@id-wispera/core 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +268 -0
- package/dist/audit.d.ts +68 -0
- package/dist/audit.d.ts.map +1 -0
- package/dist/audit.js +252 -0
- package/dist/audit.js.map +1 -0
- package/dist/auth/index.d.ts +8 -0
- package/dist/auth/index.d.ts.map +1 -0
- package/dist/auth/index.js +8 -0
- package/dist/auth/index.js.map +1 -0
- package/dist/auth/keychainProvider.d.ts +40 -0
- package/dist/auth/keychainProvider.d.ts.map +1 -0
- package/dist/auth/keychainProvider.js +98 -0
- package/dist/auth/keychainProvider.js.map +1 -0
- package/dist/auth/passphraseProvider.d.ts +80 -0
- package/dist/auth/passphraseProvider.d.ts.map +1 -0
- package/dist/auth/passphraseProvider.js +188 -0
- package/dist/auth/passphraseProvider.js.map +1 -0
- package/dist/auth/sessionTokenManager.d.ts +106 -0
- package/dist/auth/sessionTokenManager.d.ts.map +1 -0
- package/dist/auth/sessionTokenManager.js +263 -0
- package/dist/auth/sessionTokenManager.js.map +1 -0
- package/dist/delegation.d.ts +81 -0
- package/dist/delegation.d.ts.map +1 -0
- package/dist/delegation.js +299 -0
- package/dist/delegation.js.map +1 -0
- package/dist/detection.d.ts +35 -0
- package/dist/detection.d.ts.map +1 -0
- package/dist/detection.js +474 -0
- package/dist/detection.js.map +1 -0
- package/dist/exec/execManager.d.ts +60 -0
- package/dist/exec/execManager.d.ts.map +1 -0
- package/dist/exec/execManager.js +226 -0
- package/dist/exec/execManager.js.map +1 -0
- package/dist/exec/index.d.ts +6 -0
- package/dist/exec/index.d.ts.map +1 -0
- package/dist/exec/index.js +5 -0
- package/dist/exec/index.js.map +1 -0
- package/dist/index.d.ts +35 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +98 -0
- package/dist/index.js.map +1 -0
- package/dist/integrations/base.d.ts +64 -0
- package/dist/integrations/base.d.ts.map +1 -0
- package/dist/integrations/base.js +173 -0
- package/dist/integrations/base.js.map +1 -0
- package/dist/integrations/envMapping.d.ts +47 -0
- package/dist/integrations/envMapping.d.ts.map +1 -0
- package/dist/integrations/envMapping.js +174 -0
- package/dist/integrations/envMapping.js.map +1 -0
- package/dist/integrations/google-a2a.d.ts +48 -0
- package/dist/integrations/google-a2a.d.ts.map +1 -0
- package/dist/integrations/google-a2a.js +108 -0
- package/dist/integrations/google-a2a.js.map +1 -0
- package/dist/integrations/index.d.ts +14 -0
- package/dist/integrations/index.d.ts.map +1 -0
- package/dist/integrations/index.js +14 -0
- package/dist/integrations/index.js.map +1 -0
- package/dist/integrations/langchain.d.ts +38 -0
- package/dist/integrations/langchain.d.ts.map +1 -0
- package/dist/integrations/langchain.js +45 -0
- package/dist/integrations/langchain.js.map +1 -0
- package/dist/integrations/openai-agents.d.ts +76 -0
- package/dist/integrations/openai-agents.d.ts.map +1 -0
- package/dist/integrations/openai-agents.js +95 -0
- package/dist/integrations/openai-agents.js.map +1 -0
- package/dist/integrations/slack.d.ts +59 -0
- package/dist/integrations/slack.d.ts.map +1 -0
- package/dist/integrations/slack.js +113 -0
- package/dist/integrations/slack.js.map +1 -0
- package/dist/integrations/types.d.ts +107 -0
- package/dist/integrations/types.d.ts.map +1 -0
- package/dist/integrations/types.js +6 -0
- package/dist/integrations/types.js.map +1 -0
- package/dist/locations.d.ts +157 -0
- package/dist/locations.d.ts.map +1 -0
- package/dist/locations.js +733 -0
- package/dist/locations.js.map +1 -0
- package/dist/passport.d.ts +70 -0
- package/dist/passport.d.ts.map +1 -0
- package/dist/passport.js +429 -0
- package/dist/passport.js.map +1 -0
- package/dist/policy.d.ts +80 -0
- package/dist/policy.d.ts.map +1 -0
- package/dist/policy.js +392 -0
- package/dist/policy.js.map +1 -0
- package/dist/providers/openclaw.d.ts +80 -0
- package/dist/providers/openclaw.d.ts.map +1 -0
- package/dist/providers/openclaw.js +712 -0
- package/dist/providers/openclaw.js.map +1 -0
- package/dist/provisioning/adminPassport.d.ts +51 -0
- package/dist/provisioning/adminPassport.d.ts.map +1 -0
- package/dist/provisioning/adminPassport.js +101 -0
- package/dist/provisioning/adminPassport.js.map +1 -0
- package/dist/provisioning/index.d.ts +81 -0
- package/dist/provisioning/index.d.ts.map +1 -0
- package/dist/provisioning/index.js +141 -0
- package/dist/provisioning/index.js.map +1 -0
- package/dist/provisioning/provider.d.ts +59 -0
- package/dist/provisioning/provider.d.ts.map +1 -0
- package/dist/provisioning/provider.js +52 -0
- package/dist/provisioning/provider.js.map +1 -0
- package/dist/provisioning/providers/anthropic.d.ts +32 -0
- package/dist/provisioning/providers/anthropic.d.ts.map +1 -0
- package/dist/provisioning/providers/anthropic.js +116 -0
- package/dist/provisioning/providers/anthropic.js.map +1 -0
- package/dist/provisioning/providers/aws.d.ts +29 -0
- package/dist/provisioning/providers/aws.d.ts.map +1 -0
- package/dist/provisioning/providers/aws.js +455 -0
- package/dist/provisioning/providers/aws.js.map +1 -0
- package/dist/provisioning/providers/azure-entra.d.ts +32 -0
- package/dist/provisioning/providers/azure-entra.d.ts.map +1 -0
- package/dist/provisioning/providers/azure-entra.js +312 -0
- package/dist/provisioning/providers/azure-entra.js.map +1 -0
- package/dist/provisioning/providers/github.d.ts +24 -0
- package/dist/provisioning/providers/github.d.ts.map +1 -0
- package/dist/provisioning/providers/github.js +219 -0
- package/dist/provisioning/providers/github.js.map +1 -0
- package/dist/provisioning/providers/google-cloud.d.ts +34 -0
- package/dist/provisioning/providers/google-cloud.d.ts.map +1 -0
- package/dist/provisioning/providers/google-cloud.js +366 -0
- package/dist/provisioning/providers/google-cloud.js.map +1 -0
- package/dist/provisioning/providers/openai.d.ts +29 -0
- package/dist/provisioning/providers/openai.d.ts.map +1 -0
- package/dist/provisioning/providers/openai.js +263 -0
- package/dist/provisioning/providers/openai.js.map +1 -0
- package/dist/provisioning/providers/sendgrid.d.ts +27 -0
- package/dist/provisioning/providers/sendgrid.d.ts.map +1 -0
- package/dist/provisioning/providers/sendgrid.js +186 -0
- package/dist/provisioning/providers/sendgrid.js.map +1 -0
- package/dist/provisioning/providers/twilio.d.ts +27 -0
- package/dist/provisioning/providers/twilio.d.ts.map +1 -0
- package/dist/provisioning/providers/twilio.js +194 -0
- package/dist/provisioning/providers/twilio.js.map +1 -0
- package/dist/provisioning/types.d.ts +274 -0
- package/dist/provisioning/types.d.ts.map +1 -0
- package/dist/provisioning/types.js +6 -0
- package/dist/provisioning/types.js.map +1 -0
- package/dist/sharing.d.ts +60 -0
- package/dist/sharing.d.ts.map +1 -0
- package/dist/sharing.js +305 -0
- package/dist/sharing.js.map +1 -0
- package/dist/types.d.ts +396 -0
- package/dist/types.d.ts.map +1 -0
- package/dist/types.js +88 -0
- package/dist/types.js.map +1 -0
- package/dist/utils.d.ts +45 -0
- package/dist/utils.d.ts.map +1 -0
- package/dist/utils.js +110 -0
- package/dist/utils.js.map +1 -0
- package/dist/vault.d.ts +151 -0
- package/dist/vault.d.ts.map +1 -0
- package/dist/vault.js +499 -0
- package/dist/vault.js.map +1 -0
- package/package.json +117 -0
|
@@ -0,0 +1,263 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* OpenAI Provisioning Provider
|
|
3
|
+
* Creates API keys via OpenAI's admin API
|
|
4
|
+
*/
|
|
5
|
+
import { BaseProvisioningProvider } from '../provider.js';
|
|
6
|
+
const OPENAI_BASE_URL = 'https://api.openai.com/v1';
|
|
7
|
+
export class OpenAIProvider extends BaseProvisioningProvider {
|
|
8
|
+
provider = 'openai';
|
|
9
|
+
capabilities = {
|
|
10
|
+
canCreate: true,
|
|
11
|
+
canConfigurePermissions: true,
|
|
12
|
+
canRotate: true,
|
|
13
|
+
canRevoke: true,
|
|
14
|
+
canList: true,
|
|
15
|
+
supportsExpiry: false,
|
|
16
|
+
supportsScopedKeys: true,
|
|
17
|
+
};
|
|
18
|
+
async provision(request) {
|
|
19
|
+
this.ensureInitialized();
|
|
20
|
+
const config = request.config;
|
|
21
|
+
if (config.provider !== 'openai') {
|
|
22
|
+
return {
|
|
23
|
+
success: false,
|
|
24
|
+
error: {
|
|
25
|
+
code: 'INVALID_CONFIG',
|
|
26
|
+
message: `Expected openai config, got ${config.provider}`,
|
|
27
|
+
},
|
|
28
|
+
};
|
|
29
|
+
}
|
|
30
|
+
if (this.auth?.type !== 'api-key') {
|
|
31
|
+
return {
|
|
32
|
+
success: false,
|
|
33
|
+
error: {
|
|
34
|
+
code: 'INVALID_AUTH',
|
|
35
|
+
message: 'OpenAI provider requires api-key authentication (sk-admin-... key)',
|
|
36
|
+
},
|
|
37
|
+
};
|
|
38
|
+
}
|
|
39
|
+
try {
|
|
40
|
+
if (config.keyType === 'service-account') {
|
|
41
|
+
return await this.createServiceAccountKey(request, config);
|
|
42
|
+
}
|
|
43
|
+
else {
|
|
44
|
+
return await this.createAdminKey(request, config);
|
|
45
|
+
}
|
|
46
|
+
}
|
|
47
|
+
catch (err) {
|
|
48
|
+
const message = err instanceof Error ? err.message : String(err);
|
|
49
|
+
return {
|
|
50
|
+
success: false,
|
|
51
|
+
error: {
|
|
52
|
+
code: 'PROVISIONING_FAILED',
|
|
53
|
+
message: `OpenAI provisioning failed: ${message}`,
|
|
54
|
+
},
|
|
55
|
+
};
|
|
56
|
+
}
|
|
57
|
+
}
|
|
58
|
+
async list() {
|
|
59
|
+
this.ensureInitialized();
|
|
60
|
+
if (this.auth?.type !== 'api-key') {
|
|
61
|
+
throw new Error('OpenAI provider requires api-key authentication');
|
|
62
|
+
}
|
|
63
|
+
const response = await fetch(`${OPENAI_BASE_URL}/organization/admin_api_keys`, {
|
|
64
|
+
headers: {
|
|
65
|
+
'Authorization': `Bearer ${this.auth.key}`,
|
|
66
|
+
'Content-Type': 'application/json',
|
|
67
|
+
},
|
|
68
|
+
});
|
|
69
|
+
if (!response.ok) {
|
|
70
|
+
const errorBody = await response.text();
|
|
71
|
+
throw new Error(`Failed to list OpenAI keys: ${response.status} ${errorBody}`);
|
|
72
|
+
}
|
|
73
|
+
const data = await response.json();
|
|
74
|
+
return (data.data ?? []).map((key) => ({
|
|
75
|
+
id: key.id,
|
|
76
|
+
name: key.name,
|
|
77
|
+
createdAt: new Date(key.created_at * 1000),
|
|
78
|
+
status: key.status ?? 'active',
|
|
79
|
+
}));
|
|
80
|
+
}
|
|
81
|
+
async rotate(existingKeyId, request) {
|
|
82
|
+
// Create new key first
|
|
83
|
+
const newCredential = await this.provision(request);
|
|
84
|
+
return {
|
|
85
|
+
newCredential,
|
|
86
|
+
oldKeyId: existingKeyId,
|
|
87
|
+
recommendedRevocationDelay: 60, // 1 minute for propagation
|
|
88
|
+
};
|
|
89
|
+
}
|
|
90
|
+
async revoke(keyId) {
|
|
91
|
+
this.ensureInitialized();
|
|
92
|
+
if (this.auth?.type !== 'api-key') {
|
|
93
|
+
return { success: false, error: 'OpenAI provider requires api-key authentication' };
|
|
94
|
+
}
|
|
95
|
+
try {
|
|
96
|
+
const response = await fetch(`${OPENAI_BASE_URL}/organization/admin_api_keys/${keyId}`, {
|
|
97
|
+
method: 'DELETE',
|
|
98
|
+
headers: {
|
|
99
|
+
'Authorization': `Bearer ${this.auth.key}`,
|
|
100
|
+
'Content-Type': 'application/json',
|
|
101
|
+
},
|
|
102
|
+
});
|
|
103
|
+
if (!response.ok) {
|
|
104
|
+
const errorBody = await response.text();
|
|
105
|
+
return { success: false, error: `Failed to revoke: ${response.status} ${errorBody}` };
|
|
106
|
+
}
|
|
107
|
+
return { success: true };
|
|
108
|
+
}
|
|
109
|
+
catch (err) {
|
|
110
|
+
const message = err instanceof Error ? err.message : String(err);
|
|
111
|
+
return { success: false, error: message };
|
|
112
|
+
}
|
|
113
|
+
}
|
|
114
|
+
async validateAuth() {
|
|
115
|
+
this.ensureInitialized();
|
|
116
|
+
if (this.auth?.type !== 'api-key') {
|
|
117
|
+
return { valid: false, error: 'OpenAI provider requires api-key authentication' };
|
|
118
|
+
}
|
|
119
|
+
try {
|
|
120
|
+
const response = await fetch(`${OPENAI_BASE_URL}/organization/admin_api_keys?limit=1`, {
|
|
121
|
+
headers: {
|
|
122
|
+
'Authorization': `Bearer ${this.auth.key}`,
|
|
123
|
+
},
|
|
124
|
+
});
|
|
125
|
+
if (response.ok) {
|
|
126
|
+
return { valid: true };
|
|
127
|
+
}
|
|
128
|
+
return { valid: false, error: `Auth validation failed: ${response.status}` };
|
|
129
|
+
}
|
|
130
|
+
catch (err) {
|
|
131
|
+
const message = err instanceof Error ? err.message : String(err);
|
|
132
|
+
return { valid: false, error: message };
|
|
133
|
+
}
|
|
134
|
+
}
|
|
135
|
+
async createServiceAccountKey(request, config) {
|
|
136
|
+
if (!config.projectId) {
|
|
137
|
+
return {
|
|
138
|
+
success: false,
|
|
139
|
+
error: {
|
|
140
|
+
code: 'MISSING_PROJECT_ID',
|
|
141
|
+
message: 'projectId is required for service-account key type',
|
|
142
|
+
},
|
|
143
|
+
};
|
|
144
|
+
}
|
|
145
|
+
const auth = this.auth;
|
|
146
|
+
const url = `${OPENAI_BASE_URL}/organization/projects/${config.projectId}/service_accounts`;
|
|
147
|
+
const response = await fetch(url, {
|
|
148
|
+
method: 'POST',
|
|
149
|
+
headers: {
|
|
150
|
+
'Authorization': `Bearer ${auth.key}`,
|
|
151
|
+
'Content-Type': 'application/json',
|
|
152
|
+
},
|
|
153
|
+
body: JSON.stringify({ name: request.name }),
|
|
154
|
+
});
|
|
155
|
+
if (!response.ok) {
|
|
156
|
+
const errorBody = await response.json().catch(() => ({}));
|
|
157
|
+
return {
|
|
158
|
+
success: false,
|
|
159
|
+
error: {
|
|
160
|
+
code: `OPENAI_${response.status}`,
|
|
161
|
+
message: errorBody.error?.message ?? `HTTP ${response.status}`,
|
|
162
|
+
details: errorBody,
|
|
163
|
+
},
|
|
164
|
+
};
|
|
165
|
+
}
|
|
166
|
+
const data = await response.json();
|
|
167
|
+
const now = new Date().toISOString();
|
|
168
|
+
return {
|
|
169
|
+
success: true,
|
|
170
|
+
credentialValue: data.api_key.value,
|
|
171
|
+
providerKeyId: data.api_key.id,
|
|
172
|
+
metadata: {
|
|
173
|
+
serviceAccountId: data.id,
|
|
174
|
+
serviceAccountName: data.name,
|
|
175
|
+
role: data.role,
|
|
176
|
+
projectId: config.projectId,
|
|
177
|
+
organizationId: config.organizationId,
|
|
178
|
+
},
|
|
179
|
+
passportInput: {
|
|
180
|
+
name: request.name,
|
|
181
|
+
credentialType: 'api-key',
|
|
182
|
+
credentialValue: data.api_key.value,
|
|
183
|
+
visaType: this.mapToVisaType('openai', false),
|
|
184
|
+
issuingAuthority: 'OpenAI',
|
|
185
|
+
platforms: [this.mapToPlatform('openai')],
|
|
186
|
+
scope: ['inference'],
|
|
187
|
+
validFrom: now,
|
|
188
|
+
humanOwner: request.humanOwner,
|
|
189
|
+
agentId: request.agentId,
|
|
190
|
+
delegationChain: request.delegationChain ?? [
|
|
191
|
+
{
|
|
192
|
+
from: request.humanOwner,
|
|
193
|
+
to: request.agentId ?? request.name,
|
|
194
|
+
grantedAt: now,
|
|
195
|
+
scope: ['inference'],
|
|
196
|
+
notes: `Provisioned via OpenAI API (project: ${config.projectId})`,
|
|
197
|
+
},
|
|
198
|
+
],
|
|
199
|
+
tags: [...(request.tags ?? []), 'provisioned', 'openai', 'service-account'],
|
|
200
|
+
notes: request.notes ?? `OpenAI service account key for project ${config.projectId}`,
|
|
201
|
+
},
|
|
202
|
+
};
|
|
203
|
+
}
|
|
204
|
+
async createAdminKey(request, config) {
|
|
205
|
+
const auth = this.auth;
|
|
206
|
+
const url = `${OPENAI_BASE_URL}/organization/admin_api_keys`;
|
|
207
|
+
const response = await fetch(url, {
|
|
208
|
+
method: 'POST',
|
|
209
|
+
headers: {
|
|
210
|
+
'Authorization': `Bearer ${auth.key}`,
|
|
211
|
+
'Content-Type': 'application/json',
|
|
212
|
+
},
|
|
213
|
+
body: JSON.stringify({ name: request.name }),
|
|
214
|
+
});
|
|
215
|
+
if (!response.ok) {
|
|
216
|
+
const errorBody = await response.json().catch(() => ({}));
|
|
217
|
+
return {
|
|
218
|
+
success: false,
|
|
219
|
+
error: {
|
|
220
|
+
code: `OPENAI_${response.status}`,
|
|
221
|
+
message: errorBody.error?.message ?? `HTTP ${response.status}`,
|
|
222
|
+
details: errorBody,
|
|
223
|
+
},
|
|
224
|
+
};
|
|
225
|
+
}
|
|
226
|
+
const data = await response.json();
|
|
227
|
+
const now = new Date().toISOString();
|
|
228
|
+
return {
|
|
229
|
+
success: true,
|
|
230
|
+
credentialValue: data.api_key.value,
|
|
231
|
+
providerKeyId: data.api_key.id,
|
|
232
|
+
metadata: {
|
|
233
|
+
adminKeyId: data.id,
|
|
234
|
+
adminKeyName: data.name,
|
|
235
|
+
organizationId: config.organizationId,
|
|
236
|
+
},
|
|
237
|
+
passportInput: {
|
|
238
|
+
name: request.name,
|
|
239
|
+
credentialType: 'api-key',
|
|
240
|
+
credentialValue: data.api_key.value,
|
|
241
|
+
visaType: this.mapToVisaType('openai', true),
|
|
242
|
+
issuingAuthority: 'OpenAI',
|
|
243
|
+
platforms: [this.mapToPlatform('openai')],
|
|
244
|
+
scope: ['admin', 'inference', 'organization'],
|
|
245
|
+
validFrom: now,
|
|
246
|
+
humanOwner: request.humanOwner,
|
|
247
|
+
agentId: request.agentId,
|
|
248
|
+
delegationChain: request.delegationChain ?? [
|
|
249
|
+
{
|
|
250
|
+
from: request.humanOwner,
|
|
251
|
+
to: request.agentId ?? request.name,
|
|
252
|
+
grantedAt: now,
|
|
253
|
+
scope: ['admin', 'inference', 'organization'],
|
|
254
|
+
notes: `Provisioned via OpenAI Admin API (org: ${config.organizationId})`,
|
|
255
|
+
},
|
|
256
|
+
],
|
|
257
|
+
tags: [...(request.tags ?? []), 'provisioned', 'openai', 'admin'],
|
|
258
|
+
notes: request.notes ?? `OpenAI admin key for organization ${config.organizationId}`,
|
|
259
|
+
},
|
|
260
|
+
};
|
|
261
|
+
}
|
|
262
|
+
}
|
|
263
|
+
//# sourceMappingURL=openai.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"openai.js","sourceRoot":"","sources":["../../../src/provisioning/providers/openai.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAwD1D,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAEpD,MAAM,OAAO,cAAe,SAAQ,wBAAwB;IACjD,QAAQ,GAAyB,QAAQ,CAAC;IAE1C,YAAY,GAAyB;QAC5C,SAAS,EAAE,IAAI;QACf,uBAAuB,EAAE,IAAI;QAC7B,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,IAAI;QACb,cAAc,EAAE,KAAK;QACrB,kBAAkB,EAAE,IAAI;KACzB,CAAC;IAEF,KAAK,CAAC,SAAS,CAAC,OAA4B;QAC1C,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAsB,CAAC;QAC9C,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,+BAA+B,MAAM,CAAC,QAAQ,EAAE;iBAC1D;aACF,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,oEAAoE;iBAC9E;aACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;gBACzC,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7D,CAAC;iBAAM,CAAC;gBACN,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,+BAA+B,OAAO,EAAE;iBAClD;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,eAAe,8BAA8B,EAAE;YAC7E,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1C,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAwF,CAAC;QACzH,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACrC,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;YAC1C,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,QAAQ;SAC/B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,aAAqB,EAAE,OAA4B;QAC9D,uBAAuB;QACvB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAEpD,OAAO;YACL,aAAa;YACb,QAAQ,EAAE,aAAa;YACvB,0BAA0B,EAAE,EAAE,EAAE,2BAA2B;SAC5D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;QACtF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,eAAe,gCAAgC,KAAK,EAAE,EAAE;gBACtF,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE;oBACP,eAAe,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBAC1C,cAAc,EAAE,kBAAkB;iBACnC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,EAAE,CAAC;YACxF,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;QACpF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,eAAe,sCAAsC,EAAE;gBACrF,OAAO,EAAE;oBACP,eAAe,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;iBAC3C;aACF,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACzB,CAAC;YAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACnC,OAA4B,EAC5B,MAAoB;QAEpB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,oDAAoD;iBAC9D;aACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAwC,CAAC;QAC3D,MAAM,GAAG,GAAG,GAAG,eAAe,0BAA0B,MAAM,CAAC,SAAS,mBAAmB,CAAC;QAE5F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE;gBACrC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;SAC7C,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAwB,CAAC;YACjF,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,UAAU,QAAQ,CAAC,MAAM,EAAE;oBACjC,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE;oBAC9D,OAAO,EAAE,SAAS;iBACnB;aACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAkC,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACnC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR,gBAAgB,EAAE,IAAI,CAAC,EAAE;gBACzB,kBAAkB,EAAE,IAAI,CAAC,IAAI;gBAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC;YACD,aAAa,EAAE;gBACb,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,cAAc,EAAE,SAAS;gBACzB,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;gBACnC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC;gBAC7C,gBAAgB,EAAE,QAAQ;gBAC1B,SAAS,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;gBACzC,KAAK,EAAE,CAAC,WAAW,CAAC;gBACpB,SAAS,EAAE,GAAG;gBACd,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI;oBAC1C;wBACE,IAAI,EAAE,OAAO,CAAC,UAAU;wBACxB,EAAE,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI;wBACnC,SAAS,EAAE,GAAG;wBACd,KAAK,EAAE,CAAC,WAAW,CAAC;wBACpB,KAAK,EAAE,wCAAwC,MAAM,CAAC,SAAS,GAAG;qBACnE;iBACF;gBACD,IAAI,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,iBAAiB,CAAC;gBAC3E,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,0CAA0C,MAAM,CAAC,SAAS,EAAE;aACrF;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,OAA4B,EAC5B,MAAoB;QAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAwC,CAAC;QAC3D,MAAM,GAAG,GAAG,GAAG,eAAe,8BAA8B,CAAC;QAE7D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE;gBACrC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;SAC7C,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAwB,CAAC;YACjF,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,UAAU,QAAQ,CAAC,MAAM,EAAE;oBACjC,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE;oBAC9D,OAAO,EAAE,SAAS;iBACnB;aACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA4B,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACnC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,YAAY,EAAE,IAAI,CAAC,IAAI;gBACvB,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC;YACD,aAAa,EAAE;gBACb,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,cAAc,EAAE,SAAS;gBACzB,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;gBACnC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC;gBAC5C,gBAAgB,EAAE,QAAQ;gBAC1B,SAAS,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;gBACzC,KAAK,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC;gBAC7C,SAAS,EAAE,GAAG;gBACd,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI;oBAC1C;wBACE,IAAI,EAAE,OAAO,CAAC,UAAU;wBACxB,EAAE,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI;wBACnC,SAAS,EAAE,GAAG;wBACd,KAAK,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC;wBAC7C,KAAK,EAAE,0CAA0C,MAAM,CAAC,cAAc,GAAG;qBAC1E;iBACF;gBACD,IAAI,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC;gBACjE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,qCAAqC,MAAM,CAAC,cAAc,EAAE;aACrF;SACF,CAAC;IACJ,CAAC;CACF"}
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* SendGrid Provisioning Provider
|
|
3
|
+
* Creates scoped API keys via the SendGrid v3 API
|
|
4
|
+
*/
|
|
5
|
+
import { BaseProvisioningProvider } from '../provider.js';
|
|
6
|
+
import { ProvisioningProvider, ProviderCapabilities, ProvisioningRequest, ProvisioningResult, RotationResult } from '../types.js';
|
|
7
|
+
export declare class SendGridProvider extends BaseProvisioningProvider {
|
|
8
|
+
readonly provider: ProvisioningProvider;
|
|
9
|
+
readonly capabilities: ProviderCapabilities;
|
|
10
|
+
provision(request: ProvisioningRequest): Promise<ProvisioningResult>;
|
|
11
|
+
list(): Promise<Array<{
|
|
12
|
+
id: string;
|
|
13
|
+
name: string;
|
|
14
|
+
createdAt: Date;
|
|
15
|
+
status: string;
|
|
16
|
+
}>>;
|
|
17
|
+
rotate(existingKeyId: string, request: ProvisioningRequest): Promise<RotationResult>;
|
|
18
|
+
revoke(keyId: string): Promise<{
|
|
19
|
+
success: boolean;
|
|
20
|
+
error?: string;
|
|
21
|
+
}>;
|
|
22
|
+
validateAuth(): Promise<{
|
|
23
|
+
valid: boolean;
|
|
24
|
+
error?: string;
|
|
25
|
+
}>;
|
|
26
|
+
}
|
|
27
|
+
//# sourceMappingURL=sendgrid.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sendgrid.d.ts","sourceRoot":"","sources":["../../../src/provisioning/providers/sendgrid.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EAGf,MAAM,aAAa,CAAC;AA4BrB,qBAAa,gBAAiB,SAAQ,wBAAwB;IAC5D,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAc;IAErD,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAQzC;IAEI,SAAS,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAoGpE,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IA2BrF,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAUpF,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA2BpE,YAAY,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAwBlE"}
|
|
@@ -0,0 +1,186 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* SendGrid Provisioning Provider
|
|
3
|
+
* Creates scoped API keys via the SendGrid v3 API
|
|
4
|
+
*/
|
|
5
|
+
import { BaseProvisioningProvider } from '../provider.js';
|
|
6
|
+
const SENDGRID_BASE_URL = 'https://api.sendgrid.com/v3';
|
|
7
|
+
export class SendGridProvider extends BaseProvisioningProvider {
|
|
8
|
+
provider = 'sendgrid';
|
|
9
|
+
capabilities = {
|
|
10
|
+
canCreate: true,
|
|
11
|
+
canConfigurePermissions: true,
|
|
12
|
+
canRotate: true,
|
|
13
|
+
canRevoke: true,
|
|
14
|
+
canList: true,
|
|
15
|
+
supportsExpiry: false,
|
|
16
|
+
supportsScopedKeys: true,
|
|
17
|
+
};
|
|
18
|
+
async provision(request) {
|
|
19
|
+
this.ensureInitialized();
|
|
20
|
+
const config = request.config;
|
|
21
|
+
if (config.provider !== 'sendgrid') {
|
|
22
|
+
return {
|
|
23
|
+
success: false,
|
|
24
|
+
error: {
|
|
25
|
+
code: 'INVALID_CONFIG',
|
|
26
|
+
message: `Expected sendgrid config, got ${config.provider}`,
|
|
27
|
+
},
|
|
28
|
+
};
|
|
29
|
+
}
|
|
30
|
+
if (this.auth?.type !== 'api-key') {
|
|
31
|
+
return {
|
|
32
|
+
success: false,
|
|
33
|
+
error: {
|
|
34
|
+
code: 'INVALID_AUTH',
|
|
35
|
+
message: 'SendGrid provider requires api-key authentication',
|
|
36
|
+
},
|
|
37
|
+
};
|
|
38
|
+
}
|
|
39
|
+
const permissions = request.permissions;
|
|
40
|
+
const scopes = permissions?.scopes ?? ['mail.send'];
|
|
41
|
+
try {
|
|
42
|
+
const response = await fetch(`${SENDGRID_BASE_URL}/api_keys`, {
|
|
43
|
+
method: 'POST',
|
|
44
|
+
headers: {
|
|
45
|
+
'Authorization': `Bearer ${this.auth.key}`,
|
|
46
|
+
'Content-Type': 'application/json',
|
|
47
|
+
},
|
|
48
|
+
body: JSON.stringify({
|
|
49
|
+
name: request.name,
|
|
50
|
+
scopes,
|
|
51
|
+
}),
|
|
52
|
+
});
|
|
53
|
+
if (!response.ok) {
|
|
54
|
+
const errorBody = await response.json().catch(() => ({}));
|
|
55
|
+
const message = errorBody.errors?.[0]?.message ?? `HTTP ${response.status}`;
|
|
56
|
+
return {
|
|
57
|
+
success: false,
|
|
58
|
+
error: {
|
|
59
|
+
code: `SENDGRID_${response.status}`,
|
|
60
|
+
message,
|
|
61
|
+
details: errorBody,
|
|
62
|
+
},
|
|
63
|
+
};
|
|
64
|
+
}
|
|
65
|
+
const data = await response.json();
|
|
66
|
+
const now = new Date().toISOString();
|
|
67
|
+
return {
|
|
68
|
+
success: true,
|
|
69
|
+
credentialValue: data.api_key,
|
|
70
|
+
providerKeyId: data.api_key_id,
|
|
71
|
+
metadata: {
|
|
72
|
+
name: data.name,
|
|
73
|
+
scopes,
|
|
74
|
+
},
|
|
75
|
+
passportInput: {
|
|
76
|
+
name: request.name,
|
|
77
|
+
credentialType: 'api-key',
|
|
78
|
+
credentialValue: data.api_key,
|
|
79
|
+
visaType: this.mapToVisaType('sendgrid', false),
|
|
80
|
+
issuingAuthority: 'SendGrid',
|
|
81
|
+
platforms: [this.mapToPlatform('sendgrid')],
|
|
82
|
+
scope: scopes,
|
|
83
|
+
validFrom: now,
|
|
84
|
+
humanOwner: request.humanOwner,
|
|
85
|
+
agentId: request.agentId,
|
|
86
|
+
delegationChain: request.delegationChain ?? [
|
|
87
|
+
{
|
|
88
|
+
from: request.humanOwner,
|
|
89
|
+
to: request.agentId ?? request.name,
|
|
90
|
+
grantedAt: now,
|
|
91
|
+
scope: scopes,
|
|
92
|
+
notes: `Provisioned via SendGrid API`,
|
|
93
|
+
},
|
|
94
|
+
],
|
|
95
|
+
tags: [...(request.tags ?? []), 'provisioned', 'sendgrid'],
|
|
96
|
+
notes: request.notes ?? `SendGrid API key with ${scopes.length} scope(s)`,
|
|
97
|
+
},
|
|
98
|
+
};
|
|
99
|
+
}
|
|
100
|
+
catch (err) {
|
|
101
|
+
const message = err instanceof Error ? err.message : String(err);
|
|
102
|
+
return {
|
|
103
|
+
success: false,
|
|
104
|
+
error: {
|
|
105
|
+
code: 'PROVISIONING_FAILED',
|
|
106
|
+
message: `SendGrid provisioning failed: ${message}`,
|
|
107
|
+
},
|
|
108
|
+
};
|
|
109
|
+
}
|
|
110
|
+
}
|
|
111
|
+
async list() {
|
|
112
|
+
this.ensureInitialized();
|
|
113
|
+
if (this.auth?.type !== 'api-key') {
|
|
114
|
+
throw new Error('SendGrid provider requires api-key authentication');
|
|
115
|
+
}
|
|
116
|
+
const response = await fetch(`${SENDGRID_BASE_URL}/api_keys`, {
|
|
117
|
+
headers: {
|
|
118
|
+
'Authorization': `Bearer ${this.auth.key}`,
|
|
119
|
+
},
|
|
120
|
+
});
|
|
121
|
+
if (!response.ok) {
|
|
122
|
+
const errorBody = await response.text();
|
|
123
|
+
throw new Error(`Failed to list SendGrid keys: ${response.status} ${errorBody}`);
|
|
124
|
+
}
|
|
125
|
+
const data = await response.json();
|
|
126
|
+
return (data.result ?? []).map((key) => ({
|
|
127
|
+
id: key.api_key_id,
|
|
128
|
+
name: key.name,
|
|
129
|
+
createdAt: new Date(), // SendGrid list doesn't return creation date
|
|
130
|
+
status: 'active',
|
|
131
|
+
}));
|
|
132
|
+
}
|
|
133
|
+
async rotate(existingKeyId, request) {
|
|
134
|
+
const newCredential = await this.provision(request);
|
|
135
|
+
return {
|
|
136
|
+
newCredential,
|
|
137
|
+
oldKeyId: existingKeyId,
|
|
138
|
+
recommendedRevocationDelay: 30, // 30 seconds for propagation
|
|
139
|
+
};
|
|
140
|
+
}
|
|
141
|
+
async revoke(keyId) {
|
|
142
|
+
this.ensureInitialized();
|
|
143
|
+
if (this.auth?.type !== 'api-key') {
|
|
144
|
+
return { success: false, error: 'SendGrid provider requires api-key authentication' };
|
|
145
|
+
}
|
|
146
|
+
try {
|
|
147
|
+
const response = await fetch(`${SENDGRID_BASE_URL}/api_keys/${keyId}`, {
|
|
148
|
+
method: 'DELETE',
|
|
149
|
+
headers: {
|
|
150
|
+
'Authorization': `Bearer ${this.auth.key}`,
|
|
151
|
+
},
|
|
152
|
+
});
|
|
153
|
+
if (!response.ok) {
|
|
154
|
+
const errorBody = await response.text();
|
|
155
|
+
return { success: false, error: `Failed to revoke: ${response.status} ${errorBody}` };
|
|
156
|
+
}
|
|
157
|
+
return { success: true };
|
|
158
|
+
}
|
|
159
|
+
catch (err) {
|
|
160
|
+
const message = err instanceof Error ? err.message : String(err);
|
|
161
|
+
return { success: false, error: message };
|
|
162
|
+
}
|
|
163
|
+
}
|
|
164
|
+
async validateAuth() {
|
|
165
|
+
this.ensureInitialized();
|
|
166
|
+
if (this.auth?.type !== 'api-key') {
|
|
167
|
+
return { valid: false, error: 'SendGrid provider requires api-key authentication' };
|
|
168
|
+
}
|
|
169
|
+
try {
|
|
170
|
+
const response = await fetch(`${SENDGRID_BASE_URL}/api_keys?limit=1`, {
|
|
171
|
+
headers: {
|
|
172
|
+
'Authorization': `Bearer ${this.auth.key}`,
|
|
173
|
+
},
|
|
174
|
+
});
|
|
175
|
+
if (response.ok) {
|
|
176
|
+
return { valid: true };
|
|
177
|
+
}
|
|
178
|
+
return { valid: false, error: `Auth validation failed: ${response.status}` };
|
|
179
|
+
}
|
|
180
|
+
catch (err) {
|
|
181
|
+
const message = err instanceof Error ? err.message : String(err);
|
|
182
|
+
return { valid: false, error: message };
|
|
183
|
+
}
|
|
184
|
+
}
|
|
185
|
+
}
|
|
186
|
+
//# sourceMappingURL=sendgrid.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sendgrid.js","sourceRoot":"","sources":["../../../src/provisioning/providers/sendgrid.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAmC1D,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;AAExD,MAAM,OAAO,gBAAiB,SAAQ,wBAAwB;IACnD,QAAQ,GAAyB,UAAU,CAAC;IAE5C,YAAY,GAAyB;QAC5C,SAAS,EAAE,IAAI;QACf,uBAAuB,EAAE,IAAI;QAC7B,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,IAAI;QACb,cAAc,EAAE,KAAK;QACrB,kBAAkB,EAAE,IAAI;KACzB,CAAC;IAEF,KAAK,CAAC,SAAS,CAAC,OAA4B;QAC1C,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAwB,CAAC;QAChD,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YACnC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,iCAAiC,MAAM,CAAC,QAAQ,EAAE;iBAC5D;aACF,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,mDAAmD;iBAC7D;aACF,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAA8C,CAAC;QAC3E,MAAM,MAAM,GAAG,WAAW,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,iBAAiB,WAAW,EAAE;gBAC5D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,eAAe,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBAC1C,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,MAAM;iBACP,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAA0B,CAAC;gBACnF,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC5E,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,YAAY,QAAQ,CAAC,MAAM,EAAE;wBACnC,OAAO;wBACP,OAAO,EAAE,SAAS;qBACnB;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAyB,CAAC;YAC1D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAErC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,eAAe,EAAE,IAAI,CAAC,OAAO;gBAC7B,aAAa,EAAE,IAAI,CAAC,UAAU;gBAC9B,QAAQ,EAAE;oBACR,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,MAAM;iBACP;gBACD,aAAa,EAAE;oBACb,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,cAAc,EAAE,SAAS;oBACzB,eAAe,EAAE,IAAI,CAAC,OAAO;oBAC7B,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC;oBAC/C,gBAAgB,EAAE,UAAU;oBAC5B,SAAS,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;oBAC3C,KAAK,EAAE,MAAM;oBACb,SAAS,EAAE,GAAG;oBACd,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI;wBAC1C;4BACE,IAAI,EAAE,OAAO,CAAC,UAAU;4BACxB,EAAE,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI;4BACnC,SAAS,EAAE,GAAG;4BACd,KAAK,EAAE,MAAM;4BACb,KAAK,EAAE,8BAA8B;yBACtC;qBACF;oBACD,IAAI,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,aAAa,EAAE,UAAU,CAAC;oBAC1D,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,yBAAyB,MAAM,CAAC,MAAM,WAAW;iBAC1E;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,iCAAiC,OAAO,EAAE;iBACpD;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,iBAAiB,WAAW,EAAE;YAC5D,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;aAC3C;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAoC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACvC,EAAE,EAAE,GAAG,CAAC,UAAU;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,6CAA6C;YACpE,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,aAAqB,EAAE,OAA4B;QAC9D,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAEpD,OAAO;YACL,aAAa;YACb,QAAQ,EAAE,aAAa;YACvB,0BAA0B,EAAE,EAAE,EAAE,6BAA6B;SAC9D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC;QACxF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,iBAAiB,aAAa,KAAK,EAAE,EAAE;gBACrE,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE;oBACP,eAAe,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;iBAC3C;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,EAAE,CAAC;YACxF,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC;QACtF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,iBAAiB,mBAAmB,EAAE;gBACpE,OAAO,EAAE;oBACP,eAAe,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;iBAC3C;aACF,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACzB,CAAC;YAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;CACF"}
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Twilio Provisioning Provider
|
|
3
|
+
* Creates API keys via the Twilio REST API
|
|
4
|
+
*/
|
|
5
|
+
import { BaseProvisioningProvider } from '../provider.js';
|
|
6
|
+
import { ProvisioningProvider, ProviderCapabilities, ProvisioningRequest, ProvisioningResult, RotationResult } from '../types.js';
|
|
7
|
+
export declare class TwilioProvider extends BaseProvisioningProvider {
|
|
8
|
+
readonly provider: ProvisioningProvider;
|
|
9
|
+
readonly capabilities: ProviderCapabilities;
|
|
10
|
+
provision(request: ProvisioningRequest): Promise<ProvisioningResult>;
|
|
11
|
+
list(): Promise<Array<{
|
|
12
|
+
id: string;
|
|
13
|
+
name: string;
|
|
14
|
+
createdAt: Date;
|
|
15
|
+
status: string;
|
|
16
|
+
}>>;
|
|
17
|
+
rotate(existingKeyId: string, request: ProvisioningRequest): Promise<RotationResult>;
|
|
18
|
+
revoke(keyId: string): Promise<{
|
|
19
|
+
success: boolean;
|
|
20
|
+
error?: string;
|
|
21
|
+
}>;
|
|
22
|
+
validateAuth(): Promise<{
|
|
23
|
+
valid: boolean;
|
|
24
|
+
error?: string;
|
|
25
|
+
}>;
|
|
26
|
+
}
|
|
27
|
+
//# sourceMappingURL=twilio.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"twilio.d.ts","sourceRoot":"","sources":["../../../src/provisioning/providers/twilio.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EAEf,MAAM,aAAa,CAAC;AAyBrB,qBAAa,cAAe,SAAQ,wBAAwB;IAC1D,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAY;IAEnD,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAQzC;IAEI,SAAS,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAsGpE,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IA+BrF,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAUpF,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA8BpE,YAAY,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CA2BlE"}
|