ this.#container();
102
+ this.#index += 1;
103
+ this.#whitespace();
104
+ const result = [];
105
+ if (this.text[this.#index] === "]") {
106
+ this.#index += 1;
107
+ return result;
108
+ }
109
+ while (true) {
110
+ result.push(this.#value(depth));
111
+ this.#whitespace();
112
+ const separator = this.text[this.#index];
113
+ if (separator === "]") {
114
+ this.#index += 1;
115
+ return result;
116
+ }
117
+ if (separator !== ",")
118
+ invalid();
119
+ this.#index += 1;
120
+ }
121
+ }
122
+ #container() {
123
+ this.#tokens += 1;
124
+ if (this.#tokens > MAX_STRUCTURAL_TOKENS)
125
+ invalid();
126
+ }
127
+ #string() {
128
+ const start = this.#index;
129
+ this.#index += 1;
130
+ let escaped = false;
131
+ while (this.#index < this.text.length) {
132
+ const character = this.text[this.#index];
133
+ this.#index += 1;
134
+ if (escaped) {
135
+ escaped = false;
136
+ continue;
137
+ }
138
+ if (character === "\\") {
139
+ escaped = true;
140
+ continue;
141
+ }
142
+ if (character === '"') {
143
+ let value;
144
+ try {
145
+ value = JSON.parse(this.text.slice(start, this.#index));
146
+ }
147
+ catch {
148
+ return invalid();
149
+ }
150
+ if (typeof value !== "string" || hasLoneSurrogate(value))
151
+ invalid();
152
+ return value;
153
+ }
154
+ if (character !== undefined && character.charCodeAt(0) < 0x20)
155
+ invalid();
156
+ }
157
+ return invalid();
158
+ }
159
+ #number() {
160
+ const pattern = /-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/uy;
161
+ pattern.lastIndex = this.#index;
162
+ const match = pattern.exec(this.text);
163
+ if (match === null)
164
+ invalid();
165
+ this.#index = pattern.lastIndex;
166
+ const value = Number(match[0]);
167
+ if (!Number.isFinite(value))
168
+ invalid();
169
+ return value;
170
+ }
171
+ #whitespace() {
172
+ while ([9, 10, 13, 32].includes(this.text.charCodeAt(this.#index)))
173
+ this.#index += 1;
174
+ }
175
+ }
176
+ function hasLoneSurrogate(value) {
177
+ for (let index = 0; index < value.length; index += 1) {
178
+ const code = value.charCodeAt(index);
179
+ if (code >= 0xd800 && code <= 0xdbff) {
180
+ const next = value.charCodeAt(index + 1);
181
+ if (next < 0xdc00 || next > 0xdfff)
182
+ return true;
183
+ index += 1;
184
+ }
185
+ else if (code >= 0xdc00 && code <= 0xdfff)
186
+ return true;
187
+ }
188
+ return false;
189
+ }
190
+ export function parseStrictCentralJson(text) {
191
+ return new Parser(text).parse();
192
+ }
193
+ async function readBoundedBytes(response, maximumBytes) {
194
+ const declared = response.headers.get("content-length");
195
+ if (declared !== null && /^\d+$/u.test(declared) && Number(declared) > maximumBytes)
196
+ invalid();
197
+ if (response.body === null)
198
+ return new Uint8Array();
199
+ const reader = response.body.getReader();
200
+ const chunks = [];
201
+ let total = 0;
202
+ try {
203
+ while (true) {
204
+ const item = await reader.read();
205
+ if (item.done)
206
+ break;
207
+ total += item.value.byteLength;
208
+ if (total > maximumBytes) {
209
+ await reader.cancel().catch(() => undefined);
210
+ invalid();
211
+ }
212
+ chunks.push(item.value);
213
+ }
214
+ }
215
+ catch (error) {
216
+ if (error instanceof CentralJsonError)
217
+ throw error;
218
+ return invalid();
219
+ }
220
+ const bytes = new Uint8Array(total);
221
+ let offset = 0;
222
+ for (const chunk of chunks) {
223
+ bytes.set(chunk, offset);
224
+ offset += chunk.byteLength;
225
+ }
226
+ return bytes;
227
+ }
228
+ export async function readCentralJson(response, maximumBytes = CENTRAL_RESPONSE_MAX_BYTES) {
229
+ if (!Number.isSafeInteger(maximumBytes) ||
230
+ maximumBytes < 1 ||
231
+ !JSON_MEDIA_TYPE.test(response.headers.get("content-type") ?? "") ||
232
+ response.headers.has("content-encoding")) {
233
+ invalid();
234
+ }
235
+ const bytes = await readBoundedBytes(response, maximumBytes);
236
+ let text;
237
+ try {
238
+ text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
239
+ }
240
+ catch {
241
+ return invalid();
242
+ }
243
+ return parseStrictCentralJson(text);
244
+ }
245
+ export function assertNoCentralCredentialFields(value) {
246
+ if (Array.isArray(value)) {
247
+ for (const item of value)
248
+ assertNoCentralCredentialFields(item);
249
+ return;
250
+ }
251
+ if (!isCentralRecord(value))
252
+ return;
253
+ for (const [name, nested] of Object.entries(value)) {
254
+ if (CREDENTIAL_FIELDS.has(name.toLowerCase()))
255
+ invalid();
256
+ assertNoCentralCredentialFields(nested);
257
+ }
258
+ }
259
+ //# sourceMappingURL=central-json.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"central-json.js","sourceRoot":"","sources":["../src/central-json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1D,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,eAAe,GAAG,gDAAgD,CAAC;AACzE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,cAAc;IACd,eAAe;IACf,MAAM;IACN,YAAY;IACZ,KAAK;IACL,aAAa;IACb,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC;QACE,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,SAAS,OAAO;IACd,MAAM,IAAI,gBAAgB,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,MAAM;IAImB,IAAI;IAHjC,MAAM,GAAG,CAAC,CAAC;IACX,OAAO,GAAG,CAAC,CAAC;IAEZ,YAA6B,IAAY;oBAAZ,IAAI;IAAW,CAAC;IAE7C,KAAK;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,IAAI,KAAK,GAAG,SAAS;YAAE,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,SAAS,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACtD,IAAI,SAAS,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,SAAS,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG;gBAAE,OAAO,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC/B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChB,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG;gBAAE,OAAO,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;gBACjB,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,SAAS,KAAK,GAAG;gBAAE,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;gBACjB,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,SAAS,KAAK,GAAG;gBAAE,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,UAAU;QACR,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClB,IAAI,IAAI,CAAC,OAAO,GAAG,qBAAqB;YAAE,OAAO,EAAE,CAAC;IACtD,CAAC;IAED,OAAO;QACL,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,GAAG,KAAK,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS;YACX,CAAC;YACD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBACtB,IAAI,KAAc,CAAC;gBACnB,IAAI,CAAC;oBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC1D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,OAAO,EAAE,CAAC;gBACnB,CAAC;gBACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAC;gBACpE,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI;gBAAE,OAAO,EAAE,CAAC;QAC3E,CAAC;QACD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IAED,OAAO;QACL,MAAM,OAAO,GAAG,wDAAwD,CAAC;QACzE,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;QAChC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,WAAW;QACT,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAE,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IACvF,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,IAAI,GAAG,MAAM,IAAI,IAAI,GAAG,MAAM;gBAAE,OAAO,IAAI,CAAC;YAChD,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAkB,EAAE,YAAoB;IACtE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY;QAAE,OAAO,EAAE,CAAC;IAC/F,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,UAAU,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;gBACzB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC7C,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB;YAAE,MAAM,KAAK,CAAC;QACnD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAkB,EAClB,YAAY,GAAG,0BAA0B;IAEzC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC;QACnC,YAAY,GAAG,CAAC;QAChB,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACjE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EACxC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC7D,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAAc;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,+BAA+B,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO;IACpC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;QACzD,+BAA+B,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC"}
@@ -0,0 +1,21 @@
1
+ import type { LoadedCentralCredential } from "./central-credential.js";
2
+ import { DpopNonceCache } from "./dpop.js";
3
+ export type CentralProtectedTransportErrorCode = "central_dpop_challenge_failed" | "central_dpop_nonce_retry_exhausted" | "central_protected_authentication_failed" | "central_protected_credential_expired" | "central_protected_redirect_rejected" | "central_protected_request_failed" | "central_protected_request_invalid";
4
+ export declare class CentralProtectedTransportError extends Error {
5
+ readonly code: CentralProtectedTransportErrorCode;
6
+ constructor(code: CentralProtectedTransportErrorCode);
7
+ }
8
+ export interface CentralProtectedTransportOptions {
9
+ readonly credential: () => LoadedCentralCredential;
10
+ readonly nonceCache?: DpopNonceCache;
11
+ readonly fetch?: typeof fetch;
12
+ readonly deadlineMs?: number;
13
+ readonly deadlineSignal?: (milliseconds: number) => AbortSignal;
14
+ readonly now?: () => number;
15
+ readonly uuid?: () => string;
16
+ }
17
+ export declare class CentralProtectedTransport {
18
+ #private;
19
+ constructor(options: CentralProtectedTransportOptions);
20
+ fetch(url: string | URL, init?: RequestInit): Promise<Response>;
21
+ }
@@ -0,0 +1,217 @@
1
+ import { createDpopProof, DpopError, DpopNonceCache, parseDpopNonce } from "./dpop.js";
2
+ const DEFAULT_DEADLINE_MS = 30_000;
3
+ const TOKEN = /^[\x21-\x7e]{1,4096}$/u;
4
+ const METHOD = /^[A-Z]+$/u;
5
+ const MAX_HEADER_BYTES = 16 * 1024;
6
+ const MAX_PROOF_BYTES = 4_096;
7
+ const MESSAGES = {
8
+ central_dpop_challenge_failed: "The central DPoP challenge is invalid",
9
+ central_dpop_nonce_retry_exhausted: "The central DPoP nonce retry was exhausted",
10
+ central_protected_authentication_failed: "Central authentication failed",
11
+ central_protected_credential_expired: "The central credential has expired",
12
+ central_protected_redirect_rejected: "The central redirect was rejected",
13
+ central_protected_request_failed: "The central request failed; its outcome may be uncertain",
14
+ central_protected_request_invalid: "The central request is invalid",
15
+ };
16
+ export class CentralProtectedTransportError extends Error {
17
+ code;
18
+ constructor(code) {
19
+ super(MESSAGES[code]);
20
+ this.code = code;
21
+ this.name = "CentralProtectedTransportError";
22
+ }
23
+ }
24
+ function failure(code) {
25
+ return new CentralProtectedTransportError(code);
26
+ }
27
+ function requestTarget(value) {
28
+ let target;
29
+ try {
30
+ target = new URL(value);
31
+ }
32
+ catch {
33
+ throw failure("central_protected_request_invalid");
34
+ }
35
+ if ((target.protocol !== "https:" && target.protocol !== "http:") ||
36
+ target.username !== "" ||
37
+ target.password !== "" ||
38
+ target.hash !== "") {
39
+ throw failure("central_protected_request_invalid");
40
+ }
41
+ return target;
42
+ }
43
+ function requestMethod(value) {
44
+ const method = (value ?? "GET").toUpperCase();
45
+ if (!METHOD.test(method))
46
+ throw failure("central_protected_request_invalid");
47
+ return method;
48
+ }
49
+ function requestHeaders(value) {
50
+ let headers;
51
+ try {
52
+ headers = new Headers(value);
53
+ }
54
+ catch {
55
+ throw failure("central_protected_request_invalid");
56
+ }
57
+ if (headers.has("authorization") || headers.has("dpop") || headers.has("cookie")) {
58
+ throw failure("central_protected_request_invalid");
59
+ }
60
+ return headers;
61
+ }
62
+ function headerBytes(headers) {
63
+ let total = 2;
64
+ for (const [name, value] of headers) {
65
+ total += Buffer.byteLength(name, "utf8") + Buffer.byteLength(value, "utf8") + 4;
66
+ }
67
+ return total;
68
+ }
69
+ function isUnrepeatableBody(body) {
70
+ if (body instanceof ReadableStream)
71
+ return true;
72
+ return body !== null && typeof body === "object" && Symbol.asyncIterator in body;
73
+ }
74
+ function isRedirect(response) {
75
+ return response.status >= 300 && response.status < 400;
76
+ }
77
+ async function cancel(response) {
78
+ await response.body?.cancel().catch(() => undefined);
79
+ }
80
+ function validCredential(value) {
81
+ return (value !== null &&
82
+ typeof value === "object" &&
83
+ value.record?.credential_format === 1 &&
84
+ typeof value.record.access_token === "string" &&
85
+ TOKEN.test(value.record.access_token) &&
86
+ value.privateKey?.asymmetricKeyType === "ec" &&
87
+ value.privateKey.asymmetricKeyDetails?.namedCurve === "prime256v1" &&
88
+ Number.isSafeInteger(value.token?.expiresAt));
89
+ }
90
+ export class CentralProtectedTransport {
91
+ #credential;
92
+ #nonceCache;
93
+ #fetchImplementation;
94
+ #deadlineMs;
95
+ #deadlineSignal;
96
+ #now;
97
+ #uuid;
98
+ constructor(options) {
99
+ this.#credential = options.credential;
100
+ this.#nonceCache = options.nonceCache ?? new DpopNonceCache();
101
+ this.#fetchImplementation = options.fetch ?? globalThis.fetch;
102
+ this.#deadlineMs = options.deadlineMs ?? DEFAULT_DEADLINE_MS;
103
+ this.#deadlineSignal = options.deadlineSignal ?? AbortSignal.timeout;
104
+ this.#now = options.now ?? (() => Date.now() / 1_000);
105
+ this.#uuid = options.uuid;
106
+ if (!Number.isSafeInteger(this.#deadlineMs) || this.#deadlineMs < 1) {
107
+ throw failure("central_protected_request_invalid");
108
+ }
109
+ }
110
+ async fetch(url, init = {}) {
111
+ const target = requestTarget(url);
112
+ const method = requestMethod(init.method);
113
+ if (isUnrepeatableBody(init.body) ||
114
+ (init.credentials !== undefined && init.credentials !== "omit")) {
115
+ throw failure("central_protected_request_invalid");
116
+ }
117
+ const baseHeaders = requestHeaders(init.headers);
118
+ let credential;
119
+ try {
120
+ credential = this.#credential();
121
+ }
122
+ catch {
123
+ throw failure("central_protected_request_invalid");
124
+ }
125
+ if (!validCredential(credential))
126
+ throw failure("central_protected_request_invalid");
127
+ const origin = target.origin;
128
+ for (let attempt = 0; attempt < 2; attempt += 1) {
129
+ const now = Math.floor(this.#now());
130
+ if (!Number.isSafeInteger(now) || now < 0) {
131
+ throw failure("central_protected_request_invalid");
132
+ }
133
+ if (credential.token.expiresAt <= now) {
134
+ throw failure("central_protected_credential_expired");
135
+ }
136
+ const nonce = this.#nonceCache.get(origin);
137
+ let proof;
138
+ try {
139
+ proof = createDpopProof({
140
+ method,
141
+ targetUri: target.href,
142
+ privateKey: credential.privateKey,
143
+ publicJwk: credential.publicJwk,
144
+ accessToken: credential.record.access_token,
145
+ now: () => now,
146
+ ...(this.#uuid === undefined ? {} : { uuid: this.#uuid }),
147
+ ...(nonce === undefined ? {} : { nonce }),
148
+ });
149
+ }
150
+ catch (error) {
151
+ if (error instanceof DpopError)
152
+ throw failure("central_protected_request_invalid");
153
+ throw failure("central_protected_request_invalid");
154
+ }
155
+ if (Buffer.byteLength(proof, "ascii") > MAX_PROOF_BYTES) {
156
+ throw failure("central_protected_request_invalid");
157
+ }
158
+ const headers = new Headers(baseHeaders);
159
+ headers.set("accept-encoding", "identity");
160
+ headers.set("authorization", `Bearer ${credential.record.access_token}`);
161
+ headers.set("dpop", proof);
162
+ if (headerBytes(headers) > MAX_HEADER_BYTES) {
163
+ throw failure("central_protected_request_invalid");
164
+ }
165
+ let deadline;
166
+ try {
167
+ deadline = this.#deadlineSignal(this.#deadlineMs);
168
+ }
169
+ catch {
170
+ throw failure("central_protected_request_invalid");
171
+ }
172
+ const signal = init.signal === undefined || init.signal === null
173
+ ? deadline
174
+ : AbortSignal.any([init.signal, deadline]);
175
+ let response;
176
+ try {
177
+ response = await this.#fetchImplementation(target, {
178
+ ...init,
179
+ method,
180
+ headers,
181
+ credentials: "omit",
182
+ redirect: "manual",
183
+ signal,
184
+ });
185
+ }
186
+ catch {
187
+ throw failure("central_protected_request_failed");
188
+ }
189
+ if (isRedirect(response)) {
190
+ await cancel(response);
191
+ throw failure("central_protected_redirect_rejected");
192
+ }
193
+ if (response.status !== 401)
194
+ return response;
195
+ const challenge = response.headers.get("dpop-nonce");
196
+ if (challenge === null) {
197
+ await cancel(response);
198
+ throw failure("central_protected_authentication_failed");
199
+ }
200
+ let parsed;
201
+ try {
202
+ parsed = parseDpopNonce(challenge);
203
+ }
204
+ catch {
205
+ await cancel(response);
206
+ throw failure("central_dpop_challenge_failed");
207
+ }
208
+ await cancel(response);
209
+ if (attempt !== 0 || parsed === nonce) {
210
+ throw failure("central_dpop_nonce_retry_exhausted");
211
+ }
212
+ this.#nonceCache.set(origin, parsed);
213
+ }
214
+ throw failure("central_dpop_nonce_retry_exhausted");
215
+ }
216
+ }
217
+ //# sourceMappingURL=central-protected-transport.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"central-protected-transport.js","sourceRoot":"","sources":["../src/central-protected-transport.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEvF,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,KAAK,GAAG,wBAAwB,CAAC;AACvC,MAAM,MAAM,GAAG,WAAW,CAAC;AAC3B,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,eAAe,GAAG,KAAK,CAAC;AAW9B,MAAM,QAAQ,GAAiE;IAC7E,6BAA6B,EAAE,uCAAuC;IACtE,kCAAkC,EAAE,4CAA4C;IAChF,uCAAuC,EAAE,+BAA+B;IACxE,oCAAoC,EAAE,oCAAoC;IAC1E,mCAAmC,EAAE,mCAAmC;IACxE,gCAAgC,EAAE,0DAA0D;IAC5F,iCAAiC,EAAE,gCAAgC;CACpE,CAAC;AAEF,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAClC,IAAI;IAAzB,YAAqB,IAAwC;QAC3D,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;oBADH,IAAI;QAEvB,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AAYD,SAAS,OAAO,CAAC,IAAwC;IACvD,OAAO,IAAI,8BAA8B,CAAC,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,KAAmB;IACxC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACrD,CAAC;IACD,IACE,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC7D,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,IAAI,KAAK,EAAE,EAClB,CAAC;QACD,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAC7E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,KAA6B;IACnD,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB;IACnC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAyB;IACnD,IAAI,IAAI,YAAY,cAAc;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC;AACnF,CAAC;AAED,SAAS,UAAU,CAAC,QAAkB;IACpC,OAAO,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,QAAkB;IACtC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,eAAe,CAAC,KAA8B;IACrD,OAAO,CACL,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,EAAE,iBAAiB,KAAK,CAAC;QACrC,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,KAAK,QAAQ;QAC7C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;QACrC,KAAK,CAAC,UAAU,EAAE,iBAAiB,KAAK,IAAI;QAC5C,KAAK,CAAC,UAAU,CAAC,oBAAoB,EAAE,UAAU,KAAK,YAAY;QAClE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,yBAAyB;IAC3B,WAAW,CAAgC;IAC3C,WAAW,CAAiB;IAC5B,oBAAoB,CAAe;IACnC,WAAW,CAAS;IACpB,eAAe,CAAwC;IACvD,IAAI,CAAe;IACnB,KAAK,CAA6B;IAE3C,YAAY,OAAyC;QACnD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,cAAc,EAAE,CAAC;QAC9D,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAC9D,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAC7D,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,IAAI,WAAW,CAAC,OAAO,CAAC;QACrE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YACpE,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAiB,EAAE,IAAI,GAAgB,EAAE;QACnD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,IACE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC7B,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,CAAC,EAC/D,CAAC;YACD,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,UAAmC,CAAC;QACxC,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;YAAE,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAE7B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBAC1C,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,UAAU,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;gBACtC,MAAM,OAAO,CAAC,sCAAsC,CAAC,CAAC;YACxD,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACH,KAAK,GAAG,eAAe,CAAC;oBACtB,MAAM;oBACN,SAAS,EAAE,MAAM,CAAC,IAAI;oBACtB,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,YAAY;oBAC3C,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;oBACd,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;oBACzD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;iBAC1C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,SAAS;oBAAE,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;gBACnF,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,eAAe,EAAE,CAAC;gBACxD,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3B,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,gBAAgB,EAAE,CAAC;gBAC5C,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,QAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;gBAC/C,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC/C,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE;oBACjD,GAAG,IAAI;oBACP,MAAM;oBACN,OAAO;oBACP,WAAW,EAAE,MAAM;oBACnB,QAAQ,EAAE,QAAQ;oBAClB,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACvB,MAAM,OAAO,CAAC,qCAAqC,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,QAAQ,CAAC;YAE7C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACrD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACvB,MAAM,OAAO,CAAC,yCAAyC,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,cAAc,CAAC,SAAS,CAAW,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACvB,MAAM,OAAO,CAAC,+BAA+B,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvB,IAAI,OAAO,KAAK,CAAC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACtC,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACtD,CAAC;CACF"}
@@ -0,0 +1,50 @@
1
+ import { type CentralProtectedTransport } from "./central-protected-transport.js";
2
+ import type { CentralToolDefinition } from "./mcp-contract.js";
3
+ export type CentralRestErrorCode = "central_authentication_failed" | "central_request_failed" | "central_request_rejected" | "central_response_invalid" | "invalid_arguments";
4
+ export declare class CentralRestError extends Error {
5
+ readonly code: CentralRestErrorCode;
6
+ constructor(code: CentralRestErrorCode);
7
+ }
8
+ export interface CentralActionType {
9
+ readonly id: string;
10
+ readonly name: string;
11
+ readonly description: string;
12
+ readonly input_schema: Record<string, unknown>;
13
+ }
14
+ export interface CentralMessage {
15
+ readonly id?: string;
16
+ readonly sender_agent_id: string;
17
+ readonly action_type_id?: string | null;
18
+ readonly payload: Record<string, unknown>;
19
+ readonly created_at: string;
20
+ }
21
+ export interface CentralPermission {
22
+ readonly id: string;
23
+ readonly grantor_email: string;
24
+ readonly grantee_email: string;
25
+ readonly action_type: string;
26
+ readonly status: "pending" | "granted" | "denied";
27
+ readonly scope?: Record<string, unknown> | null;
28
+ readonly created_at?: string | null;
29
+ readonly decided_at?: string | null;
30
+ readonly expires_at?: string | null;
31
+ }
32
+ export interface CentralRestClientOptions {
33
+ readonly centralOrigin: string;
34
+ readonly transport: CentralProtectedTransport;
35
+ }
36
+ export declare const REST_AUTHENTICATED_TOOLS: readonly CentralToolDefinition[];
37
+ export declare class CentralRestClient {
38
+ #private;
39
+ constructor(options: CentralRestClientOptions);
40
+ listActionTypes(signal?: AbortSignal): Promise<CentralActionType[]>;
41
+ requestPermission(arguments_: unknown, signal?: AbortSignal): Promise<Record<string, unknown>>;
42
+ respondToPermission(arguments_: unknown, signal?: AbortSignal): Promise<Record<string, unknown>>;
43
+ callAction(arguments_: unknown, signal?: AbortSignal): Promise<Record<string, unknown>>;
44
+ submitActionResult(arguments_: unknown, signal?: AbortSignal): Promise<Record<string, unknown>>;
45
+ pollRemoteMessages(timeout: number, signal?: AbortSignal): Promise<{
46
+ readonly messages: CentralMessage[];
47
+ }>;
48
+ getMyPermissions(signal?: AbortSignal): Promise<CentralPermission[]>;
49
+ ackMessage(arguments_: unknown, signal?: AbortSignal): Promise<Record<string, unknown>>;
50
+ }