@kya-os/mcp-i-cloudflare 1.12.0 → 1.12.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/delegation-http/anchor-do.d.ts.map +1 -1
- package/dist/delegation-http/anchor-do.js +36 -2
- package/dist/delegation-http/anchor-do.js.map +1 -1
- package/dist/delegation-http/anchor-registration-validate.d.ts.map +1 -1
- package/dist/delegation-http/anchor-registration-validate.js +54 -26
- package/dist/delegation-http/anchor-registration-validate.js.map +1 -1
- package/dist/delegation-http/anchor-registration.d.ts.map +1 -1
- package/dist/delegation-http/anchor-registration.js +67 -45
- package/dist/delegation-http/anchor-registration.js.map +1 -1
- package/dist/delegation-http/consent-anchor-bridge.d.ts.map +1 -1
- package/dist/delegation-http/consent-anchor-bridge.js +175 -16
- package/dist/delegation-http/consent-anchor-bridge.js.map +1 -1
- package/dist/delegation-http/credential-consent.d.ts +147 -0
- package/dist/delegation-http/credential-consent.d.ts.map +1 -0
- package/dist/delegation-http/credential-consent.js +287 -0
- package/dist/delegation-http/credential-consent.js.map +1 -0
- package/dist/delegation-http/types.d.ts +4 -0
- package/dist/delegation-http/types.d.ts.map +1 -1
- package/dist/services/delegation.service.d.ts.map +1 -1
- package/dist/services/delegation.service.js +7 -0
- package/dist/services/delegation.service.js.map +1 -1
- package/package.json +3 -3
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"anchor-do.d.ts","sourceRoot":"","sources":["../../src/delegation-http/anchor-do.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;
|
|
1
|
+
{"version":3,"file":"anchor-do.d.ts","sourceRoot":"","sources":["../../src/delegation-http/anchor-do.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAiEhE;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,kBAAkB,GAAG,SAAS,EACnC,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,MAAM,GACV;IACD,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,QAAQ,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAC9C,CAiDA;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,kBAAkB,GAAG,SAAS,EACnC,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,MAAM,GACV;IACD,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,QAAQ,EAAE;QACR,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;QAC1C,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH,CA8DA;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,kBAAkB,GAAG,SAAS,EACnC,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,MAAM,GACV;IACD,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,QAAQ,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAC9C,CAqBA;AAuBD;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,kBAAkB,EACvB,OAAO,EAAE,OAAO,EAChB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,QAAQ,CAAC,CAoEnB"}
|
|
@@ -30,6 +30,27 @@
|
|
|
30
30
|
import { sha256Hex } from "./hash";
|
|
31
31
|
import { KYAOS_ERRORS, INTERNAL_PICKUP_CREATE, INTERNAL_PICKUP_POLL, INTERNAL_PICKUP_APPROVE, INTERNAL_PICKUP_INFO, } from "./constants";
|
|
32
32
|
import { STORAGE_KEYS } from "../constants/storage-keys";
|
|
33
|
+
/**
|
|
34
|
+
* The record projection echoed in every create response (`body.anchor`) — the
|
|
35
|
+
* authoritative first-write-wins values a registrar response must echo, in one
|
|
36
|
+
* atomic round-trip (no read-back window; the record can't expire between a
|
|
37
|
+
* create and a follow-up INFO). Never includes the pin or the parked delegation.
|
|
38
|
+
*/
|
|
39
|
+
function anchorSnapshot(rec) {
|
|
40
|
+
return {
|
|
41
|
+
sid: rec.sid,
|
|
42
|
+
status: rec.status,
|
|
43
|
+
requiredScopes: rec.requiredScopes,
|
|
44
|
+
minAssurance: rec.minAssurance,
|
|
45
|
+
expiresAt: rec.expiresAt,
|
|
46
|
+
createdAt: rec.createdAt,
|
|
47
|
+
registeredAtMs: rec.registeredAtMs,
|
|
48
|
+
issuedAtMs: rec.issuedAtMs,
|
|
49
|
+
agentDid: rec.agentDid,
|
|
50
|
+
audience: rec.audience,
|
|
51
|
+
serverDid: rec.serverDid,
|
|
52
|
+
};
|
|
53
|
+
}
|
|
33
54
|
const pendingBody = () => ({ status: "pending" });
|
|
34
55
|
const pinnedErr = () => ({ error: KYAOS_ERRORS.pickupPinned });
|
|
35
56
|
const invalidSessionErr = () => ({ error: KYAOS_ERRORS.invalidSession });
|
|
@@ -51,7 +72,12 @@ export function reduceCreate(rec, input, now) {
|
|
|
51
72
|
// checkpoint's 201-created / 200-existing status parity). Status stays 201 for
|
|
52
73
|
// both, so status-only callers (challenge-middleware) are unaffected.
|
|
53
74
|
if (rec && now <= rec.expiresAt) {
|
|
54
|
-
return {
|
|
75
|
+
return {
|
|
76
|
+
response: {
|
|
77
|
+
status: 201,
|
|
78
|
+
body: { success: true, reused: true, anchor: anchorSnapshot(rec) },
|
|
79
|
+
},
|
|
80
|
+
};
|
|
55
81
|
}
|
|
56
82
|
const record = {
|
|
57
83
|
sid: i.sid,
|
|
@@ -64,6 +90,8 @@ export function reduceCreate(rec, input, now) {
|
|
|
64
90
|
agentDid: typeof i.agentDid === "string" ? i.agentDid : undefined,
|
|
65
91
|
audience: typeof i.audience === "string" ? i.audience : undefined,
|
|
66
92
|
serverDid: typeof i.serverDid === "string" ? i.serverDid : undefined,
|
|
93
|
+
registeredAtMs: typeof i.registeredAtMs === "number" ? i.registeredAtMs : undefined,
|
|
94
|
+
issuedAtMs: now,
|
|
67
95
|
pin: i.pin
|
|
68
96
|
? {
|
|
69
97
|
type: i.pin.type,
|
|
@@ -73,7 +101,13 @@ export function reduceCreate(rec, input, now) {
|
|
|
73
101
|
}
|
|
74
102
|
: undefined,
|
|
75
103
|
};
|
|
76
|
-
return {
|
|
104
|
+
return {
|
|
105
|
+
record,
|
|
106
|
+
response: {
|
|
107
|
+
status: 201,
|
|
108
|
+
body: { success: true, anchor: anchorSnapshot(record) },
|
|
109
|
+
},
|
|
110
|
+
};
|
|
77
111
|
}
|
|
78
112
|
/**
|
|
79
113
|
* Pure reducer for `poll`. The §13 wire state machine:
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"anchor-do.js","sourceRoot":"","sources":["../../src/delegation-http/anchor-do.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;
|
|
1
|
+
{"version":3,"file":"anchor-do.js","sourceRoot":"","sources":["../../src/delegation-http/anchor-do.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAsBzD;;;;;GAKG;AACH,SAAS,cAAc,CAAC,GAAuB;IAC7C,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AASD,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,YAAY,EAAE,CAAC,CAAC;AAC/D,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC;AACzE,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,aAAa,EAAE,CAAC,CAAC;AAEvE;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,GAAmC,EACnC,KAAc,EACd,GAAW;IAKX,MAAM,CAAC,GAAG,KAAoB,CAAC;IAC/B,iFAAiF;IACjF,iFAAiF;IACjF,mFAAmF;IACnF,8EAA8E;IAC9E,iFAAiF;IACjF,+EAA+E;IAC/E,0EAA0E;IAC1E,+EAA+E;IAC/E,sEAAsE;IACtE,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE;gBACR,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;aACnE;SACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAuB;QACjC,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACpC,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG,GAAG,CAAC,CAAC,UAAU,GAAG,IAAI;QACpC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACjE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACjE,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACpE,cAAc,EACZ,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;QACrE,UAAU,EAAE,GAAG;QACf,GAAG,EAAE,CAAC,CAAC,GAAG;YACR,CAAC,CAAC;gBACE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;gBAChB,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW;gBAC9B,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,WAAW;aACpB;YACH,CAAC,CAAC,SAAS;KACd,CAAC;IACF,OAAO;QACL,MAAM;QACN,QAAQ,EAAE;YACR,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE;SACxD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CACxB,GAAmC,EACnC,MAAoB,EACpB,GAAW;IASX,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;QACxB,8EAA8E;QAC9E,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,+EAA+E;QAC/E,0EAA0E;QAC1E,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACtE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,iFAAiF;QACjF,+EAA+E;QAC/E,OAAO,GAAG;YACR,GAAG,GAAG;YACN,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM;YACxD,GAAG,EAAE;gBACH,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW,EAAE,SAAS;gBACtB,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,YAAY;aACrB;SACF,CAAC;QACF,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,kFAAkF;IAClF,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK;YACpC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,UAAU;SAC1C,CAAC;QACF,OAAO,aAAa;YAClB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtD,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;IAC1C,CAAC;IAED,kFAAkF;IAClF,2DAA2D;IAC3D,IACE,CAAC,aAAa;QACd,OAAO,CAAC,UAAU,KAAK,SAAS;QAChC,GAAG,GAAG,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,EACvD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED,OAAO;QACL,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE;QACvC,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;KAC/C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAmC,EACnC,KAAc,EACd,GAAW;IAKX,MAAM,CAAC,GAAG,KAAqB,CAAC;IAChC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,2EAA2E;IAC3E,mFAAmF;IACnF,+EAA+E;IAC/E,yEAAyE;IACzE,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAChD,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAuB;QACjC,GAAG,GAAG;QACN,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE;KAC1E,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACxE,CAAC;AAED,2EAA2E;AAC3E,SAAS,YAAY,CAAC,CAIrB;IACC,MAAM,OAAO,GAA2B,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;IACxE,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACrB,0EAA0E;QAC1E,kCAAkC;QAClC,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;YAC7B,OAAO,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAC7C,OAAO,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;QACtE,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAuB,EACvB,OAAgB,EAChB,GAAY;IAEZ,MAAM,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAE3C,IAAI,IAAuE,CAAC;IAC5E,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAgB,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAmC,CAAC;IAE3E,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;QACpC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxD,IAAI,MAAM;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QACtB,IACE,CAAC,CAAC;YACF,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAC3B,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAC1C,CAAC;YACD,OAAO,YAAY,CAAC;gBAClB,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,6BAA6B,EAAE;aACjF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aACtD,IAAI,MAAM;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,KAAK,uBAAuB,EAAE,CAAC;QACrC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aACtD,IAAI,MAAM;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9B,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,sDAAsD;QACtD,OAAO,YAAY,CAAC;YAClB,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,SAAS,EAAE,GAAG,CAAC,SAAS;aACzB;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"anchor-registration-validate.d.ts","sourceRoot":"","sources":["../../src/delegation-http/anchor-registration-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;
|
|
1
|
+
{"version":3,"file":"anchor-registration-validate.d.ts","sourceRoot":"","sources":["../../src/delegation-http/anchor-registration-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA8BH,mEAAmE;AACnE,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qEAAqE;AACrE,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,qBAAqB,CAAC;CACnC;AAED,kFAAkF;AAClF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,EAAE,CAAA;CAAE,CAAC;AAyF7C;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAsFvE"}
|
|
@@ -12,6 +12,29 @@
|
|
|
12
12
|
*/
|
|
13
13
|
/** Only did:web and did:key are permitted — no ad-hoc methods (checkpoint parity). */
|
|
14
14
|
const DID_RE = /^did:(key|web):.+$/;
|
|
15
|
+
/**
|
|
16
|
+
* Synthetic detected-DID placeholders (`did:web:detected:*`) that checkpoint's
|
|
17
|
+
* legacy detection middleware synthesized — its didSchema refines them out
|
|
18
|
+
* ("must never be treated as KYA-OS identities"). Mirrored here because a
|
|
19
|
+
* synthetic DID accepted as `detected_agent_did` would become the minted
|
|
20
|
+
* delegation's SUBJECT: a consent-backed credential issued to an unresolvable
|
|
21
|
+
* placeholder the platform route itself refuses. Exact `startsWith` mirror of
|
|
22
|
+
* checkpoint's isSyntheticDetectedDID.
|
|
23
|
+
*/
|
|
24
|
+
const SYNTHETIC_DETECTED_DID_PREFIX = "did:web:detected:";
|
|
25
|
+
/**
|
|
26
|
+
* Full DID acceptance check (shape + synthetic refine), one message per cause —
|
|
27
|
+
* mirroring checkpoint didSchema's regex + refine pair. Returns null when valid.
|
|
28
|
+
*/
|
|
29
|
+
function didIssueMessage(value) {
|
|
30
|
+
if (typeof value !== "string" || !DID_RE.test(value)) {
|
|
31
|
+
return "Invalid DID format. Must be did:key: or did:web:";
|
|
32
|
+
}
|
|
33
|
+
if (value.startsWith(SYNTHETIC_DETECTED_DID_PREFIX)) {
|
|
34
|
+
return "Synthetic detected DIDs are not valid KYA-OS identities";
|
|
35
|
+
}
|
|
36
|
+
return null;
|
|
37
|
+
}
|
|
15
38
|
function isRecord(value) {
|
|
16
39
|
return typeof value === "object" && value !== null && !Array.isArray(value);
|
|
17
40
|
}
|
|
@@ -51,20 +74,17 @@ function validateChallenge(issues, raw) {
|
|
|
51
74
|
checkOptionalString(issues, "challenge.pep_surface", raw.pep_surface, 64);
|
|
52
75
|
checkOptionalString(issues, "challenge.verdict", raw.verdict, 64);
|
|
53
76
|
checkOptionalString(issues, "challenge.challenge_pin", raw.challenge_pin, 512);
|
|
54
|
-
if (raw.detected_agent_did !== undefined
|
|
55
|
-
(
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
message: "Invalid DID format. Must be did:key: or did:web:",
|
|
60
|
-
});
|
|
77
|
+
if (raw.detected_agent_did !== undefined) {
|
|
78
|
+
const issue = didIssueMessage(raw.detected_agent_did);
|
|
79
|
+
if (issue) {
|
|
80
|
+
issues.push({ path: "challenge.detected_agent_did", message: issue });
|
|
81
|
+
}
|
|
61
82
|
}
|
|
62
|
-
if (raw.audience !== undefined
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
path: "challenge.audience",
|
|
66
|
-
|
|
67
|
-
});
|
|
83
|
+
if (raw.audience !== undefined) {
|
|
84
|
+
const issue = didIssueMessage(raw.audience);
|
|
85
|
+
if (issue) {
|
|
86
|
+
issues.push({ path: "challenge.audience", message: issue });
|
|
87
|
+
}
|
|
68
88
|
}
|
|
69
89
|
if (issues.length > issuesBefore)
|
|
70
90
|
return undefined;
|
|
@@ -90,20 +110,30 @@ export function validateRegistrationBody(raw) {
|
|
|
90
110
|
}
|
|
91
111
|
const issues = [];
|
|
92
112
|
checkString(issues, "session_id", raw.session_id, 255);
|
|
93
|
-
|
|
94
|
-
|
|
113
|
+
{
|
|
114
|
+
const issue = didIssueMessage(raw.agent_did);
|
|
115
|
+
if (issue)
|
|
116
|
+
issues.push({ path: "agent_did", message: issue });
|
|
117
|
+
}
|
|
118
|
+
// No length cap: checkpoint's schema is z.string().min(1) — the mirror must
|
|
119
|
+
// not be stricter than the contract it freezes.
|
|
120
|
+
if (typeof raw.project_id !== "string" || raw.project_id.length < 1) {
|
|
95
121
|
issues.push({
|
|
96
|
-
path: "
|
|
97
|
-
message: "
|
|
122
|
+
path: "project_id",
|
|
123
|
+
message: "project_id must be a non-empty string",
|
|
98
124
|
});
|
|
99
125
|
}
|
|
100
|
-
|
|
126
|
+
// Upper bound is the ECMAScript Date range (8.64e15 ms): a larger value —
|
|
127
|
+
// e.g. .NET DateTime.Ticks sent by a unit-confused registrar — passes
|
|
128
|
+
// isInteger but makes new Date(...).toISOString() throw AFTER the anchor is
|
|
129
|
+
// created. No valid unix-ms timestamp exceeds it.
|
|
101
130
|
if (typeof raw.created_at !== "number" ||
|
|
102
131
|
!Number.isInteger(raw.created_at) ||
|
|
103
|
-
raw.created_at <= 0
|
|
132
|
+
raw.created_at <= 0 ||
|
|
133
|
+
raw.created_at > 8.64e15) {
|
|
104
134
|
issues.push({
|
|
105
135
|
path: "created_at",
|
|
106
|
-
message: "created_at must be a positive unix-ms integer",
|
|
136
|
+
message: "created_at must be a valid positive unix-ms integer",
|
|
107
137
|
});
|
|
108
138
|
}
|
|
109
139
|
const clientInfo = raw.client_info;
|
|
@@ -117,12 +147,10 @@ export function validateRegistrationBody(raw) {
|
|
|
117
147
|
checkString(issues, "client_info.name", clientInfo.name, 255);
|
|
118
148
|
checkOptionalString(issues, "client_info.version", clientInfo.version, 50);
|
|
119
149
|
}
|
|
120
|
-
if (raw.server_did !== undefined
|
|
121
|
-
|
|
122
|
-
|
|
123
|
-
path: "server_did",
|
|
124
|
-
message: "Invalid DID format. Must be did:key: or did:web:",
|
|
125
|
-
});
|
|
150
|
+
if (raw.server_did !== undefined) {
|
|
151
|
+
const issue = didIssueMessage(raw.server_did);
|
|
152
|
+
if (issue)
|
|
153
|
+
issues.push({ path: "server_did", message: issue });
|
|
126
154
|
}
|
|
127
155
|
const challenge = validateChallenge(issues, raw.challenge);
|
|
128
156
|
// draft-kya-http-02 §8.2: a challenge anchor sid MUST be high-entropy. Mirror
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"anchor-registration-validate.js","sourceRoot":"","sources":["../../src/delegation-http/anchor-registration-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,sFAAsF;AACtF,MAAM,MAAM,GAAG,oBAAoB,CAAC;
|
|
1
|
+
{"version":3,"file":"anchor-registration-validate.js","sourceRoot":"","sources":["../../src/delegation-http/anchor-registration-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,sFAAsF;AACtF,MAAM,MAAM,GAAG,oBAAoB,CAAC;AAEpC;;;;;;;;GAQG;AACH,MAAM,6BAA6B,GAAG,mBAAmB,CAAC;AAE1D;;;GAGG;AACH,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACpD,OAAO,yDAAyD,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAyCD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,sEAAsE;AACtE,SAAS,WAAW,CAClB,MAAyB,EACzB,IAAY,EACZ,KAAc,EACd,GAAW;IAEX,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,wBAAwB,GAAG,SAAS,EAAE,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAS,mBAAmB,CAC1B,MAAyB,EACzB,IAAY,EACZ,KAAc,EACd,GAAW;IAEX,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,qFAAqF;AACrF,SAAS,iBAAiB,CACxB,MAAyB,EACzB,GAAY;IAEZ,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;QAC3E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IAEnC,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC;IACnC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACtB,MAAM,CAAC,MAAM,GAAG,CAAC;QACjB,MAAM,CAAC,MAAM,GAAG,EAAE;QAClB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,EAC3E,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,2BAA2B;YACjC,OAAO,EACL,oEAAoE;SACvE,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,MAAM,EAAE,uBAAuB,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC1E,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClE,mBAAmB,CACjB,MAAM,EACN,yBAAyB,EACzB,GAAG,CAAC,aAAa,EACjB,GAAG,CACJ,CAAC;IACF,IAAI,GAAG,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACtD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,YAAY;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO;QACL,cAAc,EAAE,MAAkB;QAClC,UAAU,EAAE,GAAG,CAAC,WAAiC;QACjD,OAAO,EAAE,GAAG,CAAC,OAA6B;QAC1C,gBAAgB,EAAE,GAAG,CAAC,kBAAwC;QAC9D,YAAY,EAAE,GAAG,CAAC,aAAmC;QACrD,QAAQ,EAAE,GAAG,CAAC,QAA8B;KAC7C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;SAC9D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;QACC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,4EAA4E;IAC5E,gDAAgD;IAChD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAC;IACL,CAAC;IACD,0EAA0E;IAC1E,sEAAsE;IACtE,4EAA4E;IAC5E,kDAAkD;IAClD,IACE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAClC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,GAAG,CAAC,UAAU,IAAI,CAAC;QACnB,GAAG,CAAC,UAAU,GAAG,OAAO,EACxB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,+BAA+B;SACzC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,WAAW,CAAC,MAAM,EAAE,kBAAkB,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC9D,mBAAmB,CAAC,MAAM,EAAE,qBAAqB,EAAE,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAE3D,8EAA8E;IAC9E,4EAA4E;IAC5E,IACE,GAAG,CAAC,SAAS,KAAK,SAAS;QAC3B,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAClC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,EAC1B,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,YAAY;YAClB,OAAO,EACL,mFAAmF;SACtF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACpD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,SAAS,EAAE,GAAG,CAAC,UAAoB;YACnC,QAAQ,EAAE,GAAG,CAAC,SAAmB;YACjC,SAAS,EAAE,GAAG,CAAC,UAAoB;YACnC,SAAS,EAAE,GAAG,CAAC,UAAoB;YACnC,UAAU,EAAG,UAAsC,CAAC,IAAc;YAClE,aAAa,EAAG,UAAsC,CAAC,OAE1C;YACb,SAAS,EAAE,GAAG,CAAC,UAAgC;YAC/C,SAAS;SACV;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"anchor-registration.d.ts","sourceRoot":"","sources":["../../src/delegation-http/anchor-registration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAatD,wFAAwF;AACxF,UAAU,0BAA0B;IAClC,GAAG,EAAE;QACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;QACzC,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,OAAO,CAAC;KACd,CAAC;CACH;AASD,UAAU,gBAAgB;IACxB,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,cAAc,EAAE,MAAM,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACzD;
|
|
1
|
+
{"version":3,"file":"anchor-registration.d.ts","sourceRoot":"","sources":["../../src/delegation-http/anchor-registration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAatD,wFAAwF;AACxF,UAAU,0BAA0B;IAClC,GAAG,EAAE;QACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;QACzC,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,OAAO,CAAC;KACd,CAAC;CACH;AASD,UAAU,gBAAgB;IACxB,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,cAAc,EAAE,MAAM,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACzD;AAkBD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,QAAQ,CAAC,mBAAmB,CAAC,GAAG,IAAI,EACzC,GAAG,EAAE,aAAa,GACjB,OAAO,CAWT;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAG/D;AAgHD;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,CAAC,EAAE,0BAA0B,EAC7B,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAClC,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,QAAQ,CAAC,CA0InB"}
|
|
@@ -21,7 +21,7 @@
|
|
|
21
21
|
*
|
|
22
22
|
* @module @kya-os/mcp-i-cloudflare/delegation-http/anchor-registration
|
|
23
23
|
*/
|
|
24
|
-
import { INTERNAL_PICKUP_CREATE
|
|
24
|
+
import { INTERNAL_PICKUP_CREATE } from "./constants";
|
|
25
25
|
import { isAnchorSid } from "./sid";
|
|
26
26
|
import { sha256Hex } from "./hash";
|
|
27
27
|
import { buildConsentUri, signChallengeProof } from "./challenge";
|
|
@@ -39,7 +39,11 @@ export function isAnchorRegistrationEnabled(cfg, env) {
|
|
|
39
39
|
return (cfg !== null &&
|
|
40
40
|
cfg.remoteAnchorRegistration &&
|
|
41
41
|
typeof env.AGENTSHIELD_API_KEY === "string" &&
|
|
42
|
-
env.AGENTSHIELD_API_KEY.length > 0
|
|
42
|
+
env.AGENTSHIELD_API_KEY.length > 0 &&
|
|
43
|
+
// No anchor store, no registration surface: getAnchorStub throws on an
|
|
44
|
+
// unbound MCP_OBJECT, so an unbound deployment must 404 like every other
|
|
45
|
+
// unprovisioned state instead of 500ing per request.
|
|
46
|
+
env.MCP_OBJECT !== undefined);
|
|
43
47
|
}
|
|
44
48
|
/**
|
|
45
49
|
* Map a registrar-chosen session_id to the worker's anchor-sid namespace. A
|
|
@@ -78,60 +82,55 @@ async function callAnchor(env, deps, sid, internalPath, body) {
|
|
|
78
82
|
}
|
|
79
83
|
/**
|
|
80
84
|
* Ensure a live anchor exists for `sid`, first-write-wins: a live anchor is
|
|
81
|
-
* reused as-is (its stored
|
|
85
|
+
* reused as-is (its stored values are authoritative, mirroring checkpoint's
|
|
82
86
|
* COALESCE-on-conflict); otherwise create one from this registration, honoring
|
|
83
87
|
* a `challenge_pin` ONLY when unverified keyid holders are enabled — a pinned
|
|
84
88
|
* keyid the pickup surface would reject (W2) must not brick the anchor.
|
|
85
89
|
*
|
|
86
|
-
*
|
|
87
|
-
*
|
|
88
|
-
*
|
|
89
|
-
*
|
|
90
|
-
*
|
|
90
|
+
* ONE atomic round-trip: the DO input gate serializes creates, and the create
|
|
91
|
+
* response body carries both the `reused` discriminator (two racing
|
|
92
|
+
* registrations get exactly one fresh 201 and one reused 200 — checkpoint
|
|
93
|
+
* status parity under concurrency) and the authoritative record snapshot to
|
|
94
|
+
* echo — there is no create→read-back window for the anchor to expire in.
|
|
95
|
+
* Stub failures (redeployed/evicted DOs, transport errors) map to the
|
|
96
|
+
* contract's 502 envelope instead of escaping as off-contract 500s.
|
|
91
97
|
*/
|
|
92
98
|
async function ensureAnchor(env, cfg, deps, sid, challenge, session) {
|
|
93
99
|
const pin = challenge.challengePin && cfg.allowUnverifiedKeyidHolders
|
|
94
100
|
? { type: "keyid", valueSha256: sha256Hex(challenge.challengePin) }
|
|
95
101
|
: undefined;
|
|
96
|
-
const
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
delegationExpiresInS: cfg.delegationExpiresInS,
|
|
102
|
-
agentDid: challenge.detectedAgentDid ?? session.agentDid,
|
|
103
|
-
// Cross-resource claim inputs (drive the minted VC's aud / server_did —
|
|
104
|
-
// see consent-anchor-bridge's withCrossResourceClaims).
|
|
105
|
-
...(challenge.audience ? { audience: challenge.audience } : {}),
|
|
106
|
-
...(session.serverDid ? { serverDid: session.serverDid } : {}),
|
|
107
|
-
...(pin ? { pin } : {}),
|
|
108
|
-
});
|
|
109
|
-
if (created.status !== 201) {
|
|
110
|
-
return {
|
|
111
|
-
error: errorResponse(502, "anchor_unavailable", "The anchor store did not accept the registration"),
|
|
112
|
-
};
|
|
113
|
-
}
|
|
114
|
-
let reused = false;
|
|
102
|
+
const anchorUnavailable = {
|
|
103
|
+
error: errorResponse(502, "anchor_unavailable", "The anchor store did not accept the registration"),
|
|
104
|
+
};
|
|
105
|
+
let created;
|
|
106
|
+
let body;
|
|
115
107
|
try {
|
|
116
|
-
|
|
117
|
-
|
|
108
|
+
created = await callAnchor(env, deps, sid, INTERNAL_PICKUP_CREATE, {
|
|
109
|
+
sid,
|
|
110
|
+
requiredScopes: challenge.requiredScopes,
|
|
111
|
+
pollIntervalS: cfg.pollIntervalS,
|
|
112
|
+
anchorTtlS: cfg.anchorTtlS,
|
|
113
|
+
delegationExpiresInS: cfg.delegationExpiresInS,
|
|
114
|
+
agentDid: challenge.detectedAgentDid ?? session.agentDid,
|
|
115
|
+
registeredAtMs: session.registeredAtMs,
|
|
116
|
+
// Cross-resource claim inputs (drive the minted VC's aud / server_did —
|
|
117
|
+
// see consent-anchor-bridge's withCrossResourceClaims).
|
|
118
|
+
...(challenge.audience ? { audience: challenge.audience } : {}),
|
|
119
|
+
...(session.serverDid ? { serverDid: session.serverDid } : {}),
|
|
120
|
+
...(pin ? { pin } : {}),
|
|
121
|
+
});
|
|
122
|
+
if (created.status !== 201)
|
|
123
|
+
return anchorUnavailable;
|
|
124
|
+
body = (await created.json());
|
|
118
125
|
}
|
|
119
|
-
catch {
|
|
120
|
-
|
|
121
|
-
|
|
126
|
+
catch (error) {
|
|
127
|
+
console.warn(`[kya-http] anchor create failed (sid=${sid}):`, error instanceof Error ? error.message : String(error));
|
|
128
|
+
return anchorUnavailable;
|
|
122
129
|
}
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
});
|
|
126
|
-
if (readBack.status !== 200) {
|
|
127
|
-
return {
|
|
128
|
-
error: errorResponse(502, "anchor_unavailable", "The registered anchor could not be read back"),
|
|
129
|
-
};
|
|
130
|
+
if (!body.anchor || !Array.isArray(body.anchor.requiredScopes)) {
|
|
131
|
+
return anchorUnavailable;
|
|
130
132
|
}
|
|
131
|
-
return {
|
|
132
|
-
isNew: !reused,
|
|
133
|
-
snapshot: (await readBack.json()),
|
|
134
|
-
};
|
|
133
|
+
return { isNew: body.reused !== true, snapshot: body.anchor };
|
|
135
134
|
}
|
|
136
135
|
/**
|
|
137
136
|
* Handle `POST /api/v1/bouncer/sessions`. The route gate
|
|
@@ -167,9 +166,21 @@ export async function handleAnchorRegistration(c, env, cfg, deps) {
|
|
|
167
166
|
return errorResponse(401, "unauthorized", "This endpoint only accepts challenge registration");
|
|
168
167
|
}
|
|
169
168
|
const sid = deriveRegistrationSid(validated.input.sessionId);
|
|
169
|
+
// Loud dead-end (review P1): without challenge.audience the minted credential
|
|
170
|
+
// carries no aud and cannot pass an org-pinned §4.3 audience gate — a failure
|
|
171
|
+
// that would otherwise surface only POST-consent, at the registrar's PEP,
|
|
172
|
+
// looking like the PEP's fault. Registration still proceeds (self-verifying
|
|
173
|
+
// registrars and future flows are legitimate), but the gap is diagnosable
|
|
174
|
+
// here and in the response's cross_resource flag.
|
|
175
|
+
if (!challenge.audience) {
|
|
176
|
+
console.warn(`[kya-http] external registration without challenge.audience (sid=${sid}): ` +
|
|
177
|
+
`the minted credential will FAIL an org-pinned §4.3 audience gate; ` +
|
|
178
|
+
`cross-resource use requires the registrar to send challenge.audience`);
|
|
179
|
+
}
|
|
170
180
|
const anchor = await ensureAnchor(env, cfg, deps, sid, challenge, {
|
|
171
181
|
agentDid: validated.input.agentDid,
|
|
172
182
|
serverDid: validated.input.serverDid,
|
|
183
|
+
registeredAtMs: validated.input.createdAt,
|
|
173
184
|
});
|
|
174
185
|
if ("error" in anchor)
|
|
175
186
|
return anchor.error;
|
|
@@ -200,17 +211,28 @@ export async function handleAnchorRegistration(c, env, cfg, deps) {
|
|
|
200
211
|
console.warn(`[kya-http] registration challenge_proof signing failed (sid=${sid}):`, error instanceof Error ? error.message : String(error));
|
|
201
212
|
return errorResponse(502, "proof_unavailable", "The challenge proof could not be signed");
|
|
202
213
|
}
|
|
214
|
+
// Persisted-originals parity (checkpoint echoes the stored row): a reused
|
|
215
|
+
// anchor echoes the FIRST registration's created_at/issued_at, not this
|
|
216
|
+
// request's. The challenge_proof itself is re-signed per response over the
|
|
217
|
+
// stored values, so proof/consent scope desync remains impossible.
|
|
218
|
+
const createdAtMs = anchor.snapshot.registeredAtMs ?? validated.input.createdAt;
|
|
219
|
+
const issuedAtMs = anchor.snapshot.issuedAtMs ?? Date.now();
|
|
203
220
|
return new Response(JSON.stringify({
|
|
204
221
|
success: true,
|
|
205
222
|
data: {
|
|
206
223
|
session_id: sid,
|
|
207
224
|
registered: true,
|
|
208
|
-
created_at: new Date(
|
|
225
|
+
created_at: new Date(createdAtMs).toISOString(),
|
|
209
226
|
challenge: {
|
|
210
227
|
consent_uri: consentUri,
|
|
211
228
|
challenge_proof: challengeProof,
|
|
212
229
|
required_scopes: anchor.snapshot.requiredScopes,
|
|
213
|
-
issued_at:
|
|
230
|
+
issued_at: issuedAtMs,
|
|
231
|
+
// ADDITIVE diagnostic (not in the frozen conformance key set, ignored
|
|
232
|
+
// by both existing parsers): whether the minted credential will carry
|
|
233
|
+
// the §4.3 cross-resource claims. False means no audience was
|
|
234
|
+
// registered — the credential only self-verifies at this worker.
|
|
235
|
+
cross_resource: typeof anchor.snapshot.audience === "string",
|
|
214
236
|
},
|
|
215
237
|
},
|
|
216
238
|
}), {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"anchor-registration.js","sourceRoot":"","sources":["../../src/delegation-http/anchor-registration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,OAAO,EAAE,sBAAsB,EAAE,
|
|
1
|
+
{"version":3,"file":"anchor-registration.js","sourceRoot":"","sources":["../../src/delegation-http/anchor-registration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EACL,wBAAwB,GAGzB,MAAM,gCAAgC,CAAC;AAoCxC,wFAAwF;AACxF,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAyC,EACzC,GAAkB;IAElB,OAAO,CACL,GAAG,KAAK,IAAI;QACZ,GAAG,CAAC,wBAAwB;QAC5B,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;QAC3C,GAAG,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC;QAClC,uEAAuE;QACvE,yEAAyE;QACzE,qDAAqD;QACrD,GAAG,CAAC,UAAU,KAAK,SAAS,CAC7B,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,IAAI,WAAW,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,OAAO,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,kFAAkF;AAClF,SAAS,aAAa,CACpB,MAAc,EACd,IAAY,EACZ,OAAe,EACf,OAA2B;IAE3B,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KAC1D,CAAC,EACF;QACE,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU;SAC5B;KACF,CACF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,UAAU,CACvB,GAAkB,EAClB,IAAsB,EACtB,GAAW,EACX,YAAoB,EACpB,IAAa;IAEb,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,IAAI,GAAG,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC,QAAQ,EAAE,EACpD;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CACF,CAAC;IACF,OAAO,QAA0C,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,YAAY,CACzB,GAAkB,EAClB,GAAkC,EAClC,IAAsB,EACtB,GAAW,EACX,SAAgC,EAChC,OAAyE;IAEzE,MAAM,GAAG,GACP,SAAS,CAAC,YAAY,IAAI,GAAG,CAAC,2BAA2B;QACvD,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE;QACnE,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,iBAAiB,GAAG;QACxB,KAAK,EAAE,aAAa,CAClB,GAAG,EACH,oBAAoB,EACpB,kDAAkD,CACnD;KACF,CAAC;IAEF,IAAI,OAA4B,CAAC;IACjC,IAAI,IAAmD,CAAC;IACxD,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,sBAAsB,EAAE;YACjE,GAAG;YACH,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;YAC9C,QAAQ,EAAE,SAAS,CAAC,gBAAgB,IAAI,OAAO,CAAC,QAAQ;YACxD,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,wEAAwE;YACxE,wDAAwD;YACxD,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxB,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,iBAAiB,CAAC;QACrD,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAgB,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CACV,wCAAwC,GAAG,IAAI,EAC/C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACF,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/D,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,CAA6B,EAC7B,GAAkB,EAClB,GAAkC,EAClC,IAAsB;IAEtB,6EAA6E;IAC7E,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,4BAA4B,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QACxC,OAAO,aAAa,CAClB,GAAG,EACH,cAAc,EACd,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,sBAAsB,EAAE;YACnE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE;SAC3C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,aAAa,CAClB,GAAG,EACH,iBAAiB,EACjB,sBAAsB,EACtB,SAAS,CAAC,MAAM,CACjB,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC;IACtC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,aAAa,CAClB,GAAG,EACH,cAAc,EACd,mDAAmD,CACpD,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAE7D,8EAA8E;IAC9E,8EAA8E;IAC9E,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,kDAAkD;IAClD,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CACV,oEAAoE,GAAG,KAAK;YAC1E,oEAAoE;YACpE,sEAAsE,CACzE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE;QAChE,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ;QAClC,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS;QACpC,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS;KAC1C,CAAC,CAAC;IACH,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IAE3C,qEAAqE;IACrE,wEAAwE;IACxE,wDAAwD;IACxD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAClD,MAAM,OAAO,GAA0B;QACrC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;QAC9C,iBAAiB,EAAE,IAAI;QACvB,KAAK,EAAE,IAAI;QACX,GAAG;QACH,aAAa,EAAE,GAAG,CAAC,aAAa;KACjC,CAAC;IACF,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAE5C,IAAI,cAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,kBAAkB,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,EAAE;YACrE,GAAG;YACH,WAAW,EAAE,UAAU;YACvB,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;SAChD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4EAA4E;QAC5E,uEAAuE;QACvE,mCAAmC;QACnC,OAAO,CAAC,IAAI,CACV,+DAA+D,GAAG,IAAI,EACtE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACF,OAAO,aAAa,CAClB,GAAG,EACH,mBAAmB,EACnB,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,WAAW,GACf,MAAM,CAAC,QAAQ,CAAC,cAAc,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAE5D,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,IAAI;QACb,IAAI,EAAE;YACJ,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE;YAC/C,SAAS,EAAE;gBACT,WAAW,EAAE,UAAU;gBACvB,eAAe,EAAE,cAAc;gBAC/B,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;gBAC/C,SAAS,EAAE,UAAU;gBACrB,sEAAsE;gBACtE,sEAAsE;gBACtE,8DAA8D;gBAC9D,iEAAiE;gBACjE,cAAc,EAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ;aAC7D;SACF;KACF,CAAC,EACF;QACE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QAChC,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,0EAA0E;YAC1E,eAAe,EAAE,mBAAmB;SACrC;KACF,CACF,CAAC;AACJ,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"consent-anchor-bridge.d.ts","sourceRoot":"","sources":["../../src/delegation-http/consent-anchor-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAWH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;
|
|
1
|
+
{"version":3,"file":"consent-anchor-bridge.d.ts","sourceRoot":"","sources":["../../src/delegation-http/consent-anchor-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAWH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AA+frD;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,CAAC,EAAE,WAAW,EACd,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,QAAQ,CAAC,mBAAmB,CAAC,GAClC,OAAO,CAAC,QAAQ,CAAC,CAqCnB;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAC9C,CAAC,EAAE,WAAW,EACd,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,QAAQ,CAAC,mBAAmB,CAAC,GACjC,OAAO,CAAC,QAAQ,CAAC,CAqLnB"}
|