@harperfast/harper 5.2.13 → 5.3.0-beta.1

package/dist/server/serverHelpers/registeredOperations.js

@@ -54,7 +54,7 @@ exports.operationExecuteRequestHandler = operationExecuteRequestHandler;
  * so a request is sent to exactly ONE registering worker (never broadcast-first-wins).
  *
  *  - Worker: `registerOperation()` announces the name (OPERATION_REGISTERED) to all threads;
- *    only the main thread records it, as name -> Set<threadId>.
+ *    only the main thread records it, as name -> Set<threadId>, plus `grantable`.
  *  - Main: on an OPERATION_FUNCTION_MAP miss, `getRemoteOperationFunction()` supplies a forwarding
  *    function that sends the request body (OPERATION_EXECUTE_REQUEST) to one live registering
  *    worker and awaits the correlated OPERATION_EXECUTE_RESPONSE.
@@ -70,6 +70,7 @@ const harper_logger_ts_1 = __importDefault(require("../../utility/logging/harper
 const hdbError_ts_1 = require("../../utility/errors/hdbError.js");
 const itc_js_1 = require("../threads/itc.js");
 const manageThreads_js_1 = require("../threads/manageThreads.js");
+const operationPermissions_ts_1 = require("../../utility/operationPermissions.js");
 const operationAuthorizationState_ts_1 = require("./operationAuthorizationState.js");
 const operationLog = harper_logger_ts_1.default.loggerWithTag('operation');
 // Fields attached to a request body by the HTTP/auth layer that must not (and often cannot)
@@ -89,6 +90,9 @@ function setLocalOperationDispatch(dispatch) {
 }
 /** name -> threadIds of workers that registered it (main thread only) */
 const registeredByWorker = new Map();
+// Per originator, not per name: a rolling deploy whose new generation drops `requiresSuperUser`
+// must keep routing the name while retracting grantability, which a name-level flag cannot express.
+const grantableByWorker = new Map();
 const pendingExecutions = new Map();
 let nextRequestId = 1;
 let mainListenersAttached = false;
@@ -97,12 +101,12 @@ let mainListenersAttached = false;
  * a lost announcement just means the op stays unreachable (the pre-#1736 status quo), and the
  * broadcast has its own ack timeout.
  */
-function announceRegisteredOperation(name) {
+function announceRegisteredOperation(name, grantable = false) {
     if (node_worker_threads_1.isMainThread)
         return;
     (0, itc_js_1.sendItcEvent)({
         type: terms.ITC_EVENT_TYPES.OPERATION_REGISTERED,
-        message: { name },
+        message: { name, grantable },
     }).catch((error) => operationLog.error(`Failed to announce registered operation '${name}'`, error));
 }
 /**
@@ -111,15 +115,70 @@ function announceRegisteredOperation(name) {
 function operationRegisteredHandler(event) {
     if (!node_worker_threads_1.isMainThread)
         return;
-    const { name, originator } = event.message;
+    const { name, grantable, originator } = event?.message ?? {};
     if (typeof name !== 'string' || typeof originator !== 'number')
         return;
+    // An announcement can lose the race with its own thread's exit, and exit notification fires once
+    // per thread, so without this the entry would never be cleaned up. Reads manageThreads' tombstone
+    // rather than keeping a second one: job threads are one-shot workers, so a duplicate here would
+    // grow per completed job, not per worker restart.
+    if ((0, manageThreads_js_1.hasThreadExited)(originator)) {
+        operationLog.debug(`Ignoring operation '${name}' announced by exited worker thread ${originator}`);
+        return;
+    }
     let workerIds = registeredByWorker.get(name);
     if (!workerIds)
         registeredByWorker.set(name, (workerIds = new Set()));
     workerIds.add(originator);
+    // Mirroring only widens what an allowlist may name; enforcement stays on the worker's
+    // chooseOperation. A re-announcement that drops the permission retracts this thread's claim.
+    setWorkerGrantable(name, originator, grantable === true);
     operationLog.debug(`Registered operation '${name}' announced by worker thread ${originator}`);
 }
+/**
+ * A worker that dies mid-execution can never respond, so fail its in-flight forwards rather than
+ * waiting out the timeout, and forget its registrations (a replacement re-registers on load).
+ */
+function handleThreadExit(deadThreadId) {
+    for (const [name, workerIds] of registeredByWorker) {
+        if (!workerIds.delete(deadThreadId))
+            continue;
+        // A surviving worker that never declared a permission must not keep the name admissible.
+        if (workerIds.size === 0)
+            dropRegistration(name);
+        else
+            setWorkerGrantable(name, deadThreadId, false);
+    }
+    for (const [requestId, pending] of pendingExecutions) {
+        if (pending.targetThreadId === deadThreadId) {
+            pendingExecutions.delete(requestId);
+            pending.reject(new hdbError_ts_1.ServerError('The worker thread executing this operation exited', 503));
+        }
+    }
+}
+function setWorkerGrantable(name, threadId, grantable) {
+    let grantableIds = grantableByWorker.get(name);
+    if (grantable) {
+        if (!grantableIds)
+            grantableByWorker.set(name, (grantableIds = new Set()));
+        grantableIds.add(threadId);
+        (0, operationPermissions_ts_1.registerWorkerGrantableOperation)(name);
+    }
+    else if (grantableIds?.delete(threadId) && grantableIds.size === 0) {
+        grantableByWorker.delete(name);
+        (0, operationPermissions_ts_1.unregisterWorkerGrantableOperation)(name);
+    }
+}
+/**
+ * Forget an operation no live worker offers any more. Both prune paths — thread exit, and a failed
+ * send discovering a dead port — route through here so a name can never keep a route without an
+ * owner. Grantability is dropped per owner instead, in `setWorkerGrantable`.
+ */
+function dropRegistration(name) {
+    registeredByWorker.delete(name);
+    grantableByWorker.delete(name);
+    (0, operationPermissions_ts_1.unregisterWorkerGrantableOperation)(name);
+}
 let rotation = 0;
 /**
  * Main-thread dispatch fallback: if a worker registered `name`, return a forwarding operation
@@ -153,23 +212,14 @@ function attachMainListeners() {
         else
             pending.resolve(result);
     });
-    // A worker that dies mid-execution can never respond; fail its in-flight forwards rather
-    // than waiting out the timeout, and forget its registrations (a replacement worker
-    // re-registers on component load).
-    (0, manageThreads_js_1.onThreadExit)((deadThreadId) => {
-        for (const [name, workerIds] of registeredByWorker) {
-            workerIds.delete(deadThreadId);
-            if (workerIds.size === 0)
-                registeredByWorker.delete(name);
-        }
-        for (const [requestId, pending] of pendingExecutions) {
-            if (pending.targetThreadId === deadThreadId) {
-                pendingExecutions.delete(requestId);
-                pending.reject(new hdbError_ts_1.ServerError('The worker thread executing this operation exited', 503));
-            }
-        }
-    });
+    (0, manageThreads_js_1.onThreadExit)(handleThreadExit);
 }
+// Armed at load rather than on first use: serverUtilities imports this module during its own load,
+// before any worker exists. Thread-exit notification fires once per thread and is dropped outright
+// if no listener is attached yet, so a worker dying before its first announcement is processed
+// would otherwise leave a registration nothing could ever clean up.
+if (node_worker_threads_1.isMainThread)
+    attachMainListeners();
 async function executeRemoteOperation(name, body, bypassAuth) {
     attachMainListeners();
     const workerIds = registeredByWorker.get(name);
@@ -197,7 +247,10 @@ async function executeRemoteOperation(name, body, bypassAuth) {
             throw new hdbError_ts_1.ServerError(`Operation '${name}' request could not be forwarded to a worker thread: ${error.message}`, 500);
         }
         if (!sent) {
+            // The port is gone, so this thread's claims go with it — grantability included, which
+            // handleThreadExit would otherwise not retract while other workers still route the name.
             workerIds.delete(targetThreadId);
+            setWorkerGrantable(name, targetThreadId, false);
             continue;
         }
         return new Promise((promiseResolve, promiseReject) => {
@@ -220,7 +273,7 @@ async function executeRemoteOperation(name, body, bypassAuth) {
         });
     }
     if (registeredByWorker.get(name)?.size === 0)
-        registeredByWorker.delete(name);
+        dropRegistration(name);
     throw new hdbError_ts_1.ServerError(`Operation '${name}' is registered by a component but no worker thread is available to run it`, 503);
 }
 /**

package/dist/server/serverHelpers/registeredOperations.js.map

@@ -1 +1 @@
-{"version":3,"file":"registeredOperations.js","sourceRoot":"","sources":["../../../server/serverHelpers/registeredOperations.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuDA,8DAEC;AAgBD,kEAMC;AAKD,gEAQC;AAUD,gEAOC;AA8FD,wEAkDC;AA7PD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,6DAA6D;AAC7D,6CAAuC;AACvC,iEAAmD;AACnD,qFAAuE;AACvE,8FAAkE;AAClE,kEAA+D;AAC/D,8CAAiD;AACjD,kEAA4E;AAC5E,qFAAuF;AAEvF,MAAM,YAAY,GAAG,0BAAY,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;AAO7D,4FAA4F;AAC5F,kDAAkD;AAClD,MAAM,sBAAsB,GAAG,CAAC,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;AAEnH,8FAA8F;AAC9F,2FAA2F;AAC3F,iEAAiE;AACjE,MAAM,kBAAkB,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,6BAA6B,CAAC,IAAI,OAAO,CAAC;AAEjG,gGAAgG;AAChG,2FAA2F;AAC3F,2FAA2F;AAC3F,4FAA4F;AAC5F,IAAI,aAGH,CAAC;AACF,SAAgB,yBAAyB,CAAC,QAA8B;IACvE,aAAa,GAAG,QAAQ,CAAC;AAC1B,CAAC;AAED,yEAAyE;AACzE,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAuB,CAAC;AAC1D,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAG9B,CAAC;AACJ,IAAI,aAAa,GAAG,CAAC,CAAC;AACtB,IAAI,qBAAqB,GAAG,KAAK,CAAC;AAElC;;;;GAIG;AACH,SAAgB,2BAA2B,CAAC,IAAY;IACvD,IAAI,kCAAY;QAAE,OAAO;IACzB,IAAA,qBAAY,EAAC;QACZ,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,oBAAoB;QAChD,OAAO,EAAE,EAAE,IAAI,EAAE;KACjB,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,4CAA4C,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;AACrG,CAAC;AAED;;GAEG;AACH,SAAgB,0BAA0B,CAAC,KAAwD;IAClG,IAAI,CAAC,kCAAY;QAAE,OAAO;IAC1B,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IAC3C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO;IACvE,IAAI,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS;QAAE,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IACtE,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1B,YAAY,CAAC,KAAK,CAAC,yBAAyB,IAAI,gCAAgC,UAAU,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED,IAAI,QAAQ,GAAG,CAAC,CAAC;AACjB;;;;;;GAMG;AACH,SAAgB,0BAA0B,CACzC,IAAY,EACZ,UAAU,GAAG,KAAK;IAElB,IAAI,CAAC,kCAAY;QAAE,OAAO,SAAS,CAAC;IACpC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,mBAAmB;IAC3B,IAAI,qBAAqB;QAAE,OAAO;IAClC,qBAAqB,GAAG,IAAI,CAAC;IAC7B,IAAA,kCAAe,EAAC,KAAK,CAAC,eAAe,CAAC,0BAA0B,EAAE,CAAC,KAAU,EAAE,EAAE;QAChF,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,2EAA2E;QAC3E,IAAI,UAAU,KAAK,OAAO,CAAC,cAAc;YAAE,OAAO;QAClD,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,yBAAW,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC;;YAC9E,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,yFAAyF;IACzF,mFAAmF;IACnF,mCAAmC;IACnC,IAAA,+BAAY,EAAC,CAAC,YAAoB,EAAE,EAAE;QACrC,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,kBAAkB,EAAE,CAAC;YACpD,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC/B,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC;gBAAE,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;QACD,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,iBAAiB,EAAE,CAAC;YACtD,IAAI,OAAO,CAAC,cAAc,KAAK,YAAY,EAAE,CAAC;gBAC7C,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACpC,OAAO,CAAC,MAAM,CAAC,IAAI,yBAAW,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC,CAAC;YAC3F,CAAC;QACF,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,IAAY,EAAE,IAAS,EAAE,UAAmB;IACjF,mBAAmB,EAAE,CAAC;IACtB,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,sBAAsB;QAAE,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;IAEtE,0FAA0F;IAC1F,0EAA0E;IAC1E,OAAO,SAAS,EAAE,IAAI,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;QAClC,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACJ,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,cAAc,EAAE;gBAC3C,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,yBAAyB;gBACrD,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,8BAAQ,EAAE;aAC3E,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,uFAAuF;YACvF,yFAAyF;YACzF,uCAAuC;YACvC,YAAY,CAAC,KAAK,CAAC,gCAAgC,IAAI,sBAAsB,cAAc,EAAE,EAAE,KAAK,CAAC,CAAC;YACtG,MAAM,IAAI,yBAAW,CACpB,cAAc,IAAI,wDAAwD,KAAK,CAAC,OAAO,EAAE,EACzF,GAAG,CACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YACjC,SAAS;QACV,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;YACpD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC7B,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACpC,aAAa,CAAC,IAAI,yBAAW,CAAC,6DAA6D,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC3G,CAAC,EAAE,kBAAkB,CAAC,CAAC;YACvB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE;gBAChC,cAAc;gBACd,OAAO,CAAC,MAAM;oBACb,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,cAAc,CAAC,MAAM,CAAC,CAAC;gBACxB,CAAC;gBACD,MAAM,CAAC,KAAK;oBACX,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,aAAa,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;aACD,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC;QAAE,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9E,MAAM,IAAI,yBAAW,CACpB,cAAc,IAAI,4EAA4E,EAC9F,GAAG,CACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,8BAA8B,CAAC,KAEpD;IACA,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IAClE,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACJ,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,yBAAW,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;QAC/F,qFAAqF;QACrF,uFAAuF;QACvF,0EAA0E;QAC1E,MAAM,iBAAiB,GAAG,UAAU,KAAK,IAAI,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAA,oEAAmC,EAAC,iBAAiB,EAAE,GAAG,EAAE;YAChF,MAAM,iBAAiB,GAAG,aAAa,CAAC,eAAe,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YACjF,OAAO,aAAa,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,YAAY,sBAAQ,IAAI,OAAO,MAAM,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;YACtE,sFAAsF;YACtF,kFAAkF;YAClF,uFAAuF;YACvF,gDAAgD;YAChD,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,yBAAW,CACpB,cAAc,IAAI,CAAC,SAAS,qGAAqG,EACjI,GAAG,CACH,CAAC;QACH,CAAC;QACD,QAAQ,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,QAAQ,GAAG;YACV,SAAS;YACT,KAAK,EAAE;gBACN,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,IAAI,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO;gBAC3E,UAAU,EAAE,KAAK,CAAC,UAAU;aAC5B;SACD,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACJ,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,wFAAwF;QACxF,sBAAsB;QACtB,YAAY,CAAC,KAAK,CAAC,uCAAuC,IAAI,EAAE,SAAS,2BAA2B,EAAE,KAAK,CAAC,CAAC;QAC7G,mBAAmB,CAAC,UAAU,EAAE;YAC/B,SAAS;YACT,KAAK,EAAE;gBACN,OAAO,EAAE,cAAc,IAAI,EAAE,SAAS,kDAAkD,KAAK,CAAC,OAAO,EAAE;gBACvG,UAAU,EAAE,GAAG;aACf;SACD,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,SAAS,mBAAmB,CAAC,iBAAyB,EAAE,OAAY;IACnE,wFAAwF;IACxF,2CAA2C;IAC3C,OAAO,CAAC,UAAU,GAAG,8BAAQ,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,0BAA0B,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QACnH,YAAY,CAAC,KAAK,CAAC,mDAAmD,OAAO,CAAC,SAAS,2BAA2B,CAAC,CAAC;IACrH,CAAC;AACF,CAAC"}
+{"version":3,"file":"registeredOperations.js","sourceRoot":"","sources":["../../../server/serverHelpers/registeredOperations.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2DA,8DAEC;AAmBD,kEAMC;AAKD,gEAqBC;AAoDD,gEAOC;AAyFD,wEAkDC;AAtTD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,6DAA6D;AAC7D,6CAAuC;AACvC,iEAAmD;AACnD,qFAAuE;AACvE,8FAAkE;AAClE,kEAA+D;AAC/D,8CAAiD;AACjD,kEAA6F;AAC7F,mFAG+C;AAC/C,qFAAuF;AAEvF,MAAM,YAAY,GAAG,0BAAY,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;AAO7D,4FAA4F;AAC5F,kDAAkD;AAClD,MAAM,sBAAsB,GAAG,CAAC,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;AAEnH,8FAA8F;AAC9F,2FAA2F;AAC3F,iEAAiE;AACjE,MAAM,kBAAkB,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,6BAA6B,CAAC,IAAI,OAAO,CAAC;AAEjG,gGAAgG;AAChG,2FAA2F;AAC3F,2FAA2F;AAC3F,4FAA4F;AAC5F,IAAI,aAGH,CAAC;AACF,SAAgB,yBAAyB,CAAC,QAA8B;IACvE,aAAa,GAAG,QAAQ,CAAC;AAC1B,CAAC;AAED,yEAAyE;AACzE,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAuB,CAAC;AAC1D,gGAAgG;AAChG,oGAAoG;AACpG,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAuB,CAAC;AACzD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAG9B,CAAC;AACJ,IAAI,aAAa,GAAG,CAAC,CAAC;AACtB,IAAI,qBAAqB,GAAG,KAAK,CAAC;AAElC;;;;GAIG;AACH,SAAgB,2BAA2B,CAAC,IAAY,EAAE,SAAS,GAAG,KAAK;IAC1E,IAAI,kCAAY;QAAE,OAAO;IACzB,IAAA,qBAAY,EAAC;QACZ,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,oBAAoB;QAChD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;KAC5B,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,4CAA4C,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;AACrG,CAAC;AAED;;GAEG;AACH,SAAgB,0BAA0B,CAAC,KAE1C;IACA,IAAI,CAAC,kCAAY;QAAE,OAAO;IAC1B,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;IAC7D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO;IACvE,iGAAiG;IACjG,kGAAkG;IAClG,gGAAgG;IAChG,kDAAkD;IAClD,IAAI,IAAA,kCAAe,EAAC,UAAU,CAAC,EAAE,CAAC;QACjC,YAAY,CAAC,KAAK,CAAC,uBAAuB,IAAI,uCAAuC,UAAU,EAAE,CAAC,CAAC;QACnG,OAAO;IACR,CAAC;IACD,IAAI,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS;QAAE,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IACtE,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1B,sFAAsF;IACtF,6FAA6F;IAC7F,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC,CAAC;IACzD,YAAY,CAAC,KAAK,CAAC,yBAAyB,IAAI,gCAAgC,UAAU,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,YAAoB;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,kBAAkB,EAAE,CAAC;QACpD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;YAAE,SAAS;QAC9C,yFAAyF;QACzF,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC;YAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;;YAC5C,kBAAkB,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,iBAAiB,EAAE,CAAC;QACtD,IAAI,OAAO,CAAC,cAAc,KAAK,YAAY,EAAE,CAAC;YAC7C,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,IAAI,yBAAW,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3F,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,QAAgB,EAAE,SAAkB;IAC7E,IAAI,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,SAAS,EAAE,CAAC;QACf,IAAI,CAAC,YAAY;YAAE,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,YAAY,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3E,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAA,0DAAgC,EAAC,IAAI,CAAC,CAAC;IACxC,CAAC;SAAM,IAAI,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtE,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAA,4DAAkC,EAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACrC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAA,4DAAkC,EAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,IAAI,QAAQ,GAAG,CAAC,CAAC;AACjB;;;;;;GAMG;AACH,SAAgB,0BAA0B,CACzC,IAAY,EACZ,UAAU,GAAG,KAAK;IAElB,IAAI,CAAC,kCAAY;QAAE,OAAO,SAAS,CAAC;IACpC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,mBAAmB;IAC3B,IAAI,qBAAqB;QAAE,OAAO;IAClC,qBAAqB,GAAG,IAAI,CAAC;IAC7B,IAAA,kCAAe,EAAC,KAAK,CAAC,eAAe,CAAC,0BAA0B,EAAE,CAAC,KAAU,EAAE,EAAE;QAChF,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,2EAA2E;QAC3E,IAAI,UAAU,KAAK,OAAO,CAAC,cAAc;YAAE,OAAO;QAClD,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,yBAAW,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC;;YAC9E,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,IAAA,+BAAY,EAAC,gBAAgB,CAAC,CAAC;AAChC,CAAC;AAED,mGAAmG;AACnG,mGAAmG;AACnG,+FAA+F;AAC/F,oEAAoE;AACpE,IAAI,kCAAY;IAAE,mBAAmB,EAAE,CAAC;AAExC,KAAK,UAAU,sBAAsB,CAAC,IAAY,EAAE,IAAS,EAAE,UAAmB;IACjF,mBAAmB,EAAE,CAAC;IACtB,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,sBAAsB;QAAE,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;IAEtE,0FAA0F;IAC1F,0EAA0E;IAC1E,OAAO,SAAS,EAAE,IAAI,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;QAClC,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACJ,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,cAAc,EAAE;gBAC3C,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,yBAAyB;gBACrD,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,8BAAQ,EAAE;aAC3E,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,uFAAuF;YACvF,yFAAyF;YACzF,uCAAuC;YACvC,YAAY,CAAC,KAAK,CAAC,gCAAgC,IAAI,sBAAsB,cAAc,EAAE,EAAE,KAAK,CAAC,CAAC;YACtG,MAAM,IAAI,yBAAW,CACpB,cAAc,IAAI,wDAAwD,KAAK,CAAC,OAAO,EAAE,EACzF,GAAG,CACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,sFAAsF;YACtF,yFAAyF;YACzF,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YACjC,kBAAkB,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;YAChD,SAAS;QACV,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;YACpD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC7B,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACpC,aAAa,CAAC,IAAI,yBAAW,CAAC,6DAA6D,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC3G,CAAC,EAAE,kBAAkB,CAAC,CAAC;YACvB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE;gBAChC,cAAc;gBACd,OAAO,CAAC,MAAM;oBACb,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,cAAc,CAAC,MAAM,CAAC,CAAC;gBACxB,CAAC;gBACD,MAAM,CAAC,KAAK;oBACX,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,aAAa,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;aACD,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC;QAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,IAAI,yBAAW,CACpB,cAAc,IAAI,4EAA4E,EAC9F,GAAG,CACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,8BAA8B,CAAC,KAEpD;IACA,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IAClE,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACJ,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,yBAAW,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;QAC/F,qFAAqF;QACrF,uFAAuF;QACvF,0EAA0E;QAC1E,MAAM,iBAAiB,GAAG,UAAU,KAAK,IAAI,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAA,oEAAmC,EAAC,iBAAiB,EAAE,GAAG,EAAE;YAChF,MAAM,iBAAiB,GAAG,aAAa,CAAC,eAAe,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YACjF,OAAO,aAAa,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,YAAY,sBAAQ,IAAI,OAAO,MAAM,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;YACtE,sFAAsF;YACtF,kFAAkF;YAClF,uFAAuF;YACvF,gDAAgD;YAChD,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,yBAAW,CACpB,cAAc,IAAI,CAAC,SAAS,qGAAqG,EACjI,GAAG,CACH,CAAC;QACH,CAAC;QACD,QAAQ,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,QAAQ,GAAG;YACV,SAAS;YACT,KAAK,EAAE;gBACN,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,IAAI,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO;gBAC3E,UAAU,EAAE,KAAK,CAAC,UAAU;aAC5B;SACD,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACJ,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,wFAAwF;QACxF,sBAAsB;QACtB,YAAY,CAAC,KAAK,CAAC,uCAAuC,IAAI,EAAE,SAAS,2BAA2B,EAAE,KAAK,CAAC,CAAC;QAC7G,mBAAmB,CAAC,UAAU,EAAE;YAC/B,SAAS;YACT,KAAK,EAAE;gBACN,OAAO,EAAE,cAAc,IAAI,EAAE,SAAS,kDAAkD,KAAK,CAAC,OAAO,EAAE;gBACvG,UAAU,EAAE,GAAG;aACf;SACD,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,SAAS,mBAAmB,CAAC,iBAAyB,EAAE,OAAY;IACnE,wFAAwF;IACxF,2CAA2C;IAC3C,OAAO,CAAC,UAAU,GAAG,8BAAQ,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,0BAA0B,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QACnH,YAAY,CAAC,KAAK,CAAC,mDAAmD,OAAO,CAAC,SAAS,2BAA2B,CAAC,CAAC;IACrH,CAAC;AACF,CAAC"}

package/dist/server/serverHelpers/requestSanitization.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `evaluateSQL` honors a supplied `parsed_sql_object` verbatim and skips parsing, so one carrying
+ * `permissions_checked: true` executes an AST that no authorization check ever saw. Neither position
+ * is ever legitimately client-supplied: dispatch parses the statement itself, and the job worker
+ * re-parses from the `sql` string dispatch authorized.
+ *
+ * Both positions, because the two entry points differ: `chooseOperation` overwrites the top-level
+ * object with its own parse, but only inside its SQL branch, so a non-SQL job (`export_local` with a
+ * `search_by_value` search) can still carry a client-supplied one through to the persisted row.
+ */
+export declare function stripSuppliedParsedSqlObject(request: any): void;

package/dist/server/serverHelpers/requestSanitization.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stripSuppliedParsedSqlObject = stripSuppliedParsedSqlObject;
+/**
+ * `evaluateSQL` honors a supplied `parsed_sql_object` verbatim and skips parsing, so one carrying
+ * `permissions_checked: true` executes an AST that no authorization check ever saw. Neither position
+ * is ever legitimately client-supplied: dispatch parses the statement itself, and the job worker
+ * re-parses from the `sql` string dispatch authorized.
+ *
+ * Both positions, because the two entry points differ: `chooseOperation` overwrites the top-level
+ * object with its own parse, but only inside its SQL branch, so a non-SQL job (`export_local` with a
+ * `search_by_value` search) can still carry a client-supplied one through to the persisted row.
+ */
+function stripSuppliedParsedSqlObject(request) {
+    if (!request)
+        return;
+    delete request.parsed_sql_object;
+    delete request.search_operation?.parsed_sql_object;
+}
+//# sourceMappingURL=requestSanitization.js.map

package/dist/server/serverHelpers/requestSanitization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestSanitization.js","sourceRoot":"","sources":["../../../server/serverHelpers/requestSanitization.ts"],"names":[],"mappings":";;AAUA,oEAIC;AAdD;;;;;;;;;GASG;AACH,SAAgB,4BAA4B,CAAC,OAAY;IACxD,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,OAAO,OAAO,CAAC,iBAAiB,CAAC;IACjC,OAAO,OAAO,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;AACpD,CAAC"}

package/dist/server/serverHelpers/serverHandlers.js

@@ -34,6 +34,9 @@ const NO_AUTH_OPERATIONS = [
     terms.OPERATIONS_ENUM.CREATE_AUTHENTICATION_TOKENS,
     terms.OPERATIONS_ENUM.LOGIN,
     terms.OPERATIONS_ENUM.LOGOUT,
+    // The OIDC exchange *is* the authentication (#2171): the caller proves identity with a token
+    // from a trusted issuer, not with Harper credentials it does not have.
+    terms.OPERATIONS_ENUM.EXCHANGE_OIDC_TOKEN,
 ];
 const UNSAFE_REQUEST_BODY_PROPERTIES = ['__proto__', 'constructor', 'prototype'];
 function validateRequestBodyProperties(body) {
@@ -90,10 +93,10 @@ function authHandler(req, resp, done) {
     let user;
     const isAuthOperation = !NO_AUTH_OPERATIONS.includes(req.body.operation);
     if (isAuthOperation ||
-        // If create token is called without username/password in the body it needs to be authorized
+        // Create token needs to be authorized when called without username/password in the body, or
+        // with an inline role object (scoped-token minting is gated on the authenticated requester)
         (req.body.operation === terms.OPERATIONS_ENUM.CREATE_AUTHENTICATION_TOKENS &&
-            !req.body.username &&
-            !req.body.password)) {
+            ((!req.body.username && !req.body.password) || (req.body.role && typeof req.body.role === 'object')))) {
         pAuthorize(req, resp)
             .then(async (userData) => {
             user = userData;

package/dist/server/serverHelpers/serverHandlers.js.map

@@ -1 +1 @@
-{"version":3,"file":"serverHandlers.js","sourceRoot":"","sources":["../../../server/serverHelpers/serverHandlers.js"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,MAAM,KAAK,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;AACnD,MAAM,OAAO,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;AACzD,MAAM,YAAY,GAAG,OAAO,CAAC,wCAAwC,CAAC,CAAC;AACvE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;AACjE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;AAC/F,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACnD,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvC,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEzB,MAAM,IAAI,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;AAEtD,4FAA4F;AAC5F,oCAAoC;AACpC,SAAS,UAAU,CAAC,GAAG,EAAE,IAAI;IAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;AACxD,MAAM,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAAC;AAC1E,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAClD,MAAM,EAAE,eAAe,EAAE,uBAAuB,EAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAErF,sFAAsF;AACtF,wFAAwF;AACxF,sFAAsF;AACtF,uFAAuF;AACvF,2FAA2F;AAC3F,0FAA0F;AAC1F,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACvC,KAAK,CAAC,eAAe,CAAC,gBAAgB;IACtC,KAAK,CAAC,eAAe,CAAC,cAAc;IACpC,KAAK,CAAC,eAAe,CAAC,QAAQ;CAC9B,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG;IAC1B,KAAK,CAAC,eAAe,CAAC,4BAA4B;IAClD,KAAK,CAAC,eAAe,CAAC,KAAK;IAC3B,KAAK,CAAC,eAAe,CAAC,MAAM;CAC5B,CAAC;AAEF,MAAM,8BAA8B,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;AAEjF,SAAS,6BAA6B,CAAC,IAAI;IAC1C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;IACpD,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,8BAA8B,EAAE,CAAC;QACvD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,WAAW,CAAC,0BAA0B,QAAQ,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAClF,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,6BAA6B,CAAC,GAAG;IACzC,IAAI,OAAO,GAAG,6CAA6C,GAAG,CAAC,OAAO,KAAK,EAAE,CAAC,GAAG,UAAU,GAAG,CAAC,KAAK,IACnG,EAAE,CAAC,GACJ,eAAe,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC;IAClD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,2EAA2E;IAC3E,qDAAqD;IACrD,QAAQ,CAAC,CAAC,CAAC,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI;IAC3C,YAAY,CAAC,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAC7D,mFAAmF;YACnF,uFAAuF;YACvF,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;gBACvB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YAClC,CAAC;YACD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,qBAAqB,CAAC;IAC3G,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI;IAChD,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrF,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,KAAK,EAAE,EAAE,eAAe,EAAE,SAAS,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC5G,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,aAAa,GAAG,cAAc,CACnC,IAAI,KAAK,EAAE,EACX,oDAAoD,EACpD,SAAS,CAAC,iBAAiB,CAAC,WAAW,CACvC,CAAC;QACF,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,EAAE,CAAC;AACR,CAAC;AAED,SAAS,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI;IACnC,IAAI,IAAI,CAAC;IAET,MAAM,eAAe,GAAG,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzE,IACC,eAAe;QACf,4FAA4F;QAC5F,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,eAAe,CAAC,4BAA4B;YACzE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ;YAClB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EACnB,CAAC;QACF,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;aACnB,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;YACxB,IAAI,GAAG,QAAQ,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACzB,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC1B,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACzE,OAAO,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;YAC7B,CAAC;YACD,IAAI,EAAE,CAAC;QACR,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACd,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACP,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAChC,IAAI,EAAE,CAAC;IACR,CAAC;AACF,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI;IAClD,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;SACnB,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QAClB,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACxB,IAAI,EAAE,CAAC;IACR,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACd,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,YAAY,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,MAAM,EAAE,aAAa,eAAe,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;QAClF,IAAI,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC/E,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,GAAG,KAAK;IAC7D,IAAI,kBAAkB,CAAC;IAEvB,IAAI,CAAC;QACJ,6BAA6B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,0FAA0F;QAC1F,wFAAwF;QACxF,sBAAsB;QACtB,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;QACxE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;QAEtE,kBAAkB,GAAG,eAAe,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE/D,qFAAqF;QACrF,uFAAuF;QACvF,oFAAoF;QACpF,+EAA+E;QAC/E,kEAAkE;QAClE,oFAAoF;QACpF,sFAAsF;QACtF,sFAAsF;QACtF,qFAAqF;QACrF,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,IAAI,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3G,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;YACtC,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;YAChD,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;YACxC,GAAG,CAAC,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,uDAAuD;YAC9F,OAAO,uBAAuB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,uBAAuB,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACjH,CAAC;QAED,IAAI,MAAM,GAAG,MAAM,eAAe,CAAC,uBAAuB,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACpF,IAAI,MAAM,YAAY,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAClD,KAAK,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC1C,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;YACD,wFAAwF;YACxF,sFAAsF;YACtF,oFAAoF;YACpF,gFAAgF;YAChF,6EAA6E;YAC7E,+CAA+C;YAC/C,IAAI,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBACxG,GAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;gBACvC,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,UAAU;gBACtE,gFAAgF;gBAChF,sFAAsF;gBACtF,kFAAkF;gBAClF,iFAAiF;gBACjF,uDAAuD;gBACvD,kFAAkF;gBAClF,iFAAiF;gBACjF,mFAAmF;gBACnF,mFAAmF;gBACnF,eAAe;gBACf,MAAM,MAAM,GAAG,MAAM,CAAC;gBACtB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBACnD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACF,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,OAAO,GAAG;IAChB,WAAW;IACX,0BAA0B;IAC1B,iBAAiB;IACjB,6BAA6B;IAC7B,kBAAkB;IAClB,wBAAwB;CACxB,CAAC"}
+{"version":3,"file":"serverHandlers.js","sourceRoot":"","sources":["../../../server/serverHelpers/serverHandlers.js"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,MAAM,KAAK,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;AACnD,MAAM,OAAO,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;AACzD,MAAM,YAAY,GAAG,OAAO,CAAC,wCAAwC,CAAC,CAAC;AACvE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;AACjE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;AAC/F,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACnD,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvC,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEzB,MAAM,IAAI,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;AAEtD,4FAA4F;AAC5F,oCAAoC;AACpC,SAAS,UAAU,CAAC,GAAG,EAAE,IAAI;IAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;AACxD,MAAM,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAAC;AAC1E,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAClD,MAAM,EAAE,eAAe,EAAE,uBAAuB,EAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAErF,sFAAsF;AACtF,wFAAwF;AACxF,sFAAsF;AACtF,uFAAuF;AACvF,2FAA2F;AAC3F,0FAA0F;AAC1F,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACvC,KAAK,CAAC,eAAe,CAAC,gBAAgB;IACtC,KAAK,CAAC,eAAe,CAAC,cAAc;IACpC,KAAK,CAAC,eAAe,CAAC,QAAQ;CAC9B,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG;IAC1B,KAAK,CAAC,eAAe,CAAC,4BAA4B;IAClD,KAAK,CAAC,eAAe,CAAC,KAAK;IAC3B,KAAK,CAAC,eAAe,CAAC,MAAM;IAC5B,6FAA6F;IAC7F,uEAAuE;IACvE,KAAK,CAAC,eAAe,CAAC,mBAAmB;CACzC,CAAC;AAEF,MAAM,8BAA8B,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;AAEjF,SAAS,6BAA6B,CAAC,IAAI;IAC1C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;IACpD,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,8BAA8B,EAAE,CAAC;QACvD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,WAAW,CAAC,0BAA0B,QAAQ,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAClF,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,6BAA6B,CAAC,GAAG;IACzC,IAAI,OAAO,GAAG,6CAA6C,GAAG,CAAC,OAAO,KAAK,EAAE,CAAC,GAAG,UAAU,GAAG,CAAC,KAAK,IACnG,EAAE,CAAC,GACJ,eAAe,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC;IAClD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,2EAA2E;IAC3E,qDAAqD;IACrD,QAAQ,CAAC,CAAC,CAAC,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI;IAC3C,YAAY,CAAC,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAC7D,mFAAmF;YACnF,uFAAuF;YACvF,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;gBACvB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YAClC,CAAC;YACD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,qBAAqB,CAAC;IAC3G,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI;IAChD,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrF,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,KAAK,EAAE,EAAE,eAAe,EAAE,SAAS,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC5G,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,aAAa,GAAG,cAAc,CACnC,IAAI,KAAK,EAAE,EACX,oDAAoD,EACpD,SAAS,CAAC,iBAAiB,CAAC,WAAW,CACvC,CAAC;QACF,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,EAAE,CAAC;AACR,CAAC;AAED,SAAS,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI;IACnC,IAAI,IAAI,CAAC;IAET,MAAM,eAAe,GAAG,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzE,IACC,eAAe;QACf,4FAA4F;QAC5F,4FAA4F;QAC5F,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,eAAe,CAAC,4BAA4B;YACzE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EACrG,CAAC;QACF,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;aACnB,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;YACxB,IAAI,GAAG,QAAQ,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACzB,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC1B,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACzE,OAAO,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;YAC7B,CAAC;YACD,IAAI,EAAE,CAAC;QACR,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACd,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACP,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAChC,IAAI,EAAE,CAAC;IACR,CAAC;AACF,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI;IAClD,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;SACnB,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QAClB,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACxB,IAAI,EAAE,CAAC;IACR,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACd,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,YAAY,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,MAAM,EAAE,aAAa,eAAe,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;QAClF,IAAI,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC/E,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,GAAG,KAAK;IAC7D,IAAI,kBAAkB,CAAC;IAEvB,IAAI,CAAC;QACJ,6BAA6B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,0FAA0F;QAC1F,wFAAwF;QACxF,sBAAsB;QACtB,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;QACxE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;QAEtE,kBAAkB,GAAG,eAAe,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE/D,qFAAqF;QACrF,uFAAuF;QACvF,oFAAoF;QACpF,+EAA+E;QAC/E,kEAAkE;QAClE,oFAAoF;QACpF,sFAAsF;QACtF,sFAAsF;QACtF,qFAAqF;QACrF,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,IAAI,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3G,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;YACtC,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;YAChD,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;YACxC,GAAG,CAAC,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,uDAAuD;YAC9F,OAAO,uBAAuB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,uBAAuB,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACjH,CAAC;QAED,IAAI,MAAM,GAAG,MAAM,eAAe,CAAC,uBAAuB,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACpF,IAAI,MAAM,YAAY,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAClD,KAAK,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC1C,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;YACD,wFAAwF;YACxF,sFAAsF;YACtF,oFAAoF;YACpF,gFAAgF;YAChF,6EAA6E;YAC7E,+CAA+C;YAC/C,IAAI,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBACxG,GAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;gBACvC,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,UAAU;gBACtE,gFAAgF;gBAChF,sFAAsF;gBACtF,kFAAkF;gBAClF,iFAAiF;gBACjF,uDAAuD;gBACvD,kFAAkF;gBAClF,iFAAiF;gBACjF,mFAAmF;gBACnF,mFAAmF;gBACnF,eAAe;gBACf,MAAM,MAAM,GAAG,MAAM,CAAC;gBACtB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBACnD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACF,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,OAAO,GAAG;IAChB,WAAW;IACX,0BAA0B;IAC1B,iBAAiB;IACjB,6BAA6B;IAC7B,kBAAkB;IAClB,wBAAwB;CACxB,CAAC"}

package/dist/server/serverHelpers/serverUtilities.d.ts

@@ -8,6 +8,24 @@ export type OperationFunctionName = ValueOf<typeof terms.OPERATIONS_ENUM>;
  * This will process a command message on this receiving node rather than sending it to a remote node.  NOTE: this function
  * handles the response to the sender.
  */
+/**
+ * Fields stripped from an operation body before it reaches the operations log.
+ *
+ * `credentials` carries a transient token on deploy_component (`registryAuth` is its pre-rename
+ * name — still stripped, since this runs ahead of the validation that now rejects it). `value` /
+ * `values` carry .env secrets from set_env_value; `value` / `envelope` carry secrets from
+ * set_secret. `token` is the login-purpose token (login) and the CI identity token
+ * (exchange_oidc_token), and is also stripped defensively — no operation declares a top-level `token`,
+ * but validation allows unknown keys, so a mistyped `harper deploy setup token=…` must not log a live
+ * credential. `refresh_token` is the 30-day credential (refresh_operation_token).
+ *
+ * Redaction runs *before* the handler, so a rejected request logs a still-spendable credential —
+ * which is why a new secret-bearing field belongs here rather than left to the default (harper#1527
+ * was this same miss for set_env_value).
+ */
+export declare const UNLOGGABLE_OPERATION_FIELDS: string[];
+/** Callers gate this on log level: it allocates, and the operations log is often off. */
+export declare function redactForOperationLog(body: Record<string, any>): Record<string, any>;
 export declare function processLocalTransaction(req: OperationRequest, operationFunction: Function): Promise<any>;
 export declare const OPERATION_FUNCTION_MAP: Map<OperationFunctionName, OperationFunctionObject>;
 export type OperationDefinition = {