@kya-os/mcp-i-cloudflare 1.14.7 → 1.14.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +7 -7
- package/dist/adapter.d.ts.map +1 -1
- package/dist/adapter.js +8 -4
- package/dist/adapter.js.map +1 -1
- package/dist/agent.d.ts +21 -4
- package/dist/agent.d.ts.map +1 -1
- package/dist/agent.js +78 -39
- package/dist/agent.js.map +1 -1
- package/dist/app.d.ts.map +1 -1
- package/dist/app.js +10 -4
- package/dist/app.js.map +1 -1
- package/dist/config.d.ts +99 -4
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +15 -11
- package/dist/config.js.map +1 -1
- package/dist/constants.d.ts +3 -3
- package/dist/constants.js +3 -3
- package/dist/delegation-http/anchor-registration.d.ts +2 -2
- package/dist/delegation-http/anchor-registration.js +4 -4
- package/dist/delegation-http/anchor-registration.js.map +1 -1
- package/dist/delegation-http/consent-anchor-bridge.js +3 -3
- package/dist/delegation-http/consent-anchor-bridge.js.map +1 -1
- package/dist/delegation-http/credential-consent.d.ts +2 -2
- package/dist/delegation-http/credential-consent.js +10 -10
- package/dist/delegation-http/credential-consent.js.map +1 -1
- package/dist/delegation-http/native-http.js +5 -5
- package/dist/delegation-http/native-http.js.map +1 -1
- package/dist/delegation-http/native-oauth-state-do.d.ts +43 -0
- package/dist/delegation-http/native-oauth-state-do.d.ts.map +1 -0
- package/dist/delegation-http/native-oauth-state-do.js +175 -0
- package/dist/delegation-http/native-oauth-state-do.js.map +1 -0
- package/dist/delegation-http/native-oauth-state.d.ts +12 -0
- package/dist/delegation-http/native-oauth-state.d.ts.map +1 -0
- package/dist/delegation-http/native-oauth-state.js +131 -0
- package/dist/delegation-http/native-oauth-state.js.map +1 -0
- package/dist/delegation-http/native-oauth.d.ts.map +1 -1
- package/dist/delegation-http/native-oauth.js +22 -17
- package/dist/delegation-http/native-oauth.js.map +1 -1
- package/dist/delegation-http/register.js +1 -1
- package/dist/delegation-http/register.js.map +1 -1
- package/dist/delegation-http/registrar-auth.d.ts +1 -1
- package/dist/delegation-http/registrar-auth.js +2 -2
- package/dist/delegation-http/registrar-auth.js.map +1 -1
- package/dist/delegation-http/remote-issuer.d.ts +1 -1
- package/dist/delegation-http/remote-issuer.d.ts.map +1 -1
- package/dist/delegation-http/remote-issuer.js +4 -4
- package/dist/delegation-http/remote-issuer.js.map +1 -1
- package/dist/helpers/env-mapper.d.ts +2 -2
- package/dist/helpers/env-mapper.d.ts.map +1 -1
- package/dist/helpers/env-mapper.js +21 -14
- package/dist/helpers/env-mapper.js.map +1 -1
- package/dist/index.d.ts +3 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +4 -3
- package/dist/index.js.map +1 -1
- package/dist/needs-authorization-meta.d.ts +5 -0
- package/dist/needs-authorization-meta.d.ts.map +1 -1
- package/dist/needs-authorization-meta.js +9 -0
- package/dist/needs-authorization-meta.js.map +1 -1
- package/dist/proof-generator.d.ts +3 -3
- package/dist/proof-generator.js +4 -4
- package/dist/proof-generator.js.map +1 -1
- package/dist/runtime/invoke-tool-handler.d.ts +26 -1
- package/dist/runtime/invoke-tool-handler.d.ts.map +1 -1
- package/dist/runtime/invoke-tool-handler.js +32 -0
- package/dist/runtime/invoke-tool-handler.js.map +1 -1
- package/dist/runtime/oauth-handler.d.ts +6 -4
- package/dist/runtime/oauth-handler.d.ts.map +1 -1
- package/dist/runtime/oauth-handler.js +39 -35
- package/dist/runtime/oauth-handler.js.map +1 -1
- package/dist/runtime/oidc/authorize-url.js +2 -2
- package/dist/runtime/oidc/authorize-url.js.map +1 -1
- package/dist/runtime/oidc/token-exchange.d.ts +1 -1
- package/dist/runtime/oidc/token-exchange.d.ts.map +1 -1
- package/dist/runtime/tool-activity.d.ts +56 -0
- package/dist/runtime/tool-activity.d.ts.map +1 -0
- package/dist/runtime/tool-activity.js +55 -0
- package/dist/runtime/tool-activity.js.map +1 -0
- package/dist/runtime.d.ts +30 -13
- package/dist/runtime.d.ts.map +1 -1
- package/dist/runtime.js +71 -18
- package/dist/runtime.js.map +1 -1
- package/dist/server.d.ts.map +1 -1
- package/dist/server.js +17 -15
- package/dist/server.js.map +1 -1
- package/dist/services/admin.service.d.ts +1 -1
- package/dist/services/admin.service.js +9 -9
- package/dist/services/admin.service.js.map +1 -1
- package/dist/services/consent-config.service.d.ts +5 -5
- package/dist/services/consent-config.service.js +10 -10
- package/dist/services/consent-config.service.js.map +1 -1
- package/dist/services/consent-templates/base/components.d.ts +1 -1
- package/dist/services/consent-templates/base/components.js +1 -1
- package/dist/services/consent-templates/base/styles.d.ts +2 -2
- package/dist/services/consent-templates/base/styles.js +4 -4
- package/dist/services/consent-templates/base/styles.js.map +1 -1
- package/dist/services/consent-templates/helpers.d.ts +3 -3
- package/dist/services/consent-templates/helpers.js +4 -4
- package/dist/services/consent-templates/helpers.js.map +1 -1
- package/dist/services/consent-templates/index.d.ts +1 -1
- package/dist/services/consent-templates/index.js +1 -1
- package/dist/services/consent-templates/modes/credentials.template.d.ts +5 -5
- package/dist/services/consent-templates/modes/credentials.template.js +9 -9
- package/dist/services/consent-templates/modes/credentials.template.js.map +1 -1
- package/dist/services/consent-templates/registry.d.ts +3 -3
- package/dist/services/consent-templates/registry.js +3 -3
- package/dist/services/consent-templates/template-renderer.d.ts +5 -3
- package/dist/services/consent-templates/template-renderer.d.ts.map +1 -1
- package/dist/services/consent-templates/template-renderer.js +5 -3
- package/dist/services/consent-templates/template-renderer.js.map +1 -1
- package/dist/services/consent-templates/types.d.ts +4 -4
- package/dist/services/consent-templates/types.js +2 -2
- package/dist/services/consent.service.d.ts +43 -23
- package/dist/services/consent.service.d.ts.map +1 -1
- package/dist/services/consent.service.js +178 -100
- package/dist/services/consent.service.js.map +1 -1
- package/dist/services/delegation-mandate.d.ts +40 -0
- package/dist/services/delegation-mandate.d.ts.map +1 -0
- package/dist/services/delegation-mandate.js +46 -0
- package/dist/services/delegation-mandate.js.map +1 -0
- package/dist/services/delegation.service.d.ts +3 -3
- package/dist/services/delegation.service.js +10 -10
- package/dist/services/delegation.service.js.map +1 -1
- package/dist/services/kya-os-events.service.d.ts +15 -3
- package/dist/services/kya-os-events.service.d.ts.map +1 -1
- package/dist/services/kya-os-events.service.js +14 -4
- package/dist/services/kya-os-events.service.js.map +1 -1
- package/dist/services/proof-batch-queue.d.ts +3 -3
- package/dist/services/proof-batch-queue.d.ts.map +1 -1
- package/dist/services/proof-batch-queue.js +9 -9
- package/dist/services/proof-batch-queue.js.map +1 -1
- package/dist/services/proof.service.d.ts +63 -4
- package/dist/services/proof.service.d.ts.map +1 -1
- package/dist/services/proof.service.js +114 -27
- package/dist/services/proof.service.js.map +1 -1
- package/dist/services/provider-loader.service.d.ts +6 -6
- package/dist/services/provider-loader.service.d.ts.map +1 -1
- package/dist/services/provider-loader.service.js +4 -4
- package/dist/services/provider-loader.service.js.map +1 -1
- package/dist/services/vault-resolver.d.ts +4 -4
- package/dist/services/vault-resolver.d.ts.map +1 -1
- package/dist/services/vault-resolver.js +2 -2
- package/dist/types.d.ts +6 -4
- package/dist/types.d.ts.map +1 -1
- package/dist/utils/day0-config.d.ts +1 -1
- package/dist/utils/day0-config.js +1 -1
- package/dist/utils/env-secret-resolver.d.ts +1 -1
- package/dist/utils/env-secret-resolver.js +1 -1
- package/package.json +5 -5
|
@@ -139,13 +139,13 @@ function buildCredentialConfig(entry) {
|
|
|
139
139
|
* documented follow-up.
|
|
140
140
|
*/
|
|
141
141
|
export async function resolveAnchorCredentialProvider(env, _scopes, options) {
|
|
142
|
-
const apiKey = env.
|
|
143
|
-
const projectId = env.
|
|
142
|
+
const apiKey = env.CHECKPOINT_API_KEY;
|
|
143
|
+
const projectId = env.CHECKPOINT_PROJECT_ID;
|
|
144
144
|
// No checkpoint link → nothing to authenticate against → legitimately
|
|
145
145
|
// consent-only (this is not an error condition).
|
|
146
146
|
if (!apiKey || !projectId)
|
|
147
147
|
return { status: "none" };
|
|
148
|
-
const agentShieldUrl = env.
|
|
148
|
+
const agentShieldUrl = env.CHECKPOINT_API_URL || DEFAULT_AGENTSHIELD_URL;
|
|
149
149
|
let providersMap;
|
|
150
150
|
let configuredProvider;
|
|
151
151
|
try {
|
|
@@ -225,13 +225,13 @@ export async function resolveAnchorCredentialProvider(env, _scopes, options) {
|
|
|
225
225
|
* Resolve a signed-in customer to a checkpoint `user_did` via
|
|
226
226
|
* `/api/v1/bouncer/identity/resolve`. Mirrors
|
|
227
227
|
* `ConsentService.resolveCredentialIdentity` — it depends only on `env`
|
|
228
|
-
* (`
|
|
228
|
+
* (`CHECKPOINT_API_URL` + `CHECKPOINT_API_KEY`), never session/audit state, so
|
|
229
229
|
* it lives here as a free function the bridge can call directly. Returns
|
|
230
230
|
* `{ success: false }` (never throws) on any failure so the caller fails closed.
|
|
231
231
|
*/
|
|
232
232
|
export async function resolveCredentialIdentity(env, params) {
|
|
233
|
-
const agentShieldUrl = env.
|
|
234
|
-
const apiKey = env.
|
|
233
|
+
const agentShieldUrl = env.CHECKPOINT_API_URL || DEFAULT_AGENTSHIELD_URL;
|
|
234
|
+
const apiKey = env.CHECKPOINT_API_KEY;
|
|
235
235
|
if (!apiKey)
|
|
236
236
|
return { success: false };
|
|
237
237
|
try {
|
|
@@ -292,15 +292,15 @@ export function sidToDelegationUuid(sid) {
|
|
|
292
292
|
* path sends (`oauth-handler.ts`) against checkpoint's `notifyDelegationSchema`.
|
|
293
293
|
*
|
|
294
294
|
* No-ops (returns without a request) when the deployment has no
|
|
295
|
-
* `
|
|
295
|
+
* `CHECKPOINT_API_KEY` or `CHECKPOINT_PROJECT_ID` — a self-hosted anchor with
|
|
296
296
|
* no checkpoint link has nothing to report to.
|
|
297
297
|
*/
|
|
298
298
|
export async function notifyDelegation(env, params) {
|
|
299
|
-
const apiKey = env.
|
|
300
|
-
const projectId = env.
|
|
299
|
+
const apiKey = env.CHECKPOINT_API_KEY;
|
|
300
|
+
const projectId = env.CHECKPOINT_PROJECT_ID;
|
|
301
301
|
if (!apiKey || !projectId)
|
|
302
302
|
return;
|
|
303
|
-
const agentShieldUrl = env.
|
|
303
|
+
const agentShieldUrl = env.CHECKPOINT_API_URL || DEFAULT_AGENTSHIELD_URL;
|
|
304
304
|
try {
|
|
305
305
|
const response = await fetch(`${agentShieldUrl}/api/v1/bouncer/delegations/notify`, {
|
|
306
306
|
method: "POST",
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"credential-consent.js","sourceRoot":"","sources":["../../src/delegation-http/credential-consent.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAmCnC,SAAS,UAAU,CACjB,KAAuB,EACvB,KAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,UAAU,CACjB,KAAuB,EACvB,KAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,6EAA6E;AAC7E,SAAS,iBAAiB,CAAC,KAAmC;IAC5D,OAAO,CACL,CAAC,CAAC,KAAK;QACP,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;QAC1D,KAAK,CAAC,UAAU,KAAK,KAAK,CAC3B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CACxB,GAAiC;IAEjC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,cAAc,CAAC;IAC9D,IAAI,CAAC,IAAI,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3D,IACE,OAAO,aAAa,KAAK,QAAQ;QACjC,OAAO,aAAa,KAAK,SAAS;QAClC,OAAO,aAAa,KAAK,QAAQ,EACjC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAC5B,GAAiC;IAEjC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,QAAQ,GAAG,UAAU,CACzB,GAAG,EACH,UAAU,EACV,UAAU,CACX,CAAC;IACF,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,UAAU,CAChC,GAAG,EACH,iBAAiB,EACjB,kBAAkB,CACnB,CAAC;IACF,MAAM,kBAAkB,GAAG,UAAU,CACnC,GAAG,EACH,oBAAoB,EACpB,sBAAsB,CACvB,CAAC;IACF,MAAM,iBAAiB,GAAG,UAAU,CAClC,GAAG,EACH,mBAAmB,EACnB,qBAAqB,CACkB,CAAC;IAC1C,MAAM,kBAAkB,GAAG,UAAU,CACnC,GAAG,EACH,oBAAoB,EACpB,sBAAsB,CACvB,CAAC;IACF,MAAM,gBAAgB,GAAG,UAAU,CACjC,GAAG,EACH,kBAAkB,EAClB,oBAAoB,CACrB,CAAC;IACF,IACE,CAAC,QAAQ;QACT,CAAC,SAAS;QACV,CAAC,eAAe;QAChB,CAAC,kBAAkB;QACnB,CAAC,iBAAiB;QAClB,CAAC,kBAAkB;QACnB,CAAC,gBAAgB,EACjB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAC5B,KAAuB;IAEvB,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;IACxE,MAAM,mBAAmB,GAAG,UAAU,CACpC,KAAK,EACL,qBAAqB,EACrB,uBAAuB,CACxB,CAAC;IACF,MAAM,iBAAiB,GAAG,UAAU,CAClC,KAAK,EACL,gBAAgB,EAChB,iBAAiB,CAClB,CAAC;IACF,IAAI,CAAC,YAAY,IAAI,CAAC,mBAAmB,IAAI,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAE7E,MAAM,YAAY,GAAG,UAAU,CAC7B,iBAAiB,EACjB,cAAc,EACd,eAAe,CAChB,CAAC;IACF,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAE/B,MAAM,cAAc,GAA+C;QACjE,YAAY;QACZ,MAAM,EAAE,UAAU,CAAC,iBAAiB,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC1D,SAAS,EAAE,UAAU,CAAC,iBAAiB,EAAE,WAAW,EAAE,YAAY,CAAC;QACnE,eAAe,EAAE,UAAU,CACzB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,CACpB;QACD,SAAS,EAAE,UAAU,CAAC,iBAAiB,EAAE,WAAW,EAAE,YAAY,CAAC;KACpE,CAAC;IAEF,kEAAkE;IAClE,6EAA6E;IAC7E,wEAAwE;IACxE,gFAAgF;IAChF,MAAM,YAAY,GAAG,iBAAiB,CACpC,UAAU,CAAmB,KAAK,EAAE,cAAc,EAAE,eAAe,CAAC,CACrE,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CACxB,KAAK,EACL,SAAS,EACT,SAAS,CACV,CAAC;IACF,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,aAAa,CAEnD,CAAC;IACd,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;IACxE,8EAA8E;IAC9E,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,gBAAgB,GAAG,qBAAqB,CAC5C,UAAU,CAAmB,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAC7E,CAAC;IAEF,OAAO;QACL,+EAA+E;QAC/E,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC;QAC7D,YAAY;QACZ,mBAAmB;QACnB,cAAc;QACd,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,GAAkB,EAClB,OAAiB,EACjB,OAAiD;IAEjD,MAAM,MAAM,GAAG,GAAG,CAAC,mBAAmB,CAAC;IACvC,MAAM,SAAS,GAAG,GAAG,CAAC,sBAAsB,CAAC;IAC7C,sEAAsE;IACtE,iDAAiD;IACjD,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAErD,MAAM,cAAc,GAAG,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,CAAC;IAC1E,IAAI,YAA8C,CAAC;IACnD,IAAI,kBAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,cAAc,4BAA4B,kBAAkB,CAC7D,SAAS,CACV,YAAY,EACb;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,cAAc,EAAE,kBAAkB;aACnC;SACF,CACF,CAAC;QACF,2EAA2E;QAC3E,6DAA6D;QAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAOlC,CAAC;QACF,wEAAwE;QACxE,2EAA2E;QAC3E,0EAA0E;QAC1E,gDAAgD;QAChD,IACE,IAAI,CAAC,OAAO,KAAK,IAAI;YACrB,CAAC,IAAI,CAAC,IAAI;YACV,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,QAAQ;YACvC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,EAC5B,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACnC,CAAC;QACD,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAA6C,CAAC;QACvE,kBAAkB;YAChB,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACnC,CAAC;IAED,2EAA2E;IAC3E,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,OAAO,EAAE,yBAAyB,IAAI,kBAAkB,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAC3C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9D,CAAC;IAED,gFAAgF;IAChF,+EAA+E;IAC/E,8DAA8D;IAC9D,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAC5D,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CACpC,CAAC;IACF,6EAA6E;IAC7E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAE1D,iFAAiF;IACjF,+DAA+D;IAC/D,MAAM,QAAQ,GACZ,kBAAkB,IAAI,iBAAiB,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC;QACvE,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;YAC1B,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,IAAI,CAAC;IACb,4EAA4E;IAC5E,4CAA4C;IAC5C,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAEhD,MAAM,MAAM,GAAG,qBAAqB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,+EAA+E;IAC/E,0EAA0E;IAC1E,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAE9C,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE;YACR,UAAU,EAAE,QAAQ;YACpB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,QAAQ;YAC3C,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAaD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAkB,EAClB,MAAuC;IAEvC,MAAM,cAAc,GAAG,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,CAAC;IAC1E,MAAM,MAAM,GAAG,GAAG,CAAC,mBAAmB,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,cAAc,kCAAkC,EACnD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,WAAW,EAAE,MAAM;gBACnB,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,iBAAiB,EAAE;oBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,OAAO,EAAE,MAAM,CAAC,MAAM;oBACtB,KAAK,EAAE,MAAM,CAAC,SAAS;oBACvB,IAAI,EAAE,MAAM,CAAC,eAAe;iBAC7B;aACF,CAAC;SACH,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqC,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC;QACrC,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,iEAAiE;IACjE,sDAAsD;IACtD,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY;IACzB,6EAA6E;IAC7E,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CACrE,EAAE,EACF,EAAE,CACH,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AACzB,CAAC;AA0BD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAkB,EAClB,MAA8B;IAE9B,MAAM,MAAM,GAAG,GAAG,CAAC,mBAAmB,CAAC;IACvC,MAAM,SAAS,GAAG,GAAG,CAAC,sBAAsB,CAAC;IAC7C,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;QAAE,OAAO;IAElC,MAAM,cAAc,GAAG,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,cAAc,oCAAoC,EACrD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,WAAW,EAAE,MAAM;gBACnB,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,aAAa,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC;gBAC9C,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;gBACzC,QAAQ,EAAE,MAAM,CAAC,OAAO;gBACxB,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,SAAS;gBACnC,eAAe,EAAE,MAAM,CAAC,cAAc,IAAI,SAAS;gBACnD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;gBACzC,QAAQ,EAAE;oBACR,MAAM,EAAE,sBAAsB;oBAC9B,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,GAAG,MAAM,CAAC,QAAQ;iBACnB;aACF,CAAC;SACH,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CACV,uDAAuD,QAAQ,CAAC,MAAM,QAAQ,MAAM,CAAC,GAAG,EAAE,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CACV,uDACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,QAAQ,MAAM,CAAC,GAAG,EAAE,CACrB,CAAC;IACJ,CAAC;AACH,CAAC"}
|
|
1
|
+
{"version":3,"file":"credential-consent.js","sourceRoot":"","sources":["../../src/delegation-http/credential-consent.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAmCnC,SAAS,UAAU,CACjB,KAAuB,EACvB,KAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,UAAU,CACjB,KAAuB,EACvB,KAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,6EAA6E;AAC7E,SAAS,iBAAiB,CAAC,KAAmC;IAC5D,OAAO,CACL,CAAC,CAAC,KAAK;QACP,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;QAC1D,KAAK,CAAC,UAAU,KAAK,KAAK,CAC3B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CACxB,GAAiC;IAEjC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,cAAc,CAAC;IAC9D,IAAI,CAAC,IAAI,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3D,IACE,OAAO,aAAa,KAAK,QAAQ;QACjC,OAAO,aAAa,KAAK,SAAS;QAClC,OAAO,aAAa,KAAK,QAAQ,EACjC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAC5B,GAAiC;IAEjC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,QAAQ,GAAG,UAAU,CACzB,GAAG,EACH,UAAU,EACV,UAAU,CACX,CAAC;IACF,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,UAAU,CAChC,GAAG,EACH,iBAAiB,EACjB,kBAAkB,CACnB,CAAC;IACF,MAAM,kBAAkB,GAAG,UAAU,CACnC,GAAG,EACH,oBAAoB,EACpB,sBAAsB,CACvB,CAAC;IACF,MAAM,iBAAiB,GAAG,UAAU,CAClC,GAAG,EACH,mBAAmB,EACnB,qBAAqB,CACkB,CAAC;IAC1C,MAAM,kBAAkB,GAAG,UAAU,CACnC,GAAG,EACH,oBAAoB,EACpB,sBAAsB,CACvB,CAAC;IACF,MAAM,gBAAgB,GAAG,UAAU,CACjC,GAAG,EACH,kBAAkB,EAClB,oBAAoB,CACrB,CAAC;IACF,IACE,CAAC,QAAQ;QACT,CAAC,SAAS;QACV,CAAC,eAAe;QAChB,CAAC,kBAAkB;QACnB,CAAC,iBAAiB;QAClB,CAAC,kBAAkB;QACnB,CAAC,gBAAgB,EACjB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAC5B,KAAuB;IAEvB,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;IACxE,MAAM,mBAAmB,GAAG,UAAU,CACpC,KAAK,EACL,qBAAqB,EACrB,uBAAuB,CACxB,CAAC;IACF,MAAM,iBAAiB,GAAG,UAAU,CAClC,KAAK,EACL,gBAAgB,EAChB,iBAAiB,CAClB,CAAC;IACF,IAAI,CAAC,YAAY,IAAI,CAAC,mBAAmB,IAAI,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAE7E,MAAM,YAAY,GAAG,UAAU,CAC7B,iBAAiB,EACjB,cAAc,EACd,eAAe,CAChB,CAAC;IACF,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAE/B,MAAM,cAAc,GAA+C;QACjE,YAAY;QACZ,MAAM,EAAE,UAAU,CAAC,iBAAiB,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC1D,SAAS,EAAE,UAAU,CAAC,iBAAiB,EAAE,WAAW,EAAE,YAAY,CAAC;QACnE,eAAe,EAAE,UAAU,CACzB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,CACpB;QACD,SAAS,EAAE,UAAU,CAAC,iBAAiB,EAAE,WAAW,EAAE,YAAY,CAAC;KACpE,CAAC;IAEF,kEAAkE;IAClE,6EAA6E;IAC7E,wEAAwE;IACxE,gFAAgF;IAChF,MAAM,YAAY,GAAG,iBAAiB,CACpC,UAAU,CAAmB,KAAK,EAAE,cAAc,EAAE,eAAe,CAAC,CACrE,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CACxB,KAAK,EACL,SAAS,EACT,SAAS,CACV,CAAC;IACF,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,aAAa,CAEnD,CAAC;IACd,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;IACxE,8EAA8E;IAC9E,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,gBAAgB,GAAG,qBAAqB,CAC5C,UAAU,CAAmB,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAC7E,CAAC;IAEF,OAAO;QACL,+EAA+E;QAC/E,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC;QAC7D,YAAY;QACZ,mBAAmB;QACnB,cAAc;QACd,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,GAAkB,EAClB,OAAiB,EACjB,OAAiD;IAEjD,MAAM,MAAM,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACtC,MAAM,SAAS,GAAG,GAAG,CAAC,qBAAqB,CAAC;IAC5C,sEAAsE;IACtE,iDAAiD;IACjD,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAErD,MAAM,cAAc,GAAG,GAAG,CAAC,kBAAkB,IAAI,uBAAuB,CAAC;IACzE,IAAI,YAA8C,CAAC;IACnD,IAAI,kBAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,cAAc,4BAA4B,kBAAkB,CAC7D,SAAS,CACV,YAAY,EACb;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,cAAc,EAAE,kBAAkB;aACnC;SACF,CACF,CAAC;QACF,2EAA2E;QAC3E,6DAA6D;QAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAOlC,CAAC;QACF,wEAAwE;QACxE,2EAA2E;QAC3E,0EAA0E;QAC1E,gDAAgD;QAChD,IACE,IAAI,CAAC,OAAO,KAAK,IAAI;YACrB,CAAC,IAAI,CAAC,IAAI;YACV,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,QAAQ;YACvC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,EAC5B,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACnC,CAAC;QACD,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAA6C,CAAC;QACvE,kBAAkB;YAChB,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACnC,CAAC;IAED,2EAA2E;IAC3E,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,OAAO,EAAE,yBAAyB,IAAI,kBAAkB,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAC3C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9D,CAAC;IAED,gFAAgF;IAChF,+EAA+E;IAC/E,8DAA8D;IAC9D,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAC5D,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CACpC,CAAC;IACF,6EAA6E;IAC7E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAE1D,iFAAiF;IACjF,+DAA+D;IAC/D,MAAM,QAAQ,GACZ,kBAAkB,IAAI,iBAAiB,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC;QACvE,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;YAC1B,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,IAAI,CAAC;IACb,4EAA4E;IAC5E,4CAA4C;IAC5C,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAEhD,MAAM,MAAM,GAAG,qBAAqB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,+EAA+E;IAC/E,0EAA0E;IAC1E,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAE9C,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE;YACR,UAAU,EAAE,QAAQ;YACpB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,QAAQ;YAC3C,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAaD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAkB,EAClB,MAAuC;IAEvC,MAAM,cAAc,GAAG,GAAG,CAAC,kBAAkB,IAAI,uBAAuB,CAAC;IACzE,MAAM,MAAM,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,cAAc,kCAAkC,EACnD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,WAAW,EAAE,MAAM;gBACnB,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,iBAAiB,EAAE;oBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,OAAO,EAAE,MAAM,CAAC,MAAM;oBACtB,KAAK,EAAE,MAAM,CAAC,SAAS;oBACvB,IAAI,EAAE,MAAM,CAAC,eAAe;iBAC7B;aACF,CAAC;SACH,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqC,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC;QACrC,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,iEAAiE;IACjE,sDAAsD;IACtD,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY;IACzB,6EAA6E;IAC7E,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CACrE,EAAE,EACF,EAAE,CACH,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AACzB,CAAC;AA0BD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAkB,EAClB,MAA8B;IAE9B,MAAM,MAAM,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACtC,MAAM,SAAS,GAAG,GAAG,CAAC,qBAAqB,CAAC;IAC5C,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;QAAE,OAAO;IAElC,MAAM,cAAc,GAAG,GAAG,CAAC,kBAAkB,IAAI,uBAAuB,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,cAAc,oCAAoC,EACrD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,WAAW,EAAE,MAAM;gBACnB,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,aAAa,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC;gBAC9C,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;gBACzC,QAAQ,EAAE,MAAM,CAAC,OAAO;gBACxB,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,SAAS;gBACnC,eAAe,EAAE,MAAM,CAAC,cAAc,IAAI,SAAS;gBACnD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;gBACzC,QAAQ,EAAE;oBACR,MAAM,EAAE,sBAAsB;oBAC9B,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,GAAG,MAAM,CAAC,QAAQ;iBACnB;aACF,CAAC;SACH,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CACV,uDAAuD,QAAQ,CAAC,MAAM,QAAQ,MAAM,CAAC,GAAG,EAAE,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CACV,uDACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,QAAQ,MAAM,CAAC,GAAG,EAAE,CACrB,CAAC;IACJ,CAAC;AACH,CAAC"}
|
|
@@ -137,18 +137,18 @@ export async function claimNativeReplay(env, cfg, claim) {
|
|
|
137
137
|
try {
|
|
138
138
|
if (cfg.claimReplay)
|
|
139
139
|
return await cfg.claimReplay(claim);
|
|
140
|
-
const base = env.
|
|
140
|
+
const base = env.CHECKPOINT_API_URL;
|
|
141
141
|
if (!secureHttpUrl(base, cfg.allowLoopbackHttp) ||
|
|
142
|
-
!env.
|
|
143
|
-
!env.
|
|
142
|
+
!env.CHECKPOINT_API_KEY ||
|
|
143
|
+
!env.CHECKPOINT_PROJECT_ID)
|
|
144
144
|
return "unavailable";
|
|
145
145
|
const response = await fetchNativeNoRedirect(new URL("/api/v1/enforce/replay", base), {
|
|
146
146
|
method: "POST",
|
|
147
147
|
signal: AbortSignal.timeout(3000),
|
|
148
148
|
headers: {
|
|
149
|
-
Authorization: "Bearer " + env.
|
|
149
|
+
Authorization: "Bearer " + env.CHECKPOINT_API_KEY,
|
|
150
150
|
"Content-Type": "application/json",
|
|
151
|
-
"X-Project-Id": env.
|
|
151
|
+
"X-Project-Id": env.CHECKPOINT_PROJECT_ID,
|
|
152
152
|
},
|
|
153
153
|
body: JSON.stringify(claim),
|
|
154
154
|
});
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"native-http.js","sourceRoot":"","sources":["../../src/delegation-http/native-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,wBAAwB,GAEzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AA2F7D,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,EAAE,CACpC,WAAW,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;AAC3D,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,MAAc;IACvD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;QAC7C,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU;YAC3B,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAc,EACd,aAAa,GAAG,KAAK;IAErB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CACL,CAAC,GAAG,CAAC,QAAQ;YACb,CAAC,GAAG,CAAC,QAAQ;YACb,CAAC,GAAG,CAAC,IAAI;YACT,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBACxB,CAAC,aAAa;oBACZ,GAAG,CAAC,QAAQ,KAAK,OAAO;oBACxB,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CACjE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;QAC3B,CAAC,CAAC,OAAO,KAAK,YAAY;QAC1B,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,CAAC,WAAW,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CACpD,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CACxB;QACD,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,GAAG;QAChC,CAAC,CAAC,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,CAAC,aAAa,KAAK,iBAAiB,CAAC,CACrE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAA4B,EAC5B,GAAW,EACX,MAAgB,EAChB,MAAc;IAEd,MAAM,OAAO,GAAG,MAAM,GAAG,eAAe,GAAG,GAAG,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,GAAG,yBAAyB,GAAG,GAAG,CAAC;IACxD,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG;QACH,WAAW,EAAE,OAAO;QACpB,UAAU,EAAE,MAAM;QAClB,eAAe,EAAE,MAAM;QACvB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,MAAM,EAAE;YACN,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,OAAO;YACpB,UAAU,EAAE,MAAM;YAClB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,GAAG,EACD,IAAI,CAAC,WAAW,KAAK,KAAK;gBACxB,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE;gBACxC,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,oBAAoB;oBAC5B,QAAQ,EAAE,WAAW;oBACrB,KAAK,EAAE,EAAE;iBACV;YACP,KAAK,EAAE;gBACL,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,YAAY;aACzB;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAkB,EAClB,SAAiB,EACjB,OAA4B,EAC5B,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS;QACzC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,OAAO,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC,aAAa,CACzD,EAAE,MAAM,EAAE,+BAA+B,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EACzE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EACzD,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,EACxD,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACnC,CAAC;AACJ,CAAC;AAED;4FAC4F;AAC5F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa;IAEb,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,IACE,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;QAC5B,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE;QACnB,CAAC,QAAQ,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ,KAAK,QAAQ,CAAC;QACpD,KAAK,KAAK,SAAS;QAEnB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,MAAM,IAAI,GACR,OAAO,CAAC,MAAM,KAAK,EAAE;QACrB,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI;QACnB,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI;QACnB,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,GAAe,CAAC;IACpB,IAAI,GAAc,CAAC;IACnB,IAAI,OAAO,EAAE,CAAC;QACZ,GAAG,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACjC,KAAK,EACL,GAAG,EACH,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,oEAAoE;QACpE,uEAAuE;QACvE,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACjC,KAAK,EACL,IAAI,UAAU,CAAC,KAAK,CAAC,EACrB,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,QAAQ,CAAC,CACX,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5D,IACE,SAAS,CAAC,GAAG,KAAK,OAAO;YACzB,SAAS,CAAC,GAAG,KAAK,IAAI;YACtB,CAAC,SAAS,CAAC,CAAC;YACZ,CAAC,SAAS,CAAC,CAAC;YAEZ,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,GAAG,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACvC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAC5C,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,wBAAwB,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAA8B;IAC9D,OAAO,CACL,CAAC,CAAC,MAAM;QACR,CAAC,0BAA0B,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QACzE,MAAM,CAAC,aAAa,KAAK,YAAY;QACrC,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;QAC1C,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAChD,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACpD,aAAa,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAC1C,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,oBAAoB,GAAG,GAAG,GAAG,MAAM,CAAC,eAAe,CACzE,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAkB,EAClB,GAAyB,EACzB,KAAwB;IAExB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,GAAG,CAAC,
|
|
1
|
+
{"version":3,"file":"native-http.js","sourceRoot":"","sources":["../../src/delegation-http/native-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,wBAAwB,GAEzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AA2F7D,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,EAAE,CACpC,WAAW,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;AAC3D,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,MAAc;IACvD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;QAC7C,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU;YAC3B,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAc,EACd,aAAa,GAAG,KAAK;IAErB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CACL,CAAC,GAAG,CAAC,QAAQ;YACb,CAAC,GAAG,CAAC,QAAQ;YACb,CAAC,GAAG,CAAC,IAAI;YACT,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBACxB,CAAC,aAAa;oBACZ,GAAG,CAAC,QAAQ,KAAK,OAAO;oBACxB,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CACjE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;QAC3B,CAAC,CAAC,OAAO,KAAK,YAAY;QAC1B,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,CAAC,WAAW,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CACpD,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CACxB;QACD,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,GAAG;QAChC,CAAC,CAAC,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,CAAC,aAAa,KAAK,iBAAiB,CAAC,CACrE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAA4B,EAC5B,GAAW,EACX,MAAgB,EAChB,MAAc;IAEd,MAAM,OAAO,GAAG,MAAM,GAAG,eAAe,GAAG,GAAG,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,GAAG,yBAAyB,GAAG,GAAG,CAAC;IACxD,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG;QACH,WAAW,EAAE,OAAO;QACpB,UAAU,EAAE,MAAM;QAClB,eAAe,EAAE,MAAM;QACvB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,MAAM,EAAE;YACN,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,OAAO;YACpB,UAAU,EAAE,MAAM;YAClB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,GAAG,EACD,IAAI,CAAC,WAAW,KAAK,KAAK;gBACxB,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE;gBACxC,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,oBAAoB;oBAC5B,QAAQ,EAAE,WAAW;oBACrB,KAAK,EAAE,EAAE;iBACV;YACP,KAAK,EAAE;gBACL,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,YAAY;aACzB;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAkB,EAClB,SAAiB,EACjB,OAA4B,EAC5B,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS;QACzC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,OAAO,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC,aAAa,CACzD,EAAE,MAAM,EAAE,+BAA+B,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EACzE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EACzD,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,EACxD,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACnC,CAAC;AACJ,CAAC;AAED;4FAC4F;AAC5F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa;IAEb,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,IACE,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;QAC5B,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE;QACnB,CAAC,QAAQ,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ,KAAK,QAAQ,CAAC;QACpD,KAAK,KAAK,SAAS;QAEnB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,MAAM,IAAI,GACR,OAAO,CAAC,MAAM,KAAK,EAAE;QACrB,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI;QACnB,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI;QACnB,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,GAAe,CAAC;IACpB,IAAI,GAAc,CAAC;IACnB,IAAI,OAAO,EAAE,CAAC;QACZ,GAAG,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACjC,KAAK,EACL,GAAG,EACH,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,oEAAoE;QACpE,uEAAuE;QACvE,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACjC,KAAK,EACL,IAAI,UAAU,CAAC,KAAK,CAAC,EACrB,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,QAAQ,CAAC,CACX,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5D,IACE,SAAS,CAAC,GAAG,KAAK,OAAO;YACzB,SAAS,CAAC,GAAG,KAAK,IAAI;YACtB,CAAC,SAAS,CAAC,CAAC;YACZ,CAAC,SAAS,CAAC,CAAC;YAEZ,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,GAAG,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACvC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAC5C,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,wBAAwB,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAA8B;IAC9D,OAAO,CACL,CAAC,CAAC,MAAM;QACR,CAAC,0BAA0B,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QACzE,MAAM,CAAC,aAAa,KAAK,YAAY;QACrC,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;QAC1C,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAChD,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACpD,aAAa,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAC1C,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,oBAAoB,GAAG,GAAG,GAAG,MAAM,CAAC,eAAe,CACzE,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAkB,EAClB,GAAyB,EACzB,KAAwB;IAExB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,GAAG,CAAC,kBAAkB,CAAC;QACpC,IACE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,CAAC;YAC3C,CAAC,GAAG,CAAC,kBAAkB;YACvB,CAAC,GAAG,CAAC,qBAAqB;YAE1B,OAAO,aAAa,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,IAAI,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,EACvC;YACE,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,GAAG,GAAG,CAAC,kBAAkB;gBACjD,cAAc,EAAE,kBAAkB;gBAClC,cAAc,EAAE,GAAG,CAAC,qBAAqB;aAC1C;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CACF,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,QAAQ,CAAC;QAC7C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,UAAU,CAAC;QAC/C,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;YACvB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,IAAI;YAErD,OAAO,aAAa,CAAC;QACvB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO,aAAa,CAAC;QAClC,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAC5B,IAAI,MAAM,GAAG,IAAI,EAAE,CAAC;gBAClB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,OAAO,aAAa,CAAC;YACvB,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAEtD,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC;IACvB,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,43 @@
|
|
|
1
|
+
/** Native OAuth state is a one-use coordination atom, separate from pickup/MCP.
|
|
2
|
+
* Only encrypted payloads cross this internal dispatch. Consumption commits before
|
|
3
|
+
* returning ciphertext, so decryption and provider I/O cannot reopen the race.
|
|
4
|
+
* A dedicated object owns its expiry alarm; MCP agent scheduling is separate.
|
|
5
|
+
*/
|
|
6
|
+
import type { DurableObjectState } from "@cloudflare/workers-types";
|
|
7
|
+
export declare const NATIVE_OAUTH_INTERNAL_PREFIX = "/_internal/native-oauth/";
|
|
8
|
+
export declare const NATIVE_OAUTH_STATE_KEY = "native-oauth-state:v1";
|
|
9
|
+
export declare const NATIVE_OAUTH_MAX_TTL_MS = 600000;
|
|
10
|
+
export declare const NATIVE_OAUTH_MAX_CIPHERTEXT = 32768;
|
|
11
|
+
export declare const NATIVE_OAUTH_STORAGE_PROFILE = "dedicated-expiry-alarm-v1";
|
|
12
|
+
export declare const NATIVE_OAUTH_PROFILE_HEADER = "X-KYA-Native-OAuth-Storage";
|
|
13
|
+
export declare const NATIVE_OAUTH_ALARM_MAX_RETRIES = 6;
|
|
14
|
+
export interface NativeOAuthStateRecord {
|
|
15
|
+
version: 1;
|
|
16
|
+
expiresAt: number;
|
|
17
|
+
ciphertext?: string;
|
|
18
|
+
}
|
|
19
|
+
interface Transition {
|
|
20
|
+
status: number;
|
|
21
|
+
record?: NativeOAuthStateRecord;
|
|
22
|
+
remove?: boolean;
|
|
23
|
+
body?: NativeOAuthStateRecord;
|
|
24
|
+
}
|
|
25
|
+
/** Pure transition, evaluated with the persisted record inside one transaction. */
|
|
26
|
+
export declare function reduceNativeOAuthState(record: NativeOAuthStateRecord | undefined, operation: "create" | "consume", input: unknown, now: number): Transition;
|
|
27
|
+
export declare function handleNativeOAuthStateInternal(ctx: DurableObjectState, request: Request): Promise<Response>;
|
|
28
|
+
/** Dedicated binding only: never inherit or override the MCP Agent scheduler.
|
|
29
|
+
* A plain DO class matches the package's AuditProducer export convention and
|
|
30
|
+
* keeps the SDK root import usable outside workerd (no cloudflare:workers import).
|
|
31
|
+
*/
|
|
32
|
+
export declare class NativeOAuthState {
|
|
33
|
+
protected readonly ctx: DurableObjectState;
|
|
34
|
+
constructor(ctx: DurableObjectState);
|
|
35
|
+
fetch(request: Request): Promise<Response>;
|
|
36
|
+
alarm(info?: {
|
|
37
|
+
retryCount: number;
|
|
38
|
+
isRetry: boolean;
|
|
39
|
+
}): Promise<void>;
|
|
40
|
+
private cleanup;
|
|
41
|
+
}
|
|
42
|
+
export {};
|
|
43
|
+
//# sourceMappingURL=native-oauth-state-do.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"native-oauth-state-do.d.ts","sourceRoot":"","sources":["../../src/delegation-http/native-oauth-state-do.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,eAAO,MAAM,4BAA4B,6BAA6B,CAAC;AACvE,eAAO,MAAM,sBAAsB,0BAA0B,CAAC;AAC9D,eAAO,MAAM,uBAAuB,SAAU,CAAC;AAC/C,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAClD,eAAO,MAAM,4BAA4B,8BAA8B,CAAC;AACxE,eAAO,MAAM,2BAA2B,+BAA+B,CAAC;AACxE,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAEhD,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,sBAAsB,CAAC;CAC/B;AAED,mFAAmF;AACnF,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,sBAAsB,GAAG,SAAS,EAC1C,SAAS,EAAE,QAAQ,GAAG,SAAS,EAC/B,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,MAAM,GACV,UAAU,CAyCZ;AAYD,wBAAsB,8BAA8B,CAClD,GAAG,EAAE,kBAAkB,EACvB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,QAAQ,CAAC,CAiDnB;AAED;;;GAGG;AACH,qBAAa,gBAAgB;IACf,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,kBAAkB;gBAAvB,GAAG,EAAE,kBAAkB;IAEhD,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAsB1C,KAAK,CACT,IAAI,GAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAG3C,GACA,OAAO,CAAC,IAAI,CAAC;YAIF,OAAO;CA0CtB"}
|
|
@@ -0,0 +1,175 @@
|
|
|
1
|
+
export const NATIVE_OAUTH_INTERNAL_PREFIX = "/_internal/native-oauth/";
|
|
2
|
+
export const NATIVE_OAUTH_STATE_KEY = "native-oauth-state:v1";
|
|
3
|
+
export const NATIVE_OAUTH_MAX_TTL_MS = 600_000;
|
|
4
|
+
export const NATIVE_OAUTH_MAX_CIPHERTEXT = 32_768;
|
|
5
|
+
export const NATIVE_OAUTH_STORAGE_PROFILE = "dedicated-expiry-alarm-v1";
|
|
6
|
+
export const NATIVE_OAUTH_PROFILE_HEADER = "X-KYA-Native-OAuth-Storage";
|
|
7
|
+
export const NATIVE_OAUTH_ALARM_MAX_RETRIES = 6;
|
|
8
|
+
/** Pure transition, evaluated with the persisted record inside one transaction. */
|
|
9
|
+
export function reduceNativeOAuthState(record, operation, input, now) {
|
|
10
|
+
if (operation === "create") {
|
|
11
|
+
// Never refresh or replace an in-flight or already consumed state.
|
|
12
|
+
if (record)
|
|
13
|
+
return { status: 409 };
|
|
14
|
+
const value = input;
|
|
15
|
+
if (!value ||
|
|
16
|
+
value.version !== 1 ||
|
|
17
|
+
!Number.isSafeInteger(value.expiresAt) ||
|
|
18
|
+
value.expiresAt <= now ||
|
|
19
|
+
value.expiresAt > now + NATIVE_OAUTH_MAX_TTL_MS ||
|
|
20
|
+
typeof value.ciphertext !== "string" ||
|
|
21
|
+
value.ciphertext.length < 38 ||
|
|
22
|
+
value.ciphertext.length > NATIVE_OAUTH_MAX_CIPHERTEXT ||
|
|
23
|
+
!/^[A-Za-z0-9_-]+$/.test(value.ciphertext))
|
|
24
|
+
return { status: 400 };
|
|
25
|
+
return {
|
|
26
|
+
status: 201,
|
|
27
|
+
record: {
|
|
28
|
+
version: 1,
|
|
29
|
+
expiresAt: value.expiresAt,
|
|
30
|
+
ciphertext: value.ciphertext,
|
|
31
|
+
},
|
|
32
|
+
};
|
|
33
|
+
}
|
|
34
|
+
if (!record)
|
|
35
|
+
return { status: 404 };
|
|
36
|
+
if (record.version !== 1 ||
|
|
37
|
+
!Number.isSafeInteger(record.expiresAt) ||
|
|
38
|
+
record.expiresAt <= now)
|
|
39
|
+
return { status: 410, remove: true };
|
|
40
|
+
if (!record.ciphertext)
|
|
41
|
+
return { status: 404 };
|
|
42
|
+
// Retain only a non-secret tombstone, removed by its expiry alarm; a duplicate
|
|
43
|
+
// create cannot resurrect consumed state. The encrypted verifier is removed now.
|
|
44
|
+
return {
|
|
45
|
+
status: 200,
|
|
46
|
+
record: { version: 1, expiresAt: record.expiresAt },
|
|
47
|
+
body: record,
|
|
48
|
+
};
|
|
49
|
+
}
|
|
50
|
+
function response(status, body) {
|
|
51
|
+
return Response.json(body ?? {}, {
|
|
52
|
+
status,
|
|
53
|
+
headers: {
|
|
54
|
+
"Cache-Control": "no-store",
|
|
55
|
+
[NATIVE_OAUTH_PROFILE_HEADER]: NATIVE_OAUTH_STORAGE_PROFILE,
|
|
56
|
+
},
|
|
57
|
+
});
|
|
58
|
+
}
|
|
59
|
+
export async function handleNativeOAuthStateInternal(ctx, request) {
|
|
60
|
+
const url = new URL(request.url);
|
|
61
|
+
const operation = url.pathname.slice(NATIVE_OAUTH_INTERNAL_PREFIX.length);
|
|
62
|
+
if (url.origin !== "https://do.internal" ||
|
|
63
|
+
!url.pathname.startsWith(NATIVE_OAUTH_INTERNAL_PREFIX) ||
|
|
64
|
+
(operation !== "create" && operation !== "consume" && operation !== "ready"))
|
|
65
|
+
return response(404);
|
|
66
|
+
if (request.method !== "POST")
|
|
67
|
+
return response(405);
|
|
68
|
+
if (operation === "ready")
|
|
69
|
+
return response(200);
|
|
70
|
+
let input;
|
|
71
|
+
try {
|
|
72
|
+
const text = await request.text();
|
|
73
|
+
if (text.length > NATIVE_OAUTH_MAX_CIPHERTEXT + 128)
|
|
74
|
+
return response(413);
|
|
75
|
+
input = JSON.parse(text);
|
|
76
|
+
}
|
|
77
|
+
catch {
|
|
78
|
+
return response(400);
|
|
79
|
+
}
|
|
80
|
+
try {
|
|
81
|
+
// Only storage awaits inside this transaction. No crypto, network, logging,
|
|
82
|
+
// or externally visible side effects: a platform retry remains harmless.
|
|
83
|
+
const result = await ctx.storage.transaction(async (txn) => {
|
|
84
|
+
const current = await txn.get(NATIVE_OAUTH_STATE_KEY);
|
|
85
|
+
const transition = reduceNativeOAuthState(current, operation, input, Date.now());
|
|
86
|
+
if (transition.remove) {
|
|
87
|
+
await txn.delete(NATIVE_OAUTH_STATE_KEY);
|
|
88
|
+
// Leave its existing expiry alarm to reclaim all object metadata too.
|
|
89
|
+
}
|
|
90
|
+
else if (transition.record) {
|
|
91
|
+
await txn.put(NATIVE_OAUTH_STATE_KEY, transition.record);
|
|
92
|
+
// Commit the deadline with creation. A failed alarm write cannot leave
|
|
93
|
+
// an acknowledged, abandoned ciphertext without scheduled cleanup.
|
|
94
|
+
if (operation === "create")
|
|
95
|
+
await txn.setAlarm(transition.record.expiresAt);
|
|
96
|
+
}
|
|
97
|
+
return transition;
|
|
98
|
+
});
|
|
99
|
+
return response(result.status, result.body);
|
|
100
|
+
}
|
|
101
|
+
catch {
|
|
102
|
+
// Storage errors must never yield the encrypted state or trigger KV fallback.
|
|
103
|
+
return response(503);
|
|
104
|
+
}
|
|
105
|
+
}
|
|
106
|
+
/** Dedicated binding only: never inherit or override the MCP Agent scheduler.
|
|
107
|
+
* A plain DO class matches the package's AuditProducer export convention and
|
|
108
|
+
* keeps the SDK root import usable outside workerd (no cloudflare:workers import).
|
|
109
|
+
*/
|
|
110
|
+
export class NativeOAuthState {
|
|
111
|
+
ctx;
|
|
112
|
+
constructor(ctx) {
|
|
113
|
+
this.ctx = ctx;
|
|
114
|
+
}
|
|
115
|
+
async fetch(request) {
|
|
116
|
+
const url = new URL(request.url);
|
|
117
|
+
if (url.origin === "https://do.internal" &&
|
|
118
|
+
url.pathname === NATIVE_OAUTH_INTERNAL_PREFIX + "cleanup-expired") {
|
|
119
|
+
if (request.method !== "POST")
|
|
120
|
+
return response(405);
|
|
121
|
+
try {
|
|
122
|
+
const removed = await this.cleanup({ retryCount: 0, isRetry: false }, "manual");
|
|
123
|
+
return response(removed ? 200 : 202, {
|
|
124
|
+
status: removed ? "expired-data-removed" : "live-state-retained",
|
|
125
|
+
});
|
|
126
|
+
}
|
|
127
|
+
catch {
|
|
128
|
+
return response(503);
|
|
129
|
+
}
|
|
130
|
+
}
|
|
131
|
+
return handleNativeOAuthStateInternal(this.ctx, request);
|
|
132
|
+
}
|
|
133
|
+
async alarm(info = {
|
|
134
|
+
retryCount: 0,
|
|
135
|
+
isRetry: false,
|
|
136
|
+
}) {
|
|
137
|
+
await this.cleanup(info, "alarm");
|
|
138
|
+
}
|
|
139
|
+
async cleanup(info, trigger) {
|
|
140
|
+
try {
|
|
141
|
+
// Storage input gates serialize this storage-only sequence with requests.
|
|
142
|
+
// deleteAll cannot run inside a transaction; it also reclaims per-object
|
|
143
|
+
// metadata that deleting the single state key would leave behind.
|
|
144
|
+
const record = await this.ctx.storage.get(NATIVE_OAUTH_STATE_KEY);
|
|
145
|
+
if (record?.version === 1 &&
|
|
146
|
+
Number.isSafeInteger(record.expiresAt) &&
|
|
147
|
+
record.expiresAt > Date.now()) {
|
|
148
|
+
// An early/duplicate wake must not erase live authority or its alarm.
|
|
149
|
+
await this.ctx.storage.setAlarm(record.expiresAt);
|
|
150
|
+
return false;
|
|
151
|
+
}
|
|
152
|
+
// Clear data first. If deleting the alarm fails, retry is harmless and
|
|
153
|
+
// must not restore a consumed/expired record.
|
|
154
|
+
await this.ctx.storage.deleteAll();
|
|
155
|
+
await this.ctx.storage.deleteAlarm();
|
|
156
|
+
return true;
|
|
157
|
+
}
|
|
158
|
+
catch {
|
|
159
|
+
// Cloudflare retries a throwing alarm up to six times. Do not swallow a
|
|
160
|
+
// failure or log the exception: storage errors can contain request data.
|
|
161
|
+
console.error({
|
|
162
|
+
component: "native-oauth-state",
|
|
163
|
+
objectId: this.ctx.id.toString(),
|
|
164
|
+
trigger,
|
|
165
|
+
event: info.retryCount >= NATIVE_OAUTH_ALARM_MAX_RETRIES
|
|
166
|
+
? "cleanup_retry_exhausted"
|
|
167
|
+
: "cleanup_failed",
|
|
168
|
+
retryCount: info.retryCount,
|
|
169
|
+
isRetry: info.isRetry,
|
|
170
|
+
});
|
|
171
|
+
throw new Error("Native OAuth state cleanup failed");
|
|
172
|
+
}
|
|
173
|
+
}
|
|
174
|
+
}
|
|
175
|
+
//# sourceMappingURL=native-oauth-state-do.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"native-oauth-state-do.js","sourceRoot":"","sources":["../../src/delegation-http/native-oauth-state-do.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CAAC;AACvE,MAAM,CAAC,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AAC9D,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAO,CAAC;AAC/C,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAClD,MAAM,CAAC,MAAM,4BAA4B,GAAG,2BAA2B,CAAC;AACxE,MAAM,CAAC,MAAM,2BAA2B,GAAG,4BAA4B,CAAC;AACxE,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAehD,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CACpC,MAA0C,EAC1C,SAA+B,EAC/B,KAAc,EACd,GAAW;IAEX,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,mEAAmE;QACnE,IAAI,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,KAAsC,CAAC;QACrD,IACE,CAAC,KAAK;YACN,KAAK,CAAC,OAAO,KAAK,CAAC;YACnB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;YACtC,KAAK,CAAC,SAAS,IAAI,GAAG;YACtB,KAAK,CAAC,SAAS,GAAG,GAAG,GAAG,uBAAuB;YAC/C,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;YACpC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE;YAC5B,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,2BAA2B;YACrD,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAE1C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,MAAM,EAAE;gBACN,OAAO,EAAE,CAAC;gBACV,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B;SACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACpC,IACE,MAAM,CAAC,OAAO,KAAK,CAAC;QACpB,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;QACvC,MAAM,CAAC,SAAS,IAAI,GAAG;QAEvB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC/C,+EAA+E;IAC/E,iFAAiF;IACjF,OAAO;QACL,MAAM,EAAE,GAAG;QACX,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;QACnD,IAAI,EAAE,MAAM;KACb,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAc;IAC9C,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE;QAC/B,MAAM;QACN,OAAO,EAAE;YACP,eAAe,EAAE,UAAU;YAC3B,CAAC,2BAA2B,CAAC,EAAE,4BAA4B;SAC5D;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,GAAuB,EACvB,OAAgB;IAEhB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC;IAC1E,IACE,GAAG,CAAC,MAAM,KAAK,qBAAqB;QACpC,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,4BAA4B,CAAC;QACtD,CAAC,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,OAAO,CAAC;QAE5E,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,MAAM,GAAG,2BAA2B,GAAG,GAAG;YAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1E,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,CAAC;QACH,4EAA4E;QAC5E,yEAAyE;QACzE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACzD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,CAC3B,sBAAsB,CACvB,CAAC;YACF,MAAM,UAAU,GAAG,sBAAsB,CACvC,OAAO,EACP,SAAS,EACT,KAAK,EACL,IAAI,CAAC,GAAG,EAAE,CACX,CAAC;YACF,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,GAAG,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBACzC,sEAAsE;YACxE,CAAC;iBAAM,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;gBAC7B,MAAM,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;gBACzD,uEAAuE;gBACvE,mEAAmE;gBACnE,IAAI,SAAS,KAAK,QAAQ;oBACxB,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IACI;IAA/B,YAA+B,GAAuB;QAAvB,QAAG,GAAH,GAAG,CAAoB;IAAG,CAAC;IAE1D,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IACE,GAAG,CAAC,MAAM,KAAK,qBAAqB;YACpC,GAAG,CAAC,QAAQ,KAAK,4BAA4B,GAAG,iBAAiB,EACjE,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAChC,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EACjC,QAAQ,CACT,CAAC;gBACF,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;oBACnC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,qBAAqB;iBACjE,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QACD,OAAO,8BAA8B,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,KAAK,CACT,OAAiD;QAC/C,UAAU,EAAE,CAAC;QACb,OAAO,EAAE,KAAK;KACf;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,IAA8C,EAC9C,OAA2B;QAE3B,IAAI,CAAC;YACH,0EAA0E;YAC1E,yEAAyE;YACzE,kEAAkE;YAClE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CACvC,sBAAsB,CACvB,CAAC;YACF,IACE,MAAM,EAAE,OAAO,KAAK,CAAC;gBACrB,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;gBACtC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAC7B,CAAC;gBACD,sEAAsE;gBACtE,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAClD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,uEAAuE;YACvE,8CAA8C;YAC9C,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,yEAAyE;YACzE,OAAO,CAAC,KAAK,CAAC;gBACZ,SAAS,EAAE,oBAAoB;gBAC/B,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE;gBAChC,OAAO;gBACP,KAAK,EACH,IAAI,CAAC,UAAU,IAAI,8BAA8B;oBAC/C,CAAC,CAAC,yBAAyB;oBAC3B,CAAC,CAAC,gBAAgB;gBACtB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;CACF"}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import { OAuthSecurityService } from "../services/oauth-security.service";
|
|
2
|
+
import type { CloudflareEnv } from "../types";
|
|
3
|
+
export declare const NATIVE_OAUTH_STORAGE_TIMEOUT_MS = 5000;
|
|
4
|
+
/** Capability check only. Creation separately verifies its atomic storage write. */
|
|
5
|
+
export declare function assertNativeOAuthStateReady(env: CloudflareEnv): Promise<void>;
|
|
6
|
+
/** Encrypted whole-state envelope, bound to its random key and deployment project.
|
|
7
|
+
* Uses the existing token cipher; native callers always require an explicit key.
|
|
8
|
+
*/
|
|
9
|
+
export declare function storeNativeOAuthState(env: CloudflareEnv, security: OAuthSecurityService, state: string, data: Record<string, unknown>, expiresAt: number): Promise<void>;
|
|
10
|
+
/** No legacy/KV fallback. The durable consume commits before any decryption. */
|
|
11
|
+
export declare function consumeNativeOAuthState(env: CloudflareEnv, state: string): Promise<Record<string, unknown> | null>;
|
|
12
|
+
//# sourceMappingURL=native-oauth-state.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"native-oauth-state.d.ts","sourceRoot":"","sources":["../../src/delegation-http/native-oauth-state.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAU9C,eAAO,MAAM,+BAA+B,OAAQ,CAAC;AAoFrD,oFAAoF;AACpF,wBAAsB,2BAA2B,CAAC,GAAG,EAAE,aAAa,iBAUnE;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,aAAa,EAClB,QAAQ,EAAE,oBAAoB,EAC9B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,gFAAgF;AAChF,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,aAAa,EAClB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAkCzC"}
|
|
@@ -0,0 +1,131 @@
|
|
|
1
|
+
import { OAuthSecurityService } from "../services/oauth-security.service";
|
|
2
|
+
import { NATIVE_OAUTH_STATE_PREFIX } from "./constants";
|
|
3
|
+
import { sha256Hex } from "./hash";
|
|
4
|
+
import { NATIVE_OAUTH_INTERNAL_PREFIX, NATIVE_OAUTH_MAX_CIPHERTEXT, NATIVE_OAUTH_PROFILE_HEADER, NATIVE_OAUTH_STORAGE_PROFILE, } from "./native-oauth-state-do";
|
|
5
|
+
export const NATIVE_OAUTH_STORAGE_TIMEOUT_MS = 5_000;
|
|
6
|
+
function isObject(value) {
|
|
7
|
+
return typeof value === "object" && value !== null && !Array.isArray(value);
|
|
8
|
+
}
|
|
9
|
+
function parseObject(text) {
|
|
10
|
+
try {
|
|
11
|
+
const value = JSON.parse(text);
|
|
12
|
+
return isObject(value) ? value : null;
|
|
13
|
+
}
|
|
14
|
+
catch {
|
|
15
|
+
return null;
|
|
16
|
+
}
|
|
17
|
+
}
|
|
18
|
+
async function callStateStore(stub, operation, body) {
|
|
19
|
+
const controller = new AbortController();
|
|
20
|
+
let timer;
|
|
21
|
+
const deadline = new Promise((_, reject) => {
|
|
22
|
+
timer = setTimeout(() => {
|
|
23
|
+
controller.abort();
|
|
24
|
+
reject(new Error("Native OAuth state storage unavailable"));
|
|
25
|
+
}, NATIVE_OAUTH_STORAGE_TIMEOUT_MS);
|
|
26
|
+
});
|
|
27
|
+
try {
|
|
28
|
+
return await Promise.race([
|
|
29
|
+
(async () => {
|
|
30
|
+
const response = await stub.fetch(`https://do.internal${NATIVE_OAUTH_INTERNAL_PREFIX}${operation}`, {
|
|
31
|
+
method: "POST",
|
|
32
|
+
headers: { "Content-Type": "application/json" },
|
|
33
|
+
body,
|
|
34
|
+
// Bridge the DOM and workers-types AbortSignal declarations.
|
|
35
|
+
signal: controller.signal,
|
|
36
|
+
});
|
|
37
|
+
// The deadline includes the response body, not only its headers.
|
|
38
|
+
const text = await response.text();
|
|
39
|
+
if (text.length > NATIVE_OAUTH_MAX_CIPHERTEXT + 128)
|
|
40
|
+
throw new Error("Native OAuth state response too large");
|
|
41
|
+
if (response.status < 300 &&
|
|
42
|
+
response.headers.get(NATIVE_OAUTH_PROFILE_HEADER) !==
|
|
43
|
+
NATIVE_OAUTH_STORAGE_PROFILE)
|
|
44
|
+
throw new Error("Native OAuth state storage unsupported");
|
|
45
|
+
return {
|
|
46
|
+
status: response.status,
|
|
47
|
+
record: operation === "consume" && response.status === 200
|
|
48
|
+
? parseObject(text)
|
|
49
|
+
: undefined,
|
|
50
|
+
};
|
|
51
|
+
})(),
|
|
52
|
+
deadline,
|
|
53
|
+
]);
|
|
54
|
+
}
|
|
55
|
+
finally {
|
|
56
|
+
clearTimeout(timer);
|
|
57
|
+
}
|
|
58
|
+
}
|
|
59
|
+
function stateStub(env, state) {
|
|
60
|
+
if (!env.NATIVE_OAUTH_STATE ||
|
|
61
|
+
!env.OAUTH_ENCRYPTION_SECRET ||
|
|
62
|
+
!env.CHECKPOINT_PROJECT_ID ||
|
|
63
|
+
!state.startsWith(NATIVE_OAUTH_STATE_PREFIX) ||
|
|
64
|
+
!/^[A-Za-z0-9_-]{43}$/.test(state.slice(NATIVE_OAUTH_STATE_PREFIX.length)))
|
|
65
|
+
throw new Error("Native OAuth secure state unavailable");
|
|
66
|
+
const stateHash = sha256Hex(state);
|
|
67
|
+
return {
|
|
68
|
+
stateHash,
|
|
69
|
+
stub: env.NATIVE_OAUTH_STATE.get(env.NATIVE_OAUTH_STATE.idFromName(`native-oauth:${stateHash}`)),
|
|
70
|
+
};
|
|
71
|
+
}
|
|
72
|
+
/** Capability check only. Creation separately verifies its atomic storage write. */
|
|
73
|
+
export async function assertNativeOAuthStateReady(env) {
|
|
74
|
+
const namespace = env.NATIVE_OAUTH_STATE;
|
|
75
|
+
if (!namespace)
|
|
76
|
+
throw new Error("Native OAuth secure state unavailable");
|
|
77
|
+
const response = await callStateStore(namespace.get(namespace.idFromName("native-oauth:readiness:v1")), "ready", "{}");
|
|
78
|
+
if (response.status !== 200)
|
|
79
|
+
throw new Error("Native OAuth state storage unavailable");
|
|
80
|
+
}
|
|
81
|
+
/** Encrypted whole-state envelope, bound to its random key and deployment project.
|
|
82
|
+
* Uses the existing token cipher; native callers always require an explicit key.
|
|
83
|
+
*/
|
|
84
|
+
export async function storeNativeOAuthState(env, security, state, data, expiresAt) {
|
|
85
|
+
const { stateHash, stub } = stateStub(env, state);
|
|
86
|
+
const payload = JSON.stringify({
|
|
87
|
+
version: 1,
|
|
88
|
+
stateHash,
|
|
89
|
+
deploymentProjectId: env.CHECKPOINT_PROJECT_ID,
|
|
90
|
+
expiresAt,
|
|
91
|
+
data,
|
|
92
|
+
});
|
|
93
|
+
if (new TextEncoder().encode(payload).length > 24_000)
|
|
94
|
+
throw new Error("Native OAuth state too large");
|
|
95
|
+
const ciphertext = await security.encryptToken(payload);
|
|
96
|
+
const response = await callStateStore(stub, "create", JSON.stringify({ version: 1, ciphertext, expiresAt }));
|
|
97
|
+
if (response.status !== 201)
|
|
98
|
+
throw new Error("Native OAuth state storage unavailable");
|
|
99
|
+
}
|
|
100
|
+
/** No legacy/KV fallback. The durable consume commits before any decryption. */
|
|
101
|
+
export async function consumeNativeOAuthState(env, state) {
|
|
102
|
+
const { stateHash, stub } = stateStub(env, state);
|
|
103
|
+
const response = await callStateStore(stub, "consume", "{}");
|
|
104
|
+
if (response.status !== 200 || !response.record)
|
|
105
|
+
return null;
|
|
106
|
+
const record = response.record;
|
|
107
|
+
if (record.version !== 1 ||
|
|
108
|
+
typeof record.expiresAt !== "number" ||
|
|
109
|
+
!Number.isSafeInteger(record.expiresAt) ||
|
|
110
|
+
record.expiresAt <= Date.now() ||
|
|
111
|
+
typeof record.ciphertext !== "string" ||
|
|
112
|
+
record.ciphertext.length > NATIVE_OAUTH_MAX_CIPHERTEXT)
|
|
113
|
+
return null;
|
|
114
|
+
const storage = env.DELEGATION_STORAGE;
|
|
115
|
+
if (!storage)
|
|
116
|
+
return null;
|
|
117
|
+
const security = new OAuthSecurityService(storage, env.OAUTH_ENCRYPTION_SECRET);
|
|
118
|
+
const envelope = parseObject(await security.decryptToken(record.ciphertext));
|
|
119
|
+
if (!envelope ||
|
|
120
|
+
envelope.version !== 1 ||
|
|
121
|
+
envelope.stateHash !== stateHash ||
|
|
122
|
+
envelope.deploymentProjectId !== env.CHECKPOINT_PROJECT_ID ||
|
|
123
|
+
envelope.expiresAt !== record.expiresAt ||
|
|
124
|
+
record.expiresAt <= Date.now() ||
|
|
125
|
+
!isObject(envelope.data) ||
|
|
126
|
+
!isObject(envelope.data.native) ||
|
|
127
|
+
envelope.data.native.expiresAt !== envelope.expiresAt)
|
|
128
|
+
return null;
|
|
129
|
+
return envelope.data;
|
|
130
|
+
}
|
|
131
|
+
//# sourceMappingURL=native-oauth-state.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"native-oauth-state.js","sourceRoot":"","sources":["../../src/delegation-http/native-oauth-state.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AAEjC,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,CAAC;AAErD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,IAAuB,EACvB,SAAyC,EACzC,IAAY;IAEZ,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,KAAgD,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAChD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;QAC9D,CAAC,EAAE,+BAA+B,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,CAAC,KAAK,IAAI,EAAE;gBACV,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,sBAAsB,4BAA4B,GAAG,SAAS,EAAE,EAChE;oBACE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI;oBACJ,6DAA6D;oBAC7D,MAAM,EAAE,UAAU,CAAC,MAAuC;iBAC3D,CACF,CAAC;gBACF,iEAAiE;gBACjE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,MAAM,GAAG,2BAA2B,GAAG,GAAG;oBACjD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC3D,IACE,QAAQ,CAAC,MAAM,GAAG,GAAG;oBACrB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;wBAC/C,4BAA4B;oBAE9B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBAC5D,OAAO;oBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,MAAM,EACJ,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;wBAChD,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC;wBACnB,CAAC,CAAC,SAAS;iBAChB,CAAC;YACJ,CAAC,CAAC,EAAE;YACJ,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAkB,EAAE,KAAa;IAClD,IACE,CAAC,GAAG,CAAC,kBAAkB;QACvB,CAAC,GAAG,CAAC,uBAAuB;QAC5B,CAAC,GAAG,CAAC,qBAAqB;QAC1B,CAAC,KAAK,CAAC,UAAU,CAAC,yBAAyB,CAAC;QAC5C,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAE1E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,OAAO;QACL,SAAS;QACT,IAAI,EAAE,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAC9B,GAAG,CAAC,kBAAkB,CAAC,UAAU,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAC/D;KACF,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,GAAkB;IAClE,MAAM,SAAS,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACzC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,MAAM,cAAc,CACnC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,EAChE,OAAO,EACP,IAAI,CACL,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QACzB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAkB,EAClB,QAA8B,EAC9B,KAAa,EACb,IAA6B,EAC7B,SAAiB;IAEjB,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,OAAO,EAAE,CAAC;QACV,SAAS;QACT,mBAAmB,EAAE,GAAG,CAAC,qBAAqB;QAC9C,SAAS;QACT,IAAI;KACL,CAAC,CAAC;IACH,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM;QACnD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,cAAc,CACnC,IAAI,EACJ,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CACtD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QACzB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAC9D,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAkB,EAClB,KAAa;IAEb,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,IACE,MAAM,CAAC,OAAO,KAAK,CAAC;QACpB,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;QACvC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QAC9B,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,2BAA2B;QAEtD,OAAO,IAAI,CAAC;IACd,MAAM,OAAO,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,oBAAoB,CACvC,OAAO,EACP,GAAG,CAAC,uBAAuB,CAC5B,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7E,IACE,CAAC,QAAQ;QACT,QAAQ,CAAC,OAAO,KAAK,CAAC;QACtB,QAAQ,CAAC,SAAS,KAAK,SAAS;QAChC,QAAQ,CAAC,mBAAmB,KAAK,GAAG,CAAC,qBAAqB;QAC1D,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;QACvC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QAC9B,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;QAErD,OAAO,IAAI,CAAC;IACd,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"native-oauth.d.ts","sourceRoot":"","sources":["../../src/delegation-http/native-oauth.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;
|
|
1
|
+
{"version":3,"file":"native-oauth.d.ts","sourceRoot":"","sources":["../../src/delegation-http/native-oauth.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAgB9C,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACzB,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E;AAsKD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,oBAAoB,EACzB,QAAQ,UAAO,GACd,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAkFzD;AAED,oFAAoF;AACpF,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,aAAa,EAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,QAAQ,CAAC,CAmKnB;AAED,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,oBAAoB,EACzB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAA;CAAE,GAAG,IAAI,CAAC,CA6BrD"}
|