@iflow-mcp/jkheadley-instar 0.26.2

package/dist/server/SecretDrop.d.ts

@@ -0,0 +1,133 @@
+/**
+ * SecretDrop — Secure secret submission from user to agent.
+ *
+ * When an agent needs a secret (API key, password, token), it creates a
+ * one-time-use, time-limited URL. The user opens the link in a browser,
+ * submits the secret via a clean form, and the agent receives it directly —
+ * never passing through Telegram or any chat history.
+ *
+ * Security properties:
+ * - One-time use: token destroyed after successful submission
+ * - Time-limited: expires after configurable TTL (default 15 minutes)
+ * - In-memory only: pending requests and secrets never touch disk
+ * - CSRF protection: form includes a hidden CSRF token
+ * - Rate-limited: max submissions per IP
+ * - XSS-safe: all rendered content is escaped
+ * - The URL token IS the auth — no login or bearer token needed
+ */
+export interface SecretField {
+    /** Field identifier (e.g., "api_key", "password") */
+    name: string;
+    /** Human-readable label shown in the form */
+    label: string;
+    /** Whether to mask the input (default: true) */
+    masked?: boolean;
+    /** Placeholder text */
+    placeholder?: string;
+}
+export interface SecretRequest {
+    /** Unique token for the URL */
+    token: string;
+    /** CSRF token embedded in the form */
+    csrfToken: string;
+    /** What's being requested (shown in the form header) */
+    label: string;
+    /** Optional description/reason shown to the user */
+    description?: string;
+    /** Fields to collect (defaults to a single "secret" field) */
+    fields: SecretField[];
+    /** Telegram topic to notify on receipt */
+    topicId?: number;
+    /** When this request was created */
+    createdAt: number;
+    /** When this request expires (ms since epoch) */
+    expiresAt: number;
+    /** Callback fired when the secret is received */
+    onReceive?: (values: Record<string, string>) => void;
+    /** Agent name (shown in the form) */
+    agentName: string;
+}
+export interface SecretSubmission {
+    /** The values submitted by the user */
+    values: Record<string, string>;
+    /** When the submission was received */
+    receivedAt: string;
+    /** The request label */
+    label: string;
+    /** The topic to notify */
+    topicId?: number;
+}
+export interface CreateSecretRequestOptions {
+    /** What's being requested — shown as the form title */
+    label: string;
+    /** Why it's needed — shown as description in the form */
+    description?: string;
+    /** Fields to collect. Defaults to single masked "secret" field */
+    fields?: SecretField[];
+    /** Telegram topic to notify on receipt */
+    topicId?: number;
+    /** TTL in milliseconds (default: 15 minutes) */
+    ttlMs?: number;
+    /** Callback when secret is received */
+    onReceive?: (values: Record<string, string>) => void;
+}
+export declare class SecretDrop {
+    private pending;
+    private received;
+    private cleanupTimer;
+    private agentName;
+    constructor(agentName: string);
+    /**
+     * Create a new secret request. Returns the token for URL construction.
+     */
+    create(options: CreateSecretRequestOptions): {
+        token: string;
+    };
+    /**
+     * Get a pending request by token. Returns null if expired or not found.
+     */
+    getPending(token: string): SecretRequest | null;
+    /**
+     * Submit a secret. Validates CSRF, consumes the request (one-time use),
+     * fires the callback, and stores the submission for retrieval.
+     * Returns the submission on success, null on failure.
+     */
+    submit(token: string, csrfToken: string, values: Record<string, string>): SecretSubmission | null;
+    /**
+     * Retrieve a received submission (for polling-based retrieval).
+     * Returns and removes the submission.
+     */
+    getReceived(token: string): SecretSubmission | null;
+    /**
+     * List all pending requests (for the agent's management API).
+     */
+    listPending(): Array<{
+        token: string;
+        label: string;
+        topicId?: number;
+        createdAt: number;
+        expiresAt: number;
+        expired: boolean;
+    }>;
+    /**
+     * Cancel a pending request.
+     */
+    cancel(token: string): boolean;
+    /**
+     * Remove expired requests.
+     */
+    private cleanup;
+    /**
+     * Render the secret submission form as self-contained HTML.
+     */
+    renderForm(request: SecretRequest): string;
+    /**
+     * Render an expired/not-found page.
+     */
+    renderExpiredPage(): string;
+    /**
+     * Shutdown — clean up timer.
+     */
+    shutdown(): void;
+}
+//# sourceMappingURL=SecretDrop.d.ts.map

package/dist/server/SecretDrop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretDrop.d.ts","sourceRoot":"","sources":["../../src/server/SecretDrop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,MAAM,WAAW,WAAW;IAC1B,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,+BAA+B;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;IACrD,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;CACtD;AAQD,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,QAAQ,CAAuC;IACvD,OAAO,CAAC,YAAY,CAAiB;IACrC,OAAO,CAAC,SAAS,CAAS;gBAEd,SAAS,EAAE,MAAM;IAQ7B;;OAEG;IACH,MAAM,CAAC,OAAO,EAAE,0BAA0B,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;IAsC9D;;OAEG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI;IAU/C;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,gBAAgB,GAAG,IAAI;IAoDjG;;;OAGG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAOnD;;OAEG;IACH,WAAW,IAAI,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAgBhI;;OAEG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAI9B;;OAEG;IACH,OAAO,CAAC,OAAO;IASf;;OAEG;IACH,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM;IAiO1C;;OAEG;IACH,iBAAiB,IAAI,MAAM;IA2C3B;;OAEG;IACH,QAAQ,IAAI,IAAI;CAKjB"}

package/dist/server/SecretDrop.js

@@ -0,0 +1,473 @@
+/**
+ * SecretDrop — Secure secret submission from user to agent.
+ *
+ * When an agent needs a secret (API key, password, token), it creates a
+ * one-time-use, time-limited URL. The user opens the link in a browser,
+ * submits the secret via a clean form, and the agent receives it directly —
+ * never passing through Telegram or any chat history.
+ *
+ * Security properties:
+ * - One-time use: token destroyed after successful submission
+ * - Time-limited: expires after configurable TTL (default 15 minutes)
+ * - In-memory only: pending requests and secrets never touch disk
+ * - CSRF protection: form includes a hidden CSRF token
+ * - Rate-limited: max submissions per IP
+ * - XSS-safe: all rendered content is escaped
+ * - The URL token IS the auth — no login or bearer token needed
+ */
+import crypto from 'node:crypto';
+// ── Service ────────────────────────────────────────────────────────
+const DEFAULT_TTL_MS = 15 * 60 * 1000; // 15 minutes
+const MAX_PENDING = 20;
+const TOKEN_BYTES = 32; // 256-bit
+export class SecretDrop {
+    pending = new Map();
+    received = new Map();
+    cleanupTimer;
+    agentName;
+    constructor(agentName) {
+        this.agentName = agentName;
+        // Periodic cleanup of expired requests
+        this.cleanupTimer = setInterval(() => this.cleanup(), 60_000);
+        this.cleanupTimer.unref();
+    }
+    /**
+     * Create a new secret request. Returns the token for URL construction.
+     */
+    create(options) {
+        if (this.pending.size >= MAX_PENDING) {
+            // Clean up expired first
+            this.cleanup();
+            if (this.pending.size >= MAX_PENDING) {
+                throw new Error(`Too many pending secret requests (max ${MAX_PENDING})`);
+            }
+        }
+        const token = crypto.randomBytes(TOKEN_BYTES).toString('hex');
+        const csrfToken = crypto.randomBytes(16).toString('hex');
+        const now = Date.now();
+        const ttlMs = options.ttlMs ?? DEFAULT_TTL_MS;
+        const fields = options.fields ?? [{
+                name: 'secret',
+                label: options.label,
+                masked: true,
+                placeholder: 'Paste your secret here',
+            }];
+        const request = {
+            token,
+            csrfToken,
+            label: options.label,
+            description: options.description,
+            fields,
+            topicId: options.topicId,
+            createdAt: now,
+            expiresAt: now + ttlMs,
+            onReceive: options.onReceive,
+            agentName: this.agentName,
+        };
+        this.pending.set(token, request);
+        return { token };
+    }
+    /**
+     * Get a pending request by token. Returns null if expired or not found.
+     */
+    getPending(token) {
+        const request = this.pending.get(token);
+        if (!request)
+            return null;
+        if (Date.now() > request.expiresAt) {
+            this.pending.delete(token);
+            return null;
+        }
+        return request;
+    }
+    /**
+     * Submit a secret. Validates CSRF, consumes the request (one-time use),
+     * fires the callback, and stores the submission for retrieval.
+     * Returns the submission on success, null on failure.
+     */
+    submit(token, csrfToken, values) {
+        const request = this.getPending(token);
+        if (!request)
+            return null;
+        // Verify CSRF token (timing-safe)
+        const ha = crypto.createHash('sha256').update(csrfToken).digest();
+        const hb = crypto.createHash('sha256').update(request.csrfToken).digest();
+        if (!crypto.timingSafeEqual(ha, hb)) {
+            return null;
+        }
+        // Validate all required fields are present and non-empty
+        for (const field of request.fields) {
+            const value = values[field.name];
+            if (!value || typeof value !== 'string' || value.trim().length === 0) {
+                return null;
+            }
+        }
+        // Strip any extra fields — only accept declared fields
+        const cleanValues = {};
+        for (const field of request.fields) {
+            cleanValues[field.name] = values[field.name].trim();
+        }
+        // Consume the request (one-time use)
+        this.pending.delete(token);
+        const submission = {
+            values: cleanValues,
+            receivedAt: new Date().toISOString(),
+            label: request.label,
+            topicId: request.topicId,
+        };
+        // Store submission briefly for retrieval (auto-cleanup in 5 minutes)
+        this.received.set(token, submission);
+        setTimeout(() => this.received.delete(token), 5 * 60 * 1000).unref();
+        // Fire callback if provided
+        if (request.onReceive) {
+            try {
+                request.onReceive(cleanValues);
+            }
+            catch (err) {
+                // @silent-fallback-ok — caller-provided callback, errors must not break submission
+                console.error('[secret-drop] onReceive callback error:', err instanceof Error ? err.message : String(err));
+            }
+        }
+        return submission;
+    }
+    /**
+     * Retrieve a received submission (for polling-based retrieval).
+     * Returns and removes the submission.
+     */
+    getReceived(token) {
+        const submission = this.received.get(token);
+        if (!submission)
+            return null;
+        this.received.delete(token);
+        return submission;
+    }
+    /**
+     * List all pending requests (for the agent's management API).
+     */
+    listPending() {
+        const now = Date.now();
+        const results = [];
+        for (const [token, req] of this.pending) {
+            results.push({
+                token,
+                label: req.label,
+                topicId: req.topicId,
+                createdAt: req.createdAt,
+                expiresAt: req.expiresAt,
+                expired: now > req.expiresAt,
+            });
+        }
+        return results;
+    }
+    /**
+     * Cancel a pending request.
+     */
+    cancel(token) {
+        return this.pending.delete(token);
+    }
+    /**
+     * Remove expired requests.
+     */
+    cleanup() {
+        const now = Date.now();
+        for (const [token, req] of this.pending) {
+            if (now > req.expiresAt) {
+                this.pending.delete(token);
+            }
+        }
+    }
+    /**
+     * Render the secret submission form as self-contained HTML.
+     */
+    renderForm(request) {
+        const fieldsHtml = request.fields.map(field => `
+      <div class="field">
+        <label for="field-${escapeAttr(field.name)}">${escapeHtml(field.label)}</label>
+        <input
+          type="${field.masked !== false ? 'password' : 'text'}"
+          id="field-${escapeAttr(field.name)}"
+          name="${escapeAttr(field.name)}"
+          placeholder="${escapeAttr(field.placeholder || '')}"
+          autocomplete="off"
+          spellcheck="false"
+          required
+        >
+      </div>
+    `).join('');
+        const minutesLeft = Math.max(0, Math.ceil((request.expiresAt - Date.now()) / 60_000));
+        return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Secret Drop — ${escapeHtml(request.label)}</title>
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+      background: #f8f9fa;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      min-height: 100vh;
+      color: #1a1a2e;
+      padding: 1rem;
+    }
+    .drop-box {
+      background: #fff;
+      border-radius: 12px;
+      padding: 2.5rem;
+      box-shadow: 0 2px 12px rgba(0,0,0,0.08);
+      max-width: 460px;
+      width: 100%;
+    }
+    .agent-badge {
+      display: inline-flex;
+      align-items: center;
+      gap: 0.4rem;
+      background: #f0edf6;
+      color: #533483;
+      padding: 0.25rem 0.75rem;
+      border-radius: 20px;
+      font-size: 0.8rem;
+      font-weight: 500;
+      margin-bottom: 1rem;
+    }
+    .agent-badge .dot {
+      width: 8px; height: 8px;
+      background: #27ae60;
+      border-radius: 50%;
+    }
+    h1 {
+      font-size: 1.3rem;
+      margin-bottom: 0.5rem;
+      color: #16213e;
+    }
+    .description {
+      font-size: 0.9rem;
+      color: #666;
+      margin-bottom: 1.5rem;
+      line-height: 1.5;
+    }
+    .expiry {
+      font-size: 0.8rem;
+      color: #999;
+      margin-bottom: 1.5rem;
+    }
+    .field {
+      margin-bottom: 1.25rem;
+    }
+    .field label {
+      display: block;
+      font-size: 0.85rem;
+      font-weight: 500;
+      color: #444;
+      margin-bottom: 0.35rem;
+    }
+    .field input {
+      width: 100%;
+      padding: 0.7rem 0.9rem;
+      font-size: 0.95rem;
+      font-family: 'SF Mono', 'Fira Code', 'Consolas', monospace;
+      border: 2px solid #e0e0e0;
+      border-radius: 8px;
+      outline: none;
+      transition: border-color 0.2s;
+      background: #fafafa;
+    }
+    .field input:focus {
+      border-color: #533483;
+      background: #fff;
+    }
+    .submit-btn {
+      width: 100%;
+      padding: 0.8rem;
+      margin-top: 0.5rem;
+      background: #16213e;
+      color: #fff;
+      border: none;
+      border-radius: 8px;
+      font-size: 1rem;
+      font-weight: 500;
+      cursor: pointer;
+      transition: background 0.2s;
+    }
+    .submit-btn:hover { background: #533483; }
+    .submit-btn:disabled { background: #aaa; cursor: not-allowed; }
+    .security-note {
+      margin-top: 1.25rem;
+      padding: 0.75rem;
+      background: #f8f9fa;
+      border-radius: 8px;
+      font-size: 0.78rem;
+      color: #888;
+      line-height: 1.5;
+    }
+    .security-note strong { color: #666; }
+    .success {
+      text-align: center;
+      padding: 2rem 0;
+    }
+    .success .check {
+      font-size: 3rem;
+      margin-bottom: 1rem;
+    }
+    .success h2 {
+      font-size: 1.2rem;
+      color: #27ae60;
+      margin-bottom: 0.5rem;
+    }
+    .success p {
+      font-size: 0.9rem;
+      color: #666;
+    }
+    .error-banner {
+      background: #fdf0f0;
+      color: #c0392b;
+      padding: 0.6rem 0.9rem;
+      border-radius: 6px;
+      font-size: 0.85rem;
+      margin-bottom: 1rem;
+      display: none;
+    }
+  </style>
+</head>
+<body>
+  <div class="drop-box">
+    <div id="form-view">
+      <div class="agent-badge"><span class="dot"></span> ${escapeHtml(request.agentName)}</div>
+      <h1>${escapeHtml(request.label)}</h1>
+      ${request.description ? `<p class="description">${escapeHtml(request.description)}</p>` : ''}
+      <p class="expiry">This link expires in ${minutesLeft} minute${minutesLeft !== 1 ? 's' : ''} and can only be used once.</p>
+      <div class="error-banner" id="error-banner"></div>
+      <form id="secret-form">
+        <input type="hidden" name="_csrf" value="${escapeAttr(request.csrfToken)}">
+        ${fieldsHtml}
+        <button type="submit" class="submit-btn" id="submit-btn">Send Securely</button>
+      </form>
+      <div class="security-note">
+        <strong>End-to-end delivery.</strong> Your secret goes directly to ${escapeHtml(request.agentName)}'s server.
+        It is not stored on disk and this link will stop working after submission.
+      </div>
+    </div>
+    <div id="success-view" style="display:none">
+      <div class="success">
+        <div class="check">&#10003;</div>
+        <h2>Secret Received</h2>
+        <p>${escapeHtml(request.agentName)} has received your secret securely.<br>You can close this page.</p>
+      </div>
+    </div>
+  </div>
+  <script>
+    document.getElementById('secret-form').addEventListener('submit', async (e) => {
+      e.preventDefault();
+      const btn = document.getElementById('submit-btn');
+      const errorBanner = document.getElementById('error-banner');
+      btn.disabled = true;
+      btn.textContent = 'Sending...';
+      errorBanner.style.display = 'none';
+
+      const formData = new FormData(e.target);
+      const payload = {};
+      for (const [key, value] of formData.entries()) {
+        payload[key] = value;
+      }
+
+      try {
+        const res = await fetch(window.location.pathname, {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify(payload),
+        });
+
+        if (res.ok) {
+          document.getElementById('form-view').style.display = 'none';
+          document.getElementById('success-view').style.display = 'block';
+        } else {
+          const data = await res.json().catch(() => ({}));
+          errorBanner.textContent = data.error || 'Submission failed. The link may have expired.';
+          errorBanner.style.display = 'block';
+          btn.disabled = false;
+          btn.textContent = 'Send Securely';
+        }
+      } catch {
+        errorBanner.textContent = 'Network error. Please check your connection and try again.';
+        errorBanner.style.display = 'block';
+        btn.disabled = false;
+        btn.textContent = 'Send Securely';
+      }
+    });
+  </script>
+</body>
+</html>`;
+    }
+    /**
+     * Render an expired/not-found page.
+     */
+    renderExpiredPage() {
+        return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Secret Drop — Expired</title>
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+      background: #f8f9fa;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      min-height: 100vh;
+      color: #1a1a2e;
+      padding: 1rem;
+    }
+    .box {
+      background: #fff;
+      border-radius: 12px;
+      padding: 2.5rem;
+      box-shadow: 0 2px 12px rgba(0,0,0,0.08);
+      max-width: 400px;
+      width: 100%;
+      text-align: center;
+    }
+    .icon { font-size: 3rem; margin-bottom: 1rem; }
+    h1 { font-size: 1.3rem; margin-bottom: 0.75rem; color: #16213e; }
+    p { font-size: 0.9rem; color: #666; line-height: 1.5; }
+  </style>
+</head>
+<body>
+  <div class="box">
+    <div class="icon">&#128683;</div>
+    <h1>Link Expired or Already Used</h1>
+    <p>This secret drop link is no longer valid. It may have expired or already been used. Ask the agent to generate a new one if needed.</p>
+  </div>
+</body>
+</html>`;
+    }
+    /**
+     * Shutdown — clean up timer.
+     */
+    shutdown() {
+        clearInterval(this.cleanupTimer);
+        this.pending.clear();
+        this.received.clear();
+    }
+}
+// ── HTML Escaping ──────────────────────────────────────────────────
+function escapeHtml(text) {
+    return text
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;');
+}
+function escapeAttr(text) {
+    return text
+        .replace(/&/g, '&amp;')
+        .replace(/"/g, '&quot;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;');
+}
+//# sourceMappingURL=SecretDrop.js.map

package/dist/server/SecretDrop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretDrop.js","sourceRoot":"","sources":["../../src/server/SecretDrop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AAgEjC,sEAAsE;AAEtE,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AACpD,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,WAAW,GAAG,EAAE,CAAC,CAAC,UAAU;AAElC,MAAM,OAAO,UAAU;IACb,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC3C,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC/C,YAAY,CAAiB;IAC7B,SAAS,CAAS;IAE1B,YAAY,SAAiB;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAE3B,uCAAuC;QACvC,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAAmC;QACxC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;YACrC,yBAAyB;YACzB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC,yCAAyC,WAAW,GAAG,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;QAE9C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC;gBAChC,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,wBAAwB;aACtC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAkB;YAC7B,KAAK;YACL,SAAS;YACT,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM;YACN,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG,GAAG,KAAK;YACtB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,KAAa;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAa,EAAE,SAAiB,EAAE,MAA8B;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,kCAAkC;QAClC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;QAClE,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,yDAAyD;QACzD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrE,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,uDAAuD;QACvD,MAAM,WAAW,GAA2B,EAAE,CAAC;QAC/C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACtD,CAAC;QAED,qCAAqC;QACrC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE3B,MAAM,UAAU,GAAqB;YACnC,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC;QAEF,qEAAqE;QACrE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACrC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QAErE,4BAA4B;QAC5B,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,mFAAmF;gBACnF,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7G,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,KAAa;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAsH,EAAE,CAAC;QACtI,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK;gBACL,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,GAAG,GAAG,GAAG,CAAC,SAAS;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACK,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,OAAsB;QAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;;4BAEvB,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;;kBAE5D,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;sBACxC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;kBAC1B,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;yBACf,UAAU,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;;;;;;KAMvD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEZ,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;QAEtF,OAAO;;;;;yBAKc,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2DAuIS,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC;YAC5E,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7B,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,0BAA0B,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;+CACnD,WAAW,UAAU,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;;;mDAG7C,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC;UACtE,UAAU;;;;6EAIyD,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC;;;;;;;;aAQ7F,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA6ClC,CAAC;IACP,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAuCH,CAAC;IACP,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF;AAED,sEAAsE;AAEtE,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI;SACR,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI;SACR,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC"}