@kya-os/mcp-i-cloudflare 1.13.6 → 1.14.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (111) hide show
  1. package/dist/agent.d.ts.map +1 -1
  2. package/dist/agent.js +23 -5
  3. package/dist/agent.js.map +1 -1
  4. package/dist/audit/deployment-binding.d.ts +54 -54
  5. package/dist/config.d.ts +4 -0
  6. package/dist/config.d.ts.map +1 -1
  7. package/dist/config.js +2 -0
  8. package/dist/config.js.map +1 -1
  9. package/dist/delegation-http/anchor-do.d.ts.map +1 -1
  10. package/dist/delegation-http/anchor-do.js +108 -10
  11. package/dist/delegation-http/anchor-do.js.map +1 -1
  12. package/dist/delegation-http/anchor-registration-validate.d.ts +4 -0
  13. package/dist/delegation-http/anchor-registration-validate.d.ts.map +1 -1
  14. package/dist/delegation-http/anchor-registration-validate.js +9 -0
  15. package/dist/delegation-http/anchor-registration-validate.js.map +1 -1
  16. package/dist/delegation-http/anchor-registration.d.ts.map +1 -1
  17. package/dist/delegation-http/anchor-registration.js +119 -29
  18. package/dist/delegation-http/anchor-registration.js.map +1 -1
  19. package/dist/delegation-http/bearer-retry.d.ts +6 -14
  20. package/dist/delegation-http/bearer-retry.d.ts.map +1 -1
  21. package/dist/delegation-http/bearer-retry.js +37 -73
  22. package/dist/delegation-http/bearer-retry.js.map +1 -1
  23. package/dist/delegation-http/challenge.d.ts +20 -4
  24. package/dist/delegation-http/challenge.d.ts.map +1 -1
  25. package/dist/delegation-http/challenge.js +58 -8
  26. package/dist/delegation-http/challenge.js.map +1 -1
  27. package/dist/delegation-http/consent-anchor-bridge.d.ts +5 -8
  28. package/dist/delegation-http/consent-anchor-bridge.d.ts.map +1 -1
  29. package/dist/delegation-http/consent-anchor-bridge.js +236 -40
  30. package/dist/delegation-http/consent-anchor-bridge.js.map +1 -1
  31. package/dist/delegation-http/constants.d.ts +2 -0
  32. package/dist/delegation-http/constants.d.ts.map +1 -1
  33. package/dist/delegation-http/constants.js +2 -0
  34. package/dist/delegation-http/constants.js.map +1 -1
  35. package/dist/delegation-http/credential-consent.d.ts +3 -1
  36. package/dist/delegation-http/credential-consent.d.ts.map +1 -1
  37. package/dist/delegation-http/credential-consent.js +11 -1
  38. package/dist/delegation-http/credential-consent.js.map +1 -1
  39. package/dist/delegation-http/native-capabilities.d.ts +4 -0
  40. package/dist/delegation-http/native-capabilities.d.ts.map +1 -0
  41. package/dist/delegation-http/native-capabilities.js +53 -0
  42. package/dist/delegation-http/native-capabilities.js.map +1 -0
  43. package/dist/delegation-http/native-fetch.d.ts +3 -0
  44. package/dist/delegation-http/native-fetch.d.ts.map +1 -0
  45. package/dist/delegation-http/native-fetch.js +13 -0
  46. package/dist/delegation-http/native-fetch.js.map +1 -0
  47. package/dist/delegation-http/native-http.d.ts +102 -0
  48. package/dist/delegation-http/native-http.d.ts.map +1 -0
  49. package/dist/delegation-http/native-http.js +191 -0
  50. package/dist/delegation-http/native-http.js.map +1 -0
  51. package/dist/delegation-http/native-oauth.d.ts +26 -0
  52. package/dist/delegation-http/native-oauth.d.ts.map +1 -0
  53. package/dist/delegation-http/native-oauth.js +369 -0
  54. package/dist/delegation-http/native-oauth.js.map +1 -0
  55. package/dist/delegation-http/native-pickup.d.ts +20 -0
  56. package/dist/delegation-http/native-pickup.d.ts.map +1 -0
  57. package/dist/delegation-http/native-pickup.js +227 -0
  58. package/dist/delegation-http/native-pickup.js.map +1 -0
  59. package/dist/delegation-http/pickup-routes.d.ts +1 -0
  60. package/dist/delegation-http/pickup-routes.d.ts.map +1 -1
  61. package/dist/delegation-http/pickup-routes.js +55 -1
  62. package/dist/delegation-http/pickup-routes.js.map +1 -1
  63. package/dist/delegation-http/register.d.ts.map +1 -1
  64. package/dist/delegation-http/register.js +4 -7
  65. package/dist/delegation-http/register.js.map +1 -1
  66. package/dist/delegation-http/remote-issuer.d.ts +37 -0
  67. package/dist/delegation-http/remote-issuer.d.ts.map +1 -0
  68. package/dist/delegation-http/remote-issuer.js +289 -0
  69. package/dist/delegation-http/remote-issuer.js.map +1 -0
  70. package/dist/delegation-http/sid.d.ts +5 -2
  71. package/dist/delegation-http/sid.d.ts.map +1 -1
  72. package/dist/delegation-http/sid.js +8 -2
  73. package/dist/delegation-http/sid.js.map +1 -1
  74. package/dist/delegation-http/types.d.ts +31 -0
  75. package/dist/delegation-http/types.d.ts.map +1 -1
  76. package/dist/delegation-http/well-known-capability.d.ts.map +1 -1
  77. package/dist/delegation-http/well-known-capability.js +5 -0
  78. package/dist/delegation-http/well-known-capability.js.map +1 -1
  79. package/dist/helpers/env-mapper.d.ts.map +1 -1
  80. package/dist/helpers/env-mapper.js +4 -0
  81. package/dist/helpers/env-mapper.js.map +1 -1
  82. package/dist/index.d.ts +4 -0
  83. package/dist/index.d.ts.map +1 -1
  84. package/dist/index.js +2 -0
  85. package/dist/index.js.map +1 -1
  86. package/dist/proof-generator.d.ts +2 -0
  87. package/dist/proof-generator.d.ts.map +1 -1
  88. package/dist/proof-generator.js +1 -0
  89. package/dist/proof-generator.js.map +1 -1
  90. package/dist/runtime/oauth-handler.d.ts.map +1 -1
  91. package/dist/runtime/oauth-handler.js +44 -1
  92. package/dist/runtime/oauth-handler.js.map +1 -1
  93. package/dist/security/mcp-admission.d.ts +43 -0
  94. package/dist/security/mcp-admission.d.ts.map +1 -0
  95. package/dist/security/mcp-admission.js +165 -0
  96. package/dist/security/mcp-admission.js.map +1 -0
  97. package/dist/security/mcp-holder-admission.d.ts +19 -0
  98. package/dist/security/mcp-holder-admission.d.ts.map +1 -0
  99. package/dist/security/mcp-holder-admission.js +52 -0
  100. package/dist/security/mcp-holder-admission.js.map +1 -0
  101. package/dist/security/presented-delegation.d.ts +13 -0
  102. package/dist/security/presented-delegation.d.ts.map +1 -0
  103. package/dist/security/presented-delegation.js +73 -0
  104. package/dist/security/presented-delegation.js.map +1 -0
  105. package/dist/services/consent.service.d.ts +10 -0
  106. package/dist/services/consent.service.d.ts.map +1 -1
  107. package/dist/services/consent.service.js +15 -3
  108. package/dist/services/consent.service.js.map +1 -1
  109. package/dist/types.d.ts +4 -0
  110. package/dist/types.d.ts.map +1 -1
  111. package/package.json +3 -3
@@ -1 +1 @@
1
- {"version":3,"file":"anchor-do.js","sourceRoot":"","sources":["../../src/delegation-http/anchor-do.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAsBzD;;;;;GAKG;AACH,SAAS,cAAc,CAAC,GAAuB;IAC7C,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AASD,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,YAAY,EAAE,CAAC,CAAC;AAC/D,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC;AACzE,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,aAAa,EAAE,CAAC,CAAC;AAEvE;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,GAAmC,EACnC,KAAc,EACd,GAAW;IAKX,MAAM,CAAC,GAAG,KAAoB,CAAC;IAC/B,iFAAiF;IACjF,iFAAiF;IACjF,mFAAmF;IACnF,8EAA8E;IAC9E,iFAAiF;IACjF,+EAA+E;IAC/E,0EAA0E;IAC1E,+EAA+E;IAC/E,sEAAsE;IACtE,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE;gBACR,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;aACnE;SACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAuB;QACjC,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACpC,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG,GAAG,CAAC,CAAC,UAAU,GAAG,IAAI;QACpC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACjE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACjE,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACpE,cAAc,EACZ,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;QACrE,UAAU,EAAE,GAAG;QACf,GAAG,EAAE,CAAC,CAAC,GAAG;YACR,CAAC,CAAC;gBACE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;gBAChB,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW;gBAC9B,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,WAAW;aACpB;YACH,CAAC,CAAC,SAAS;KACd,CAAC;IACF,OAAO;QACL,MAAM;QACN,QAAQ,EAAE;YACR,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE;SACxD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CACxB,GAAmC,EACnC,MAAoB,EACpB,GAAW;IASX,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;QACxB,8EAA8E;QAC9E,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,+EAA+E;QAC/E,0EAA0E;QAC1E,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACtE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,iFAAiF;QACjF,+EAA+E;QAC/E,OAAO,GAAG;YACR,GAAG,GAAG;YACN,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM;YACxD,GAAG,EAAE;gBACH,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW,EAAE,SAAS;gBACtB,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,YAAY;aACrB;SACF,CAAC;QACF,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,kFAAkF;IAClF,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK;YACpC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,UAAU;SAC1C,CAAC;QACF,OAAO,aAAa;YAClB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtD,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;IAC1C,CAAC;IAED,kFAAkF;IAClF,2DAA2D;IAC3D,IACE,CAAC,aAAa;QACd,OAAO,CAAC,UAAU,KAAK,SAAS;QAChC,GAAG,GAAG,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,EACvD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED,OAAO;QACL,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE;QACvC,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;KAC/C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAmC,EACnC,KAAc,EACd,GAAW;IAKX,MAAM,CAAC,GAAG,KAAqB,CAAC;IAChC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,2EAA2E;IAC3E,mFAAmF;IACnF,+EAA+E;IAC/E,yEAAyE;IACzE,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAChD,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAuB;QACjC,GAAG,GAAG;QACN,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE;KAC1E,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACxE,CAAC;AAED,2EAA2E;AAC3E,SAAS,YAAY,CAAC,CAIrB;IACC,MAAM,OAAO,GAA2B,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;IACxE,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACrB,0EAA0E;QAC1E,kCAAkC;QAClC,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;YAC7B,OAAO,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAC7C,OAAO,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;QACtE,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAuB,EACvB,OAAgB,EAChB,GAAY;IAEZ,MAAM,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAE3C,IAAI,IAAuE,CAAC;IAC5E,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAgB,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAmC,CAAC;IAE3E,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;QACpC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxD,IAAI,MAAM;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QACtB,IACE,CAAC,CAAC;YACF,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAC3B,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAC1C,CAAC;YACD,OAAO,YAAY,CAAC;gBAClB,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,6BAA6B,EAAE;aACjF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aACtD,IAAI,MAAM;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,KAAK,uBAAuB,EAAE,CAAC;QACrC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aACtD,IAAI,MAAM;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9B,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,sDAAsD;QACtD,OAAO,YAAY,CAAC;YAClB,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,SAAS,EAAE,GAAG,CAAC,SAAS;aACzB;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC"}
1
+ {"version":3,"file":"anchor-do.js","sourceRoot":"","sources":["../../src/delegation-http/anchor-do.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AA2BzD;;;;;GAKG;AACH,SAAS,cAAc,CAAC,GAAuB;IAC7C,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;KAC/C,CAAC;AACJ,CAAC;AAUD,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,YAAY,EAAE,CAAC,CAAC;AAC/D,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC;AACzE,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,aAAa,EAAE,CAAC,CAAC;AAEvE,mFAAmF;AACnF,SAAS,kBAAkB,CAAC,GAAuB,EAAE,GAAW;IAC9D,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IAC/D,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC;IAC1C,OAAO,CACL,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC;QAC1B,GAAI,IAAI,CAAC;QACT,CAAC,MAAM,CAAC,aAAa,CAAC,GAAI,GAAG,IAAI,CAAC;QAClC,GAAG,IAAI,GAAI,GAAG,IAAI,CACnB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,GAAmC,EACnC,KAAc,EACd,GAAW;IAKX,MAAM,CAAC,GAAG,KAAoB,CAAC;IAC/B,iFAAiF;IACjF,iFAAiF;IACjF,mFAAmF;IACnF,8EAA8E;IAC9E,iFAAiF;IACjF,+EAA+E;IAC/E,0EAA0E;IAC1E,+EAA+E;IAC/E,sEAAsE;IACtE,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE;gBACR,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;aACnE;SACF,CAAC;IACJ,CAAC;IACD,IACE,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,gBAAgB,KAAK,SAAS;QAChC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACxC,CAAC,CAAC,gBAAgB,GAAG,GAAG,GAAG,MAAM;YACjC,CAAC,CAAC,gBAAgB,GAAG,OAAO,IAAI,GAAG,CAAC;QAEtC,OAAO;YACL,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE;SACnE,CAAC;IACJ,MAAM,QAAQ,GACZ,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9E,MAAM,MAAM,GAAuB;QACjC,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACpC,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,SAAS,EAAE,GAAG;QACd,SAAS,EACP,QAAQ;YACR,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI;QAClE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACjE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACjE,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACpE,cAAc,EACZ,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;QACrE,UAAU,EAAE,QAAQ;QACpB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;QACxC,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,oBAAoB,EAAE,CAAC,CAAC,oBAAoB;QAC5C,GAAG,EAAE,CAAC,CAAC,GAAG;YACR,CAAC,CAAC;gBACE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;gBAChB,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW;gBAC9B,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,WAAW;aACpB;YACH,CAAC,CAAC,SAAS;KACd,CAAC;IACF,OAAO;QACL,MAAM;QACN,QAAQ,EAAE;YACR,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE;SACxD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CACxB,GAAmC,EACnC,MAAoB,EACpB,GAAW;IASX,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS,IAAI,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QACxD,8EAA8E;QAC9E,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;IACjE,CAAC;IAED,IACE,GAAG,CAAC,UAAU;QACd,CAAC,CAAC,MAAM,CAAC,cAAc;YACrB,MAAM,CAAC,IAAI,KAAK,OAAO;YACvB,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,EAC3C,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE;SACtE,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,+EAA+E;QAC/E,0EAA0E;QAC1E,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACtE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,iFAAiF;QACjF,+EAA+E;QAC/E,OAAO,GAAG;YACR,GAAG,GAAG;YACN,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM;YACxD,GAAG,EAAE;gBACH,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW,EAAE,SAAS;gBACtB,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,YAAY;gBACpB,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD;SACF,CAAC;QACF,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,kFAAkF;IAClF,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK;YACpC,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC5B,CAAC,CAAC,IAAI,CAAC,GAAG,CACN,CAAC,EACD,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,aAAc,GAAG,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CACpE;gBACH,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU;SAClC,CAAC;QACF,OAAO,aAAa;YAClB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtD,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;IAC1C,CAAC;IAED,kFAAkF;IAClF,2DAA2D;IAC3D,IACE,CAAC,aAAa;QACd,OAAO,CAAC,UAAU,KAAK,SAAS;QAChC,GAAG,GAAG,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,EACvD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED,OAAO;QACL,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE;QACvC,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;KAC/C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAmC,EACnC,KAAc,EACd,GAAW;IAKX,MAAM,CAAC,GAAG,KAAqB,CAAC;IAChC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS,IAAI,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;QACpE,OAAO;YACL,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE;SACpE,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,mFAAmF;IACnF,+EAA+E;IAC/E,yEAAyE;IACzE,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAChD,IACE,GAAG,CAAC,UAAU;YACd,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;gBAC/B,GAAG,CAAC,UAAU,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa,CAAC,EACnD,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE;aACrE,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE;gBACR,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,OAAO,EAAE,IAAI;oBACb,GAAG,CAAC,GAAG,CAAC,UAAU;wBAChB,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,UAAU,CAAC,aAAa,EAAE;wBACjD,CAAC,CAAC,EAAE,CAAC;iBACR;aACF;SACF,CAAC;IACJ,CAAC;IACD,IACE,GAAG,CAAC,UAAU;QACd,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;YACrC,CAAC,CAAC,aAAc,IAAI,CAAC;YACrB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,aAAc,GAAG,IAAI,CAAC;YAC9C,CAAC,CAAC,aAAc,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,EACnD,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE;SACtE,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,CAAC,CAAC,aAAc,GAAG,IAAI,EAAE,CAAC;QACrD,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAuB;QACjC,GAAG,GAAG;QACN,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE;YACV,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,UAAU,EAAE,GAAG;YACf,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D;KACF,CAAC;IACF,OAAO;QACL,MAAM;QACN,QAAQ,EAAE;YACR,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,IAAI;gBACb,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D;SACF;KACF,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAS,YAAY,CAAC,CAIrB;IACC,MAAM,OAAO,GAA2B,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;IACxE,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACrB,0EAA0E;QAC1E,kCAAkC;QAClC,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;YAC7B,OAAO,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAC7C,OAAO,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;QACtE,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAuB,EACvB,OAAgB,EAChB,GAAY;IAEZ,MAAM,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAE3C,IAAI,IAAuE,CAAC;IAC5E,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAgB,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAmC,CAAC;IAE3E,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;QACpC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxD,IAAI,MAAM;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QACtB,IACE,CAAC,CAAC;YACF,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAC3B,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAC1C,CAAC;YACD,OAAO,YAAY,CAAC;gBAClB,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,KAAK,EAAE,uBAAuB;oBAC9B,OAAO,EAAE,6BAA6B;iBACvC;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aACtD,IAAI,MAAM;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,KAAK,uBAAuB,EAAE,CAAC;QACrC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aACtD,IAAI,MAAM;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,CAAC,SAAS,IAAI,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9B,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,sDAAsD;QACtD,OAAO,YAAY,CAAC;YAClB,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;gBAC1C,eAAe,EAAE,GAAG,CAAC,eAAe;gBACpC,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;gBAC9C,0EAA0E;gBAC1E,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,KAAK,OAAO;oBAC7C,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE;oBAChC,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC"}
@@ -10,8 +10,12 @@
10
10
  *
11
11
  * @module @kya-os/mcp-i-cloudflare/delegation-http/anchor-registration-validate
12
12
  */
13
+ import { type NativeHttpRegistration } from "./native-http";
13
14
  /** The parsed challenge block (snake_case wire keys camelized). */
14
15
  export interface RegistrationChallenge {
16
+ http?: NativeHttpRegistration;
17
+ policyId?: string;
18
+ composedPolicyHash?: string;
15
19
  requiredScopes: string[];
16
20
  pepSurface?: string;
17
21
  verdict?: string;
@@ -1 +1 @@
1
- {"version":3,"file":"anchor-registration-validate.d.ts","sourceRoot":"","sources":["../../src/delegation-http/anchor-registration-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA8BH,mEAAmE;AACnE,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qEAAqE;AACrE,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,qBAAqB,CAAC;CACnC;AAED,kFAAkF;AAClF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,EAAE,CAAA;CAAE,CAAC;AAyF7C;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAsFvE"}
1
+ {"version":3,"file":"anchor-registration-validate.d.ts","sourceRoot":"","sources":["../../src/delegation-http/anchor-registration-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAA4B,KAAK,sBAAsB,EAAE,MAAM,eAAe,CAAC;AA2BtF,mEAAmE;AACnE,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,sBAAsB,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qEAAqE;AACrE,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,qBAAqB,CAAC;CACnC;AAED,kFAAkF;AAClF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,EAAE,CAAA;CAAE,CAAC;AAiG7C;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAsFvE"}
@@ -12,6 +12,7 @@
12
12
  */
13
13
  /** Only did:web and did:key are permitted — no ad-hoc methods (checkpoint parity). */
14
14
  const DID_RE = /^did:(key|web):.+$/;
15
+ import { isNativeHttpRegistration } from "./native-http";
15
16
  /**
16
17
  * Synthetic detected-DID placeholders (`did:web:detected:*`) that checkpoint's
17
18
  * legacy detection middleware synthesized — its didSchema refines them out
@@ -61,6 +62,9 @@ function validateChallenge(issues, raw) {
61
62
  return undefined;
62
63
  }
63
64
  const issuesBefore = issues.length;
65
+ if (raw.http !== undefined && !isNativeHttpRegistration(raw.http)) {
66
+ issues.push({ path: "challenge.http", message: "Invalid native HTTP contract" });
67
+ }
64
68
  const scopes = raw.required_scopes;
65
69
  if (!Array.isArray(scopes) ||
66
70
  scopes.length < 1 ||
@@ -73,6 +77,8 @@ function validateChallenge(issues, raw) {
73
77
  }
74
78
  checkOptionalString(issues, "challenge.pep_surface", raw.pep_surface, 64);
75
79
  checkOptionalString(issues, "challenge.verdict", raw.verdict, 64);
80
+ checkOptionalString(issues, "challenge.policy_id", raw.policy_id, 255);
81
+ checkOptionalString(issues, "challenge.composed_blob_hash", raw.composed_blob_hash, 64);
76
82
  checkOptionalString(issues, "challenge.challenge_pin", raw.challenge_pin, 512);
77
83
  if (raw.detected_agent_did !== undefined) {
78
84
  const issue = didIssueMessage(raw.detected_agent_did);
@@ -95,6 +101,9 @@ function validateChallenge(issues, raw) {
95
101
  detectedAgentDid: raw.detected_agent_did,
96
102
  challengePin: raw.challenge_pin,
97
103
  audience: raw.audience,
104
+ http: raw.http,
105
+ policyId: raw.policy_id,
106
+ composedPolicyHash: raw.composed_blob_hash,
98
107
  };
99
108
  }
100
109
  /**
@@ -1 +1 @@
1
- {"version":3,"file":"anchor-registration-validate.js","sourceRoot":"","sources":["../../src/delegation-http/anchor-registration-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,sFAAsF;AACtF,MAAM,MAAM,GAAG,oBAAoB,CAAC;AAEpC;;;;;;;;GAQG;AACH,MAAM,6BAA6B,GAAG,mBAAmB,CAAC;AAE1D;;;GAGG;AACH,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACpD,OAAO,yDAAyD,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAyCD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,sEAAsE;AACtE,SAAS,WAAW,CAClB,MAAyB,EACzB,IAAY,EACZ,KAAc,EACd,GAAW;IAEX,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,wBAAwB,GAAG,SAAS,EAAE,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAS,mBAAmB,CAC1B,MAAyB,EACzB,IAAY,EACZ,KAAc,EACd,GAAW;IAEX,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,qFAAqF;AACrF,SAAS,iBAAiB,CACxB,MAAyB,EACzB,GAAY;IAEZ,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;QAC3E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IAEnC,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC;IACnC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACtB,MAAM,CAAC,MAAM,GAAG,CAAC;QACjB,MAAM,CAAC,MAAM,GAAG,EAAE;QAClB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,EAC3E,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,2BAA2B;YACjC,OAAO,EACL,oEAAoE;SACvE,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,MAAM,EAAE,uBAAuB,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC1E,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClE,mBAAmB,CACjB,MAAM,EACN,yBAAyB,EACzB,GAAG,CAAC,aAAa,EACjB,GAAG,CACJ,CAAC;IACF,IAAI,GAAG,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACtD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,YAAY;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO;QACL,cAAc,EAAE,MAAkB;QAClC,UAAU,EAAE,GAAG,CAAC,WAAiC;QACjD,OAAO,EAAE,GAAG,CAAC,OAA6B;QAC1C,gBAAgB,EAAE,GAAG,CAAC,kBAAwC;QAC9D,YAAY,EAAE,GAAG,CAAC,aAAmC;QACrD,QAAQ,EAAE,GAAG,CAAC,QAA8B;KAC7C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;SAC9D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;QACC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,4EAA4E;IAC5E,gDAAgD;IAChD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAC;IACL,CAAC;IACD,0EAA0E;IAC1E,sEAAsE;IACtE,4EAA4E;IAC5E,kDAAkD;IAClD,IACE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAClC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,GAAG,CAAC,UAAU,IAAI,CAAC;QACnB,GAAG,CAAC,UAAU,GAAG,OAAO,EACxB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,+BAA+B;SACzC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,WAAW,CAAC,MAAM,EAAE,kBAAkB,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC9D,mBAAmB,CAAC,MAAM,EAAE,qBAAqB,EAAE,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAE3D,8EAA8E;IAC9E,4EAA4E;IAC5E,IACE,GAAG,CAAC,SAAS,KAAK,SAAS;QAC3B,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAClC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,EAC1B,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,YAAY;YAClB,OAAO,EACL,mFAAmF;SACtF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACpD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,SAAS,EAAE,GAAG,CAAC,UAAoB;YACnC,QAAQ,EAAE,GAAG,CAAC,SAAmB;YACjC,SAAS,EAAE,GAAG,CAAC,UAAoB;YACnC,SAAS,EAAE,GAAG,CAAC,UAAoB;YACnC,UAAU,EAAG,UAAsC,CAAC,IAAc;YAClE,aAAa,EAAG,UAAsC,CAAC,OAE1C;YACb,SAAS,EAAE,GAAG,CAAC,UAAgC;YAC/C,SAAS;SACV;KACF,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"anchor-registration-validate.js","sourceRoot":"","sources":["../../src/delegation-http/anchor-registration-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,sFAAsF;AACtF,MAAM,MAAM,GAAG,oBAAoB,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAA+B,MAAM,eAAe,CAAC;AAEtF;;;;;;;;GAQG;AACH,MAAM,6BAA6B,GAAG,mBAAmB,CAAC;AAE1D;;;GAGG;AACH,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACpD,OAAO,yDAAyD,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA4CD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,sEAAsE;AACtE,SAAS,WAAW,CAClB,MAAyB,EACzB,IAAY,EACZ,KAAc,EACd,GAAW;IAEX,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,wBAAwB,GAAG,SAAS,EAAE,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAS,mBAAmB,CAC1B,MAAyB,EACzB,IAAY,EACZ,KAAc,EACd,GAAW;IAEX,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,qFAAqF;AACrF,SAAS,iBAAiB,CACxB,MAAyB,EACzB,GAAY;IAEZ,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;QAC3E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACnC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC;IACnC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACtB,MAAM,CAAC,MAAM,GAAG,CAAC;QACjB,MAAM,CAAC,MAAM,GAAG,EAAE;QAClB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,EAC3E,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,2BAA2B;YACjC,OAAO,EACL,oEAAoE;SACvE,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,MAAM,EAAE,uBAAuB,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC1E,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClE,mBAAmB,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACvE,mBAAmB,CAAC,MAAM,EAAE,8BAA8B,EAAE,GAAG,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACxF,mBAAmB,CACjB,MAAM,EACN,yBAAyB,EACzB,GAAG,CAAC,aAAa,EACjB,GAAG,CACJ,CAAC;IACF,IAAI,GAAG,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACtD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,YAAY;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO;QACL,cAAc,EAAE,MAAkB;QAClC,UAAU,EAAE,GAAG,CAAC,WAAiC;QACjD,OAAO,EAAE,GAAG,CAAC,OAA6B;QAC1C,gBAAgB,EAAE,GAAG,CAAC,kBAAwC;QAC9D,YAAY,EAAE,GAAG,CAAC,aAAmC;QACrD,QAAQ,EAAE,GAAG,CAAC,QAA8B;QAC5C,IAAI,EAAE,GAAG,CAAC,IAA0C;QACpD,QAAQ,EAAE,GAAG,CAAC,SAA+B;QAC7C,kBAAkB,EAAE,GAAG,CAAC,kBAAwC;KACjE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;SAC9D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;QACC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,4EAA4E;IAC5E,gDAAgD;IAChD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAC;IACL,CAAC;IACD,0EAA0E;IAC1E,sEAAsE;IACtE,4EAA4E;IAC5E,kDAAkD;IAClD,IACE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAClC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,GAAG,CAAC,UAAU,IAAI,CAAC;QACnB,GAAG,CAAC,UAAU,GAAG,OAAO,EACxB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,+BAA+B;SACzC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,WAAW,CAAC,MAAM,EAAE,kBAAkB,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC9D,mBAAmB,CAAC,MAAM,EAAE,qBAAqB,EAAE,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAE3D,8EAA8E;IAC9E,4EAA4E;IAC5E,IACE,GAAG,CAAC,SAAS,KAAK,SAAS;QAC3B,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAClC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,EAC1B,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,YAAY;YAClB,OAAO,EACL,mFAAmF;SACtF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACpD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,SAAS,EAAE,GAAG,CAAC,UAAoB;YACnC,QAAQ,EAAE,GAAG,CAAC,SAAmB;YACjC,SAAS,EAAE,GAAG,CAAC,UAAoB;YACnC,SAAS,EAAE,GAAG,CAAC,UAAoB;YACnC,UAAU,EAAG,UAAsC,CAAC,IAAc;YAClE,aAAa,EAAG,UAAsC,CAAC,OAE1C;YACb,SAAS,EAAE,GAAG,CAAC,UAAgC;YAC/C,SAAS;SACV;KACF,CAAC;AACJ,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"anchor-registration.d.ts","sourceRoot":"","sources":["../../src/delegation-http/anchor-registration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAatD,wFAAwF;AACxF,UAAU,0BAA0B;IAClC,GAAG,EAAE;QACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;QACzC,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,OAAO,CAAC;KACd,CAAC;CACH;AASD,UAAU,gBAAgB;IACxB,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,cAAc,EAAE,MAAM,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACzD;AAkBD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,QAAQ,CAAC,mBAAmB,CAAC,GAAG,IAAI,EACzC,GAAG,EAAE,aAAa,GACjB,OAAO,CAWT;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAG/D;AAgHD;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,CAAC,EAAE,0BAA0B,EAC7B,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAClC,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,QAAQ,CAAC,CA0InB"}
1
+ {"version":3,"file":"anchor-registration.d.ts","sourceRoot":"","sources":["../../src/delegation-http/anchor-registration.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAuBtD,wFAAwF;AACxF,UAAU,0BAA0B;IAClC,GAAG,EAAE;QACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;QACzC,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,OAAO,CAAC;KACd,CAAC;CACH;AASD,UAAU,gBAAgB;IACxB,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,cAAc,EAAE,MAAM,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACzD;AAsBD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,QAAQ,CAAC,mBAAmB,CAAC,GAAG,IAAI,EACzC,GAAG,EAAE,aAAa,GACjB,OAAO,CAWT;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAG/D;AAyID;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,CAAC,EAAE,0BAA0B,EAC7B,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAClC,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,QAAQ,CAAC,CA8QnB"}
@@ -1,30 +1,9 @@
1
- /**
2
- * draft-kya-http-02 delegation layer — external anchor registration
3
- * (`POST /api/v1/bouncer/sessions`).
4
- *
5
- * The cross-resource authorization-host surface: an external PEP in the same
6
- * project (checkpoint's gateway `registration-client.ts`, the .NET
7
- * `DelegationAnchorRegistrar`) provisions a pickup anchor on THIS worker for a
8
- * challenge the worker didn't issue, so the §8.1 challenge that PEP emits can
9
- * point `consent_uri`/`pickup_uri` at this deployment — no reverse proxy. Path
10
- * and request/response shapes are the EXACT contract checkpoint's own bouncer
11
- * sessions route serves (frozen by the vendored `registration.request.json` /
12
- * `registration.response.json` fixtures), so pointing an existing registrar at
13
- * a different base URL is the whole integration. Auth lives in
14
- * `registrar-auth.ts` (the deployment's own `AGENTSHIELD_API_KEY` as Bearer).
15
- *
16
- * Semantics mirror checkpoint's route: idempotent first-write-wins per sid
17
- * (re-registering a live sid returns 200 echoing the ORIGINAL anchor's scopes;
18
- * a fresh sid returns 201). A non-`kya-` session_id maps to a deterministic
19
- * `kya-` sid returned in `data.session_id` — the .NET client adopts the
20
- * response sid; the gateway client already generates `kya-` sids.
21
- *
22
- * @module @kya-os/mcp-i-cloudflare/delegation-http/anchor-registration
23
- */
24
1
  import { INTERNAL_PICKUP_CREATE } from "./constants";
25
- import { isAnchorSid } from "./sid";
26
2
  import { sha256Hex } from "./hash";
27
3
  import { buildConsentUri, signChallengeProof } from "./challenge";
4
+ import { buildNativeChallenge, nativeUnavailable, secureHttpUrl, signNativeChallenge, } from "./native-http";
5
+ import { getConfiguredIdentity } from "../providers/storage";
6
+ import { canonicalize } from "json-canonicalize";
28
7
  import { registrarAuthorized, registrationRateLimited } from "./registrar-auth";
29
8
  import { validateRegistrationBody, } from "./anchor-registration-validate";
30
9
  /** Internal origin for durable-object stub fetches — the DO routes by pathname only. */
@@ -53,7 +32,7 @@ export function isAnchorRegistrationEnabled(cfg, env) {
53
32
  * `data.session_id` carries the result — the authoritative sid for callers.
54
33
  */
55
34
  export function deriveRegistrationSid(sessionId) {
56
- if (isAnchorSid(sessionId))
35
+ if (/^kya-[0-9a-f]{16,64}$/.test(sessionId))
57
36
  return sessionId;
58
37
  return `kya-${sha256Hex(sessionId).slice(0, 32)}`;
59
38
  }
@@ -96,7 +75,7 @@ async function callAnchor(env, deps, sid, internalPath, body) {
96
75
  * contract's 502 envelope instead of escaping as off-contract 500s.
97
76
  */
98
77
  async function ensureAnchor(env, cfg, deps, sid, challenge, session) {
99
- const pin = challenge.challengePin && cfg.allowUnverifiedKeyidHolders
78
+ const pin = !challenge.http && challenge.challengePin && cfg.allowUnverifiedKeyidHolders
100
79
  ? { type: "keyid", valueSha256: sha256Hex(challenge.challengePin) }
101
80
  : undefined;
102
81
  const anchorUnavailable = {
@@ -113,6 +92,20 @@ async function ensureAnchor(env, cfg, deps, sid, challenge, session) {
113
92
  delegationExpiresInS: cfg.delegationExpiresInS,
114
93
  agentDid: challenge.detectedAgentDid ?? session.agentDid,
115
94
  registeredAtMs: session.registeredAtMs,
95
+ ...(challenge.http && cfg.native
96
+ ? {
97
+ nativeHttp: buildNativeChallenge(challenge.http, sid, challenge.requiredScopes, cfg.native.authorizationOrigin),
98
+ nativeRegistration: challenge.http,
99
+ nativeIssuerDid: cfg.native.issuerDid,
100
+ nativeIssuedAtMs: session.nativeIssuedAtMs,
101
+ nativePolicyRevision: {
102
+ policyId: challenge.policyId,
103
+ composedPolicyHash: challenge.composedPolicyHash,
104
+ },
105
+ minAssurance: challenge.http.min_assurance,
106
+ pollIntervalS: challenge.http.poll_interval_s,
107
+ }
108
+ : {}),
116
109
  // Cross-resource claim inputs (drive the minted VC's aud / server_did —
117
110
  // see consent-anchor-bridge's withCrossResourceClaims).
118
111
  ...(challenge.audience ? { audience: challenge.audience } : {}),
@@ -124,7 +117,8 @@ async function ensureAnchor(env, cfg, deps, sid, challenge, session) {
124
117
  body = (await created.json());
125
118
  }
126
119
  catch (error) {
127
- console.warn(`[kya-http] anchor create failed (sid=${sid}):`, error instanceof Error ? error.message : String(error));
120
+ if (!challenge.http)
121
+ console.warn(`[kya-http] anchor create failed (sid=${sid}):`, error instanceof Error ? error.message : String(error));
128
122
  return anchorUnavailable;
129
123
  }
130
124
  if (!body.anchor || !Array.isArray(body.anchor.requiredScopes)) {
@@ -165,7 +159,47 @@ export async function handleAnchorRegistration(c, env, cfg, deps) {
165
159
  if (!challenge) {
166
160
  return errorResponse(401, "unauthorized", "This endpoint only accepts challenge registration");
167
161
  }
168
- const sid = deriveRegistrationSid(validated.input.sessionId);
162
+ if (challenge.http) {
163
+ const native = cfg.native;
164
+ // A native anchor must be usable before any consent affordance is emitted.
165
+ // No opaque pre-pin, bearer downgrade or unknown resource audience is allowed.
166
+ if (!native ||
167
+ validated.input.projectId !==
168
+ (native.projectId ?? env.AGENTSHIELD_PROJECT_ID) ||
169
+ !challenge.audience ||
170
+ challenge.challengePin !== undefined ||
171
+ !challenge.policyId ||
172
+ challenge.policyId.length > 200 ||
173
+ !/^[0-9a-f]{64}$/.test(challenge.composedPolicyHash ?? "") ||
174
+ challenge.http.pickup_mode !== "key" ||
175
+ challenge.http.min_assurance === "attested-bearer" ||
176
+ !secureHttpUrl(challenge.http.resource, native.allowLoopbackHttp) ||
177
+ !secureHttpUrl(native.authorizationOrigin, native.allowLoopbackHttp) ||
178
+ new URL(native.authorizationOrigin).origin !==
179
+ native.authorizationOrigin ||
180
+ !/^[A-Za-z0-9._~-]{22,255}$/.test(validated.input.sessionId) ||
181
+ (!native.remoteIssuer &&
182
+ typeof native.issueCredentialStatus !== "function") ||
183
+ (validated.input.serverDid !== undefined &&
184
+ validated.input.serverDid !== challenge.audience) ||
185
+ (native.resourceAudiences &&
186
+ native.resourceAudiences[challenge.http.resource] !==
187
+ challenge.audience))
188
+ return nativeUnavailable();
189
+ try {
190
+ if (!native.remoteIssuer) {
191
+ const identity = await getConfiguredIdentity(env);
192
+ if (!identity || identity.did !== native.issuerDid)
193
+ return nativeUnavailable();
194
+ }
195
+ }
196
+ catch {
197
+ return nativeUnavailable();
198
+ }
199
+ }
200
+ const sid = challenge.http
201
+ ? validated.input.sessionId
202
+ : deriveRegistrationSid(validated.input.sessionId);
169
203
  // Loud dead-end (review P1): without challenge.audience the minted credential
170
204
  // carries no aud and cannot pass an org-pinned §4.3 audience gate — a failure
171
205
  // that would otherwise surface only POST-consent, at the registrar's PEP,
@@ -177,13 +211,69 @@ export async function handleAnchorRegistration(c, env, cfg, deps) {
177
211
  `the minted credential will FAIL an org-pinned §4.3 audience gate; ` +
178
212
  `cross-resource use requires the registrar to send challenge.audience`);
179
213
  }
214
+ let remoteProof;
215
+ if (challenge.http && cfg.native?.remoteIssuer) {
216
+ try {
217
+ remoteProof = await cfg.native.remoteIssuer.registerChallenge(raw, buildNativeChallenge(challenge.http, sid, challenge.requiredScopes, cfg.native.authorizationOrigin), challenge.audience);
218
+ }
219
+ catch {
220
+ return nativeUnavailable();
221
+ }
222
+ }
180
223
  const anchor = await ensureAnchor(env, cfg, deps, sid, challenge, {
181
224
  agentDid: validated.input.agentDid,
182
225
  serverDid: validated.input.serverDid,
183
226
  registeredAtMs: validated.input.createdAt,
227
+ nativeIssuedAtMs: remoteProof?.issuedAtMs,
184
228
  });
185
229
  if ("error" in anchor)
186
- return anchor.error;
230
+ return challenge.http ? nativeUnavailable() : anchor.error;
231
+ if (challenge.http) {
232
+ const stored = anchor.snapshot;
233
+ const expected = buildNativeChallenge(challenge.http, sid, challenge.requiredScopes, cfg.native.authorizationOrigin);
234
+ // First-write-wins state must never be reinterpreted by a second registration.
235
+ if (!stored.nativeHttp ||
236
+ stored.audience !== challenge.audience ||
237
+ stored.nativeIssuerDid !== cfg.native.issuerDid ||
238
+ canonicalize(stored.nativePolicyRevision) !==
239
+ canonicalize({
240
+ policyId: challenge.policyId,
241
+ composedPolicyHash: challenge.composedPolicyHash,
242
+ }) ||
243
+ canonicalize(stored.nativeRegistration) !==
244
+ canonicalize(challenge.http) ||
245
+ canonicalize(stored.nativeHttp) !== canonicalize(expected))
246
+ return nativeUnavailable();
247
+ try {
248
+ const remote = remoteProof;
249
+ const proof = remote?.proof ??
250
+ (await signNativeChallenge(env, stored.nativeIssuerDid, stored.nativeHttp, stored.audience));
251
+ return new Response(JSON.stringify({
252
+ success: true,
253
+ data: {
254
+ session_id: sid,
255
+ registered: true,
256
+ created_at: new Date(stored.registeredAtMs ?? validated.input.createdAt).toISOString(),
257
+ challenge: {
258
+ consent_uri: stored.nativeHttp.consent_uri,
259
+ challenge_proof: proof,
260
+ required_scopes: stored.nativeHttp.required_scopes,
261
+ issued_at: remote?.issuedAtMs ?? stored.issuedAtMs,
262
+ http: stored.nativeHttp,
263
+ },
264
+ },
265
+ }), {
266
+ status: anchor.isNew ? 201 : 200,
267
+ headers: {
268
+ "Content-Type": "application/json",
269
+ "Cache-Control": "no-store",
270
+ },
271
+ });
272
+ }
273
+ catch {
274
+ return nativeUnavailable();
275
+ }
276
+ }
187
277
  // W4: pin the advertised host to the configured realm when set, so a
188
278
  // Host-header-reflecting request cannot mint consent/pickup URIs (and a
189
279
  // signed proof over them) pointing at an attacker host.
@@ -1 +1 @@
1
- {"version":3,"file":"anchor-registration.js","sourceRoot":"","sources":["../../src/delegation-http/anchor-registration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EACL,wBAAwB,GAGzB,MAAM,gCAAgC,CAAC;AAoCxC,wFAAwF;AACxF,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAyC,EACzC,GAAkB;IAElB,OAAO,CACL,GAAG,KAAK,IAAI;QACZ,GAAG,CAAC,wBAAwB;QAC5B,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;QAC3C,GAAG,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC;QAClC,uEAAuE;QACvE,yEAAyE;QACzE,qDAAqD;QACrD,GAAG,CAAC,UAAU,KAAK,SAAS,CAC7B,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,IAAI,WAAW,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,OAAO,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,kFAAkF;AAClF,SAAS,aAAa,CACpB,MAAc,EACd,IAAY,EACZ,OAAe,EACf,OAA2B;IAE3B,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KAC1D,CAAC,EACF;QACE,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU;SAC5B;KACF,CACF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,UAAU,CACvB,GAAkB,EAClB,IAAsB,EACtB,GAAW,EACX,YAAoB,EACpB,IAAa;IAEb,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,IAAI,GAAG,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC,QAAQ,EAAE,EACpD;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CACF,CAAC;IACF,OAAO,QAA0C,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,YAAY,CACzB,GAAkB,EAClB,GAAkC,EAClC,IAAsB,EACtB,GAAW,EACX,SAAgC,EAChC,OAAyE;IAEzE,MAAM,GAAG,GACP,SAAS,CAAC,YAAY,IAAI,GAAG,CAAC,2BAA2B;QACvD,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE;QACnE,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,iBAAiB,GAAG;QACxB,KAAK,EAAE,aAAa,CAClB,GAAG,EACH,oBAAoB,EACpB,kDAAkD,CACnD;KACF,CAAC;IAEF,IAAI,OAA4B,CAAC;IACjC,IAAI,IAAmD,CAAC;IACxD,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,sBAAsB,EAAE;YACjE,GAAG;YACH,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;YAC9C,QAAQ,EAAE,SAAS,CAAC,gBAAgB,IAAI,OAAO,CAAC,QAAQ;YACxD,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,wEAAwE;YACxE,wDAAwD;YACxD,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxB,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,iBAAiB,CAAC;QACrD,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAgB,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CACV,wCAAwC,GAAG,IAAI,EAC/C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACF,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/D,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,CAA6B,EAC7B,GAAkB,EAClB,GAAkC,EAClC,IAAsB;IAEtB,6EAA6E;IAC7E,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,4BAA4B,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QACxC,OAAO,aAAa,CAClB,GAAG,EACH,cAAc,EACd,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,sBAAsB,EAAE;YACnE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE;SAC3C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,aAAa,CAClB,GAAG,EACH,iBAAiB,EACjB,sBAAsB,EACtB,SAAS,CAAC,MAAM,CACjB,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC;IACtC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,aAAa,CAClB,GAAG,EACH,cAAc,EACd,mDAAmD,CACpD,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAE7D,8EAA8E;IAC9E,8EAA8E;IAC9E,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,kDAAkD;IAClD,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CACV,oEAAoE,GAAG,KAAK;YAC1E,oEAAoE;YACpE,sEAAsE,CACzE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE;QAChE,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ;QAClC,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS;QACpC,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS;KAC1C,CAAC,CAAC;IACH,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IAE3C,qEAAqE;IACrE,wEAAwE;IACxE,wDAAwD;IACxD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAClD,MAAM,OAAO,GAA0B;QACrC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;QAC9C,iBAAiB,EAAE,IAAI;QACvB,KAAK,EAAE,IAAI;QACX,GAAG;QACH,aAAa,EAAE,GAAG,CAAC,aAAa;KACjC,CAAC;IACF,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAE5C,IAAI,cAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,kBAAkB,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,EAAE;YACrE,GAAG;YACH,WAAW,EAAE,UAAU;YACvB,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;SAChD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4EAA4E;QAC5E,uEAAuE;QACvE,mCAAmC;QACnC,OAAO,CAAC,IAAI,CACV,+DAA+D,GAAG,IAAI,EACtE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACF,OAAO,aAAa,CAClB,GAAG,EACH,mBAAmB,EACnB,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,WAAW,GACf,MAAM,CAAC,QAAQ,CAAC,cAAc,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAE5D,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,IAAI;QACb,IAAI,EAAE;YACJ,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE;YAC/C,SAAS,EAAE;gBACT,WAAW,EAAE,UAAU;gBACvB,eAAe,EAAE,cAAc;gBAC/B,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;gBAC/C,SAAS,EAAE,UAAU;gBACrB,sEAAsE;gBACtE,sEAAsE;gBACtE,8DAA8D;gBAC9D,iEAAiE;gBACjE,cAAc,EAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ;aAC7D;SACF;KACF,CAAC,EACF;QACE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QAChC,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,0EAA0E;YAC1E,eAAe,EAAE,mBAAmB;SACrC;KACF,CACF,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"anchor-registration.js","sourceRoot":"","sources":["../../src/delegation-http/anchor-registration.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,EACb,mBAAmB,GAGpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EACL,wBAAwB,GAGzB,MAAM,gCAAgC,CAAC;AAwCxC,wFAAwF;AACxF,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAyC,EACzC,GAAkB;IAElB,OAAO,CACL,GAAG,KAAK,IAAI;QACZ,GAAG,CAAC,wBAAwB;QAC5B,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;QAC3C,GAAG,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC;QAClC,uEAAuE;QACvE,yEAAyE;QACzE,qDAAqD;QACrD,GAAG,CAAC,UAAU,KAAK,SAAS,CAC7B,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,IAAI,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9D,OAAO,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,kFAAkF;AAClF,SAAS,aAAa,CACpB,MAAc,EACd,IAAY,EACZ,OAAe,EACf,OAA2B;IAE3B,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KAC1D,CAAC,EACF;QACE,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU;SAC5B;KACF,CACF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,UAAU,CACvB,GAAkB,EAClB,IAAsB,EACtB,GAAW,EACX,YAAoB,EACpB,IAAa;IAEb,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,IAAI,GAAG,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC,QAAQ,EAAE,EACpD;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CACF,CAAC;IACF,OAAO,QAA0C,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,YAAY,CACzB,GAAkB,EAClB,GAAkC,EAClC,IAAsB,EACtB,GAAW,EACX,SAAgC,EAChC,OAKC;IAED,MAAM,GAAG,GACP,CAAC,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,YAAY,IAAI,GAAG,CAAC,2BAA2B;QAC1E,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE;QACnE,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,iBAAiB,GAAG;QACxB,KAAK,EAAE,aAAa,CAClB,GAAG,EACH,oBAAoB,EACpB,kDAAkD,CACnD;KACF,CAAC;IAEF,IAAI,OAA4B,CAAC;IACjC,IAAI,IAAmD,CAAC;IACxD,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,sBAAsB,EAAE;YACjE,GAAG;YACH,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;YAC9C,QAAQ,EAAE,SAAS,CAAC,gBAAgB,IAAI,OAAO,CAAC,QAAQ;YACxD,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM;gBAC9B,CAAC,CAAC;oBACE,UAAU,EAAE,oBAAoB,CAC9B,SAAS,CAAC,IAAI,EACd,GAAG,EACH,SAAS,CAAC,cAAc,EACxB,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAC/B;oBACD,kBAAkB,EAAE,SAAS,CAAC,IAAI;oBAClC,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS;oBACrC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;oBAC1C,oBAAoB,EAAE;wBACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;wBAC5B,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;qBACjD;oBACD,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,aAAa;oBAC1C,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,eAAe;iBAC9C;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,wEAAwE;YACxE,wDAAwD;YACxD,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxB,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,iBAAiB,CAAC;QACrD,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAgB,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,CAAC,IAAI;YACjB,OAAO,CAAC,IAAI,CACV,wCAAwC,GAAG,IAAI,EAC/C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACJ,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/D,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,CAA6B,EAC7B,GAAkB,EAClB,GAAkC,EAClC,IAAsB;IAEtB,6EAA6E;IAC7E,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,4BAA4B,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QACxC,OAAO,aAAa,CAClB,GAAG,EACH,cAAc,EACd,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,sBAAsB,EAAE;YACnE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE;SAC3C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,aAAa,CAClB,GAAG,EACH,iBAAiB,EACjB,sBAAsB,EACtB,SAAS,CAAC,MAAM,CACjB,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC;IACtC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,aAAa,CAClB,GAAG,EACH,cAAc,EACd,mDAAmD,CACpD,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,2EAA2E;QAC3E,+EAA+E;QAC/E,IACE,CAAC,MAAM;YACP,SAAS,CAAC,KAAK,CAAC,SAAS;gBACvB,CAAC,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,sBAAsB,CAAC;YAClD,CAAC,SAAS,CAAC,QAAQ;YACnB,SAAS,CAAC,YAAY,KAAK,SAAS;YACpC,CAAC,SAAS,CAAC,QAAQ;YACnB,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG;YAC/B,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,IAAI,EAAE,CAAC;YAC1D,SAAS,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK;YACpC,SAAS,CAAC,IAAI,CAAC,aAAa,KAAK,iBAAiB;YAClD,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,iBAAiB,CAAC;YACjE,CAAC,aAAa,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,iBAAiB,CAAC;YACpE,IAAI,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM;gBACxC,MAAM,CAAC,mBAAmB;YAC5B,CAAC,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC;YAC5D,CAAC,CAAC,MAAM,CAAC,YAAY;gBACnB,OAAO,MAAM,CAAC,qBAAqB,KAAK,UAAU,CAAC;YACrD,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;gBACtC,SAAS,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,QAAQ,CAAC;YACnD,CAAC,MAAM,CAAC,iBAAiB;gBACvB,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAC/C,SAAS,CAAC,QAAQ,CAAC;YAEvB,OAAO,iBAAiB,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBACzB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;gBAClD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,SAAS;oBAChD,OAAO,iBAAiB,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,iBAAiB,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI;QACxB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS;QAC3B,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAErD,8EAA8E;IAC9E,8EAA8E;IAC9E,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,kDAAkD;IAClD,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CACV,oEAAoE,GAAG,KAAK;YAC1E,oEAAoE;YACpE,sEAAsE,CACzE,CAAC;IACJ,CAAC;IAED,IAAI,WAMS,CAAC;IACd,IAAI,SAAS,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,iBAAiB,CAC3D,GAAG,EACH,oBAAoB,CAClB,SAAS,CAAC,IAAI,EACd,GAAG,EACH,SAAS,CAAC,cAAc,EACxB,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAC/B,EACD,SAAS,CAAC,QAAS,CACpB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,iBAAiB,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE;QAChE,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ;QAClC,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS;QACpC,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS;QACzC,gBAAgB,EAAE,WAAW,EAAE,UAAU;KAC1C,CAAC,CAAC;IACH,IAAI,OAAO,IAAI,MAAM;QACnB,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IAE7D,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC/B,MAAM,QAAQ,GAAG,oBAAoB,CACnC,SAAS,CAAC,IAAI,EACd,GAAG,EACH,SAAS,CAAC,cAAc,EACxB,GAAG,CAAC,MAAO,CAAC,mBAAmB,CAChC,CAAC;QACF,+EAA+E;QAC/E,IACE,CAAC,MAAM,CAAC,UAAU;YAClB,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ;YACtC,MAAM,CAAC,eAAe,KAAK,GAAG,CAAC,MAAO,CAAC,SAAS;YAChD,YAAY,CAAC,MAAM,CAAC,oBAAoB,CAAC;gBACvC,YAAY,CAAC;oBACX,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;iBACjD,CAAC;YACJ,YAAY,CAAC,MAAM,CAAC,kBAAkB,CAAC;gBACrC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC;YAC9B,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,YAAY,CAAC,QAAQ,CAAC;YAE1D,OAAO,iBAAiB,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,WAAW,CAAC;YAC3B,MAAM,KAAK,GACT,MAAM,EAAE,KAAK;gBACb,CAAC,MAAM,mBAAmB,CACxB,GAAG,EACH,MAAM,CAAC,eAAgB,EACvB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,QAAS,CACjB,CAAC,CAAC;YACL,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;gBACb,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,UAAU,EAAE,GAAG;oBACf,UAAU,EAAE,IAAI;oBAChB,UAAU,EAAE,IAAI,IAAI,CAClB,MAAM,CAAC,cAAc,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,CACnD,CAAC,WAAW,EAAE;oBACf,SAAS,EAAE;wBACT,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW;wBAC1C,eAAe,EAAE,KAAK;wBACtB,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,eAAe;wBAClD,SAAS,EAAE,MAAM,EAAE,UAAU,IAAI,MAAM,CAAC,UAAU;wBAClD,IAAI,EAAE,MAAM,CAAC,UAAU;qBACxB;iBACF;aACF,CAAC,EACF;gBACE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;gBAChC,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU;iBAC5B;aACF,CACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,iBAAiB,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,wEAAwE;IACxE,wDAAwD;IACxD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAClD,MAAM,OAAO,GAA0B;QACrC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;QAC9C,iBAAiB,EAAE,IAAI;QACvB,KAAK,EAAE,IAAI;QACX,GAAG;QACH,aAAa,EAAE,GAAG,CAAC,aAAa;KACjC,CAAC;IACF,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAE5C,IAAI,cAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,kBAAkB,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,EAAE;YACrE,GAAG;YACH,WAAW,EAAE,UAAU;YACvB,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;SAChD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4EAA4E;QAC5E,uEAAuE;QACvE,mCAAmC;QACnC,OAAO,CAAC,IAAI,CACV,+DAA+D,GAAG,IAAI,EACtE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACF,OAAO,aAAa,CAClB,GAAG,EACH,mBAAmB,EACnB,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,WAAW,GACf,MAAM,CAAC,QAAQ,CAAC,cAAc,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAE5D,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,IAAI;QACb,IAAI,EAAE;YACJ,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE;YAC/C,SAAS,EAAE;gBACT,WAAW,EAAE,UAAU;gBACvB,eAAe,EAAE,cAAc;gBAC/B,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;gBAC/C,SAAS,EAAE,UAAU;gBACrB,sEAAsE;gBACtE,sEAAsE;gBACtE,8DAA8D;gBAC9D,iEAAiE;gBACjE,cAAc,EAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ;aAC7D;SACF;KACF,CAAC,EACF;QACE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QAChC,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,0EAA0E;YAC1E,eAAe,EAAE,mBAAmB;SACrC;KACF,CACF,CAAC;AACJ,CAAC"}
@@ -12,25 +12,16 @@
12
12
  * `Authorization` is occupied by such a non-VC bearer, the `KYA-Delegation` header
13
13
  * is used as the fallback carrier.
14
14
  * - `applyBearerDelegation` verifies the VC-JWT fail-fast via `DelegationService`
15
- * and, on success, clones the request with `params.delegationToken = vcJwt`. An
15
+ * and, for unsigned legacy requests, adds `params.delegationToken = vcJwt`.
16
+ * Signed requests retain their original body and use transport headers. An
16
17
  * invalid chain → 403 `kyaos/chain-broken`; an expired credential → 401
17
18
  * `kyaos/expired`. Both error responses carry `Cache-Control: no-store`.
18
19
  *
19
20
  * @module @kya-os/mcp-i-cloudflare/delegation-http/bearer-retry
20
21
  */
21
- import type { CloudflareEnv } from "../types";
22
22
  import type { HttpChallengeConfig } from "../config";
23
- /**
24
- * Extract a delegation VC-JWT from the request, or `null` when there is none to act
25
- * on. Resolution order, mirroring the wire contract:
26
- *
27
- * 1. `Authorization: Bearer <jwt>` whose payload carries a `vc` claim.
28
- * 2. Otherwise (no Authorization, OR an opaque OAuth bearer without `vc`), the
29
- * `KYA-Delegation` fallback header — used ONLY when it too is a `vc`-bearing JWT.
30
- *
31
- * An opaque OAuth bearer with no `vc` and no fallback header yields `null`, so the
32
- * request passes through to the adapter untouched.
33
- */
23
+ import type { CloudflareEnv } from "../types";
24
+ /** Identify the presented VC-JWT without treating it as verified authority. */
34
25
  export declare function extractDelegationVcJwt(request: Request): string | null;
35
26
  /**
36
27
  * Apply a presented delegation to the outgoing MCP request before it reaches the
@@ -41,7 +32,8 @@ export declare function extractDelegationVcJwt(request: Request): string | null;
41
32
  * - Invalid / unverifiable VC-JWT → `{ errorResponse }` 403 `kyaos/chain-broken`
42
33
  * (`no-store`).
43
34
  * - Valid VC-JWT → `{ request }` whose JSON-RPC body now carries
44
- * `params.delegationToken = vcJwt` (the adapter's existing priority seam).
35
+ * `params.delegationToken = vcJwt` for unsigned legacy calls. Signed calls
36
+ * remain byte-for-byte intact for proof verification and header pickup.
45
37
  * - Valid VC-JWT but a non-JSON-RPC body the token cannot be injected into →
46
38
  * `{ errorResponse }` 400 `invalid_request` (`no-store`); we never silently drop
47
39
  * an accepted credential.
@@ -1 +1 @@
1
- {"version":3,"file":"bearer-retry.d.ts","sourceRoot":"","sources":["../../src/delegation-http/bearer-retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AA4DrD;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAgBtE;AA+CD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,QAAQ,CAAC,mBAAmB,CAAC,GAClC,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,aAAa,EAAE,QAAQ,CAAA;CAAE,CAAC,CAqC7D"}
1
+ {"version":3,"file":"bearer-retry.d.ts","sourceRoot":"","sources":["../../src/delegation-http/bearer-retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAQrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAiB9C,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAEtE;AAiED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,QAAQ,CAAC,mBAAmB,CAAC,GAClC,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,aAAa,EAAE,QAAQ,CAAA;CAAE,CAAC,CAiD7D"}
@@ -12,47 +12,16 @@
12
12
  * `Authorization` is occupied by such a non-VC bearer, the `KYA-Delegation` header
13
13
  * is used as the fallback carrier.
14
14
  * - `applyBearerDelegation` verifies the VC-JWT fail-fast via `DelegationService`
15
- * and, on success, clones the request with `params.delegationToken = vcJwt`. An
15
+ * and, for unsigned legacy requests, adds `params.delegationToken = vcJwt`.
16
+ * Signed requests retain their original body and use transport headers. An
16
17
  * invalid chain → 403 `kyaos/chain-broken`; an expired credential → 401
17
18
  * `kyaos/expired`. Both error responses carry `Cache-Control: no-store`.
18
19
  *
19
20
  * @module @kya-os/mcp-i-cloudflare/delegation-http/bearer-retry
20
21
  */
22
+ import { decodeJwtPayload, hasMcpRequestProof, InvalidDelegationPresentation, readHeaderDelegation, } from "../security/presented-delegation";
21
23
  import { DelegationService } from "../services/delegation.service";
22
- import { FALLBACK_DELEGATION_HEADER, KYAOS_ERRORS } from "./constants";
23
- /**
24
- * Decode a JWT payload (the second `.`-delimited segment) as JSON, or `null` when the
25
- * value is not a well-formed three-segment JWT with a base64url-decodable JSON body.
26
- * Never throws.
27
- */
28
- function decodeJwtPayload(jwt) {
29
- if (!jwt || typeof jwt !== "string")
30
- return null;
31
- const parts = jwt.split(".");
32
- if (parts.length !== 3)
33
- return null;
34
- try {
35
- // Re-add the base64url padding `atob` needs (the `=` is stripped on the wire);
36
- // a strict atob rejects an unpadded segment whose length isn't a multiple of 4.
37
- const b64 = parts[1].replace(/-/g, "+").replace(/_/g, "/");
38
- const json = atob(b64 + "=".repeat((4 - (b64.length % 4)) % 4));
39
- const payload = JSON.parse(json);
40
- return payload && typeof payload === "object"
41
- ? payload
42
- : null;
43
- }
44
- catch {
45
- return null;
46
- }
47
- }
48
- /**
49
- * Whether the JWT payload carries a `vc` claim — the marker that distinguishes a
50
- * delegation VC-JWT from an opaque OAuth bearer.
51
- */
52
- function hasVcClaim(jwt) {
53
- const payload = decodeJwtPayload(jwt);
54
- return payload !== null && "vc" in payload;
55
- }
24
+ import { KYAOS_ERRORS } from "./constants";
56
25
  /**
57
26
  * Whether the JWT is expired by its `exp` claim (seconds since epoch). A token with
58
27
  * no numeric `exp`, or one that cannot be decoded, is treated as NOT expired here —
@@ -68,41 +37,9 @@ function isVcJwtExpired(jwt) {
68
37
  return false;
69
38
  return exp < Math.floor(Date.now() / 1000);
70
39
  }
71
- /**
72
- * Read the bearer token from an `Authorization: Bearer <token>` header, or `null`.
73
- */
74
- function readBearerToken(request) {
75
- const auth = request.headers.get("Authorization");
76
- if (!auth)
77
- return null;
78
- const match = /^Bearer\s+(.+)$/i.exec(auth.trim());
79
- return match ? match[1].trim() : null;
80
- }
81
- /**
82
- * Extract a delegation VC-JWT from the request, or `null` when there is none to act
83
- * on. Resolution order, mirroring the wire contract:
84
- *
85
- * 1. `Authorization: Bearer <jwt>` whose payload carries a `vc` claim.
86
- * 2. Otherwise (no Authorization, OR an opaque OAuth bearer without `vc`), the
87
- * `KYA-Delegation` fallback header — used ONLY when it too is a `vc`-bearing JWT.
88
- *
89
- * An opaque OAuth bearer with no `vc` and no fallback header yields `null`, so the
90
- * request passes through to the adapter untouched.
91
- */
40
+ /** Identify the presented VC-JWT without treating it as verified authority. */
92
41
  export function extractDelegationVcJwt(request) {
93
- const bearer = readBearerToken(request);
94
- if (bearer && hasVcClaim(bearer)) {
95
- return bearer;
96
- }
97
- // Authorization is absent or occupied by a non-VC bearer — try the fallback header.
98
- const fallback = request.headers.get(FALLBACK_DELEGATION_HEADER);
99
- if (fallback) {
100
- const token = fallback.trim();
101
- if (token && hasVcClaim(token)) {
102
- return token;
103
- }
104
- }
105
- return null;
42
+ return readHeaderDelegation((name) => request.headers.get(name)) ?? null;
106
43
  }
107
44
  /**
108
45
  * Build a `kyaos/*` JSON error response with the mandated `Cache-Control: no-store`.
@@ -129,12 +66,22 @@ async function rewriteDelegationToken(request, vcJwt) {
129
66
  catch {
130
67
  return null;
131
68
  }
132
- if (!body || typeof body !== "object")
69
+ if (!body || typeof body !== "object" || Array.isArray(body))
133
70
  return null;
134
71
  const rpc = body;
135
72
  const params = rpc.params && typeof rpc.params === "object"
136
73
  ? { ...rpc.params }
137
74
  : {};
75
+ if (Object.prototype.hasOwnProperty.call(params, "delegationToken") &&
76
+ params.delegationToken !== vcJwt)
77
+ throw new InvalidDelegationPresentation();
78
+ // Re-serializing or adding fields would invalidate native or HTTP request
79
+ // proofs. Admission receives the credential via transport request headers.
80
+ // Proof presence is sufficient here: actual verification remains mandatory
81
+ // downstream, including for malformed proof values.
82
+ if (hasMcpRequestProof(params._meta) ||
83
+ ["Signature", "Signature-Input", "KYA-OS-Delegation-Proof"].some((name) => request.headers.has(name)))
84
+ return request;
138
85
  params.delegationToken = vcJwt;
139
86
  const nextBody = { ...rpc, params };
140
87
  return new Request(request.url, {
@@ -152,13 +99,22 @@ async function rewriteDelegationToken(request, vcJwt) {
152
99
  * - Invalid / unverifiable VC-JWT → `{ errorResponse }` 403 `kyaos/chain-broken`
153
100
  * (`no-store`).
154
101
  * - Valid VC-JWT → `{ request }` whose JSON-RPC body now carries
155
- * `params.delegationToken = vcJwt` (the adapter's existing priority seam).
102
+ * `params.delegationToken = vcJwt` for unsigned legacy calls. Signed calls
103
+ * remain byte-for-byte intact for proof verification and header pickup.
156
104
  * - Valid VC-JWT but a non-JSON-RPC body the token cannot be injected into →
157
105
  * `{ errorResponse }` 400 `invalid_request` (`no-store`); we never silently drop
158
106
  * an accepted credential.
159
107
  */
160
108
  export async function applyBearerDelegation(request, env, _cfg) {
161
- const vcJwt = extractDelegationVcJwt(request);
109
+ let vcJwt;
110
+ try {
111
+ vcJwt = extractDelegationVcJwt(request);
112
+ }
113
+ catch (error) {
114
+ if (!(error instanceof InvalidDelegationPresentation))
115
+ throw error;
116
+ return { errorResponse: kyaosError("invalid_request", 400) };
117
+ }
162
118
  if (!vcJwt) {
163
119
  return { request };
164
120
  }
@@ -175,7 +131,15 @@ export async function applyBearerDelegation(request, env, _cfg) {
175
131
  }
176
132
  return { errorResponse: kyaosError(KYAOS_ERRORS.chainBroken, 403) };
177
133
  }
178
- const rewritten = await rewriteDelegationToken(request, vcJwt);
134
+ let rewritten;
135
+ try {
136
+ rewritten = await rewriteDelegationToken(request, vcJwt);
137
+ }
138
+ catch (error) {
139
+ if (!(error instanceof InvalidDelegationPresentation))
140
+ throw error;
141
+ return { errorResponse: kyaosError("invalid_request", 400) };
142
+ }
179
143
  if (!rewritten) {
180
144
  // The delegation verified, but the request body is not a JSON-RPC object we can
181
145
  // augment with params.delegationToken. Fail explicitly with 400: silently
@@ -1 +1 @@
1
- {"version":3,"file":"bearer-retry.js","sourceRoot":"","sources":["../../src/delegation-http/bearer-retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEvE;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,+EAA+E;QAC/E,gFAAgF;QAChF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAC3C,CAAC,CAAE,OAAmC;YACtC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,OAAO,OAAO,KAAK,IAAI,IAAI,IAAI,IAAI,OAAO,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,OAAgB;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,oFAAoF;IACpF,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACjE,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc;IAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;QAC7C,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU;SAC5B;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CACnC,OAAgB,EAChB,KAAa;IAEb,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEnD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,MAAM,MAAM,GACV,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAC1C,CAAC,CAAC,EAAE,GAAI,GAAG,CAAC,MAAkC,EAAE;QAChD,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC;IAC/B,MAAM,QAAQ,GAAG,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAC;IAEpC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAgB,EAChB,GAAkB,EAClB,IAAmC;IAEnC,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;IAED,6EAA6E;IAC7E,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,+EAA+E;QAC/E,2EAA2E;QAC3E,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,gFAAgF;QAChF,0EAA0E;QAC1E,8EAA8E;QAC9E,8EAA8E;QAC9E,mEAAmE;QACnE,+CAA+C;QAC/C,EAAE;QACF,oFAAoF;QACpF,kFAAkF;QAClF,mFAAmF;QACnF,iFAAiF;QACjF,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,iBAAiB,EAAE,GAAG,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC"}
1
+ {"version":3,"file":"bearer-retry.js","sourceRoot":"","sources":["../../src/delegation-http/bearer-retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,6BAA6B,EAC7B,oBAAoB,GACrB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAEnE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C;;;;;GAKG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,OAAO,oBAAoB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc;IAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;QAC7C,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU;SAC5B;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CACnC,OAAgB,EAChB,KAAa;IAEb,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1E,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,MAAM,MAAM,GACV,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAC1C,CAAC,CAAC,EAAE,GAAI,GAAG,CAAC,MAAkC,EAAE;QAChD,CAAC,CAAC,EAAE,CAAC;IACT,IACE,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC;QAC/D,MAAM,CAAC,eAAe,KAAK,KAAK;QAEhC,MAAM,IAAI,6BAA6B,EAAE,CAAC;IAE5C,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,oDAAoD;IACpD,IACE,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC;QAChC,CAAC,WAAW,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACxE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAC1B;QAED,OAAO,OAAO,CAAC;IAEjB,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC;IAC/B,MAAM,QAAQ,GAAG,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAC;IAEpC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAgB,EAChB,GAAkB,EAClB,IAAmC;IAEnC,IAAI,KAAoB,CAAC;IACzB,IAAI,CAAC;QACH,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,6BAA6B,CAAC;YAAE,MAAM,KAAK,CAAC;QACnE,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,iBAAiB,EAAE,GAAG,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;IAED,6EAA6E;IAC7E,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,+EAA+E;QAC/E,2EAA2E;QAC3E,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;IACtE,CAAC;IAED,IAAI,SAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,6BAA6B,CAAC;YAAE,MAAM,KAAK,CAAC;QACnE,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,iBAAiB,EAAE,GAAG,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,gFAAgF;QAChF,0EAA0E;QAC1E,8EAA8E;QAC9E,8EAA8E;QAC9E,mEAAmE;QACnE,+CAA+C;QAC/C,EAAE;QACF,oFAAoF;QACpF,kFAAkF;QAClF,mFAAmF;QACnF,iFAAiF;QACjF,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,iBAAiB,EAAE,GAAG,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC"}