@kya-os/mcp-i-cloudflare 1.14.6 → 1.14.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +7 -7
- package/dist/adapter.d.ts.map +1 -1
- package/dist/adapter.js +8 -4
- package/dist/adapter.js.map +1 -1
- package/dist/agent.d.ts +21 -4
- package/dist/agent.d.ts.map +1 -1
- package/dist/agent.js +78 -39
- package/dist/agent.js.map +1 -1
- package/dist/app.d.ts.map +1 -1
- package/dist/app.js +10 -4
- package/dist/app.js.map +1 -1
- package/dist/config.d.ts +99 -4
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +15 -11
- package/dist/config.js.map +1 -1
- package/dist/constants.d.ts +3 -3
- package/dist/constants.js +3 -3
- package/dist/delegation-http/anchor-registration.d.ts +2 -2
- package/dist/delegation-http/anchor-registration.js +4 -4
- package/dist/delegation-http/anchor-registration.js.map +1 -1
- package/dist/delegation-http/consent-anchor-bridge.d.ts.map +1 -1
- package/dist/delegation-http/consent-anchor-bridge.js +19 -4
- package/dist/delegation-http/consent-anchor-bridge.js.map +1 -1
- package/dist/delegation-http/credential-consent.d.ts +2 -2
- package/dist/delegation-http/credential-consent.js +10 -10
- package/dist/delegation-http/credential-consent.js.map +1 -1
- package/dist/delegation-http/native-http.js +5 -5
- package/dist/delegation-http/native-http.js.map +1 -1
- package/dist/delegation-http/native-oauth-state-do.d.ts +43 -0
- package/dist/delegation-http/native-oauth-state-do.d.ts.map +1 -0
- package/dist/delegation-http/native-oauth-state-do.js +175 -0
- package/dist/delegation-http/native-oauth-state-do.js.map +1 -0
- package/dist/delegation-http/native-oauth-state.d.ts +12 -0
- package/dist/delegation-http/native-oauth-state.d.ts.map +1 -0
- package/dist/delegation-http/native-oauth-state.js +131 -0
- package/dist/delegation-http/native-oauth-state.js.map +1 -0
- package/dist/delegation-http/native-oauth.d.ts.map +1 -1
- package/dist/delegation-http/native-oauth.js +22 -17
- package/dist/delegation-http/native-oauth.js.map +1 -1
- package/dist/delegation-http/register.js +1 -1
- package/dist/delegation-http/register.js.map +1 -1
- package/dist/delegation-http/registrar-auth.d.ts +1 -1
- package/dist/delegation-http/registrar-auth.js +2 -2
- package/dist/delegation-http/registrar-auth.js.map +1 -1
- package/dist/delegation-http/remote-issuer.d.ts +1 -1
- package/dist/delegation-http/remote-issuer.d.ts.map +1 -1
- package/dist/delegation-http/remote-issuer.js +4 -4
- package/dist/delegation-http/remote-issuer.js.map +1 -1
- package/dist/helpers/env-mapper.d.ts +2 -2
- package/dist/helpers/env-mapper.d.ts.map +1 -1
- package/dist/helpers/env-mapper.js +21 -14
- package/dist/helpers/env-mapper.js.map +1 -1
- package/dist/index.d.ts +3 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +4 -3
- package/dist/index.js.map +1 -1
- package/dist/needs-authorization-meta.d.ts +5 -0
- package/dist/needs-authorization-meta.d.ts.map +1 -1
- package/dist/needs-authorization-meta.js +9 -0
- package/dist/needs-authorization-meta.js.map +1 -1
- package/dist/proof-generator.d.ts +3 -3
- package/dist/proof-generator.js +4 -4
- package/dist/proof-generator.js.map +1 -1
- package/dist/runtime/invoke-tool-handler.d.ts +26 -1
- package/dist/runtime/invoke-tool-handler.d.ts.map +1 -1
- package/dist/runtime/invoke-tool-handler.js +32 -0
- package/dist/runtime/invoke-tool-handler.js.map +1 -1
- package/dist/runtime/oauth-handler.d.ts +6 -4
- package/dist/runtime/oauth-handler.d.ts.map +1 -1
- package/dist/runtime/oauth-handler.js +39 -35
- package/dist/runtime/oauth-handler.js.map +1 -1
- package/dist/runtime/oidc/authorize-url.js +2 -2
- package/dist/runtime/oidc/authorize-url.js.map +1 -1
- package/dist/runtime/oidc/token-exchange.d.ts +1 -1
- package/dist/runtime/oidc/token-exchange.d.ts.map +1 -1
- package/dist/runtime/tool-activity.d.ts +56 -0
- package/dist/runtime/tool-activity.d.ts.map +1 -0
- package/dist/runtime/tool-activity.js +55 -0
- package/dist/runtime/tool-activity.js.map +1 -0
- package/dist/runtime.d.ts +30 -13
- package/dist/runtime.d.ts.map +1 -1
- package/dist/runtime.js +71 -18
- package/dist/runtime.js.map +1 -1
- package/dist/server.d.ts.map +1 -1
- package/dist/server.js +17 -15
- package/dist/server.js.map +1 -1
- package/dist/services/admin.service.d.ts +1 -1
- package/dist/services/admin.service.js +9 -9
- package/dist/services/admin.service.js.map +1 -1
- package/dist/services/consent-config.service.d.ts +5 -5
- package/dist/services/consent-config.service.js +10 -10
- package/dist/services/consent-config.service.js.map +1 -1
- package/dist/services/consent-templates/base/components.d.ts +1 -1
- package/dist/services/consent-templates/base/components.js +1 -1
- package/dist/services/consent-templates/base/styles.d.ts +2 -2
- package/dist/services/consent-templates/base/styles.js +4 -4
- package/dist/services/consent-templates/base/styles.js.map +1 -1
- package/dist/services/consent-templates/helpers.d.ts +3 -3
- package/dist/services/consent-templates/helpers.js +4 -4
- package/dist/services/consent-templates/helpers.js.map +1 -1
- package/dist/services/consent-templates/index.d.ts +1 -1
- package/dist/services/consent-templates/index.js +1 -1
- package/dist/services/consent-templates/modes/credentials.template.d.ts +5 -5
- package/dist/services/consent-templates/modes/credentials.template.js +9 -9
- package/dist/services/consent-templates/modes/credentials.template.js.map +1 -1
- package/dist/services/consent-templates/registry.d.ts +3 -3
- package/dist/services/consent-templates/registry.js +3 -3
- package/dist/services/consent-templates/template-renderer.d.ts +5 -3
- package/dist/services/consent-templates/template-renderer.d.ts.map +1 -1
- package/dist/services/consent-templates/template-renderer.js +5 -3
- package/dist/services/consent-templates/template-renderer.js.map +1 -1
- package/dist/services/consent-templates/types.d.ts +4 -4
- package/dist/services/consent-templates/types.js +2 -2
- package/dist/services/consent.service.d.ts +43 -23
- package/dist/services/consent.service.d.ts.map +1 -1
- package/dist/services/consent.service.js +178 -100
- package/dist/services/consent.service.js.map +1 -1
- package/dist/services/delegation-mandate.d.ts +40 -0
- package/dist/services/delegation-mandate.d.ts.map +1 -0
- package/dist/services/delegation-mandate.js +46 -0
- package/dist/services/delegation-mandate.js.map +1 -0
- package/dist/services/delegation.service.d.ts +3 -3
- package/dist/services/delegation.service.js +10 -10
- package/dist/services/delegation.service.js.map +1 -1
- package/dist/services/kya-os-events.service.d.ts +15 -3
- package/dist/services/kya-os-events.service.d.ts.map +1 -1
- package/dist/services/kya-os-events.service.js +14 -4
- package/dist/services/kya-os-events.service.js.map +1 -1
- package/dist/services/proof-batch-queue.d.ts +3 -3
- package/dist/services/proof-batch-queue.d.ts.map +1 -1
- package/dist/services/proof-batch-queue.js +9 -9
- package/dist/services/proof-batch-queue.js.map +1 -1
- package/dist/services/proof.service.d.ts +63 -4
- package/dist/services/proof.service.d.ts.map +1 -1
- package/dist/services/proof.service.js +114 -27
- package/dist/services/proof.service.js.map +1 -1
- package/dist/services/provider-loader.service.d.ts +6 -6
- package/dist/services/provider-loader.service.d.ts.map +1 -1
- package/dist/services/provider-loader.service.js +4 -4
- package/dist/services/provider-loader.service.js.map +1 -1
- package/dist/services/vault-resolver.d.ts +4 -4
- package/dist/services/vault-resolver.d.ts.map +1 -1
- package/dist/services/vault-resolver.js +2 -2
- package/dist/types.d.ts +6 -4
- package/dist/types.d.ts.map +1 -1
- package/dist/utils/day0-config.d.ts +1 -1
- package/dist/utils/day0-config.js +1 -1
- package/dist/utils/env-secret-resolver.d.ts +1 -1
- package/dist/utils/env-secret-resolver.js +1 -1
- package/package.json +5 -5
|
@@ -89,7 +89,7 @@ export interface ResolveCredentialIdentityParams {
|
|
|
89
89
|
* Resolve a signed-in customer to a checkpoint `user_did` via
|
|
90
90
|
* `/api/v1/bouncer/identity/resolve`. Mirrors
|
|
91
91
|
* `ConsentService.resolveCredentialIdentity` — it depends only on `env`
|
|
92
|
-
* (`
|
|
92
|
+
* (`CHECKPOINT_API_URL` + `CHECKPOINT_API_KEY`), never session/audit state, so
|
|
93
93
|
* it lives here as a free function the bridge can call directly. Returns
|
|
94
94
|
* `{ success: false }` (never throws) on any failure so the caller fails closed.
|
|
95
95
|
*/
|
|
@@ -142,7 +142,7 @@ export interface NotifyDelegationParams {
|
|
|
142
142
|
* path sends (`oauth-handler.ts`) against checkpoint's `notifyDelegationSchema`.
|
|
143
143
|
*
|
|
144
144
|
* No-ops (returns without a request) when the deployment has no
|
|
145
|
-
* `
|
|
145
|
+
* `CHECKPOINT_API_KEY` or `CHECKPOINT_PROJECT_ID` — a self-hosted anchor with
|
|
146
146
|
* no checkpoint link has nothing to report to.
|
|
147
147
|
*/
|
|
148
148
|
export declare function notifyDelegation(env: CloudflareEnv, params: NotifyDelegationParams): Promise<void>;
|
|
@@ -139,13 +139,13 @@ function buildCredentialConfig(entry) {
|
|
|
139
139
|
* documented follow-up.
|
|
140
140
|
*/
|
|
141
141
|
export async function resolveAnchorCredentialProvider(env, _scopes, options) {
|
|
142
|
-
const apiKey = env.
|
|
143
|
-
const projectId = env.
|
|
142
|
+
const apiKey = env.CHECKPOINT_API_KEY;
|
|
143
|
+
const projectId = env.CHECKPOINT_PROJECT_ID;
|
|
144
144
|
// No checkpoint link → nothing to authenticate against → legitimately
|
|
145
145
|
// consent-only (this is not an error condition).
|
|
146
146
|
if (!apiKey || !projectId)
|
|
147
147
|
return { status: "none" };
|
|
148
|
-
const agentShieldUrl = env.
|
|
148
|
+
const agentShieldUrl = env.CHECKPOINT_API_URL || DEFAULT_AGENTSHIELD_URL;
|
|
149
149
|
let providersMap;
|
|
150
150
|
let configuredProvider;
|
|
151
151
|
try {
|
|
@@ -225,13 +225,13 @@ export async function resolveAnchorCredentialProvider(env, _scopes, options) {
|
|
|
225
225
|
* Resolve a signed-in customer to a checkpoint `user_did` via
|
|
226
226
|
* `/api/v1/bouncer/identity/resolve`. Mirrors
|
|
227
227
|
* `ConsentService.resolveCredentialIdentity` — it depends only on `env`
|
|
228
|
-
* (`
|
|
228
|
+
* (`CHECKPOINT_API_URL` + `CHECKPOINT_API_KEY`), never session/audit state, so
|
|
229
229
|
* it lives here as a free function the bridge can call directly. Returns
|
|
230
230
|
* `{ success: false }` (never throws) on any failure so the caller fails closed.
|
|
231
231
|
*/
|
|
232
232
|
export async function resolveCredentialIdentity(env, params) {
|
|
233
|
-
const agentShieldUrl = env.
|
|
234
|
-
const apiKey = env.
|
|
233
|
+
const agentShieldUrl = env.CHECKPOINT_API_URL || DEFAULT_AGENTSHIELD_URL;
|
|
234
|
+
const apiKey = env.CHECKPOINT_API_KEY;
|
|
235
235
|
if (!apiKey)
|
|
236
236
|
return { success: false };
|
|
237
237
|
try {
|
|
@@ -292,15 +292,15 @@ export function sidToDelegationUuid(sid) {
|
|
|
292
292
|
* path sends (`oauth-handler.ts`) against checkpoint's `notifyDelegationSchema`.
|
|
293
293
|
*
|
|
294
294
|
* No-ops (returns without a request) when the deployment has no
|
|
295
|
-
* `
|
|
295
|
+
* `CHECKPOINT_API_KEY` or `CHECKPOINT_PROJECT_ID` — a self-hosted anchor with
|
|
296
296
|
* no checkpoint link has nothing to report to.
|
|
297
297
|
*/
|
|
298
298
|
export async function notifyDelegation(env, params) {
|
|
299
|
-
const apiKey = env.
|
|
300
|
-
const projectId = env.
|
|
299
|
+
const apiKey = env.CHECKPOINT_API_KEY;
|
|
300
|
+
const projectId = env.CHECKPOINT_PROJECT_ID;
|
|
301
301
|
if (!apiKey || !projectId)
|
|
302
302
|
return;
|
|
303
|
-
const agentShieldUrl = env.
|
|
303
|
+
const agentShieldUrl = env.CHECKPOINT_API_URL || DEFAULT_AGENTSHIELD_URL;
|
|
304
304
|
try {
|
|
305
305
|
const response = await fetch(`${agentShieldUrl}/api/v1/bouncer/delegations/notify`, {
|
|
306
306
|
method: "POST",
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"credential-consent.js","sourceRoot":"","sources":["../../src/delegation-http/credential-consent.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAmCnC,SAAS,UAAU,CACjB,KAAuB,EACvB,KAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,UAAU,CACjB,KAAuB,EACvB,KAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,6EAA6E;AAC7E,SAAS,iBAAiB,CAAC,KAAmC;IAC5D,OAAO,CACL,CAAC,CAAC,KAAK;QACP,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;QAC1D,KAAK,CAAC,UAAU,KAAK,KAAK,CAC3B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CACxB,GAAiC;IAEjC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,cAAc,CAAC;IAC9D,IAAI,CAAC,IAAI,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3D,IACE,OAAO,aAAa,KAAK,QAAQ;QACjC,OAAO,aAAa,KAAK,SAAS;QAClC,OAAO,aAAa,KAAK,QAAQ,EACjC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAC5B,GAAiC;IAEjC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,QAAQ,GAAG,UAAU,CACzB,GAAG,EACH,UAAU,EACV,UAAU,CACX,CAAC;IACF,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,UAAU,CAChC,GAAG,EACH,iBAAiB,EACjB,kBAAkB,CACnB,CAAC;IACF,MAAM,kBAAkB,GAAG,UAAU,CACnC,GAAG,EACH,oBAAoB,EACpB,sBAAsB,CACvB,CAAC;IACF,MAAM,iBAAiB,GAAG,UAAU,CAClC,GAAG,EACH,mBAAmB,EACnB,qBAAqB,CACkB,CAAC;IAC1C,MAAM,kBAAkB,GAAG,UAAU,CACnC,GAAG,EACH,oBAAoB,EACpB,sBAAsB,CACvB,CAAC;IACF,MAAM,gBAAgB,GAAG,UAAU,CACjC,GAAG,EACH,kBAAkB,EAClB,oBAAoB,CACrB,CAAC;IACF,IACE,CAAC,QAAQ;QACT,CAAC,SAAS;QACV,CAAC,eAAe;QAChB,CAAC,kBAAkB;QACnB,CAAC,iBAAiB;QAClB,CAAC,kBAAkB;QACnB,CAAC,gBAAgB,EACjB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAC5B,KAAuB;IAEvB,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;IACxE,MAAM,mBAAmB,GAAG,UAAU,CACpC,KAAK,EACL,qBAAqB,EACrB,uBAAuB,CACxB,CAAC;IACF,MAAM,iBAAiB,GAAG,UAAU,CAClC,KAAK,EACL,gBAAgB,EAChB,iBAAiB,CAClB,CAAC;IACF,IAAI,CAAC,YAAY,IAAI,CAAC,mBAAmB,IAAI,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAE7E,MAAM,YAAY,GAAG,UAAU,CAC7B,iBAAiB,EACjB,cAAc,EACd,eAAe,CAChB,CAAC;IACF,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAE/B,MAAM,cAAc,GAA+C;QACjE,YAAY;QACZ,MAAM,EAAE,UAAU,CAAC,iBAAiB,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC1D,SAAS,EAAE,UAAU,CAAC,iBAAiB,EAAE,WAAW,EAAE,YAAY,CAAC;QACnE,eAAe,EAAE,UAAU,CACzB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,CACpB;QACD,SAAS,EAAE,UAAU,CAAC,iBAAiB,EAAE,WAAW,EAAE,YAAY,CAAC;KACpE,CAAC;IAEF,kEAAkE;IAClE,6EAA6E;IAC7E,wEAAwE;IACxE,gFAAgF;IAChF,MAAM,YAAY,GAAG,iBAAiB,CACpC,UAAU,CAAmB,KAAK,EAAE,cAAc,EAAE,eAAe,CAAC,CACrE,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CACxB,KAAK,EACL,SAAS,EACT,SAAS,CACV,CAAC;IACF,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,aAAa,CAEnD,CAAC;IACd,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;IACxE,8EAA8E;IAC9E,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,gBAAgB,GAAG,qBAAqB,CAC5C,UAAU,CAAmB,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAC7E,CAAC;IAEF,OAAO;QACL,+EAA+E;QAC/E,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC;QAC7D,YAAY;QACZ,mBAAmB;QACnB,cAAc;QACd,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,GAAkB,EAClB,OAAiB,EACjB,OAAiD;IAEjD,MAAM,MAAM,GAAG,GAAG,CAAC,mBAAmB,CAAC;IACvC,MAAM,SAAS,GAAG,GAAG,CAAC,sBAAsB,CAAC;IAC7C,sEAAsE;IACtE,iDAAiD;IACjD,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAErD,MAAM,cAAc,GAAG,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,CAAC;IAC1E,IAAI,YAA8C,CAAC;IACnD,IAAI,kBAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,cAAc,4BAA4B,kBAAkB,CAC7D,SAAS,CACV,YAAY,EACb;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,cAAc,EAAE,kBAAkB;aACnC;SACF,CACF,CAAC;QACF,2EAA2E;QAC3E,6DAA6D;QAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAOlC,CAAC;QACF,wEAAwE;QACxE,2EAA2E;QAC3E,0EAA0E;QAC1E,gDAAgD;QAChD,IACE,IAAI,CAAC,OAAO,KAAK,IAAI;YACrB,CAAC,IAAI,CAAC,IAAI;YACV,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,QAAQ;YACvC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,EAC5B,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACnC,CAAC;QACD,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAA6C,CAAC;QACvE,kBAAkB;YAChB,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACnC,CAAC;IAED,2EAA2E;IAC3E,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,OAAO,EAAE,yBAAyB,IAAI,kBAAkB,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAC3C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9D,CAAC;IAED,gFAAgF;IAChF,+EAA+E;IAC/E,8DAA8D;IAC9D,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAC5D,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CACpC,CAAC;IACF,6EAA6E;IAC7E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAE1D,iFAAiF;IACjF,+DAA+D;IAC/D,MAAM,QAAQ,GACZ,kBAAkB,IAAI,iBAAiB,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC;QACvE,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;YAC1B,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,IAAI,CAAC;IACb,4EAA4E;IAC5E,4CAA4C;IAC5C,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAEhD,MAAM,MAAM,GAAG,qBAAqB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,+EAA+E;IAC/E,0EAA0E;IAC1E,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAE9C,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE;YACR,UAAU,EAAE,QAAQ;YACpB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,QAAQ;YAC3C,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAaD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAkB,EAClB,MAAuC;IAEvC,MAAM,cAAc,GAAG,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,CAAC;IAC1E,MAAM,MAAM,GAAG,GAAG,CAAC,mBAAmB,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,cAAc,kCAAkC,EACnD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,WAAW,EAAE,MAAM;gBACnB,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,iBAAiB,EAAE;oBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,OAAO,EAAE,MAAM,CAAC,MAAM;oBACtB,KAAK,EAAE,MAAM,CAAC,SAAS;oBACvB,IAAI,EAAE,MAAM,CAAC,eAAe;iBAC7B;aACF,CAAC;SACH,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqC,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC;QACrC,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,iEAAiE;IACjE,sDAAsD;IACtD,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY;IACzB,6EAA6E;IAC7E,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CACrE,EAAE,EACF,EAAE,CACH,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AACzB,CAAC;AA0BD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAkB,EAClB,MAA8B;IAE9B,MAAM,MAAM,GAAG,GAAG,CAAC,mBAAmB,CAAC;IACvC,MAAM,SAAS,GAAG,GAAG,CAAC,sBAAsB,CAAC;IAC7C,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;QAAE,OAAO;IAElC,MAAM,cAAc,GAAG,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,cAAc,oCAAoC,EACrD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,WAAW,EAAE,MAAM;gBACnB,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,aAAa,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC;gBAC9C,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;gBACzC,QAAQ,EAAE,MAAM,CAAC,OAAO;gBACxB,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,SAAS;gBACnC,eAAe,EAAE,MAAM,CAAC,cAAc,IAAI,SAAS;gBACnD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;gBACzC,QAAQ,EAAE;oBACR,MAAM,EAAE,sBAAsB;oBAC9B,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,GAAG,MAAM,CAAC,QAAQ;iBACnB;aACF,CAAC;SACH,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CACV,uDAAuD,QAAQ,CAAC,MAAM,QAAQ,MAAM,CAAC,GAAG,EAAE,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CACV,uDACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,QAAQ,MAAM,CAAC,GAAG,EAAE,CACrB,CAAC;IACJ,CAAC;AACH,CAAC"}
|
|
1
|
+
{"version":3,"file":"credential-consent.js","sourceRoot":"","sources":["../../src/delegation-http/credential-consent.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAmCnC,SAAS,UAAU,CACjB,KAAuB,EACvB,KAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,UAAU,CACjB,KAAuB,EACvB,KAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,6EAA6E;AAC7E,SAAS,iBAAiB,CAAC,KAAmC;IAC5D,OAAO,CACL,CAAC,CAAC,KAAK;QACP,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;QAC1D,KAAK,CAAC,UAAU,KAAK,KAAK,CAC3B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CACxB,GAAiC;IAEjC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,cAAc,CAAC;IAC9D,IAAI,CAAC,IAAI,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3D,IACE,OAAO,aAAa,KAAK,QAAQ;QACjC,OAAO,aAAa,KAAK,SAAS;QAClC,OAAO,aAAa,KAAK,QAAQ,EACjC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAC5B,GAAiC;IAEjC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,QAAQ,GAAG,UAAU,CACzB,GAAG,EACH,UAAU,EACV,UAAU,CACX,CAAC;IACF,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,UAAU,CAChC,GAAG,EACH,iBAAiB,EACjB,kBAAkB,CACnB,CAAC;IACF,MAAM,kBAAkB,GAAG,UAAU,CACnC,GAAG,EACH,oBAAoB,EACpB,sBAAsB,CACvB,CAAC;IACF,MAAM,iBAAiB,GAAG,UAAU,CAClC,GAAG,EACH,mBAAmB,EACnB,qBAAqB,CACkB,CAAC;IAC1C,MAAM,kBAAkB,GAAG,UAAU,CACnC,GAAG,EACH,oBAAoB,EACpB,sBAAsB,CACvB,CAAC;IACF,MAAM,gBAAgB,GAAG,UAAU,CACjC,GAAG,EACH,kBAAkB,EAClB,oBAAoB,CACrB,CAAC;IACF,IACE,CAAC,QAAQ;QACT,CAAC,SAAS;QACV,CAAC,eAAe;QAChB,CAAC,kBAAkB;QACnB,CAAC,iBAAiB;QAClB,CAAC,kBAAkB;QACnB,CAAC,gBAAgB,EACjB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAC5B,KAAuB;IAEvB,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;IACxE,MAAM,mBAAmB,GAAG,UAAU,CACpC,KAAK,EACL,qBAAqB,EACrB,uBAAuB,CACxB,CAAC;IACF,MAAM,iBAAiB,GAAG,UAAU,CAClC,KAAK,EACL,gBAAgB,EAChB,iBAAiB,CAClB,CAAC;IACF,IAAI,CAAC,YAAY,IAAI,CAAC,mBAAmB,IAAI,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAE7E,MAAM,YAAY,GAAG,UAAU,CAC7B,iBAAiB,EACjB,cAAc,EACd,eAAe,CAChB,CAAC;IACF,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAE/B,MAAM,cAAc,GAA+C;QACjE,YAAY;QACZ,MAAM,EAAE,UAAU,CAAC,iBAAiB,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC1D,SAAS,EAAE,UAAU,CAAC,iBAAiB,EAAE,WAAW,EAAE,YAAY,CAAC;QACnE,eAAe,EAAE,UAAU,CACzB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,CACpB;QACD,SAAS,EAAE,UAAU,CAAC,iBAAiB,EAAE,WAAW,EAAE,YAAY,CAAC;KACpE,CAAC;IAEF,kEAAkE;IAClE,6EAA6E;IAC7E,wEAAwE;IACxE,gFAAgF;IAChF,MAAM,YAAY,GAAG,iBAAiB,CACpC,UAAU,CAAmB,KAAK,EAAE,cAAc,EAAE,eAAe,CAAC,CACrE,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CACxB,KAAK,EACL,SAAS,EACT,SAAS,CACV,CAAC;IACF,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,aAAa,CAEnD,CAAC;IACd,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;IACxE,8EAA8E;IAC9E,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,gBAAgB,GAAG,qBAAqB,CAC5C,UAAU,CAAmB,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAC7E,CAAC;IAEF,OAAO;QACL,+EAA+E;QAC/E,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC;QAC7D,YAAY;QACZ,mBAAmB;QACnB,cAAc;QACd,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,GAAkB,EAClB,OAAiB,EACjB,OAAiD;IAEjD,MAAM,MAAM,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACtC,MAAM,SAAS,GAAG,GAAG,CAAC,qBAAqB,CAAC;IAC5C,sEAAsE;IACtE,iDAAiD;IACjD,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAErD,MAAM,cAAc,GAAG,GAAG,CAAC,kBAAkB,IAAI,uBAAuB,CAAC;IACzE,IAAI,YAA8C,CAAC;IACnD,IAAI,kBAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,cAAc,4BAA4B,kBAAkB,CAC7D,SAAS,CACV,YAAY,EACb;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,cAAc,EAAE,kBAAkB;aACnC;SACF,CACF,CAAC;QACF,2EAA2E;QAC3E,6DAA6D;QAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAOlC,CAAC;QACF,wEAAwE;QACxE,2EAA2E;QAC3E,0EAA0E;QAC1E,gDAAgD;QAChD,IACE,IAAI,CAAC,OAAO,KAAK,IAAI;YACrB,CAAC,IAAI,CAAC,IAAI;YACV,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,QAAQ;YACvC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,EAC5B,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACnC,CAAC;QACD,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAA6C,CAAC;QACvE,kBAAkB;YAChB,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACnC,CAAC;IAED,2EAA2E;IAC3E,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,OAAO,EAAE,yBAAyB,IAAI,kBAAkB,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAC3C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9D,CAAC;IAED,gFAAgF;IAChF,+EAA+E;IAC/E,8DAA8D;IAC9D,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAC5D,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CACpC,CAAC;IACF,6EAA6E;IAC7E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAE1D,iFAAiF;IACjF,+DAA+D;IAC/D,MAAM,QAAQ,GACZ,kBAAkB,IAAI,iBAAiB,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC;QACvE,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;YAC1B,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,IAAI,CAAC;IACb,4EAA4E;IAC5E,4CAA4C;IAC5C,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAEhD,MAAM,MAAM,GAAG,qBAAqB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,+EAA+E;IAC/E,0EAA0E;IAC1E,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAE9C,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE;YACR,UAAU,EAAE,QAAQ;YACpB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,QAAQ;YAC3C,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAaD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAkB,EAClB,MAAuC;IAEvC,MAAM,cAAc,GAAG,GAAG,CAAC,kBAAkB,IAAI,uBAAuB,CAAC;IACzE,MAAM,MAAM,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,cAAc,kCAAkC,EACnD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,WAAW,EAAE,MAAM;gBACnB,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,iBAAiB,EAAE;oBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,OAAO,EAAE,MAAM,CAAC,MAAM;oBACtB,KAAK,EAAE,MAAM,CAAC,SAAS;oBACvB,IAAI,EAAE,MAAM,CAAC,eAAe;iBAC7B;aACF,CAAC;SACH,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqC,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC;QACrC,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,iEAAiE;IACjE,sDAAsD;IACtD,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY;IACzB,6EAA6E;IAC7E,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CACrE,EAAE,EACF,EAAE,CACH,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AACzB,CAAC;AA0BD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAkB,EAClB,MAA8B;IAE9B,MAAM,MAAM,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACtC,MAAM,SAAS,GAAG,GAAG,CAAC,qBAAqB,CAAC;IAC5C,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;QAAE,OAAO;IAElC,MAAM,cAAc,GAAG,GAAG,CAAC,kBAAkB,IAAI,uBAAuB,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,cAAc,oCAAoC,EACrD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,WAAW,EAAE,MAAM;gBACnB,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,aAAa,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC;gBAC9C,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;gBACzC,QAAQ,EAAE,MAAM,CAAC,OAAO;gBACxB,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,SAAS;gBACnC,eAAe,EAAE,MAAM,CAAC,cAAc,IAAI,SAAS;gBACnD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;gBACzC,QAAQ,EAAE;oBACR,MAAM,EAAE,sBAAsB;oBAC9B,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,GAAG,MAAM,CAAC,QAAQ;iBACnB;aACF,CAAC;SACH,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CACV,uDAAuD,QAAQ,CAAC,MAAM,QAAQ,MAAM,CAAC,GAAG,EAAE,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CACV,uDACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,QAAQ,MAAM,CAAC,GAAG,EAAE,CACrB,CAAC;IACJ,CAAC;AACH,CAAC"}
|
|
@@ -137,18 +137,18 @@ export async function claimNativeReplay(env, cfg, claim) {
|
|
|
137
137
|
try {
|
|
138
138
|
if (cfg.claimReplay)
|
|
139
139
|
return await cfg.claimReplay(claim);
|
|
140
|
-
const base = env.
|
|
140
|
+
const base = env.CHECKPOINT_API_URL;
|
|
141
141
|
if (!secureHttpUrl(base, cfg.allowLoopbackHttp) ||
|
|
142
|
-
!env.
|
|
143
|
-
!env.
|
|
142
|
+
!env.CHECKPOINT_API_KEY ||
|
|
143
|
+
!env.CHECKPOINT_PROJECT_ID)
|
|
144
144
|
return "unavailable";
|
|
145
145
|
const response = await fetchNativeNoRedirect(new URL("/api/v1/enforce/replay", base), {
|
|
146
146
|
method: "POST",
|
|
147
147
|
signal: AbortSignal.timeout(3000),
|
|
148
148
|
headers: {
|
|
149
|
-
Authorization: "Bearer " + env.
|
|
149
|
+
Authorization: "Bearer " + env.CHECKPOINT_API_KEY,
|
|
150
150
|
"Content-Type": "application/json",
|
|
151
|
-
"X-Project-Id": env.
|
|
151
|
+
"X-Project-Id": env.CHECKPOINT_PROJECT_ID,
|
|
152
152
|
},
|
|
153
153
|
body: JSON.stringify(claim),
|
|
154
154
|
});
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"native-http.js","sourceRoot":"","sources":["../../src/delegation-http/native-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,wBAAwB,GAEzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AA2F7D,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,EAAE,CACpC,WAAW,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;AAC3D,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,MAAc;IACvD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;QAC7C,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU;YAC3B,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAc,EACd,aAAa,GAAG,KAAK;IAErB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CACL,CAAC,GAAG,CAAC,QAAQ;YACb,CAAC,GAAG,CAAC,QAAQ;YACb,CAAC,GAAG,CAAC,IAAI;YACT,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBACxB,CAAC,aAAa;oBACZ,GAAG,CAAC,QAAQ,KAAK,OAAO;oBACxB,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CACjE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;QAC3B,CAAC,CAAC,OAAO,KAAK,YAAY;QAC1B,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,CAAC,WAAW,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CACpD,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CACxB;QACD,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,GAAG;QAChC,CAAC,CAAC,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,CAAC,aAAa,KAAK,iBAAiB,CAAC,CACrE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAA4B,EAC5B,GAAW,EACX,MAAgB,EAChB,MAAc;IAEd,MAAM,OAAO,GAAG,MAAM,GAAG,eAAe,GAAG,GAAG,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,GAAG,yBAAyB,GAAG,GAAG,CAAC;IACxD,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG;QACH,WAAW,EAAE,OAAO;QACpB,UAAU,EAAE,MAAM;QAClB,eAAe,EAAE,MAAM;QACvB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,MAAM,EAAE;YACN,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,OAAO;YACpB,UAAU,EAAE,MAAM;YAClB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,GAAG,EACD,IAAI,CAAC,WAAW,KAAK,KAAK;gBACxB,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE;gBACxC,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,oBAAoB;oBAC5B,QAAQ,EAAE,WAAW;oBACrB,KAAK,EAAE,EAAE;iBACV;YACP,KAAK,EAAE;gBACL,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,YAAY;aACzB;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAkB,EAClB,SAAiB,EACjB,OAA4B,EAC5B,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS;QACzC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,OAAO,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC,aAAa,CACzD,EAAE,MAAM,EAAE,+BAA+B,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EACzE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EACzD,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,EACxD,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACnC,CAAC;AACJ,CAAC;AAED;4FAC4F;AAC5F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa;IAEb,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,IACE,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;QAC5B,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE;QACnB,CAAC,QAAQ,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ,KAAK,QAAQ,CAAC;QACpD,KAAK,KAAK,SAAS;QAEnB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,MAAM,IAAI,GACR,OAAO,CAAC,MAAM,KAAK,EAAE;QACrB,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI;QACnB,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI;QACnB,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,GAAe,CAAC;IACpB,IAAI,GAAc,CAAC;IACnB,IAAI,OAAO,EAAE,CAAC;QACZ,GAAG,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACjC,KAAK,EACL,GAAG,EACH,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,oEAAoE;QACpE,uEAAuE;QACvE,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACjC,KAAK,EACL,IAAI,UAAU,CAAC,KAAK,CAAC,EACrB,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,QAAQ,CAAC,CACX,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5D,IACE,SAAS,CAAC,GAAG,KAAK,OAAO;YACzB,SAAS,CAAC,GAAG,KAAK,IAAI;YACtB,CAAC,SAAS,CAAC,CAAC;YACZ,CAAC,SAAS,CAAC,CAAC;YAEZ,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,GAAG,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACvC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAC5C,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,wBAAwB,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAA8B;IAC9D,OAAO,CACL,CAAC,CAAC,MAAM;QACR,CAAC,0BAA0B,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QACzE,MAAM,CAAC,aAAa,KAAK,YAAY;QACrC,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;QAC1C,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAChD,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACpD,aAAa,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAC1C,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,oBAAoB,GAAG,GAAG,GAAG,MAAM,CAAC,eAAe,CACzE,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAkB,EAClB,GAAyB,EACzB,KAAwB;IAExB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,GAAG,CAAC,
|
|
1
|
+
{"version":3,"file":"native-http.js","sourceRoot":"","sources":["../../src/delegation-http/native-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,wBAAwB,GAEzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AA2F7D,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,EAAE,CACpC,WAAW,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;AAC3D,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,MAAc;IACvD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;QAC7C,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU;YAC3B,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAc,EACd,aAAa,GAAG,KAAK;IAErB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CACL,CAAC,GAAG,CAAC,QAAQ;YACb,CAAC,GAAG,CAAC,QAAQ;YACb,CAAC,GAAG,CAAC,IAAI;YACT,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBACxB,CAAC,aAAa;oBACZ,GAAG,CAAC,QAAQ,KAAK,OAAO;oBACxB,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CACjE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;QAC3B,CAAC,CAAC,OAAO,KAAK,YAAY;QAC1B,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,CAAC,WAAW,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CACpD,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CACxB;QACD,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,GAAG;QAChC,CAAC,CAAC,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,CAAC,aAAa,KAAK,iBAAiB,CAAC,CACrE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAA4B,EAC5B,GAAW,EACX,MAAgB,EAChB,MAAc;IAEd,MAAM,OAAO,GAAG,MAAM,GAAG,eAAe,GAAG,GAAG,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,GAAG,yBAAyB,GAAG,GAAG,CAAC;IACxD,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG;QACH,WAAW,EAAE,OAAO;QACpB,UAAU,EAAE,MAAM;QAClB,eAAe,EAAE,MAAM;QACvB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,MAAM,EAAE;YACN,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,OAAO;YACpB,UAAU,EAAE,MAAM;YAClB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,GAAG,EACD,IAAI,CAAC,WAAW,KAAK,KAAK;gBACxB,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE;gBACxC,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,oBAAoB;oBAC5B,QAAQ,EAAE,WAAW;oBACrB,KAAK,EAAE,EAAE;iBACV;YACP,KAAK,EAAE;gBACL,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,YAAY;aACzB;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAkB,EAClB,SAAiB,EACjB,OAA4B,EAC5B,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS;QACzC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,OAAO,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC,aAAa,CACzD,EAAE,MAAM,EAAE,+BAA+B,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EACzE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EACzD,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,EACxD,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACnC,CAAC;AACJ,CAAC;AAED;4FAC4F;AAC5F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa;IAEb,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,IACE,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;QAC5B,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE;QACnB,CAAC,QAAQ,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ,KAAK,QAAQ,CAAC;QACpD,KAAK,KAAK,SAAS;QAEnB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,MAAM,IAAI,GACR,OAAO,CAAC,MAAM,KAAK,EAAE;QACrB,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI;QACnB,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI;QACnB,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,GAAe,CAAC;IACpB,IAAI,GAAc,CAAC;IACnB,IAAI,OAAO,EAAE,CAAC;QACZ,GAAG,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACjC,KAAK,EACL,GAAG,EACH,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,oEAAoE;QACpE,uEAAuE;QACvE,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACjC,KAAK,EACL,IAAI,UAAU,CAAC,KAAK,CAAC,EACrB,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,QAAQ,CAAC,CACX,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5D,IACE,SAAS,CAAC,GAAG,KAAK,OAAO;YACzB,SAAS,CAAC,GAAG,KAAK,IAAI;YACtB,CAAC,SAAS,CAAC,CAAC;YACZ,CAAC,SAAS,CAAC,CAAC;YAEZ,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,GAAG,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACvC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAC5C,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,wBAAwB,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAA8B;IAC9D,OAAO,CACL,CAAC,CAAC,MAAM;QACR,CAAC,0BAA0B,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QACzE,MAAM,CAAC,aAAa,KAAK,YAAY;QACrC,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;QAC1C,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAChD,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACpD,aAAa,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAC1C,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,oBAAoB,GAAG,GAAG,GAAG,MAAM,CAAC,eAAe,CACzE,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAkB,EAClB,GAAyB,EACzB,KAAwB;IAExB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,GAAG,CAAC,kBAAkB,CAAC;QACpC,IACE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,CAAC;YAC3C,CAAC,GAAG,CAAC,kBAAkB;YACvB,CAAC,GAAG,CAAC,qBAAqB;YAE1B,OAAO,aAAa,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,IAAI,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,EACvC;YACE,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,GAAG,GAAG,CAAC,kBAAkB;gBACjD,cAAc,EAAE,kBAAkB;gBAClC,cAAc,EAAE,GAAG,CAAC,qBAAqB;aAC1C;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CACF,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,QAAQ,CAAC;QAC7C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,UAAU,CAAC;QAC/C,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;YACvB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,IAAI;YAErD,OAAO,aAAa,CAAC;QACvB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO,aAAa,CAAC;QAClC,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAC5B,IAAI,MAAM,GAAG,IAAI,EAAE,CAAC;gBAClB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,OAAO,aAAa,CAAC;YACvB,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAEtD,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC;IACvB,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,43 @@
|
|
|
1
|
+
/** Native OAuth state is a one-use coordination atom, separate from pickup/MCP.
|
|
2
|
+
* Only encrypted payloads cross this internal dispatch. Consumption commits before
|
|
3
|
+
* returning ciphertext, so decryption and provider I/O cannot reopen the race.
|
|
4
|
+
* A dedicated object owns its expiry alarm; MCP agent scheduling is separate.
|
|
5
|
+
*/
|
|
6
|
+
import type { DurableObjectState } from "@cloudflare/workers-types";
|
|
7
|
+
export declare const NATIVE_OAUTH_INTERNAL_PREFIX = "/_internal/native-oauth/";
|
|
8
|
+
export declare const NATIVE_OAUTH_STATE_KEY = "native-oauth-state:v1";
|
|
9
|
+
export declare const NATIVE_OAUTH_MAX_TTL_MS = 600000;
|
|
10
|
+
export declare const NATIVE_OAUTH_MAX_CIPHERTEXT = 32768;
|
|
11
|
+
export declare const NATIVE_OAUTH_STORAGE_PROFILE = "dedicated-expiry-alarm-v1";
|
|
12
|
+
export declare const NATIVE_OAUTH_PROFILE_HEADER = "X-KYA-Native-OAuth-Storage";
|
|
13
|
+
export declare const NATIVE_OAUTH_ALARM_MAX_RETRIES = 6;
|
|
14
|
+
export interface NativeOAuthStateRecord {
|
|
15
|
+
version: 1;
|
|
16
|
+
expiresAt: number;
|
|
17
|
+
ciphertext?: string;
|
|
18
|
+
}
|
|
19
|
+
interface Transition {
|
|
20
|
+
status: number;
|
|
21
|
+
record?: NativeOAuthStateRecord;
|
|
22
|
+
remove?: boolean;
|
|
23
|
+
body?: NativeOAuthStateRecord;
|
|
24
|
+
}
|
|
25
|
+
/** Pure transition, evaluated with the persisted record inside one transaction. */
|
|
26
|
+
export declare function reduceNativeOAuthState(record: NativeOAuthStateRecord | undefined, operation: "create" | "consume", input: unknown, now: number): Transition;
|
|
27
|
+
export declare function handleNativeOAuthStateInternal(ctx: DurableObjectState, request: Request): Promise<Response>;
|
|
28
|
+
/** Dedicated binding only: never inherit or override the MCP Agent scheduler.
|
|
29
|
+
* A plain DO class matches the package's AuditProducer export convention and
|
|
30
|
+
* keeps the SDK root import usable outside workerd (no cloudflare:workers import).
|
|
31
|
+
*/
|
|
32
|
+
export declare class NativeOAuthState {
|
|
33
|
+
protected readonly ctx: DurableObjectState;
|
|
34
|
+
constructor(ctx: DurableObjectState);
|
|
35
|
+
fetch(request: Request): Promise<Response>;
|
|
36
|
+
alarm(info?: {
|
|
37
|
+
retryCount: number;
|
|
38
|
+
isRetry: boolean;
|
|
39
|
+
}): Promise<void>;
|
|
40
|
+
private cleanup;
|
|
41
|
+
}
|
|
42
|
+
export {};
|
|
43
|
+
//# sourceMappingURL=native-oauth-state-do.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"native-oauth-state-do.d.ts","sourceRoot":"","sources":["../../src/delegation-http/native-oauth-state-do.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,eAAO,MAAM,4BAA4B,6BAA6B,CAAC;AACvE,eAAO,MAAM,sBAAsB,0BAA0B,CAAC;AAC9D,eAAO,MAAM,uBAAuB,SAAU,CAAC;AAC/C,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAClD,eAAO,MAAM,4BAA4B,8BAA8B,CAAC;AACxE,eAAO,MAAM,2BAA2B,+BAA+B,CAAC;AACxE,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAEhD,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,sBAAsB,CAAC;CAC/B;AAED,mFAAmF;AACnF,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,sBAAsB,GAAG,SAAS,EAC1C,SAAS,EAAE,QAAQ,GAAG,SAAS,EAC/B,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,MAAM,GACV,UAAU,CAyCZ;AAYD,wBAAsB,8BAA8B,CAClD,GAAG,EAAE,kBAAkB,EACvB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,QAAQ,CAAC,CAiDnB;AAED;;;GAGG;AACH,qBAAa,gBAAgB;IACf,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,kBAAkB;gBAAvB,GAAG,EAAE,kBAAkB;IAEhD,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAsB1C,KAAK,CACT,IAAI,GAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAG3C,GACA,OAAO,CAAC,IAAI,CAAC;YAIF,OAAO;CA0CtB"}
|
|
@@ -0,0 +1,175 @@
|
|
|
1
|
+
export const NATIVE_OAUTH_INTERNAL_PREFIX = "/_internal/native-oauth/";
|
|
2
|
+
export const NATIVE_OAUTH_STATE_KEY = "native-oauth-state:v1";
|
|
3
|
+
export const NATIVE_OAUTH_MAX_TTL_MS = 600_000;
|
|
4
|
+
export const NATIVE_OAUTH_MAX_CIPHERTEXT = 32_768;
|
|
5
|
+
export const NATIVE_OAUTH_STORAGE_PROFILE = "dedicated-expiry-alarm-v1";
|
|
6
|
+
export const NATIVE_OAUTH_PROFILE_HEADER = "X-KYA-Native-OAuth-Storage";
|
|
7
|
+
export const NATIVE_OAUTH_ALARM_MAX_RETRIES = 6;
|
|
8
|
+
/** Pure transition, evaluated with the persisted record inside one transaction. */
|
|
9
|
+
export function reduceNativeOAuthState(record, operation, input, now) {
|
|
10
|
+
if (operation === "create") {
|
|
11
|
+
// Never refresh or replace an in-flight or already consumed state.
|
|
12
|
+
if (record)
|
|
13
|
+
return { status: 409 };
|
|
14
|
+
const value = input;
|
|
15
|
+
if (!value ||
|
|
16
|
+
value.version !== 1 ||
|
|
17
|
+
!Number.isSafeInteger(value.expiresAt) ||
|
|
18
|
+
value.expiresAt <= now ||
|
|
19
|
+
value.expiresAt > now + NATIVE_OAUTH_MAX_TTL_MS ||
|
|
20
|
+
typeof value.ciphertext !== "string" ||
|
|
21
|
+
value.ciphertext.length < 38 ||
|
|
22
|
+
value.ciphertext.length > NATIVE_OAUTH_MAX_CIPHERTEXT ||
|
|
23
|
+
!/^[A-Za-z0-9_-]+$/.test(value.ciphertext))
|
|
24
|
+
return { status: 400 };
|
|
25
|
+
return {
|
|
26
|
+
status: 201,
|
|
27
|
+
record: {
|
|
28
|
+
version: 1,
|
|
29
|
+
expiresAt: value.expiresAt,
|
|
30
|
+
ciphertext: value.ciphertext,
|
|
31
|
+
},
|
|
32
|
+
};
|
|
33
|
+
}
|
|
34
|
+
if (!record)
|
|
35
|
+
return { status: 404 };
|
|
36
|
+
if (record.version !== 1 ||
|
|
37
|
+
!Number.isSafeInteger(record.expiresAt) ||
|
|
38
|
+
record.expiresAt <= now)
|
|
39
|
+
return { status: 410, remove: true };
|
|
40
|
+
if (!record.ciphertext)
|
|
41
|
+
return { status: 404 };
|
|
42
|
+
// Retain only a non-secret tombstone, removed by its expiry alarm; a duplicate
|
|
43
|
+
// create cannot resurrect consumed state. The encrypted verifier is removed now.
|
|
44
|
+
return {
|
|
45
|
+
status: 200,
|
|
46
|
+
record: { version: 1, expiresAt: record.expiresAt },
|
|
47
|
+
body: record,
|
|
48
|
+
};
|
|
49
|
+
}
|
|
50
|
+
function response(status, body) {
|
|
51
|
+
return Response.json(body ?? {}, {
|
|
52
|
+
status,
|
|
53
|
+
headers: {
|
|
54
|
+
"Cache-Control": "no-store",
|
|
55
|
+
[NATIVE_OAUTH_PROFILE_HEADER]: NATIVE_OAUTH_STORAGE_PROFILE,
|
|
56
|
+
},
|
|
57
|
+
});
|
|
58
|
+
}
|
|
59
|
+
export async function handleNativeOAuthStateInternal(ctx, request) {
|
|
60
|
+
const url = new URL(request.url);
|
|
61
|
+
const operation = url.pathname.slice(NATIVE_OAUTH_INTERNAL_PREFIX.length);
|
|
62
|
+
if (url.origin !== "https://do.internal" ||
|
|
63
|
+
!url.pathname.startsWith(NATIVE_OAUTH_INTERNAL_PREFIX) ||
|
|
64
|
+
(operation !== "create" && operation !== "consume" && operation !== "ready"))
|
|
65
|
+
return response(404);
|
|
66
|
+
if (request.method !== "POST")
|
|
67
|
+
return response(405);
|
|
68
|
+
if (operation === "ready")
|
|
69
|
+
return response(200);
|
|
70
|
+
let input;
|
|
71
|
+
try {
|
|
72
|
+
const text = await request.text();
|
|
73
|
+
if (text.length > NATIVE_OAUTH_MAX_CIPHERTEXT + 128)
|
|
74
|
+
return response(413);
|
|
75
|
+
input = JSON.parse(text);
|
|
76
|
+
}
|
|
77
|
+
catch {
|
|
78
|
+
return response(400);
|
|
79
|
+
}
|
|
80
|
+
try {
|
|
81
|
+
// Only storage awaits inside this transaction. No crypto, network, logging,
|
|
82
|
+
// or externally visible side effects: a platform retry remains harmless.
|
|
83
|
+
const result = await ctx.storage.transaction(async (txn) => {
|
|
84
|
+
const current = await txn.get(NATIVE_OAUTH_STATE_KEY);
|
|
85
|
+
const transition = reduceNativeOAuthState(current, operation, input, Date.now());
|
|
86
|
+
if (transition.remove) {
|
|
87
|
+
await txn.delete(NATIVE_OAUTH_STATE_KEY);
|
|
88
|
+
// Leave its existing expiry alarm to reclaim all object metadata too.
|
|
89
|
+
}
|
|
90
|
+
else if (transition.record) {
|
|
91
|
+
await txn.put(NATIVE_OAUTH_STATE_KEY, transition.record);
|
|
92
|
+
// Commit the deadline with creation. A failed alarm write cannot leave
|
|
93
|
+
// an acknowledged, abandoned ciphertext without scheduled cleanup.
|
|
94
|
+
if (operation === "create")
|
|
95
|
+
await txn.setAlarm(transition.record.expiresAt);
|
|
96
|
+
}
|
|
97
|
+
return transition;
|
|
98
|
+
});
|
|
99
|
+
return response(result.status, result.body);
|
|
100
|
+
}
|
|
101
|
+
catch {
|
|
102
|
+
// Storage errors must never yield the encrypted state or trigger KV fallback.
|
|
103
|
+
return response(503);
|
|
104
|
+
}
|
|
105
|
+
}
|
|
106
|
+
/** Dedicated binding only: never inherit or override the MCP Agent scheduler.
|
|
107
|
+
* A plain DO class matches the package's AuditProducer export convention and
|
|
108
|
+
* keeps the SDK root import usable outside workerd (no cloudflare:workers import).
|
|
109
|
+
*/
|
|
110
|
+
export class NativeOAuthState {
|
|
111
|
+
ctx;
|
|
112
|
+
constructor(ctx) {
|
|
113
|
+
this.ctx = ctx;
|
|
114
|
+
}
|
|
115
|
+
async fetch(request) {
|
|
116
|
+
const url = new URL(request.url);
|
|
117
|
+
if (url.origin === "https://do.internal" &&
|
|
118
|
+
url.pathname === NATIVE_OAUTH_INTERNAL_PREFIX + "cleanup-expired") {
|
|
119
|
+
if (request.method !== "POST")
|
|
120
|
+
return response(405);
|
|
121
|
+
try {
|
|
122
|
+
const removed = await this.cleanup({ retryCount: 0, isRetry: false }, "manual");
|
|
123
|
+
return response(removed ? 200 : 202, {
|
|
124
|
+
status: removed ? "expired-data-removed" : "live-state-retained",
|
|
125
|
+
});
|
|
126
|
+
}
|
|
127
|
+
catch {
|
|
128
|
+
return response(503);
|
|
129
|
+
}
|
|
130
|
+
}
|
|
131
|
+
return handleNativeOAuthStateInternal(this.ctx, request);
|
|
132
|
+
}
|
|
133
|
+
async alarm(info = {
|
|
134
|
+
retryCount: 0,
|
|
135
|
+
isRetry: false,
|
|
136
|
+
}) {
|
|
137
|
+
await this.cleanup(info, "alarm");
|
|
138
|
+
}
|
|
139
|
+
async cleanup(info, trigger) {
|
|
140
|
+
try {
|
|
141
|
+
// Storage input gates serialize this storage-only sequence with requests.
|
|
142
|
+
// deleteAll cannot run inside a transaction; it also reclaims per-object
|
|
143
|
+
// metadata that deleting the single state key would leave behind.
|
|
144
|
+
const record = await this.ctx.storage.get(NATIVE_OAUTH_STATE_KEY);
|
|
145
|
+
if (record?.version === 1 &&
|
|
146
|
+
Number.isSafeInteger(record.expiresAt) &&
|
|
147
|
+
record.expiresAt > Date.now()) {
|
|
148
|
+
// An early/duplicate wake must not erase live authority or its alarm.
|
|
149
|
+
await this.ctx.storage.setAlarm(record.expiresAt);
|
|
150
|
+
return false;
|
|
151
|
+
}
|
|
152
|
+
// Clear data first. If deleting the alarm fails, retry is harmless and
|
|
153
|
+
// must not restore a consumed/expired record.
|
|
154
|
+
await this.ctx.storage.deleteAll();
|
|
155
|
+
await this.ctx.storage.deleteAlarm();
|
|
156
|
+
return true;
|
|
157
|
+
}
|
|
158
|
+
catch {
|
|
159
|
+
// Cloudflare retries a throwing alarm up to six times. Do not swallow a
|
|
160
|
+
// failure or log the exception: storage errors can contain request data.
|
|
161
|
+
console.error({
|
|
162
|
+
component: "native-oauth-state",
|
|
163
|
+
objectId: this.ctx.id.toString(),
|
|
164
|
+
trigger,
|
|
165
|
+
event: info.retryCount >= NATIVE_OAUTH_ALARM_MAX_RETRIES
|
|
166
|
+
? "cleanup_retry_exhausted"
|
|
167
|
+
: "cleanup_failed",
|
|
168
|
+
retryCount: info.retryCount,
|
|
169
|
+
isRetry: info.isRetry,
|
|
170
|
+
});
|
|
171
|
+
throw new Error("Native OAuth state cleanup failed");
|
|
172
|
+
}
|
|
173
|
+
}
|
|
174
|
+
}
|
|
175
|
+
//# sourceMappingURL=native-oauth-state-do.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"native-oauth-state-do.js","sourceRoot":"","sources":["../../src/delegation-http/native-oauth-state-do.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CAAC;AACvE,MAAM,CAAC,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AAC9D,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAO,CAAC;AAC/C,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAClD,MAAM,CAAC,MAAM,4BAA4B,GAAG,2BAA2B,CAAC;AACxE,MAAM,CAAC,MAAM,2BAA2B,GAAG,4BAA4B,CAAC;AACxE,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAehD,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CACpC,MAA0C,EAC1C,SAA+B,EAC/B,KAAc,EACd,GAAW;IAEX,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,mEAAmE;QACnE,IAAI,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,KAAsC,CAAC;QACrD,IACE,CAAC,KAAK;YACN,KAAK,CAAC,OAAO,KAAK,CAAC;YACnB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;YACtC,KAAK,CAAC,SAAS,IAAI,GAAG;YACtB,KAAK,CAAC,SAAS,GAAG,GAAG,GAAG,uBAAuB;YAC/C,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;YACpC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE;YAC5B,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,2BAA2B;YACrD,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAE1C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,MAAM,EAAE;gBACN,OAAO,EAAE,CAAC;gBACV,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B;SACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACpC,IACE,MAAM,CAAC,OAAO,KAAK,CAAC;QACpB,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;QACvC,MAAM,CAAC,SAAS,IAAI,GAAG;QAEvB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC/C,+EAA+E;IAC/E,iFAAiF;IACjF,OAAO;QACL,MAAM,EAAE,GAAG;QACX,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;QACnD,IAAI,EAAE,MAAM;KACb,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAc;IAC9C,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE;QAC/B,MAAM;QACN,OAAO,EAAE;YACP,eAAe,EAAE,UAAU;YAC3B,CAAC,2BAA2B,CAAC,EAAE,4BAA4B;SAC5D;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,GAAuB,EACvB,OAAgB;IAEhB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC;IAC1E,IACE,GAAG,CAAC,MAAM,KAAK,qBAAqB;QACpC,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,4BAA4B,CAAC;QACtD,CAAC,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,OAAO,CAAC;QAE5E,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,MAAM,GAAG,2BAA2B,GAAG,GAAG;YAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1E,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,CAAC;QACH,4EAA4E;QAC5E,yEAAyE;QACzE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACzD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,CAC3B,sBAAsB,CACvB,CAAC;YACF,MAAM,UAAU,GAAG,sBAAsB,CACvC,OAAO,EACP,SAAS,EACT,KAAK,EACL,IAAI,CAAC,GAAG,EAAE,CACX,CAAC;YACF,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,GAAG,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBACzC,sEAAsE;YACxE,CAAC;iBAAM,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;gBAC7B,MAAM,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;gBACzD,uEAAuE;gBACvE,mEAAmE;gBACnE,IAAI,SAAS,KAAK,QAAQ;oBACxB,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IACI;IAA/B,YAA+B,GAAuB;QAAvB,QAAG,GAAH,GAAG,CAAoB;IAAG,CAAC;IAE1D,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IACE,GAAG,CAAC,MAAM,KAAK,qBAAqB;YACpC,GAAG,CAAC,QAAQ,KAAK,4BAA4B,GAAG,iBAAiB,EACjE,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAChC,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EACjC,QAAQ,CACT,CAAC;gBACF,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;oBACnC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,qBAAqB;iBACjE,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QACD,OAAO,8BAA8B,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,KAAK,CACT,OAAiD;QAC/C,UAAU,EAAE,CAAC;QACb,OAAO,EAAE,KAAK;KACf;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,IAA8C,EAC9C,OAA2B;QAE3B,IAAI,CAAC;YACH,0EAA0E;YAC1E,yEAAyE;YACzE,kEAAkE;YAClE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CACvC,sBAAsB,CACvB,CAAC;YACF,IACE,MAAM,EAAE,OAAO,KAAK,CAAC;gBACrB,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;gBACtC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAC7B,CAAC;gBACD,sEAAsE;gBACtE,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAClD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,uEAAuE;YACvE,8CAA8C;YAC9C,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,yEAAyE;YACzE,OAAO,CAAC,KAAK,CAAC;gBACZ,SAAS,EAAE,oBAAoB;gBAC/B,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE;gBAChC,OAAO;gBACP,KAAK,EACH,IAAI,CAAC,UAAU,IAAI,8BAA8B;oBAC/C,CAAC,CAAC,yBAAyB;oBAC3B,CAAC,CAAC,gBAAgB;gBACtB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;CACF"}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import { OAuthSecurityService } from "../services/oauth-security.service";
|
|
2
|
+
import type { CloudflareEnv } from "../types";
|
|
3
|
+
export declare const NATIVE_OAUTH_STORAGE_TIMEOUT_MS = 5000;
|
|
4
|
+
/** Capability check only. Creation separately verifies its atomic storage write. */
|
|
5
|
+
export declare function assertNativeOAuthStateReady(env: CloudflareEnv): Promise<void>;
|
|
6
|
+
/** Encrypted whole-state envelope, bound to its random key and deployment project.
|
|
7
|
+
* Uses the existing token cipher; native callers always require an explicit key.
|
|
8
|
+
*/
|
|
9
|
+
export declare function storeNativeOAuthState(env: CloudflareEnv, security: OAuthSecurityService, state: string, data: Record<string, unknown>, expiresAt: number): Promise<void>;
|
|
10
|
+
/** No legacy/KV fallback. The durable consume commits before any decryption. */
|
|
11
|
+
export declare function consumeNativeOAuthState(env: CloudflareEnv, state: string): Promise<Record<string, unknown> | null>;
|
|
12
|
+
//# sourceMappingURL=native-oauth-state.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"native-oauth-state.d.ts","sourceRoot":"","sources":["../../src/delegation-http/native-oauth-state.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAU9C,eAAO,MAAM,+BAA+B,OAAQ,CAAC;AAoFrD,oFAAoF;AACpF,wBAAsB,2BAA2B,CAAC,GAAG,EAAE,aAAa,iBAUnE;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,aAAa,EAClB,QAAQ,EAAE,oBAAoB,EAC9B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,gFAAgF;AAChF,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,aAAa,EAClB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAkCzC"}
|
|
@@ -0,0 +1,131 @@
|
|
|
1
|
+
import { OAuthSecurityService } from "../services/oauth-security.service";
|
|
2
|
+
import { NATIVE_OAUTH_STATE_PREFIX } from "./constants";
|
|
3
|
+
import { sha256Hex } from "./hash";
|
|
4
|
+
import { NATIVE_OAUTH_INTERNAL_PREFIX, NATIVE_OAUTH_MAX_CIPHERTEXT, NATIVE_OAUTH_PROFILE_HEADER, NATIVE_OAUTH_STORAGE_PROFILE, } from "./native-oauth-state-do";
|
|
5
|
+
export const NATIVE_OAUTH_STORAGE_TIMEOUT_MS = 5_000;
|
|
6
|
+
function isObject(value) {
|
|
7
|
+
return typeof value === "object" && value !== null && !Array.isArray(value);
|
|
8
|
+
}
|
|
9
|
+
function parseObject(text) {
|
|
10
|
+
try {
|
|
11
|
+
const value = JSON.parse(text);
|
|
12
|
+
return isObject(value) ? value : null;
|
|
13
|
+
}
|
|
14
|
+
catch {
|
|
15
|
+
return null;
|
|
16
|
+
}
|
|
17
|
+
}
|
|
18
|
+
async function callStateStore(stub, operation, body) {
|
|
19
|
+
const controller = new AbortController();
|
|
20
|
+
let timer;
|
|
21
|
+
const deadline = new Promise((_, reject) => {
|
|
22
|
+
timer = setTimeout(() => {
|
|
23
|
+
controller.abort();
|
|
24
|
+
reject(new Error("Native OAuth state storage unavailable"));
|
|
25
|
+
}, NATIVE_OAUTH_STORAGE_TIMEOUT_MS);
|
|
26
|
+
});
|
|
27
|
+
try {
|
|
28
|
+
return await Promise.race([
|
|
29
|
+
(async () => {
|
|
30
|
+
const response = await stub.fetch(`https://do.internal${NATIVE_OAUTH_INTERNAL_PREFIX}${operation}`, {
|
|
31
|
+
method: "POST",
|
|
32
|
+
headers: { "Content-Type": "application/json" },
|
|
33
|
+
body,
|
|
34
|
+
// Bridge the DOM and workers-types AbortSignal declarations.
|
|
35
|
+
signal: controller.signal,
|
|
36
|
+
});
|
|
37
|
+
// The deadline includes the response body, not only its headers.
|
|
38
|
+
const text = await response.text();
|
|
39
|
+
if (text.length > NATIVE_OAUTH_MAX_CIPHERTEXT + 128)
|
|
40
|
+
throw new Error("Native OAuth state response too large");
|
|
41
|
+
if (response.status < 300 &&
|
|
42
|
+
response.headers.get(NATIVE_OAUTH_PROFILE_HEADER) !==
|
|
43
|
+
NATIVE_OAUTH_STORAGE_PROFILE)
|
|
44
|
+
throw new Error("Native OAuth state storage unsupported");
|
|
45
|
+
return {
|
|
46
|
+
status: response.status,
|
|
47
|
+
record: operation === "consume" && response.status === 200
|
|
48
|
+
? parseObject(text)
|
|
49
|
+
: undefined,
|
|
50
|
+
};
|
|
51
|
+
})(),
|
|
52
|
+
deadline,
|
|
53
|
+
]);
|
|
54
|
+
}
|
|
55
|
+
finally {
|
|
56
|
+
clearTimeout(timer);
|
|
57
|
+
}
|
|
58
|
+
}
|
|
59
|
+
function stateStub(env, state) {
|
|
60
|
+
if (!env.NATIVE_OAUTH_STATE ||
|
|
61
|
+
!env.OAUTH_ENCRYPTION_SECRET ||
|
|
62
|
+
!env.CHECKPOINT_PROJECT_ID ||
|
|
63
|
+
!state.startsWith(NATIVE_OAUTH_STATE_PREFIX) ||
|
|
64
|
+
!/^[A-Za-z0-9_-]{43}$/.test(state.slice(NATIVE_OAUTH_STATE_PREFIX.length)))
|
|
65
|
+
throw new Error("Native OAuth secure state unavailable");
|
|
66
|
+
const stateHash = sha256Hex(state);
|
|
67
|
+
return {
|
|
68
|
+
stateHash,
|
|
69
|
+
stub: env.NATIVE_OAUTH_STATE.get(env.NATIVE_OAUTH_STATE.idFromName(`native-oauth:${stateHash}`)),
|
|
70
|
+
};
|
|
71
|
+
}
|
|
72
|
+
/** Capability check only. Creation separately verifies its atomic storage write. */
|
|
73
|
+
export async function assertNativeOAuthStateReady(env) {
|
|
74
|
+
const namespace = env.NATIVE_OAUTH_STATE;
|
|
75
|
+
if (!namespace)
|
|
76
|
+
throw new Error("Native OAuth secure state unavailable");
|
|
77
|
+
const response = await callStateStore(namespace.get(namespace.idFromName("native-oauth:readiness:v1")), "ready", "{}");
|
|
78
|
+
if (response.status !== 200)
|
|
79
|
+
throw new Error("Native OAuth state storage unavailable");
|
|
80
|
+
}
|
|
81
|
+
/** Encrypted whole-state envelope, bound to its random key and deployment project.
|
|
82
|
+
* Uses the existing token cipher; native callers always require an explicit key.
|
|
83
|
+
*/
|
|
84
|
+
export async function storeNativeOAuthState(env, security, state, data, expiresAt) {
|
|
85
|
+
const { stateHash, stub } = stateStub(env, state);
|
|
86
|
+
const payload = JSON.stringify({
|
|
87
|
+
version: 1,
|
|
88
|
+
stateHash,
|
|
89
|
+
deploymentProjectId: env.CHECKPOINT_PROJECT_ID,
|
|
90
|
+
expiresAt,
|
|
91
|
+
data,
|
|
92
|
+
});
|
|
93
|
+
if (new TextEncoder().encode(payload).length > 24_000)
|
|
94
|
+
throw new Error("Native OAuth state too large");
|
|
95
|
+
const ciphertext = await security.encryptToken(payload);
|
|
96
|
+
const response = await callStateStore(stub, "create", JSON.stringify({ version: 1, ciphertext, expiresAt }));
|
|
97
|
+
if (response.status !== 201)
|
|
98
|
+
throw new Error("Native OAuth state storage unavailable");
|
|
99
|
+
}
|
|
100
|
+
/** No legacy/KV fallback. The durable consume commits before any decryption. */
|
|
101
|
+
export async function consumeNativeOAuthState(env, state) {
|
|
102
|
+
const { stateHash, stub } = stateStub(env, state);
|
|
103
|
+
const response = await callStateStore(stub, "consume", "{}");
|
|
104
|
+
if (response.status !== 200 || !response.record)
|
|
105
|
+
return null;
|
|
106
|
+
const record = response.record;
|
|
107
|
+
if (record.version !== 1 ||
|
|
108
|
+
typeof record.expiresAt !== "number" ||
|
|
109
|
+
!Number.isSafeInteger(record.expiresAt) ||
|
|
110
|
+
record.expiresAt <= Date.now() ||
|
|
111
|
+
typeof record.ciphertext !== "string" ||
|
|
112
|
+
record.ciphertext.length > NATIVE_OAUTH_MAX_CIPHERTEXT)
|
|
113
|
+
return null;
|
|
114
|
+
const storage = env.DELEGATION_STORAGE;
|
|
115
|
+
if (!storage)
|
|
116
|
+
return null;
|
|
117
|
+
const security = new OAuthSecurityService(storage, env.OAUTH_ENCRYPTION_SECRET);
|
|
118
|
+
const envelope = parseObject(await security.decryptToken(record.ciphertext));
|
|
119
|
+
if (!envelope ||
|
|
120
|
+
envelope.version !== 1 ||
|
|
121
|
+
envelope.stateHash !== stateHash ||
|
|
122
|
+
envelope.deploymentProjectId !== env.CHECKPOINT_PROJECT_ID ||
|
|
123
|
+
envelope.expiresAt !== record.expiresAt ||
|
|
124
|
+
record.expiresAt <= Date.now() ||
|
|
125
|
+
!isObject(envelope.data) ||
|
|
126
|
+
!isObject(envelope.data.native) ||
|
|
127
|
+
envelope.data.native.expiresAt !== envelope.expiresAt)
|
|
128
|
+
return null;
|
|
129
|
+
return envelope.data;
|
|
130
|
+
}
|
|
131
|
+
//# sourceMappingURL=native-oauth-state.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"native-oauth-state.js","sourceRoot":"","sources":["../../src/delegation-http/native-oauth-state.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AAEjC,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,CAAC;AAErD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,IAAuB,EACvB,SAAyC,EACzC,IAAY;IAEZ,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,KAAgD,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAChD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;QAC9D,CAAC,EAAE,+BAA+B,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,CAAC,KAAK,IAAI,EAAE;gBACV,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,sBAAsB,4BAA4B,GAAG,SAAS,EAAE,EAChE;oBACE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI;oBACJ,6DAA6D;oBAC7D,MAAM,EAAE,UAAU,CAAC,MAAuC;iBAC3D,CACF,CAAC;gBACF,iEAAiE;gBACjE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,MAAM,GAAG,2BAA2B,GAAG,GAAG;oBACjD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC3D,IACE,QAAQ,CAAC,MAAM,GAAG,GAAG;oBACrB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;wBAC/C,4BAA4B;oBAE9B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBAC5D,OAAO;oBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,MAAM,EACJ,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;wBAChD,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC;wBACnB,CAAC,CAAC,SAAS;iBAChB,CAAC;YACJ,CAAC,CAAC,EAAE;YACJ,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAkB,EAAE,KAAa;IAClD,IACE,CAAC,GAAG,CAAC,kBAAkB;QACvB,CAAC,GAAG,CAAC,uBAAuB;QAC5B,CAAC,GAAG,CAAC,qBAAqB;QAC1B,CAAC,KAAK,CAAC,UAAU,CAAC,yBAAyB,CAAC;QAC5C,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAE1E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,OAAO;QACL,SAAS;QACT,IAAI,EAAE,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAC9B,GAAG,CAAC,kBAAkB,CAAC,UAAU,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAC/D;KACF,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,GAAkB;IAClE,MAAM,SAAS,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACzC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,MAAM,cAAc,CACnC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,EAChE,OAAO,EACP,IAAI,CACL,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QACzB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAkB,EAClB,QAA8B,EAC9B,KAAa,EACb,IAA6B,EAC7B,SAAiB;IAEjB,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,OAAO,EAAE,CAAC;QACV,SAAS;QACT,mBAAmB,EAAE,GAAG,CAAC,qBAAqB;QAC9C,SAAS;QACT,IAAI;KACL,CAAC,CAAC;IACH,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM;QACnD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,cAAc,CACnC,IAAI,EACJ,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CACtD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QACzB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAC9D,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAkB,EAClB,KAAa;IAEb,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,IACE,MAAM,CAAC,OAAO,KAAK,CAAC;QACpB,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;QACvC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QAC9B,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,2BAA2B;QAEtD,OAAO,IAAI,CAAC;IACd,MAAM,OAAO,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,oBAAoB,CACvC,OAAO,EACP,GAAG,CAAC,uBAAuB,CAC5B,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7E,IACE,CAAC,QAAQ;QACT,QAAQ,CAAC,OAAO,KAAK,CAAC;QACtB,QAAQ,CAAC,SAAS,KAAK,SAAS;QAChC,QAAQ,CAAC,mBAAmB,KAAK,GAAG,CAAC,qBAAqB;QAC1D,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;QACvC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QAC9B,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;QAErD,OAAO,IAAI,CAAC;IACd,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"native-oauth.d.ts","sourceRoot":"","sources":["../../src/delegation-http/native-oauth.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;
|
|
1
|
+
{"version":3,"file":"native-oauth.d.ts","sourceRoot":"","sources":["../../src/delegation-http/native-oauth.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAgB9C,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACzB,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E;AAsKD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,oBAAoB,EACzB,QAAQ,UAAO,GACd,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAkFzD;AAED,oFAAoF;AACpF,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,aAAa,EAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,QAAQ,CAAC,CAmKnB;AAED,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,oBAAoB,EACzB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAA;CAAE,GAAG,IAAI,CAAC,CA6BrD"}
|