@embassys/ambassador 0.0.0 → 0.2.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +68 -2
- package/dist/agent-capabilities.d.ts +35 -0
- package/dist/agent-capabilities.js +221 -0
- package/dist/agent-capabilities.js.map +1 -0
- package/dist/ambassador-options.d.ts +9 -0
- package/dist/ambassador-options.js +31 -0
- package/dist/ambassador-options.js.map +1 -0
- package/dist/central-credential.d.ts +41 -0
- package/dist/central-credential.js +355 -0
- package/dist/central-credential.js.map +1 -0
- package/dist/central-enrollment.d.ts +31 -0
- package/dist/central-enrollment.js +278 -0
- package/dist/central-enrollment.js.map +1 -0
- package/dist/central-json.d.ts +8 -0
- package/dist/central-json.js +259 -0
- package/dist/central-json.js.map +1 -0
- package/dist/central-protected-transport.d.ts +21 -0
- package/dist/central-protected-transport.js +217 -0
- package/dist/central-protected-transport.js.map +1 -0
- package/dist/central-rest.d.ts +50 -0
- package/dist/central-rest.js +401 -0
- package/dist/central-rest.js.map +1 -0
- package/dist/cli.d.ts +26 -0
- package/dist/cli.js +131 -0
- package/dist/cli.js.map +1 -0
- package/dist/credential-store.d.ts +18 -0
- package/dist/credential-store.js +517 -0
- package/dist/credential-store.js.map +1 -0
- package/dist/delivery-profile.d.ts +43 -0
- package/dist/delivery-profile.js +253 -0
- package/dist/delivery-profile.js.map +1 -0
- package/dist/direct-delivery.d.ts +38 -0
- package/dist/direct-delivery.js +315 -0
- package/dist/direct-delivery.js.map +1 -0
- package/dist/dpop.d.ts +28 -0
- package/dist/dpop.js +119 -0
- package/dist/dpop.js.map +1 -0
- package/dist/errors.d.ts +5 -0
- package/dist/errors.js +11 -0
- package/dist/errors.js.map +1 -0
- package/dist/gateway-application.d.ts +32 -0
- package/dist/gateway-application.js +256 -0
- package/dist/gateway-application.js.map +1 -0
- package/dist/gateway-paths.d.ts +10 -0
- package/dist/gateway-paths.js +28 -0
- package/dist/gateway-paths.js.map +1 -0
- package/dist/guided-registration.d.ts +23 -0
- package/dist/guided-registration.js +117 -0
- package/dist/guided-registration.js.map +1 -0
- package/dist/identity.d.ts +20 -0
- package/dist/identity.js +54 -0
- package/dist/identity.js.map +1 -0
- package/dist/local-mcp.d.ts +28 -0
- package/dist/local-mcp.js +420 -0
- package/dist/local-mcp.js.map +1 -0
- package/dist/local-tool-result.d.ts +4 -0
- package/dist/local-tool-result.js +17 -0
- package/dist/local-tool-result.js.map +1 -0
- package/dist/mcp-contract.d.ts +10 -0
- package/dist/mcp-contract.js +63 -0
- package/dist/mcp-contract.js.map +1 -0
- package/dist/notification-journal.d.ts +24 -0
- package/dist/notification-journal.js +194 -0
- package/dist/notification-journal.js.map +1 -0
- package/dist/notification-relay.d.ts +31 -0
- package/dist/notification-relay.js +203 -0
- package/dist/notification-relay.js.map +1 -0
- package/dist/process-lock.d.ts +8 -0
- package/dist/process-lock.js +122 -0
- package/dist/process-lock.js.map +1 -0
- package/dist/sqlite-artifact.d.ts +7 -0
- package/dist/sqlite-artifact.js +121 -0
- package/dist/sqlite-artifact.js.map +1 -0
- package/dist/webhook-delivery.d.ts +23 -0
- package/dist/webhook-delivery.js +122 -0
- package/dist/webhook-delivery.js.map +1 -0
- package/docs/getting-started-claude.md +94 -0
- package/docs/getting-started-codex.md +103 -0
- package/docs/getting-started-gemini.md +87 -0
- package/docs/getting-started-hermes.md +84 -0
- package/docs/getting-started-openclaw.md +83 -0
- package/docs/live-qualification.md +174 -0
- package/package.json +48 -7
- package/index.js +0 -1
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"central-enrollment.js","sourceRoot":"","sources":["../src/central-enrollment.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,6BAA6B,EAC7B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,+BAA+B,EAC/B,gBAAgB,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAGpD,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,MAAM,KAAK,GAAG,yBAAyB,CAAC;AACxC,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,QAAQ,GAAG,2BAA2B,CAAC;AAW7C,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC1B,IAAI;IAAzB,YAAqB,IAAgC;QACnD,KAAK,CAAC,2BAA2B,CAAC,CAAC;oBADhB,IAAI;QAEvB,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAoBD,SAAS,MAAM,CACb,UAAmC,EACnC,QAA2B;IAE3B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;AAC9F,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAqC;IACpE;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,sDAAsD;QACnE,WAAW,EAAE,MAAM,CACjB;YACE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;YACvD,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;YAC9D,QAAQ,EAAE;gBACR,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;wBACzC,QAAQ,EAAE,CAAC,MAAM,CAAC;wBAClB,oBAAoB,EAAE,KAAK;qBAC5B;oBACD;wBACE,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;4BAC1B,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;4BACvD,UAAU,EAAE;gCACV,IAAI,EAAE,QAAQ;gCACd,OAAO,EAAE,0BAA0B;6BACpC;yBACF;wBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC;wBACvC,oBAAoB,EAAE,KAAK;qBAC5B;iBACF;aACF;SACF,EACD,CAAC,OAAO,CAAC,CACV;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,yDAAyD;QACtE,WAAW,EAAE,MAAM,CACjB;YACE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;YACvD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;SAChD,EACD,CAAC,OAAO,EAAE,MAAM,CAAC,CAClB;KACF;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,+DAA+D;QAC5E,WAAW,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;KAC5F;CACO,CAAC;AAEX,SAAS,OAAO,CAAC,IAAgC;IAC/C,OAAO,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7E,IACE,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,CAAC;QAC5E,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,KAAK,GAAG;QACvB,MAAM,CAAC,MAAM,KAAK,EAAE;QACpB,MAAM,CAAC,IAAI,KAAK,EAAE,EAClB,CAAC;QACD,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAChB,KAAc,EACd,QAA2B,EAC3B,QAAQ,GAAsB,EAAE;IAEhC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,OAAe;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;QAC5E,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,OAAgB;IAC/B,OAAO,CACL,OAAO;SACJ,GAAG,CAAC,eAAe,CAAC;QACrB,EAAE,KAAK,CAAC,GAAG,CAAC;SACX,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,KAAK,IAAI,CAC/E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,QAAkB;IACtC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,OAAO,uBAAuB;IACzB,OAAO,CAAM;IACb,MAAM,CAAe;IACrB,WAAW,CAAS;IACpB,eAAe,CAAwC;IACvD,WAAW,CAAe;IAEnC,YAAY,OAAuC;QACjD,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAC7D,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,IAAI,WAAW,CAAC,OAAO,CAAC;QACrE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YACpE,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,UAAmB,EAAE,MAAoB;QACtD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACxD,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,WAAW,GACf,UAAU,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC/F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,qBAAqB,EACrB,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,EAAE,EAC5F,MAAM,CACP,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7C,IACE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YACpD,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACnC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC/B,MAAM,CAAC,KAAK,KAAK,YAAY;YAC7B,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YACzB,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,EAC3B,CAAC;YACD,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAmB,EAAE,MAAoB;QACpD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACtC,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,0BAA0B,EAC1B,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,EAClC,MAAM,CACP,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7C,IACE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/B,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YACzB,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,EAC3B,CAAC;YACD,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAmB,EAAE,MAAoB;QACpD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC9C,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvE,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,GAAG,GAAG,uBAAuB,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,mBAAmB,EACnB,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,EAClE,MAAM,CACP,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACrF,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,OAAO,CAAC,sCAAsC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,CAAC,sCAAsC,CAAC,CAAC;QACxD,CAAC;QACD,IACE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACtE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACnC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC/B,MAAM,CAAC,KAAK,KAAK,YAAY;YAC7B,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAChC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,UAAU,CAAC,EAC3D,CAAC;YACD,MAAM,OAAO,CAAC,yCAAyC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,UAAmC,CAAC;QACxC,IAAI,CAAC;YACH,UAAU,GAAG,6BAA6B,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,sBAAsB,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACpE,IACE,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,QAAQ;gBACxC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,YAAY;gBACnC,MAAM,CAAC,aAAa,KAAK,GAAG,CAAC,UAAU,EACvC,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,CAAC;YACD,+BAA+B,CAAC;gBAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,CAAC,yCAAyC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO;YACL,UAAU;YACV,WAAW,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,KAAK,EAAE,YAAY;gBACnB,OAAO,EAAE,8BAA8B;aACxC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CACT,IAAY,EACZ,IAA6B,EAC7B,MAAoB;QAEpB,IAAI,QAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;gBACpD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,iBAAiB,EAAE,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC9E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,WAAW,EAAE,MAAM;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,aAAa;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,CAAC,sCAAsC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAkB;QAC/B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACxC,CAAC;QACD,IACE,CAAC,QAAQ,CAAC,EAAE;YACZ,QAAQ,CAAC,MAAM,GAAG,GAAG;YACrB,QAAQ,CAAC,MAAM,IAAI,GAAG;YACtB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAClC,CAAC;YACD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,eAAe,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gBAAgB;gBAAE,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;YAC3F,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;CACF"}
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
export declare const CENTRAL_RESPONSE_MAX_BYTES: number;
|
|
2
|
+
export declare class CentralJsonError extends Error {
|
|
3
|
+
constructor();
|
|
4
|
+
}
|
|
5
|
+
export declare function isCentralRecord(value: unknown): value is Record<string, unknown>;
|
|
6
|
+
export declare function parseStrictCentralJson(text: string): unknown;
|
|
7
|
+
export declare function readCentralJson(response: Response, maximumBytes?: number): Promise<unknown>;
|
|
8
|
+
export declare function assertNoCentralCredentialFields(value: unknown): void;
|
|
@@ -0,0 +1,259 @@
|
|
|
1
|
+
import { TextDecoder } from "node:util";
|
|
2
|
+
export const CENTRAL_RESPONSE_MAX_BYTES = 4 * 1024 * 1024;
|
|
3
|
+
const MAX_DEPTH = 100;
|
|
4
|
+
const MAX_STRUCTURAL_TOKENS = 16_384;
|
|
5
|
+
const JSON_MEDIA_TYPE = /^application\/json(?:\s*;\s*charset=utf-8)?$/iu;
|
|
6
|
+
const CREDENTIAL_FIELDS = new Set([
|
|
7
|
+
"access_token",
|
|
8
|
+
"authorization",
|
|
9
|
+
"dpop",
|
|
10
|
+
"dpop_proof",
|
|
11
|
+
"jwt",
|
|
12
|
+
"private_key",
|
|
13
|
+
"proof",
|
|
14
|
+
"token",
|
|
15
|
+
]);
|
|
16
|
+
export class CentralJsonError extends Error {
|
|
17
|
+
constructor() {
|
|
18
|
+
super("The central JSON value is invalid");
|
|
19
|
+
this.name = "CentralJsonError";
|
|
20
|
+
}
|
|
21
|
+
}
|
|
22
|
+
function invalid() {
|
|
23
|
+
throw new CentralJsonError();
|
|
24
|
+
}
|
|
25
|
+
export function isCentralRecord(value) {
|
|
26
|
+
return value !== null && typeof value === "object" && !Array.isArray(value);
|
|
27
|
+
}
|
|
28
|
+
class Parser {
|
|
29
|
+
text;
|
|
30
|
+
#index = 0;
|
|
31
|
+
#tokens = 0;
|
|
32
|
+
constructor(text) {
|
|
33
|
+
this.text = text;
|
|
34
|
+
}
|
|
35
|
+
parse() {
|
|
36
|
+
const value = this.#value(0);
|
|
37
|
+
this.#whitespace();
|
|
38
|
+
if (this.#index !== this.text.length)
|
|
39
|
+
invalid();
|
|
40
|
+
return value;
|
|
41
|
+
}
|
|
42
|
+
#value(depth) {
|
|
43
|
+
if (depth > MAX_DEPTH)
|
|
44
|
+
invalid();
|
|
45
|
+
this.#whitespace();
|
|
46
|
+
const character = this.text[this.#index];
|
|
47
|
+
if (character === "{")
|
|
48
|
+
return this.#object(depth + 1);
|
|
49
|
+
if (character === "[")
|
|
50
|
+
return this.#array(depth + 1);
|
|
51
|
+
if (character === '"')
|
|
52
|
+
return this.#string();
|
|
53
|
+
if (this.text.startsWith("true", this.#index)) {
|
|
54
|
+
this.#index += 4;
|
|
55
|
+
return true;
|
|
56
|
+
}
|
|
57
|
+
if (this.text.startsWith("false", this.#index)) {
|
|
58
|
+
this.#index += 5;
|
|
59
|
+
return false;
|
|
60
|
+
}
|
|
61
|
+
if (this.text.startsWith("null", this.#index)) {
|
|
62
|
+
this.#index += 4;
|
|
63
|
+
return null;
|
|
64
|
+
}
|
|
65
|
+
return this.#number();
|
|
66
|
+
}
|
|
67
|
+
#object(depth) {
|
|
68
|
+
this.#container();
|
|
69
|
+
this.#index += 1;
|
|
70
|
+
this.#whitespace();
|
|
71
|
+
const result = {};
|
|
72
|
+
const names = new Set();
|
|
73
|
+
if (this.text[this.#index] === "}") {
|
|
74
|
+
this.#index += 1;
|
|
75
|
+
return result;
|
|
76
|
+
}
|
|
77
|
+
while (true) {
|
|
78
|
+
if (this.text[this.#index] !== '"')
|
|
79
|
+
invalid();
|
|
80
|
+
const name = this.#string();
|
|
81
|
+
if (names.has(name))
|
|
82
|
+
invalid();
|
|
83
|
+
names.add(name);
|
|
84
|
+
this.#whitespace();
|
|
85
|
+
if (this.text[this.#index] !== ":")
|
|
86
|
+
invalid();
|
|
87
|
+
this.#index += 1;
|
|
88
|
+
result[name] = this.#value(depth);
|
|
89
|
+
this.#whitespace();
|
|
90
|
+
const separator = this.text[this.#index];
|
|
91
|
+
if (separator === "}") {
|
|
92
|
+
this.#index += 1;
|
|
93
|
+
return result;
|
|
94
|
+
}
|
|
95
|
+
if (separator !== ",")
|
|
96
|
+
invalid();
|
|
97
|
+
this.#index += 1;
|
|
98
|
+
}
|
|
99
|
+
}
|
|
100
|
+
#array(depth) {
|
|
101
|
+
this.#container();
|
|
102
|
+
this.#index += 1;
|
|
103
|
+
this.#whitespace();
|
|
104
|
+
const result = [];
|
|
105
|
+
if (this.text[this.#index] === "]") {
|
|
106
|
+
this.#index += 1;
|
|
107
|
+
return result;
|
|
108
|
+
}
|
|
109
|
+
while (true) {
|
|
110
|
+
result.push(this.#value(depth));
|
|
111
|
+
this.#whitespace();
|
|
112
|
+
const separator = this.text[this.#index];
|
|
113
|
+
if (separator === "]") {
|
|
114
|
+
this.#index += 1;
|
|
115
|
+
return result;
|
|
116
|
+
}
|
|
117
|
+
if (separator !== ",")
|
|
118
|
+
invalid();
|
|
119
|
+
this.#index += 1;
|
|
120
|
+
}
|
|
121
|
+
}
|
|
122
|
+
#container() {
|
|
123
|
+
this.#tokens += 1;
|
|
124
|
+
if (this.#tokens > MAX_STRUCTURAL_TOKENS)
|
|
125
|
+
invalid();
|
|
126
|
+
}
|
|
127
|
+
#string() {
|
|
128
|
+
const start = this.#index;
|
|
129
|
+
this.#index += 1;
|
|
130
|
+
let escaped = false;
|
|
131
|
+
while (this.#index < this.text.length) {
|
|
132
|
+
const character = this.text[this.#index];
|
|
133
|
+
this.#index += 1;
|
|
134
|
+
if (escaped) {
|
|
135
|
+
escaped = false;
|
|
136
|
+
continue;
|
|
137
|
+
}
|
|
138
|
+
if (character === "\\") {
|
|
139
|
+
escaped = true;
|
|
140
|
+
continue;
|
|
141
|
+
}
|
|
142
|
+
if (character === '"') {
|
|
143
|
+
let value;
|
|
144
|
+
try {
|
|
145
|
+
value = JSON.parse(this.text.slice(start, this.#index));
|
|
146
|
+
}
|
|
147
|
+
catch {
|
|
148
|
+
return invalid();
|
|
149
|
+
}
|
|
150
|
+
if (typeof value !== "string" || hasLoneSurrogate(value))
|
|
151
|
+
invalid();
|
|
152
|
+
return value;
|
|
153
|
+
}
|
|
154
|
+
if (character !== undefined && character.charCodeAt(0) < 0x20)
|
|
155
|
+
invalid();
|
|
156
|
+
}
|
|
157
|
+
return invalid();
|
|
158
|
+
}
|
|
159
|
+
#number() {
|
|
160
|
+
const pattern = /-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/uy;
|
|
161
|
+
pattern.lastIndex = this.#index;
|
|
162
|
+
const match = pattern.exec(this.text);
|
|
163
|
+
if (match === null)
|
|
164
|
+
invalid();
|
|
165
|
+
this.#index = pattern.lastIndex;
|
|
166
|
+
const value = Number(match[0]);
|
|
167
|
+
if (!Number.isFinite(value))
|
|
168
|
+
invalid();
|
|
169
|
+
return value;
|
|
170
|
+
}
|
|
171
|
+
#whitespace() {
|
|
172
|
+
while ([9, 10, 13, 32].includes(this.text.charCodeAt(this.#index)))
|
|
173
|
+
this.#index += 1;
|
|
174
|
+
}
|
|
175
|
+
}
|
|
176
|
+
function hasLoneSurrogate(value) {
|
|
177
|
+
for (let index = 0; index < value.length; index += 1) {
|
|
178
|
+
const code = value.charCodeAt(index);
|
|
179
|
+
if (code >= 0xd800 && code <= 0xdbff) {
|
|
180
|
+
const next = value.charCodeAt(index + 1);
|
|
181
|
+
if (next < 0xdc00 || next > 0xdfff)
|
|
182
|
+
return true;
|
|
183
|
+
index += 1;
|
|
184
|
+
}
|
|
185
|
+
else if (code >= 0xdc00 && code <= 0xdfff)
|
|
186
|
+
return true;
|
|
187
|
+
}
|
|
188
|
+
return false;
|
|
189
|
+
}
|
|
190
|
+
export function parseStrictCentralJson(text) {
|
|
191
|
+
return new Parser(text).parse();
|
|
192
|
+
}
|
|
193
|
+
async function readBoundedBytes(response, maximumBytes) {
|
|
194
|
+
const declared = response.headers.get("content-length");
|
|
195
|
+
if (declared !== null && /^\d+$/u.test(declared) && Number(declared) > maximumBytes)
|
|
196
|
+
invalid();
|
|
197
|
+
if (response.body === null)
|
|
198
|
+
return new Uint8Array();
|
|
199
|
+
const reader = response.body.getReader();
|
|
200
|
+
const chunks = [];
|
|
201
|
+
let total = 0;
|
|
202
|
+
try {
|
|
203
|
+
while (true) {
|
|
204
|
+
const item = await reader.read();
|
|
205
|
+
if (item.done)
|
|
206
|
+
break;
|
|
207
|
+
total += item.value.byteLength;
|
|
208
|
+
if (total > maximumBytes) {
|
|
209
|
+
await reader.cancel().catch(() => undefined);
|
|
210
|
+
invalid();
|
|
211
|
+
}
|
|
212
|
+
chunks.push(item.value);
|
|
213
|
+
}
|
|
214
|
+
}
|
|
215
|
+
catch (error) {
|
|
216
|
+
if (error instanceof CentralJsonError)
|
|
217
|
+
throw error;
|
|
218
|
+
return invalid();
|
|
219
|
+
}
|
|
220
|
+
const bytes = new Uint8Array(total);
|
|
221
|
+
let offset = 0;
|
|
222
|
+
for (const chunk of chunks) {
|
|
223
|
+
bytes.set(chunk, offset);
|
|
224
|
+
offset += chunk.byteLength;
|
|
225
|
+
}
|
|
226
|
+
return bytes;
|
|
227
|
+
}
|
|
228
|
+
export async function readCentralJson(response, maximumBytes = CENTRAL_RESPONSE_MAX_BYTES) {
|
|
229
|
+
if (!Number.isSafeInteger(maximumBytes) ||
|
|
230
|
+
maximumBytes < 1 ||
|
|
231
|
+
!JSON_MEDIA_TYPE.test(response.headers.get("content-type") ?? "") ||
|
|
232
|
+
response.headers.has("content-encoding")) {
|
|
233
|
+
invalid();
|
|
234
|
+
}
|
|
235
|
+
const bytes = await readBoundedBytes(response, maximumBytes);
|
|
236
|
+
let text;
|
|
237
|
+
try {
|
|
238
|
+
text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
|
|
239
|
+
}
|
|
240
|
+
catch {
|
|
241
|
+
return invalid();
|
|
242
|
+
}
|
|
243
|
+
return parseStrictCentralJson(text);
|
|
244
|
+
}
|
|
245
|
+
export function assertNoCentralCredentialFields(value) {
|
|
246
|
+
if (Array.isArray(value)) {
|
|
247
|
+
for (const item of value)
|
|
248
|
+
assertNoCentralCredentialFields(item);
|
|
249
|
+
return;
|
|
250
|
+
}
|
|
251
|
+
if (!isCentralRecord(value))
|
|
252
|
+
return;
|
|
253
|
+
for (const [name, nested] of Object.entries(value)) {
|
|
254
|
+
if (CREDENTIAL_FIELDS.has(name.toLowerCase()))
|
|
255
|
+
invalid();
|
|
256
|
+
assertNoCentralCredentialFields(nested);
|
|
257
|
+
}
|
|
258
|
+
}
|
|
259
|
+
//# sourceMappingURL=central-json.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"central-json.js","sourceRoot":"","sources":["../src/central-json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1D,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,eAAe,GAAG,gDAAgD,CAAC;AACzE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,cAAc;IACd,eAAe;IACf,MAAM;IACN,YAAY;IACZ,KAAK;IACL,aAAa;IACb,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC;QACE,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,SAAS,OAAO;IACd,MAAM,IAAI,gBAAgB,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,MAAM;IAImB,IAAI;IAHjC,MAAM,GAAG,CAAC,CAAC;IACX,OAAO,GAAG,CAAC,CAAC;IAEZ,YAA6B,IAAY;oBAAZ,IAAI;IAAW,CAAC;IAE7C,KAAK;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,IAAI,KAAK,GAAG,SAAS;YAAE,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,SAAS,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACtD,IAAI,SAAS,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,SAAS,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG;gBAAE,OAAO,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC/B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChB,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG;gBAAE,OAAO,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;gBACjB,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,SAAS,KAAK,GAAG;gBAAE,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;gBACjB,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,SAAS,KAAK,GAAG;gBAAE,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,UAAU;QACR,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClB,IAAI,IAAI,CAAC,OAAO,GAAG,qBAAqB;YAAE,OAAO,EAAE,CAAC;IACtD,CAAC;IAED,OAAO;QACL,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,GAAG,KAAK,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS;YACX,CAAC;YACD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBACtB,IAAI,KAAc,CAAC;gBACnB,IAAI,CAAC;oBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC1D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,OAAO,EAAE,CAAC;gBACnB,CAAC;gBACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAC;gBACpE,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI;gBAAE,OAAO,EAAE,CAAC;QAC3E,CAAC;QACD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IAED,OAAO;QACL,MAAM,OAAO,GAAG,wDAAwD,CAAC;QACzE,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;QAChC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,WAAW;QACT,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAE,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IACvF,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,IAAI,GAAG,MAAM,IAAI,IAAI,GAAG,MAAM;gBAAE,OAAO,IAAI,CAAC;YAChD,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAkB,EAAE,YAAoB;IACtE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY;QAAE,OAAO,EAAE,CAAC;IAC/F,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,UAAU,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;gBACzB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC7C,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB;YAAE,MAAM,KAAK,CAAC;QACnD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAkB,EAClB,YAAY,GAAG,0BAA0B;IAEzC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC;QACnC,YAAY,GAAG,CAAC;QAChB,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACjE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EACxC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC7D,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAAc;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,+BAA+B,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO;IACpC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;QACzD,+BAA+B,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
import type { LoadedCentralCredential } from "./central-credential.js";
|
|
2
|
+
import { DpopNonceCache } from "./dpop.js";
|
|
3
|
+
export type CentralProtectedTransportErrorCode = "central_dpop_challenge_failed" | "central_dpop_nonce_retry_exhausted" | "central_protected_authentication_failed" | "central_protected_credential_expired" | "central_protected_redirect_rejected" | "central_protected_request_failed" | "central_protected_request_invalid";
|
|
4
|
+
export declare class CentralProtectedTransportError extends Error {
|
|
5
|
+
readonly code: CentralProtectedTransportErrorCode;
|
|
6
|
+
constructor(code: CentralProtectedTransportErrorCode);
|
|
7
|
+
}
|
|
8
|
+
export interface CentralProtectedTransportOptions {
|
|
9
|
+
readonly credential: () => LoadedCentralCredential;
|
|
10
|
+
readonly nonceCache?: DpopNonceCache;
|
|
11
|
+
readonly fetch?: typeof fetch;
|
|
12
|
+
readonly deadlineMs?: number;
|
|
13
|
+
readonly deadlineSignal?: (milliseconds: number) => AbortSignal;
|
|
14
|
+
readonly now?: () => number;
|
|
15
|
+
readonly uuid?: () => string;
|
|
16
|
+
}
|
|
17
|
+
export declare class CentralProtectedTransport {
|
|
18
|
+
#private;
|
|
19
|
+
constructor(options: CentralProtectedTransportOptions);
|
|
20
|
+
fetch(url: string | URL, init?: RequestInit): Promise<Response>;
|
|
21
|
+
}
|
|
@@ -0,0 +1,217 @@
|
|
|
1
|
+
import { createDpopProof, DpopError, DpopNonceCache, parseDpopNonce } from "./dpop.js";
|
|
2
|
+
const DEFAULT_DEADLINE_MS = 30_000;
|
|
3
|
+
const TOKEN = /^[\x21-\x7e]{1,4096}$/u;
|
|
4
|
+
const METHOD = /^[A-Z]+$/u;
|
|
5
|
+
const MAX_HEADER_BYTES = 16 * 1024;
|
|
6
|
+
const MAX_PROOF_BYTES = 4_096;
|
|
7
|
+
const MESSAGES = {
|
|
8
|
+
central_dpop_challenge_failed: "The central DPoP challenge is invalid",
|
|
9
|
+
central_dpop_nonce_retry_exhausted: "The central DPoP nonce retry was exhausted",
|
|
10
|
+
central_protected_authentication_failed: "Central authentication failed",
|
|
11
|
+
central_protected_credential_expired: "The central credential has expired",
|
|
12
|
+
central_protected_redirect_rejected: "The central redirect was rejected",
|
|
13
|
+
central_protected_request_failed: "The central request failed; its outcome may be uncertain",
|
|
14
|
+
central_protected_request_invalid: "The central request is invalid",
|
|
15
|
+
};
|
|
16
|
+
export class CentralProtectedTransportError extends Error {
|
|
17
|
+
code;
|
|
18
|
+
constructor(code) {
|
|
19
|
+
super(MESSAGES[code]);
|
|
20
|
+
this.code = code;
|
|
21
|
+
this.name = "CentralProtectedTransportError";
|
|
22
|
+
}
|
|
23
|
+
}
|
|
24
|
+
function failure(code) {
|
|
25
|
+
return new CentralProtectedTransportError(code);
|
|
26
|
+
}
|
|
27
|
+
function requestTarget(value) {
|
|
28
|
+
let target;
|
|
29
|
+
try {
|
|
30
|
+
target = new URL(value);
|
|
31
|
+
}
|
|
32
|
+
catch {
|
|
33
|
+
throw failure("central_protected_request_invalid");
|
|
34
|
+
}
|
|
35
|
+
if ((target.protocol !== "https:" && target.protocol !== "http:") ||
|
|
36
|
+
target.username !== "" ||
|
|
37
|
+
target.password !== "" ||
|
|
38
|
+
target.hash !== "") {
|
|
39
|
+
throw failure("central_protected_request_invalid");
|
|
40
|
+
}
|
|
41
|
+
return target;
|
|
42
|
+
}
|
|
43
|
+
function requestMethod(value) {
|
|
44
|
+
const method = (value ?? "GET").toUpperCase();
|
|
45
|
+
if (!METHOD.test(method))
|
|
46
|
+
throw failure("central_protected_request_invalid");
|
|
47
|
+
return method;
|
|
48
|
+
}
|
|
49
|
+
function requestHeaders(value) {
|
|
50
|
+
let headers;
|
|
51
|
+
try {
|
|
52
|
+
headers = new Headers(value);
|
|
53
|
+
}
|
|
54
|
+
catch {
|
|
55
|
+
throw failure("central_protected_request_invalid");
|
|
56
|
+
}
|
|
57
|
+
if (headers.has("authorization") || headers.has("dpop") || headers.has("cookie")) {
|
|
58
|
+
throw failure("central_protected_request_invalid");
|
|
59
|
+
}
|
|
60
|
+
return headers;
|
|
61
|
+
}
|
|
62
|
+
function headerBytes(headers) {
|
|
63
|
+
let total = 2;
|
|
64
|
+
for (const [name, value] of headers) {
|
|
65
|
+
total += Buffer.byteLength(name, "utf8") + Buffer.byteLength(value, "utf8") + 4;
|
|
66
|
+
}
|
|
67
|
+
return total;
|
|
68
|
+
}
|
|
69
|
+
function isUnrepeatableBody(body) {
|
|
70
|
+
if (body instanceof ReadableStream)
|
|
71
|
+
return true;
|
|
72
|
+
return body !== null && typeof body === "object" && Symbol.asyncIterator in body;
|
|
73
|
+
}
|
|
74
|
+
function isRedirect(response) {
|
|
75
|
+
return response.status >= 300 && response.status < 400;
|
|
76
|
+
}
|
|
77
|
+
async function cancel(response) {
|
|
78
|
+
await response.body?.cancel().catch(() => undefined);
|
|
79
|
+
}
|
|
80
|
+
function validCredential(value) {
|
|
81
|
+
return (value !== null &&
|
|
82
|
+
typeof value === "object" &&
|
|
83
|
+
value.record?.credential_format === 1 &&
|
|
84
|
+
typeof value.record.access_token === "string" &&
|
|
85
|
+
TOKEN.test(value.record.access_token) &&
|
|
86
|
+
value.privateKey?.asymmetricKeyType === "ec" &&
|
|
87
|
+
value.privateKey.asymmetricKeyDetails?.namedCurve === "prime256v1" &&
|
|
88
|
+
Number.isSafeInteger(value.token?.expiresAt));
|
|
89
|
+
}
|
|
90
|
+
export class CentralProtectedTransport {
|
|
91
|
+
#credential;
|
|
92
|
+
#nonceCache;
|
|
93
|
+
#fetchImplementation;
|
|
94
|
+
#deadlineMs;
|
|
95
|
+
#deadlineSignal;
|
|
96
|
+
#now;
|
|
97
|
+
#uuid;
|
|
98
|
+
constructor(options) {
|
|
99
|
+
this.#credential = options.credential;
|
|
100
|
+
this.#nonceCache = options.nonceCache ?? new DpopNonceCache();
|
|
101
|
+
this.#fetchImplementation = options.fetch ?? globalThis.fetch;
|
|
102
|
+
this.#deadlineMs = options.deadlineMs ?? DEFAULT_DEADLINE_MS;
|
|
103
|
+
this.#deadlineSignal = options.deadlineSignal ?? AbortSignal.timeout;
|
|
104
|
+
this.#now = options.now ?? (() => Date.now() / 1_000);
|
|
105
|
+
this.#uuid = options.uuid;
|
|
106
|
+
if (!Number.isSafeInteger(this.#deadlineMs) || this.#deadlineMs < 1) {
|
|
107
|
+
throw failure("central_protected_request_invalid");
|
|
108
|
+
}
|
|
109
|
+
}
|
|
110
|
+
async fetch(url, init = {}) {
|
|
111
|
+
const target = requestTarget(url);
|
|
112
|
+
const method = requestMethod(init.method);
|
|
113
|
+
if (isUnrepeatableBody(init.body) ||
|
|
114
|
+
(init.credentials !== undefined && init.credentials !== "omit")) {
|
|
115
|
+
throw failure("central_protected_request_invalid");
|
|
116
|
+
}
|
|
117
|
+
const baseHeaders = requestHeaders(init.headers);
|
|
118
|
+
let credential;
|
|
119
|
+
try {
|
|
120
|
+
credential = this.#credential();
|
|
121
|
+
}
|
|
122
|
+
catch {
|
|
123
|
+
throw failure("central_protected_request_invalid");
|
|
124
|
+
}
|
|
125
|
+
if (!validCredential(credential))
|
|
126
|
+
throw failure("central_protected_request_invalid");
|
|
127
|
+
const origin = target.origin;
|
|
128
|
+
for (let attempt = 0; attempt < 2; attempt += 1) {
|
|
129
|
+
const now = Math.floor(this.#now());
|
|
130
|
+
if (!Number.isSafeInteger(now) || now < 0) {
|
|
131
|
+
throw failure("central_protected_request_invalid");
|
|
132
|
+
}
|
|
133
|
+
if (credential.token.expiresAt <= now) {
|
|
134
|
+
throw failure("central_protected_credential_expired");
|
|
135
|
+
}
|
|
136
|
+
const nonce = this.#nonceCache.get(origin);
|
|
137
|
+
let proof;
|
|
138
|
+
try {
|
|
139
|
+
proof = createDpopProof({
|
|
140
|
+
method,
|
|
141
|
+
targetUri: target.href,
|
|
142
|
+
privateKey: credential.privateKey,
|
|
143
|
+
publicJwk: credential.publicJwk,
|
|
144
|
+
accessToken: credential.record.access_token,
|
|
145
|
+
now: () => now,
|
|
146
|
+
...(this.#uuid === undefined ? {} : { uuid: this.#uuid }),
|
|
147
|
+
...(nonce === undefined ? {} : { nonce }),
|
|
148
|
+
});
|
|
149
|
+
}
|
|
150
|
+
catch (error) {
|
|
151
|
+
if (error instanceof DpopError)
|
|
152
|
+
throw failure("central_protected_request_invalid");
|
|
153
|
+
throw failure("central_protected_request_invalid");
|
|
154
|
+
}
|
|
155
|
+
if (Buffer.byteLength(proof, "ascii") > MAX_PROOF_BYTES) {
|
|
156
|
+
throw failure("central_protected_request_invalid");
|
|
157
|
+
}
|
|
158
|
+
const headers = new Headers(baseHeaders);
|
|
159
|
+
headers.set("accept-encoding", "identity");
|
|
160
|
+
headers.set("authorization", `Bearer ${credential.record.access_token}`);
|
|
161
|
+
headers.set("dpop", proof);
|
|
162
|
+
if (headerBytes(headers) > MAX_HEADER_BYTES) {
|
|
163
|
+
throw failure("central_protected_request_invalid");
|
|
164
|
+
}
|
|
165
|
+
let deadline;
|
|
166
|
+
try {
|
|
167
|
+
deadline = this.#deadlineSignal(this.#deadlineMs);
|
|
168
|
+
}
|
|
169
|
+
catch {
|
|
170
|
+
throw failure("central_protected_request_invalid");
|
|
171
|
+
}
|
|
172
|
+
const signal = init.signal === undefined || init.signal === null
|
|
173
|
+
? deadline
|
|
174
|
+
: AbortSignal.any([init.signal, deadline]);
|
|
175
|
+
let response;
|
|
176
|
+
try {
|
|
177
|
+
response = await this.#fetchImplementation(target, {
|
|
178
|
+
...init,
|
|
179
|
+
method,
|
|
180
|
+
headers,
|
|
181
|
+
credentials: "omit",
|
|
182
|
+
redirect: "manual",
|
|
183
|
+
signal,
|
|
184
|
+
});
|
|
185
|
+
}
|
|
186
|
+
catch {
|
|
187
|
+
throw failure("central_protected_request_failed");
|
|
188
|
+
}
|
|
189
|
+
if (isRedirect(response)) {
|
|
190
|
+
await cancel(response);
|
|
191
|
+
throw failure("central_protected_redirect_rejected");
|
|
192
|
+
}
|
|
193
|
+
if (response.status !== 401)
|
|
194
|
+
return response;
|
|
195
|
+
const challenge = response.headers.get("dpop-nonce");
|
|
196
|
+
if (challenge === null) {
|
|
197
|
+
await cancel(response);
|
|
198
|
+
throw failure("central_protected_authentication_failed");
|
|
199
|
+
}
|
|
200
|
+
let parsed;
|
|
201
|
+
try {
|
|
202
|
+
parsed = parseDpopNonce(challenge);
|
|
203
|
+
}
|
|
204
|
+
catch {
|
|
205
|
+
await cancel(response);
|
|
206
|
+
throw failure("central_dpop_challenge_failed");
|
|
207
|
+
}
|
|
208
|
+
await cancel(response);
|
|
209
|
+
if (attempt !== 0 || parsed === nonce) {
|
|
210
|
+
throw failure("central_dpop_nonce_retry_exhausted");
|
|
211
|
+
}
|
|
212
|
+
this.#nonceCache.set(origin, parsed);
|
|
213
|
+
}
|
|
214
|
+
throw failure("central_dpop_nonce_retry_exhausted");
|
|
215
|
+
}
|
|
216
|
+
}
|
|
217
|
+
//# sourceMappingURL=central-protected-transport.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"central-protected-transport.js","sourceRoot":"","sources":["../src/central-protected-transport.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEvF,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,KAAK,GAAG,wBAAwB,CAAC;AACvC,MAAM,MAAM,GAAG,WAAW,CAAC;AAC3B,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,eAAe,GAAG,KAAK,CAAC;AAW9B,MAAM,QAAQ,GAAiE;IAC7E,6BAA6B,EAAE,uCAAuC;IACtE,kCAAkC,EAAE,4CAA4C;IAChF,uCAAuC,EAAE,+BAA+B;IACxE,oCAAoC,EAAE,oCAAoC;IAC1E,mCAAmC,EAAE,mCAAmC;IACxE,gCAAgC,EAAE,0DAA0D;IAC5F,iCAAiC,EAAE,gCAAgC;CACpE,CAAC;AAEF,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAClC,IAAI;IAAzB,YAAqB,IAAwC;QAC3D,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;oBADH,IAAI;QAEvB,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AAYD,SAAS,OAAO,CAAC,IAAwC;IACvD,OAAO,IAAI,8BAA8B,CAAC,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,KAAmB;IACxC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACrD,CAAC;IACD,IACE,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC7D,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,IAAI,KAAK,EAAE,EAClB,CAAC;QACD,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAC7E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,KAA6B;IACnD,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB;IACnC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAyB;IACnD,IAAI,IAAI,YAAY,cAAc;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC;AACnF,CAAC;AAED,SAAS,UAAU,CAAC,QAAkB;IACpC,OAAO,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,QAAkB;IACtC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,eAAe,CAAC,KAA8B;IACrD,OAAO,CACL,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,EAAE,iBAAiB,KAAK,CAAC;QACrC,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,KAAK,QAAQ;QAC7C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;QACrC,KAAK,CAAC,UAAU,EAAE,iBAAiB,KAAK,IAAI;QAC5C,KAAK,CAAC,UAAU,CAAC,oBAAoB,EAAE,UAAU,KAAK,YAAY;QAClE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,yBAAyB;IAC3B,WAAW,CAAgC;IAC3C,WAAW,CAAiB;IAC5B,oBAAoB,CAAe;IACnC,WAAW,CAAS;IACpB,eAAe,CAAwC;IACvD,IAAI,CAAe;IACnB,KAAK,CAA6B;IAE3C,YAAY,OAAyC;QACnD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,cAAc,EAAE,CAAC;QAC9D,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAC9D,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAC7D,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,IAAI,WAAW,CAAC,OAAO,CAAC;QACrE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YACpE,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAiB,EAAE,IAAI,GAAgB,EAAE;QACnD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,IACE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC7B,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,CAAC,EAC/D,CAAC;YACD,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,UAAmC,CAAC;QACxC,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;YAAE,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAE7B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBAC1C,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,UAAU,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;gBACtC,MAAM,OAAO,CAAC,sCAAsC,CAAC,CAAC;YACxD,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACH,KAAK,GAAG,eAAe,CAAC;oBACtB,MAAM;oBACN,SAAS,EAAE,MAAM,CAAC,IAAI;oBACtB,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,YAAY;oBAC3C,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;oBACd,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;oBACzD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;iBAC1C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,SAAS;oBAAE,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;gBACnF,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,eAAe,EAAE,CAAC;gBACxD,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3B,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,gBAAgB,EAAE,CAAC;gBAC5C,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,QAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,OAAO,CAAC,mCAAmC,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;gBAC/C,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC/C,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE;oBACjD,GAAG,IAAI;oBACP,MAAM;oBACN,OAAO;oBACP,WAAW,EAAE,MAAM;oBACnB,QAAQ,EAAE,QAAQ;oBAClB,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACvB,MAAM,OAAO,CAAC,qCAAqC,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,QAAQ,CAAC;YAE7C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACrD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACvB,MAAM,OAAO,CAAC,yCAAyC,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,cAAc,CAAC,SAAS,CAAW,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACvB,MAAM,OAAO,CAAC,+BAA+B,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvB,IAAI,OAAO,KAAK,CAAC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACtC,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACtD,CAAC;CACF"}
|
|
@@ -0,0 +1,50 @@
|
|
|
1
|
+
import { type CentralProtectedTransport } from "./central-protected-transport.js";
|
|
2
|
+
import type { CentralToolDefinition } from "./mcp-contract.js";
|
|
3
|
+
export type CentralRestErrorCode = "central_authentication_failed" | "central_request_failed" | "central_request_rejected" | "central_response_invalid" | "invalid_arguments";
|
|
4
|
+
export declare class CentralRestError extends Error {
|
|
5
|
+
readonly code: CentralRestErrorCode;
|
|
6
|
+
constructor(code: CentralRestErrorCode);
|
|
7
|
+
}
|
|
8
|
+
export interface CentralActionType {
|
|
9
|
+
readonly id: string;
|
|
10
|
+
readonly name: string;
|
|
11
|
+
readonly description: string;
|
|
12
|
+
readonly input_schema: Record<string, unknown>;
|
|
13
|
+
}
|
|
14
|
+
export interface CentralMessage {
|
|
15
|
+
readonly id?: string;
|
|
16
|
+
readonly sender_agent_id: string;
|
|
17
|
+
readonly action_type_id?: string | null;
|
|
18
|
+
readonly payload: Record<string, unknown>;
|
|
19
|
+
readonly created_at: string;
|
|
20
|
+
}
|
|
21
|
+
export interface CentralPermission {
|
|
22
|
+
readonly id: string;
|
|
23
|
+
readonly grantor_email: string;
|
|
24
|
+
readonly grantee_email: string;
|
|
25
|
+
readonly action_type: string;
|
|
26
|
+
readonly status: "pending" | "granted" | "denied";
|
|
27
|
+
readonly scope?: Record<string, unknown> | null;
|
|
28
|
+
readonly created_at?: string | null;
|
|
29
|
+
readonly decided_at?: string | null;
|
|
30
|
+
readonly expires_at?: string | null;
|
|
31
|
+
}
|
|
32
|
+
export interface CentralRestClientOptions {
|
|
33
|
+
readonly centralOrigin: string;
|
|
34
|
+
readonly transport: CentralProtectedTransport;
|
|
35
|
+
}
|
|
36
|
+
export declare const REST_AUTHENTICATED_TOOLS: readonly CentralToolDefinition[];
|
|
37
|
+
export declare class CentralRestClient {
|
|
38
|
+
#private;
|
|
39
|
+
constructor(options: CentralRestClientOptions);
|
|
40
|
+
listActionTypes(signal?: AbortSignal): Promise<CentralActionType[]>;
|
|
41
|
+
requestPermission(arguments_: unknown, signal?: AbortSignal): Promise<Record<string, unknown>>;
|
|
42
|
+
respondToPermission(arguments_: unknown, signal?: AbortSignal): Promise<Record<string, unknown>>;
|
|
43
|
+
callAction(arguments_: unknown, signal?: AbortSignal): Promise<Record<string, unknown>>;
|
|
44
|
+
submitActionResult(arguments_: unknown, signal?: AbortSignal): Promise<Record<string, unknown>>;
|
|
45
|
+
pollRemoteMessages(timeout: number, signal?: AbortSignal): Promise<{
|
|
46
|
+
readonly messages: CentralMessage[];
|
|
47
|
+
}>;
|
|
48
|
+
getMyPermissions(signal?: AbortSignal): Promise<CentralPermission[]>;
|
|
49
|
+
ackMessage(arguments_: unknown, signal?: AbortSignal): Promise<Record<string, unknown>>;
|
|
50
|
+
}
|